Skip to content

Commit

Permalink
Opt-in for MFA requirement
Browse files Browse the repository at this point in the history
Pupular gems with 180M+ downloads implicitly requires that all
privileged operations by any of the owners require OTP.

At the moment of this commit, `rufus-scheduler` has 109M+ downloads,
so this commit makes the gem more secure by requiring that all
privileged operations by any of the owners require OTP.

Also, by explicitly setting `rubygems_mfa_required` metadata, the gem
will show "NEW VERSIONS REQUIRE MFA" and "VERSION PUBLISHED WITH MFA"
in the sidebar at https://github.com/jmettraux/rufus-scheduler

Ref:
- https://blog.rubygems.org/2022/08/15/requiring-mfa-on-popular-gems.html
- https://guides.rubygems.org/mfa-requirement-opt-in/
  • Loading branch information
tagliala committed Aug 16, 2024
1 parent bf33cea commit c24e2c9
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions rufus-scheduler.gemspec
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ Job scheduler for Ruby (at, cron, in and every jobs). Not a replacement for cron
#'wiki_uri' => s.homepage + '/flor/wiki',
#'documentation_uri' => s.homepage + '/tree/master/doc',
#'mailing_list_uri' => 'https://groups.google.com/forum/#!forum/floraison',
'rubygems_mfa_required' => 'true',
}

#s.files = `git ls-files`.split("\n")
Expand Down

0 comments on commit c24e2c9

Please sign in to comment.