Security Audits #107
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Security Audits | |
| on: | |
| schedule: | |
| - cron: '30 8 * * 5' | |
| permissions: | |
| contents: read | |
| jobs: | |
| bundle_audit: | |
| name: Bundle audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Ruby | |
| uses: ruby/setup-ruby@v1 | |
| with: | |
| ruby-version: '3.0.7' | |
| bundler-cache: false | |
| - name: Bundle audit | |
| run: | | |
| gem install bundler-audit | |
| bundle audit check --update | |
| bundle_leak: | |
| name: Bundle leak | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Ruby | |
| uses: ruby/setup-ruby@v1 | |
| with: | |
| ruby-version: '3.0.7' | |
| bundler-cache: false | |
| rubygems: latest | |
| - name: Bundle leak | |
| run: | | |
| gem install bundler-leak | |
| bundle leak check --update | |
| yarn_audit: | |
| name: Yarn audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20' | |
| - name: Yarn audit | |
| run: | | |
| yarn audit |