brakeman
https://github.com/presidentbeef/brakeman
Ruby
A static analysis security vulnerability scanner for Ruby on Rails applications
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to brakeman
Help out
- Issues
- --ensure-latest crashes with NoMethodError when rubygems.org can't be reached
- Walk the app tree once when searching it for Ruby files and templates
- Remove AppTree path finders unused since all files are scanned
- Fix Brakeman.run with a path string when stderr is not a TTY
- Cannot ignore EOLRails completely before date has passed; brakeman will always fail at the 30 day mark
- --ensure-latest does not match bundler's cooldown
- does not consider Current.base_url safe even though it's from ENV and constants
- Treat a leading ./ in --only-files and --skip-files as the project root
- request: strong params checks for id (key) columns
- Parallelise index_call_sites and process_libs: ~75% of scan time is single-threaded on large apps
- Docs
- Subscribe to help with docs for this repo and come back later