Security Audits

Security Audits #98

Sign in to view logs

Workflow file for this run

.github/workflows/security.yml at 0dfc2b2

	name: Security Audits

	on:
	schedule:
	- cron: '30 8 * * 5'

	permissions:
	contents: read

	jobs:
	bundle_audit:
	name: Bundle audit
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	- name: Set up Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: '3.3.5'
	bundler-cache: false
	- name: Bundle audit
	run: \|
	gem install bundler-audit
	bundle audit check --update

	bundle_leak:
	name: Bundle leak
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	- name: Set up Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: '3.3.5'
	bundler-cache: false
	- name: Bundle leak
	run: \|
	gem install bundler-leak
	bundle leak check --update

	yarn_audit:
	name: Yarn audit
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	- name: Yarn audit
	run: \|
	yarn audit