Integrate bundle-audit. Add ci:check_security. Refs #2068

1 files changed, 5 insertions, 0 deletions

diff --git a/lib/tasks/ci.rake b/lib/tasks/ci.rake
index 2b584c08b..e1d0e87a4 100644
--- a/lib/tasks/ci.rake
+++ b/lib/tasks/ci.rake
@@ -22,6 +22,11 @@ namespace :ci do
     git_branch.in?(deploy_envs) ? git_branch : "dev"
   end
 
+  desc "Check security aspects"
+  task :check_security do
+    sh "bundle exec bundle-audit check --update"
+  end
+
   desc "Deploy after CI"
   task :deploy do
     sh "cap #{deploy_env} deploy:migrations deploy:seed"