Skip to content

Commit 9012442

Browse files
committed
📝 Better documentation of signed gem installation
1 parent 0b42413 commit 9012442

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -105,19 +105,19 @@ gem cert --add <(curl -Ls https://raw.github.com/oauth-xx/version_gem/main/certs
105105
You only need to do that once. Then proceed to install with:
106106

107107
```shell
108-
gem install version_gem -P MediumSecurity
108+
gem install version_gem -P HighSecurity
109109
```
110110

111-
The `MediumSecurity` trust profile will verify signed gems, but allow the installation of unsigned dependencies.
112-
113-
This is necessary because not all of `version_gem`’s dependencies are signed, so we cannot use `HighSecurity`.
111+
The `HighSecurity` trust profile will verify signed gems, and not allow the installation of unsigned dependencies.
114112

115113
If you want to up your security game full-time:
116114

117115
```shell
118116
bundle config set --global trust-policy MediumSecurity
119117
```
120118

119+
`MediumSecurity` instead of `HighSecurity` is necessary if not all the gems you use are signed.
120+
121121
NOTE: Be prepared to track down certs for signed gems and add them the same way you added mine.
122122

123123
## 🔧 Basic Usage

0 commit comments

Comments
 (0)