@regulaforensics/react-native-document-reader-core-bounds 7.5.893 → 7.6.82-rc

package/.gitlab/report.yaml

@@ -0,0 +1,75 @@
+spec:
+  inputs:
+    stage:
+      default: reports
+    image:
+      default: ubuntu:22.04
+    ignore_vulnerabilities:
+      default: "false"
+    sast_report_file:
+      default: gl-sast-report.json
+    secret_detection_report_file:
+      default: gl-secret-detection-report.json
+    dependency_scanning_report_file:
+      default: gl-dependency-scanning-report.json
+---
+
+view reports:
+  image: $[[ inputs.image ]]
+  stage: $[[ inputs.stage ]]
+  variables:
+    IGNORE_VULNERABILITIES: $[[ inputs.ignore_vulnerabilities ]]
+    SAST_REPORT_FILE: $[[ inputs.sast_report_file ]]
+    SECRET_DETECTION_REPORT_FILE: $[[ inputs.secret_detection_report_file ]]
+    DEPENDENCY_SCANNING_REPORT_FILE: $[[ inputs.dependency_scanning_report_file ]]
+    RED: \033[0;31m
+    YELLOW: \033[1;33m
+    GREEN: \033[0;32m
+    NC: \033[0m
+  needs:
+    - job: semgrep-sast
+      artifacts: true
+    - job: secret_detection
+      artifacts: true
+    - job: gemnasium-dependency_scanning
+      artifacts: true
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  script:
+    - ls -la
+    - apt update && apt install -y jq
+    - |
+      for f in SAST_REPORT_FILE SECRET_DETECTION_REPORT_FILE DEPENDENCY_SCANNING_REPORT_FILE
+      do
+        if [[ -f "${!f}" ]]
+        then
+          echo -e "${GREEN}File ${!f} exists, adding report${NC}"
+          r=${f/%_FILE}
+          declare $r="$(cat ${!f} | jq 'select(.vulnerabilities != []).vulnerabilities')"
+          if [[ ! -z "${!r}" ]]
+          then
+            VULNERABILITIES_FOUND=true
+            echo -e "${RED}Found $r vulnerabilities${NC}"
+            echo "${!r}"
+            echo
+          fi
+        else
+          echo -e "${YELLOW}File ${!f} doesn't exist, skipping${NC}"
+        fi
+      done
+
+      if [[ "$VULNERABILITIES_FOUND" == true ]]
+      then
+        if [[ "$IGNORE_VULNERABILITIES" == true ]]
+        then
+          echo -e "${GREEN}All found vulnerabilities were ignored due to IGNORE_VULNERABILITIES=true${NC}"
+          exit 0
+        else
+          echo -e "${RED}Vulnerabilities found, please see reports above${NC}"
+          exit 1
+        fi
+      fi
+
+      echo -e "${GREEN}No vulnerabilities found${NC}"
+
+      exit 0

package/.gitlab-ci.yml

@@ -0,0 +1,49 @@
+stages:
+  - test
+  - reports
+
+include:
+  - template: Jobs/SAST.gitlab-ci.yml
+  - template: Jobs/Secret-Detection.gitlab-ci.yml
+  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
+  - local: .gitlab/report.yaml
+    rules:
+      - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    inputs:
+      stage: reports
+      image: ubuntu:22.04
+      ignore_vulnerabilities: "false"
+      sast_report_file: gl-sast-report.json
+      secret_detection_report_file: gl-secret-detection-report.json
+      dependency_scanning_report_file: gl-dependency-scanning-report.json
+
+trivy scan:
+  stage: test
+  image: aquasec/trivy
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  script:
+    - trivy fs --severity CRITICAL,HIGH,MEDIUM,LOW --ignore-unfixed --db-repository container-registry.regula.local:80/aquasecurity/trivy-db:2 --exit-code 1 .
+
+semgrep-sast:
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  artifacts:
+    paths:
+      - gl-sast-report.json
+
+secret_detection:
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  artifacts:
+    paths:
+      - gl-secret-detection-report.json
+
+gemnasium-dependency_scanning:
+  variables:
+    DS_MAX_DEPTH: -1
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  artifacts:
+    paths:
+      - gl-dependency-scanning-report.json

package/RNDocumentReaderCore.podspec

@@ -13,8 +13,8 @@ Pod::Spec.new do |s|
 
   s.source       = { :http => 'file:' + __dir__ }
 
-  s.ios.deployment_target = '11.0'
-  s.dependency 'DocumentReaderBounds', '7.5.11013'
+  s.ios.deployment_target = '13.0'
+  s.dependency 'DocumentReaderBoundsStage', '7.6.11869'
 
   s.dependency 'React'
 end

package/android/build.gradle

@@ -19,7 +19,7 @@ android {
 rootProject.allprojects {
     repositories {
         maven {
-            url "https://maven.regulaforensics.com/RegulaDocumentReader"
+            url "https://maven.regulaforensics.com/RegulaDocumentReader/Stage"
         }
     }
 }
@@ -28,6 +28,6 @@ dependencies {
     //noinspection GradleDynamicVersion
     implementation 'com.facebook.react:react-native:+'
 	//noinspection GradleDependency
-	implementation 'com.regula.documentreader.core:bounds:7.5.12253'
+	implementation 'com.regula.documentreader.core:bounds:7.6.13518'
 }
   

package/package.json

@@ -1,17 +1,13 @@
 {
   "name": "@regulaforensics/react-native-document-reader-core-bounds",
-  "version": "7.5.893",
+  "version": "7.6.82-rc",
   "description": "React Native module for reading and validation of identification documents (Core framework)",
   "main": "index.js",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "keywords": [
-    "react-native",
-    "documentreader",
-    "reader",
-    "scanner",
-    "regula"
+    "react-native", "documentreader", "reader", "scanner", "regula"
   ],
   "author": "Regulaforensics",
   "license": "commercial",