7 ms·
FWIW signed packages are available out of the box with rubygems: <http://docs.seattlerb.org/rubygems/Gem/Security.html http://docs.seattlerb.org/rubygems/Gem/Se
by jshawl 4y ago
FWIW signed packages are available out of the box with rubygems: <http://docs.seattlerb.org/rubygems/Gem/Security.html http://docs.seattlerb.org/rubygems/Gem/Security.html>
- jacques_chester 4y agoYes, but rarely used -- it's clunky. When I scraped the top 10k gems, < 1% had valid and up-to-date signatures.
- jupp0r 4y agoNotably, signatures are not checked by bundler when installing gems.