Move bundle-audit to GitHub Actions

Following the GitHub Actions pattern of having one check per service, rather than one big check for faster feedback. This also means we no longer need to bundle `bundler-audit`.
thoughtbot · Aug 8, 2022 · 2879aa0 · 2879aa0
1 parent ea96c83
commit 2879aa0
Show file tree

Hide file tree

Showing 9 changed files with 14 additions and 26 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -43,9 +43,6 @@ commands:
       # Run the tests
       - run: bundle exec rspec
 
-      # Check vulnerabilities
-      - run: bundle exec rake bundler:audit
-
 default_job: &default_job
   working_directory: ~/administrate
 

diff --git a/.github/workflows/bundle-audit.yml b/.github/workflows/bundle-audit.yml
@@ -0,0 +1,13 @@
+---
+name: Bundler Audit
+on: [push]
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: 'Bundler Audit'
+        uses: andrewmcodes/bundler-audit-action@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/Gemfile b/Gemfile
@@ -16,7 +16,6 @@ gem "unicorn"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -95,9 +95,6 @@ GEM
       parser (>= 2.4)
       smart_properties
     builder (3.2.4)
-    bundler-audit (0.9.1)
-      bundler (>= 1.2.0, < 3)
-      thor (~> 1.0)
     byebug (11.1.3)
     capybara (3.37.1)
       addressable
@@ -338,7 +335,6 @@ DEPENDENCIES
   ammeter
   appraisal
   awesome_print
-  bundler-audit
   byebug
   capybara
   database_cleaner
@@ -369,4 +365,4 @@ DEPENDENCIES
   yard
 
 BUNDLED WITH
-   2.3.6
+   2.3.10
diff --git a/Rakefile b/Rakefile
@@ -28,5 +28,3 @@ if defined? RSpec
     t.verbose = false
   end
 end
-
-task default: "bundler:audit"
diff --git a/gemfiles/rails60.gemfile b/gemfiles/rails60.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.0.3.4"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/gemfiles/rails61.gemfile b/gemfiles/rails61.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.1"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/gemfiles/rails70.gemfile b/gemfiles/rails70.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.1"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/spec/example_app/lib/tasks/bundler_audit.rake b/spec/example_app/lib/tasks/bundler_audit.rake
-Original file line number
+Diff line change
@@ Expand Up / @@ -28,5 +28,3 @@ if defined? RSpec @@
         t.verbose = false
       end
     end
-    task default: "bundler:audit"