ruby3.2-elastic-transport/8.3.5 package update #24067
Conversation
![octo-sts[bot]](https://avatars.githubusercontent.com/in/801323?s=60&v=4){kind=small}
octo-sts
bot
commented
Jul 16, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
octo-sts
bot
added
request-version-update
Package ruby3.2-elastic-transport: Click to expand/collapsePackage ruby3.2-elastic-transport:
Added: /usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/.github/check_license_headers.rb bincapz found differences: Click to expand/collapseChanged: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/loggable.rb [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | net/http/post | submit content to websites | POST http |
| -MEDIUM | net/url/request | requests resources via URL | http.request |
| -LOW | ref/words/password | references a 'password' | password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/adapters_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/response_test.rb (similarity: 0.95)
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/var/lib/db/sbom/ruby3.2-elastic-transport-8.3.5-r0.spdx.json [✅ LOW → ⚠️ MEDIUM]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | downloadLocation |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/.github/check_license_headers.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/transport/base_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/redacted.rb (similarity: 0.93)
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/connection.rb (similarity: 0.99)
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/words/password | references a 'password' | password |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/serializer/multi_json.rb (similarity: 0.92)
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/faraday.rb
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/errors.rb (similarity: 0.91)
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/url | Handles URL strings | RequestURI |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/profile/client_benchmark_test.rb [✅ LOW → ⚠️ MEDIUM]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/test_helper.rb
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_manticore_test.rb [✅ LOW → ⚠️ MEDIUM]
3 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
| +LOW | net/http/request | makes HTTP requests | User-Agent |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/version.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/sniffer_spec.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/words/password | references a 'password' | password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/transport/base_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/connections/selector_spec.rb (similarity: 0.92)
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/connection_test.rb
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic-transport.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/meta_header.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/opentelemetry.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/manticore_spec.rb [✅ LOW → ⚠️ MEDIUM]
3 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +LOW | compression/gzip | works with gzip files | gzip |
| +LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/opentelemetry_spec.rb
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | exec/shell_command | execute a shell command | system |
| +MEDIUM | net/url/request | requests resources via URL | http.request |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/transport_base_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/serializer_test.rb (similarity: 0.93) [⚠️ MEDIUM → ✅ LOW]
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/base.rb (similarity: 0.92) [✅ LOW → ⚠️ MEDIUM]
7 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/fetch | Invokes curl | curl -X |
| +MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
| +LOW | compression/gzip | works with gzip files | gzip |
| +LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
| +LOW | net/http/request | makes HTTP requests | User-Agent |
| +LOW | random/insecure | generate random numbers insecurely | rand |
| +LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/integration/jruby_test.rb [⚠️ MEDIUM → ✅ LOW]
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | net/http/post | submit content to websites | POST http |
| -MEDIUM | net/url/request | requests resources via URL | http.request |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/selector.rb
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/connections/collection_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/curb_spec.rb (similarity: 0.91) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +LOW | compression/gzip | works with gzip files | gzip |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/connections/collection_spec.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/client_spec.rb [✅ LOW → ⚠️ MEDIUM]
7 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./certificate |
| +LOW | compression/gzip | works with gzip files | gzip |
| +LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
| +LOW | net/http/request | makes HTTP requests | User-Agent |
| +LOW | net/socket/listen | listen on a socket | accept socket |
| +LOW | net/socket/send | send a message to a socket | send socket |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/manticore.rb
4 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +MEDIUM | ref/path/tmp | path reference within /tmp | /tmp/keystore.jks /tmp/truststore.jks |
| +MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
| +LOW | ref/words/password | references a 'password' | keystore_password truststore_password |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/client.rb [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/url/request | requests resources via URL | http.request |
| +LOW | net/socket/send | send a message to a socket | send socket |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/collection.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/meta_header_spec.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/sniffer.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/integration/transport_test.rb
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/adapters_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_faraday_test.rb (similarity: 0.93) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +LOW | ref/words/password | references a 'password' | password |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_base_test.rb
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/fetch | Invokes curl | curl -X POST |
2 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | net/url/request | requests resources via URL | http.request |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/response.rb
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | process/create | create child process | fork |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/connections/collection_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/base_spec.rb (similarity: 0.91)
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
1 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_curb_test.rb
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | net/http/request | makes HTTP requests | HTTP/1. User-Agent |
2 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | net/url/request | requests resources via URL | http.request |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/connection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/curb.rb (similarity: 0.91) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| +MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/spec_helper.rb
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
3 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -MEDIUM | net/http/post | submit content to websites | HTTP POST http |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/faraday_spec.rb
2 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | compression/gzip | works with gzip files | gzip |
| +LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
2 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/fetch | Invokes curl | curl -X POST |
| -LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/adapters_test.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | process/create | create child process | fork |
4 removed behaviors
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/shell_command | execute a shell command | system |
| -MEDIUM | net/http/post | submit content to websites | POST http |
| -MEDIUM | net/url/request | requests resources via URL | http.request |
| -LOW | ref/words/password | references a 'password' | password |
