@@ -340,20 +340,22 @@ def update(package)
340
340
def create ( package )
341
341
filename_to_write = package . filename
342
342
343
- new_data = package . merge_data ( {
343
+ new_data = package . merge_data (
344
344
"cvss_v3" => ( "<FILL IN IF AVAILABLE>" unless cvss ) ,
345
345
"patched_versions" => [ "<FILL IN SEE BELOW>" ] ,
346
346
"unaffected_versions" => [ "<OPTIONAL: FILL IN SEE BELOW>" ]
347
- } )
347
+ )
348
348
349
349
dir_to_write = File . dirname ( filename_to_write )
350
350
Dir . mkdir dir_to_write unless Dir . exist? ( dir_to_write )
351
351
File . open ( filename_to_write , "w" ) do |file |
352
352
# create an automatically generated advisory yaml file
353
353
file . write new_data . merge (
354
- { "patched_versions" => vulnerabilities ,
355
- "related" => { "url" => advisory [ "references" ] }
356
- } ) . to_yaml
354
+ "patched_versions" => vulnerabilities ,
355
+ "related" => {
356
+ "url" => advisory [ "references" ]
357
+ }
358
+ ) . to_yaml
357
359
358
360
# The data we just wrote is incomplete,
359
361
# and therefore should not be committed as is
@@ -373,7 +375,7 @@ def create(package)
373
375
# Still it should be removed before the data goes into rubysec
374
376
file . write "\n \n # GitHub advisory data below - **Remove this data before committing**\n "
375
377
file . write "# Use this data to write patched_versions (and potentially unaffected_versions) above\n "
376
- file . write advisory . merge ( { "vulnerabilities" => vulnerabilities } ) . to_yaml
378
+ file . write advisory . merge ( "vulnerabilities" => vulnerabilities ) . to_yaml
377
379
end
378
380
puts "Wrote: #{ filename_to_write } "
379
381
filename_to_write
0 commit comments