Local brakeman

etalab · May 23, 2024 · b420b83 · b420b83
1 parent 4da398a
commit b420b83
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -7,14 +7,13 @@ jobs:
     name: Brakeman (Static security)
     if: "${{ github.actor != 'dependabot[bot]' }}"
     runs-on: ubuntu-latest
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
 
-      - name: Brakeman
-        uses: reviewdog/action-brakeman@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run Brakeman
+        run: bundle exec brakeman -q w2
diff --git a/Gemfile b/Gemfile
@@ -70,6 +70,7 @@ group :development do
   # Speed up commands on slow machines / big apps [https://github.com/rails/spring]
   gem "spring"
   gem "spring-commands-rspec"
+  gem "brakeman"
 end
 
 group :test do

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -86,6 +86,8 @@ GEM
     bindex (0.8.1)
     bootsnap (1.18.3)
       msgpack (~> 1.2)
+    brakeman (6.1.2)
+      racc
     builder (3.2.4)
     capybara (3.40.0)
       addressable
@@ -396,6 +398,7 @@ PLATFORMS
 
 DEPENDENCIES
   bootsnap
+  brakeman
   capybara
   config
   debug