Tag

bundler-dependency-pinning

Safeguard articles tagged "bundler-dependency-pinning" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

Bundler dependency pinning and Gemfile.lock as a supply c...

A step-by-step guide to Gemfile.lock security: pin gems deliberately, enforce ruby lockfile integrity with checksums, and lock down bundle install in CI/CD.

Feb 2, 20268 min read