Comments (3)
I've edited the above issue report to correct information on false positives and missing issues. The issue continues to be valid, particularly the Sexp
monkey patch conflicts.
from pronto.
Hey @eliotsykes!
I'm not sure that the Sexp monkey-patching explains the entire issue yet
My investigation is definitely pointing in the same direction as Sexp
is so ubiquitous in brakeman, ruby_parser, code_analyzer.
I've made a repository with an executable test case demonstrating the issue in isolation from pronto and other gems. I hope that it'll be useful for anyone willing to tag along.
It includes:
- Failing example
- Possible solution - after a bit of tinkering and reading, forking seems to be the the best (only?) possible effective way to sandbox some code execution in Ruby. I've used Yehuda Katz's solution here.
Please check it out. I'm positive we'll come up with a solution very soon. 😃
from pronto.
Hi @nbekirov - thanks for looking into this. Your forking plan looks promising.
from pronto.
Related Issues (20)
- Release new gem version HOT 2
- Pronto doesn't seem to compare files if they only changed file mode
- Relax Octokit version dependency HOT 1
- Could not find rake-13.0.1 in any of the sources (Bundler::GemNotFound)
- Upgrade rugged dependency for Ruby 3.2.0 - Dir.exists? is deprecated HOT 6
- config value 'safe.directory' was not found (Rugged::ConfigError) error after upgrade to 0.11.1 HOT 8
- merge_base: revspec 'master' not found (Rugged::ReferenceError) HOT 2
- Pronto restricting version of `chardet`
- Issue with comments not being created/posted with Github action workflow HOT 1
- Dotfiles are being ignored
- Metrics / analytics
- Handling comments that have been resolved HOT 1
- Rugged 1.7.1 breaks gem HOT 20
- undefined method `[]' for nil:NilClass HOT 2
- Refactoring the way formatters are loaded to make easy to include custom formatter HOT 5
- Allow Octokit 8.0
- Failed to setup in GitLab CI HOT 1
- Make default max_warnings finite and reasonably low
- Uninitialized constant RuboCop::Lockfile::Bundler HOT 2
- Undefined method `delete_prefix' for ruby 2.4.10-alpine in gitlab pipeline
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pronto.