Brakeman is a free vulnerability scanner specifically designed for Ruby on Rails applications. It statically analyzes Rails application code to find security issues at any stage of development. Brakeman now uses the parallel gem to read and parse files in parallel. By default, parallel will split the reading/parsing into a number of separate processes based on number of CPUs. In testing, this has dramatically improved speed for large code bases, around 35% reduction in overall scan time. Brakeman will now track and return very simple literal values (e.g. strings, hashes of literals, arrays of literals) from very simple class methods (e.g. single line). Since ActiveRecord enums essentially generate some class (and instance) methods that return fixed literal values, the above class method return values is also used to support enum.

Features

  • Brakeman should work with any version of Rails from 2.3.x to 6.x
  • Brakeman can analyze code written with Ruby 1.8 syntax and newer, but requires at least Ruby 2.3.0 to run
  • Brakeman assigns a confidence level to each warning
  • Brakeman options can be stored and read from YAML files
  • To simplify the process of writing a configuration file, the -C option will output the currently set options
  • Options passed in on the commandline have priority over configuration files

Project Samples

Project Activity

See All Activity >

License

Adaptive Public License

Follow Brakeman

Brakeman Web Site

Other Useful Business Software
Forever Free Full-Stack Observability | Grafana Cloud Icon
Forever Free Full-Stack Observability | Grafana Cloud

Our generous forever free tier includes the full platform, including the AI Assistant, for 3 users with 10k metrics, 50GB logs, and 50GB traces.

Built on open standards like Prometheus and OpenTelemetry, Grafana Cloud includes Kubernetes Monitoring, Application Observability, Incident Response, plus the AI-powered Grafana Assistant. Get started with our generous free tier today.
Create free account
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of Brakeman!

Additional Project Details

Programming Language

Ruby

Related Categories

Ruby Security Software, Ruby Vulnerability Scanners

Registered

2021-09-03