yavdb 0.1.0.pre.alpha.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (39) hide show
  1. checksums.yaml +7 -0
  2. data/.circleci/config.yml +48 -0
  3. data/.gitignore +115 -0
  4. data/.rspec +3 -0
  5. data/.rubocop.yml +339 -0
  6. data/.ruby-version +1 -0
  7. data/CODE_OF_CONDUCT.md +74 -0
  8. data/Gemfile +4 -0
  9. data/Gemfile.lock +85 -0
  10. data/LICENSE +661 -0
  11. data/README.md +87 -0
  12. data/Rakefile +6 -0
  13. data/bin/console +7 -0
  14. data/bin/setup +8 -0
  15. data/bin/vulndb +3 -0
  16. data/bin/vulnerabilitydb +3 -0
  17. data/bin/yavdb +5 -0
  18. data/lib/yavdb.rb +68 -0
  19. data/lib/yavdb/cli.rb +60 -0
  20. data/lib/yavdb/constants.rb +34 -0
  21. data/lib/yavdb/crawler.rb +52 -0
  22. data/lib/yavdb/database.rb +95 -0
  23. data/lib/yavdb/dtos/advisory.rb +102 -0
  24. data/lib/yavdb/source_types/git_repo.rb +35 -0
  25. data/lib/yavdb/sources/friends_of_php.rb +87 -0
  26. data/lib/yavdb/sources/nodesecurity_io.rb +120 -0
  27. data/lib/yavdb/sources/ossindex.rb +137 -0
  28. data/lib/yavdb/sources/ruby_advisory.rb +117 -0
  29. data/lib/yavdb/sources/snyk_io.rb +311 -0
  30. data/lib/yavdb/sources/victims.rb +105 -0
  31. data/lib/yavdb/utils/cache.rb +96 -0
  32. data/lib/yavdb/utils/exec.rb +36 -0
  33. data/lib/yavdb/utils/git.rb +61 -0
  34. data/lib/yavdb/utils/http.rb +56 -0
  35. data/lib/yavdb/utils/semver.rb +79 -0
  36. data/lib/yavdb/utils/zip.rb +64 -0
  37. data/lib/yavdb/version.rb +21 -0
  38. data/yavdb.gemspec +44 -0
  39. metadata +267 -0
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: 33175f8427320ef9d1ed8421f965cb7e32899f0b
4
+ data.tar.gz: 77d7ab227ab34539f4a73308ff0a638a1cbb546a
5
+ SHA512:
6
+ metadata.gz: aa6bedf1169b70eaa9e74e88911f5e673b5f0f5bdd9d442e5c07f4c4c3c8c301c90fc4cd6be11cb9229ea0394e80ec85a53597f18e4834fd719ba25be8141d3c
7
+ data.tar.gz: 3d4e45d7461ffed3ee11cf4f30d98925db37581f7f6c9118df6b4385d91e9d80304c71249fc0b66d321d76aab4ed6466bd00d44af135ab7e4c23c7dbf8763262
data/.circleci/config.yml ADDED
@@ -0,0 +1,48 @@
1
+ version: 2
2
+
3
+ jobs:
4
+ build-lint-test:
5
+ working_directory: ~/yavdb
6
+ docker:
7
+ - image: circleci/ruby:2.3.7
8
+ steps:
9
+ - checkout
10
+
11
+ - name: Install Bundler Version
12
+ type: shell
13
+ command: gem install bundler -v 1.16
14
+
15
+ - name: Restore cache
16
+ type: cache-restore
17
+ key: yavdb-{{ checksum "Gemfile.lock" }}
18
+
19
+ - name: Bundle Install
20
+ type: shell
21
+ command: bundle install --path /tmp/vendor/bundle
22
+
23
+ - name: Save bundler cache
24
+ type: cache-save
25
+ key: yavdb-{{ checksum "Gemfile.lock" }}
26
+ paths:
27
+ - /tmp/vendor/bundle
28
+ - ~/.yavdb/cache
29
+
30
+ - name: Save yavdb cache
31
+ type: cache-save
32
+ key: yavdb-cache-1
33
+ paths:
34
+ - ~/.yavdb/cache
35
+
36
+ - name: Rubocop
37
+ type: shell
38
+ command: bundle exec rubocop
39
+
40
+ - name: Tests
41
+ type: shell
42
+ command: bundle exec rake
43
+
44
+ workflows:
45
+ version: 2
46
+ test-and-publish:
47
+ jobs:
48
+ - build-lint-test
data/.gitignore ADDED
@@ -0,0 +1,115 @@
1
+ # Created by https://www.gitignore.io/api/jetbrains,ruby
2
+
3
+ ### JetBrains ###
4
+ # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and Webstorm
5
+ # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
6
+
7
+ # User-specific stuff:
8
+ .idea/workspace.xml
9
+ .idea/tasks.xml
10
+
11
+ # Sensitive or high-churn files:
12
+ .idea/dataSources/
13
+ .idea/dataSources.ids
14
+ .idea/dataSources.xml
15
+ .idea/dataSources.local.xml
16
+ .idea/sqlDataSources.xml
17
+ .idea/dynamic.xml
18
+ .idea/uiDesigner.xml
19
+
20
+ # Gradle:
21
+ .idea/gradle.xml
22
+ .idea/libraries
23
+
24
+ # Mongo Explorer plugin:
25
+ .idea/mongoSettings.xml
26
+
27
+ ## File-based project format:
28
+ *.iws
29
+
30
+ ## Plugin-specific files:
31
+
32
+ # IntelliJ
33
+ /out/
34
+
35
+ # mpeltonen/sbt-idea plugin
36
+ .idea_modules/
37
+
38
+ # JIRA plugin
39
+ atlassian-ide-plugin.xml
40
+
41
+ # Crashlytics plugin (for Android Studio and IntelliJ)
42
+ com_crashlytics_export_strings.xml
43
+ crashlytics.properties
44
+ crashlytics-build.properties
45
+ fabric.properties
46
+
47
+ ### JetBrains Patch ###
48
+ # Comment Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-215987721
49
+
50
+ # *.iml
51
+ # modules.xml
52
+ # .idea/misc.xml
53
+ # *.ipr
54
+
55
+
56
+ ### Ruby ###
57
+ *.gem
58
+ *.rbc
59
+ /.config
60
+ /coverage/
61
+ /InstalledFiles
62
+ /pkg/
63
+ /spec/reports/
64
+ /spec/examples.txt
65
+ /test/tmp/
66
+ /test/version_tmp/
67
+ /tmp/
68
+
69
+ # rspec failure tracking
70
+ .rspec_status
71
+
72
+ # Used by dotenv library to load environment variables.
73
+ # .env
74
+
75
+ ## Specific to RubyMotion:
76
+ .dat*
77
+ .repl_history
78
+ build/
79
+ *.bridgesupport
80
+ build-iPhoneOS/
81
+ build-iPhoneSimulator/
82
+
83
+ ## Specific to RubyMotion (use of CocoaPods):
84
+ #
85
+ # We recommend against adding the Pods directory to your .gitignore. However
86
+ # you should judge for yourself, the pros and cons are mentioned at:
87
+ # https://guides.cocoapods.org/using/using-cocoapods.html#should-i-check-the-pods-directory-into-source-control
88
+ #
89
+ # vendor/Pods/
90
+
91
+ ## Documentation cache and generated files:
92
+ /.yardoc/
93
+ /_yardoc/
94
+ /doc/
95
+ /rdoc/
96
+
97
+ ## Environment normalization:
98
+ /.bundle/
99
+ /vendor/bundle
100
+ /lib/bundler/man/
101
+ /spec/coverage/
102
+
103
+ # for a library or gem, you might want to ignore these files since the code is
104
+ # intended to run in multiple environments; otherwise, check them in:
105
+ # Gemfile.lock
106
+ # .ruby-version
107
+ # .ruby-gemset
108
+
109
+ # unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
110
+ .rvmrc
111
+
112
+ # End of https://www.gitignore.io/api/jetbrains,ruby
113
+
114
+ .idea/
115
+ *.iml
data/.rspec ADDED
@@ -0,0 +1,3 @@
1
+ --format documentation
2
+ --color
3
+ --require spec_helper
data/.rubocop.yml ADDED
@@ -0,0 +1,339 @@
1
+ AllCops:
2
+ # Include common Ruby source files.
3
+ Include:
4
+ - '**/*.builder'
5
+ - '**/*.fcgi'
6
+ - '**/*.gemspec'
7
+ - '**/*.god'
8
+ - '**/*.jb'
9
+ - '**/*.jbuilder'
10
+ - '**/*.mspec'
11
+ - '**/*.opal'
12
+ - '**/*.pluginspec'
13
+ - '**/*.podspec'
14
+ - '**/*.rabl'
15
+ - '**/*.rake'
16
+ - '**/*.rb'
17
+ - '**/*.rbuild'
18
+ - '**/*.rbw'
19
+ - '**/*.rbx'
20
+ - '**/*.ru'
21
+ - '**/*.ruby'
22
+ - '**/*.spec'
23
+ - '**/*.thor'
24
+ - '**/*.watchr'
25
+ - '**/.irbrc'
26
+ - '**/.pryrc'
27
+ - '**/buildfile'
28
+ - '**/config.ru'
29
+ - '**/Appraisals'
30
+ - '**/Berksfile'
31
+ - '**/Brewfile'
32
+ - '**/Buildfile'
33
+ - '**/Capfile'
34
+ - '**/Cheffile'
35
+ - '**/Dangerfile'
36
+ - '**/Deliverfile'
37
+ - '**/Fastfile'
38
+ - '**/*Fastfile'
39
+ - '**/Gemfile'
40
+ - '**/Guardfile'
41
+ - '**/Jarfile'
42
+ - '**/Mavenfile'
43
+ - '**/Podfile'
44
+ - '**/Puppetfile'
45
+ - '**/Rakefile'
46
+ - '**/Snapfile'
47
+ - '**/Thorfile'
48
+ - '**/Vagabondfile'
49
+ - '**/Vagrantfile'
50
+ Exclude:
51
+ - 'database/**/*'
52
+ - 'db/**/*'
53
+ - 'tmp/**/*'
54
+ - 'vendor/**/*'
55
+ - 'bin/**/*'
56
+ - 'log/**/*'
57
+ DefaultFormatter: progress
58
+ UseCache: false
59
+ DisplayCopNames: false
60
+ TargetRubyVersion: 2.3.7
61
+
62
+ Gemspec/OrderedDependencies:
63
+ Enabled: true
64
+
65
+ Layout/CaseIndentation:
66
+ Enabled: true
67
+ IndentOneStep: true
68
+
69
+ Layout/CommentIndentation:
70
+ Enabled: true
71
+
72
+ Layout/EmptyLineAfterMagicComment:
73
+ Enabled: true
74
+
75
+ Layout/EmptyLinesAroundAccessModifier:
76
+ Enabled: true
77
+
78
+ Layout/EmptyLinesAroundBlockBody:
79
+ Enabled: true
80
+
81
+ Layout/EmptyLinesAroundClassBody:
82
+ Enabled: true
83
+ EnforcedStyle: empty_lines_except_namespace
84
+
85
+ Layout/EmptyLinesAroundMethodBody:
86
+ Enabled: true
87
+
88
+ Layout/EmptyLinesAroundModuleBody:
89
+ Enabled: true
90
+ EnforcedStyle: empty_lines_except_namespace
91
+
92
+ Layout/ExtraSpacing:
93
+ Enabled: true
94
+
95
+ Layout/FirstParameterIndentation:
96
+ Enabled: true
97
+ EnforcedStyle: consistent
98
+ IndentationWidth: 2
99
+
100
+ Layout/IndentArray:
101
+ Enabled: true
102
+
103
+ Layout/IndentAssignment:
104
+ Enabled: true
105
+
106
+ Layout/IndentHash:
107
+ Enabled: true
108
+
109
+ Layout/MultilineHashBraceLayout:
110
+ Enabled: true
111
+
112
+ Layout/MultilineMethodCallIndentation:
113
+ Enabled: true
114
+ EnforcedStyle: indented_relative_to_receiver
115
+ IndentationWidth: 2
116
+
117
+ Layout/MultilineOperationIndentation:
118
+ Enabled: true
119
+
120
+ Layout/SpaceAfterComma:
121
+ Enabled: true
122
+
123
+ Layout/AlignParameters:
124
+ Enabled: true
125
+ EnforcedStyle: with_fixed_indentation
126
+
127
+ Layout/SpaceAroundOperators:
128
+ Enabled: true
129
+ AllowForAlignment: true
130
+ Exclude:
131
+ - "lib/yavdb/sources/nvd_constants.rb"
132
+
133
+ Layout/SpaceInsideBlockBraces:
134
+ Enabled: true
135
+ EnforcedStyle: space
136
+ EnforcedStyleForEmptyBraces: space
137
+
138
+ Layout/SpaceInsideHashLiteralBraces:
139
+ Enabled: true
140
+
141
+ Lint/IneffectiveAccessModifier:
142
+ Enabled: true
143
+
144
+ Lint/LiteralAsCondition:
145
+ Enabled: true
146
+
147
+ Lint/UnusedMethodArgument:
148
+ Enabled: true
149
+
150
+ Lint/UselessAccessModifier:
151
+ Enabled: true
152
+
153
+ Lint/UselessAssignment:
154
+ Enabled: true
155
+
156
+ Lint/HandleExceptions:
157
+ Enabled: true
158
+ Exclude:
159
+ - "lib/yavdb/sources/snyk_io.rb"
160
+
161
+ Metrics/AbcSize:
162
+ Enabled: true
163
+ Max: 113
164
+
165
+ Metrics/BlockLength:
166
+ Enabled: true
167
+ Max: 51
168
+ Exclude:
169
+ - "spec/snyk_io_spec.rb"
170
+
171
+ Metrics/ClassLength:
172
+ Enabled: false
173
+ Max: 199
174
+
175
+ Metrics/CyclomaticComplexity:
176
+ Enabled: false
177
+ Max: 15
178
+
179
+ Metrics/LineLength:
180
+ Enabled: false
181
+ Max: 147
182
+
183
+ Metrics/MethodLength:
184
+ Enabled: false
185
+ Max: 94
186
+
187
+ Metrics/ModuleLength:
188
+ Enabled: false
189
+ Max: 2557
190
+
191
+ Metrics/PerceivedComplexity:
192
+ Enabled: false
193
+ Max: 11
194
+
195
+ Metrics/ParameterLists:
196
+ Enabled: true
197
+ Exclude:
198
+ - lib/yavdb/dtos/advisory.rb
199
+
200
+ Performance/RedundantBlockCall:
201
+ Enabled: true
202
+
203
+ Security/MarshalLoad:
204
+ Enabled: true
205
+ Exclude:
206
+ - 'lib/yavdb/utils/cache.rb'
207
+
208
+ Security/YAMLLoad:
209
+ Enabled: true
210
+
211
+ Style/BlockDelimiters:
212
+ Enabled: true
213
+
214
+ Style/BracesAroundHashParameters:
215
+ Enabled: true
216
+
217
+ Style/CaseEquality:
218
+ Enabled: true
219
+
220
+ Style/ClassCheck:
221
+ Enabled: true
222
+
223
+ Style/ColonMethodCall:
224
+ Enabled: true
225
+
226
+ Style/ConditionalAssignment:
227
+ Enabled: true
228
+
229
+ Style/DateTime:
230
+ Enabled: true
231
+
232
+ Style/DefWithParentheses:
233
+ Enabled: true
234
+
235
+ Style/Documentation:
236
+ Enabled: false
237
+
238
+ Style/EmptyElse:
239
+ Enabled: true
240
+
241
+ Style/EmptyLiteral:
242
+ Enabled: true
243
+
244
+ Style/Encoding:
245
+ Enabled: true
246
+
247
+ Style/FrozenStringLiteralComment:
248
+ Enabled: false
249
+
250
+ Style/GuardClause:
251
+ Enabled: true
252
+
253
+ Style/HashSyntax:
254
+ Enabled: true
255
+ EnforcedStyle: hash_rockets
256
+
257
+ Style/IdenticalConditionalBranches:
258
+ Enabled: true
259
+
260
+ Style/IfUnlessModifier:
261
+ Enabled: true
262
+
263
+ Style/InfiniteLoop:
264
+ Enabled: true
265
+
266
+ Style/InverseMethods:
267
+ Enabled: true
268
+
269
+ Style/Lambda:
270
+ Enabled: true
271
+ EnforcedStyle: lambda
272
+
273
+ Style/MultilineBlockChain:
274
+ Enabled: true
275
+
276
+ Style/MutableConstant:
277
+ Enabled: false
278
+
279
+ Style/Next:
280
+ Enabled: true
281
+
282
+ Style/PercentLiteralDelimiters:
283
+ Enabled: true
284
+
285
+ Style/RedundantSelf:
286
+ Enabled: true
287
+
288
+ Style/RegexpLiteral:
289
+ Enabled: true
290
+ EnforcedStyle: percent_r
291
+
292
+ Style/RescueModifier:
293
+ Enabled: true
294
+
295
+ Style/SafeNavigation:
296
+ Enabled: true
297
+
298
+ Style/SpecialGlobalVars:
299
+ Enabled: true
300
+ EnforcedStyle: use_english_names
301
+
302
+ Style/StringLiterals:
303
+ Enabled: true
304
+ EnforcedStyle: single_quotes
305
+ ConsistentQuotesInMultiline: true
306
+
307
+ Style/StructInheritance:
308
+ Enabled: false
309
+
310
+ Style/SymbolProc:
311
+ Enabled: true
312
+
313
+ Style/TrailingCommaInArguments:
314
+ Enabled: true
315
+ EnforcedStyleForMultiline: no_comma
316
+
317
+ Style/TrailingCommaInArrayLiteral:
318
+ Enabled: true
319
+ EnforcedStyleForMultiline: no_comma
320
+
321
+ Style/TrailingCommaInHashLiteral:
322
+ Enabled: true
323
+ EnforcedStyleForMultiline: no_comma
324
+
325
+ Style/UnneededInterpolation:
326
+ Enabled: true
327
+
328
+ Style/UnneededPercentQ:
329
+ Enabled: true
330
+
331
+ Style/WhileUntilDo:
332
+ Enabled: true
333
+
334
+ Style/WordArray:
335
+ Enabled: true
336
+ EnforcedStyle: brackets
337
+
338
+ Style/RescueStandardError:
339
+ Enabled: true