GitHub's safe gem eval web service
Перейти к файлу
Tom Preston-Werner 9cc4a38c7b Regenerated gemspec for version 0.1.2 2009-02-10 21:13:29 -08:00
bin make sinatra app run even when wrapped by gems binary proxy 2009-02-10 21:13:13 -08:00
lib rename to safegem 2009-02-10 19:55:11 -08:00
test rename to safegem 2009-02-10 19:55:11 -08:00
.gitignore add safegem binary to gemspec and make it executable 2009-02-10 20:28:43 -08:00
README rename to safegem 2009-02-10 19:55:11 -08:00
Rakefile rename to safegem 2009-02-10 19:55:11 -08:00
VERSION.yml Version bump to 0.1.2 2009-02-10 21:13:23 -08:00
safegem.gemspec Regenerated gemspec for version 0.1.2 2009-02-10 21:13:29 -08:00

README

SafeGem: GitHub's Safe Gem Eval Web Service
-------------------------------------------

Help make GitHub's gem build process more secure and robust!

SafeGem is a Sinatra app that safely converts Ruby gemspecs into YAML gemspecs.

It works as follows:

1) Receives a request with the repo location and the ruby gemspec
2) Makes a shallow clone of the repo and chdir's to that repo
3) Evals the spec in a separate thread with a higher $SAFE level
4) Converts spec to YAML

Goals
-----
* Lower the $SAFE level to allow methods like Dir.glob, but without compromising security.