Checking for Gem Vulnerabilities
Run the test_code.sh script. The Bundler Audit and Brakeman tools will list any vulnerabilities. The Gemsurance Report will highlight in red the vulnerable gems.
Updating the Gemfile
- In the Gemfile, upgrade the flagged gems to the latest versions available. Run the upgrade_gems.sh script. If all goes well, all tests pass.
- If there are errors, you may need to hold back on upgrades or make other suggested adjustments. (It doesn't do much good to replace warnings with errors.) Run the upgrade_gems.sh script.
- When you can run the upgrade_gems.sh script and not get errors, you are ready to git add/commit/push your changes and move on.