Ryan Cartner tehryanx

tehryanx / gist:0bcf3926d2f0e31570eecc79ff493fb2

Created October 8, 2025 16:31

	## Authoring Brakeman Checks (Step-by-Step Guide)

	This guide explains, in detail, how to write new Brakeman checks for Ruby on Rails security scanning. It is intended for contributors building checks in-tree as well as users writing out-of-tree custom checks.

	### What you will learn

	- The lifecycle of a Brakeman scan and where checks plug in
	- The `BaseCheck` API you inherit from
	- How call indexing works and how to query code efficiently with `tracker.find_call`
	- How to detect user input/taint and set appropriate confidence levels

tehryanx / trufflehog.json

Last active June 3, 2022 08:26

High signal patterns from trufflehog refactored to work with tomnomnom's gf