rails-audit-thoughtbot

You can audit a Rails codebase for security vulnerabilities and code quality issues by running a comprehensive analysis against thoughtbot guidelines. This skill checks RSpec testing practices, PORO design patterns, Rails conventions, and database optimization, outputting a markdown report with severity levels.

A Rails code audit for security and best practices includes analyzing testing practices, security vulnerabilities, code design, Rails conventions, database optimization, and Ruby best practices. The audit produces a structured markdown report grouped by category with actionable recommendations and severity levels.

Yes, you can use this tool to check RSpec testing practices in your Ruby on Rails app. The audit analyzes your testing setup alongside security vulnerabilities, code design, and database optimization, then outputs a detailed markdown report with severity levels and actionable recommendations.

Yes, the audit checks for PORO patterns and ActiveModel usage in Rails. It analyzes code design against thoughtbot guidelines, focusing on Plain Old Ruby Objects with ActiveModel, and includes this in a markdown report with severity levels and actionable recommendations.

The best way to ensure a Rails feature adheres to security standards before merging is to run a comprehensive code audit against thoughtbot best practices. This analyzes security vulnerabilities, testing, and code design, producing a markdown report with severity levels and actionable recommendations.

The Rails code audit report uses a structured markdown format for results. The report is grouped by category, including testing, security, models, controllers, and database usage, with severity levels and actionable recommendations for each identified issue.