Skip to content

Commit

Permalink
add bundler-audit, brakeman, and remove rubocop linting step
Browse files Browse the repository at this point in the history
  • Loading branch information
DianaLiao committed Jan 3, 2025
1 parent 6caacc2 commit 3140c89
Show file tree
Hide file tree
Showing 3 changed files with 13 additions and 5 deletions.
4 changes: 1 addition & 3 deletions .github/workflows/rubyonrails.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,11 +50,9 @@ jobs:
with:
bundler-cache: true
- name: Generate binstubs
run: bundle binstubs bundler-audit brakeman rubocop
run: bundle binstubs bundler-audit brakeman
# Add or replace any other lints here
- name: Security audit dependencies
run: bin/bundler-audit --update
- name: Security audit application code
run: bin/brakeman -q -w2
- name: Lint Ruby files
run: bin/rubocop --parallel
7 changes: 5 additions & 2 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ gem "rails", "~> 7.1.3", ">= 7.1.3.4"
# The original asset pipeline for Rails [https://github.com/rails/sprockets-rails]
gem "sprockets-rails"

# Use sqlite3 as the database for Active Record
# Use postgres as the database for Active Record
gem "pg"

# Use the Puma web server [https://github.com/puma/puma]
Expand Down Expand Up @@ -75,4 +75,7 @@ gem "devise", "~> 4.9"

gem "bootstrap", "~> 5.3"

gem 'sassc-rails'
gem 'sassc-rails'

gem 'bundler-audit'
gem 'brakeman'
7 changes: 7 additions & 0 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,12 @@ GEM
bootstrap (5.3.3)
autoprefixer-rails (>= 9.1.0)
popper_js (>= 2.11.8, < 3)
brakeman (7.0.0)
racc
builder (3.3.0)
bundler-audit (0.9.2)
bundler (>= 1.2.0, < 3)
thor (~> 1.0)
capybara (3.40.0)
addressable
matrix
Expand Down Expand Up @@ -320,6 +325,8 @@ PLATFORMS
DEPENDENCIES
bootsnap
bootstrap (~> 5.3)
brakeman
bundler-audit
capybara
debug
devise (~> 4.9)
Expand Down

0 comments on commit 3140c89

Please sign in to comment.