diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..8a1c2a6 --- /dev/null +++ b/techstack.md @@ -0,0 +1,115 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [stackshareio/omniauth-azure-oauth2](https://github.com/stackshareio/omniauth-azure-oauth2)![](https://img.stackshare.io/public_badge.svg "public") +

+|10
Tools used|03/01/24
Report generated| +|------|------| +
+ +## Languages (1) + + + + +
+ Ruby +
+ Ruby +
+ +
+ +## Frameworks (1) + + + + +
+ Sinatra +
+ Sinatra +
+ +
+ +## DevOps (4) + + + + + + + + + + +
+ Git +
+ Git +
+ +
+ RSpec +
+ RSpec +
+ v2.14.0 +
+ RubyGems +
+ RubyGems +
+ +
+ Travis CI +
+ Travis CI +
+ +
+ + +## Open source packages (4) + +## RubyGems (4) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[jwt](https://rubygems.org/jwt)|v1.0|05/30/14|Mark Nadig |MIT|N/A| +|[omniauth](https://rubygems.org/omniauth)|v1.0|05/18/16|Nick Campbell |MIT|[CVE-2020-36599](https://github.com/advisories/GHSA-pm55-qfxr-h247) (Critical)
[CVE-2017-18076](https://github.com/advisories/GHSA-9pr6-grf4-x2fr) (High)
[CVE-2015-9284](https://github.com/advisories/GHSA-ww4x-rwq6-qpgf) (High)| +|[omniauth-oauth2](https://rubygems.org/omniauth-oauth2)|v1.4|05/18/16|Nick Campbell |MIT|N/A| +|[rake](https://rubygems.org/rake)|N/A|05/30/14|Mark Nadig |MIT|N/A| + +
+
+ +Generated via [Stack File](https://github.com/marketplace/stack-file) diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..f54fe0e --- /dev/null +++ b/techstack.yml @@ -0,0 +1,158 @@ +repo_name: stackshareio/omniauth-azure-oauth2 +report_id: 7be540f18def933b7b5c49bedc81b2e4 +version: 0.1 +repo_type: Public +timestamp: '2024-03-01T20:36:16+00:00' +requested_by: joshk0 +provider: github +branch: master +detected_tools_count: 10 +tools: +- name: Ruby + description: A dynamic, interpreted, open source programming language with a focus + on simplicity and productivity + website_url: https://www.ruby-lang.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/989/ruby.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2 + detection_source: Repo Metadata +- name: Sinatra + description: Classy web-development dressed in a DSL + website_url: http://www.sinatrarb.com/ + license: MIT + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Microframeworks (Backend) + image_url: https://img.stackshare.io/service/999/logo.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/Gemfile + detection_source: Gemfile + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2 + detection_source: Repo Metadata +- name: RSpec + description: Behaviour Driven Development for Ruby + website_url: https://rspec.info/ + version: 2.14.0 + license: MIT + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Testing Frameworks + image_url: https://img.stackshare.io/service/2539/logo.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: RubyGems + description: Easily download, install, and use ruby software packages on your system + website_url: https://rubygems.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Package Managers + image_url: https://img.stackshare.io/service/12795/5jL6-BA5_400x400.jpeg + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: Travis CI + description: A hosted continuous integration service for open source and private + projects + website_url: http://travis-ci.com/ + open_source: false + hosted_saas: true + category: Build, Test, Deploy + sub_category: Continuous Integration + image_url: https://img.stackshare.io/service/460/Lu6cGu0z_400x400.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/.travis.yml + detection_source: ".travis.yml" + last_updated_by: Mark Nadig + last_updated_on: 2016-02-16 17:34:29.000000000 Z +- name: jwt + description: A pure ruby implementation of the RFC 7519 OAuth JSON Web Token + package_url: https://rubygems.org/jwt + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18991/default_e5e3569d4beb5d51f9ce87c88e8b44a2308e087b.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: omniauth + description: A generalized Rack framework for multiple-provider authentication + package_url: https://rubygems.org/omniauth + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18914/default_aa081534cc9e2d100412a763ab69743f22c56ceb.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z + vulnerabilities: + - name: OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` + value + cve_id: CVE-2020-36599 + cve_url: https://github.com/advisories/GHSA-pm55-qfxr-h247 + detected_date: Sep 1 + severity: critical + first_patched: 1.9.2 + - name: Omniauth allows POST parameters to be stored in session + cve_id: CVE-2017-18076 + cve_url: https://github.com/advisories/GHSA-9pr6-grf4-x2fr + detected_date: Aug 22 + severity: high + first_patched: 1.3.2 + - name: OmniAuth Ruby gem Cross-site Request Forgery in request phase + cve_id: CVE-2015-9284 + cve_url: https://github.com/advisories/GHSA-ww4x-rwq6-qpgf + detected_date: Aug 22 + severity: high + first_patched: 2.0.0 +- name: omniauth-oauth2 + description: An abstract OAuth2 strategy for OmniAuth + package_url: https://rubygems.org/omniauth-oauth2 + version: '1.4' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18909/default_6011c3e13c0feeff577120981a21a5968e50756a.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z +- name: rake + description: Rake is a Make-like program implemented in Ruby + package_url: https://rubygems.org/rake + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18812/default_f582e4648f4682adb72d2b201218cda7f8e894ac.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z