
Security News
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metadata, and Context
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Simple and Lightweight Gem to handle Environment(ENV) variable sanity-checks and documentation. Providing teams with the ability to sanity-check their expected loaded ENV variables at any point.
Every team documents, stores and persists ENV variables differently. One of the most draining experiences for a team is forgetting to update an ENV key for an environment, pushing things through, and trying to understand why things aren't working. This gem aims to fix that.
Add this line to your application's Gemfile:
gem 'envdocs'
And then execute:
$ bundle
Or install it yourself as:
$ gem install envdocs
sample_keys.yml
file in your application's config
directory:
Example:- development:
- key: RAILS_ENV
description: Provides info on the rails env
required: true
- key: FOO
description: Testing
required: false
- test:
- key: RAILS_ENV
description: Provides info on the rails env
required: true
The top-level key denotes the environment name we'd like to check against(ie. development, test, etc...). The nested objects each represent a key we'd like to validate for that environment.
sample_keys.yml
file in your application's ./config
folder.# initializers/envdocs.rb
Envdocs.configure(
filename: 'sample_keys.yml',
environment: Rails.env,
opts: { include_optional: false }
)
Envdocs.find_missing_keys
When called, an array of strings will be returned containing any missing keys. If no keys are missing, an empty array will be returned.
Features, bug fixes and other changes to envdocs-ruby are gladly accepted. Please open issues or a pull request with your change.
The gem is available as open source under the terms of the LGPLv3 License.
FAQs
Unknown package
We found that envdocs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.