pronto-brakeman 0.10.0 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38f951e2222f1d7dfffaba05588521e55ed340e4dc16c016182f6244b786cc9c
-  data.tar.gz: 0af9c50edf6af3286a58607d2b3af496de27c0df4bd759416b5ff1baefdf15cd
+  metadata.gz: a850480c412d705bd265a0b24ea74728383ac7bd6b616a8e8a2023bfedc0845f
+  data.tar.gz: b0542a31a845985491bc794c760e7c9b5618dc1ddcd409a09df58854e0e319d2
 SHA512:
-  metadata.gz: 76035b95c242bf27597f1b53bd22758d4d053f3783e61b3b78915a031e0024f80518ec719fa35572f6948fdd5933def8b17f3eee7bc7ee7e66dfbae9d8b08677
-  data.tar.gz: adfd57d3411174680e3242d9c6906b2758329b05dfe2ac8471a3c5939f56b403e31a48439335708c5c05dd33a21f9e69c806af474370851fc03535f1cb8f0813
+  metadata.gz: 57e884d484822acf06124a03f2f2e77bcfe851551e81fd3f347f7887c68bb26dc3784e026114efe1b09b1142201df32fd92f0494681bebe224f77ec70cb5892a
+  data.tar.gz: 77b4892ce37db8e9a64b70a5e9d3cfda5c03f479f76c82180de2b1aa44df29436868a2e0d05a3eba4da1ba7fee699ec2de3790fe8ad30ec4853e769c77174294

data/.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# Order is important. The last matching pattern takes the most precedence.
+# Default owners for everything in the repo.
+* @prontolabs/core

data/.github/workflows/checks.yml

@@ -0,0 +1,24 @@
+name: Checks
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  ruby:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        ruby: ['2.3', '2.4', '2.5', '2.6', '2.7', '3.0']
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        fetch-depth: 0 # required for "not a rails app" spec
+    - uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ${{ matrix.ruby }}
+        bundler-cache: true
+    - name: rake spec
+      run: bundle exec rake spec

data/lib/pronto/brakeman.rb

@@ -34,7 +34,7 @@ module Pronto
     def new_message(line, warning)
       Message.new(line.patch.delta.new_file[:path], line,
                   severity_for_confidence(warning.confidence),
-                  "Possible security vulnerability: #{warning.message}",
+                  "Possible security vulnerability: [#{warning.message}](#{warning.link})",
                   nil, self.class)
     end
 
@@ -51,7 +51,7 @@ module Pronto
 
     def patch_for_warning(ruby_patches, warning)
       ruby_patches.find do |patch|
-        patch.new_file_full_path.to_s == warning.file
+        patch.new_file_full_path.to_s == warning.file.absolute
       end
     end
   end

data/lib/pronto/brakeman/version.rb

@@ -1,5 +1,5 @@
 module Pronto
   module BrakemanVersion
-    VERSION = '0.10.0'.freeze
+    VERSION = '0.11.0'.freeze
   end
 end

data/pronto-brakeman.gemspec

@@ -32,7 +32,7 @@ Gem::Specification.new do |s|
   s.extra_rdoc_files = ['LICENSE', 'README.md']
   s.require_paths = ['lib']
 
-  s.add_runtime_dependency('pronto', '~> 0.10.0')
+  s.add_runtime_dependency('pronto', '~> 0.11.0')
   s.add_runtime_dependency('brakeman', '>= 3.2.0')
   s.add_development_dependency('rake', '~> 12.0')
   s.add_development_dependency('rspec', '~> 3.4')

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pronto-brakeman
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.11.0
 platform: ruby
 authors:
 - Mindaugas Mozūras
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-02-03 00:00:00.000000000 Z
+date: 2021-01-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pronto
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 0.11.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 0.11.0
 - !ruby/object:Gem::Dependency
   name: brakeman
   requirement: !ruby/object:Gem::Requirement
@@ -88,6 +88,8 @@ extra_rdoc_files:
 - LICENSE
 - README.md
 files:
+- ".github/CODEOWNERS"
+- ".github/workflows/checks.yml"
 - LICENSE
 - README.md
 - lib/pronto/brakeman.rb
@@ -112,7 +114,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
 summary: Pronto runner for Brakeman, security vulnerability scanner for RoR