4 ms·
I'm not sure how it compares with Octotrack, but we've been using bundler-audit[1] for similar security checks in our dependencies. Her
by AndrewHampton 9y ago
I'm not sure how it compares with Octotrack, but we've been using bundler-audit[1] for similar security checks in our dependencies. Here's a sample Dockerfile[2] for running bundler-audit against your Gemfile and Gemfile.lock
1: https://github.com/rubysec/bundler-audit https://github.com/rubysec/bundler-audit
2: https://gist.github.com/andrewhampton/d78df6952e757fd10384015fdf30a7c4 https://gist.github.com/andrewhampton/d78df6952e757fd1038401...
- alvesjtiago 9y agoHi Andrew, I was also a bundler-audit user myself. Unfortunately bundler-audit only provides information about security vulnerabilities and does not help you keep your dependencies updated. With Octotrack you'll receive an email digest every morning informing you of the latest updates of the gems you use as well as possible vulnerabilities recently discovered. Please let me know if this is valuable information for you. Thank you very much for your feedback.