recent_ruby 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 70acf82ea562f877b9336246857d9fa430da031ecce7b2a33177b7466842644c
+  data.tar.gz: 8d7877f3335bc076ed310f466380a81fdca866f4cdad92afba1a2531d60327de
+SHA512:
+  metadata.gz: a04056344a2af842976c31397df0b77e462421afe60b333ed7cb4d286eb8a0ec9d24ea3e57f7411971cdd1289fd8e68ab3ddd9542b50e4ba1a752de403f315c2
+  data.tar.gz: e075082df5ef0d07fec859ee3f168961fbc889c65acfe85f918f784a81da9abb89014dadedb9b5599e8e86847a28dc33f5f4c4fd7d5195b55f4c973e2cdd0362

data/.gitignore

@@ -0,0 +1,50 @@
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/spec/examples.txt
+/test/tmp/
+/test/version_tmp/
+/tmp/
+
+# Used by dotenv library to load environment variables.
+# .env
+
+## Specific to RubyMotion:
+.dat*
+.repl_history
+build/
+*.bridgesupport
+build-iPhoneOS/
+build-iPhoneSimulator/
+
+## Specific to RubyMotion (use of CocoaPods):
+#
+# We recommend against adding the Pods directory to your .gitignore. However
+# you should judge for yourself, the pros and cons are mentioned at:
+# https://guides.cocoapods.org/using/using-cocoapods.html#should-i-check-the-pods-directory-into-source-control
+#
+# vendor/Pods/
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalization:
+/.bundle/
+/vendor/bundle
+/lib/bundler/man/
+
+# for a library or gem, you might want to ignore these files since the code is
+# intended to run in multiple environments; otherwise, check them in:
+# Gemfile.lock
+# .ruby-version
+# .ruby-gemset
+
+# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
+.rvmrc

data/Gemfile

@@ -0,0 +1,6 @@
+source 'https://rubygems.org'
+
+git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
+
+# Specify your gem's dependencies in recent_ruby.gemspec
+gemspec

data/Gemfile.lock

@@ -0,0 +1,78 @@
+PATH
+  remote: .
+  specs:
+    recent_ruby (0.1.0)
+      methadone (~> 1.9.5)
+      parser
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    aruba (0.14.5)
+      childprocess (>= 0.6.3, < 0.10.0)
+      contracts (~> 0.9)
+      cucumber (>= 1.3.19)
+      ffi (~> 1.9.10)
+      rspec-expectations (>= 2.99)
+      thor (~> 0.19)
+    ast (2.4.0)
+    backports (3.11.3)
+    builder (3.2.3)
+    childprocess (0.9.0)
+      ffi (~> 1.0, >= 1.0.11)
+    coderay (1.1.2)
+    contracts (0.16.0)
+    cucumber (3.1.1)
+      builder (>= 2.1.2)
+      cucumber-core (~> 3.1.0)
+      cucumber-expressions (~> 6.0.0)
+      cucumber-wire (~> 0.0.1)
+      diff-lcs (~> 1.3)
+      gherkin (~> 5.1.0)
+      multi_json (>= 1.7.5, < 2.0)
+      multi_test (>= 0.1.2)
+    cucumber-core (3.1.0)
+      backports (>= 3.8.0)
+      cucumber-tag_expressions (~> 1.1.0)
+      gherkin (>= 5.0.0)
+    cucumber-expressions (6.0.1)
+    cucumber-tag_expressions (1.1.1)
+    cucumber-wire (0.0.1)
+    diff-lcs (1.3)
+    ffi (1.9.25)
+    gherkin (5.1.0)
+    methadone (1.9.5)
+      bundler
+    method_source (0.9.0)
+    multi_json (1.13.1)
+    multi_test (0.1.2)
+    parser (2.5.1.0)
+      ast (~> 2.4.0)
+    power_assert (1.1.2)
+    pry (0.11.3)
+      coderay (~> 1.1.0)
+      method_source (~> 0.9.0)
+    rake (10.5.0)
+    rdoc (6.0.4)
+    rspec-expectations (3.7.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.7.0)
+    rspec-support (3.7.1)
+    test-unit (3.2.8)
+      power_assert
+    thor (0.20.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  aruba
+  bundler (~> 1.16)
+  pry
+  rake (~> 10.0)
+  rdoc
+  recent_ruby!
+  test-unit
+
+BUNDLED WITH
+   1.16.2

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Lucas Luitjes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,80 @@
+# Recent Ruby
+
+This script takes a Ruby version number, compares it to all available Ruby versions, and throws an error unless the supplied version number contains the latest security patches.
+
+## Why
+
+Heroku (and other platforms) use the Gemfile to determine which version of Ruby to use. This means, whenever a Ruby vulnerability is found, you need to personally update your Gemfile in order to be safe. This also means you need to pay close attention to the Ruby security notices. On smaller teams, this is often overlooked.
+
+For Ruby gems, you can use Brakeman or Hakiri or Github itself to stay up-to-date with security patches. For your Ruby version, you can now use Recent Ruby.
+
+## Installation
+
+Recent Ruby's installation is pretty standard:
+
+```
+$ gem install recent_ruby
+```
+
+Or just put it in your Gemfile:
+
+```
+gem 'recent_ruby', require: false
+```
+
+## Usage
+
+Just add Recent Ruby in your CI/CD build process, wherever you would put Rubocop or Brakeman. Recent Ruby can check either your Gemfile, or whatever is supplied as a command line argument, and checks if that version of Ruby is the most recent TEENY/PATCH release for that minor version. It also makes sure that your minor version is not End-of-Life yet. If your version of Ruby does happen to be out of date and potentially insecure, it exits with status code 1. This means you can simply drop it into your .circle.yml or your Semaphore build step, or wherever you usually put these things. 
+
+## Examples
+
+Version number supplied on command line (2.3.7 was the latest 2.3 release at the time of this writing):
+
+```
+$ recent_ruby --version-string 2.3.1
+Downloading latest list of Rubies from Github...
+Comparing version numbers...
+Current version is 2.3.1, but the latest patch release for 2.3 is 2.3.7!
+
+$ recent_ruby --version-string 2.3.7
+Downloading latest list of Rubies from Github...
+Comparing version numbers...
+Downloading details for 2.3.7...
+Checking EOL status...
+Ruby version check completed successfully.
+
+$ recent_ruby --version-string 2.0.0-p648
+Downloading latest list of Rubies from Github...
+Comparing version numbers...
+Downloading details for 2.0.0-p648...
+Checking EOL status...
+EOL warning found for 2.0.0-p648!
+``` 
+
+Version number specified in Gemfile:
+
+```
+$ cat path/to/Gemfile
+source "https://rubygems.org"
+
+ruby "2.3.3"
+
+gem "rbnacl-libsodium"
+
+$ recent_ruby --gemfile path/to/Gemfile
+Downloading latest list of Rubies from Github...
+Comparing version numbers...
+Current version is 2.3.3, but the latest patch release for 2.3 is 2.3.7!
+```
+
+## How
+
+If `--gemfile` was supplied, we use the parser gem to extract the Ruby version from the Gemfile.
+
+First, we check that we’re being supplied an MRI stable release. If not, we immediately stop and error with exit code 1. Next, we grab the list of releases from the ruby-build repository and do some comparison to make sure we’re on the latest TEENY/PATCH release. Then we download the build specification from the ruby-build repository, and make sure an End-of-Life warning is not present.
+
+Since the ruby-build repository is well maintained and used in production by many, it’s a reliable source.
+
+## Contributing
+
+Feel free to create issues for any problems you may have. Patches are welcome, especially if they come with a Cucumber scenario.

data/Rakefile

@@ -0,0 +1,56 @@
+def dump_load_path
+  puts $LOAD_PATH.join("\n")
+  found = nil
+  $LOAD_PATH.each do |path|
+    next unless File.exist?(File.join(path, 'rspec'))
+    puts "Found rspec in #{path}"
+    if File.exist?(File.join(path, 'rspec', 'core'))
+      puts 'Found core'
+      if File.exist?(File.join(path, 'rspec', 'core', 'rake_task'))
+        puts 'Found rake_task'
+        found = path
+      else
+        puts '!! no rake_task'
+      end
+    else
+      puts '!!! no core'
+    end
+  end
+  if found.nil?
+    puts "Didn't find rspec/core/rake_task anywhere"
+  else
+    puts "Found in #{path}"
+  end
+end
+require 'bundler'
+require 'rake/clean'
+
+require 'rake/testtask'
+
+require 'cucumber'
+require 'cucumber/rake/task'
+gem 'rdoc' # we need the installed RDoc gem, not the system one
+require 'rdoc/task'
+
+include Rake::DSL
+
+Bundler::GemHelper.install_tasks
+
+Rake::TestTask.new do |t|
+  t.pattern = 'test/tc_*.rb'
+end
+
+CUKE_RESULTS = 'results.html'.freeze
+CLEAN << CUKE_RESULTS
+Cucumber::Rake::Task.new(:features) do |t|
+  t.cucumber_opts = "features --format html -o #{CUKE_RESULTS} --format pretty --no-source -x"
+  t.fork = false
+end
+
+Rake::RDocTask.new do |rd|
+  rd.main = 'README.rdoc'
+
+  rd.rdoc_files.include('README.rdoc', 'lib/**/*.rb', 'bin/**/*')
+end
+
+task default: %i[test features]

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require 'bundler/setup'
+require 'recent_ruby'
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require 'irb'
+IRB.start(__FILE__)

data/bin/recent_ruby

@@ -0,0 +1,44 @@
+#!/usr/bin/env ruby
+
+require 'optparse'
+require 'methadone'
+require 'recent_ruby'
+require 'net/http'
+require 'json'
+require 'parser/current'
+
+class App
+  include Methadone::Main
+  include Methadone::CLILogging
+  extend RecentRuby
+
+  main do
+    gemfile = options['gemfile']
+    version = options['version-string']
+
+    version_base_url = ENV['VERSION_BASE_URL'] || 'https://raw.githubusercontent.com/rbenv/ruby-build/master/share/ruby-build/'
+    versions_url = ENV['VERSIONS_URL'] || 'https://api.github.com/repos/rbenv/ruby-build/contents/share/ruby-build'
+
+    validate_args(gemfile, version)
+    version = parse_gemfile(gemfile) if gemfile
+    validate_mri_version(version)
+    minor = version.split('.')[0, 2]
+
+    rubies = get_rubies(versions_url)
+    latest = latest_minor_version(rubies, minor)
+    compare_versions(version, latest, minor)
+
+    check_eol(version, version_base_url)
+
+    puts 'Ruby version check completed successfully.'
+  end
+
+  on('--gemfile PATH', 'Path of Gemfile')
+  on('--version-string STRING', 'Ruby version string (e.g. 2.3.1)')
+
+  version RecentRuby::VERSION
+
+  use_log_level_option toggle_debug_on_signal: 'USR1'
+
+  go!
+end

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/recent_ruby/version.rb

@@ -0,0 +1,3 @@
+module RecentRuby
+  VERSION = '0.1.0'.freeze
+end

data/lib/recent_ruby/xml_ast.rb

@@ -0,0 +1,55 @@
+require 'parser/current'
+require 'rexml/document'
+
+module RecentRuby
+
+# Class comes from: https://medium.com/rubyinside/using-xpath-to-rewrite-ruby-code-with-ease-8f635af65b5b
+# TODO: turn into a separate gem
+
+	class XMLAST
+		include REXML
+		attr_reader :doc
+
+		def initialize sexp
+		  @doc = Document.new "<root></root>"
+		  @sexp = sexp
+		  root = @doc.root
+		  populate_tree(root, sexp)
+		end
+
+		def populate_tree xml, sexp
+		  if sexp.is_a?(String) ||
+		      sexp.is_a?(Symbol) ||
+		      sexp.is_a?(Numeric) ||
+		      sexp.is_a?(NilClass)
+		    el = Element.new(sexp.class.to_s.downcase + "-val")
+		    el.add_attribute 'value', sexp.to_s
+		    xml.add_element el
+		  else
+		    el = Element.new(sexp.type.to_s)
+		    el.add_attribute('id', sexp.object_id)
+
+		    sexp.children.each{ |n| populate_tree(el, n) }
+		    xml.add_element el
+		  end
+		end
+
+		def treewalk sexp=@sexp
+		  return sexp unless sexp&.respond_to?(:children)
+		  [sexp, sexp.children.map {|n| treewalk(n) }].flatten
+		end
+
+		def xpath path
+		  results = XPath.match(doc, path)
+		  results.map do |n|
+		    if n.respond_to?(:attributes) && n.attributes['id']
+		      treewalk.find do |m| 
+		        m.object_id.to_s == n.attributes['id']
+		      end
+		    else
+		      n
+		    end
+		  end
+		end
+	end
+end

data/lib/recent_ruby.rb

@@ -0,0 +1,80 @@
+require 'recent_ruby/version'
+require 'recent_ruby/xml_ast'
+
+module RecentRuby
+  def http_get(url)
+    uri = URI(url)
+    Net::HTTP.start(uri.host, uri.port,
+                    use_ssl: uri.scheme == 'https') do |http|
+      request = Net::HTTP::Get.new uri
+      response = http.request request
+      if response.code != '200'
+        puts "Error: received HTTP #{response.code} response from Github:\n\n#{response.body}"
+        exit(2)
+      end
+      response.body
+    end
+  end
+
+  def validate_args(gemfile, version)
+    if gemfile && version
+      puts 'Please supply only one argument. Run with -h for more information.'
+      exit(1)
+    elsif !gemfile && !version
+      puts 'Please supply either a gemfile path or a version string. Run with -h for more information.'
+      exit(1)
+    end
+  end
+
+  def parse_gemfile(gemfile)
+    ast = Parser::CurrentRuby.parse(File.read(gemfile))
+    xml = RecentRuby::XMLAST.new(ast)
+    version = xml.xpath("//send[symbol-val[@value='ruby']]/str/string-val/@value") || [nil]
+    version = version.first ? version.first.value : nil
+    unless version
+      puts 'Unable to find ruby version in gemfile.'
+      exit(1)
+    end
+    version
+  end
+
+  def validate_mri_version(version)
+    return if version =~ /^(\d+\.\d+\.\d+(-p\d+)?)$/
+	  puts 'Only stable release MRI version strings are currently supported. (e.g. 2.3.1 or 2.3.1-p12)'
+	  exit(1)
+  end
+
+  def get_rubies(versions_url)
+    puts 'Downloading latest list of Rubies from Github...'
+    JSON.parse(http_get(versions_url))
+  end
+
+  def latest_minor_version(rubies, minor)
+    minor_rubies = rubies.map { |n| n['name'] }.select do |n|
+      n =~ /^\d+\.\d+\.\d+(-p\d+)?$/ &&
+        n.split('.')[0, 2] == minor
+    end
+
+    minor_rubies.max_by do |ruby|
+      a, b, c, d = *ruby.sub('-p', '.').split('.').map(&:to_i)
+      [a, b, c, d || -1]
+    end
+  end
+
+  def check_eol(version, version_base_url)
+    puts "Downloading details for #{version}..."
+    details = http_get("#{version_base_url}#{version}")
+    puts 'Checking EOL status...'
+
+    return unless details =~ / warn_eol /
+    puts "EOL warning found for #{version}!"
+    exit 1
+  end
+
+  def compare_versions(version, latest, minor)
+    puts 'Comparing version numbers...'
+    return if version == latest
+    puts "Current version is #{version}, but the latest patch release for #{minor.join('.')} is #{latest}!"
+    exit 1
+  end
+end

data/recent_ruby.gemspec

@@ -0,0 +1,42 @@
+
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "recent_ruby/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "recent_ruby"
+  spec.license       = "MIT"
+  spec.version       = RecentRuby::VERSION
+  spec.authors       = ["Lucas Luitjes"]
+  spec.email         = ["lucas@luitjes.it"]
+
+  spec.summary       = %q{CLI tool for your CI/CD to make sure a recent and secure ruby version is used.}
+  spec.homepage      = "https://github.com/lucasluitjes/recent_ruby"
+
+  # Prevent pushing this gem to RubyGems.org. To allow pushes either set the 'allowed_push_host'
+  # to allow pushing to a single host or delete this section to allow pushing to any host.
+  if spec.respond_to?(:metadata)
+    spec.metadata["allowed_push_host"] = "https://rubygems.org"
+  else
+    raise "RubyGems 2.0 or newer is required to protect against " \
+      "public gem pushes."
+  end
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
+    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  end
+  spec.bindir        = "bin"
+  spec.executables   = "recent_ruby"
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.16"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency('rdoc')
+  spec.add_development_dependency('pry')
+  spec.add_development_dependency('aruba')
+  spec.add_dependency('methadone', '~> 1.9.5')
+  spec.add_dependency('parser')
+  spec.add_development_dependency('test-unit')
+end

metadata

@@ -0,0 +1,172 @@
+--- !ruby/object:Gem::Specification
+name: recent_ruby
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Lucas Luitjes
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-06-21 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rdoc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aruba
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: methadone
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.5
+- !ruby/object:Gem::Dependency
+  name: parser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: test-unit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email:
+- lucas@luitjes.it
+executables:
+- recent_ruby
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- Gemfile.lock
+- LICENSE
+- README.md
+- Rakefile
+- bin/console
+- bin/recent_ruby
+- bin/setup
+- lib/recent_ruby.rb
+- lib/recent_ruby/version.rb
+- lib/recent_ruby/xml_ast.rb
+- recent_ruby.gemspec
+homepage: https://github.com/lucasluitjes/recent_ruby
+licenses:
+- MIT
+metadata:
+  allowed_push_host: https://rubygems.org
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.6
+signing_key: 
+specification_version: 4
+summary: CLI tool for your CI/CD to make sure a recent and secure ruby version is
+  used.
+test_files: []