~alexmurray/ubuntu-security-tools:uaudit-static-analysis-tools-refactoring

Last commit made on 2022-06-08
Get this branch:
git clone -b uaudit-static-analysis-tools-refactoring https://git.launchpad.net/~alexmurray/ubuntu-security-tools
Only Alex Murray can upload to this branch. If you are Alex Murray please log in for upload directions.

Branch merges

Branch information

Name:
uaudit-static-analysis-tools-refactoring
Repository:
lp:~alexmurray/ubuntu-security-tools

Recent commits

bb654cd... by Alex Murray

uaudit: Refactor static analysis tools handling

Introduce a StaticAnalysisTool() class to encapsulate the logic needed for
each different static analysis tool and then remove all the copy-pasta'd
code which used to handle these. This should make adding new static
analysis tools as simple as defining a new instance of this object and
adding it to the static_analysis_tools list.

Signed-off-by: Alex Murray <email address hidden>

621c6cd... by Alex Murray

uaudit: Respect --disable-coverity for analysis plus misc cleanups

Various small cleanups to make pyright give cleaner output.

Signed-off-by: Alex Murray <email address hidden>

0e5d8d6... by Alex Murray

audits/audit-code.sh: Add some support for ruby

This is quite rudimentary but at least is better than the default generic
outputs

Signed-off-by: Alex Murray <email address hidden>

e105713... by Alex Murray

uaudit: Add support for invoking flawfinder directly

Signed-off-by: Alex Murray <email address hidden>

4760df0... by Alex Murray

uaudit: Add support for using brakeman to check rails applications

Signed-off-by: Alex Murray <email address hidden>

5b7b773... by Rodrigo Figueiredo Zaiden

check-source-package: change output of rmadout

 From the previous commit, instead of just removing the URL,
 we are transforming the output of 'apt-cache madison' to
 make it look closer to rmadison's output.

58dc132... by Rodrigo Figueiredo Zaiden

check-source-package: remove http[s] from rmadout

 When 'apt-cache madison' is executed, it may contain the archive
 url in the result, and if that is the case, 'oldist' is being
 parsed as http[s] instead of a release name. Cleaning http[s]
 from the result fixes that.

58a0cbc... by Paulo Flabiano Smorigo

utilities/ceviche: improve the status for esm releases

Signed-off-by: Paulo Flabiano Smorigo <email address hidden>

bd68f81... by Paulo Flabiano Smorigo

ceviche: add --reset

Signed-off-by: Paulo Flabiano Smorigo <email address hidden>

9ec4408... by Paulo Flabiano Smorigo

ceviche: add custom settings

Signed-off-by: Paulo Flabiano Smorigo <email address hidden>