veracode 1.1.8 → 1.1.9.alpha1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 617054a5bf91d760bb14720f72d19a0f58b31928b024c4e72ef4d96f8d53938d
-  data.tar.gz: b612aadb4a34c954c3fcf48a975e16595ed8a4588bb1157c0fc56b5ee18bd576
+  metadata.gz: 67e45628823d6fd9b98e900a1cbbf2b20ccbca9460b94a69b8824cc9974a4992
+  data.tar.gz: 273acd3d3c7023f6059a975c64a65438e008d36355fee09b6e8ef3afa6457973
 SHA512:
-  metadata.gz: 6ffcf2c064b7b07a29e2ade7d9934823ebfacd914a58fcec198beca4c8ed728d2706a41afa1dbad42cc0c3ec45e7bfce94c8367d34cab3ddbf88427bc58aec00
-  data.tar.gz: 994c8a3fbc615160bd5896fe501cd15e2f70cf4b8a6f6135bc4e03e4a0bf6315351e1cb2cdde63517f07055ffac7152f231075b8a9a6497b9d9d62161a9dd85a
+  metadata.gz: 898bc78e1c768bb1385cb380746cb59872d6a0017739051f4ec526e084a17c42f838dbe7c6c8f7cd61ff9e84683044dd948b483742c5dd92e72f535b7a505dda
+  data.tar.gz: a2656de02ce4115e3e3334655038cf21f45242a1da6951898493dbe0e0e73bb14b073456fa54017941ef6c00bafdc5740d6319d2383180a6ff3cc4a4bac57abd

data/lib/veracode/version.rb

@@ -1,4 +1,4 @@
 module Veracode
-  VERSION = '1.1.8'
+  VERSION = '1.1.9.alpha1'
   ARCHIVE_VERSION = '2020-06-29'
 end

data/lib/veracode.rb

@@ -38,6 +38,8 @@ module Veracode
 
   @expanded_app_dir = Dir.getwd
 
+  @app_patterns = ["lib/**/*.rb", "app/**/*.rb"]
+
   def self.init
     if Gem::Dependency.new('', '~> 2.2.0').match?('', RUBY_VERSION.dup)
       $stderr.puts "Ruby 2.2 is not supported, please consult the compilation guide for all supported Ruby versions"
@@ -244,6 +246,25 @@ module Veracode
 
   def self.rebaseline
     self.baseline
+
+    # Modules for the application files should never be in the baseline modules when rebaselining
+    if Module.respond_to? :const_source_location
+      app_files = @app_patterns.each_with_object(Set.new) do |p, s|
+          s.merge(Dir.glob(p).collect { |f| File.expand_path f } )
+      end
+      @baseline_modules.reject! do |m| 
+        ret = false
+        begin
+          mn = m.name
+          unless mn.nil? 
+            csl = Module.const_source_location(mn.to_sym)
+            ret = !csl[0].nil? && app_files.include?(csl[0])
+          end
+        rescue
+        end
+        ret
+      end
+    end
   end
 
   def self.update
@@ -287,6 +308,7 @@ module Veracode
         log_error "Unable to require #{File.expand_path(f).to_s.dump} (#{e.message})"
       else
         puts "(OK: #{(required ? "required" : "already required")})" if $options[:verbose]
+        log_error "WARNING: #{File.expand_path(f).to_s.dump} was already required"
       end
       any_new |= required
       total += 1
@@ -649,7 +671,7 @@ module Veracode
       "ActiveJob::",
       "ActiveSupport::",
       "ActiveStorage::",
-      "ActionView::(?!CompiledTemplates)", #Allows Compiled templates with the not group
+      "ActionView::",
       "ActiveRecord::",
     ]
     objects = objects.reject do |o|
@@ -670,7 +692,6 @@ module Veracode
 
       add_to_archive "#{o.class.to_s.downcase} #{quote(sn)}\n" + 
                    ( o.is_a?(Class)  ? class_header(o)  : "") + # superclass
-                   ( @rails6 && sn == "ActionView::Base" ? "include \"ActionView::CompiledTemplates\"\n" : "") + #hack for rails 6 compiled template output
                    ( o.is_a?(Module) ? module_header(o) : "") + # included modules
                    ( o.is_a?(Object) ? object_contents(o, with_disasm) : "") + 
                    ( o.is_a?(Module) ? module_contents(o, with_disasm) : "") + 
@@ -694,6 +715,10 @@ module Veracode
         end
       end
       # fake the module outpput to match what SAF expects from Rails <= 5
+      add_to_archive "class \"ActionView::Base\"\n" +
+                    "superclass \"Object\"\n" +
+                    "include \"ActionView::CompiledTemplates\"\n" +
+                    "endclass\n\n"
       add_to_archive "module \"ActionView::CompiledTemplates\"\n" + 
                     "extend \"ActiveSupport::Dependencies::ModuleConstMissing\"\n" +
                     "extend \"Module::Concerning\"\n" +
@@ -1071,8 +1096,7 @@ end
       any_new = true
       while any_new
         any_new = false
-        any_new |= glob_require "lib/**/*.rb"
-        any_new |= glob_require "app/**/*.rb"
+        @app_patterns.each { |p| any_new |= glob_require p }
         puts "new successful requires? #{any_new.to_s}" if $options[:verbose]
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: veracode
 version: !ruby/object:Gem::Version
-  version: 1.1.8
+  version: 1.1.9.alpha1
 platform: ruby
 authors:
 - Veracode
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-09-22 00:00:00.000000000 Z
+date: 2025-12-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubyzip
@@ -50,9 +50,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.1.6
 signing_key: