Fabrica\Tools\Plugin\SecurityChecker

Complexity

Total Complexity

14

Size/Duplication

Total Lines	76
Duplicated Lines	13.16 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	pluginName()	0	4	1
A	__construct()	0	14	4
A	canExecuteOnStage()	10	10	3
B	execute()	0	28	6

<?php

namespace Fabrica\Tools\Plugin;

use Fabrica\Tools;
use Fabrica\Tools\Builder;
use Fabrica\Models\Infra\Ci\Build;
use Fabrica\Tools\Plugin;
use Fabrica\Models\Infra\Ci\BuildError;
use Fabrica\Tools\ZeroConfigPluginInterface;
use SensioLabs\Security\SecurityChecker as BaseSecurityChecker;

/**
 * SensioLabs Security Checker Plugin
 *
 * @author Dmitry Khomutov <poisoncorpsee@gmail.com>
 */
class SecurityChecker extends Plugin implements ZeroConfigPluginInterface
{
    /**
     * @var int
     */
    protected $allowedWarnings;

    /**
     * @return string
     */
    public static function pluginName()
    {
        return 'security_checker';
    }

    /**
     * {@inheritdoc}
     */
    public function __construct(Builder $builder, Build $build, array $options = [])
    {
        parent::__construct($builder, $build, $options);

        $this->allowedWarnings = 0;

        if (isset($options['zero_config']) && $options['zero_config']) {
            $this->allowedWarnings = -1;
        }

        if (array_key_exists('allowed_warnings', $options)) {
            $this->allowedWarnings = (int)$options['allowed_warnings'];
        }
    }

    /**
     * {@inheritdoc}
     */
    public static function canExecuteOnStage($stage, Build $build)

This method seems to be duplicated in your project.

    {
        $path = $build->getBuildPath() . 'composer.lock';

        if (file_exists($path) && $stage === Build::STAGE_TEST) {
            return true;
        }

        return false;
    }

    public function execute()
    {
        $success  = true;
        $checker  = new BaseSecurityChecker();
        $result   = $checker->check($this->builder->buildPath . 'composer.lock');
        $warnings = json_decode((string)$result, true);

        if ($warnings) {
            foreach ($warnings as $library => $warning) {
                foreach ($warning['advisories'] as $data) {
                    $this->build->reportError(
                        $this->builder,
                        self::pluginName(),
                        $library . ' (' . $warning['version'] . ")\n" . $data['cve'] . ': ' . $data['title'] . "\n" . $data['link'],
                        BuildError::SEVERITY_CRITICAL,
                        '-',
                        '-'
                    );
                }
            }

            if ($this->allowedWarnings != -1 && ($result->count() > $this->allowedWarnings)) {
                $success = false;
            }
        }

        return $success;
    }
}