Project

General

Profile

Actions
Copy link

Feature #5548

closed

We have no way of knowing if our gems are outdated or have security vulnerabilities

Added by David Davis almost 11 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Katello 2.0
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Gemnasium (www.gemnasium.com) will tell us if we have outdated gems. It also notifies us if those gems have security patches.

Related issues 1 (1 open — 0 closed)

Related to Foreman - Feature #5551: Build out gemnasium (rake task, package.json, etc)NewDavid Davis05/02/2014Actions
Actions
Copy link
 #1

Updated by David Davis almost 11 years ago

  • Subject changed from Add gemnasium to We have no way of knowing if our gems are outdated or have security vulnerabilities
Actions
Copy link
 #2

Updated by David Davis almost 11 years ago

My proposal would be:

1. Lock down non-foreman gem requirements to match RPMs
2. If gemnasium says our gems are out-of-date, update the gem requirement AND the gem rpm

At the very least, gemnasium should tell us if our gems are out of date or have security vunerabilities.

Actions
Copy link
 #3

Updated by David Davis almost 11 years ago

  • Related to Feature #5551: Build out gemnasium (rake task, package.json, etc) added
Actions
Copy link
 #4

Updated by David Davis almost 11 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

Applied in changeset katello|commit:20da003e2cf01daffd7f01bb3a3918514b7985a1.

Actions
Copy link
 #5

Updated by Eric Helms over 10 years ago

  • Target version set to 44
Actions
Copy link
 #6

Updated by Eric Helms over 10 years ago

  • Translation missing: en.field_release set to 13
Actions
Copy link

Also available in: Atom PDF