diff --git a/.github/workflows/brakeman-analysis.yml b/.github/workflows/brakeman-analysis.yml index d0062b9270..013ec43104 100644 --- a/.github/workflows/brakeman-analysis.yml +++ b/.github/workflows/brakeman-analysis.yml @@ -5,42 +5,42 @@ name: Brakeman Scan on: push: - branches: [ main ] + branches: [main] pull_request: # The branches below must be a subset of the branches above - branches: [ main ] + branches: [main] schedule: - - cron: '40 4 * * 2' + - cron: "40 4 * * 2" jobs: brakeman-scan: name: Brakeman Scan runs-on: ubuntu-latest steps: - # Checkout the repository to the GitHub Actions runner - - name: Checkout - uses: actions/checkout@v2 + # Checkout the repository to the GitHub Actions runner + - name: Checkout + uses: actions/checkout@v2 - # Customize the ruby version depending on your needs - - name: Setup Ruby - uses: actions/setup-ruby@v1 - with: - ruby-version: '2.7' + # Customize the ruby version depending on your needs + - name: Set up Ruby + uses: ruby/setup-ruby@v1 + with: + ruby-version: "3.0" - - name: Setup Brakeman - env: - BRAKEMAN_VERSION: '4.10' # SARIF support is provided in Brakeman version 4.10+ - run: | - gem install brakeman --version $BRAKEMAN_VERSION + - name: Setup Brakeman + env: + BRAKEMAN_VERSION: "5.4" # SARIF support is provided in Brakeman version 4.10+ + run: | + gem install brakeman --version $BRAKEMAN_VERSION - # Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis - - name: Scan - continue-on-error: true - run: | - brakeman -f sarif -o output.sarif.json . + # Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis + - name: Scan + continue-on-error: true + run: | + brakeman -f sarif -o output.sarif.json . - # Upload the SARIF file generated in the previous step - - name: Upload SARIF - uses: github/codeql-action/upload-sarif@v1 - with: - sarif_file: output.sarif.json + # Upload the SARIF file generated in the previous step + - name: Upload SARIF + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: output.sarif.json