Confidence level

[klyonrad]

Hey, I was wondering if I am missing something. I would like to run brakeman with a higher minimum confidence level, otherwise the noise is too high.

I saw that the ::Brakeman.run method has this as an option (https://github.com/presidentbeef/brakeman/blob/6af53c63feb909d19bab970aedb3b0c583073eb6/lib/brakeman.rb#LL54C18-L54C18)

would it make sense to have that configurability in the same manner as the run_all_checks option?

[opal-storypark]

I believe you can configure this using the config/brakeman.yml file, which brakeman will automatically load and merge into the config passed by pronto.

For example, the equivalent to running brakeman --confidence-level 2 would be a config file of:

---
:min_confidence: 1

You can generate your own config files by passing --create-config along with any options you want stored in the config file.