| 1 | # Run using bin/ci |
| 2 | |
| 3 | CI.run do |
| 4 | step "Setup", "bin/setup --skip-server" |
| 5 | |
| 6 | step "Style: Ruby", "bin/rubocop" |
| 7 | |
| 8 | step "Security: Gem audit", "bin/bundler-audit" |
| 9 | step "Security: Importmap vulnerability audit", "bin/importmap audit" |
| 10 | step "Security: Brakeman code analysis", "bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error" |
| 11 | |
| 12 | |
| 13 | # Optional: set a green GitHub commit status to unblock PR merge. |
| 14 | # Requires the `gh` CLI and `gh extension install basecamp/gh-signoff`. |
| 15 | # if success? |
| 16 | # step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff" |
| 17 | # else |
| 18 | # failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again." |
| 19 | # end |
| 20 | end |