Skip to content

fluent-plugin-systemd/1.1.0 package update #28105

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 8 commits into from
Sep 25, 2024
Merged

fluent-plugin-systemd/1.1.0 package update #28105

merged 8 commits into from
Sep 25, 2024

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Sep 11, 2024 •
edited by smoser
Loading

fluent-plugin-systemd:

  • update to 1.1.0
  • add runtime dependency on ruby3.2-systemd-journal
  • drop systemd-dev from test env
  • do not gem install in test environment, use package dep.

ruby3.2-systemd-journal:

  • new package with 2.0.0 version

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Sep 11, 2024
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Sep 11, 2024

Open AI suggestions to solve the build error:

The error message is: "ERROR:  Error installing systemd-journal:
    ERROR: Failed to build gem native extension.

    current directory: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim
/usr/bin/ruby extconf.rb
mkmf.rb can't find header files for ruby at /usr/lib/ruby/include/ruby.h

You might have to install separate package for the ruby development
environment, ruby-dev or ruby-devel for example.

extconf failed, exit code 1

Gem files will remain installed in /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0 for inspection.
Results logged to /usr/lib/ruby/gems/3.2.0/extensions/aarch64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out"

To fix this error:
1. Install the Ruby development package:
   - On Debian/Ubuntu: `sudo apt-get install ruby-dev`
   - On RHEL/CentOS: `sudo yum install ruby-devel`
2. Retry installing the gem: `gem install systemd-journal`

@mamccorm
Copy link
Member

mamccorm commented Sep 11, 2024

First release in 3 years:

@wolfi-bot @xnox
fluent-plugin-systemd/1.1.0 package update
20ae984 
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@xnox xnox force-pushed the wolfictl-9f912353-de4a-46e2-8267-0bd6e40a4535 branch from 5217527 to 20ae984 Compare September 20, 2024 16:53
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Sep 20, 2024

Open AI suggestions to solve the build error:

The error message is: "ERROR: Error installing systemd-journal:
    ERROR: Failed to build gem native extension.

    current directory: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim
/usr/bin/ruby extconf.rb
mkmf.rb can't find header files for ruby at /usr/lib/ruby/include/ruby.h

You might have to install separate package for the ruby development
environment, ruby-dev or ruby-devel for example.

extconf failed, exit code 1

Gem files will remain installed in /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0 for inspection.
Results logged to /usr/lib/ruby/gems/3.2.0/extensions/aarch64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out"

To fix this error:
1. Install the Ruby development package:
   - On Debian/Ubuntu: `sudo apt-get install ruby-dev`
   - On RHEL/CentOS: `sudo yum install ruby-devel`
2. Retry installing the gem: `gem install systemd-journal`

@smoser
add ruby3.2-systemd-journal, a dependency of fluent-plugin-systemd.
6ebd482 
systemd-journal is a dependency of fluent-plugin-systemd.
The test begain failing when systemd-journal released version 2.0.0
and the 'gem install' that was being done in the test began to fail.
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Sep 25, 2024

Open AI suggestions to solve the build error:

The error message indicates that the 'systemd-journal' gem (~> 2.0.0) is missing. Ensure it is listed in your Gemfile and run `bundle install`. If the gem is not available, check for typos, version mismatches, or its availability on RubyGems.org. If deprecated, find an alternative or update your code.

@octo-sts
Copy link
Contributor Author

octo-sts bot commented Sep 25, 2024

Open AI suggestions to solve the build error:

The error message is: "Could not find 'systemd-journal' (~> 2.0.0) - did find: [systemd-journal-1.4.2] (Gem::MissingSpecVersionError)"

1. Open the `Gemfile` in the `fluent-plugin-systemd` repository.
2. Locate the line specifying `systemd-journal`.
3. Update the version constraint to allow for `1.4.2` or find a compatible version of `systemd-journal` that meets `~> 2.0.0`.
4. Run `bundle install` to update the dependencies.
5. Verify the installation by running the application.

@smoser
ruby3.2-systemd-journal - bump to version 2.0.0
f0433c5 
There is currently not a tag in the upstream git repo for version 2.0.0
ledbettj/systemd-journal#101

But 2.0.0 is required for fluent-plugin-systemd v1.1.0.

So for the time being, checkout a branch.  This cause fail to build
from source (FTBFS) at the point when there is a new commit on master.

Hopefully at that point there will be an upstream tag.
@smoser
update now that upstream tagged repo
2f4badc
@github-actions
Copy link
Contributor

github-actions bot commented Sep 25, 2024

Package ruby3.2-systemd-journal: Click to expand/collapse

Package ruby3.2-systemd-journal:
Added: /.PKGINFO
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem.build_complete
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.github/workflows/ruby.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.rubocop.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.travis.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/LICENSE.txt
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Rakefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/extconf.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.c
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.h
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/id128.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/flags.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/native.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/navigable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/version.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_error.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd-journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/id128_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_entry_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec
Added: /usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec

Package fluent-plugin-systemd: Click to expand/collapse

Package fluent-plugin-systemd:
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb
Added: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/README.md
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb
Deleted: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec

bincapz found differences: Click to expand/collapse

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
-LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
-LOW ref/path/var path reference within /var /var/log/journal
-LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
-LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/path/var path reference within /var /var/log/journal/5f5777e46c5f4131bd9b71cbed6b9abf

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
/usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/zonque/systemd-journal.gem

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ruby

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW encoding/json/decode Decodes JSON messages JSON.parse

Added: ruby3.2-systemd-journal/var/lib/db/sbom/ruby3.2-systemd-journal-2.0.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/88e02b057a1307388d3ac3e62109

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM shell/exec executes shell /bin/sh
+LOW env/SHELL path to active shell SHELL
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/delete/forcibly Forcibly deletes files using rm rm -fr
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/install

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM security_controls/linux/selinux selinux SELINUX

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
+LOW ref/path/var path reference within /var /var/log/journal
+LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
+LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/words/exclamation gets very excited return !!
+LOW env/LD_LIBRARY_PATH ld library path LD_LIBRARY_PATH

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs ffi/ffi#118

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
+LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://rubygems.org

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal/
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
+LOW ref/path/var path reference within /var /var/log/journal/

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW secrets/private_key References private keys private_key

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fd/multiplex monitor multiple file descriptors select

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Moved: fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.0.5-r0.spdx.json -> /tmp/wolfictl-apk-2646196353/fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.1.0-r1.spdx.json (similarity: 0.98)

@github-actions
Copy link
Contributor

github-actions bot commented Sep 25, 2024

Package ruby3.2-systemd-journal: Click to expand/collapse

Package ruby3.2-systemd-journal:
Added: /.PKGINFO
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem.build_complete
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.github/workflows/ruby.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.rubocop.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.travis.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/LICENSE.txt
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Rakefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/extconf.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.c
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.h
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/id128.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/flags.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/native.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/navigable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/version.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_error.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd-journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/id128_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_entry_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec
Added: /usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec

Package fluent-plugin-systemd: Click to expand/collapse

Package fluent-plugin-systemd:
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb
Added: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/README.md
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb
Deleted: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec

bincapz found differences: Click to expand/collapse

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
-LOW ref/path/var path reference within /var /var/log/journal
-LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
-LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
-LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
+LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fd/multiplex monitor multiple file descriptors select

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal/
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
+LOW ref/path/var path reference within /var /var/log/journal/

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/words/exclamation gets very excited return !!
+LOW env/LD_LIBRARY_PATH ld library path LD_LIBRARY_PATH

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
/usr/bin/sshd

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs ffi/ffi#118

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM security_controls/linux/selinux selinux SELINUX

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: ruby3.2-systemd-journal/var/lib/db/sbom/ruby3.2-systemd-journal-2.0.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/88e02b057a1307388d3ac3e62109

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://rubygems.org

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/path/var path reference within /var /var/log/journal/5f5777e46c5f4131bd9b71cbed6b9abf

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW encoding/json/decode Decodes JSON messages JSON.parse

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
+LOW ref/path/var path reference within /var /var/log/journal
+LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
+LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ruby

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM shell/exec executes shell /bin/sh
+LOW env/SHELL path to active shell SHELL
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/delete/forcibly Forcibly deletes files using rm rm -fr
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/install

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW secrets/private_key References private keys private_key

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/zonque/systemd-journal.gem

Moved: fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.0.5-r0.spdx.json -> /tmp/wolfictl-apk-10642610/fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.1.0-r1.spdx.json (similarity: 0.98)

@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Sep 25, 2024
@github-actions
Copy link
Contributor

github-actions bot commented Sep 25, 2024

Package ruby3.2-systemd-journal: Click to expand/collapse

Package ruby3.2-systemd-journal:
Added: /.PKGINFO
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem.build_complete
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.github/workflows/ruby.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.rubocop.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.travis.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/LICENSE.txt
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Rakefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/extconf.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.c
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.h
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/id128.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/flags.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/native.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/navigable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/version.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_error.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd-journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/id128_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_entry_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec
Added: /usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec

Package fluent-plugin-systemd: Click to expand/collapse

Package fluent-plugin-systemd:
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb
Added: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/README.md
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb
Deleted: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec

bincapz found differences: Click to expand/collapse

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
-LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
-LOW ref/path/var path reference within /var /var/log/journal
-LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
-LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' module Plugin

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
+LOW ref/path/var path reference within /var /var/log/journal
+LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
+LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
+LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/words/exclamation gets very excited return !!
+LOW env/LD_LIBRARY_PATH ld library path LD_LIBRARY_PATH

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
/usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fd/multiplex monitor multiple file descriptors select

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://rubygems.org

Added: ruby3.2-systemd-journal/var/lib/db/sbom/ruby3.2-systemd-journal-2.0.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/88e02b057a1307388d3ac3e62109

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ruby

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/zonque/systemd-journal.gem

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/path/var path reference within /var /var/log/journal/5f5777e46c5f4131bd9b71cbed6b9abf

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal/
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
+LOW ref/path/var path reference within /var /var/log/journal/

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM shell/exec executes shell /bin/sh
+LOW env/SHELL path to active shell SHELL
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/delete/forcibly Forcibly deletes files using rm rm -fr
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/install

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs ffi/ffi#118

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM security_controls/linux/selinux selinux SELINUX

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW encoding/json/decode Decodes JSON messages JSON.parse

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW secrets/private_key References private keys private_key

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Moved: fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.0.5-r0.spdx.json -> /tmp/wolfictl-apk-3830835606/fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.1.0-r1.spdx.json (similarity: 0.98)

@github-actions
Copy link
Contributor

github-actions bot commented Sep 25, 2024

Package ruby3.2-systemd-journal: Click to expand/collapse

Package ruby3.2-systemd-journal:
Added: /.PKGINFO
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem.build_complete
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log
Added: /usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.github/workflows/ruby.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.rubocop.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.travis.yml
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/LICENSE.txt
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Rakefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/extconf.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.c
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/shim.h
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/id128.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/flags.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/native.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/navigable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/shim.so
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/version.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal_error.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd-journal.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/id128_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_entry_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd/journal_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/systemd_spec.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec
Added: /usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec

Package fluent-plugin-systemd: Click to expand/collapse

Package fluent-plugin-systemd:
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/README.md
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb
Added: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/README.md
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb
Deleted: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb
Deleted: /usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec

bincapz found differences: Click to expand/collapse

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
-LOW ref/path/var path reference within /var /var/log/journal
-LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
-LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.0.5/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
-LOW ref/words/plugin references a 'plugin' module Plugin

Deleted: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.0.5.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
-LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/spec_helper.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW encoding/json/decode Decodes JSON messages JSON.parse

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/gem_make.out [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ruby

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/extensions/x86_64-linux-gnu/3.2.0/systemd-journal-2.0.0/mkmf.log [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/words/exclamation gets very excited return !!
+LOW env/LD_LIBRARY_PATH ld library path LD_LIBRARY_PATH

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/ext/shim/Makefile [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM shell/exec executes shell /bin/sh
+LOW env/SHELL path to active shell SHELL
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/delete/forcibly Forcibly deletes files using rm rm -fr
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/install

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/writable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/zonque/systemd-journal.gem

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/in_systemd.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal
+LOW ref/path/var path reference within /var /var/log/journal
+LOW ref/site/url contains embedded HTTPS URLs https://bugs.freedesktop.org/show_bug.cgi?id=64614
ledbettj/systemd-journal#64
+LOW ref/words/plugin references a 'plugin' module Plugin
plugin

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/specifications/fluent-plugin-systemd-1.1.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/reevoo/fluent-plugin-systemd
+LOW ref/words/plugin references a 'plugin' Input plugin to read
This is a fluentd input plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/Gemfile [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://rubygems.org

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/ffi_size_t.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs ffi/ffi#118

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/fields.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM security_controls/linux/selinux selinux SELINUX

Added: ruby3.2-systemd-journal/var/lib/db/sbom/ruby3.2-systemd-journal-2.0.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/88e02b057a1307388d3ac3e62109

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/specifications/systemd-journal-2.0.0.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/systemd/entry_mutator.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/.gitignore [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW secrets/private_key References private keys private_key

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/filterable.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal/waitable.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fd/multiplex monitor multiple file descriptors select

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/ssh_watcher.rb [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH ref/program/sshd Mentions the SSH daemon by path /usr/bin/sshd
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
/usr/bin/sshd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/lib/systemd/journal.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/path/var path reference within /var /var/log/journal/5f5777e46c5f4131bd9b71cbed6b9abf

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/LICENCE [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: fluent-plugin-systemd/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-systemd-1.1.0/lib/fluent/plugin/filter_systemd_entry.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0
+LOW ref/words/plugin references a 'plugin' journal filter plugin
module Plugin

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.journal [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/spec/fixtures/test.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/daemon Run as a background daemon daemon
+MEDIUM ref/path/dev path reference within /dev /dev/dri/card0
/dev/initctl
/dev/input/event1
/dev/vda1
+MEDIUM ref/path/root path reference within /root /root/1
+MEDIUM security_controls/linux/selinux selinux SELINUX
+LOW kernel/netlink communicate with kernel services netlink
+LOW ref/path/etc path reference within /etc /etc/ifplugd/netcfg.action
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/ifplugd

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/systemd-journal.gemspec [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/ledbettj/systemd-journal

Added: ruby3.2-systemd-journal/usr/lib/ruby/gems/3.2.0/gems/systemd-journal-2.0.0/examples/journal_directory.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/var/log path reference within /var/log /var/log/journal/
+LOW ref/path/usr/bin path reference within /usr/bin /usr/bin/env
+LOW ref/path/var path reference within /var /var/log/journal/

Moved: fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.0.5-r0.spdx.json -> /tmp/wolfictl-apk-768661167/fluent-plugin-systemd/var/lib/db/sbom/fluent-plugin-systemd-1.1.0-r1.spdx.json (similarity: 0.98)

@smoser smoser enabled auto-merge (squash) September 25, 2024 20:26
@philroche
Copy link
Member

philroche commented Sep 25, 2024

Changes summay:
Total files changed: 10

Total changes: 92
Total additions: 67
Total deletions: 25

Total commits: 9

GitHub compare URL: fluent-plugins-nursery/fluent-plugin-systemd@216547e...92dec83

@philroche philroche self-assigned this Sep 25, 2024
@smoser smoser merged commit 39092e1 into main Sep 25, 2024
@smoser smoser deleted the wolfictl-9f912353-de4a-46e2-8267-0bd6e40a4535 branch September 25, 2024 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@philroche philroche philroche approved these changes

Assignees

@philroche philroche

Labels

automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. request-version-update request for a newer version of a package

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@mamccorm @philroche @smoser @wolfi-bot