Rails security resources

Resources

Rails security guide: https://guides.rubyonrails.org/security.html

Zen rails security checklist: https://github.com/brunofacca/zen-rails-security-checklist

OWASP ruby on rails cheat sheet: https://cheatsheetseries.owasp.org/cheatsheets/Ruby_on_Rails_Cheat_Sheet.html

Static code analysis/audit tools

Bundle audit: https://github.com/rubysec/bundler-audit

Brakeman: https://github.com/presidentbeef/brakeman

Rake task to create a new devise user

namespace :devise do
  desc "Create admin"
  task :create_admin, :email, :password, :needs => :environment do |t, args|
    if a = Admin.create(:email => args.email, :password => args.password)
      puts "Created admin"
    else 
      puts a.errors
    end    
  end
end  

Usage:

$> rake devise:create_admin["user@example.com","password"]