-
try running [brakeman](https://rubygems.org/gems/brakeman/versions/5.0.4) on PRs to catch changes that are security issues.
-
http://ngsmrk.blogspot.hk/2012/12/using-brakeman-to-identify-security.html
-
cf. https://github.com/presidentbeef/brakeman/tree/main/lib/brakeman/checks
Some useful context about rails and brakeman rules. In rails, there are three possible sources of user input: `params`, `…
-
Builds are failing with `Brakeman 6.1.2 is not the latest version 6.2.1`
-
App:
```
# merge dependabot PRs or run:
bundle update
yarn upgrade
```
App performance & security checks:
```
# check browser console for bullet alerts (N+1 queries)
rails_best_practices
b…
-
Hello,
we would like to use the brakeman scanner to verify that our code is fine. Can we just use it for our cloud solution? We are the Company EDI GmbH, Engineering Data Intelligence (https://www.…
-
### Background
Brakeman version: 5.0.1
Rails version: 6.1.3.2
Ruby version: 2.7.3
Link to Rails application code: N/A
### Issue
I got a false-positive from Brakeman today that involved a…
MrJoy updated
3 years ago
-
http://brakemanscanner.org/
jarib updated
10 years ago
-
### Your environment
- `vscode-ruby` version: 1.36.1 (1.36.1)
- Ruby version: ruby 2.6.3p62 (2019-04-16 revision 67580) [x86_64-linux-musl]
- Ruby version manager (if any): rvm
- VS Code versio…
-
running `brakeman -w3` gives me no warnings but `guard 'brakeman', :min_confidence => 3` gives me all the errors of just running `brakeman`