From 9cf6351d231394f37c3b6e358f3e12f99fba6f25 Mon Sep 17 00:00:00 2001
From: eebbesen <eebbesen.git@gmail.com>
Date: Sun, 13 Oct 2024 04:33:52 -0500
Subject: [PATCH] adding bundler audit

---
 .github/workflows/ruby.yml |  6 ++++--
 README.md                  | 10 ++++++++++
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index f382d37..122faa0 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -25,6 +25,10 @@ jobs:
       with:
         ruby-version: ${{ matrix.ruby-version }}
         bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+    - name: Run RuboCop
+      run: bundle exec rubocop
+    - name: Run Bundler Audit
+      run: bundle-audit check --update
     - name: Run tests
       env:
         GOOGLE_ACCOUNT_TYPE: ${{ secrets.GOOGLE_ACCOUNT_TYPE }}
@@ -34,5 +38,3 @@ jobs:
         GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
         GOOGLE_PRIVATE_KEY: ${{ secrets.GOOGLE_PRIVATE_KEY }}
       run: bundle exec rake spec
-    - name: Run RuboCop
-      run: bundle exec rubocop
diff --git a/README.md b/README.md
index 5a4494a..032b079 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,16 @@ After checking out the repo, run `bin/setup` to install dependencies. Then, run
 
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and the created tag, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
+### linting
+
+GitHub Action runs
+* RuboCop
+* Bundler Audit
+
+### testing
+
+RSpec tests require the environment variables listed in spec_helper.rb's `REQUIRED_VARS` constant.
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/eebbesen/sheet_zoukas.