veracode_api_signing 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b54457a3688bd05cddfa987d2108bafee7117a99c6c714b55449be557453f641
-  data.tar.gz: 8b3c9a68b6a9b84eb37d6d0316dbc8896816a024d080c267dbabf32048d005f0
+  metadata.gz: fa139e4b995055cb38e595a143f8c517876f08ba5aeed47396aea6a66beeac2c
+  data.tar.gz: 2da1eecb8daffa37c29ac45056fa6fe2a3b56d1aa98dd5421b58d7e8c2717628
 SHA512:
-  metadata.gz: 74048c1b89767bebf23d97fdf008242b2e9426f010cc37895f542eac45d1bca4cdc6dae27786074ce28694ca4b3343812046fde991bbf2f60f0b7ba9b40f4ba2
-  data.tar.gz: acafff7e48b693de9a927a4a1dbc20b5562b9a02a19e2bff31ca2ec35ea1770c19f8d82b89a90cb3b9032cd5be2cc83f119ee4a764cbf99f3ba7584b299531fb
+  metadata.gz: 349a94f1a7e8c6f050f3396044ddb98e2bb55254025c802d36e71ffd639c3c7f6e044736f0da1b1e5773485024beb9f9a752a5491408847fe4626c0f0dfa66f4
+  data.tar.gz: 0eae70878568fb4a963cbdc7296adca269115213e6ea9fb5a1add586bbd34372b55a162b5fbd8765cb241794f067e3adb56710805dca50f99e25869b9775db1f

data/.brakeman.ignore

@@ -0,0 +1,22 @@
+{
+  "ignored_warnings": [
+    {
+      "warning_type": "Authentication",
+      "warning_code": 101,
+      "fingerprint": "ed197e75289bf8a8e2150b832564f162bd93b971008455079f89032792a0e0f1",
+      "check_name": "Secrets",
+      "message": "Hardcoded value for `ENV_API_SECRET_KEY_NAME` in source code",
+      "file": "lib/veracode_api_signing/credentials.rb",
+      "line": 10,
+      "link": "https://brakemanscanner.org/docs/warning_types/authentication/",
+      "code": null,
+      "render_path": null,
+      "location": null,
+      "user_input": null,
+      "confidence": "Medium",
+      "note": "Not actually a hardcoded secret, this value represents the name of the environment variable used when looking for credentials."
+    }
+  ],
+  "updated": "2021-12-24 09:06:49 -0700",
+  "brakeman_version": "5.2.0"
+}

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    veracode_api_signing (1.0.0)
+    veracode_api_signing (1.0.1)
 
 GEM
   remote: https://rubygems.org/

data/Rakefile

@@ -19,7 +19,7 @@ namespace :brakeman do
     require "brakeman"
 
     files = args[:output_files].split if args[:output_files]
-    Brakeman.run app_path: ".", output_files: files, print_report: true, run_all_checks: true, force_scan: true
+    Brakeman.run app_path: ".", output_files: files, print_report: true, run_all_checks: true, force_scan: true, ignore_file: ".brakeman.ignore"
   end
 end
 

data/lib/veracode_api_signing/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module VeracodeApiSigning
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

data/veracode_api_signing.gemspec

@@ -40,4 +40,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rubocop-rspec", "~> 2.5"
   spec.add_development_dependency "simplecov", "~> 0.21.2"
   spec.add_development_dependency "yard", "~> 0.9.26"
+  spec.metadata = {
+    "rubygems_mfa_required" => "true"
+  }
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: veracode_api_signing
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Corban Raun
@@ -157,6 +157,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".brakeman.ignore"
 - ".github/workflows/codeql-analysis.yml"
 - ".github/workflows/tests.yml"
 - ".gitignore"
@@ -187,11 +188,7 @@ homepage: https://CorbanR.github.io/veracode_api_signing
 licenses:
 - MIT
 metadata:
-  allowed_push_host: https://rubygems.org/
-  homepage_uri: https://CorbanR.github.io/veracode_api_signing
-  documentation_uri: https://www.raunco.co/veracode_api_signing/
-  source_code_uri: https://github.com/CorbanR/veracode_api_signing
-  changelog_uri: https://github.com/CorbanR/veracode_api_signing/blob/main/CHANGELOG.md
+  rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: []
 require_paths: