Skip to content

Commit aca286e

Browse files
authored
Require MFA for gem pushes (#578)
This adds the `rubygems_mfa_required` metadata to the gemspec, requiring multi-factor authentication for privileged operations on RubyGems.org. This is a protection against supply chain attacks like the [recent NPM Axios compromise](https://socket.dev/blog/axios-npm-package-compromised) Reference: https://guides.rubygems.org/mfa-requirement-opt-in/
1 parent ddab2d1 commit aca286e

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

noticed.gemspec

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ Gem::Specification.new do |spec|
1313
spec.summary = "Notifications for Ruby on Rails applications"
1414
spec.description = "Database, browser, realtime ActionCable, Email, SMS, Slack notifications, and more for Rails apps"
1515
spec.license = "MIT"
16+
spec.metadata["rubygems_mfa_required"] = "true"
1617

1718
spec.files = Dir["{app,config,db,lib}/**/*", "MIT-LICENSE", "Rakefile", "README.md"]
1819

0 commit comments

Comments
 (0)