rubysec/bundler-audit

View on GitHub

Patch-level verification for Bundler

Stars: 2.8k
Forks: 247
Open beginner issues: 1
Indexed issues: 25
Avg merge: 1d 9h
Merged PRs (30d): 3

Dominant language: Ruby
License: GPL-3.0
Last GitHub push: Sep 12, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

25 open issues indexed

Broken GH-CI Action related to Dependabot Open

help-wanted specs

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

rubysec/bundler-audit#462 · Opened Sep 20, 2026
Create a new bundler-audit release then figure out how to get the gem published Open

chore

Difficulty 5/5 Over a week Newbie friendliness 25/100

rubysec/bundler-audit#443 · 8 comments · 3 reactions · Opened Jul 6, 2026
Duplicate vulnerabilities reported for gems that have multiple arch specs on the lockfile Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 56/100

rubysec/bundler-audit#438 · 4 comments · Opened Jun 23, 2026
Handle empty array of ignores in yaml file Open

bug feature

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

rubysec/bundler-audit#417 · Opened Mar 18, 2026
Exits normally when --gemfile-lock is not a lock file, should exit with error Open

bug needs-info upstream

rubysec/bundler-audit#403 · 4 comments · 1 assignee · Opened Aug 19, 2025
Combine ignored CVEs from both `--config` with `--ignore` flag Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

rubysec/bundler-audit#388 · 1 comment · 1 reaction · Opened Sep 20, 2023
Run audit automatically on `bundle` or `bundle install` command Open

feature

rubysec/bundler-audit#386 · 1 comment · 2 reactions · 1 assignee · Opened Apr 26, 2023
Make the `spec/fixtures/*/Gemfile.lock` files programmaticaly generated Open

chore specs

rubysec/bundler-audit#381 · 1 comment · 1 assignee · Opened Mar 10, 2023
Add different exit codes for different errors Open

feature

rubysec/bundler-audit#338 · 1 assignee · Opened Apr 13, 2022
gems.rb and gems.locked Open

enhancement feature

Difficulty 3/5 1-2 days Newbie friendliness 62/100

rubysec/bundler-audit#325 · 8 comments · Opened Feb 7, 2022
Error when an ignored CVE is missing Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rubysec/bundler-audit#311 · 2 comments · 2 reactions · Opened Jun 13, 2021
Add a Security Policy Open

documentation Ready to Review

rubysec/bundler-audit#309 · 2 comments · 1 assignee · Opened Jun 4, 2021
Support scanning .gemspec files Open

Ready to Close

Difficulty 3/5 1-2 days Newbie friendliness 45/100

rubysec/bundler-audit#307 · 4 comments · Opened May 28, 2021
Feature request: Audit ruby version, when specified Open

feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rubysec/bundler-audit#229 · 7 comments · 16 reactions · Opened Oct 22, 2019
Feature request: EoL version tracking Open

feature

Difficulty 5/5 Over a week Newbie friendliness 20/100

rubysec/bundler-audit#227 · Opened Oct 3, 2019
Option to include ruby-mem-advisory-db ? Open

feature

Difficulty 4/5 3-5 days Newbie friendliness 25/100

rubysec/bundler-audit#223 · 2 comments · 7 reactions · Opened Aug 29, 2019
Support matching rubygems version to tag in GitHub or warn Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

rubysec/bundler-audit#211 · 1 comment · 3 reactions · Opened Apr 4, 2019
Request - HTML output Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

rubysec/bundler-audit#197 · 6 comments · Opened Aug 31, 2018
Feature request: Allow group selection Open

feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rubysec/bundler-audit#195 · 2 comments · 14 reactions · Opened Aug 25, 2018
Feature request: ability to generate more detailed report Open

feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rubysec/bundler-audit#186 · Opened Jan 30, 2018
Your local changes to the following files would be overwritten by merge Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

rubysec/bundler-audit#183 · 9 comments · 6 reactions · Opened Oct 23, 2017
Refactor Bundler::Audit::Scanner#initialize Open

discussion enhancement

rubysec/bundler-audit#181 · 4 comments · 3 reactions · 1 assignee · Opened Oct 12, 2017
Bundler audit is not thread safe Open

bug enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 42/100

rubysec/bundler-audit#156 · 3 comments · Opened Jul 15, 2016
Include other system critical advisory data Open

feature

Difficulty 5/5 Over a week Newbie friendliness 20/100

rubysec/bundler-audit#146 · 1 comment · 1 reaction · Opened May 6, 2016
Can product info / CPE be included in output? Open

feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rubysec/bundler-audit#141 · 2 comments · Opened Mar 23, 2016

rubysec/bundler-audit

Get new issues in your inbox