rubomatic 0.0.1.pre.rc.2 → 0.0.1.pre.rc.3

data/configs/rubocop.yml

@@ -0,0 +1,37 @@
+inherit_from:
+  - ./brands_insurance/rubocop.yml
+  - ./bundler.yml
+  - ./gemspec.yml
+  #  - ./gemspec_on.yml
+  - ./layout.yml
+  - ./lint.yml
+  - ./metrics.yml
+  - ./migration.yml
+  - ./naming.yml
+  - ./performance.yml
+  - ./rails.yml
+  - ./security.yml
+  - ./style.yml
+
+inherit_mode:
+  merge:
+    - Exclude
+
+AllCops:
+  NewCops: disable
+  Exclude:
+    - 'vendor/**/*'
+    - 'spec/fixtures/**/*'
+    - 'tmp/**/*'
+    - '.git/**/*'
+    - 'bin/*'
+    - '.idea/*'
+    - 'log/*'
+    - 'node_modules/**/*'
+    - 'test/**/*'
+    - '.irbrc'
+    - 'db/schema.rb'
+  TargetRubyVersion: <%= ENV['RUBY_MAJOR'] %>
+  SuggestExtensions: false
+  StyleGuideBaseURL: https://github.com/BrandsInsurance/expert-chainsaw/blob/main/ruby/RUBY_STYLE_GUIDE.adoc
+  ActiveSupportExtensionsEnabled: true

data/configs/security.yml

@@ -0,0 +1,53 @@
+Security/CompoundHash:
+  Description: 'When overwriting Object#hash to combine values, prefer delegating to Array#hash over writing a custom implementation.'
+  Enabled: true
+  VersionAdded: '1.28'
+
+Security/Eval:
+  Description: 'The use of eval represents a serious security risk.'
+  Enabled: true
+  VersionAdded: '0.47'
+
+Security/IoMethods:
+  Description: >-
+    Checks for the first argument to `IO.read`, `IO.binread`, `IO.write`, `IO.binwrite`,
+    `IO.foreach`, and `IO.readlines`.
+  Enabled: true
+  Safe: false
+  VersionAdded: '1.22'
+
+Security/JSONLoad:
+  Description: >-
+    Prefer usage of `JSON.parse` over `JSON.load` due to potential
+    security issues. See reference for more information.
+  Reference: 'https://ruby-doc.org/stdlib-2.7.0/libdoc/json/rdoc/JSON.html#method-i-load'
+  Enabled: true
+  VersionAdded: '0.43'
+  VersionChanged: '1.22'
+  # Autocorrect here will change to a method that may cause crashes depending
+  # on the value of the argument.
+  SafeAutoCorrect: false
+
+Security/MarshalLoad:
+  Description: >-
+    Avoid using of `Marshal.load` or `Marshal.restore` due to potential
+    security issues. See reference for more information.
+  Reference: 'https://ruby-doc.org/core-2.7.0/Marshal.html#module-Marshal-label-Security+considerations'
+  Enabled: true
+  VersionAdded: '0.47'
+
+Security/Open:
+  Description: 'The use of `Kernel#open` and `URI.open` represent a serious security risk.'
+  Enabled: true
+  VersionAdded: '0.53'
+  VersionChanged: '1.0'
+  Safe: false
+
+Security/YAMLLoad:
+  Description: >-
+    Prefer usage of `YAML.safe_load` over `YAML.load` due to potential
+    security issues. See reference for more information.
+  Reference: 'https://ruby-doc.org/stdlib-2.7.0/libdoc/yaml/rdoc/YAML.html#module-YAML-label-Security'
+  Enabled: true
+  VersionAdded: '0.47'
+  SafeAutoCorrect: false