chainguard-dev / bincapz

detect malicious program behaviors
Apache License 2.0
380 stars 24 forks source link

support Ruby .gem files #202

Closed tstromberg closed 2 months ago

tstromberg commented 2 months ago

They are a little annoying because they are a tar file of tar.gz files. It isn't just about adding ".gem" as a tar map, we need to recurse into the .tar.gz files it contains :(

tar -ztvf cocoapods_fixbugs-plugin-0.1.0.gem
-r--r--r--  0 wheel  wheel     670 Feb 20  2020 metadata.gz
-r--r--r--  0 wheel  wheel 3659427 Feb 20  2020 data.tar.gz
-r--r--r--  0 wheel  wheel     296 Feb 20  2020 checksums.yaml.gz