rails-audit-thoughtbot

To audit a Rails codebase for security and code quality, run an assessment from the project root that scans testing practices, security vulnerabilities, and code design, generating a markdown report grouped by category with severity levels.

A Rails code review covers RSpec testing practices, security vulnerabilities, code design including POROs and ActiveModel patterns, Rails conventions, migrations hygiene, and performance considerations to assess overall application quality.

Yes, you can generate a detailed markdown audit report grouped by categories like Testing, Security, Models, Controllers, Code Design, and Views, with severity levels ranging from Critical to Low for compliance checks.

Yes, the Rails audit checks for skinny controllers, Rails conventions, and ActiveModel patterns as part of its code design assessment, applying thoughtbot best practices to evaluate the application architecture.

Code quality findings are categorized into groups like Testing, Security, Models, Controllers, Code Design, and Views, then prioritized using severity levels of Critical, High, Medium, and Low to guide remediation efforts.