diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml index 2c0d20afead..f38db7ef177 100644 --- a/.github/workflows/security-checks.yml +++ b/.github/workflows/security-checks.yml @@ -35,21 +35,25 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - uses: ruby/setup-ruby@v1 + - uses: artplan1/brakeman-action@v1.2.1 with: - bundler-cache: true - - name: install brakeman - run: | - gem install brakeman - - name: run brakeman - run: | - brakeman --format html --output brakeman.html - - name: upload brakeman failure report - uses: actions/upload-artifact@v3 - if: failure() - with: - name: Security Reports - path: brakeman.html + flags: "--color" + + # - uses: ruby/setup-ruby@v1 + # with: + # bundler-cache: true + # - name: install brakeman + # run: | + # gem install brakeman + # - name: run brakeman + # run: | + # brakeman --format html --output brakeman.html + # - name: upload brakeman failure report + # uses: actions/upload-artifact@v3 + # if: failure() + # with: + # name: Security Reports + # path: brakeman.html bundler-audit: runs-on: ubuntu-latest steps: diff --git a/bearer.yml b/bearer.yml index ea380cc6801..5f3d52bde18 100644 --- a/bearer.yml +++ b/bearer.yml @@ -2,6 +2,7 @@ disable-version-check: false log-level: info report: # fail-on-severity: critical,high,medium,low + fail-on-severity: "" format: "" no-color: false output: ""