Update github action test workflow

Author: dawner

.github/workflows/rails-ci.yml

@@ -0,0 +1,72 @@
+name: "Ruby on Rails CI"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:15-alpine
+        ports:
+          - "5432:5432"
+        env:
+          POSTGRES_DB: rails_test
+          POSTGRES_USER: rails
+          POSTGRES_PASSWORD: password
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        run: docker build -t money-sleuth:test .
+
+      - name: Run tests in Docker
+        run: |
+          docker run --rm \
+            --network host \
+            -v ${{ github.workspace }}:/myapp \
+            -e RAILS_ENV=test \
+            -e DATABASE_URL="postgres://rails:password@localhost:5432/rails_test" \
+            -e BASIC_AUTH_ADMIN_PASSWORD="password" \
+            money-sleuth:test \
+            bash -c "bin/rails db:schema:load && bin/rails assets:precompile && bin/rake"
+
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        run: docker build -t money-sleuth:test .
+
+      - name: Run linting in Docker
+        run: |
+          docker run --rm \
+            -v ${{ github.workspace }}:/myapp \
+            money-sleuth:test \
+            bash -c "
+              bundle exec bundler-audit --update
+              bundle exec bundler-audit
+              bundle exec brakeman -q -w2
+              bundle exec rubocop --parallel
+            "

.github/workflows/rubyonrails.yml

@@ -53,6 +53,11 @@ group :development do
   # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring
   gem 'spring'
   gem 'spring-watcher-listen', '~> 2.0.0'
+
+  # Linting and security tools
+  gem 'rubocop', require: false
+  gem 'brakeman', require: false
+  gem 'bundler-audit', require: false
 end
 
 group :test do

Gemfile

@@ -169,8 +169,9 @@ GEM
     net-protocol (0.2.2)
       timeout
     net-smtp (0.4.0.1)
-      net-protocol
     nio4r (2.7.0)
+    nokogiri (1.16.2-arm64-darwin)
+      racc (~> 1.4)
     nokogiri (1.16.2-x86_64-linux)
       racc (~> 1.4)
     pg (1.5.5)
@@ -311,6 +312,7 @@ GEM
     zeitwerk (2.6.13)
 
 PLATFORMS
+  arm64-darwin-24
   x86_64-linux
 
 DEPENDENCIES