Merge pull request #748 from swapmyvote/dependabot/npm_and_yarn/follo… #3

	# This workflow uses actions that are not certified by GitHub. They are
	# provided by a third-party and are governed by separate terms of service,
	# privacy policy, and support documentation.
	#
	# This workflow will install a prebuilt Ruby version, install dependencies, and
	# run tests and linters.
	name: "Ruby on Rails CI"
	on:
	push:
	branches: [ "master" ]
	pull_request:
	branches: [ "master" ]
	jobs:
	test:
	runs-on: ubuntu-latest
	services:
	postgres:
	image: postgres:11-alpine
	ports:
	- "5432:5432"
	env:
	POSTGRES_DB: rails_test
	POSTGRES_USER: rails
	POSTGRES_PASSWORD: password
	env:
	RAILS_ENV: test
	DATABASE_URL: "postgres://rails:password@localhost:5432/rails_test"
	steps:
	- name: Checkout code
	uses: actions/checkout@v3
	- name: Install Ruby and gems
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true
	- name: Install Node
	uses: actions/setup-node@v3
	with:
	node-version-file: .nvmrc
	cache: 'yarn'
	- name: Set up database schema
	run: bin/rails db:schema:load
	- run: yarn install
	- name: Run tests
	run: bin/rake spec

	lint:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v3
	- name: Install Ruby and gems
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true
	- name: Lint Ruby files
	run: bin/rake lint
	# - name: Security audit dependencies
	# run: bin/bundler-audit --update
	# - name: Security audit application code
	# run: bin/brakeman -q -w2

Provide feedback