Contents

name: Security

on:
  pull_request:

env:
  RAILS_ENV: test
  BUNDLE_WITH: "ci"

jobs:
  bundle-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true
          rubygems: latest

      # Patch-level verification for bundler.
      - name: Run bundle-audit
        run: |
          script/security_checks/bundle-audit

  brakeman: # A static analysis security vulnerability scanner for Ruby on Rails applications
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true
          rubygems: latest

      - name: brakeman report
        run: |
          script/security_checks/brakeman
          cat security-results.json

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
hephaestus-0.1.3	templates/.github/workflows/security.yml
hephaestus-0.1.2	templates/.github/workflows/security.yml
hephaestus-0.1.1	templates/.github/workflows/security.yml