SAST tools

- add SAST category
- add Brakeman
- add dawnscanner

Author: noraj

references.md

@@ -79,5 +79,8 @@
   * PacketFu - mid-level packet manipulation library for reading and writing packets to an interface or to a libpcap-formatted file \[ [link](https://github.com/packetfu/packetfu) \]
   * PacketGen - library to generate, send and capture network packets \[ [link](https://github.com/sdaubert/packetgen) \]
   * ssllabs.rb - library for Qualys SSL Labs API, SSL/TLS security analysis \[ [link](https://github.com/Shopify/ssllabs.rb) \]
+* **Source Code Analysis Tools (SAST)**
+  * Brakeman - static analysis tool which checks Ruby on Rails applications for security vulnerabilities \[ [link](https://brakemanscanner.org/), [source](https://github.com/presidentbeef/brakeman) \]
+  * dawnscanner - static analysis security scanner for ruby written web applications with Sinatra, Padrino and Ruby on Rails frameworks \[ [link](https://dawnscanner.org/), [source](https://github.com/thesp0nge/dawnscanner) \]
   * **\[**ADD YOUR RUBY HACKING TOOL HERE!**\]**