Packages
sobelow
0.7.0
0.14.1
0.14.0
0.13.0
0.12.2
0.12.1
0.12.0
0.11.1
0.11.0
0.10.6
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.3
0.9.2
0.9.1
0.9.0
0.8.0
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.12
0.3.11
0.3.10
0.3.9
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.8
0.2.7
0.2.6
0.2.5
0.2.4
0.2.3
Security-focused static analysis for Elixir & the Phoenix framework
Current section
Files
Jump to
Current section
Files
lib/sobelow/finding_log.ex
defmodule Sobelow.FindingLog do
use GenServer
@json_template """
{
"sobelow_version": "<%= @version %>",
"total_findings": "<%= @total_findings %>",
"findings": {<%= for {confidence, items} <- @findings do %>
"<%= confidence %>": [<% last = List.last(items) %><%= for item <- items do %>
{<% {lk, _} = List.last(item) %><%= for {k, v} <- item do %>
"<%= k %>": "<%= v %>"<%= if lk != k do %>,<% end %><% end %>
}<%= if last != item do %>,<% end %><% end %>
]<%= if confidence != :low_confidence do %>,<% end %><% end %>
}
}
"""
def start_link() do
GenServer.start_link(__MODULE__, :ok, name: __MODULE__)
end
def add(finding, severity) do
GenServer.cast(__MODULE__, {:add, finding, severity})
end
def log() do
GenServer.call(__MODULE__, :log)
end
def json(vsn) do
%{high: highs, medium: meds, low: lows} = log()
EEx.eval_string(
@json_template,
assigns: [
findings: [high_confidence: highs, medium_confidence: meds, low_confidence: lows],
total_findings: length(highs) + length(meds) + length(lows),
version: vsn
]
)
end
def quiet() do
total = total(log())
findings = if total > 1, do: "findings", else: "finding"
if total > 0 do
"Sobelow: #{total} #{findings} found. Run again without --quiet to review findings."
end
end
defp total(%{high: highs, medium: meds, low: lows}) do
length(highs) + length(meds) + length(lows)
end
def init(:ok) do
{:ok, %{:high => [], :medium => [], :low => []}}
end
def handle_cast({:add, finding, severity}, findings) do
{:noreply, Map.update!(findings, severity, &[finding | &1])}
end
def handle_call(:log, _from, findings) do
{:reply, findings, findings}
end
end