bundle-audit Gemfile dependencies

.travis.yml

@@ -26,6 +26,7 @@ before_script:
 script:
   - docker-compose -f docker-compose.ci.yml run --rm test_web rails db:wait_for_init db:create spec
   - docker-compose -f docker-compose.ci.yml run --rm test_web brakeman
+  - docker-compose -f docker-compose.ci.yml run --rm test_web /bin/sh -c "bundle-audit update && bundle-audit"
   - docker-compose -f docker-compose.ci.yml run --rm test_web yarn test
   - docker-compose -f docker-compose.ci.yml run --rm test_web rubocop
   - docker-compose -f docker-compose.ci.yml run --rm test_web yarn lint

Gemfile

@@ -26,6 +26,7 @@ gem 'webpacker'
 
 group :development, :test do
   gem 'brakeman'
+  gem 'bundle-audit'
   gem 'database_cleaner'
   gem 'dotenv-rails'
   gem 'factory_bot_rails'

Gemfile.lock

@@ -87,6 +87,11 @@ GEM
       msgpack (~> 1.0)
     brakeman (4.5.1)
     builder (3.2.3)
+    bundle-audit (0.1.0)
+      bundler-audit
+    bundler-audit (0.6.1)
+      bundler (>= 1.2.0, < 3)
+      thor (~> 0.18)
     capybara (3.22.0)
       addressable
       mini_mime (>= 0.1.3)
@@ -300,6 +305,7 @@ PLATFORMS
 DEPENDENCIES
   bootsnap (>= 1.4.1)
   brakeman
+  bundle-audit
   capybara (>= 2.15)
   database_cleaner
   dotenv-rails