Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade cocoapods from 1.13.0 to 1.16.0 #28

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

fix: Gemfile to reduce vulnerabilities

def89a9
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Security upgrade cocoapods from 1.13.0 to 1.16.0 #28

fix: Gemfile to reduce vulnerabilities
def89a9
Select commit
Loading
Failed to load commit list.
DryRunSecurity / Sensitive Files Analyzer succeeded Nov 2, 2024 in 2s

DryRun Security

Details

Sensitive Files Analyzer Findings: 1 detected

⚠️ Potential Sensitive File Gemfile (click for details)
Type Potential Sensitive File
Description Ruby on Rails manages its dependencies through Gemfile and Gemfile.lock files. A change in these files may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code.
Filename Gemfile
CodeLink

App/Gemfile

Lines 3 to 9 in def89a9

# You may use http://rbenv.org/ or https://rvm.io/ to install and use this version
ruby ">= 2.6.10"
gem "cocoapods", "~> 1.16", ">= 1.16.0"
gem "activesupport", ">= 6.1.7.3", "< 7.1.0"
gem "fastlane", "~> 2"
gem "xcpretty", "~> 0"
View more details on DryRunSecurity