Summary: <p>Railroader is a security static analysis tool for applications that use Ruby on Rails. Railroader will examine custom code to look for potential problems, and warn about them. Railroader can't find every vulnerability, but it's a great tool to help find problems before they hurt anyone. It is a static analysis tool - that means it does not try to run the application users are analyzing. Railroader is an OSS fork of the Brakeman project, which has gone proprietary</p> <p><strong>Hosts:</strong> <a href="https://twit.tv/people/randal-schwartz">Randal Schwartz</a> and <a href="https://twitter.com/methoddan" target="_blank">Dan Lynch</a></p> <p><strong>Guest:</strong> <a href="https://bestpractices.coreinfrastructure.org/" target="_blank">David Wheeler</a></p> <p>Download or subscribe to this show at <a href="https://twit.tv/shows/floss-weekly">https://twit.tv/shows/floss-weekly</a></p> <p><a href="http://bit.ly/flossweeklyguests" target="_blank">Here's what's coming up for FLOSS in the future</a>.</p> <p>Think your open source project should be on FLOSS Weekly? Email Randal at <a href="mailto:merlyn@stonehenge.com">merlyn@stonehenge.com</a></p> <p>Thanks to <a href="http://lullabot.com/" target="_blank">Lullabot's</a> Jeff Robbins, web designer and musician, for our theme music.</p>
