All pull requests

Pull requests

• Stop Dependabot from updating the vulnerable spec fixtures

  #463·flavorjones opened Sep 22, 2026Member·

  ·
  4

• Check ruby version from lockfile for advisories

  #451·eliotsykes opened Jul 16, 2026Contributor·

  ·
  4

• Add inherit config option

  #447·jonswar opened Jul 10, 2026·

  ·
  2

• Add support for expiring advisory ignores

  #446·abeljim8am opened Jul 10, 2026·

  ·
  5

• Dedup the scanner report for unpatched gems with more than one platform

  #440·jrodriigues opened Jul 1, 2026·

  ·
  1

  8

• Combine ignored CVEs from both --config with --ignore flag

  #422·GoutamSingired opened Apr 18, 2026·

  ·

• add support for empty array of ignores

  #421·GoutamSingired opened Apr 7, 2026·

  ·

• Add SECURITY.md vulnerability reporting policy

  Ready to Review
  #420·kallal79 opened Apr 3, 2026Contributor·

  ·
  7

• Add exclude option to skip gems by name during audit

  Ready to Merge
  #419·mlarraz opened Apr 2, 2026·

  ·
  5

• Add support for gems.rb and gems.locked files (fixes #325)

  #418·kallal79 opened Mar 31, 2026Contributor·

  ·
  1

• Fix #403: exit with error when --gemfile-lock is not a valid lock file

  Ready to Review
  #414·kallal79 opened Mar 10, 2026Contributor·

  ·
  1

  4

• Remove Dir.chdir for thread-safety

  #397·lovro-bikic opened Oct 27, 2024·

  ·
  1

  2

• Remove platform duplicates

  #356·ylecuyer opened Oct 19, 2022·

  ·
  8

• Add option to fail if ignored identifiers weren't seen

  #339·bschmeck opened Apr 14, 2022·

  ·

• Proof of concept to check the Bundler version too

  #299·zofrex opened Apr 30, 2021·

  ·
  8

• Add criticality filtering to cli

  discussionfeature
  #257·joshmfrankel opened May 12, 2020·

  ·
  12

• Add no exit on warn flag

  feature
  #250·roramirez opened Mar 12, 2020·

  ·

• Allow to ignore specific Gemfile groups

  #228·fatkodima opened Oct 21, 2019Contributor·

  ·
  1

  2

• Allow passing multiple Gemfile.lock files to bundler audit

  discussionfeature
  #224·fatkodima opened Aug 29, 2019Contributor·

  ·
  2

  1

• Separate lockfile parsing from vulnerability scanning

  #222·ushis opened Aug 26, 2019·

  ·

• Ability to define the Gemfile via BUNDLE_GEMFILE

  #200·gurix opened Nov 2, 2018·

  ·
  4

• Add --no-exit-on-warn flag that exits with 0 even when vulnerable

  #199·MC-Squared opened Oct 10, 2018·

  ·
  3

• Allow for ignoring insecure sources.

  #189·dobs opened Mar 2, 2018·

  ·
  5

• Move file reading responsibility to the CLI

  #109·stevenocchipinti opened Sep 1, 2015·

  ·
  2