From 76f0dcf462968baf3b29ceda315e13d6e20d7e8c Mon Sep 17 00:00:00 2001 From: Sergey Nebolsin Date: Thu, 5 Jul 2018 23:05:35 +0300 Subject: [PATCH] Ignore CVE-2016-10545 in bundle-audit The consensus is that it's not an exploitable vulnerability and will not be fixed in Thor (except for documentation part): https://github.com/erikhuda/thor/issues/514 --- .travis.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.travis.yml b/.travis.yml index dd4f5e1..2bf7df2 100644 --- a/.travis.yml +++ b/.travis.yml @@ -9,14 +9,14 @@ rvm: - 2.5 cache: bundler before_install: - - gem update --system && gem install bundler -before_script: + - gem update --system && gem install --no-document bundler - curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter - chmod +x ./cc-test-reporter +before_script: - ./cc-test-reporter before-build after_script: - ./cc-test-reporter after-build --exit-code $TRAVIS_TEST_RESULT script: - bundle exec rake - - bundle exec bundle-audit update && bundle exec bundle-audit check + - bundle exec bundle-audit check --update --ignore CVE-2016-10545 - bundle exec rubocop