adding bundler audit

.github/workflows/ruby.yml

@@ -25,6 +25,10 @@ jobs:
       with:
         ruby-version: ${{ matrix.ruby-version }}
         bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+    - name: Run RuboCop
+      run: bundle exec rubocop
+    - name: Run Bundler Audit
+      run: bundle-audit check --update
     - name: Run tests
       env:
         GOOGLE_ACCOUNT_TYPE: ${{ secrets.GOOGLE_ACCOUNT_TYPE }}
@@ -34,5 +38,3 @@ jobs:
         GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
         GOOGLE_PRIVATE_KEY: ${{ secrets.GOOGLE_PRIVATE_KEY }}
       run: bundle exec rake spec
-    - name: Run RuboCop
-      run: bundle exec rubocop

README.md

@@ -21,6 +21,16 @@ After checking out the repo, run `bin/setup` to install dependencies. Then, run
 
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and the created tag, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
+### linting
+
+GitHub Action runs
+* RuboCop
+* Bundler Audit
+
+### testing
+
+RSpec tests require the environment variables listed in spec_helper.rb's `REQUIRED_VARS` constant.
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/eebbesen/sheet_zoukas.