From a7dee9fe281b62da9b3612e630c4093b51ede5b2 Mon Sep 17 00:00:00 2001 From: mylesvarns Date: Wed, 21 Feb 2024 14:56:48 -0600 Subject: [PATCH 1/2] . --- .github/workflows/main.yml | 6 +++--- README.md | 3 +-- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 92b2a24..f5c37e3 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -21,8 +21,8 @@ jobs: - name: Run brakeman run: | - bundle exec brakeman -o .github/logs/brakeman.log - if grep -q "No warnings found" .github/logs/brakeman.log; then + bundle exec brakeman -o brakeman.log + if grep -q "No warnings found" brakeman.log; then echo "BRAKEMAN_STATUS=passing" >> $GITHUB_ENV else echo "BRAKEMAN_STATUS=failing" >> $GITHUB_ENV @@ -31,7 +31,7 @@ jobs: - name: Write log status to files uses: "DamianReeves/write-file-action@master" with: - path: .github/logs/brakeman_status.json + path: brakeman_status.json write-mode: overwrite contents: | { diff --git a/README.md b/README.md index 20cf28a..261ca75 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,5 @@ ![GitHub Actions Workflow Status](https://img.shields.io/github/actions/workflow/status/mylesvarns/PixelArtGenerator/main.yml) -![Dynamic JSON Badge](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgithub.com%2Fmylesvarns%2FPixelArtGenerator%2Fblob%2Fmain%2F.github%2Flogs%2Fbrakeman_status.json&query=%24.status&logo=data%3Aimage%2Fpng%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAAAsAAAAQCAMAAAD3Y3VMAAAAIGNIUk0AAHomAACAhAAA%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%2F%2F%2F1g8240AAACUdFJOUwAAAAAAAAAAAAAAAAAniaGZn48wKpVMEAQNQpM3C4k9LZEUgQECclJeXUqLiY1LTnhWYSmo0OXZrCtvU7y92OXv7eG%2BtV%2Bc4v75%2B%2Fz8%2FOadc9LZ9Pjd1XJHl7f0%2BsWeRUynzfb7165LJL%2FX7%2Fr%2B%2FPTdwSNg1evz%2BPnx2F8dr9nl7O3ishurz9fb29OrCoezsbKztQtKdIUWAAAAAWJLR0Sen7KjCwAAAAd0SU1FB%2BgCFRQiGIQ1ElgAAAB9SURBVAgdBcGxaUJRGAbQe%2B770e%2F5LAIpLIJNkPRZwcZhnMUhskbAwhGygmKRJqkFBc%2FRLIF%2F6gXg15prd%2B9vVC%2B1bu1y3ujj7Po%2Bm%2Bcj4%2BgT4O%2B1FgCTmgC7b7XAluMpKhgIKhgIKvhhguwBDjWMgFvVI4DbvbckSfK1ak85fhNEJ101yAAAACV0RVh0ZGF0ZTpjcmVhdGUAMjAyNC0wMi0yMVQyMDozNDoyNCswMDowMJnQ0%2B0AAAAldEVYdGRhdGU6bW9kaWZ5ADIwMjQtMDItMjFUMjA6MzQ6MjQrMDA6MDDojWtRAAAAKHRFWHRkYXRlOnRpbWVzdGFtcAAyMDI0LTAyLTIxVDIwOjM0OjI0KzAwOjAwv5hKjgAAAABJRU5ErkJggg%3D%3D&logoColor=white&label=brakeman) - +![Dynamic JSON Badge](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fgithub.com%2Fmylesvarns%2FPixelArtGenerator%2Fblob%2Fmain%2Fbrakeman_status.json&query=%24%5B'status'%5D&logo=data%3Aimage%2Fpng%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAAAsAAAAQCAMAAAD3Y3VMAAAAIGNIUk0AAHomAACAhAAA%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%2F%2F%2F1g8240AAACUdFJOUwAAAAAAAAAAAAAAAAAniaGZn48wKpVMEAQNQpM3C4k9LZEUgQECclJeXUqLiY1LTnhWYSmo0OXZrCtvU7y92OXv7eG%2BtV%2Bc4v75%2B%2Fz8%2FOadc9LZ9Pjd1XJHl7f0%2BsWeRUynzfb7165LJL%2FX7%2Fr%2B%2FPTdwSNg1evz%2BPnx2F8dr9nl7O3ishurz9fb29OrCoezsbKztQtKdIUWAAAAAWJLR0Sen7KjCwAAAAd0SU1FB%2BgCFRQiGIQ1ElgAAAB9SURBVAgdBcGxaUJRGAbQe%2B770e%2F5LAIpLIJNkPRZwcZhnMUhskbAwhGygmKRJqkFBc%2FRLIF%2F6gXg15prd%2B9vVC%2B1bu1y3ujj7Po%2Bm%2Bcj4%2BgT4O%2B1FgCTmgC7b7XAluMpKhgIKhgIKvhhguwBDjWMgFvVI4DbvbckSfK1ak85fhNEJ101yAAAACV0RVh0ZGF0ZTpjcmVhdGUAMjAyNC0wMi0yMVQyMDozNDoyNCswMDowMJnQ0%2B0AAAAldEVYdGRhdGU6bW9kaWZ5ADIwMjQtMDItMjFUMjA6MzQ6MjQrMDA6MDDojWtRAAAAKHRFWHRkYXRlOnRpbWVzdGFtcAAyMDI0LTAyLTIxVDIwOjM0OjI0KzAwOjAwv5hKjgAAAABJRU5ErkJggg%3D%3D&logoColor=white&label=brakeman) Welcome to the Pixel Art Generator! This web application allows users to create pixel art easily by providing a canvas with customizable grid sizes and various features for an enhanced pixel art creation experience. Or at least, that is what one would hope. The truth is that at the moment this is just being used as a PoC and test image for CI/CD automation processes. It works, but you can find better images elsewhere as I just spun this app up from scratch in a day with no real plan on what to throw into it. From a686d4ff0e06a9475440ffa901d45d480fa7a6fc Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 21 Feb 2024 20:59:29 +0000 Subject: [PATCH 2/2] Overwritten by Github Actions step `Run brakeman` - ${date} --- brakeman.log | 23 +++++++++++++++++++++++ brakeman_status.json | 3 +++ 2 files changed, 26 insertions(+) create mode 100644 brakeman.log create mode 100644 brakeman_status.json diff --git a/brakeman.log b/brakeman.log new file mode 100644 index 0000000..16d2f40 --- /dev/null +++ b/brakeman.log @@ -0,0 +1,23 @@ + +== Brakeman Report == + +Application Path: /home/runner/work/PixelArtGenerator/PixelArtGenerator +Rails Version: 7.1.3 +Brakeman Version: 6.1.2 +Scan Date: 2024-02-21 20:59:28 +0000 +Duration: 0.604142969 seconds +Checks Run: BasicAuth, BasicAuthTimingAttack, CSRFTokenForgeryCVE, ContentTag, CookieSerialization, CreateWith, CrossSiteScripting, DefaultRoutes, Deserialize, DetailedExceptions, DigestDoS, DynamicFinders, EOLRails, EOLRuby, EscapeFunction, Evaluation, Execute, FileAccess, FileDisclosure, FilterSkipping, ForgerySetting, HeaderDoS, I18nXSS, JRubyXML, JSONEncoding, JSONEntityEscape, JSONParsing, LinkTo, LinkToHref, MailTo, MassAssignment, MimeTypeDoS, ModelAttrAccessible, ModelAttributes, ModelSerialize, NestedAttributes, NestedAttributesBypass, NumberToCurrency, PageCachingCVE, Pathname, PermitAttributes, QuoteTableName, Ransack, Redirect, RegexDoS, Render, RenderDoS, RenderInline, ResponseSplitting, RouteDoS, SQL, SQLCVEs, SSLVerify, SafeBufferManipulation, SanitizeConfigCve, SanitizeMethods, SelectTag, SelectVulnerability, Send, SendFile, SessionManipulation, SessionSettings, SimpleFormat, SingleQuotes, SkipBeforeFilter, SprocketsPathTraversal, StripTags, SymbolDoSCVE, TemplateInjection, TranslateBug, UnsafeReflection, UnsafeReflectionMethods, ValidationRegex, VerbConfusion, WeakRSAKey, WithoutProtection, XMLDoS, YAMLParsing + +== Overview == + +Controllers: 2 +Models: 1 +Templates: 3 +Errors: 0 +Security Warnings: 0 + +== Warning Types == + + +No warnings found + diff --git a/brakeman_status.json b/brakeman_status.json new file mode 100644 index 0000000..ef880c8 --- /dev/null +++ b/brakeman_status.json @@ -0,0 +1,3 @@ +{ + "status": "passing" +} \ No newline at end of file