rake task for security

[jcarres-mdsol]

create a security:check rake task to run brakeman or any other tool in isolation

[asmith-mdsol]

Nice idea.

[mjobin-mdsol]

this is done right?

[jcarres-mdsol]

It is not done, I am not sure if it is a good idea or no, right now we run all the tools but we do not know what the tools is concerned with, to be able to make this correctly we should give a category to each tool and run the ones in the security category.

[asmith-mdsol]

Interesting @jcarres-mdsol. How would having categories help? Are you thinking of having separate CI jobs in the CI server so you can see security fails separately to test fails?

[mjobin-mdsol]

like shamus is set for validation ? you would like to flag brakeman as security?

[jcarres-mdsol]

As it seems that noone has requested this feature, maybe is not that useful anyways!

[asmith-mdsol]

Let's leave it in as a reminder. I think we may want it ultimately.