new way for brakeman, trying to make bearer will not kill the build

health-connector · May 30, 2024 · f628409 · f628409
1 parent ec49b72
commit f628409
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 14 deletions.
diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml
@@ -35,21 +35,25 @@ jobs:
       runs-on: ubuntu-latest
       steps:
         - uses: actions/checkout@v3
-        - uses: ruby/setup-ruby@v1
+        - uses: artplan1/brakeman-action@v1.2.1
           with:
-            bundler-cache: true
-        - name: install brakeman
-          run: |
-            gem install brakeman
-        - name: run brakeman
-          run: |
-            brakeman --format html --output brakeman.html
-        - name: upload brakeman failure report
-          uses: actions/upload-artifact@v3
-          if: failure()
-          with:
-            name: Security Reports
-            path: brakeman.html
+            flags: "--color"
+
+        # - uses: ruby/setup-ruby@v1
+        #   with:
+        #     bundler-cache: true
+        # - name: install brakeman
+        #   run: |
+        #     gem install brakeman
+        # - name: run brakeman
+        #   run: |
+        #     brakeman --format html --output brakeman.html
+        # - name: upload brakeman failure report
+        #   uses: actions/upload-artifact@v3
+        #   if: failure()
+        #   with:
+        #     name: Security Reports
+        #     path: brakeman.html
   bundler-audit:
       runs-on: ubuntu-latest
       steps:

diff --git a/bearer.yml b/bearer.yml
@@ -2,6 +2,7 @@ disable-version-check: false
 log-level: info
 report:
     # fail-on-severity: critical,high,medium,low
+    fail-on-severity: ""
     format: ""
     no-color: false
     output: ""