Bump brakeman from 5.4.1 to 6.2.2 #21

	name: CI

	on:
	pull_request:
	push:
	branches: [ main ]

	jobs:
	scan_ruby:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: .ruby-version
	bundler-cache: true

	- name: Scan for common Rails security vulnerabilities using static analysis
	run: bin/brakeman --no-pager

	test:
	runs-on: ubuntu-latest

	services:
	postgres:
	image: postgres
	env:
	POSTGRES_USER: postgres
	POSTGRES_PASSWORD: postgres
	ports:
	- 5432:5432
	options: --health-cmd="pg_isready" --health-interval=10s --health-timeout=5s --health-retries=3

	# redis:
	# image: redis
	# ports:
	# - 6379:6379
	# options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5

	steps:
	- name: Install packages
	run: sudo apt-get update && sudo apt-get install --no-install-recommends -y google-chrome-stable curl libjemalloc2 libvips postgresql-client

	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: .ruby-version
	bundler-cache: true

	- name: Install dependencies
	run: bundle install

	- name: Run tests
	env:
	RAILS_ENV: test
	DATABASE_URL: postgres://postgres:postgres@localhost:5432
	run: bin/rails test

	- name: Keep screenshots from failed system tests
	uses: actions/upload-artifact@v4
	if: failure()
	with:
	name: screenshots
	path: ${{ github.workspace }}/tmp/screenshots
	if-no-files-found: ignore

Provide feedback