bundler-audit
ruby-advisory-db
| bundler-audit | ruby-advisory-db | |
|---|---|---|
| 5 | 2 | |
| 2,647 | 989 | |
| 0.3% | 0.5% | |
| 6.1 | 9.1 | |
| 4 months ago | 11 days ago | |
| Ruby | Ruby | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bundler-audit
-
4 Essential Security Tools To Level Up Your Rails Security
This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.
- How do you guys integrate automated security checks in your CI/CD pipelines?
-
What are the gems that every Ruby dev should know how to use?
bundler-audit - check for known security issues
- Hakiri has been sunset, any alternatives?
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Let’s take the super famous gem bundler-audit, for instance. It works closely with bundler to provide patch-level verification for your project gems, such as vulnerability checks, insecure gem sources, etc.
ruby-advisory-db
-
4 Essential Security Tools To Level Up Your Rails Security
This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.
- Security checks for Ruby apps?
What are some alternatives?
Brakeman - A static analysis security vulnerability scanner for Ruby on Rails applications
feedparser - feedparser gem - (universal) web feed parser and normalizer (XML w/ Atom or RSS, JSON Feed, HTML w/ Microformats e.g. h-entry/h-feed or Feed.HTML, Feed.TXT w/ YAML, JSON or INI & Markdown, etc.)
Metasploit - Metasploit Framework
ruby-cff - A Ruby library for manipulating CITATION.cff files.
RbNaCl - Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
SecurityAdvisories - :closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
Clamby - ClamAV interface to your Ruby on Rails project.
Shrine - File Attachment toolkit for Ruby applications
Gitrob - Reconnaissance tool for GitHub organizations
advisory-db - Security advisory database for Rust crates published through crates.io
Rack::UTF8Sanitizer - Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8 characters in request URI and headers.
awesome-ruby-security - Awesome Ruby Security resources