Code Vulnerability Checks
Code Vulnerability Checks
Published: December 15, 2020
This is part of The Annotated Guide to a New Rails App, a list of recommendations to make developing your Rails app more productive and joyful.
In this article, we are talking about checking for code vulnerabilities.
When
You should check for code vulnerabilities before creating a production environment.
Why
As soon as you make your application available on the Internet, if there is a vulnerability in your code, it is possible that that vulnerability could be used to compromise your application.
How
Use Brakeman for code analysis to catch potential security vulnerabilities.
Get Damien Burke’s stories in your inbox
Join Medium for free to get updates from this writer.
To install, add gem 'brakeman' to the development section of your Gemfile and run bundle.
To run use the command brakeman.
Fix any issues Brakeman finds.
Gotchas
Brakeman checks for a lot of common errors that create security vulnerabilities. Of course, it cannot catch all security issues. Be careful out there.
