yavdb 0.4.3 → 0.4.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8a4cb41f8c3e2113d9e4695706e261ee4b61e182
-  data.tar.gz: e7126734dae0a8ed99e68f75dc7b76c26549a1a4
+  metadata.gz: 9f0547b87d256354a1353e774f878fe8f750e6c2
+  data.tar.gz: cb90e74feaea0a417dc28e28471bfd8be630fff6
 SHA512:
-  metadata.gz: b606aa3c149e8bc21ca1ca428ea28c72c0ef3a89abbb97f4b09a0b04b19b47ee366cd6ebb20d17346518917ea1f3c3d6d5d8c4b58cb7a2aaf9a60776079a3df6
-  data.tar.gz: 70c45b031f08887f8ade98f64dcb37f56393f5cd7d71fb36919c6576e7187a5cea368e882675c7ded65bd06413f02b8485afbc71a2b92186582dc2385b9a8560
+  metadata.gz: 184b6626614ccde3b38cc486414ec98303aae946476acc4b98f624bec026ed96b8c651afc29b833f31625e1b7a5f7b41180f759f58a8cac1d498c194101e0055
+  data.tar.gz: 98cc1793d053550d58f90807a76a66197d9da2432308cf8ada6326bb84bd83d82e08bd00dd30e6f73b3c7759da2d263867a43375397b616392ee6b381763d84c

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    yavdb (0.4.3)
+    yavdb (0.4.4)
       json (~> 2.1)
       kramdown (~> 1.17)
       oga (~> 2.15)

data/lib/yavdb/sources/friends_of_php.rb

@@ -39,14 +39,15 @@ module YAVDB
                 file_paths.map do |file_path|
                   advisory_hash = YAML.load_file(file_path)
                   url           = "#{repository_url}/blob/master/#{file_path}"
-                  create(url, advisory_hash)
+                  filename      = File.basename(file_path, '.yml')
+                  create(url, filename, advisory_hash)
                 end
               end
             end
           end.flatten
         end
 
-        def self.create(url, advisory_hash)
+        def self.create(url, filename, advisory_hash)
           date = Date.parse('1970-01-01')
 
           versions = advisory_hash['branches'].map do |_, info|
@@ -58,7 +59,7 @@ module YAVDB
 
           package_name = advisory_hash['reference'].gsub(%r{composer:\/\/(.*)}, '\1')
 
-          vuln_id_stamp = (cves && cves[0]) || date
+          vuln_id_stamp = (cves && cves[0]) || filename
           vuln_id       = "friendsofphp:packagist:#{package_name}:#{vuln_id_stamp}"
 
           YAVDB::Advisory.new(

data/lib/yavdb/version.rb

@@ -16,6 +16,6 @@
 
 module YAVDB
 
-  VERSION = '0.4.3'
+  VERSION = '0.4.4'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: yavdb
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.4.4
 platform: ruby
 authors:
 - Rodrigo Fernandes
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-11-02 00:00:00.000000000 Z
+date: 2018-11-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler