Brakeman Scanner

Free static analysis security tool for Ruby on Rails. Zero-setup security scans for Rails applications based on source code analysis.

[Brakeman Scanner @brakeman]

Brakeman 5.2.2 is released! Bug fixes and an updated ruby_parser for Ruby 3.1 support: https://t.co/lyjNlHGEiA

[Brakeman Scanner @brakeman]

Brakeman 6.0 is released! This major update drops support for parsing Ruby 1.8/1.9 syntax and raises the minimum Ruby version to 3.0.

Check out all changes here: https://t.co/dGRNgEfAR1

[Brakeman Scanner @brakeman]

It's been a while!
Brakeman 5.4.1 is out: lots of updates to open redirect check, fixed file/line for EOL Ruby warnings (2.7 is coming up!), and more: https://t.co/p4PmDiC2jK

[Brakeman Scanner @brakeman]

Brakeman 5.4.0 released! New checks for weak RSA keys and strange Pathname behavior, plus some bug fixes: https://t.co/sTAfcfsyCj

[Brakeman Scanner @brakeman]

Followed quickly by 5.3.1 to fix the version range for CVE-2022-32209!

[Brakeman Scanner @brakeman]

Brakeman 5.3.0 is out! The big news is... Warnings finally include CWE information! Big thanks to the contributors on this one! 🎉 https://t.co/Ez68Fr8utA

[Brakeman Scanner @brakeman]

Four months later... noticed the 5.2.0 release post was never published.

Oops.

Here it is: https://t.co/wRHpm3Hr5Y

[Ruby on Rails @rails]

Rails 7.0.2.2, 6.1.4.6, 6.0.4.6, and 5.2.6.2 have been released! This is a security release, so please upgrade when you can! You can read more about the release here: https://t.co/BP6hxbV7L7

[Brakeman Scanner @brakeman]

@edwin_v @websebdev Endless and beginless ranges should be supported in Brakeman 5.1.2+

[Brakeman Scanner @brakeman]

Brakeman 5.2.1 is released to fix an error with reporting unmaintained Ruby versions.

BTW Ruby 2.6.x will be end of life on March 31st! ;)

[Brakeman Scanner @brakeman]

Brakeman 5.2.0 released! Initial Rails 7 support, updated ruby_parser, new checks for unmaintained versions of Ruby/Rails, and several false positive fixes: https://t.co/NrO65E1pvC (real release post to follow)

[Brakeman Scanner @brakeman]

Brakeman 5.1.2 released! Some small bug fixes, but most importantly this release ships with the latest ruby_parser that includes Ruby 2.7 and 3.0 syntax support. https://t.co/PhHaNL1DMj

[SecuriTEA & Crumpets @SecuriTnC]

If you're a #RubyOnRails developer and want to start scanning your code for #security vulnerabilities, check out the recent episode with @presidentbeef where we dive into Brakeman security! https://t.co/yDtM4Izm7S

[Brakeman Scanner @brakeman]

@k_12_i Oh! The latest version is 5.1.1.

[Brakeman Scanner @brakeman]

Followed quickly by 5.1.1 to fix an issue with ignore files. https://t.co/G9gg2WzdCJ

[Brakeman Scanner @brakeman]

Brakeman 5.1.0 is released! 🎉 Parallel file read/parsing, GitHub Actions format, SQL injection updates, ActiveRecord enum support, and a ton more. Thank you to all the contributors! https://t.co/eNjb8WnRvS

[すろっくさん @srockstyle]

brakemanのコードリーディングは勉強になるので、ぜひおすすめしたいやつ / 週刊Railsウォッチ: DI的な書き方が必要なとき、脆弱性学習用アプリRailsGoat、brakemanは優秀ほか（20210705前編） https://t.co/Yh2alnZyJs