Avoid "[Notice] Using configuration in /foo/bar/brakeman.yml"

[mariozaizar]

Hi, hey thanks for brakeman it rocks!. I'm using it as part of my CI build script so, I try to keep simple the output, as you can see here:

It was fine, until I decided to use a custom config file. Then I saw this notice [Notice] Using configuration in /foo/bar/brakeman.yml. I would like to avoid the notice message, or move it to the file. I've tried using pipes > /dev/null and 2>&1 but didn't work.

This is how I'm running the command:

bundle exec brakeman --quiet --summary --output tmp/brakeman.csv;
printf "Security .......................................................... ${green}✓ ${red}`cat tmp/brakeman.csv | grep Security | grep -v '(0)'` $reset";

Thanks a lot.

[presidentbeef]

Hi Mario,

Thanks for reporting this issue! It looks like you are using two features I didn't think anyone was using: CSV output and config files :)

The issue here is that the options are not actually set until the config file and the command line arguments are parsed. But the notification is prior to any of that, so --quiet doesn't work, even if specified in the config file. This should definitely be fixed.

However, everything except the report should go to STDERR, so a quick fix would be to run Brakeman like this:

brakeman 2> /dev/null

[mariozaizar]

Cool, it works! Thanks!
Closing this.

[presidentbeef]

I'm going to re-open this to remind me to fix it ;)