diff --git a/rules/ruby/hooks.md b/rules/ruby/hooks.md index 0415fe61..1ec61d86 100644 --- a/rules/ruby/hooks.md +++ b/rules/ruby/hooks.md @@ -15,7 +15,7 @@ paths: Configure project-local hooks to prefer binstubs and checked-in tooling: - **RuboCop**: run `bundle exec rubocop -A ` or the project's safer formatter command after Ruby edits. -- **Brakeman**: run `bundle exec brakeman --no-pager` after security-sensitive Rails changes. +- **Brakeman**: run `bundle exec brakeman --no-progress` after security-sensitive Rails changes. - **Tests**: run the narrowest matching `bin/rails test ...` or `bundle exec rspec ...` command for touched files. - **Bundler audit**: run `bundle exec bundle-audit check --update` when `Gemfile` or `Gemfile.lock` changes and the project has bundler-audit installed. @@ -29,7 +29,7 @@ Configure project-local hooks to prefer binstubs and checked-in tooling: ```bash bundle exec rubocop -bundle exec brakeman --no-pager +bundle exec brakeman --no-progress bin/rails test bundle exec rspec ``` diff --git a/rules/ruby/security.md b/rules/ruby/security.md index 1ecf0645..4821c2c0 100644 --- a/rules/ruby/security.md +++ b/rules/ruby/security.md @@ -34,8 +34,8 @@ paths: - Run dependency checks when the lockfile changes: ```bash -bundle audit check --update -bundle exec brakeman --no-pager +bundle exec bundle-audit check --update +bundle exec brakeman --no-progress ``` - Review new gems for maintainer activity, native extension risk, transitive dependencies, and whether the same behavior can be implemented with Rails core.