Scan Ruby and Rails source for security and CVE issues

dawnscanner reads Ruby source and reports security problems before the code ships. It works on plain Ruby scripts and unlocks its full check set on web applications, where it understands the major MVC frameworks such as Rails, Sinatra, and Padrino. Pointed at a project directory, it walks the code and matches it against its rule set.

Its checks span several angles. It maps findings to the OWASP Top 10, cross-references known CVEs against the gems in Gemfile.lock, and applies code-quality and code-style rules. Each category has its own toggle, so a run can focus on dependency CVEs alone or on OWASP risks without the style noise.

On Trickest, dawnscanner is a Static Code Analysis node that takes a target directory and writes a file and a folder of results. Run it in a pipeline that fetches a repository, so static findings land in the same triage path as your dynamic scanner output.