Configuring Bundler

Point Bundler at the Seal Artifact Server using a credentialed source in the Gemfile.

Bundler reads gem sources from the Gemfile. To replace the default RubyGems source with Seal, swap the source line and supply credentials in the URL.

Configuration

Open the project's Gemfile. Find the existing source line, typically:

source 'https://rubygems.org'

Replace it with the Seal source, reading the credentials from the environment so they do not get checked into source control:

source "https://#{ENV['SEAL_PROJECT']}:#{ENV['SEAL_TOKEN']}@ruby.sealsecurity.io"

SEAL_PROJECT is your Seal Project ID. SEAL_TOKEN is your production token. Set both in the build environment when running Bundler.

SEAL_PROJECT=<project-id> SEAL_TOKEN=<token> bundle install

Verify

A clean bundle install resolves gems from ruby.sealsecurity.io instead of rubygems.org. Use bundle config get sources or run with --verbose to see the resolved-from URL explicitly.

Related

• Editing dependency files manually: pinning sealed versions in Gemfile.