If they dogfood, then it would be in a private repo on github. You could get a job there or, for the impatient, just wait until the next RoR exploit.