Skip to content
This repository was archived by the owner on Apr 14, 2023. It is now read-only.

Require MFA for RubyGems actions #306

Merged
merged 1 commit into from
Dec 7, 2021

Conversation

RyanofWoods
Copy link
Contributor

This setting tells RubyGems that MFA is required for accounts to be able
perform any of these privileged operations:

  • gem push
  • gem yank
  • gem owner --add/remove
  • adding or removing owners using gem ownership page

This helps make the gem more secure, as users can be more confident
that gem updates were pushed by maintainers.

More information:
https://guides.rubygems.org/mfa-requirement-opt-in/
https://docs.rubocop.org/rubocop/cops_gemspec.html#gemspecrequiremfa

This setting tells RubyGems that MFA is required for accounts to be able
perform any of these privileged operations:
- gem push
- gem yank
- gem owner --add/remove
- adding or removing owners using gem ownership page

This helps make the gem more secure, as users can be more confident
that gem updates were pushed by maintainers.

More information:
https://guides.rubygems.org/mfa-requirement-opt-in/
https://docs.rubocop.org/rubocop/cops_gemspec.html#gemspecrequiremfa
@RyanofWoods RyanofWoods force-pushed the require-mfa-on-rubygems branch from bd61a77 to c9ba93b Compare December 1, 2021 13:46
Copy link

@DanielePalombo DanielePalombo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@kennyadsl kennyadsl merged commit e2b87a4 into solidusio:master Dec 7, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants