shield_ast 1.3.0 → 1.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e1d0d992a06ba8323c653c415034bf1a8675927313eed774e0df9604d68ac0d4
-  data.tar.gz: dde5863c280c005ff476e9155dd079ef61718ada91d858fdce39139d9d921c67
+  metadata.gz: e6870b036c8e6c03944486d5adca05dc81bb77095bcc6aab783700595d690cde
+  data.tar.gz: a2e2aa9d83892699d7d32febd1cbd07355765cac9fb5c0b8cb09740a9d66e7f8
 SHA512:
-  metadata.gz: 504a5fd50aa71a6785546e6a5a437f5b6d4dcb864f1006344f656d93135ca63dddd30de2105362a5382afd0fe19a87b5830ee5fd3344a302a14509f494319f20
-  data.tar.gz: bd83dbcc8eb058cf581a4466c94edea750c7ada17bcbd9ac150ad905c51d65859d02a3cea1d65adb4c0a9ebd4ca8f77fbd655b1a14cf74bb3cfa2f2f0b0f206c
+  metadata.gz: 30e55a4658b59e53255625c872ad040faa7d9ce9c8363b500c6e31db9d477fdca36582049e5a3d9e94b3066f418c72a9f677a56581350a45ee918d921e74a469
+  data.tar.gz: c772d1c33fc1e608a98b48b6c3c8ba73c78bd3f4afa70d4a6b66cae3c647eead279e9102e4b7c2672a87d55021bc90b80d1f66fde8df1bd3aa054b1600625781

data/lib/shield_ast/sast.rb

@@ -7,21 +7,35 @@ require "open3"
 module ShieldAst
   # Wraps the logic for running SAST scan using Semgrep.
   class SAST
+    EXCLUDE_PATTERNS = %w[**/spec/ **/test/ **/tests/ **/features/ **/__tests__/ **/vendor/
+                          **/node_modules/ **/*_spec.rb **/*_test.rb **/*.spec.js **/*.test.js
+                          **/*.spec.ts **/*.test.ts **/*_test.py **/test_*.py **/*_test.go].freeze
+
     def self.scan(path)
-      cmd = [
-        "semgrep", "scan", "--config", "p/r2c-ci", "--config", "p/secrets", "--json", "--disable-version-check", path
-      ]
+      cmd = build_command(path)
       stdout, stderr, status = Open3.capture3(*cmd)
 
       if status.success?
         JSON.parse(stdout)
       else
-        warn "Semgrep SAST scan failed! Error: #{stderr}"
-        []
+        warn "Semgrep SAST scan failed! Exit Code: #{status.exitstatus}\nError: #{stderr}"
+        { "results" => [] }
       end
     rescue JSON::ParserError => e
-      warn "Failed to parse Semgrep output: #{e.message}"
-      []
+      warn "Failed to parse Semgrep SAST output: #{e.message}"
+      { "results" => [] }
+    end
+
+    def self.build_command(path)
+      base_cmd = %w[semgrep scan --json --disable-version-check]
+
+      EXCLUDE_PATTERNS.each do |pattern|
+        base_cmd.push("--exclude", pattern)
+      end
+
+      base_cmd.push(path)
+
+      base_cmd
     end
   end
 end

data/lib/shield_ast/sca.rb

@@ -21,7 +21,7 @@ module ShieldAst
         puts "Executing command: #{cmd}" if ENV["DEBUG"]
 
         output = `#{cmd} 2>&1`
-        exit_code = $?.exitstatus
+        exit_code = $CHILD_STATUS.exitstatus
 
         puts "Exit code: #{exit_code}" if ENV["DEBUG"]
         puts "Output: #{output}" if ENV["DEBUG"]
@@ -49,7 +49,7 @@ module ShieldAst
           puts "OSV Scanner non-result error (exit code: #{exit_code})"
           { "results" => [] }
         end
-      rescue => e
+      rescue StandardError => e
         puts "Error running OSV Scanner: #{e.message}"
         { "results" => [] }
       end
@@ -132,12 +132,11 @@ module ShieldAst
     end
 
     def self.extract_fixed_version(vuln)
-      if vuln["affected"] && vuln["affected"].is_a?(Array)
+      if vuln["affected"].is_a?(Array)
         vuln["affected"].each do |affected|
-          if affected["ranges"] && affected["ranges"].is_a?(Array)
+          if affected["ranges"].is_a?(Array)
             affected["ranges"].each do |range|
-              if range["events"] && range["events"].is_a?(Array)
-                # Look for "fixed" events
+              if range["events"].is_a?(Array)
                 fixed_event = range["events"].find { |event| event["fixed"] }
                 return fixed_event["fixed"] if fixed_event
               end

data/lib/shield_ast/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ShieldAst
-  VERSION = "1.3.0"
+  VERSION = "1.3.2"
 end

data/lib/shield_ast.rb

@@ -171,7 +171,7 @@ module ShieldAst
         puts "PDF report generated at: #{REPORT_PDF_FILE}"
       rescue StandardError => e
         puts "Error: Failed to generate PDF: #{e.message}"
-        puts "Error: Backtrace: #{e.backtrace.join("\n")}"
+        puts "Error: Backtrace: #{e.backtrace&.join("\n")}"
       end
     end
 
@@ -413,14 +413,16 @@ module ShieldAst
     end
 
     def self.banner
-      yellow = "\e[33m"
+      gray = "\e[90m"
+      white = "\e[97m"
+      bold = "\e[1m"
       reset = "\e[0m"
-      version_string = "Shield AST - v#{ShieldAst::VERSION}"
-      line_length = 42
 
-      puts "#{yellow}┌" + "─" * line_length + "┐#{reset}"
-      puts "#{yellow}│#{reset} #{version_string.ljust(line_length - 1)}#{yellow}│#{reset}"
-      puts "#{yellow}└" + "─" * line_length + "┘#{reset}"
+      title = "Shield AST v#{ShieldAst::VERSION}"
+      line_char = "─"
+      line_segment = line_char * 10
+
+      puts "#{gray}#{line_segment}┤#{reset} #{bold}#{white}#{title}#{reset} #{gray}├#{line_segment}#{reset}"
       puts ""
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: shield_ast
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.3.2
 platform: ruby
 authors:
 - Jose Augusto