Merge branch 'gems-lock' into 'master'v3.15.0

Detect gems.rb and gems.locked

See merge request gitlab-org/security-products/license-management!186

1 files changed, 13 insertions, 0 deletions

diff --git a/spec/integration/ruby/bundler_spec.rb b/spec/integration/ruby/bundler_spec.rb
index 6961067..30cf776 100644
--- a/spec/integration/ruby/bundler_spec.rb
+++ b/spec/integration/ruby/bundler_spec.rb
@@ -127,4 +127,17 @@ RSpec.describe "bundler" do
       expect(subject.licenses_for('net-hippie')).to match_array(['MIT'])
     end
   end
+
+  context "when scanning a projects with a gems.lock" do
+    before do
+      runner.mount(dir: fixture_file('ruby/bundler-v2.1-gems.lock'))
+    end
+
+    specify do
+      expect(subject).to match_schema
+      expect(subject[:licenses]).not_to be_empty
+      expect(subject.dependency_names).to include('spandx')
+      expect(subject.licenses_for('spandx')).to match_array(['MIT'])
+    end
+  end
 end