gemstash
gemstash copied to clipboard
rubygems
A RubyGems.org cache and private gem server
I'm trying to mitigate supply chain attacks by only allowing developers to install gems from an approved list. Ideally I'd like to only permit downloading gems from my gemstash server...
I tried to get a working development environment for gemstash. I couldn't find any documentation on doing so, so I did my usual approach: ``` $ git clone https://github.com/bundler/gemstash.git $...
Looks like this was merged in but was it every deployed? Can we get a new push to rubygems if gemstash isn't up to date? https://github.com/rubygems/gemstash/pull/248 ``` gemstash --version Gemstash...
I couldn't find a description of how I could run gemstack mirroring for a specific rubygems repo which requires authentication. I've got the credentials for the repo configured in `~/.bundle/config`,...
After upgrading to Ruby 3 on Mac OS Big Sur, with several attempts, even reinstalling rvm from scratch, `gemstash start` works, but server is not responding: ``` DEBUG=true bundle install...
# Description: Adds back info command without the failing spec I will abide by the [code of conduct](https://github.com/gemstash/gemstash/blob/master/CODE_OF_CONDUCT.md).
Is there a good reason for storing the authorizations in plaintext instead of some hash? Usually it is a no-go to store passwords/credentials as plain text.
# Description: Currently gemstash is not usable in environments with fips enforcement. https://github.com/rubygems/gemstash/pull/195 Tried to resolve this but has stalled for 3 years since it seems this needs to be...
To allow a unique text description stored against each auth key in the database. Please review the Sequel migration to ensure I didn't bust anything obvious, otherwise I think it's...
The instructions for verifying that gemstash caching enables offline bundling (within the 30 minute cache window) aren't working for me. When I disable internet access and then delete the `Gemfile.lock`...
