Contents

SafeGem: GitHub's Safe Gem Eval Web Service
-------------------------------------------

Help make GitHub's gem build process more secure and robust!

SafeGem is a Sinatra app that safely converts Ruby gemspecs into YAML gemspecs.

It works as follows:

1) Receives a request with the repo location and the ruby gemspec
2) Returns immediately and schedules the following via EM.defer:

1) Makes a shallow clone of the repo and chdir's to that repo
2) Evals the spec in a separate thread with a higher $SAFE level
3) Converts spec to YAML
4) Posts the YAML to the specified callback

Goals
-----
* Lower the $SAFE level to allow methods like Dir.glob, but without compromising security.

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
github-safegem-0.2.10	README
github-safegem-0.2.5	README
github-safegem-0.2.6	README
github-safegem-0.2.7	README
github-safegem-0.2.8	README
github-safegem-0.2.9	README