debian-mirror-gitlab/vendor/gems/bundler-checksum
2023-01-13 15:02:22 +05:30
..
bin New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
lib New upstream version 15.6.4+ds1 2023-01-13 15:02:22 +05:30
test/project_with_checksum_lock New upstream version 15.5.4+ds1 2022-11-25 23:54:43 +05:30
.gitlab-ci.yml New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
bundler-checksum.gemspec New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
Gemfile New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
Gemfile.lock New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
LICENSE New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30
README.md New upstream version 15.4.2+ds1 2022-10-11 01:57:18 +05:30

bundler-checksum

Bundler patch for verifying local gem checksums

Install

Add the following to your Gemfile:

if ENV['BUNDLER_CHECKSUM_VERIFICATION_OPT_IN'] # this verification is still experimental
  require 'bundler-checksum'
  Bundler::Checksum.patch!
end

Usage

Once the gem is installed, bundler-checksum will verify gems before installation.

If a new or updated gem is to be installed, the remote checksum of that gem is stored in Gemfile.checksum. Checksum entries for other versions of the gem are removed from Gemfile.checksum.

If a version of a gem is to be installed that is already present in Gemfile.checksum, the remote and local checksums are compared and an error is prompted if they do not match.

Gem checksums for all platforms are stored in Gemfile.checksum. When bundler-checksum runs it will only verify the checksum for the platform that bundle wants to download.

Development