trapline 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4512a1d91ced4516d053f35a63b9c3e421e13445a047bd6204890e1b28094dcf
-  data.tar.gz: 63389b3d583eea89f84dcb04ce2fedf502ee5c917d9eb363b455237b3a117ba5
+  metadata.gz: 1aeb917336994882cf87d98ed316d3c9871fb9d8f6e6d50f8aa2e43d48c65d26
+  data.tar.gz: e13692d03e5a92ed4bc5e5f83db9a80c9711ede23c16446f97314fc45ff762d4
 SHA512:
-  metadata.gz: 52530cb305ad1f19e1740f7265b80fbd0345031cad2f4f033bf28908d122c272b04e1ea2279895a11a07b23ec776aa683787126f3199bb41ceb3f50e36dc22ed
-  data.tar.gz: 67d866ff50f4d6fd28da3568322f34bb46928c95216f691257753e19a244a15544cbef9eddabfeb2791eeba4f2dcbc61c33896c9c6d48709f1fd33799ecfa949
+  metadata.gz: a3039ee696861636c7c4a5da1c0200ba21402c69a988d734bac590816e13faab4cbb16f006ac7958fe5c046ed0b5ecaaaa52089fc5c3567d17f781fde7a162b3
+  data.tar.gz: 6491205c985c206d645d091153f6028da743de58c303f0f3a4fbedaa90e03489fb8d350139cb5dcbc86100c0adf8b8674a7e1c44717674c19e7e7a636f843198

data/README.md

@@ -86,7 +86,7 @@ pip install semgrep      # or: brew install semgrep
 
 ```bash
 trapline version
-# trapline 0.1.0
+# trapline 0.1.1
 # engine: opengrep 1.33.1 (/Users/you/.opengrep/cli/latest/opengrep)
 ```
 

data/lib/trapline/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Trapline
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: trapline
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Jose Augusto
@@ -45,10 +45,25 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '13.0'
 description: |
-  Trapline is a web editor for creating, testing and maintaining semgrep/opengrep
-  rules, with structural validation, execution with ruleid/ok annotations and a
-  draft generator from CVEs (NVD + OSV) with per-CWE templates. It works as a
-  CLI (`trapline server`), as a Rack app and mounted in a Rails app.
+  Trapline sets traps for vulnerable code: it takes you from a CVE to a tested
+  opengrep/semgrep rule.
+
+  The web editor validates the rule YAML as you type, runs it against test code
+  and highlights each finding. You mark which lines must or must not match by
+  clicking the margin or accepting results, and Trapline writes the ruleid/ok
+  annotations for you, so the test file stays in the standard --test format
+  that opengrep and semgrep read.
+
+  Give it a CVE or GHSA id and it looks the advisory up in NVD and OSV, then
+  drafts rules with test code: a template for the vulnerability class (CWE), a
+  check for vulnerable runtime images (PHP, Python, Node.js, Ruby, Go, .NET) in
+  Dockerfiles, Compose, Kubernetes, Helm and CI files, a rule that finds usage
+  of the affected package, and a taint skeleton for 14 languages. Notes explain
+  what was inferred and what still needs review.
+
+  The CLI validates rules, runs their tests in CI and generates drafts. It runs
+  standalone (trapline server), as a Rack app or mounted in Rails, with no
+  runtime dependencies besides Ruby and the opengrep or semgrep binary.
 email:
 - joseaugusto.881@outlook.com
 executables:
@@ -131,6 +146,6 @@ requirements:
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: Editor and generator for semgrep/opengrep rules, standalone or mounted in
-  Rails
+summary: 'Write, test and generate opengrep/semgrep rules: web editor, CLI and CVE-to-rule
+  drafts'
 test_files: []