rubysec / bundler-audit

Patch-level verification for Bundler

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

No longer set `test_files` in the gemspec

postmodern opened this issue · comments

Rubocop complains about gemspec.test_files plus the test-files contain insecure Gemfile.lock files which can sometimes trigger other vulnerability scanners when they scan bundler-audit.