diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml index 5cec3150..305e4bf2 100644 --- a/.github/workflows/backend.yml +++ b/.github/workflows/backend.yml @@ -135,3 +135,20 @@ jobs: - name: Run rspec run: | bundle exec rspec + + brakeman: + name: Security Analysis + runs-on: ubuntu-latest + steps: + - name: Check out code + uses: actions/checkout@v4 + - name: Set up Ruby + uses: ruby/setup-ruby@v1 + with: + working-directory: backend + bundler-cache: true + - name: Brakeman + uses: reviewdog/action-brakeman@v2 + with: + brakeman_version: gemfile + reporter: github-pr-review diff --git a/README.md b/README.md index e397d4b9..6157c733 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,7 @@ Help would be appreciated! Please join us in [slack #flaredown](https://rubyforg * PostgreSQL 12.8 * MongoDB 4.4.9 * Redis 6.2.3 -* Ruby 3.0.6 +* Ruby 3.1.3 * Node 12.22.6 ## Installation diff --git a/backend/Gemfile b/backend/Gemfile index bbcd16dc..3670eb02 100644 --- a/backend/Gemfile +++ b/backend/Gemfile @@ -84,6 +84,7 @@ group :development do gem "annotate" gem "awesome_print", "~>1.6" gem "better_errors", "~>2.1" + gem "brakeman", "6.1.2" gem "foreman", require: false gem "letter_opener" end diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock index 16aa7427..1077d396 100644 --- a/backend/Gemfile.lock +++ b/backend/Gemfile.lock @@ -84,6 +84,8 @@ GEM erubi (~> 1.4) parser (>= 2.4) smart_properties + brakeman (6.1.2) + racc bson (4.12.1) bson (4.12.1-java) bugsnag (6.26.0) @@ -491,6 +493,7 @@ DEPENDENCIES annotate awesome_print (~> 1.6) better_errors (~> 2.1) + brakeman (= 6.1.2) bugsnag (~> 6.22) bullet byebug