Security Automation with Ansible 2

Brakeman scanner – Rails security scanner

Brakeman is an open source tool to do a static security analysis of Ruby on Rails applications. This can be applied at any stage of development and deployment process that includes staging, QA, production, and so on.

A simple playbook to execute Brakeman against our application looks like the following:

- name: Brakeman Scanning Playbook  hosts: scanner  remote_user: ubuntu  become: yes  gather_facts: false  vars:    repo_url: https://github.com/OWASP/railsgoat.git    output_dir: /tmp/railsgoat/    report_name: report.html  tasks:    - name: installing ruby and git      apt:        name: "{{ item }}"        update_cache: yes        state: present      with_items:        - ruby-full        - git    - name: installing brakeman gem      gem:        name: brakeman state: present ...