brakeman Docker & Self-Hosted Deployment

GitHub

A static analysis security vulnerability scanner for Ruby on Rails applications

7,231 stars Ruby Ruby 1 file · ~1,652 tokens #brakeman#rails#ruby#security#security-audit#security-tools#security-vulnerability#static-analysis
1. Pull Image (DOCKERHUB) docker pull presidentbeef/brakeman:latest
2. Docker Run (1-Click Launch) docker run -d --name brakeman --restart always presidentbeef/brakeman:latest
3. Podman Run podman run -d --name brakeman --restart always presidentbeef/brakeman:latest
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/presidentbeef/brakeman:latest
5. ORAS Pull (OCI Artifact) oras pull presidentbeef/brakeman:latest
Dockerfile 
FROM ruby:3.3-alpine
LABEL maintainer="Justin Collins <[email protected]>"

WORKDIR /usr/src/app

RUN apk --update add build-base

# Copy our Gemfile (and related files) *without* copying our actual source code yet
COPY Gemfile* *.gemspec gem_common.rb ./
# Copy lib/brakeman/version.rb so that bundle install works
COPY lib/brakeman/version.rb ./lib/brakeman/

# Install the necessary gems
RUN bundle install --jobs 4 --without "development test"

# Copy in the latest Brakeman source code as the final stage
COPY . /usr/src/app

# Default to looking for source in /code
WORKDIR /code

ENTRYPOINT ["/usr/src/app/bin/brakeman"]