From cd60571cf969e962991e5ec3e4cd3c378b80d8b3 Mon Sep 17 00:00:00 2001
From: Ryan W <rwilliamz@gmail.com>
Date: Sat, 4 May 2024 09:37:33 -0700
Subject: [PATCH] build: Migrate closer to default Rails GHA

---
 .github/workflows/{ruby.yml => ci.yml} | 30 ++++++++++++++++++++------
 1 file changed, 24 insertions(+), 6 deletions(-)
 rename .github/workflows/{ruby.yml => ci.yml} (77%)

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ci.yml
similarity index 77%
rename from .github/workflows/ruby.yml
rename to .github/workflows/ci.yml
index f2cb0d4..067908e 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ci.yml
@@ -1,4 +1,4 @@
-name: Ruby
+name: CI
 
 on:
   push:
@@ -7,7 +7,27 @@ on:
     branches: [ main ]
 
 jobs:
-  linters:
+
+  scan_ruby:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      # - name: Scan for security vulnerabilities in Ruby dependencies
+      #   run: bin/brakeman --no-pager
+
+      - name: Scan for security vulnerabilities in Ruby dependencies
+        run: |
+          bundle exec bundler-audit --update
+          bundle exec brakeman -q -w2
+
+  lint:
     runs-on: ubuntu-latest
 
     env:
@@ -16,16 +36,14 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
+
       - name: Run linters
         run: bundle exec rubocop --parallel
-      - name: Ruby security checks
-        run: |
-          bundle exec bundler-audit --update
-          bundle exec brakeman -q -w2
 
   test:
     runs-on: ubuntu-latest