diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 6ebfea3..aa1c241 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -21,8 +21,8 @@ jobs: - name: Run brakeman run: | - bundle exec brakeman -o .github/logs/brakeman.log - if grep -q "No warnings found" .github/logs/brakeman.log; then + bundle exec brakeman -o brakeman.log + if grep -q "No warnings found" brakeman.log; then echo "BRAKEMAN_STATUS=passing" >> $GITHUB_ENV else echo "BRAKEMAN_STATUS=failing" >> $GITHUB_ENV @@ -31,7 +31,7 @@ jobs: - name: Write log status to files uses: "DamianReeves/write-file-action@master" with: - path: .github/logs/brakeman_status.json + path: brakeman_status.json write-mode: overwrite contents: | { diff --git a/brakeman.log b/brakeman.log new file mode 100644 index 0000000..16d2f40 --- /dev/null +++ b/brakeman.log @@ -0,0 +1,23 @@ + +== Brakeman Report == + +Application Path: /home/runner/work/PixelArtGenerator/PixelArtGenerator +Rails Version: 7.1.3 +Brakeman Version: 6.1.2 +Scan Date: 2024-02-21 20:59:28 +0000 +Duration: 0.604142969 seconds +Checks Run: BasicAuth, BasicAuthTimingAttack, CSRFTokenForgeryCVE, ContentTag, CookieSerialization, CreateWith, CrossSiteScripting, DefaultRoutes, Deserialize, DetailedExceptions, DigestDoS, DynamicFinders, EOLRails, EOLRuby, EscapeFunction, Evaluation, Execute, FileAccess, FileDisclosure, FilterSkipping, ForgerySetting, HeaderDoS, I18nXSS, JRubyXML, JSONEncoding, JSONEntityEscape, JSONParsing, LinkTo, LinkToHref, MailTo, MassAssignment, MimeTypeDoS, ModelAttrAccessible, ModelAttributes, ModelSerialize, NestedAttributes, NestedAttributesBypass, NumberToCurrency, PageCachingCVE, Pathname, PermitAttributes, QuoteTableName, Ransack, Redirect, RegexDoS, Render, RenderDoS, RenderInline, ResponseSplitting, RouteDoS, SQL, SQLCVEs, SSLVerify, SafeBufferManipulation, SanitizeConfigCve, SanitizeMethods, SelectTag, SelectVulnerability, Send, SendFile, SessionManipulation, SessionSettings, SimpleFormat, SingleQuotes, SkipBeforeFilter, SprocketsPathTraversal, StripTags, SymbolDoSCVE, TemplateInjection, TranslateBug, UnsafeReflection, UnsafeReflectionMethods, ValidationRegex, VerbConfusion, WeakRSAKey, WithoutProtection, XMLDoS, YAMLParsing + +== Overview == + +Controllers: 2 +Models: 1 +Templates: 3 +Errors: 0 +Security Warnings: 0 + +== Warning Types == + + +No warnings found + diff --git a/brakeman_status.json b/brakeman_status.json new file mode 100644 index 0000000..ef880c8 --- /dev/null +++ b/brakeman_status.json @@ -0,0 +1,3 @@ +{ + "status": "passing" +} \ No newline at end of file