From 1d3c40e520b8d48fcf46689db417e69bc6da2b94 Mon Sep 17 00:00:00 2001 From: Priit Tamboom Date: Thu, 9 Oct 2014 17:55:50 +0300 Subject: [PATCH] Added bundle audit for robot --- Gemfile | 3 +++ Gemfile.lock | 4 ++++ bin/robot | 2 ++ 3 files changed, 9 insertions(+) diff --git a/Gemfile b/Gemfile index 86425e55f..1c4e78ef4 100644 --- a/Gemfile +++ b/Gemfile @@ -131,4 +131,7 @@ group :development, :test do # for finding database optimizations gem 'bullet', '~> 4.14.0' + + # for finding future vulnerable gems + gem 'bundler-audit' end diff --git a/Gemfile.lock b/Gemfile.lock index accbf08d1..ebffd3ab0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -40,6 +40,9 @@ GEM bullet (4.14.0) activesupport (>= 3.0.0) uniform_notifier (>= 1.6.0) + bundler-audit (0.3.1) + bundler (~> 1.2) + thor (~> 0.18) cancan (1.6.10) capybara (2.4.1) mime-types (>= 1.16) @@ -289,6 +292,7 @@ PLATFORMS DEPENDENCIES bootstrap-sass (~> 3.2.0.1) bullet (~> 4.14.0) + bundler-audit cancan (~> 1.6.10) capybara (~> 2.4.1) coffee-rails (~> 4.0.0) diff --git a/bin/robot b/bin/robot index 590ddf699..c241189fd 100755 --- a/bin/robot +++ b/bin/robot @@ -18,6 +18,8 @@ rubocop echo "END_OF_RUBOCOP_RESULTS" bundle install --deployment +bundle-audit update +bundle-audit # cp config/secrets-example.yml config/secrets.yml # create manually config/database.yml