Contents

require 'bundler/audit/results/unpatched_gem'
require 'set'

module RubyAudit
  class Scanner
    class Version
      def initialize(name, version)
        @name = name
        @version = Gem::Version.new(version)
      end

      attr_reader :name, :version
    end

    def initialize
      @database = Database.new
    end

    def scan(options = {}, &block)
      return enum_for(__method__, options) unless block

      scan_ruby(options, &block)
      scan_rubygems(options, &block)

      self
    end

    def scan_ruby(options = {}, &)
      version = if RUBY_PATCHLEVEL < 0
                  ruby_version
                else
                  "#{RUBY_VERSION}.#{RUBY_PATCHLEVEL}"
                end
      specs = [Version.new(RUBY_ENGINE, version)]
      scan_inner(specs, 'ruby', options, &)
    end

    def scan_rubygems(options = {}, &)
      specs = [Version.new('rubygems-update', rubygems_version)]
      scan_inner(specs, 'rubygems', options, &)
    end

    private

    def ruby_version
      # .gsub to separate strings (e.g., 2.1.0dev -> 2.1.0.dev,
      # 2.2.0preview1 -> 2.2.0.preview.1).
      `ruby --version`.split[1]
                      .gsub(/(\d)([a-z]+)/, '\1.\2')
                      .gsub(/([a-z]+)(\d)/, '\1.\2')
    end

    def rubygems_version
      `gem --version`.strip
    end

    def scan_inner(specs, type, options = {})
      return enum_for(__method__, specs, type, options) unless block_given?

      ignore = Set[]
      ignore += options[:ignore] if options[:ignore]

      specs.each do |spec|
        @database.send(:"check_#{type}", spec) do |advisory|
          unless ignore.intersect?(advisory.identifiers.to_set)
            yield Bundler::Audit::Results::UnpatchedGem.new(spec, advisory)
          end
        end
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
ruby_audit-3.0.0	lib/ruby_audit/scanner.rb