Allow :ignore to contain both CVE IDs and OSVDB IDs (issue #94).

rubysec · Jul 23, 2015 · 4e32fca · 4e32fca
1 parent 610acd5
commit 4e32fca
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/bundler/audit/scanner.rb b/lib/bundler/audit/scanner.rb
@@ -145,7 +145,8 @@ def scan_specs(options={})
 
         @lockfile.specs.each do |gem|
           @database.check_gem(gem) do |advisory|
-            unless ignore.include?(advisory.id)
+            unless (ignore.include?(advisory.cve_id) ||
+                    ignore.include?(advisory.osvdb_id))
               yield UnpatchedGem.new(gem,advisory)
             end
           end