Feature request: integrate bundler-audit with the app's CI

[rubysec]

Feature request: integrate bundler-audit with the app's CI

[postmodern]

A rake task is a good idea.

[postmodern]

A contributor added a basic rake task in 4334a11. I had to revert it to release 0.3.1, but it will come back in 0.4.0.

[derekprior]

Here's the task we're using on our projects at thoughtbot:
https://github.com/thoughtbot/suspenders/blob/master/templates/bundler_audit.rake

Would this be acceptable as a contribution?

[postmodern]

@derekprior looks good. You should formalize that into a Task class, sans any mention of Rails of course.

[reconbot]

I added this to my ci's config'

bundle exec 'bundle-audit update && bundle-audit check'

works like a charm

[JustinAiken]

You guys may be interested in #104

I'm using it in Jenkins like:

# Bundler Audit:
set +e 
bundle exec bundle-audit update && bundle exec bundle-audit -o=bundler_audit/index.html
export BUNDLER_AUDIT_FAILED=$? 
set -e

And then using the HTML Publisher Plugin to save the generated html file along with my spec results/coverage/brakeman/rubycritic/etc reports.