home.social

#brakeman — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #brakeman, aggregated by home.social.

  1. TIL about bundler-audit, a #Ruby gem to #audit your #Gemfile.lock and report dependencies with security issues.

    #Brakeman does not report such issues and I postponed searching for such a tool for a very long time… GitHub relies on I-dont-know-what to offer this service through dependabot, I tried to run OWASP dependency-check without success, and this project really looks like a KISS solution to this problem. Adopted!