3 ms·
Do you know of any apps like https://hakiri.io https://hakiri.io that automate security scanning and serve as a security monitor for any future disclosures? Al
by vasinov 12y ago
Do you know of any apps like https://hakiri.io https://hakiri.io that automate security scanning and serve as a security monitor for any future disclosures?
Also, how would one use bundler-audit if a Rails app is not actively maintained?
- phillmv 12y agoYeah, like I mentioned above the app I built (https://gemcanary.com https://gemcanary.com) automates disclosure notification, and I believe? https://codeclimate.com/ https://codeclimate.com/ may use the advisory database as well, but I do not know for a fact. There's a few others but they've slipped my mind at the moment. I use bundler-audit when performing security audits for clients. You could wrap it in a git commit hook and have it publish results, but to my knowledge no one's done it that way.
- jamie_ca 12y agoI believe [Code Climate](https://codeclimate.com/ https://codeclimate.com/) will report vulnerable gem versions in your app. Their marketing page suggests that they also analyze how you use a vulnerable library to see if you're affected or not.