diff --git a/.bundler-audit.yml b/.bundler-audit.yml new file mode 100644 index 00000000..2014fde0 --- /dev/null +++ b/.bundler-audit.yml @@ -0,0 +1,4 @@ +--- +ignore: + - CVE-2015-9284 # Temporarily ignore Omniauth vulnerability + - CVE-2024-6531 # No fix for this yet diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ab2eca17..0860019b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,4 +29,4 @@ jobs: bundle exec rake db:schema:load bundle exec rake ci - name: Audit gems - run: bundle exec bundle-audit check --ignore CVE-2015-9284 # tempoarily ignore omniauth vulnerability + run: bundle exec bundle-audit check