News for hackers. Stuff that matters.

A comment on Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock to check.

Re:Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock ... by sciurus on Friday August 07, 2015 @11:19AM (#10022931)
You can run this check yourself using the bundle-audit tool. It uses the list of vulnerabilities from ruby-advisory-db.

Checking the git history, I see that phillmv is a contributor to ruby-advisory-db.

https://github.com/rubysec/bundler-audit

https://github.com/rubysec/ruby-advisory-db

[ Parent | on HN ]
Re:Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock ... by phillmv on Friday August 07, 2015 @11:28AM (#10022993)
Yep! We started that project alongside postmodern_mod3 about two years ago :).

We figured we could do a better job all around if we managed to productize it.

[ Parent | on HN ]
Re:Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock ... by sarwechshar on Friday August 07, 2015 @01:13PM (#10023604)
This looks so simple but clearly a lot of work went into it. I'm learning Ruby and this is certainly going to be one of my most used tools - thanks!
[ Parent | on HN ]