-
Notifications
You must be signed in to change notification settings - Fork 208
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ruby3.2-elastic-transport/8.3.5 package update #24067
Conversation
octo-sts
bot
commented
Jul 16, 2024
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
Package ruby3.2-elastic-transport: Click to expand/collapsePackage ruby3.2-elastic-transport:
Added: /usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/.github/check_license_headers.rb bincapz found differences: Click to expand/collapseChanged: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/loggable.rb [
|
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | exec/shell_command | execute a shell command | system |
-MEDIUM | net/http/post | submit content to websites | POST http |
-MEDIUM | net/url/request | requests resources via URL | http.request |
-LOW | ref/words/password | references a 'password' | password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/adapters_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/response_test.rb (similarity: 0.95)
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/var/lib/db/sbom/ruby3.2-elastic-transport-8.3.5-r0.spdx.json [✅ LOW → ⚠️ MEDIUM]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/download | download files | downloadLocation |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/.github/check_license_headers.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/transport/base_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/redacted.rb (similarity: 0.93)
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/connection.rb (similarity: 0.99)
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/words/password | references a 'password' | password |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/serializer/multi_json.rb (similarity: 0.92)
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/faraday.rb
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/collection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/errors.rb (similarity: 0.91)
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | net/url | Handles URL strings | RequestURI |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/profile/client_benchmark_test.rb [✅ LOW → ⚠️ MEDIUM]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/test_helper.rb
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_manticore_test.rb [✅ LOW → ⚠️ MEDIUM]
3 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
+LOW | net/http/request | makes HTTP requests | User-Agent |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/version.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/sniffer_spec.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/words/password | references a 'password' | password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/transport/base_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/connections/selector_spec.rb (similarity: 0.92)
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | fd/multiplex | monitor multiple file descriptors | select |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/connection_test.rb
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic-transport.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/meta_header.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/opentelemetry.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/manticore_spec.rb [✅ LOW → ⚠️ MEDIUM]
3 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+LOW | compression/gzip | works with gzip files | gzip |
+LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/opentelemetry_spec.rb
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | exec/shell_command | execute a shell command | system |
+MEDIUM | net/url/request | requests resources via URL | http.request |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/transport_base_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/serializer_test.rb (similarity: 0.93) [⚠️ MEDIUM → ✅ LOW]
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/base.rb (similarity: 0.92) [✅ LOW → ⚠️ MEDIUM]
7 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/fetch | Invokes curl | curl -X |
+MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
+LOW | compression/gzip | works with gzip files | gzip |
+LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
+LOW | net/http/request | makes HTTP requests | User-Agent |
+LOW | random/insecure | generate random numbers insecurely | rand |
+LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/integration/jruby_test.rb [⚠️ MEDIUM → ✅ LOW]
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | exec/shell_command | execute a shell command | system |
-MEDIUM | net/http/post | submit content to websites | POST http |
-MEDIUM | net/url/request | requests resources via URL | http.request |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/selector.rb
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | fd/multiplex | monitor multiple file descriptors | select |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/connections/collection_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/curb_spec.rb (similarity: 0.91) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+LOW | compression/gzip | works with gzip files | gzip |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/connections/collection_spec.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/client_spec.rb [✅ LOW → ⚠️ MEDIUM]
7 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+MEDIUM | ref/path/relative | references and possibly executes relative path | ./certificate |
+LOW | compression/gzip | works with gzip files | gzip |
+LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
+LOW | net/http/request | makes HTTP requests | User-Agent |
+LOW | net/socket/listen | listen on a socket | accept socket |
+LOW | net/socket/send | send a message to a socket | send socket |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/manticore.rb
4 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+MEDIUM | ref/path/tmp | path reference within /tmp | /tmp/keystore.jks /tmp/truststore.jks |
+MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
+LOW | ref/words/password | references a 'password' | keystore_password truststore_password |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/client.rb [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/url/request | requests resources via URL | http.request |
+LOW | net/socket/send | send a message to a socket | send socket |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/connections/collection.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | fd/multiplex | monitor multiple file descriptors | select |
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/meta_header_spec.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/words/password | references a 'password' | password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/sniffer.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/integration/transport_test.rb
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/test/unit/adapters_test.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_faraday_test.rb (similarity: 0.93) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+LOW | ref/words/password | references a 'password' | password |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_base_test.rb
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/fetch | Invokes curl | curl -X POST |
2 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | exec/shell_command | execute a shell command | system |
-MEDIUM | net/url/request | requests resources via URL | http.request |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/response.rb
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | process/create | create child process | fork |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/spec/elastic/connections/collection_spec.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/base_spec.rb (similarity: 0.91)
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/words/password | references a 'password' | replaces the password with the string secret_password the user and password are provided as the user and password are provided in |
1 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | fd/multiplex | monitor multiple file descriptors | select |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/transport_curb_test.rb
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | net/http/request | makes HTTP requests | HTTP/1. User-Agent |
2 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | exec/shell_command | execute a shell command | system |
-MEDIUM | net/url/request | requests resources via URL | http.request |
Moved: ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.2/lib/elastic/transport/transport/connections/connection.rb -> /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/lib/elastic/transport/transport/http/curb.rb (similarity: 0.91) [✅ LOW → ⚠️ MEDIUM]
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/http/post | submit content to websites | HTTP POST http |
+MEDIUM | ref/words/agent | references an 'agent' | agent_header user_agent |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/spec_helper.rb
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
3 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-MEDIUM | net/http/post | submit content to websites | HTTP POST http |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/spec/elastic/transport/http/faraday_spec.rb
2 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | compression/gzip | works with gzip files | gzip |
+LOW | net/http/accept/encoding | set HTTP response encoding format (example: gzip) | Accept-Encoding |
2 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/fetch | Invokes curl | curl -X POST |
-LOW | ref/words/password | references a 'password' | sanitize password in the URL username and password |
Changed: /tmp/wolfictl-apk-2186821661/ruby3.2-elastic-transport/usr/lib/ruby/gems/3.2.0/gems/elastic-transport-8.3.5/test/unit/adapters_test.rb [⚠️ MEDIUM → ✅ LOW]
1 new behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | process/create | create child process | fork |
4 removed behaviors
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | exec/shell_command | execute a shell command | system |
-MEDIUM | net/http/post | submit content to websites | POST http |
-MEDIUM | net/url/request | requests resources via URL | http.request |
-LOW | ref/words/password | references a 'password' | password |