Skip to content

Commit 6ef39a4

Browse files
Bump brakeman from 7.1.0 to 8.0.1 (#5490)
* Bump brakeman from 7.1.0 to 8.0.1 Bumps [brakeman](https://github.com/presidentbeef/brakeman) from 7.1.0 to 8.0.1. - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v7.1.0...v8.0.1) --- updated-dependencies: - dependency-name: brakeman dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Update brakeman.ignore --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel Orner <daniel.orner@flipp.com>
1 parent 69804c4 commit 6ef39a4

File tree

2 files changed

+6
-7
lines changed

2 files changed

+6
-7
lines changed

Gemfile.lock

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -134,7 +134,7 @@ GEM
134134
autoprefixer-rails (>= 9.1.0)
135135
popper_js (>= 2.11.6, < 3)
136136
sassc-rails (>= 2.0.0)
137-
brakeman (7.1.0)
137+
brakeman (8.0.2)
138138
racc
139139
bugsnag (6.29.0)
140140
concurrent-ruby (~> 1.0)

config/brakeman.ignore

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,18 +3,18 @@
33
{
44
"warning_type": "Command Injection",
55
"warning_code": 14,
6-
"fingerprint": "5dd8c58cca239b1a2527f25255c49c8800a31e5ec8cb8e31e14003fc435dd677",
6+
"fingerprint": "39737ba6e95438831a89d919ed74a3e4d522d94a9993f7a6bc8d1cff9e699132",
77
"check_name": "Execute",
88
"message": "Possible command injection",
99
"file": "app/jobs/backup_db_rds.rb",
10-
"line": 11,
10+
"line": 13,
1111
"link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
1212
"code": "system(\"PGPASSWORD='#{ENV[\"DIAPER_DB_PASSWORD\"]}' pg_dump -Fc -v --host=#{ENV[\"DIAPER_DB_HOST\"]} --username=#{ENV[\"DIAPER_DB_USERNAME\"]} --dbname=#{ENV[\"DIAPER_DB_DATABASE\"]} -f #{\"#{Time.current.strftime(\"%Y%m%d%H%M%S\")}.rds.dump\"}\")",
1313
"render_path": null,
1414
"location": {
1515
"type": "method",
1616
"class": "BackupDbRds",
17-
"method": "s(:self).run"
17+
"method": "self.run"
1818
},
1919
"user_input": "ENV[\"DIAPER_DB_PASSWORD\"]",
2020
"confidence": "Medium",
@@ -30,7 +30,7 @@
3030
"check_name": "Render",
3131
"message": "Render path contains parameter value",
3232
"file": "app/controllers/static_controller.rb",
33-
"line": 20,
33+
"line": 21,
3434
"link": "https://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
3535
"code": "render(template => \"static/#{params[:name]}\", {})",
3636
"render_path": null,
@@ -47,6 +47,5 @@
4747
"note": ""
4848
}
4949
],
50-
"updated": "2024-11-24 10:40:00 -0500",
51-
"brakeman_version": "6.2.1"
50+
"brakeman_version": "8.0.2"
5251
}

0 commit comments

Comments
 (0)