Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
bundler-push-host-key
Advanced tools
This gem adds support for multiple keys when pushing gems using the bundler rake tasks
In the Rakefile, replace require 'bundler/gem_tasks'
with require 'bundler/gem_tasks/push_host_key'
In .gem/credentials add a new credential with your gemserver's hostname (only the hostname!) as key
:
---
# Official rubygems API key entry
:rubygems_api_key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
# Your custom API key for gemserver.example.net
:gemserver.example.net: <API Key>
# Basic Authentication instead of API key
:gemserver.example.net: "Basic dXNlcjpwYXNzCg=="
In your gemspecs, set the allowed_push_host
:
Gem::Specification.new do |gem|
# ...
gem.metadata = {
'allowed_push_host' => 'https://gemserver.example.com',
}
# ...
end
This gem uses the --key
feature of the gem
command.
When pushing with the gem
command directly, you can specify --key gemserver.example.net
Afaik, the gem
command has no official way to authenticate when loading gems.
In Bundler you can set the basic auth credentials with this command: bundle config gemserver.example.net user:pass
If there is a better, official way to have multiple private gemserver with individual credentials and not only push-authentication, I will happily drop this gem.
FAQs
Unknown package
We found that bundler-push-host-key demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.