veracodecli 0.1.8 → 0.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5e5e4593b8358d58f3cdf0143b5533bfe4be989c
-  data.tar.gz: f0399615b9d3050bf8c0a8279ccfd554d3aa4dcb
+  metadata.gz: eec8f84428099ff53046e93a8cab6a8b9edf65db
+  data.tar.gz: be86390245396faa01fec4253ef99291c03d622b
 SHA512:
-  metadata.gz: 755551beef943f74e219afafc3331f8d3cd6f46c5f5701f80733ae1d5daca3fb625fe4b13d929f57eb3259979f8b9d1c71ac7fdd0282c53c913750d7a5bbb5bc
-  data.tar.gz: 05ac291117a575c834b9aa38d87a9fea0925e543c184d58beeac19b63889f29448c3ddc7b3704c84b4c7620953a87e62d4994e3d45d5df8a0b3220d53c6120a3
+  metadata.gz: 192fb71cb272e7add94a0f61e7efa96c08faab2938fd6b39e342117f5343721ed07fb4231462d96e85127aa09984a6cc3cf5e54179a2dd617dafc034c3dec51f
+  data.tar.gz: bbb4efae63922949354a7cc32fbe4734cef749e681b6264687e98d66a090caa7a6ff641a1486cb995a3ffee42e6a3b70c06905c61051a78f75afaa8a3d727533

data/README.md

@@ -19,7 +19,7 @@ gem install veracodecli
 ## Usage
 
 1. Set `VERACODE_USERNAME` and `VERACODE_PASSWORD` environment variables to your API credentials for the veracode API.
-2. To run a scan use `veracodecli scan _app\_name_ _archive\_path_
+2. To run a scan use `veracodecli scan` _app\_name_ _archive\_path_
 
 - `veracodecli help` to see commands
 - `veracodecli [command] -h` to see command syntax

data/bin/veracodecli

@@ -25,9 +25,8 @@ Commander.configure do
       options.default :business_criticality => 'High'
       options.default :business_unit => 'TELUS Digital'
       directory = "/home/#{ENV['USER']}/veracodecli_data/sast_clone"
-      VeracodeApiBase.get_repo_archive directory
-      # if !Dir.exists?(dir) then `git clone #{args[1]} #{dir}` end
-      # if Dir.exists?(dir) then `cd #{dir}; git pull; git archive --format=tar -o sast_upload.tar master` else fail 'Repository not found' end
+      VeracodeApiBase.load_config
+      VeracodeApiBase.get_repo_archive args[1], directory
       VeracodeApiMacros.submit_scan_macro args[0], options.business_criticality, options.business_unit, options.team, "#{directory}/sast_upload.tar"
       `cd #{directory}; rm -r sast_upload.tar`
     end

data/lib/veracodecli/api.rb

@@ -1,10 +1,11 @@
 require 'json'
 require 'active_support/core_ext/hash'
 require 'rest-client'
+require 'yaml'
 
 module VeracodeApiBase
   def check_environment_login_variables
-    fail 'EnvironmentError: VERACODE_USERNAME or VERACODE_PASSWORD not set.' unless !ENV['VERACODE_USERNAME'].nil? || !ENV['VERACODE_PASSWORD'].nil?
+    fail 'EnvironmentError: VERACODE_USERNAME or VERACODE_PASSWORD not set in config.' unless !ENV['VERACODE_USERNAME'].nil? || !ENV['VERACODE_PASSWORD'].nil?
   end
 
   def veracode_api_request(api_call, api_version: '4.0', **params)
@@ -12,10 +13,20 @@ module VeracodeApiBase
     response = RestClient.get "https://#{ENV['VERACODE_USERNAME']}:#{ENV['VERACODE_PASSWORD']}@analysiscenter.veracode.com/api/#{api_version}/#{api_call}", { params: params }
   end
 
-  def get_repo_archive(directory)
-    if !Dir.exists?(directory) then `git clone #{args[1]} #{directory}` end
+  def get_repo_archive(url, directory)
+    if !Dir.exists?(directory) then `git clone #{url} #{directory}` end
     if Dir.exists?(directory) then `cd #{directory}; git pull; git archive --format=tar -o sast_upload.tar master` else fail 'Repository not found' end
   end
+
+  def load_config
+    dir = "/home/#{ENV['USER']}/veracodecli_data"
+    `mkdir #{dir}` unless Dir.exists? dir
+    fail 'ConfigError: Config File not setup. Please create config.yaml at /home/$USER/veracodecli' unless File.exist?("#{dir}/config.yaml")
+    config = YAML.load_file "#{dir}/config.yaml"
+    config.each_key do |key|
+      ENV[key] = config[key]
+    end
+  end
 end
 
 module VeracodeApiScan
@@ -101,9 +112,8 @@ module VeracodeApiMacros
     app_id = get_app_id app_name
     build_id = get_most_recent_build_id app_id
     report = get_scan_report_pdf build_id
-    file = File.open "/home/#{ENV['USER']}/veracodecli_data/#{build_id}_report.pdf", 'w+'
+    file = File.open "/etc/veracodecli_data/#{build_id}_report.pdf", 'w+'
     file.write report
     file.close
   end
-
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: veracodecli
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.1.9
 platform: ruby
 authors:
 - isaiah thiessen
@@ -178,6 +178,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 2.1.0
+- !ruby/object:Gem::Dependency
+  name: psych
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.1.0
 description: Ruby based CLI for accessing veracode's api
 email: isaiah.thiessen@telus.com
 executables: