Skip to content

Commit 0ceef11

Browse files
authored
Require MFA for gem pushes (#3028)
This adds the `rubygems_mfa_required` metadata to the gemspec, requiring multi-factor authentication for privileged operations on RubyGems.org. This is a protection against supply chain attacks like the recent NPM Axios compromise: https://socket.dev/blog/axios-npm-package-compromised Reference: https://guides.rubygems.org/mfa-requirement-opt-in/
1 parent b8d4885 commit 0ceef11

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

administrate.gemspec

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,10 @@ Gem::Specification.new do |s|
1111
s.summary = "A Rails engine for creating super-flexible admin dashboards"
1212
s.license = "MIT"
1313

14+
s.metadata = {
15+
"rubygems_mfa_required" => "true"
16+
}
17+
1418
s.files = Dir["{app,lib,docs}/**/*", "config/locales/**/*", "LICENSE", "Rakefile"]
1519

1620
s.add_dependency "actionpack", ">= 6.0", "< 9.0"

0 commit comments

Comments
 (0)