Browse Source

feat: extract audit deps to isolated file to remove dependency

CLDC-4501-prevent-audit-blocking-pipeline
Nat Dean-Lewis 3 days ago
parent
commit
b8b2ae2378
  1. 34
      .github/workflows/audit_dependencies.yml
  2. 17
      .github/workflows/run_tests.yml

34
.github/workflows/audit_dependencies.yml

@ -0,0 +1,34 @@
name: Audit dependencies
on:
pull_request:
types:
- opened
- synchronize
push:
branches:
- main
merge_group:
workflow_dispatch:
defaults:
run:
shell: bash
jobs:
audit:
name: Audit dependencies
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
bundler-cache: true
- name: Audit
run: |
bundle exec bundler-audit

17
.github/workflows/run_tests.yml

@ -399,20 +399,3 @@ jobs:
- name: Lint
run: |
bundle exec rake lint
audit:
name: Audit dependencies
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
bundler-cache: true
- name: Audit
run: |
bundle exec bundler-audit

Loading…
Cancel
Save