Last Updated: January 23, 2019
·
1.029K
· andrew

Check your GitHub account for out of date rails apps

Check your GitHub account for out of date rails apps following a security update using this handy gist: https://gist.github.com/4492021

git clone https://gist.github.com/4492021.git
cd 4492021
gem install octokit
USERNAME=yourusername PASSWORD=yourpassword ruby railscheck.rb

or for checking an orgs repos (that you can access)

USERNAME=yourusername PASSWORD=yourpassword ORG=yourorgname ruby railscheck.rb

It looks for the rails dependency in your Gemfile.lock, which may result in a few false positives where rails is a dependency but you are not using it directly, but it's better to be safe than sorry!

Have a fresh tip? Share with Coderwall community!

Post
Post a tip
Did you know?

Most application security programs still stop at the repository. The page a visitor loads can run third-party scripts that read the DOM, change a checkout, or steal a session after the deploy already looks clean.

Security insights from Cside