Commit d380e5f
Gemfile: use HTTPS for the RubyGems source (#180)
The gem source was declared as `http://rubygems.org`, so `bundle
install` fetched dependency metadata and gem archives over plaintext
HTTP. That connection is neither encrypted nor authenticated, letting an
on-path attacker substitute the index response and serve arbitrary gem
code, which Bundler unpacks and loads on developer machines and in CI.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Signed-off-by: Shizuo Fujita <fujita@clear-code.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>1 parent 57b999f commit d380e5f
2 files changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
0 commit comments