pronto-brakeman 0.6.0 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/README.md +6 -0
  3. data/lib/pronto/brakeman.rb +13 -1
  4. data/lib/pronto/brakeman/version.rb +1 -1
  5. data/pronto-brakeman.gemspec +3 -3
  6. metadata +8 -8
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: d2671f9897b66aa34b11db36114386c2d1023b04
4
- data.tar.gz: f1d0369f39adbfe1ce3eded82589d15296ee3d37
3
+ metadata.gz: 1462c9ae1fe88941d78c4aae1e391e776073897e
4
+ data.tar.gz: 40e6028d592db09efc5a1d2572e44606b289c1bd
5
5
  SHA512:
6
- metadata.gz: 73fa6c38b8da1d48d2b68f4f31396f072cad5a42cff7a445f39ae4d0d95f1229189fe1a7ceda6cb8fd1197b16f33cc69571be639dccb74c569ec7c0fd911909c
7
- data.tar.gz: 4861ae69b9249b7530f65517cf3427187827593680872d3cc04595c4816f0aeb558431c2d29978b2bc28173a26f3db1a14b3e403f19413ff5aafaf4f46ede36b
6
+ metadata.gz: 87eaf9ca3c3fe14329edf0d5dbfd353056be8b95366b3127562c2c9fc163928b39c2ffd9af8f9021bd44fa1cd36dda2f183bfa7228638389fbba98055299c030
7
+ data.tar.gz: 03e4e874af4e5995c7f7ffb0766a62ea3d7fa558975934e4c220928e08dd9eee9fa77205e4656b9db11382fa1486f472e10e42a2e396287b0a07abaead87dd4a
data/README.md CHANGED
@@ -6,3 +6,9 @@
6
6
  [![Dependency Status](https://gemnasium.com/mmozuras/pronto-brakeman.png)](https://gemnasium.com/mmozuras/pronto-brakeman)
7
7
 
8
8
  Pronto runner for [Brakeman](https://github.com/presidentbeef/brakeman), security vulnerability scanner for RoR. [What is Pronto?](https://github.com/mmozuras/pronto)
9
+
10
+ ## Severity mapping
11
+
12
+ Brakeman [Confiedence](https://github.com/presidentbeef/brakeman#confidence-levels) is mapped to severity levels on the
13
+ messages generated by Pronto. High confidence maps to fatal, medium confidence maps to warning, and low confidence maps
14
+ to info.
data/lib/pronto/brakeman.rb CHANGED
@@ -32,11 +32,23 @@ module Pronto
32
32
  end
33
33
 
34
34
  def new_message(line, warning)
35
- Message.new(line.patch.delta.new_file[:path], line, :warning,
35
+ Message.new(line.patch.delta.new_file[:path], line,
36
+ severity_for_confidence(warning.confidence),
36
37
  "Possible security vulnerability: #{warning.message}",
37
38
  nil, self.class)
38
39
  end
39
40
 
41
+ def severity_for_confidence(confidence_level)
42
+ case confidence_level
43
+ when 0 # Brakeman High confidence
44
+ :fatal
45
+ when 1 # Brakeman Medium confidence
46
+ :warning
47
+ else # Brakeman Low confidence (and other possibilities)
48
+ :info
49
+ end
50
+ end
51
+
40
52
  def patch_for_warning(ruby_patches, warning)
41
53
  ruby_patches.find do |patch|
42
54
  patch.new_file_full_path.to_s == warning.file
data/lib/pronto/brakeman/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Pronto
2
2
  module BrakemanVersion
3
- VERSION = '0.6.0'.freeze
3
+ VERSION = '0.7.0'.freeze
4
4
  end
5
5
  end
data/pronto-brakeman.gemspec CHANGED
@@ -32,9 +32,9 @@ Gem::Specification.new do |s|
32
32
  s.extra_rdoc_files = ['LICENSE', 'README.md']
33
33
  s.require_paths = ['lib']
34
34
 
35
- s.add_runtime_dependency('pronto', '~> 0.6.0')
35
+ s.add_runtime_dependency('pronto', '~> 0.7.0')
36
36
  s.add_runtime_dependency('brakeman', '~> 3.2', '>= 3.2.0')
37
- s.add_development_dependency('rake', '~> 10.4')
38
- s.add_development_dependency('rspec', '~> 3.3')
37
+ s.add_development_dependency('rake', '~> 11.0')
38
+ s.add_development_dependency('rspec', '~> 3.4')
39
39
  s.add_development_dependency('rspec-its', '~> 1.2')
40
40
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pronto-brakeman
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.6.0
4
+ version: 0.7.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Mindaugas Mozūras
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2016-03-13 00:00:00.000000000 Z
11
+ date: 2016-08-07 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: pronto
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - "~>"
18
18
  - !ruby/object:Gem::Version
19
- version: 0.6.0
19
+ version: 0.7.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - "~>"
25
25
  - !ruby/object:Gem::Version
26
- version: 0.6.0
26
+ version: 0.7.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: brakeman
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -50,28 +50,28 @@ dependencies:
50
50
  requirements:
51
51
  - - "~>"
52
52
  - !ruby/object:Gem::Version
53
- version: '10.4'
53
+ version: '11.0'
54
54
  type: :development
55
55
  prerelease: false
56
56
  version_requirements: !ruby/object:Gem::Requirement
57
57
  requirements:
58
58
  - - "~>"
59
59
  - !ruby/object:Gem::Version
60
- version: '10.4'
60
+ version: '11.0'
61
61
  - !ruby/object:Gem::Dependency
62
62
  name: rspec
63
63
  requirement: !ruby/object:Gem::Requirement
64
64
  requirements:
65
65
  - - "~>"
66
66
  - !ruby/object:Gem::Version
67
- version: '3.3'
67
+ version: '3.4'
68
68
  type: :development
69
69
  prerelease: false
70
70
  version_requirements: !ruby/object:Gem::Requirement
71
71
  requirements:
72
72
  - - "~>"
73
73
  - !ruby/object:Gem::Version
74
- version: '3.3'
74
+ version: '3.4'
75
75
  - !ruby/object:Gem::Dependency
76
76
  name: rspec-its
77
77
  requirement: !ruby/object:Gem::Requirement