Language / Framework: Ruby/Rails
Checks: 59
Categories: Security
Brakeman version 3.7.2

Brakeman OSS is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities.

To enable Brakeman analysis, add the following to your .codeclimate.yml configuration file:

engines:
  brakeman:
    enabled: true

ratings:
   paths:
   - "**.rb"

You can also enable the engine via the CLI with codeclimate engines:enable brakeman. This will create a default configuration file for you if you don’t already have one.

More information about the CLI is available in the README here: https://github.com/codeclimate/codeclimate

The Brakeman engine supports Brakeman configuration files (and ignore files) as described in the Brakeman documentation.

Consult the official Brakeman documentation for more information about Brakeman analysis.