Repository Issue Activity (beta)

#2045 request: strong params checks for id (key) columns

#2043 Unscoped Find should exclude only if all belongs_to associations are optional

#2042 Parallelise index_call_sites and process_libs: ~75% of scan time is single-threaded on large apps

#1558 Poor performance processing repeated conditional reassignments

#2041 False Positive: Regexp containing an escaped $ is marked unsafe

#2040 Add warnings for dangerous content security policy settings autogenerated by Rails

#2036 --ensure-latest 30 fails w/ no relevant output

#1972 `Brakeman::SexpProcessor#process`: Type should be a Symbol

#2031 Include dependency cooldown in latest check

#1915 False positive warning when rendering a partial that has a local called `text`

#1885 False positive when methods chained on permitted params

#1960 Treats "jruby-10.0.2.0" in .ruby-version as outdated Ruby 0.0.2

#2017 False positive: Command injection

#2020 Support reading config from ignore file

#2018 Hash lookup on frozen constant should untaint the result

#2015 error in 8.0.3 ensure_latest: undefined method to_date for 2026-02-26 00:00:00 UTC:Time (NoMethodError)

#1975 Ignore polymorphic_name in SQL

#2009 Mac Terminal cursor disappears when brakeman invoked with `--quiet`

#1989 --ensure-latest may not be sound policy anymore

#2011 False positive ForgerySetting warning when Application class uses :: syntax

#2005 brakeman 8.0.1 produces invalid json on some scans

#2003 Wrong number of arguments to `logger.cleanup` when filtering warnings in interactive mode

#2001 New scanner progress output is pretty, but makes my Mac Terminal cursor disappear

#1414 Dynamic Render Path false positive

#1943 Constants from other files are accidentally inserted and the fingerprint changes