bundlerUpdateScript: don't run bundler-audit
Blocking updates on security warnings doesn't make sense; if an updated gem has dependencies with security warnings, then it's likely for the un-updated gem to have even more of them.
This commit is contained in:
parent
f74369f71b
commit
e62118a3f9
1 changed files with 2 additions and 3 deletions
|
@ -1,11 +1,11 @@
|
|||
{ runtimeShell, lib, writeScript, bundix, bundler, bundler-audit, coreutils, git, nix }:
|
||||
{ runtimeShell, lib, writeScript, bundix, bundler, coreutils, git, nix }:
|
||||
|
||||
attrPath:
|
||||
|
||||
let
|
||||
updateScript = writeScript "bundler-update-script" ''
|
||||
#!${runtimeShell}
|
||||
PATH=${lib.makeBinPath [ bundler bundler-audit bundix coreutils git nix ]}
|
||||
PATH=${lib.makeBinPath [ bundler bundix coreutils git nix ]}
|
||||
set -o errexit
|
||||
set -o nounset
|
||||
set -o pipefail
|
||||
|
@ -19,7 +19,6 @@ let
|
|||
cd "$gemdir"
|
||||
|
||||
bundler lock --update
|
||||
bundler-audit check --update
|
||||
bundix
|
||||
'';
|
||||
in [ updateScript attrPath ]
|
||||
|
|
Loading…
Reference in a new issue