diff --git a/.github/workflows/rubyonrails.yml b/.github/workflows/rubyonrails.yml index 26df94f..e316834 100644 --- a/.github/workflows/rubyonrails.yml +++ b/.github/workflows/rubyonrails.yml @@ -50,11 +50,9 @@ jobs: with: bundler-cache: true - name: Generate binstubs - run: bundle binstubs bundler-audit brakeman rubocop + run: bundle binstubs bundler-audit brakeman # Add or replace any other lints here - name: Security audit dependencies run: bin/bundler-audit --update - name: Security audit application code run: bin/brakeman -q -w2 - - name: Lint Ruby files - run: bin/rubocop --parallel diff --git a/Gemfile b/Gemfile index 3241042..680a8cc 100644 --- a/Gemfile +++ b/Gemfile @@ -8,7 +8,7 @@ gem "rails", "~> 7.1.3", ">= 7.1.3.4" # The original asset pipeline for Rails [https://github.com/rails/sprockets-rails] gem "sprockets-rails" -# Use sqlite3 as the database for Active Record +# Use postgres as the database for Active Record gem "pg" # Use the Puma web server [https://github.com/puma/puma] @@ -75,4 +75,7 @@ gem "devise", "~> 4.9" gem "bootstrap", "~> 5.3" -gem 'sassc-rails' \ No newline at end of file +gem 'sassc-rails' + +gem 'bundler-audit' +gem 'brakeman' \ No newline at end of file diff --git a/Gemfile.lock b/Gemfile.lock index 7d77a48..13e9e3b 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -92,7 +92,12 @@ GEM bootstrap (5.3.3) autoprefixer-rails (>= 9.1.0) popper_js (>= 2.11.8, < 3) + brakeman (7.0.0) + racc builder (3.3.0) + bundler-audit (0.9.2) + bundler (>= 1.2.0, < 3) + thor (~> 1.0) capybara (3.40.0) addressable matrix @@ -320,6 +325,8 @@ PLATFORMS DEPENDENCIES bootsnap bootstrap (~> 5.3) + brakeman + bundler-audit capybara debug devise (~> 4.9)