Brakeman

• Category: sast (Ruby / Rails)
• Fingerprint: rule-file-surrounding-3-lines-v1 — Brakeman's own fingerprints are NOT reused because they are line-sensitive and break on refactors.
• License: MIT

sast:
  brakeman: { enabled: true }

When to enable

Any Rails project.

Common false positives

• Mass-assignment warnings on non-Rails models. Dismiss with scoped reason.
• SQL injection warnings on .where() calls that use parameter binding correctly but pass user input via interpolation. Review case-by-case.