Skip to content

Update brakeman rules [RUN AS-IF-FOSS]

rossfuhrman requested to merge rf-update-brakeman-rules into master

What does this MR do?

Updates our detection rules for running the SAST brakeman analyzer.

Now that brakeman supports scanning most any Ruby file, we don't need to limit to Ruby on Rails projects. We want to run the brakeman job if a repository has a Gemfile or any *.rb file.

Sample MR for project that has no Gemfile, just *.rb files - pipeline

Sample MR for a Rails project with a Gemfile - pipeline

Related Issue

#300678 (closed)

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Mayra Cabrera

Merge request reports