Improve membership renewal configuration UX and fix activity particip… #419

	name: Security

	on:
	push:
	schedule:
	- cron: "00 8 * * 5"

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	brakeman-scan:
	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
	actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status

	runs-on: ubuntu-latest
	timeout-minutes: 10

	steps:
	- name: Checkout
	uses: actions/checkout@v5

	- name: Ruby Setup
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true

	# Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis
	- name: Brakeman Scan
	continue-on-error: true
	run: \|
	bin/brakeman -f sarif -o results.sarif .

	# Upload the SARIF file generated in the previous step
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@v4
	with:
	sarif_file: results.sarif

	dependency-audit:
	runs-on: ubuntu-latest
	timeout-minutes: 10

	steps:
	- name: Checkout
	uses: actions/checkout@v5

	- name: Ruby Setup
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true

	- name: Bundle Audit
	run: bin/bundler-audit check --update

	- name: Importmap Audit
	run: bin/importmap audit

Provide feedback