Dawnscanner: parsing a simple sinatra application
an idea by pperego
Updated about 1 year ago. 1 hackers ♥️. 2 followers. Has no hacker: grab it!

Project Description

Dawnscanner is a ruby code security static analyzer I created in 2013. In 2021 I kickstarted the project again during HackWeek.

Now I'd like to introduce new feature like parsing code to spot serious vulnerabilities not only related to vuln depedencies.

Goal for this Hackweek

Resources

Project repository is on Github: dawnscanner.

No Hackers yet

Join this project

Looking for hackers with the skills:

ruby rubygem rubygems staticanalysis

This project is part of:

Hack Week 23

Activity

  • about 1 year ago: wfrisch liked this project.
  • about 1 year ago: pperego added keyword "ruby" to this project.
  • about 1 year ago: pperego added keyword "rubygem" to this project.
  • about 1 year ago: pperego added keyword "rubygems" to this project.
  • about 1 year ago: pperego added keyword "staticanalysis" to this project.
  • about 1 year ago: pperego originated this project.


    • Comments

    Be the first to comment!

    Similar Projects

    Recipes catalog and calculator in Rails 8 by gfilippetti

    My wife needs a website to catalog and sell the products of her upcoming bakery, and I need to learn and practice modern Rails. So I'm using this Hack Week to build a modern store using the latest Ruby on Rails best practices, ideally up to the deployment.

    TO DO

    • Index page
    • Product page
    • Admin area -- Supplies calculator based on orders -- Orders notification
    • Authentication
    • Payment
    • Deployment

    Day 1

    As my Rails knowledge was pretty outdated and I had 0 experience with Turbo (wich I want to use in the app), I started following a turbo-rails course. I completed 5 of 11 chapters.

    Day 2

    Continued the course until chapter 8 and added live updates & an empty state to the app. I should finish the course on day 3 and start my own project with the knowledge from it.

    Hackweek 24

    For this Hackweek I'll continue this project, focusing on a Catalog/Calculator for my wife's recipes so she can use for her Café.

    Day 1

    Fix RSpec tests in order to replace the ruby-ldap rubygem in OBS by enavarro_suse

    Description

    "LDAP mode is not official supported by OBS!". See: config/options.yml.example#L100-L102

    However, there is an RSpec file which tests LDAP mode in OBS. These tests use the ruby-ldap rubygem, mocking the results returned by a LDAP server.

    The ruby-ldap rubygem seems no longer maintaned, and also prevents from updating to a more recent Ruby version. A good alternative is to replace it with the net-ldap rubygem.

    Before replacing the ruby-ldap rubygem, we should modify the tests so the don't mock the responses of a LDAP server. Instead, we should modify the tests and run them against a real LDAP server.

    Goals

    Goals of this project:

    • Modify the RSpec tests and run them against a real LDAP server
    • Replace the net-ldap rubygem with the ruby-ldap rubygem

    Achieving the above mentioned goals will:

    • Permit upgrading OBS from Ruby 3.1 to Ruby 3.2
    • Make a step towards officially supporting LDAP in OBS.

    Resources