From 357f216c1ab3b2e49d1acc36d02fedde4a801f7b Mon Sep 17 00:00:00 2001 From: Silumesii Maboshe Date: Wed, 24 Apr 2024 10:18:57 +0200 Subject: [PATCH] Add bundler-audit as a GitHub Action This commit adds `bundler-audit` to the project as a GitHub Action. Ref: - https://github.com/rubysec/bundler-audit --- .github/workflows/bundler-audit.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/workflows/bundler-audit.yml diff --git a/.github/workflows/bundler-audit.yml b/.github/workflows/bundler-audit.yml new file mode 100644 index 000000000..4ca86fa7d --- /dev/null +++ b/.github/workflows/bundler-audit.yml @@ -0,0 +1,14 @@ +--- +name: Bundler Audit + +on: [push] + +jobs: + audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: "Bundler Audit" + uses: thoughtbot/bundler-audit-action@main + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}