code.brakemanBrakeman Rails SAST
Runs Brakeman statically over a Ruby on Rails app (the app is never booted). Skipped unless the Gemfile mentions rails or config/application.rb exists.
- Engine
- Wrapped scanner
- Wraps
brakeman- Targets
- Codebase
- Areas
- Security, Supply chain
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.brakemanWraps brakeman. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.