meanwihle: I've added a PoC for ruby and bundler auditing (checking for CVe's and such) in openbolt: https://github.com/OpenVoxProject/openbolt/pull/182 ; If someone is willing to review this and , if it is a good solution it could be replicated into other repo's? Thank oyu for your feedback :-)