RailsConf 2022 - Gem install: What could go wrong? by Ashley Ellis Pierce & Betty Li

Channel:

Confreaks

Subscribers:

42,100

Published on January 16, 2023 4:00:19 PM ● Video Link: https://www.youtube.com/watch?v=e5_3kL0SdzM

Duration: 29:27

33 views

0

The open source gem ecosystem is a major strength of Ruby and it’s not uncommon for a production Rails application to depend upon hundreds of gems. But what are the risks of installing a gem and having it in your Gemfile?

In this talk, we’ll cover what “bad things” can actually happen when you install a gem. We’ll also talk about the ways of preventing these attacks from occurring in your application dependencies (so you can sleep well at night).