rails_template_18f 0.7.1 → 0.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ec09af68270ab8a9c37472e382f4f5c847e2b14a5d865d5d0b161fdb7a5fc6c2
-  data.tar.gz: f83f58fc2fe89dc1d9516874138452ac2a6331aebaee7db9458abe1bc72c2cd2
+  metadata.gz: 9125789bccf3587593670a5046e6a019c8e65265cca40e8a9434f77b1a69cc7a
+  data.tar.gz: 72b8d7345799e1d26eef6506b035e80f1de94ea2679d6272f9ad525dbac5870a
 SHA512:
-  metadata.gz: 63584d2d0737790f36294c34e7e8d3611cf2d4e930e6664582b1d812e9d6117b609ba1912f40a2243d5bb24178cf989fddc1c3db8e29f41e178e188bd1e576bd
-  data.tar.gz: 6e78c92eb7cb24522aedb57c91a82ba077fd6780f4b34f0f138953e0ca4992daefcf610e0a934c10f32fee785e7dd72335ea2fbd87e4839d64dbae42cdc6a592
+  metadata.gz: 60c7961c07e40710113c4608162e3888335b0d86d8270d82b56bf7d16d607454dad73b7f4626fba87804d251358e744d5a307967562537b9d326f90d77a4630e
+  data.tar.gz: 3bd8def94a8f3f576b0f03622e1cf1461e6e79f00d4e3f3e17bd52bad4f91a59e365d3edcbc548be0ceeb6181271446b61a41ea0956832e64ad740c031ade812

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 ## [Unreleased]
 
+## [0.7.2] - 2022-07-07
+
+- update default node version in github actions to 16.15
+- update OSCAL message format to include the app_name as an OSCAL component once assembled
+
 ## [0.7.1] - 2022-07-05
 
 - fix issue with initial git commit when no OSCAL docs were updated during initial app creation

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rails_template_18f (0.7.1)
+    rails_template_18f (0.7.2)
       activesupport (~> 7.0.0)
       colorize (~> 0.8)
       railties (~> 7.0.0)

data/lib/generators/rails_template18f/github_actions/github_actions_generator.rb

@@ -145,7 +145,7 @@ EOB
         elsif File.exist?(nvmrc_path)
           File.read(nvmrc_path).strip
         else
-          "16.13"
+          "16.15"
         end
       end
 

data/lib/rails_template18f/generators/base.rb

@@ -63,7 +63,7 @@ module RailsTemplate18f
       def insert_into_oscal(filename, content, after: "## What is the solution and how is it implemented?\n")
         content = <<~EOS
 
-          **#{app_name} Implementation:**
+          ### #{app_name}
 
           #{content}
         EOS

data/lib/rails_template18f/generators/pipeline_options.rb

@@ -94,18 +94,11 @@ module RailsTemplate18f
         insert_into_oscal "sa-11.md", <<~EOS, after: "## Implementation a.\n"
           The CI/CD pipeline utilizes multiple tools to perform static code analysis for security and privacy:
 
-          ### Brakeman
-          Brakeman is a static code scanner designed to find security issues in Ruby on Rails code. It can flag potential SQL injection,
+          * **Brakeman** is a static code scanner designed to find security issues in Ruby on Rails code. It can flag potential SQL injection,
           Command Injection, open redirects, and other common vulnerabilities.
-
-          ### Bundle Audit
-          bundle-audit checks Ruby dependencies against a database of known CVE numbers.
-
-          ### Yarn Audit
-          yarn audit checks Javascript dependencies against a database of known CVE numbers.
-
-          ### OWASP ZAP
-          OWASP ZAP is a dynamic security scanner that can simulate actual attacks on a running server.
+          * **bundle-audit** checks Ruby dependencies against a database of known CVE numbers.
+          * **yarn audit** checks Javascript dependencies against a database of known CVE numbers.
+          * **OWASP ZAP** is a dynamic security scanner that can simulate actual attacks on a running server.
 
           An additional RAILS_ENV has been created called ci. It inherits from production to ensure that the system being tested is as close as possible to production while allowing for overrides such as bypassing authentication in a secure way.
         EOS

data/lib/rails_template18f/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RailsTemplate18f
-  VERSION = "0.7.1"
+  VERSION = "0.7.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_template_18f
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.7.2
 platform: ruby
 authors:
 - Ryan Ahearn
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-07-05 00:00:00.000000000 Z
+date: 2022-07-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties