Ruby Bundle-audit Analyzer

OWASP dependency-check includes an analyzer that will execute bundle-audit and include the results in the dependency-check report. This is useful for multi-language projects and merging the results of multiple software composition analysis tools.

NOTE - it is important to run bundle-audit update occasionally to keep the bundle-audit database current. ATM - dependency-check does not perform the bundle-audit update automatically.

$ sudo gem install bundler-audit
$ bundle-audit update

Files Types Scanned: Gemfile.lock