Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 3 vulnerabilities #20

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

fix: Gemfile to reduce vulnerabilities

43c97e4
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Fix for 3 vulnerabilities #20

fix: Gemfile to reduce vulnerabilities
43c97e4
Select commit
Loading
Failed to load commit list.
DryRunSecurity / Sensitive Files Analyzer succeeded Aug 7, 2024 in 3s

DryRun Security

Details

Sensitive Files Analyzer Findings: 1 detected

⚠️ Potential Sensitive File Gemfile (click for details)
Type Potential Sensitive File
Description Ruby on Rails manages its dependencies through Gemfile and Gemfile.lock files. A change in these files may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code.
Filename Gemfile
CodeLink

App/Gemfile

Lines 3 to 11 in 43c97e4

# You may use http://rbenv.org/ or https://rvm.io/ to install and use this version
ruby ">= 2.6.10"
gem "cocoapods", "~> 1.14", ">= 1.14.0"
gem "activesupport", ">= 6.1.7.3", "< 7.1.0"
gem "fastlane", "~> 2", ">= 2.220.0"
gem "xcpretty", "~> 0"
View more details on DryRunSecurity