Add brakeman tests

brakeman is more for rails, but it checks sql injecting and eval checks

Author: kbrock

.github/workflows/main.yml

@@ -82,3 +82,16 @@ jobs:
       env:
         DB: mysql2
       run: bundle exec rake db:create spec
+
+  brakeman:
+    runs-on: ubuntu-latest
+    name: brakeman
+    steps:
+    - uses: actions/checkout@v6
+    - name: Setup Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: "3.3"
+        bundler-cache: true
+    - name: run brakeman
+      run: bundle exec rake brakeman

Rakefile

@@ -24,6 +24,11 @@ RSpec::Core::RakeTask.new(:spec) do |task|
   task.pattern = "spec/*_spec.rb"
 end
 
+desc "Run brakeman security scanner"
+task :brakeman do
+  sh "bundle exec brakeman --force --quiet --no-pager"
+end
+
 # require "standard/rake"
 
 task default: :spec # %i[spec standard]

arel_attribute.gemspec

@@ -40,6 +40,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "pg"
   spec.add_development_dependency "rake", "~> 13.0"
   spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency "brakeman"
   spec.add_development_dependency "standard", "~> 1.3"
   spec.add_development_dependency "simplecov", ">= 0.21.2"
   spec.add_development_dependency "simplecov-json"