summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThom May <thom@chef.io>2016-01-11 10:40:15 +0000
committerThom May <thom@chef.io>2016-01-21 12:00:05 +0000
commit0b1ca6e6be2676b83a402aae39b27edaf9c4cc13 (patch)
treec6a38d1225f986ea5b3638c5ebb2f1265121b159
parentb2287acca8df58079205979ab2ba956d0e281fe5 (diff)
downloadchef-tm/bundle_audit.tar.gz
Ensure gem dependencies are securetm/bundle_audit
-rw-r--r--.travis.yml1
-rw-r--r--Gemfile4
2 files changed, 4 insertions, 1 deletions
diff --git a/.travis.yml b/.travis.yml
index a4d00b79a7..976debaace 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -20,6 +20,7 @@ echo '--color\n-fp' > .rspec;
sudo sed -i -e 's/^Defaults\tsecure_path.*$//' /etc/sudoers;
sudo -E $(which bundle) exec rake spec;
bundle exec rake style;
+bundle exec bundle-audit check --update;
"
env:
diff --git a/Gemfile b/Gemfile
index 4809c65216..0c9a7314b6 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,10 +28,12 @@ group(:development, :test) do
# for testing new chefstyle rules
# gem 'chefstyle', github: 'chef/chefstyle'
- gem "chefstyle", github: "chef/chefstyle", branch: "master"
+ gem "chefstyle", git: "https://github.com/chef/chefstyle.git", branch: "master"
gem "ruby-shadow", platforms: :ruby unless RUBY_PLATFORM.downcase.match(/(aix|cygwin)/)
+ gem "bundler-audit", git: "https://github.com/rubysec/bundler-audit.git", ref: "4e32fca"
+
# For external tests
# gem 'chef-zero', github: 'chef/chef-zero'
# gem 'cheffish', github: 'chef/cheffish'