23 lines
991 B
Ruby
23 lines
991 B
Ruby
namespace :audit do
|
|
desc 'Print CVE audit commands (run via Docker on this machine)'
|
|
task :help do
|
|
puts <<~HELP
|
|
Fibitex dependency CVE audit — see Docs/10-cve-audit.md
|
|
|
|
Ruby (Dena):
|
|
docker run --rm -v "#{Dir.pwd}/../Dena:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"
|
|
|
|
Ruby (Dalan):
|
|
docker run --rm -v "#{Dir.pwd}/../Dalan:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"
|
|
|
|
OSV (summary):
|
|
docker run --rm -v "#{Dir.pwd}/../Dena:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
|
|
docker run --rm -v "#{Dir.pwd}/../Dalan:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
|
|
docker run --rm -v "#{Dir.pwd}/../Gereh:/src" ghcr.io/google/osv-scanner:latest -L /src/yarn.lock
|
|
|
|
Config secrets check:
|
|
bundle exec rake config:check
|
|
HELP
|
|
end
|
|
end
|