Initial commit
This commit is contained in:
22
lib/tasks/audit.rake
Normal file
22
lib/tasks/audit.rake
Normal file
@@ -0,0 +1,22 @@
|
||||
namespace :audit do
|
||||
desc 'Print CVE audit commands (run via Docker on this machine)'
|
||||
task :help do
|
||||
puts <<~HELP
|
||||
Fibitex dependency CVE audit — see Docs/10-cve-audit.md
|
||||
|
||||
Ruby (Dena):
|
||||
docker run --rm -v "#{Dir.pwd}/../Dena:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"
|
||||
|
||||
Ruby (Dalan):
|
||||
docker run --rm -v "#{Dir.pwd}/../Dalan:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"
|
||||
|
||||
OSV (summary):
|
||||
docker run --rm -v "#{Dir.pwd}/../Dena:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
|
||||
docker run --rm -v "#{Dir.pwd}/../Dalan:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
|
||||
docker run --rm -v "#{Dir.pwd}/../Gereh:/src" ghcr.io/google/osv-scanner:latest -L /src/yarn.lock
|
||||
|
||||
Config secrets check:
|
||||
bundle exec rake config:check
|
||||
HELP
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user