Check vulnerabilities

.drone.yml

@@ -0,0 +1,205 @@
+---
+kind: pipeline
+type: docker
+name: build
+
+trigger:
+  event:
+    - push
+
+platform:
+  os: linux
+  arch: amd64
+
+anchors:
+  artifactory_credentials: &artifactory_credentials
+    ARTIFACTORY_USER:
+      from_secret: artifactory_user
+    ARTIFACTORY_PASSWORD:
+      from_secret: artifactory_password
+  vault_tag: &vault_tag
+    VAULT_VERSION: 
+      from_secret: vault_version
+  commands: &commands
+    - apk add --no-cache curl
+    - curl -sSL -o /usr/local/bin/vault.zip https://releases.hashicorp.com/vault/$(echo $VAULT_VERSION)/vault_$(echo $VAULT_VERSION)_linux_amd64.zip
+    - unzip /usr/local/bin/vault.zip -d /usr/local/bin
+    - chmod +x /usr/local/bin/vault
+    - apk add --no-cache build-base sqlite-dev
+    - bundle install --jobs=4 --retry=3
+    - bundle exec rake app:db:create
+    - bundle exec rake app:db:schema:load
+    - bundle exec rake app:db:test:prepare
+    - bundle exec rake
+
+
+concurrency:
+  limit: 1
+
+steps:
+  - name: build_rails4
+    image: ruby:2.6-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_4.2.gemfile
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+
+  - name: build_rails5
+    image: ruby:2.7-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_5.0.gemfile
+      DISABLE_DATABASE_ENVIRONMENT_CHECK: 1
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+    depends_on:
+      - build_rails4
+
+  - name: build_rails51
+    image: ruby:2.7-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_5.1.gemfile
+      DISABLE_DATABASE_ENVIRONMENT_CHECK: 1
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+    depends_on:
+      - build_rails4
+      - build_rails5
+
+  - name: build_rails52
+    image: ruby:2.7-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_5.2.gemfile
+      DISABLE_DATABASE_ENVIRONMENT_CHECK: 1
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+    depends_on:
+      - build_rails4
+      - build_rails5
+      - build_rails51
+
+  - name: build_rails6
+    image: ruby:3.0-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_6.gemfile
+      DISABLE_DATABASE_ENVIRONMENT_CHECK: 1
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+    depends_on:
+      - build_rails4
+      - build_rails5
+      - build_rails51
+      - build_rails52
+
+  - name: build_rails7
+    image: ruby:3.0-alpine
+    environment:
+      BUNDLE_GEMFILE: gemfiles/rails_7.gemfile
+      DISABLE_DATABASE_ENVIRONMENT_CHECK: 1
+      <<: [*vault_tag, *artifactory_credentials]
+    commands: *commands
+    depends_on:
+      - build_rails4
+      - build_rails5
+      - build_rails51
+      - build_rails52
+      - build_rails6
+
+  - name: publish_feature_branch_gem
+    image: quay.io/fundingcircle/alpine-ruby-builder:2.7
+    environment:
+      <<: *artifactory_credentials
+      GEM_REPOSITORY: 'rubygems-pre-releases'
+    commands:
+      - gem install gem-versioner
+      - PRE_RELEASE=$(git rev-parse --short HEAD) gem build fc-vault-rails.gemspec
+      - |
+        mkdir -p ~/.gem
+        curl -u "$ARTIFACTORY_USER":"$ARTIFACTORY_PASSWORD" https://fundingcircle.jfrog.io/fundingcircle/api/gems/rubygems-pre-releases/api/v1/api_key.yaml > ~/.gem/credentials
+        chmod 600 ~/.gem/credentials
+      - |
+        package=$(ls -t1 fc-vault-rails*.gem | head -1)
+        gem push $package --host https://fundingcircle.jfrog.io/fundingcircle/api/gems/rubygems-pre-releases
+    depends_on:
+      - build_rails4
+      - build_rails5
+      - build_rails51
+      - build_rails52
+      - build_rails6
+      - build_rails7
+    when:
+      branch:
+        exclude:
+          - master
+
+
+---
+kind: pipeline
+type: docker
+name: deploy
+
+trigger:
+  event:
+    - promote
+  when:
+    branch:
+      - master
+
+anchors:
+  artifactory_credentials: &artifactory_credentials
+    ARTIFACTORY_USER:
+      from_secret: artifactory_user
+    ARTIFACTORY_PASSWORD:
+      from_secret: artifactory_password
+
+# Platform for job, always Linux amd64
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+  - name: check_gem_version
+    image: quay.io/fundingcircle/alpine-ruby-builder:latest
+    environment:
+      <<: *artifactory_credentials
+    commands:
+      - bin/check_gem_version
+    depends_on:
+      - clone
+
+  - name: publish_master_gem
+    image: quay.io/fundingcircle/alpine-ruby-builder:2.7
+    environment:
+      <<: *artifactory_credentials
+      GEM_REPOSITORY: 'rubygems-local'
+    commands:
+      - gem build fc-vault-rails.gemspec
+      - |
+        mkdir -p ~/.gem
+        curl -u "$ARTIFACTORY_USER":"$ARTIFACTORY_PASSWORD" https://fundingcircle.jfrog.io/fundingcircle/api/gems/rubygems-local/api/v1/api_key.yaml > ~/.gem/credentials
+        chmod 600 ~/.gem/credentials
+      - |
+        package=$(ls -t1 fc-vault-rails*.gem | head -1)
+        gem push $package --host https://fundingcircle.jfrog.io/fundingcircle/api/gems/rubygems-local
+    depends_on:
+      - check_gem_version
+
+  - name: tag_git_repo
+    image: quay.io/fundingcircle/alpine-ruby-builder:latest
+    environment:
+      GITHUB_TOKEN:
+        from_secret: github_token
+    commands:
+      - |
+        current_version="$(ruby -e 'require "./lib/vault/rails/version.rb";puts Vault::Rails::VERSION')";
+        git tag v$current_version -m v$current_version;
+        git push --tags;
+    depends_on:
+      - publish_master_gem
+
+  - name: status
+    image: quay.io/fundingcircle/drone-github-status:latest
+    settings:
+      env: production
+      locale: UK
+    depends_on:
+      - publish_master_gem

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @FundingCircle/team-customer-data

.gitignore

@@ -9,6 +9,7 @@
 /test/tmp/
 /test/version_tmp/
 /tmp/
+/.byebug_history
 
 ## Specific to RubyMotion:
 .dat*
@@ -32,6 +33,7 @@ build/
 Gemfile.lock
 .ruby-version
 .ruby-gemset
+gemfiles/*.gemfile.lock
 
 # unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
 .rvmrc

Appraisals

@@ -1,7 +1,40 @@
-appraise "rails-4.1" do
-  gem "rails", "~> 4.1.0"
+appraise 'rails-4.2' do
+  gem 'rails', '~> 4.2.0'
+  gem 'sqlite3', '~> 1.3.13'
+  gem 'bundler', '~> 1.17.2'
+  gem 'tzinfo-data'
 end
 
-appraise "rails-4.2" do
-  gem "rails", "~> 4.2.0"
+appraise 'rails-5.0' do
+  gem 'rails', '~> 5.0.0'
+  gem 'sqlite3', '~> 1.3.13'
+  gem 'tzinfo-data'
+end
+
+appraise 'rails-5.1' do
+  gem 'rails', '~> 5.1.0'
+  gem 'sqlite3', '~> 1.3.13'
+  gem 'tzinfo-data'
+end
+
+appraise 'rails-5.2' do
+  gem 'rails', '~> 5.2.0'
+  gem 'sqlite3', '~> 1.3.13'
+  gem 'tzinfo-data'
+end
+
+appraise 'rails-6' do
+  gem 'rails', '~> 6'
+  gem 'sqlite3', '~> 1.4'
+  gem 'tzinfo-data'
+end
+
+appraise "rails-7" do
+  gem "rails", "~> 7"
+  gem 'sqlite3', '~> 1.4'
+end
+
+appraise "rails-7" do
+  gem "rails", "~> 7"
+  gem 'sqlite3', '~> 1.4'
 end