Move bundle-audit to GitHub Actions

Following the GitHub Actions pattern of having one check per service, rather than one big check for faster feedback.
thoughtbot · Aug 8, 2022 · 4235766 · 4235766
1 parent 7cde042
commit 4235766
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -43,9 +43,6 @@ commands:
       # Run the tests
       - run: bundle exec rspec
 
-      # Check vulnerabilities
-      - run: bundle exec rake bundler:audit
-
 default_job: &default_job
   working_directory: ~/administrate
 

diff --git a/.github/workflows/bundle-audit.yml b/.github/workflows/bundle-audit.yml
@@ -0,0 +1,13 @@
+---
+name: Bundler Audit
+on: [push]
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: 'Bundler Audit'
+        uses: andrewmcodes/bundler-audit-action@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}