search

hawkeyesec / scanner-cli

A project security/vulnerability/risk scanning tool
Other
358 stars 89 forks source link

brakeman command options and configuration files #166

Open CzarScar opened 3 years ago

CzarScar commented 3 years ago

Description

How can we pass the parameter to brakeman or a configuration files?

Steps to Reproduce

  1. Scan a rails project using Hawkeye images
  2. The project will return error said "ruby-brakeman returned an error! There was an error while executing Brakeman and the report was not created"
  3. And you can only directly using brakeman -d to debug for the error on your terminals.
  4. However, when you fix the issue and using brakeman scan the project successfully. The Hawkeye scan still return error.

Expected behavior: [What you expect to happen] We can passing parameter to Brakeman command like -d or --fast. And brakeman can also find the configuration files on the project default locations. Actual behavior: [What actually happens] Return error and hard to debug and figure out the reason.

Version

v1.8.1

Additional Information

brakeman configuration files link: https://github.com/presidentbeef/brakeman#configuration-files

brakeman scanning options: https://github.com/presidentbeef/brakeman/blob/main/OPTIONS.md