Since we launched Ruby last month, we’ve been working away on improvements. Today we’re excited to let you know about our extended support for Ruby:
Use our Ruby CLI to test Ruby projects continuously, and monitor your dependencies for new vulnerabilities. Install the latest version of Snyk using
npm install -g snyk to try it.
snyk test and
snyk monitor are currently supported, and you can add these commands to your build system. Fixing vulnerabilities with
snyk wizard is only available for Node.js; for fixing Ruby vulnerabilities, use our GitHub integration.
Extended functionality for fixing Ruby vulnerabilities
Snyk fixes your Ruby projects by updating vulnerable dependencies in your Gemfile.lock file. We now also take your Gemfile into account, so more vulnerabilities can be detected and fixed easily!
When a fix requires a change to your Gemfile, our fix pull requests will propose these changes.
When you open a PR via Snyk.io, we will give you a heads-up when this is the case.
Improved commit messages
Alongside the Ruby work, we updated the commit messages for our fix PRs for Node.js and Ruby. All the detail you see in the PR is now included in the commit messages, and lives on in git itself. We referred to and can highly recommend the Government Digital Service’s Git style guide.