
Security News
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metadata, and Context
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
A quick and dirty harness for running system state checks before and after an executable is run.
It can be used:
Spex is a simple language used to define scenarios that model the correct behavior of an executable.
The description file consists of exactly one command
line and any
number of scenario
definitions; for example, the following file can
be used to verify running touch /tmp/foo
will create a new file:
scenario "Creates a file" do
executing 'touch /tmp/foo' do
check '/tmp/foo', :created => true
end
end
If this was in run_touch.rb
, you could run this with spex:
$ spex run_touch.rb
You'll notice that this should pass the first time and fail on
subsequent invocations -- because the check added by :created => true
fails in the
event a file exists before the command is run.
If you want to see what command and scenarios are defined in a file,
use spex info
, eg:
$ spex --describe run_touch.rb
See the commandline help documentation:
$ spex --help
See the examples/
directory.
You can see the checks that are available with the following command:
$ spex --checks
To add an check, create a class that inherits from
Spex::Check
and implements all the neccessary methods. See
Spex::Check
and the currently defined checks for
examples.
Note: If you put your checks in ~/.spex/checks/*.rb
,
they'll automatically be loaded. If you create any interesting
checks, add them to the
wiki!
For more information, see the wiki.
You can file bugs and features using the issue tracker.
Copyright (c) 2010 Bruce Williams. See LICENSE for details.
FAQs
Unknown package
We found that spex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.