taski/.github/workflows/security.yml at master · ahogappa/taski · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
name: Security

on:
  push:
    branches: [ main, master ]
  pull_request:
    branches: [ main, master ]
  schedule:
    - cron: '0 6 * * 1' # Weekly on Monday at 6 AM UTC

jobs:
  bundler-audit:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

    - name: Set up Ruby
      uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
      with:
        ruby-version: 3.4
        bundler-cache: false

    - name: Add platform and install dependencies
      run: |
        bundle lock --add-platform x86_64-linux
        bundle install

    - name: Install bundler-audit
      run: gem install bundler-audit

    - name: Update advisory database
      run: bundle audit --update

    - name: Run bundler-audit
      run: bundle audit --verbose