Automated RubyGems Security Advisory Alerts
Every morning, WebRun opens RubyGems, checks security advisories for every gem your team depends on, creates a Trello card naming the gem, affected versions, and severity for each new advisory, and texts the maintainer through WhatsApp when it's rated critical so a vulnerable dependency gets patched before it ships in the next release.
How do I catch vulnerable RubyGems dependencies before they ship?
WebRun checks RubyGems every morning for security advisories affecting gems your team depends on. It creates a Trello card naming the gem, affected versions, and severity, and texts the maintainer through WhatsApp for anything critical, so a vulnerable dependency gets patched before it ships in the next release.
- Critical advisories reach the maintainer the same morning they publish
- Every advisory affecting your dependencies has a tracked Trello card
- Vulnerable gems get patched before they ship in a release
Built for Ruby engineering teams · security engineers · DevSecOps · platform teams
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
rubygems.org/sign_inin a real browser with your saved login - no setup, no API keys. -
1
RubyGems - check for new security advisories
- Open RubyGems and check advisories for gems your team depends on
- Capture the gem, affected version range, and severity for each new advisory
- Separate out anything rated critical
Done when Every new advisory since yesterday is listed with its gem and severity.
-
2
Trello - card each advisory for the team
trello.com
WebRun opens Trello to card each advisory for the team. - Create a card on the dependency security board for each new advisory
- Title it with the gem, affected versions, and severity
- Move the card to done once the gem is upgraded past the affected range
Done when Every new advisory has a card, and patched ones are marked done.
-
3
WhatsApp - text the maintainer on critical ones
whatsapp.com
WebRun opens WhatsApp to text the maintainer on critical ones. - Text the maintainer only for advisories rated critical
- Name the gem and affected version range
- Skip the text for lower severity advisories
Done when The maintainer has a text for every critical advisory.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will it upgrade the vulnerable gem itself?
No. WebRun only reports the advisory. Upgrading a gem is always done by an engineer, after checking it doesn't break anything.
How does it know which gems my team depends on?
It checks advisories against the dependencies listed in your project's Gemfile, so unrelated advisories don't create noise.
What happens once a gem is patched?
Its Trello card moves to done automatically once the check finds the dependency upgraded past the affected version range.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.