##### Categories

Software Composition Analysis (SCA) / SBOM

##### Import Options

- API Import  
- UI Import  
- Universal Importer (Pro)

##### File Types

- TXT

##### Integrations

# Bundler-Audit

[Bundler-Audit](https://github.com/rubysec/bundler-audit) is an open-source patch-level verification tool for Ruby applications that scans Gemfile.lock files to identify known security vulnerabilities and insecure gem sources by cross-referencing dependencies against the Ruby Advisory Database maintained by RubySec. The tool performs dependency security analysis to detect vulnerable gem versions, insecure protocols (http:// and git://), and provides detailed advisory information including CVE references, criticality ratings, and remediation guidance to help developers address security risks in their Ruby on Rails applications.

[Docs](https://docs.defectdojo.com/supported_tools/parsers/file/bundler_audit/)