build: add and use binstubs

.github/workflows/ci.yml

@@ -19,13 +19,10 @@ jobs:
         with:
           bundler-cache: true
 
-      # - name: Scan for security vulnerabilities in Ruby dependencies
-      #   run: bin/brakeman --no-pager
-
       - name: Scan for security vulnerabilities in Ruby dependencies
         run: |
           bundle exec bundler-audit --update
-          bundle exec brakeman -q -w2
+          bin/brakeman -q -w2 --no-pager
 
   lint:
     runs-on: ubuntu-latest
@@ -43,7 +40,7 @@ jobs:
           bundler-cache: true
 
       - name: Run linters
-        run: bundle exec rubocop --parallel
+        run: bin/rubocop --parallel
 
   test:
     runs-on: ubuntu-latest

bin/brakeman

@@ -0,0 +1,27 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+#
+# This file was generated by Bundler.
+#
+# The application 'brakeman' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
+
+bundle_binstub = File.expand_path("bundle", __dir__)
+
+if File.file?(bundle_binstub)
+  if File.read(bundle_binstub, 300).include?("This file was generated by Bundler")
+    load(bundle_binstub)
+  else
+    abort("Your `bin/bundle` was not generated by Bundler, so this binstub cannot run.
+Replace `bin/bundle` by running `bundle binstubs bundler --force`, then run this command again.")
+  end
+end
+
+require "rubygems"
+require "bundler/setup"
+
+load Gem.bin_path("brakeman", "brakeman")