Back to Dependencycheck

Bundle Audit

src/site/markdown/analyzers/bundle-audit.md

12.2.2649 B
Original Source

Ruby Bundle-audit Analyzer

OWASP dependency-check includes an analyzer that will execute bundle-audit and include the results in the dependency-check report. This is useful for multi-language projects and merging the results of multiple software composition analysis tools.

NOTE - it is important to run bundle-audit update occasionally to keep the bundle-audit database current. ATM - dependency-check does not perform the bundle-audit update automatically.

shell
$ sudo gem install bundler-audit
$ bundle-audit update

Files Types Scanned: Gemfile.lock