scryer 1.0.0 → 1.2.0

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: scryer
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.2.0
 platform: ruby
 authors:
 - Ram Laxman Yadav
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-08-12 00:00:00.000000000 Z
+date: 2026-08-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -24,19 +24,38 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
 description: |
-  One scan, one report: security, performance, duplicate-code, and dependency audits for Ruby
-  and Rails — the ground Brakeman, bundler-audit, Reek, and custom glue scripts usually split
-  between them, covered by a single `scryer` command. (Style/lint is RuboCop's job — Scryer
-  doesn't touch that.)
+  Scryer is an all-in-one security auditing and static analysis tool for Ruby on Rails
+  applications — tells you what to fix first, across security, performance, dependencies, and
+  code quality. It scans a Ruby/Rails codebase for security vulnerabilities, performance
+  problems, dependency risk, and code-quality issues, then ranks everything it finds by severity
+  across all of those categories — so a scan ends with one answer to "what's most worth fixing,"
+  not four separate reports to reconcile by hand. (Style/lint is RuboCop's job — Scryer doesn't
+  touch that, except one narrow check.)
 
-  Detects SQL injection, mass assignment, hardcoded secrets, XSS, weak crypto, and more; N+1
-  queries, missing pagination, and other performance heuristics; near-duplicate code; and
-  known-vulnerable gems via a live OSV.dev dependency audit — on by default, every run.
+  Detects SQL injection, mass assignment, SSRF, path traversal, IDOR, insecure JWT/CORS/session
+  config, hardcoded secrets, XSS, weak crypto, and more; N+1 queries, missing pagination, and
+  other performance heuristics; near-duplicate code; and known-vulnerable gems via a live
+  OSV.dev dependency audit — on by default, every run.
 
   Every finding includes a human-reviewable suggested fix — never auto-applied, optionally
   rewritten against your actual code by any LLM you configure. Reports in JSON, self-contained
-  HTML, or CSV. Zero runtime dependencies beyond Ruby's own stdlib.
+  HTML, CSV, or SARIF (for GitHub Code Scanning). Zero runtime dependencies beyond Ruby's own
+  stdlib.
 email:
 executables:
 - scryer
@@ -46,6 +65,12 @@ files:
 - CHANGELOG.md
 - LICENSE.txt
 - README.md
+- docs/architecture.md
+- docs/contributing.md
+- docs/fix-mode.md
+- docs/rails-integration.md
+- docs/rules.md
+- docs/usage.md
 - exe/scryer
 - lib/generators/scryer/USAGE
 - lib/generators/scryer/install_generator.rb
@@ -54,12 +79,20 @@ files:
 - lib/scryer/ai_client.rb
 - lib/scryer/ai_fix_suggester.rb
 - lib/scryer/ast.rb
+- lib/scryer/authorization_watcher.rb
+- lib/scryer/baseline.rb
 - lib/scryer/cache_extractor.rb
 - lib/scryer/cli.rb
+- lib/scryer/colorizer.rb
 - lib/scryer/dependency_audit.rb
+- lib/scryer/dependency_fixer.rb
 - lib/scryer/duplicate_detector.rb
 - lib/scryer/finding.rb
+- lib/scryer/fix_runner.rb
+- lib/scryer/fix_verifier.rb
+- lib/scryer/mechanical_fixer.rb
 - lib/scryer/method_extractor.rb
+- lib/scryer/minitest.rb
 - lib/scryer/performance_rules/inefficient_save_loop_rule.rb
 - lib/scryer/performance_rules/missing_pagination_rule.rb
 - lib/scryer/performance_rules/n_plus_one_query_rule.rb
@@ -68,6 +101,7 @@ files:
 - lib/scryer/query_watcher.rb
 - lib/scryer/railtie.rb
 - lib/scryer/report_renderer.rb
+- lib/scryer/rspec.rb
 - lib/scryer/rule.rb
 - lib/scryer/rule_set.rb
 - lib/scryer/rules/action_cable_forgery_protection_rule.rb
@@ -75,6 +109,7 @@ files:
 - lib/scryer/rules/active_storage_missing_content_type_validation_rule.rb
 - lib/scryer/rules/authentication_bypass_rule.rb
 - lib/scryer/rules/command_injection_rule.rb
+- lib/scryer/rules/consider_all_requests_local_rule.rb
 - lib/scryer/rules/cors_misconfiguration_rule.rb
 - lib/scryer/rules/csrf_protection_rule.rb
 - lib/scryer/rules/force_ssl_rule.rb
@@ -82,17 +117,21 @@ files:
 - lib/scryer/rules/hardcoded_basic_auth_rule.rb
 - lib/scryer/rules/hardcoded_secret_key_base_rule.rb
 - lib/scryer/rules/hardcoded_secret_rule.rb
+- lib/scryer/rules/host_authorization_disabled_rule.rb
 - lib/scryer/rules/idor_rule.rb
 - lib/scryer/rules/insecure_cookie_serializer_rule.rb
 - lib/scryer/rules/job_raw_params_rule.rb
 - lib/scryer/rules/jwt_insecure_rule.rb
 - lib/scryer/rules/mass_assignment_rule.rb
+- lib/scryer/rules/missing_authorization_rule.rb
+- lib/scryer/rules/missing_policy_scope_rule.rb
 - lib/scryer/rules/open_redirect_rule.rb
 - lib/scryer/rules/path_traversal_rule.rb
 - lib/scryer/rules/security_headers_rule.rb
 - lib/scryer/rules/sql_injection_rule.rb
 - lib/scryer/rules/ssrf_rule.rb
 - lib/scryer/rules/unsafe_deserialization_rule.rb
+- lib/scryer/rules/verbose_production_log_level_rule.rb
 - lib/scryer/rules/weak_crypto_rule.rb
 - lib/scryer/rules/weak_session_cookie_rule.rb
 - lib/scryer/rules/xss_unsafe_html_rule.rb
@@ -127,6 +166,7 @@ requirements: []
 rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
-summary: Ruby/Rails security & quality auditor — one command instead of Brakeman +
-  bundler-audit + Reek.
+summary: An all-in-one security auditing and static analysis tool for Ruby on Rails
+  applications — tells you what to fix first, across security, performance, dependencies,
+  and code quality.
 test_files: []