gem-audit

Version updated for https://github.com/7a6163/gem-audit-action to version v1.0.6.

  • This action is used across all versions by ? repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The gem-audit-action GitHub Action automates security audits of Gemfile.lock files to identify vulnerable gem versions and insecure sources using the gem-audit tool. It streamlines vulnerability detection, enforces severity thresholds, and optionally integrates with reviewdog to post findings as inline comments on pull requests. This action helps developers maintain secure Ruby dependencies by providing robust auditing, reporting, and collaboration capabilities.

Release notes

Full Changelog: https://github.com/7a6163/gem-audit-action/compare/v1.0.5...v1.0.6