sastbox_sdk 1.0.2 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ddf6f6375ffde727e1310426ca801d8fb67d8c8a8634aa4dfb8ebc268ade62f9
-  data.tar.gz: b91edb2c2a34a21fbcb3f4c9e901461e62ac02560104648b4a6a1506acc1f388
+  metadata.gz: 31a2030f6f51249e601df53f4e9b09514a549324d5800dedcf2016c76b722be2
+  data.tar.gz: 9c77ed8009aa8ff038e8488f999c57f6eca33209bc7d0a0d32222911fb7c5794
 SHA512:
-  metadata.gz: 1b2642177f4c220b352e9b33a3dac538cbf871951af30daac80189a80438a1bccb8610910b4720c2c230aaea382c35a4844a544698876cabbabbae376f50a0a3
-  data.tar.gz: 89e2f12d5b3d426e420f766695532fbca38c0212594adffa2e0c9525f7a1b475ac2a60727eaebfa4b88a904b7849682da1be36f1f37d49b52988167fbfe661af
+  metadata.gz: b8e92397c85e2c3a28c612f70d4b5ac781db1515d350440c51cad8091df3138b6f6e3f8d2dd2ede69ab2a06c0938bb80b304bf4a7cb7f32e591b870f1904811a
+  data.tar.gz: 95290fd086c41cc1365cdf2b7705c68703ae237a88a1d40b59b6ae76da23e9463db8833a96502c4693658e6226804dd87e4f7a13c2483d6cf412fcb231a1a1be

data/lib/sastbox-sdk/codebase.rb

@@ -1,5 +1,4 @@
 module SastBox
   module Codebase
-
   end
-end
+end

data/lib/sastbox-sdk/cwe_detector.rb

@@ -2,7 +2,6 @@ require 'set'
 
 module SastBox
   module Cwe
-
     def cwe_found?(issue, patterns, cwe)
       patterns.each do |pattern|
         @alternative_titles.each do |title|
@@ -12,7 +11,7 @@ module SastBox
           end
         end
       end
-      return false
+      false
     end
 
     def detected_sql_injection?(issue)
@@ -185,8 +184,8 @@ module SastBox
 
       @alternative_titles << @alternative_titles.first.split('_').join(' ')
       @alternative_titles << @alternative_titles.first.split('-').join(' ')
-      @alternative_titles << @alternative_titles.first.gsub("hard coded", "hard-coded")
-      @alternative_titles << @alternative_titles.first.gsub("hardcoded", "hard-coded")
+      @alternative_titles << @alternative_titles.first.gsub('hard coded', 'hard-coded')
+      @alternative_titles << @alternative_titles.first.gsub('hardcoded', 'hard-coded')
       @alternative_titles
     end
 
@@ -197,6 +196,5 @@ module SastBox
         cwe_start_heuristics(issue)
       end
     end
-
   end
-end
+end

data/lib/sastbox-sdk/opt_parser.rb

@@ -5,12 +5,12 @@ module SastBox
   module OptParser
     def parse_opts(args)
       @opts = OpenStruct.new
-      @opts.verbose     = false
-      @opts.info        = false
-      @opts.color       = true
-      @opts.diff_hashes = []
-      @opts.diff_quick  = false
-      @opts.timeout     = 200 * 60
+      @opts.verbose      = false
+      @opts.info         = false
+      @opts.color        = true
+      @opts.diff_hashes  = []
+      @opts.diff_quick   = false
+      @opts.timeout      = 200 * 60
 
       opt_parser = OptionParser.new do |opts|
         opts.on('-c', '--codebase=CODEBASE', 'Codebase to be scanned') do |codebase|

data/lib/sastbox-sdk/printer.rb

@@ -3,7 +3,6 @@ require 'date'
 
 module SastBox
   module Printer
-
     def enable_color(flag = true)
       @color = flag
     end
@@ -80,6 +79,5 @@ module SastBox
 
     def self.included(base)
     end
-
   end
-end
+end

data/lib/sastbox-sdk/reporter_sarif.rb

@@ -3,7 +3,6 @@ require 'digest'
 module SastBox
   module Reporter
     module Sarif
-
       def generate_sarif_report
         new_sarif_log
         @issues.each do |issue|
@@ -103,9 +102,9 @@ module SastBox
             issueSeverity: issue[:severity],
           }
         }
+
         sarif_result
       end
-
     end
   end
 end

data/lib/sastbox-sdk/runner.rb

@@ -2,7 +2,6 @@ require 'timeout'
 
 module SastBox
   module Runner
-
     def command?(name)
       `which #{name}`
       $?.success?

data/lib/sastbox-sdk/scanner.rb

@@ -1,6 +1,5 @@
 module SastBox
   class Scanner
-
     include SastBox::OptParser
     include SastBox::Printer
     include SastBox::Runner
@@ -79,7 +78,8 @@ module SastBox
     def skip_issue?(issue)
       return true if issue[:filename].include?('/.git/')
       return true if issue[:snippet][:read_success] == false
-      return false 
+
+      false
     end
 
     def validate_opts
@@ -111,11 +111,11 @@ module SastBox
       status = 0
       status = 1 unless @issues.empty?
       print_title("Finished #{@name}")
-      exit status
+      status
     end
 
     def save_scan_output
-      File.open(@opts.output, "wb") { |file| file.write(generate_sarif_report) }
+      File.open(@opts.output, 'wb') { |file| file.write(generate_sarif_report) }
       print_normal("Sarif result saved to #{@opts.output}", 1)
     end
 
@@ -143,8 +143,8 @@ module SastBox
       if File.exist?(filename)
         content = parse_json_from_str(File.read(filename))
       end
+
       content
     end
-
   end
 end

data/lib/sastbox-sdk/severity_calculator.rb

@@ -1,6 +1,5 @@
 module SastBox
   module SeverityCalculator
-
     def add_severity(issue)
       accepted_levels =  [:info, :low, :medium, :high, :critical]
 
@@ -13,7 +12,6 @@ module SastBox
       else
         issue[:severity] = attempt_to_determine_severity(issue)
       end
-
     end
 
     def severity_pattern_found?(patterns, text)
@@ -51,7 +49,6 @@ module SastBox
 
       info = []
 
-
       if level == :undefined
         level = :critical if severity_pattern_found?(critical, text)
       end

data/lib/sastbox-sdk/snippet.rb

@@ -2,7 +2,6 @@ require 'digest'
 
 module SastBox
   module Snippet
-
     def filename_relative(filename)
       filename_path = File.expand_path(filename)
       codebase_path = File.expand_path(@opts.codebase)
@@ -10,9 +9,10 @@ module SastBox
       if filename_path.start_with?(codebase_path)
         filename_path.sub!(codebase_path, '')
         filename_path = filename_path[1..-1] if filename_path.start_with?('/')
-        return filename_path
+
+        filename_path
       else
-        return nil
+        nil
       end
     end
 

data/spec/sastbox-sdk/codebase_spec.rb

@@ -4,4 +4,3 @@ require_relative '../../lib/sastbox-sdk'
 
 RSpec.describe 'Codebase' do
 end
-

data/spec/sastbox-sdk/cwe_constants_spec.rb

@@ -4,4 +4,3 @@ require_relative '../../lib/sastbox-sdk'
 
 RSpec.describe 'Cwe_constants' do
 end
-

data/spec/sastbox-sdk/cwe_detector_spec.rb

@@ -209,8 +209,5 @@ RSpec.describe 'Cwe_detector' do
         expect(issue[:cwe_id]).to eq SastBox::Cwe::UNRESTRICTED_UPLOAD_OF_FILE_WITH_DANGEROUS_TYPE
       end
     end
-
-
   end
-
 end

data/spec/sastbox-sdk/opt_parser_spec.rb

@@ -16,7 +16,7 @@ RSpec.describe 'Opt_parser' do
 
   describe 'parse_opts' do
     context 'should parse all the provided options' do
-      subject { scanner.parse_opts(['-c', 'codebase', '-o', 'outputfile', '-v', '-t', '2', '-n']) }
+      subject { scanner.parse_opts(%w[-c codebase -o outputfile -v -t 2 -n]) }
 
       it 'codebase - is expected to eq "codebase"' do
         expect(subject.codebase).to eq 'codebase'
@@ -44,4 +44,3 @@ RSpec.describe 'Opt_parser' do
     end
   end
 end
-

data/spec/sastbox-sdk/printer_spec.rb

@@ -56,4 +56,3 @@ RSpec.describe 'Printer' do
     end
   end
 end
-

data/spec/sastbox-sdk/reporter_sarif_spec.rb

@@ -29,7 +29,7 @@ RSpec.describe 'Reporter_sarif' do
   end
 
   before do
-    scanner.parse_opts(['-c', 'xxx'])
+    scanner.parse_opts(%w[-c xxx])
 
     scanner.add_issue(
       title: 'title',
@@ -46,7 +46,7 @@ RSpec.describe 'Reporter_sarif' do
 
   describe 'generate_sarif_report' do
     context 'should generate valid SARIF' do
-      subject {scanner.generate_sarif_report() }
+      subject {scanner.generate_sarif_report }
 
       it {expect(subject).to be_a(String)}
 

data/spec/sastbox-sdk/runner_spec.rb

@@ -46,9 +46,9 @@ RSpec.describe 'Runner' do
       subject { scanner.run_cmd(['uname']) }
 
       it { expect(subject).to be_an(Array) }
-      it { expect(subject.length).to be(2) }
+      it { expect(subject.length).to be(3) }
       it { expect(subject[0]).to eq "Linux\n" }
-      it { expect(subject[1]).to eq(nil).or be_an(Process::Status) }
+      it { expect(subject[1]).to eq("").or be_an(Process::Status) }
     end
 
     context 'should exit with an invalid command' do
@@ -70,9 +70,9 @@ RSpec.describe 'Runner' do
       subject { scanner_timeout_60_sec.run_cmd_with_timeout(['uname']) }
 
       it { expect(subject).to be_an(Array) }
-      it { expect(subject.length).to be(2) }
+      it { expect(subject.length).to be(3) }
       it { expect(subject[0]).to eq "Linux\n" }
-      it { expect(subject[1]).to eq(nil).or be_an(Process::Status) }
+      it { expect(subject[1]).to eq("").or be_an(Process::Status) }
     end
 
     context 'should fail when exceeded timeout' do
@@ -89,4 +89,3 @@ RSpec.describe 'Runner' do
     end
   end
 end
-

data/spec/sastbox-sdk/scanner_spec.rb

@@ -16,7 +16,7 @@ RSpec.describe 'Scanner' do
   describe 'start_scan' do
     context 'should raise name error for run method when correct options are provided' do
       before do
-        scanner.parse_opts(['-o', 'xxx', '-c', 'aaa'])
+        scanner.parse_opts(%w[-o xxx -c aaa])
       end
 
       it "should raise name error for run method when correct options are provided" do
@@ -48,7 +48,7 @@ RSpec.describe 'Scanner' do
       end
 
       before do
-        scanner.parse_opts(['-o', 'xxx', '-c', 'aaa'])
+        scanner.parse_opts(%w[-o xxx -c aaa])
         scanner.add_issue(issue)
       end
 
@@ -69,7 +69,7 @@ RSpec.describe 'Scanner' do
       end
 
       before do
-        scanner.parse_opts(['-o', 'xxx', '-c', 'aaa'])
+        scanner.parse_opts(%w[-o xxx -c aaa])
       end
 
       it do
@@ -145,14 +145,14 @@ RSpec.describe 'Scanner' do
       end
 
       before do
-        scanner.parse_opts(['-c', '/abc/def/ghi'])
+        scanner.parse_opts(%w[-c /abc/def/ghi])
         @status = scanner.add_issue(issue)
       end
 
       #it { expect(@status).to be scanner.issues }
       it { expect(scanner.issues.length).to be 1}
       it "hash_issue_v1" do
-        expect(scanner.issues.first[:hash_issue]).to eq '220da2ef86cb34b97e4253f5b212b2a720c93d717e7fec8f243d851441774181'
+        expect(scanner.issues.first[:hash_issue]).to eq '4d89fbb4cc1e2beef276558ead0c4a66d1048668edda40b36efae7f8c6f30642'
       end
 
       it "hash_issue_v2" do
@@ -235,4 +235,3 @@ RSpec.describe 'Scanner' do
     end
   end
 end
-

data/spec/sastbox-sdk/severity_calculator_spec.rb

@@ -120,7 +120,4 @@ RSpec.describe 'SeverityCalculator' do
       it {expect( scanner.attempt_to_determine_severity(issue)).to eq :undefined}
     end
   end
-
-
 end
-

data/spec/sastbox-sdk/snippet_spec.rb

@@ -172,4 +172,3 @@ RSpec.describe 'snippet' do
     end
   end
 end
-

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sastbox_sdk
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.4
 platform: ruby
 authors:
 - Conviso Engineering Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-02-21 00:00:00.000000000 Z
+date: 2024-12-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colored
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.3
+        version: 2.9.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.3
+        version: 2.9.0
 description: SDK to construct SAST scanners
 email: product-development@convisoappsec.com
 executables: []
@@ -89,7 +89,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.6
+rubygems_version: 3.5.10
 signing_key:
 specification_version: 4
 summary: SastBox SDK