RubyGems - quayio-scanner - Versions diffs - 0.4.0 → 0.4.1 - Mend

quayio-scanner 0.4.0 → 0.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

checksums.yaml +4 -4
data/.rubocop.yml +1 -1
data/Gemfile.lock +39 -36
data/README.md +6 -5
data/lib/quayio/scanner/repository.rb +14 -16
data/lib/quayio/scanner/version.rb +1 -1
data/quayio-scanner.gemspec +3 -3
metadata +8 -14

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: de92233c0413236dfeb715ffc2bdf3b0355a7cd7a6cbf1bb8ba1507381b71ac5
-  data.tar.gz: 9903c847f82a53e14db535eaced022c774288e89b53ffaf765b3abfa4d40df11
+  metadata.gz: 2ab390e409e94c94ca9097786c8ff05a4c94e24b40d0fd78d2621f8bd752c60c
+  data.tar.gz: c0c4030b04c344eec2bce1f28e40179c0fed6e7db9660c2d62e514f2ee0a2e56
 SHA512:
-  metadata.gz: 4c216489fe912aa1a7ec9e6fc504aa241c872b809502c47bdcb72565b8d3ab8dc33504072d5037ab43a06b9a5abf7564db28b7a3ffe7908f1230b2483cf8fefa
-  data.tar.gz: a9e5c35ed78d30da1ef5ea51881ae5ad42fec33af3a5d04cf44bf598fd74a8b45555d4cc367d4f710d97099298223ff69fe9d1670e104608f94fa83889271dd5
+  metadata.gz: 7e4515512e9e08ca58895302fac1cffd954683aba481f2dda77d93c88d7695ecef403373e8314a442c9d8146d98d85e7beb894f195bf59631968933f46bcc489
+  data.tar.gz: 67e97c27c4bf9db2a256c7258f983fb9bbfeed980aca6276f9d5b29b37cf4706a5f881327f84af572c47235313932b48b8b38abaa0a1d6519c9d69a3a02d3642

data/.rubocop.yml CHANGED Viewed

@@ -1,5 +1,5 @@
 AllCops:
-  TargetRubyVersion: 2.3
+  TargetRubyVersion: 2.7
 Lint/RaiseException:
   Enabled: true

data/Gemfile.lock CHANGED Viewed

@@ -1,8 +1,8 @@
 PATH
   remote: .
   specs:
-    quayio-scanner (0.3.2)
-      docker-api (~> 1.33)
+    quayio-scanner (0.4.0)
+      docker-api (~> 2.4)
       rest-client (~> 2.1)
       sensu-plugin (~> 4.0)
@@ -10,63 +10,66 @@ GEM
   remote: https://rubygems.org/
   specs:
     ast (2.4.2)
-    diff-lcs (1.5.0)
-    docker-api (1.34.2)
-      excon (>= 0.47.0)
+    diff-lcs (1.5.1)
+    docker-api (2.4.0)
+      excon (>= 0.64.0)
       multi_json
-    domain_name (0.5.20190701)
-      unf (>= 0.0.5, < 1.0.0)
-    excon (0.92.3)
+    domain_name (0.6.20240107)
+    excon (1.2.3)
     http-accept (1.7.0)
-    http-cookie (1.0.5)
+    http-cookie (1.0.8)
       domain_name (~> 0.5)
-    jaro_winkler (1.5.4)
-    json (2.6.2)
-    mime-types (3.4.1)
+    json (2.9.1)
+    logger (1.6.5)
+    mime-types (3.6.0)
+      logger
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2022.0105)
+    mime-types-data (3.2025.0204)
     mixlib-cli (1.7.0)
     multi_json (1.15.0)
     netrc (0.11.0)
-    parallel (1.22.1)
-    parser (3.1.2.0)
+    parallel (1.26.3)
+    parser (3.3.7.1)
       ast (~> 2.4.1)
+      racc
+    racc (1.8.1)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.2.1)
+    regexp_parser (2.10.0)
     rest-client (2.1.0)
       http-accept (>= 1.7.0, < 2.0)
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
-    rexml (3.2.5)
-    rspec (3.11.0)
-      rspec-core (~> 3.11.0)
-      rspec-expectations (~> 3.11.0)
-      rspec-mocks (~> 3.11.0)
-    rspec-core (3.11.0)
-      rspec-support (~> 3.11.0)
-    rspec-expectations (3.11.0)
+    rexml (3.4.0)
+    rspec (3.13.0)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.3)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.3)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.11.0)
-    rspec-mocks (3.11.1)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.11.0)
-    rspec-support (3.11.0)
-    rubocop (0.81.0)
-      jaro_winkler (~> 1.5.1)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.2)
+    rubocop (0.93.1)
       parallel (~> 1.10)
-      parser (>= 2.7.0.1)
+      parser (>= 2.7.1.5)
       rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8)
       rexml
+      rubocop-ast (>= 0.6.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 2.0)
-    ruby-progressbar (1.11.0)
+    rubocop-ast (1.38.0)
+      parser (>= 3.3.1.0)
+    ruby-progressbar (1.13.0)
     sensu-plugin (4.0.0)
       json (< 3.0.0)
       mixlib-cli (~> 1.5)
-    unf (0.1.4)
-      unf_ext
-    unf_ext (0.0.8.2)
     unicode-display_width (1.8.0)
 PLATFORMS
@@ -77,7 +80,7 @@ DEPENDENCIES
   quayio-scanner!
   rake (~> 13.0)
   rspec (~> 3.7)
-  rubocop (~> 0.49, <= 0.81)
+  rubocop (~> 0.93)
 BUNDLED WITH
    2.1.4

data/README.md CHANGED Viewed

@@ -25,11 +25,12 @@ This plugin attempts to fetch vulnerabilities for all running containers
 ### Parameters
-| Parameter     | Description             |
-|---------------|-------------------------|
-| -d URL        | Docker URL              |
-| -t TOKEN      | Quay.io oauth token     |
-| -w WHITELIST  | Vulnerability whitelist |
+| Parameter                | Description                             |
+|--------------------------|-----------------------------------------|
+| -d URL                   | Docker URL                              |
+| -t TOKEN                 | Quay.io oauth token                     |
+| -w WHITELIST[,WHITELIST] | Vulnerability whitelist                 |
+| -n NAMESPACE[,NAMESPACE] | Namespaces (quay.io scanners) to ignore |
 ### Example

data/lib/quayio/scanner/repository.rb CHANGED Viewed

@@ -23,22 +23,20 @@ module Quayio
       def api_call(uri)
         (1..Float::INFINITY).each do |attempt|
-          begin
-            response = RestClient.get(
-              "https://quay.io/api/v1/repository/#{org}/#{repo}#{uri}",
-              authorization: "Bearer #{quayio_token}",
-              accept: :json,
-              open_timeout: 15
-            )
-            return JSON.parse(response)
-          rescue RestClient::Exception => e
-            raise e if attempt >= MAX_ATTEMPTS
-            # retry later, if we hit cdn rate limiting or on connection errors
-            raise e unless e.http_code == 520 || e.http_code.nil?
-            sleep(rand(10))
-          end
+          response = RestClient.get(
+            "https://quay.io/api/v1/repository/#{org}/#{repo}#{uri}",
+            authorization: "Bearer #{quayio_token}",
+            accept: :json,
+            open_timeout: 15
+          )
+          return JSON.parse(response)
+        rescue RestClient::Exception => e
+          raise e if attempt >= MAX_ATTEMPTS
+          # retry later, if we hit cdn rate limiting or on connection errors
+          raise e unless e.http_code == 520 || e.http_code.nil?
+          sleep(rand(10))
         end
       end
     end

data/lib/quayio/scanner/version.rb CHANGED Viewed

@@ -1,5 +1,5 @@
 module Quayio
   module Scanner
-    VERSION = '0.4.0'.freeze
+    VERSION = '0.4.1'.freeze
   end
 end

data/quayio-scanner.gemspec CHANGED Viewed

@@ -13,7 +13,7 @@ Gem::Specification.new do |spec|
   spec.homepage      = 'https://github.com/aboutsource/quayio-scanner'
   spec.license       = 'MIT'
-  spec.required_ruby_version = '>= 2.3.0'
+  spec.required_ruby_version = '>= 2.7.0'
   spec.files = `git ls-files -z`.split("\x0").reject do |f|
     f.match(%r{^(test|spec|features)/})
@@ -21,11 +21,11 @@ Gem::Specification.new do |spec|
   spec.executables   = Dir.glob('bin/**/*.rb').map { |f| File.basename(f) }
   spec.require_paths = ['lib']
-  spec.add_dependency 'docker-api', '~> 1.33'
+  spec.add_dependency 'docker-api', '~> 2.4'
   spec.add_dependency 'rest-client', '~> 2.1'
   spec.add_dependency 'sensu-plugin', '~> 4.0'
   spec.add_development_dependency 'bundler', '~> 2.1'
   spec.add_development_dependency 'rake', '~> 13.0'
   spec.add_development_dependency 'rspec', '~> 3.7'
-  spec.add_development_dependency 'rubocop', '~> 0.49', '<= 0.81'
+  spec.add_development_dependency 'rubocop', '~> 0.93'
 end

metadata CHANGED Viewed

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: quayio-scanner
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.4.1
 platform: ruby
 authors:
 - Benjamin Meichsner
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-02-20 00:00:00.000000000 Z
+date: 2025-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: docker-api
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.33'
+        version: '2.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.33'
+        version: '2.4'
 - !ruby/object:Gem::Dependency
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
@@ -100,20 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.49'
-    - - "<="
-      - !ruby/object:Gem::Version
-        version: '0.81'
+        version: '0.93'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.49'
-    - - "<="
-      - !ruby/object:Gem::Version
-        version: '0.81'
+        version: '0.93'
 description:
 email:
 - benjamin.meichsner@aboutsource.net
@@ -150,14 +144,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.3.0
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.25
+rubygems_version: 3.1.2
 signing_key:
 specification_version: 4
 summary: Scan quay.io for vulnerabilities in running docker containers.