Fix a possible security issue with spoofing

.codeclimate.yml

@@ -0,0 +1,17 @@
+---
+engines:
+  duplication:
+    enabled: true
+    config:
+      languages:
+      - ruby
+  fixme:
+    enabled: true
+  rubocop:
+    enabled: true
+ratings:
+  paths:
+  - "**.rb"
+exclude_paths:
+- features/
+- spec/

.github/issue_template.md

@@ -0,0 +1,3 @@
+## Deprecation notice
+
+Paperclip is currently undergoing [deprecation in favor of ActiveStorage](https://github.com/thoughtbot/paperclip/blob/master/MIGRATING.md). Maintainers of this repository will no longer be tending to new issues. We're leaving the issues page open so Paperclip users can still see & search through old issues, and continue existing discussions if they wish.

.github/workflows/publish-gem.yml

@@ -0,0 +1,28 @@
+# This workflow should be deleted once we are done publishing "historical" gems.
+name: Publish Gem (historical)
+
+on: [workflow_dispatch]
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Publish
+        run: |
+          # dump the gemspec just for debugging
+          echo "Gemspec:"
+          cat *.gemspec
+
+          # publish the gem
+          echo "Publishing gem..."
+          mkdir -p $HOME/.gem
+          touch $HOME/.gem/credentials
+          chmod 0600 $HOME/.gem/credentials
+          printf -- "---\n:github: Bearer ${{secrets.GITHUB_TOKEN}}\n" > $HOME/.gem/credentials
+          gem build *.gemspec
+          gem push --KEY github --host https://rubygems.pkg.github.com/onelogin *.gem
+          echo "Done!"

.gitignore

@@ -3,13 +3,9 @@
 .rvmrc
 .bundle
 tmp
+.DS_Store
 
-test/s3.yml
-test/debug.log
-test/paperclip.db
-test/doc
-test/pkg
-test/tmp
+*.log
 
 public
 paperclip*.gem