{"repo":"presidentbeef/brakeman","free":true,"listed":false,"github":"https://github.com/presidentbeef/brakeman","clone":"git clone https://github.com/presidentbeef/brakeman.git","description":"A static analysis security vulnerability scanner for Ruby on Rails applications","language":"Ruby","stars":7262,"topics":["ruby","rails","security","static-analysis","vulnerabilities","brakeman","security-vulnerability","security-tools","security-audit"],"license":null,"category":"security-tools","readme_excerpt":"Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: Using Docker: docker pull presidentbeef/brakeman Using Docker to build from source: git clone https://github.com/presidentbeef/brakeman.git cd brakeman docker build . -t brakeman Usage Running locally From a Rails application's root directory: brakeman Outside of Rails root: brakeman /path/to/rails/application Running with Docker From a Rails application's root directory: docker run -v \"$(pwd)\":/code presidentbeef/brakeman With a little nicer color: docker run -v \"$(pwd)\":/code presidentbeef/brakeman --color For an HTML report: docker run -v \"$(pwd)\":/code presidentbeef/brakeman -o brakeman results.html Outside of Rails root (note that the output file is relative to path/to/rails/application): docker run -v 'path/to/rails/application':/code presidentbeef/brakeman -o brakeman results.html Compatibility Brakeman should work with any version of Rails from 2.3.x to 8.x. Brakeman can analyze code written with Ruby 2.0 syntax and newer, but requires at least Ruby 3.2.0 to run. Basic Options For a full list of options, use brakeman --help or see the OPTIONS.md file. To specify an output file for the results: brakeman -o output file The output format is determined by the file extension or by using the -f option. Current options are: text , html , tabs , json , junit , markdown , csv , codeclimate , github , ","default_branch":null,"files":null,"tree":[],"storefront":"/r/presidentbeef","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/presidentbeef/brakeman/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}