bundler-audit
railsgoat
| bundler-audit | railsgoat | |
|---|---|---|
| 5 | 2 | |
| 2,647 | 855 | |
| 0.3% | 0.5% | |
| 6.1 | 0.0 | |
| 4 months ago | 3 months ago | |
| Ruby | HTML | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bundler-audit
-
4 Essential Security Tools To Level Up Your Rails Security
This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.
- How do you guys integrate automated security checks in your CI/CD pipelines?
-
What are the gems that every Ruby dev should know how to use?
bundler-audit - check for known security issues
- Hakiri has been sunset, any alternatives?
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Let’s take the super famous gem bundler-audit, for instance. It works closely with bundler to provide patch-level verification for your project gems, such as vulnerability checks, insecure gem sources, etc.
railsgoat
-
How to Safely Deserialize Data in Ruby on Rails
In this example, we’ll analyze the runtime behavior of the OWASP Railsgoat project, which is a vulnerable Ruby on Rails application. This project demonstrates the OWASP Top-10 and is a great project for educating developers and security teams.
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
As with the other articles, RailsGoat will be used to explore some aspects of these threats in practice. If you're new here, please refer to the previous two articles to get the app set up and get acquainted with what we’ve explored so far. Let's jump right in!
What are some alternatives?
Brakeman - A static analysis security vulnerability scanner for Ruby on Rails applications
Metasploit - Metasploit Framework
rails-viewcomponent-rspec-tailwind - Confidently develop Rails app views with reusable components.
RbNaCl - Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
dawnscanner - Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Clamby - ClamAV interface to your Ruby on Rails project.
kickoff_tailwind - A rapid Rails 7 application template for personal use bundled with Tailwind CSS
Gitrob - Reconnaissance tool for GitHub organizations
administration-zero - An administration system generator for Rails applications.
Rack::UTF8Sanitizer - Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8 characters in request URI and headers.
protected_attributes - Protect attributes from mass-assignment in ActiveRecord models.