From c9400de8cdf764878e7cf689e59833cfdd074b33 Mon Sep 17 00:00:00 2001 From: mroach Date: Mon, 1 Apr 2024 14:54:45 +0200 Subject: [PATCH] chore(gemspec): don't include Gemfile.lock There's no practical reason to include this in the distributed gem bundle since applications won't use it. Including this file can and does cause vulnerability scanners to think this Gemfile.lock is used by the scanned application. --- rubyXL.gemspec | 1 - 1 file changed, 1 deletion(-) diff --git a/rubyXL.gemspec b/rubyXL.gemspec index cb7f5b51..ca11e434 100644 --- a/rubyXL.gemspec +++ b/rubyXL.gemspec @@ -24,7 +24,6 @@ Gem::Specification.new do |s| ".rubocop.yml", "CHANGELOG.md", "Gemfile", - "Gemfile.lock", "LICENSE.txt", "README.rdoc", "Rakefile",