Update brakeman rules [RUN AS-IF-FOSS]

What does this MR do?

Updates our detection rules for running the SAST brakeman analyzer.

Now that brakeman supports scanning most any Ruby file, we don't need to limit to Ruby on Rails projects. We want to run the brakeman job if a repository has a Gemfile or any *.rb file.

Sample MR for project that has no Gemfile, just *.rb files - pipeline

Sample MR for a Rails project with a Gemfile - pipeline

Related Issue

#300678 (closed)

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Mayra Cabrera

Merge request reports

Loading