This web audit tool allows users to automate the generation of code update reports for use in manual secure code reviews. A custom scheduler generates code diffs to be reviewed by reviewers. Users can also attach information to the code review if any issues are found.
This tool currently only works for code repositories that are tracked via Git.
Vaquita was made to automate the process of generating code diffs for multiple projects and allowing teams to take responsibility over secure code reviews.
Please see Installing.md
Lint tests can be achieved by running the following:
bundle exec rake eslintfor javascriptbundle exec bundle exec scss-lint app/assets/stylesheets/for stylesheetsbundle exec rubocopfor rubybundle exec brakemanfor static secure code analysis
Feature tests can be achieved by running the following:
bundle exec rspec
Test must be written for new features and all tests must pass before merge requests will be approved.
Please see Contributing.md
Please see License.txt