{"action":"created","issue":{"url":"https://api.github.com/repos/thoughtbot/clearance/issues/690","repository_url":"https://api.github.com/repos/thoughtbot/clearance","labels_url":"https://api.github.com/repos/thoughtbot/clearance/issues/690/labels{/name}","comments_url":"https://api.github.com/repos/thoughtbot/clearance/issues/690/comments","events_url":"https://api.github.com/repos/thoughtbot/clearance/issues/690/events","html_url":"https://github.com/thoughtbot/clearance/pull/690","id":169989297,"number":690,"title":"Update README.md","user":{"login":"vasinov","id":286876,"avatar_url":"https://avatars.githubusercontent.com/u/286876?v=3","gravatar_id":"","url":"https://api.github.com/users/vasinov","html_url":"https://github.com/vasinov","followers_url":"https://api.github.com/users/vasinov/followers","following_url":"https://api.github.com/users/vasinov/following{/other_user}","gists_url":"https://api.github.com/users/vasinov/gists{/gist_id}","starred_url":"https://api.github.com/users/vasinov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vasinov/subscriptions","organizations_url":"https://api.github.com/users/vasinov/orgs","repos_url":"https://api.github.com/users/vasinov/repos","events_url":"https://api.github.com/users/vasinov/events{/privacy}","received_events_url":"https://api.github.com/users/vasinov/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-08T18:16:34Z","updated_at":"2016-08-10T16:30:24Z","closed_at":"2016-08-10T16:30:24Z","pull_request":{"url":"https://api.github.com/repos/thoughtbot/clearance/pulls/690","html_url":"https://github.com/thoughtbot/clearance/pull/690","diff_url":"https://github.com/thoughtbot/clearance/pull/690.diff","patch_url":"https://github.com/thoughtbot/clearance/pull/690.patch"},"body":"Adding Hakiri badge to highlight some potential dependency security warnings (the way you have it in [Paperclip](https://github.com/thoughtbot/paperclip))."},"comment":{"url":"https://api.github.com/repos/thoughtbot/clearance/issues/comments/238923431","html_url":"https://github.com/thoughtbot/clearance/pull/690#issuecomment-238923431","issue_url":"https://api.github.com/repos/thoughtbot/clearance/issues/690","id":238923431,"user":{"login":"derekprior","id":152152,"avatar_url":"https://avatars.githubusercontent.com/u/152152?v=3","gravatar_id":"","url":"https://api.github.com/users/derekprior","html_url":"https://github.com/derekprior","followers_url":"https://api.github.com/users/derekprior/followers","following_url":"https://api.github.com/users/derekprior/following{/other_user}","gists_url":"https://api.github.com/users/derekprior/gists{/gist_id}","starred_url":"https://api.github.com/users/derekprior/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/derekprior/subscriptions","organizations_url":"https://api.github.com/users/derekprior/orgs","repos_url":"https://api.github.com/users/derekprior/repos","events_url":"https://api.github.com/users/derekprior/events{/privacy}","received_events_url":"https://api.github.com/users/derekprior/received_events","type":"User","site_admin":false},"created_at":"2016-08-10T16:30:24Z","updated_at":"2016-08-10T16:30:24Z","body":"Thanks for the contribution. I'm not inclined to merge this as I think the warnings it finds are misleading. For instance, the current build has 1 warning for code injection, which sounds really bad. Upon investigation, I see that it's for a nokogiri issue. I do not depend on nokogiri directly in this application. To solve this issue, I can either get everyone else (including Rails) to bump their acceptable version of nokogiri or I can create a false direct dependency on nokogiri.\r\n\r\nI think these services are great for end user applications as the user is in the best place to decide how to mitigate any warnings."}}
{"actor":{"display_login":"derekprior"}}