active_storage_encryption 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1f97954b59908255d0d2e09943e111ca33af803ca47d3a9af06a44e23064f725
-  data.tar.gz: 700a8909d6492c8a8a8633c24a15418428c5e740d15adeef2cfcb15dcf872ac9
+  metadata.gz: 850bd7cbc71749f88f1a8e7c4305de38bfbb7c3641ee75864a34ce9f712af65a
+  data.tar.gz: 2ffa5b8c6abc2038395366138eb6f1d43dd4246f3d728e923a440805b7f53838
 SHA512:
-  metadata.gz: 5eef06c92277075e3b5b9c5b4421f6b8352956b48f29b442d70b777ce737326f0470a728903ae1a42994792deb2d026b30b7497ea01c9ed723965e2e03c0d0d9
-  data.tar.gz: d94575af669034bccf27f41de435c44219f247d71c8d19e3c24d27e0af5301e55e53afccd141e1c5047921880836380aa414f628f4602cafbce82831ceb35d5a
+  metadata.gz: 489bf8dbd01ee254354cf3dbcbedab9743f9f16f5b93c352cb234c8eef4f909c31916eef7187002eac8b0f66d476fd55d44cf31bd8320ea6fa275b36d62cb3b6
+  data.tar.gz: 746b6efed5b2e4819f280f511a1eb66882a257b173c6699b85a10606d1eac0210da92f6020c480e08de5e509a34f4eb7ff50f46c703609e5ed284ecd5cb0f23c

data/.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+- package-ecosystem: bundler
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10

data/.github/workflows/ci.yml

@@ -0,0 +1,75 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [ main ]
+
+jobs:
+  lint:
+    name: "Lint"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # Note: Appraisals for Rails 7 and Rails 8 differ in minimum Ruby version: 3.1.0+ vs 3.2.2+
+      # So the version of Ruby to use here is the version that is able to run all Appraisals
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 3.2.2
+          bundler-cache: true
+
+      - name: Lint code for consistent style
+        run: bundle exec standardrb
+
+  test_rails7:
+    name: "Tests (Rails 7)"
+    runs-on: ubuntu-latest
+    env:
+      BUNDLE_GEMFILE: ${{ github.workspace }}/gemfiles/rails_7.gemfile
+    steps:
+      - name: Install packages
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y curl libjemalloc2 sqlite3
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 3.2.2
+          bundler-cache: true
+
+      - name: Run tests
+        env:
+          RAILS_ENV: test
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        run: bin/rails app:test
+
+  test_rails_8:
+    name: "Tests (Rails 8)"
+    runs-on: ubuntu-latest
+    env:
+      BUNDLE_GEMFILE: ${{ github.workspace }}/gemfiles/rails_8.gemfile
+    steps:
+      - name: Install packages
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y curl libjemalloc2 sqlite3
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 3.2.2
+          bundler-cache: true
+
+      - name: Run tests
+        env:
+          RAILS_ENV: test
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        run: bin/rails app:test

data/.gitignore

@@ -0,0 +1,14 @@
+/.bundle/
+/doc/
+/log/*.log
+/pkg/
+/tmp/
+/test/dummy/db/*.sqlite3
+/test/dummy/db/*.sqlite3-*
+/test/dummy/log/*.log
+/test/dummy/storage/
+/test/dummy/tmp/
+
+# The Bundler lockfile should not be cached because its contents is arch-dependent
+Gemfile.lock
+.DS_Store

data/.ruby-version

@@ -0,0 +1 @@
+3.2.2

data/.standard.yml

@@ -0,0 +1 @@
+ruby_version: 3.1

data/Appraisals

@@ -1,7 +1,9 @@
 appraise "rails-7" do
   gem "rails", "< 8.0"
+  gem "stringio"
 end
 
 appraise "rails-8" do
   gem "rails", ">= 8.0"
+  gem "stringio"
 end

data/Gemfile

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+# Specify your gem's dependencies in active_storage_encryption.gemspec.
+gemspec
+
+# Start debugger with binding.b [https://github.com/ruby/debug]
+# gem "debug", ">= 1.0.0"

data/README.md

@@ -113,6 +113,8 @@ Implementation details:
   * `x-amz-server-side-encryption-customer-key`
   * `x-amz-server-side-encryption-customer-key-MD5`
 
+While S3 allows the `x-amz-server-side-encryption-customer-key-MD5` to be added to the signed URL for PUT, the value of that header gets removed from the signature due to the process called "hoisting" - which occurs during the signing of the URL. So your client _may_ override the encryption key you give it forcibly, by replacing the `x-amz-server-side-encryption-customer-key` and `x-amz-server-side-encryption-customer-key-MD5`. This can produce Blobs encrypted with a key you do not have. If you want to exclude the possibility of this, you need to perform an integrity check on your uploads. The integrity check will fail if the encryption key has been overridden in this manner, and you can then destroy the Blob. This problem has been reported to AWS.
+
 ### EncryptedDiskSevice - Filesystem
 
 Can be used instead of the cloud services in development, or on the server if desired. The service will use AES-256-GCM encryption, with a way to switch to a different/more modern encryption scheme in the future.

data/active_storage_encryption.gemspec

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require_relative "lib/active_storage_encryption/version"
+
+Gem::Specification.new do |spec|
+  spec.name = "active_storage_encryption"
+  spec.version = ActiveStorageEncryption::VERSION
+  spec.authors = ["Julik Tarkhanov", "Sebastian van Hesteren"]
+  spec.email = ["me@julik.nl"]
+  spec.homepage = "https://github.com/cheddar-me/active_storage_encryption"
+  spec.summary = "Customer-supplied encryption key support for ActiveStorage blobs."
+  spec.description = "Adds customer-supplied encryption keys to storage services."
+  spec.license = "MIT"
+  spec.required_ruby_version = ">= 3.1.0"
+
+  # Prevent pushing this gem to RubyGems.org. To allow pushes either set the "allowed_push_host"
+  # to allow pushing to a single host or delete this section to allow pushing to any host.
+  spec.metadata["allowed_push_host"] = "https://rubygems.org"
+
+  # The homepage link on rubygems.org only appears if you add homepage_uri. Just spec.homepage is not enough.
+  spec.metadata["homepage_uri"] = spec.homepage
+  spec.metadata["source_code_uri"] = spec.homepage
+  spec.metadata["changelog_uri"] = "#{spec.homepage}/blob/main/CHANGELOG.md"
+
+  # Do not remove any files from the gemspec - tests are useful because people can read them
+  spec.files = Dir.chdir(File.expand_path(__dir__)) do
+    `git ls-files -z`.split("\x0")
+  end
+
+  spec.add_dependency "rails", ">= 7.2.2.1"
+  spec.add_dependency "block_cipher_kit", ">= 0.0.4"
+  spec.add_dependency "serve_byte_range", "~> 1.0"
+  spec.add_dependency "activestorage"
+
+  # Testing with cloud services
+  spec.add_development_dependency "aws-sdk-s3"
+  spec.add_development_dependency "net-http"
+
+  # Code formatting, linting and testing
+  spec.add_development_dependency "sqlite3"
+  spec.add_development_dependency "standard", ">= 1.35.1"
+  spec.add_development_dependency "appraisal"
+  spec.add_development_dependency "magic_frozen_string_literal"
+  spec.add_development_dependency "rake"
+end

data/gemfiles/rails_7.gemfile

@@ -3,5 +3,6 @@
 source "https://rubygems.org"
 
 gem "rails", "< 8.0"
+gem "stringio"
 
 gemspec path: "../"

data/gemfiles/rails_7.gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: ..
   specs:
-    active_storage_encryption (0.2.0)
+    active_storage_encryption (0.2.2)
       activestorage
       block_cipher_kit (>= 0.0.4)
       rails (>= 7.2.2.1)
@@ -279,6 +279,7 @@ DEPENDENCIES
   rake
   sqlite3
   standard (>= 1.35.1)
+  stringio
 
 BUNDLED WITH
    2.5.11

data/gemfiles/rails_8.gemfile

@@ -3,5 +3,6 @@
 source "https://rubygems.org"
 
 gem "rails", ">= 8.0"
+gem "stringio"
 
 gemspec path: "../"

data/gemfiles/rails_8.gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: ..
   specs:
-    active_storage_encryption (0.2.0)
+    active_storage_encryption (0.2.2)
       activestorage
       block_cipher_kit (>= 0.0.4)
       rails (>= 7.2.2.1)
@@ -279,6 +279,7 @@ DEPENDENCIES
   rake
   sqlite3
   standard (>= 1.35.1)
+  stringio
 
 BUNDLED WITH
    2.5.11

data/lib/active_storage_encryption/engine.rb

@@ -3,5 +3,9 @@
 module ActiveStorageEncryption
   class Engine < ::Rails::Engine
     isolate_namespace ActiveStorageEncryption
+
+    generators do
+      require "generators/install_generator"
+    end
   end
 end

data/lib/active_storage_encryption/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ActiveStorageEncryption
-  VERSION = "0.2.0"
+  VERSION = "0.2.2"
 end

data/lib/generators/add_encryption_key_to_active_storage_blobs.rb.erb

@@ -0,0 +1,9 @@
+class AddEncryptionKeyToActiveStorageBlobs < ActiveRecord::Migration[7.2]
+  def change
+    # You _must_ use attribute encryption for this column. Rails uses base64 and JSON encoding
+    # for encrypted attributes, so they can be stored as a string. The "raw" encryption key
+    # that active_storage_encryption will generate and assign to the Blob is going to be
+    # binary, however.
+    add_column :active_storage_blobs, :encryption_key, :string, if_not_exists: true
+  end
+end

data/lib/generators/install_generator.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+require "rails/generators"
+require "rails/generators/active_record"
+
+module ActiveStorageEncryption
+  # The generator is used to install ActiveStorageEncryption. It adds the `encryption_key`
+  # column to ActiveStorage::Blob.
+  # Run it with `bin/rails g active_storage_encryption:install` in your console.
+  class InstallGenerator < Rails::Generators::Base
+    include ActiveRecord::Generators::Migration
+
+    source_paths << File.join(File.dirname(__FILE__, 2))
+
+    # Generates monolithic migration file that contains all database changes.
+    def create_migration_file
+      # Adding a new migration to the gem is then just adding a file.
+      migration_file_paths_in_order = Dir.glob(__dir__ + "/*.rb.erb").sort
+      migration_file_paths_in_order.each do |migration_template_path|
+        untemplated_migration_filename = File.basename(migration_template_path).gsub(/\.erb$/, "")
+        migration_template(migration_template_path, File.join(db_migrate_path, untemplated_migration_filename))
+      end
+    end
+  end
+end

metadata

@@ -1,15 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: active_storage_encryption
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - Julik Tarkhanov
 - Sebastian van Hesteren
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -172,10 +171,17 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/dependabot.yml"
+- ".github/workflows/ci.yml"
+- ".gitignore"
+- ".ruby-version"
+- ".standard.yml"
 - Appraisals
+- Gemfile
 - MIT-LICENSE
 - README.md
 - Rakefile
+- active_storage_encryption.gemspec
 - bin/rails
 - bin/rubocop
 - config/initializers/active_storage_encryption.rb
@@ -200,13 +206,18 @@ files:
 - lib/active_storage_encryption/private_url_policy.rb
 - lib/active_storage_encryption/resumable_gcs_upload.rb
 - lib/active_storage_encryption/version.rb
+- lib/generators/add_encryption_key_to_active_storage_blobs.rb.erb
+- lib/generators/install_generator.rb
 - lib/tasks/active_storage_encryption_tasks.rake
 - test/active_storage_encryption_test.rb
 - test/dummy/Rakefile
+- test/dummy/app/assets/images/.keep
 - test/dummy/app/assets/stylesheets/application.css
 - test/dummy/app/controllers/application_controller.rb
+- test/dummy/app/controllers/concerns/.keep
 - test/dummy/app/helpers/application_helper.rb
 - test/dummy/app/models/application_record.rb
+- test/dummy/app/models/concerns/.keep
 - test/dummy/app/views/layouts/application.html.erb
 - test/dummy/app/views/pwa/manifest.json.erb
 - test/dummy/app/views/pwa/service-worker.js
@@ -234,133 +245,16 @@ files:
 - test/dummy/db/migrate/20250304023851_create_active_storage_tables.active_storage.rb
 - test/dummy/db/migrate/20250304023853_add_blob_encryption_key_column.rb
 - test/dummy/db/schema.rb
-- test/dummy/log/development.log
-- test/dummy/log/test.log
+- test/dummy/lib/assets/.keep
+- test/dummy/log/.keep
 - test/dummy/public/404.html
 - test/dummy/public/406-unsupported-browser.html
 - test/dummy/public/422.html
 - test/dummy/public/500.html
 - test/dummy/public/icon.png
 - test/dummy/public/icon.svg
-- test/dummy/storage/0a/mt/0amtaps713liftrtbxt9h998epz4
-- test/dummy/storage/0b/93/0b93pygovuunam1a3ovzwmrbuw2x
-- test/dummy/storage/0m/3s/0m3s7r3nboblijr1jxlnvm3p3l4b
-- test/dummy/storage/0o/9s/0o9s4ctbpu757qh7ucyony0itek4
-- test/dummy/storage/1e/q6/1eq646og0wazgfw7bwjqz2uem0g4
-- test/dummy/storage/1n/o3/1no30cpwrm727bm6arvb7zxagdg1
-- test/dummy/storage/1x/6w/1x6wsoq3pew17reztwax78lrr3hc
-- test/dummy/storage/28/de/28deswrv89c9f2tk7dz1l5uovd4r
-- test/dummy/storage/2h/sd/2hsd1mh20c6os2nzyoicfyymhwev
-- test/dummy/storage/2t/ni/2tnidhdk4c6cj0tnw3jiw88dgs4g
-- test/dummy/storage/2v/e0/2ve0555nluisy2el5cf4txzgae3j
-- test/dummy/storage/2z/c5/2zc5mj8g0o9l7mfnim0vs4v48xd6
-- test/dummy/storage/34/xc/34xc9hk74dm9227d6mhgfcfxl4ue
-- test/dummy/storage/3z/0t/3z0tnve7ivrq0qyrvfhfzztjhjqs
-- test/dummy/storage/49/14/4914188q1dptpw4po91cp54f32bg
-- test/dummy/storage/4c/74/4c7412lfz0pm2ocg6u01h67bnsch
-- test/dummy/storage/52/qf/52qfbgjlf3gor3agsyrt09t19o55
-- test/dummy/storage/57/go/57gok1uc4ebc3ugrjrje4lpe1ram
-- test/dummy/storage/5f/dv/5fdvt6tu1mkyajbz4hbxbw6fpt9w
-- test/dummy/storage/5x/b7/5xb7zzi66fi5f6yrn09pq4ogb9wo
-- test/dummy/storage/6m/vr/6mvr1fr5it125tm4vahjw6bv9wkz
-- test/dummy/storage/7b/hb/7bhbdxqn67lape1f49jqfktcei4n
-- test/dummy/storage/7n/4v/7n4vpm1q14y4qffc4jj78m036gtw
-- test/dummy/storage/7q/ku/7qkufbjwbbqwnf89uciosleixnew
-- test/dummy/storage/8l/5v/8l5vb4o02hx46s5qohfn5to945p3
-- test/dummy/storage/8q/pu/8qpun3f8vzl7auxajvqyq8f48ngw
-- test/dummy/storage/8w/ag/8wag4ptmox207h7mobamk0tcebwx
-- test/dummy/storage/8w/v8/8wv8lrhsw4s2r6guh1csd3jd89ii
-- test/dummy/storage/9b/c6/9bc6wlpfnqdywpnxgeoin3w9b5ch
-- test/dummy/storage/9l/wk/9lwkt21k5iburdaitbwliw7krtwt
-- test/dummy/storage/9p/0v/9p0vgfw3l2854k7so3rp33rmyh7p
-- test/dummy/storage/9r/sy/9rsya3r6syft34qz24g1h4u4qq44
-- test/dummy/storage/9s/es/9seslusr46xjf3mfzq10hkp13kc1
-- test/dummy/storage/9t/nv/9tnvn5v52fkvurpgszf4gco78t5h
-- test/dummy/storage/9u/to/9utokgxyu6xyovandu7pjhogoaqp
-- test/dummy/storage/9w/a4/9wa4c20p4dvm1cd5thnv9f7ei13w
-- test/dummy/storage/at/kg/atkgs5gwz2xdv9lvqftsg6p7gcpu
-- test/dummy/storage/at/qo/atqomgf3rpb2f6e1tq1yn2xqzojv
-- test/dummy/storage/ba/lq/balqtije6kf82ht4lr70ajaae9kc
-- test/dummy/storage/bf/i1/bfi1ij9rygr6lkx1r0lhgi8o5smx
-- test/dummy/storage/bg/ye/bgyenotrv3aj6lk88edwv0c41pfj
-- test/dummy/storage/bu/xe/buxed4b1l78kcax53fa37awm9ywk
-- test/dummy/storage/d2/c1/d2c11nhikb474oq3q7so0xbhukvj
-- test/dummy/storage/development.sqlite3
-- test/dummy/storage/dk/hy/dkhybxn2o27a8xgvfhsxpgqxa1zf
-- test/dummy/storage/e7/2n/e72nz5cz3wf6qvh4dw4qfnw6ucog
-- test/dummy/storage/eo/4q/eo4qn68m7al0ehhe0s23ycuzkjto
-- test/dummy/storage/ew/8s/ew8sejdsx8ddmrzkvfa37ebz1ts1
-- test/dummy/storage/f8/q1/f8q1kpg2tou8ru0afj8d2gy6ym5p
-- test/dummy/storage/fr/55/fr558uhp1k93jzhb4butyi2ry51t
-- test/dummy/storage/g4/nh/g4nhx1zxbeiegqpgn8ppsl1yhm0t
-- test/dummy/storage/gg/r5/ggr51egxhqfh4w5eluzs47qceb76
-- test/dummy/storage/gh/ua/ghuaagralqmjy8rkbwmuv3010lvs
-- test/dummy/storage/gx/uh/gxuhmf52ufli3m7ng8irp8ghxa1v
-- test/dummy/storage/h0/m1/h0m1emy251xus1d9qh6u25dzy18o
-- test/dummy/storage/hh/kc/hhkc2q8paptyvhw2m5hlwylhtfo5
-- test/dummy/storage/hq/0q/hq0q04kr6qzrp0qaee8rehcp2tzx
-- test/dummy/storage/ii/g1/iig1ge3fsjitai4g2fkq4qt369wh
-- test/dummy/storage/io/f0/iof0mv7w8qjd6m826g52pzyxedet
-- test/dummy/storage/jk/2i/jk2ifmx6ac35ubk3esufnm6bn1m1
-- test/dummy/storage/jw/4t/jw4trdeyfkw3j8z70xcnr9a7gqe5
-- test/dummy/storage/ke/k2/kek24leksglm1rs2a78mfmot0p3s
-- test/dummy/storage/kh/6d/kh6doaxxwxiyes0yqz2dmmpajkzv
-- test/dummy/storage/kj/7n/kj7nookjhisagd80z8hlv3wn50am
-- test/dummy/storage/kq/lf/kqlf5udtrgrk4v55qodxyt6i68p8
-- test/dummy/storage/ky/33/ky334jbo8eb08pj9qbe919iz91mh
-- test/dummy/storage/lt/zw/ltzw4lur2bheit1273ogpfzhv7j1
-- test/dummy/storage/m2/ve/m2vejmyttn1ium81dopppom6vum6
-- test/dummy/storage/m8/d4/m8d4r9iauedq8wlpvnx1f3ou0jwg
-- test/dummy/storage/m9/ee/m9eetioklzatyff94gq0vn1cga1n
-- test/dummy/storage/ma/v0/mav084zvmyoh1a8i7dcwqy2aaoi9
-- test/dummy/storage/mg/pa/mgpauiu02i28j3poef65k3q0gfpw
-- test/dummy/storage/mm/8g/mm8gp5evncb1ol1lj2jlmra2ixij
-- test/dummy/storage/mm/d2/mmd21x8c1amgnidzw0wowiwug4g3
-- test/dummy/storage/n2/qr/n2qro0y9heko9cwxlf10wiqiipsw
-- test/dummy/storage/n8/b7/n8b7b7qgu6jtw577dnn10jrrmszs
-- test/dummy/storage/n8/p2/n8p2ine0qqhphn09kqtxco4y7g0a
-- test/dummy/storage/nk/vh/nkvhgk7snpdy2ak6k02htxx9swp7
-- test/dummy/storage/nn/s0/nns0nggo0x645ytco52adnsi4myp
-- test/dummy/storage/nu/kz/nukzl7cckkzh68i7kyjkm9mzw7c0
-- test/dummy/storage/nv/8v/nv8vyoghcde1yr1bjpsw4327qt7s
-- test/dummy/storage/of/on/ofonhf1gs26k3dpj6o7b0ktzfowh
-- test/dummy/storage/pl/pf/plpfs59hvdoogj9gdweqta36csqn
-- test/dummy/storage/q5/g5/q5g55ekmscu10pzfw6q4syigt81g
-- test/dummy/storage/q5/kc/q5kcr9twyb9v4mh31pay0t7nkuwu
-- test/dummy/storage/qa/xd/qaxdngi74r52ahqg1pz8hjddeajc
-- test/dummy/storage/r7/5v/r75vadn34ak53vinylgnfdl1s8rt
-- test/dummy/storage/rj/rg/rjrghnyzyvxpkjw1a57mrloz72x1
-- test/dummy/storage/se/h7/seh7eorfoanpp6de62pubv7kyu1a
-- test/dummy/storage/sj/i1/sji1oj12soz2fcjcoz0gejvzo8to
-- test/dummy/storage/sn/2r/sn2rku9thay4hbcbt926an69maku
-- test/dummy/storage/sw/jm/swjmbmxou3tnarcirxc6gdycxh91
-- test/dummy/storage/sz/mq/szmqlydvpgqaw7p3v0wh444wtcif
-- test/dummy/storage/test.sqlite3
-- test/dummy/storage/tg/by/tgbyrdvg94ivhhy2z59e8l9fod10
-- test/dummy/storage/u5/vm/u5vmz08tuayqggd436et8fiaeml1
-- test/dummy/storage/u6/pf/u6pf4yky0vbmvid3fa3lm4lre68g
-- test/dummy/storage/ub/ql/ubqlmlilt8ujgdpngcm1zae41kgy
-- test/dummy/storage/un/29/un29e9khqism72ag27ojccmn5sds
-- test/dummy/storage/ux/ns/uxnsvuk4rr1p67n1oq6tmraz0gaw
-- test/dummy/storage/v1/qo/v1qor0zxg3lctk9mbwyos3oag9gj
-- test/dummy/storage/v8/ok/v8okmd7374w1obna13a7anllx2vu
-- test/dummy/storage/vd/tf/vdtfmz2ctis3dr1r35do9bow2xj5
-- test/dummy/storage/vo/dg/vodgq1inccnujjt3auber7tt8w8o
-- test/dummy/storage/vp/oe/vpoeiq00tf9pk0jcjlccomkju1zc
-- test/dummy/storage/vu/kg/vukgoj6qf96bhealui2yaeyn4n72
-- test/dummy/storage/w7/2z/w72zoqu7v6v6jp0tpy671dcbvpow
-- test/dummy/storage/wa/3f/wa3fncsnozc6n4xfu32gw34geqcd
-- test/dummy/storage/wy/ix/wyixbqx3f6a4agb8bjhrtpblpaua
-- test/dummy/storage/xd/st/xdsttma3tqt7mex0vhp1vsm3dq16
-- test/dummy/storage/xv/ej/xvejm2e064bnpunx3nmktaqs0x90
-- test/dummy/storage/xx/py/xxpyyodssq2xmp57qrtvuw0wchwk
-- test/dummy/storage/xz/ik/xzikejc5sohi3zexa93s9xmg4jst
-- test/dummy/storage/y4/g8/y4g8teo86blcv0zysa2d2jawvk6i
-- test/dummy/storage/y9/58/y958xli6aoktx1ehuyjc1k8dcbzv
-- test/dummy/storage/yj/lw/yjlw8bf70iujb16deja8ae43rqbc
-- test/dummy/storage/z3/qy/z3qyb9avbucwhxa8909rpfued0y5
-- test/dummy/storage/zr/wu/zrwudcg4kgo7r0jemszuzok8grqp
-- test/dummy/tmp/local_secret.txt
+- test/fixtures/files/.keep
+- test/integration/.keep
 - test/integration/encrypted_blob_proxy_controller_test.rb
 - test/integration/encrypted_blobs_controller_test.rb
 - test/lib/encrypted_disk_service_test.rb
@@ -375,7 +269,6 @@ metadata:
   homepage_uri: https://github.com/cheddar-me/active_storage_encryption
   source_code_uri: https://github.com/cheddar-me/active_storage_encryption
   changelog_uri: https://github.com/cheddar-me/active_storage_encryption/blob/main/CHANGELOG.md
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -390,8 +283,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.6
 specification_version: 4
 summary: Customer-supplied encryption key support for ActiveStorage blobs.
 test_files: []