simplycop 1.7.0 → 1.7.4
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/workflows/dobby-actions.yml +15 -4
- data/README.md +1 -69
- data/catalog-info.yaml +16 -0
- data/docs/index.md +73 -0
- data/lib/simplycop/version.rb +1 -1
- data/mkdocs.yml +7 -0
- metadata +6 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 51da31df3951047a568a81ec7504c1930411afcf0e857b2e65ace63d1f488ac0
|
4
|
+
data.tar.gz: 85d46a288f0d262dda7ba5d45499af3f7e8091ca74a66631eafae6cb1f140a00
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5557171cf6f61cfb26ea0cefcb6a3cc8d50bd6310fbdd061bae01e3ff50232a0bc2c8c0316737408baec401ac3e6426b4c82f72e07dd2a5804d56a8a50a67253
|
7
|
+
data.tar.gz: 6c4f41690117b681f990ed6dc631a5def48e4881b0040ec2f9446b1931e35f61a426a3d0a7205dc63e2f08eb86a699f56a55b140232e5f071a1e75d6b68459b7
|
@@ -1,4 +1,5 @@
|
|
1
|
-
|
1
|
+
|
2
|
+
name: "Dobby action"
|
2
3
|
on:
|
3
4
|
issue_comment:
|
4
5
|
types: [created]
|
@@ -6,10 +7,20 @@ jobs:
|
|
6
7
|
pr_commented:
|
7
8
|
runs-on: ubuntu-20.04
|
8
9
|
if: startsWith(github.event.comment.body, '/dobby')
|
9
|
-
|
10
|
+
env:
|
11
|
+
BUNDLE_WITHOUT: "development:test"
|
10
12
|
steps:
|
11
|
-
- name:
|
12
|
-
uses:
|
13
|
+
- name: Chekcout action
|
14
|
+
uses: actions/checkout@v2
|
15
|
+
with:
|
16
|
+
repository: 'simplybusiness/dobby'
|
17
|
+
ref: 'v3.0.0'
|
18
|
+
- name: Set up ruby
|
19
|
+
uses: ruby/setup-ruby@v1
|
20
|
+
with:
|
21
|
+
bundler-cache: true
|
22
|
+
- name: Bump version
|
23
|
+
uses: simplybusiness/dobby@v3.0.0
|
13
24
|
env:
|
14
25
|
DOBBY_APP_ID: ${{ secrets.DOBBY_APP_ID }}
|
15
26
|
DOBBY_PRIVATE_KEY: ${{ secrets.DOBBY_PRIVATE_KEY }}
|
data/README.md
CHANGED
@@ -2,72 +2,4 @@
|
|
2
2
|
|
3
3
|
Provides standard shared rubocop configuration for Simply Business applications. No more copying `.rubocop.yml`, no more out-of-sync configuration files. Yay!
|
4
4
|
|
5
|
-
|
6
|
-
|
7
|
-
Add this line to your application's Gemfile:
|
8
|
-
|
9
|
-
```ruby
|
10
|
-
gem 'simplycop', git: 'git@github.com:simplybusiness/simplycop.git'
|
11
|
-
|
12
|
-
```
|
13
|
-
|
14
|
-
Then install gems by executing:
|
15
|
-
|
16
|
-
$ bundle install
|
17
|
-
|
18
|
-
Put following lines at the beginning of your `rubocop.yml` file:
|
19
|
-
|
20
|
-
```yaml
|
21
|
-
inherit_gem:
|
22
|
-
simplycop: .simplycop.yml
|
23
|
-
|
24
|
-
AllCops:
|
25
|
-
Exclude:
|
26
|
-
- 'vendor/**/*'
|
27
|
-
```
|
28
|
-
|
29
|
-
* If you are implementing this in rails project and have rspec , you probably want the standard rails and rspec cops. you can include this by adding:
|
30
|
-
|
31
|
-
```yaml
|
32
|
-
inherit_gem:
|
33
|
-
simplycop:
|
34
|
-
- .simplycop.yml
|
35
|
-
- .simplycop_rails.yml
|
36
|
-
- .simplycop_rspec.yml
|
37
|
-
```
|
38
|
-
|
39
|
-
## Usage
|
40
|
-
|
41
|
-
Run Rubocop as you would usually do, i.e.
|
42
|
-
|
43
|
-
$ bundle exec rubocop
|
44
|
-
|
45
|
-
or from your continuous integration tool.
|
46
|
-
|
47
|
-
## Guidances
|
48
|
-
|
49
|
-
* If you are implementing this in a non-rails project, you probably don't want or need the rails cops. In case they cause problems, you can exclude them using:
|
50
|
-
```yaml
|
51
|
-
Rails:
|
52
|
-
Enabled: false
|
53
|
-
```
|
54
|
-
* When adding rubocop and simplycop to a legacy project, you might want to initially disable some of the rules.
|
55
|
-
|
56
|
-
## Security Cops
|
57
|
-
- CheckForVulnerableCode
|
58
|
-
|
59
|
-
This cop was built to identify possible Rails vulnerable code.
|
60
|
-
Its purpose is to raise an awareness of the finding.
|
61
|
-
When an offence was raised, please seek for help and guidance from application security team.
|
62
|
-
|
63
|
-
IMPORTANT:
|
64
|
-
This cop must be enabled at all times, if you need to disable it please check with AppSec team first.
|
65
|
-
|
66
|
-
Example of vulnerable code:
|
67
|
-
|
68
|
-
```ruby
|
69
|
-
class BooksController < ApplicationController
|
70
|
-
caches_page :show
|
71
|
-
end
|
72
|
-
```
|
73
|
-
Vulnerability Details: https://nvd.nist.gov/vuln/detail/CVE-2020-8159
|
5
|
+
See [Full docs](docs/index.md)
|
data/catalog-info.yaml
ADDED
@@ -0,0 +1,16 @@
|
|
1
|
+
apiVersion: backstage.io/v1alpha1
|
2
|
+
kind: Component
|
3
|
+
metadata:
|
4
|
+
name: simplycop
|
5
|
+
description: Simply Business Rubocop rules
|
6
|
+
annotations:
|
7
|
+
github.com/project-slug: "simplybusiness/simplycop"
|
8
|
+
backstage.io/source-location: url:https://github.com/simplybusiness/simplycop/
|
9
|
+
spec:
|
10
|
+
type: library
|
11
|
+
lifecycle: production
|
12
|
+
owner: silversmiths
|
13
|
+
dependsOn:
|
14
|
+
- "Component:rake"
|
15
|
+
- "Component:rspec"
|
16
|
+
- "Component:rubocop"
|
data/docs/index.md
ADDED
@@ -0,0 +1,73 @@
|
|
1
|
+
# Simplycop
|
2
|
+
|
3
|
+
Provides standard shared rubocop configuration for Simply Business applications. No more copying `.rubocop.yml`, no more out-of-sync configuration files. Yay!
|
4
|
+
|
5
|
+
## Installation
|
6
|
+
|
7
|
+
Add this line to your application's Gemfile:
|
8
|
+
|
9
|
+
```ruby
|
10
|
+
gem 'simplycop'
|
11
|
+
|
12
|
+
```
|
13
|
+
|
14
|
+
Then install gems by executing:
|
15
|
+
|
16
|
+
$ bundle install
|
17
|
+
|
18
|
+
Put following lines at the beginning of your `rubocop.yml` file:
|
19
|
+
|
20
|
+
```yaml
|
21
|
+
inherit_gem:
|
22
|
+
simplycop: .simplycop.yml
|
23
|
+
|
24
|
+
AllCops:
|
25
|
+
Exclude:
|
26
|
+
- 'vendor/**/*'
|
27
|
+
```
|
28
|
+
|
29
|
+
* If you are implementing this in rails project and have rspec , you probably want the standard rails and rspec cops. you can include this by adding:
|
30
|
+
|
31
|
+
```yaml
|
32
|
+
inherit_gem:
|
33
|
+
simplycop:
|
34
|
+
- .simplycop.yml
|
35
|
+
- .simplycop_rails.yml
|
36
|
+
- .simplycop_rspec.yml
|
37
|
+
```
|
38
|
+
|
39
|
+
## Usage
|
40
|
+
|
41
|
+
Run Rubocop as you would usually do, i.e.
|
42
|
+
|
43
|
+
$ bundle exec rubocop
|
44
|
+
|
45
|
+
or from your continuous integration tool.
|
46
|
+
|
47
|
+
## Guidances
|
48
|
+
|
49
|
+
* If you are implementing this in a non-rails project, you probably don't want or need the rails cops. In case they cause problems, you can exclude them using:
|
50
|
+
```yaml
|
51
|
+
Rails:
|
52
|
+
Enabled: false
|
53
|
+
```
|
54
|
+
* When adding rubocop and simplycop to a legacy project, you might want to initially disable some of the rules.
|
55
|
+
|
56
|
+
## Security Cops
|
57
|
+
- CheckForVulnerableCode
|
58
|
+
|
59
|
+
This cop was built to identify possible Rails vulnerable code.
|
60
|
+
Its purpose is to raise an awareness of the finding.
|
61
|
+
When an offence was raised, please seek for help and guidance from application security team.
|
62
|
+
|
63
|
+
IMPORTANT:
|
64
|
+
This cop must be enabled at all times, if you need to disable it please check with AppSec team first.
|
65
|
+
|
66
|
+
Example of vulnerable code:
|
67
|
+
|
68
|
+
```ruby
|
69
|
+
class BooksController < ApplicationController
|
70
|
+
caches_page :show
|
71
|
+
end
|
72
|
+
```
|
73
|
+
Vulnerability Details: https://nvd.nist.gov/vuln/detail/CVE-2020-8159
|
data/lib/simplycop/version.rb
CHANGED
data/mkdocs.yml
ADDED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: simplycop
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.7.
|
4
|
+
version: 1.7.4
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Simply Business
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-10-18 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: rubocop
|
@@ -123,6 +123,8 @@ files:
|
|
123
123
|
- Rakefile
|
124
124
|
- bin/console
|
125
125
|
- bin/setup
|
126
|
+
- catalog-info.yaml
|
127
|
+
- docs/index.md
|
126
128
|
- lib/simplycop.rb
|
127
129
|
- lib/simplycop/custom_cops/constantize.rb
|
128
130
|
- lib/simplycop/custom_cops/define_method.rb
|
@@ -134,6 +136,7 @@ files:
|
|
134
136
|
- lib/simplycop/security/csrf_token_validation.rb
|
135
137
|
- lib/simplycop/security/reject_all_requests_local.rb
|
136
138
|
- lib/simplycop/version.rb
|
139
|
+
- mkdocs.yml
|
137
140
|
- simplycop.gemspec
|
138
141
|
- vuln_db.json
|
139
142
|
homepage: https://github.com/simplybusiness/simplycop
|
@@ -155,7 +158,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
155
158
|
- !ruby/object:Gem::Version
|
156
159
|
version: '0'
|
157
160
|
requirements: []
|
158
|
-
rubygems_version: 3.2.
|
161
|
+
rubygems_version: 3.2.22
|
159
162
|
signing_key:
|
160
163
|
specification_version: 4
|
161
164
|
summary: Provides a single point of reference for common rubocop rules.
|