brakeman-plugin: A Java repository from tmobaird

A Hudson/Jenkins plugin to run Brakeman against Ruby on Rails applications and track the results.

Requirements

This plugin requires the Static Analysis Utilities Plugin (which is also called "analysis-core") version >= 1.78. The plugin is available in Jenkins under Manage Jenkins -> Manage Plugins -> Available -> Static Analysis Utilities.

You will also need to have Ruby and RubyGems installed on the Jenkins/Hudson server in order to run Brakeman.

Installing the Plugin

Through Jenkins

Navigate to Manage Jenkins -> Manage Plugins -> Available and look for "Brakeman". Click the checkbox and then the "Install" button at the bottom of the page.

Manually

Download brakeman.hpi from here.

Inside Jenkins, go to Manage Jenkins -> Manage Plugins -> Advanced -> Upload Plugin.

Upload brakeman.hpi.

Usage

Add Shell Command

Add/append a shell command to your job configuration like (this is just an example):

gem install brakeman --no-rdoc --no-ri &&
brakeman -o brakeman-output.tabs

Or, if rvm is available, you can use something like:

bash -l -c 'rvm use 1.8.7 &&
rvm gemset create brakeman &&
rvm gemset use brakeman &&
gem install brakeman --no-rdoc --no-ri &&
brakeman -o brakeman-output.tabs'

The version of Ruby may vary according to your setup.

Publish Warnings

Click 'Publish Brakeman warnings' to enable the Brakeman.

Some adjustment may need to be done regarding paths. Brakeman needs to be run at the root of the application or supplied with the path. The output file specified on the commandline needs to be synched with the output file specified as a plugin option.

Pipeline usage

Assuming build environment is configured as above:

node {
  sh 'brakeman -o brakeman-output.tabs'
  publishBrakeman 'path/to/brakeman-output.tabs'
}

Testing without Existing Jenkins Server

Requires Maven2. You will likely need to modify your environment as documented here.

After cloning the source, run this in the main directory:

mvn hpi:run

This starts up a copy of Jenkins with the Brakeman plugin installed. This is not necessary if you just want to install the plugin.

Building a New Plugin Package

This is to generate a new brakeman.hpi.