maverick/docbrown
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update bundle-audit step due to updated rubyzip (#569)

Browse source 
rubyzip 1.2.1, responsible for https://nvd.nist.gov/vuln/detail/CVE-2018-1000544, has been superseded by rubyzip 1.2.2 which fixes the security vulnerability.

rubyzip 1.2.2 has been merged in this PR https://github.com/thepracticaldev/dev.to/pull/567

Hence, the code doesn't need to ignore it anymore
This commit is contained in:
rhymes 2018-08-31 21:55:49 +02:00 • committed by Mac Siri
parent 97d9b836a7
commit 01d8840fd6
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.travis.yml
View file

@ -39,7 +39,7 @@ script:
- "./cc-test-reporter format-coverage -t lcov -o coverage/codeclimate.lcov.json"
- "./cc-test-reporter sum-coverage coverage/codeclimate.*.json"
- "./cc-test-reporter upload-coverage"
- "bundle exec bundle-audit check --update --ignore CVE-2018-1000544"
- "bundle exec bundle-audit check --update"
deploy:
provider: heroku
api_key: "$HEROKU_AUTH_TOKEN"