You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
In a CI environment, for a dual booting Rails app (e.g. Gemfile = Rails 6.1, Gemfile.next = Rails 7), to get brakeman to use a gemfile not named Gemfile(.lock), I shuffle files around so brakeman uses the correct gemfile. E.g. for a gemfile named Gemfile.next:
# This command does *not* work as intended, Gemfile.next is ignored,# brakeman uses Gemfile in the scan:
BUNDLE_GEMFILE=Gemfile.next bundle exec brakeman
# This does work:
rm Gemfile Gemfile.lock
cp Gemfile.next Gemfile
cp Gemfile.next.lock Gemfile.lock
bundle exec brakeman
Describe the solution you'd like
This command would work as expected, where ENV['BUNDLE_GEMFILE']/Gemfile.next(.lock) is used by Brakeman::Scanner#process_gems, instead of the hardcoded Gemfile(.lock)
BUNDLE_GEMFILE=Gemfile.next bundle exec brakeman
Describe alternatives you've considered
Shuffling gemfiles around works:
Brakeman version: 6.1.2
Is your feature request related to a problem? Please describe.
In a CI environment, for a dual booting Rails app (e.g. Gemfile = Rails 6.1, Gemfile.next = Rails 7), to get brakeman to use a gemfile not named
Gemfile(.lock)
, I shuffle files around so brakeman uses the correct gemfile. E.g. for a gemfile namedGemfile.next
:Describe the solution you'd like
This command would work as expected, where
ENV['BUNDLE_GEMFILE']
/Gemfile.next(.lock)
is used byBrakeman::Scanner#process_gems
, instead of the hardcodedGemfile(.lock)
BUNDLE_GEMFILE=Gemfile.next bundle exec brakeman
Describe alternatives you've considered
Shuffling gemfiles around works:
rm Gemfile Gemfile.lock cp Gemfile.next Gemfile cp Gemfile.next.lock Gemfile.lock bundle exec brakeman
The text was updated successfully, but these errors were encountered: