config/brakeman.ignore

Rama develop · réplica de lectura del repositorio original.

{
  "ignored_warnings": [
    {
      "warning_type": "SSL Verification Bypass",
      "warning_code": 71,
      "fingerprint": "1dac4a2267a910219c8fa2d24558adb12903f49a1099a4b103f90867419d05eb",
      "check_name": "SSLVerify",
      "message": "SSL certificate verification was bypassed",
      "file": "app/services/mqtt/probe.rb",
      "line": 98,
      "link": "https://brakemanscanner.org/docs/warning_types/ssl_verification_bypass/",
      "code": "OpenSSL::SSL::SSLContext.new.verify_mode = OpenSSL::SSL::VERIFY_NONE",
      "render_path": null,
      "location": {
        "type": "method",
        "class": "Mqtt::Probe",
        "method": "ssl_socket"
      },
      "user_input": null,
      "confidence": "High",
      "cwe_id": [
        295
      ],
      "note": "Intentional: Mqtt::Probe only runs the survey connection test against a local MQTT broker, which typically ships a self-signed certificate. The probe verifies reachability and credentials, not certificate trust, and never carries application data. Matches the verify: false used for SENEC's local https endpoint."
    }
  ],
  "brakeman_version": "8.0.4"
}