Module: Dependabot::UpdateCheckers::VersionFilters

Extended by:
T::Sig
Defined in:
lib/dependabot/update_checkers/version_filters.rb

Class Method Summary collapse

Class Method Details

.filter_vulnerable_versions(versions_array, security_advisories) ⇒ Object 



33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'lib/dependabot/update_checkers/version_filters.rb', line 33

def self.filter_vulnerable_versions(versions_array, security_advisories)
  versions_array.reject do |v|
    security_advisories.any? do |a|
      if v.is_a?(Gem::Version)
        a.vulnerable?(v)
      elsif v.is_a?(Dependabot::Package::PackageRelease)
        a.vulnerable?(v.version)
      elsif v.is_a?(Dependabot::GitTagDetails)
        version = v.version
        version ? a.vulnerable?(version) : false
      else
        a.vulnerable?(v.fetch(:version))
      end
    end
  end
end