simplycop 1.14.16 → 1.14.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff7b8d3d4f0d52b647d719c7e3fdeab3866ad51839adcfe5db8305dafab82e89
-  data.tar.gz: d64d214fca6b95cbcad849ed9c51c6f5b19b8757f28a6d4768ccd42b5264766c
+  metadata.gz: 4c4f3cf1e5a8d1af59705accabb65136954b8237c6257164695d289df0281f2d
+  data.tar.gz: f0ff5eebbc578b9151b8e9472048cc7ad102a955741039c39d5a7076eb1a2f98
 SHA512:
-  metadata.gz: 761b5c8737d434b32b6bbb2bea36ffa96380b20bc420fa4110096ed5012010c4d13bd08b96bcfecdab966b595804cefbdbb52d8fc61a6bfaad01dd1f4b80d1da
-  data.tar.gz: a578b617654e7bd177aa43c8b83184686ca09effc7b87728bdeb150e80b332d2c4a43ba6479d7fccb3e161d77dec14c7a332b7114aa8eeceef35633d180d5542
+  metadata.gz: dbe334ffbbacc9d1834d56a6be73ca0b263eda328166222edb5ec71e87c2455929103c1ae0b543e1c54b89d3f9442dac19b718e51a537058fcb21b537e91679f
+  data.tar.gz: 6610320caef88186376105c8d8f158cd0b20d9e05b44f61c8b81822e599cb6e9aa43890d176eefc5ac4ed5208b1d32bd0b606b16d46cbb00958ae204753eeaa4

data/.github/workflows/sast-tools.yaml

@@ -0,0 +1,39 @@
+name: Huxley SAST Tools
+
+on:
+  pull_request:
+    types: 
+      - opened
+      - synchronize
+    branches: 
+      - master
+      - main
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+      - main
+
+concurrency: huxley-sast-tools-${{ github.ref }}
+
+env:
+  REPOSITORY: ${{ github.event.repository.name }}
+
+jobs:
+  SAST-tools:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_LIVE_CICD_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_LIVE_CICD_SECRET_ACCESS_KEY }}
+          aws-region: ${{ vars.AWS_LIVE_CICD_REGION }}
+      - name: SAST Tools
+        uses: aws-actions/aws-codebuild-run-build@v1
+        with:
+          project-name: ${{ env.REPOSITORY }}
+          buildspec-override: _pipeline/stage_sast_tools.yml
+        env:
+          DEPLOY_TO_DEV_ONLY: true
+          DEPLOY_TO_LIVE_ONLY: false

data/_pipeline/stage_sast_tools.yml

@@ -0,0 +1,9 @@
+version: 0.2
+
+phases:
+  install:
+    commands:
+      - docker_setup
+  build:
+    commands:
+      - run_huxley run_semgrep

data/catalog-info.yaml

@@ -7,7 +7,7 @@ metadata:
   annotations:
     github.com/project-slug: "simplybusiness/simplycop"
     backstage.io/source-location: url:https://github.com/simplybusiness/simplycop/
-    backstage.io/techdocs-ref: dir:.
+    simplybusiness.com/sast-scanning: enabled
 spec:
   type: library
   lifecycle: production

data/docs/index.md

@@ -15,7 +15,7 @@ Then install gems by executing:
 
     $ bundle install
 
-Put following lines at the beginning of your `rubocop.yml` file:
+Put following lines at the beginning of your `.rubocop.yml` file:
 
 ```yaml
 inherit_gem:

data/lib/simplycop/version.rb

@@ -7,5 +7,5 @@
 #
 
 module Simplycop
-  VERSION = '1.14.16'
+  VERSION = '1.14.18'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: simplycop
 version: !ruby/object:Gem::Version
-  version: 1.14.16
+  version: 1.14.18
 platform: ruby
 authors:
 - Simply Business
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-01-02 00:00:00.000000000 Z
+date: 2024-01-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubocop
@@ -124,6 +124,7 @@ files:
 - ".github/workflows/project-board.yml"
 - ".github/workflows/publish-docs.yaml"
 - ".github/workflows/publish_gem.yml"
+- ".github/workflows/sast-tools.yaml"
 - ".github/workflows/version_forget_me_not.yml"
 - ".gitignore"
 - ".rspec"
@@ -148,6 +149,7 @@ files:
 - README.md
 - Rakefile
 - _pipeline/stage_publishdocs.yml
+- _pipeline/stage_sast_tools.yml
 - bin/console
 - bin/setup
 - catalog-info.yaml