[addtool] bundler-audit

gwen001 commented 4 months ago

[tags]utils,dependencies,ruby[/tags] [short_descr]Patch-level verification for Bundler.[/short_descr] [link] https://github.com/rubysec/bundler-audit [/link] [long_descr] Features:

Checks for vulnerable versions of gems in Gemfile.lock.
Checks for insecure gem sources (http:// and git://).
Allows ignoring certain advisories that have been manually worked around.
Prints advisory information.
Does not require a network connection. [/long_descr] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/a9c9804c8bcfba86bec08e7015c52d3d.png [/image] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/a2a9275eb28b90c1b2170da9e2a87e4e.png [/image]

gwen001 commented 4 months ago

Issue correctly handled, tool is waiting for human validation.

gwen001 commented 4 months ago

Tool has been accepted by the team: https://offsec.tools/tool/bundler-audit

Thank you for your contribution!

gwen001 / offsectools_www

[addtool] bundler-audit #1928