thoughtbot · nickcharlton · Aug 11, 2022 · Aug 8, 2022
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -43,9 +43,6 @@ commands:
       # Run the tests
       - run: bundle exec rspec
 
-      # Check vulnerabilities
-      - run: bundle exec rake bundler:audit
-
 default_job: &default_job
   working_directory: ~/administrate
 

diff --git a/.github/workflows/bundle-audit.yml b/.github/workflows/bundle-audit.yml
@@ -0,0 +1,13 @@
+---
+name: Bundler Audit
+on: [push]
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: 'Bundler Audit'
+        uses: andrewmcodes/bundler-audit-action@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/Gemfile b/Gemfile
@@ -16,7 +16,6 @@ gem "unicorn"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -95,9 +95,6 @@ GEM
       parser (>= 2.4)
       smart_properties
     builder (3.2.4)
-    bundler-audit (0.9.1)
-      bundler (>= 1.2.0, < 3)
-      thor (~> 1.0)
     byebug (11.1.3)
     capybara (3.37.1)
       addressable
@@ -338,7 +335,6 @@ DEPENDENCIES
   ammeter
   appraisal
   awesome_print
-  bundler-audit
   byebug
   capybara
   database_cleaner
@@ -369,4 +365,4 @@ DEPENDENCIES
   yard
 
 BUNDLED WITH
-   2.3.6
+   2.3.10
diff --git a/Rakefile b/Rakefile
@@ -28,5 +28,3 @@ if defined? RSpec
     t.verbose = false
   end
 end
-
-task default: "bundler:audit"
diff --git a/gemfiles/rails60.gemfile b/gemfiles/rails60.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.0.3.4"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/gemfiles/rails61.gemfile b/gemfiles/rails61.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.1"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/gemfiles/rails70.gemfile b/gemfiles/rails70.gemfile
@@ -17,7 +17,6 @@ gem "rails", "~> 6.1"
 group :development, :test do
   gem "appraisal"
   gem "awesome_print"
-  gem "bundler-audit", require: false
   gem "byebug"
   gem "dotenv-rails"
   gem "factory_bot_rails"

diff --git a/spec/example_app/lib/tasks/bundler_audit.rake b/spec/example_app/lib/tasks/bundler_audit.rake
-Original file line number
+Diff line change
@@ Expand Up / @@ -28,5 +28,3 @@ if defined? RSpec @@
         t.verbose = false
       end
     end
-    task default: "bundler:audit"