Brakeman spec

31 Dec, 2024

Brakeman is a vulnerability scanner designed for Ruby on Rails applications. It statically analyzes Rails application code to find security issues. Adding this snippet will fail your tests if Brakeman finds any issues

Brakeman

require 'open3'

describe "Brakeman" do
  it "Brakeman passes" do
    stdout, stderr, status = Open3.capture3 'bundle exec brakeman -z -w1'
    expect(status.success?).to eq(true), [stdout, stderr].join('\n')
  end
end

#rspec #ruby #snippets