{"id":18728686,"url":"https://github.com/rubyonworld/ruby-audit","last_synced_at":"2026-05-16T22:08:04.700Z","repository":{"id":174008075,"uuid":"542160118","full_name":"RubyOnWorld/ruby-audit","owner":"RubyOnWorld","description":"RubyAudit checks your current version of Ruby and RubyGems against known security vulnerabilities (CVEs), alerting you if you are using an insecure version.","archived":false,"fork":false,"pushed_at":"2022-09-28T01:08:53.000Z","size":46,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-19T20:32:30.736Z","etag":null,"topics":["audit","current","gem","rails","ruby"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RubyOnWorld.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-09-27T15:33:36.000Z","updated_at":"2022-09-28T04:15:46.000Z","dependencies_parsed_at":null,"dependency_job_id":"ad8c8426-7fff-415f-a0b7-4812dde98693","html_url":"https://github.com/RubyOnWorld/ruby-audit","commit_stats":null,"previous_names":["rubyonworld/ruby-audit"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/RubyOnWorld/ruby-audit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RubyOnWorld%2Fruby-audit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RubyOnWorld%2Fruby-audit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RubyOnWorld%2Fruby-audit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RubyOnWorld%2Fruby-audit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RubyOnWorld","download_url":"https://codeload.github.com/RubyOnWorld/ruby-audit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RubyOnWorld%2Fruby-audit/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":266592209,"owners_count":23953109,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-22T02:00:09.085Z","response_time":66,"last_error":null,"robots_txt_status":null,"robots_txt_updated_at":null,"robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["audit","current","gem","rails","ruby"],"created_at":"2024-11-07T14:23:47.301Z","updated_at":"2026-05-16T22:07:59.680Z","avatar_url":"https://github.com/RubyOnWorld.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# RubyAudit\n\n![Build Status](https://github.com/civisanalytics/ruby_audit/actions/workflows/test.yml/badge.svg)\n[![Gem Version](https://badge.fury.io/rb/ruby_audit.svg)](http://badge.fury.io/rb/ruby_audit)\n\nRubyAudit checks your current version of Ruby and RubyGems against known security vulnerabilities (CVEs), alerting you if you are using an insecure version.\nIt complements [bundler-audit](https://github.com/rubysec/bundler-audit), providing complete coverage for your Ruby stack.\nIf you use Bundler, you should use both RubyAudit and bundler-audit.\n\nRubyAudit is based on and leverages bundler-audit, and would not exist without the hard work of the [rubysec](https://github.com/rubysec) team, specifically bundler-audit and [ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db).\n\n\"If I have seen further it is by standing on the shoulders of Giants.\" -- Isaac Newton\n\n## Installation\n\nAdd this line to your application's Gemfile:\n\n```ruby\ngem 'ruby_audit'\n```\n\nAnd then execute:\n\n    $ bundle\n\nOr install it yourself as:\n\n    $ gem install ruby_audit\n\nBecause bundler-audit requires bundler, RubyAudit requires bundler as a transitive\ndependency.  If you don't intend to run RubyAudit in the production environment, you\nmay selectively install it in your development and test environments by using\n[Bundler groups](https://bundler.io/guides/groups.html).\n\n## Usage\n\nTo check your current version of Ruby and RubyGems:\n\n```bash\n$ ruby-audit check\n```\n\nYou can ignore specific advisories by specifying `-i \u003cadvisory\u003e`:\n\n```bash\n$ ruby-audit check -i CVE-2015-7551\n```\n\nBy default, RubyAudit will check for updates to the ruby-advisory-db when it runs.\nIf you are using RubyAudit offline, you can bypass this check by specifying `-n`:\n\n```bash\n$ ruby-audit check -n\n```\n\n## Development\n\nAfter checking out the repo, run `bin/setup` to install dependencies.\nYou'll also want to run `git submodule update --init` to populate the ruby-advisory-db\nsubmodule used for testing. Then, run `rake spec` to run the tests.\nYou can also run `bin/console` for an interactive prompt that will allow you to experiment.\n\nTo install this gem onto your local machine, run `bundle exec rake install`.\nTo release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).\n\n## Contributing\n\nSee [CONTRIBUTING](CONTRIBUTING.md).\n\n## License\n\nRubyAudit is released under the [GNU General Public License version 3](LICENSE.md).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frubyonworld%2Fruby-audit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frubyonworld%2Fruby-audit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frubyonworld%2Fruby-audit/lists"}