Brakeman step configuration

Scan code repositories with Brakeman.

You can scan your code repositories using Brakeman and ingest your results into Harness STO.

Important notes for running Brakeman scans in STO

Root access requirements

For more information

Brakeman step settings for STO scans

The recommended workflow is to add a Brakeman step to a Security or Build stage and then configure it as described below.

Scan

Scan Mode

Scan Configuration

Target

Type

Target and Variant Detection

Name

Variant

Workspace (repository)

Ingestion File

Log Level

Additional CLI flags

Use this field to run the brakeman scanner with flags and arguments such as:

--path some/path/to/app

With this flag, brakeman scans only a subpath rather than the full directory.

Fail on Severity

Settings

Additional Configuration

Advanced settings

Proxy settings