The distro's own forge ran vulnerable Ruby for a week, and the logs needed to rule out code execution were…