Unscoped find not alerted for find_by!

[rbclark]

Background

Brakeman version: 6.0.0
Rails version: 7.0.5.1
Ruby version: 3.2.2

Link to Rails application code:

Model.find_by!(public_find: params[:id]
Model.find_by!(id: params[:id])

Issue

• Brakeman has been updated to include find_by but it does not include find_by!.
• Brakeman only checks for find_by on id and doesn't look for any other attributes. In our project the attribute we use public_id instead of id as the publicly facing ID of our models. This means we don't get any warnings for unscoped find for most of our models.