mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
This query looks for places in a Gemfile where URLs with insecure protocols (HTTP or FTP) are specified.
6 lines
209 B
Ruby
6 lines
209 B
Ruby
# Calls to `gem` etc. outside of the Gemfile should be ignored, since they may not be configuring dependencies.
|
|
|
|
gem "foo", git: "http://foo.com"
|
|
git_source :a { |x| "http://foo.com" }
|
|
source "http://foo.com"
|