Merge pull request rails#50547 from faqndo97/run_importmap_audit_on_ci

Run importmap audit on CI

Author: rafaelfranca

railties/lib/rails/generators/rails/app/templates/github/ci.yml.tt

@@ -7,7 +7,7 @@ on:
 
 jobs:
 <%- unless skip_brakeman? -%>
-  scan:
+  scan_ruby:
     runs-on: ubuntu-latest
 
     steps:
@@ -20,9 +20,27 @@ jobs:
           ruby-version: .ruby-version
           bundler-cache: true
 
-      - name: Scan for security vulnerabilities
+      - name: Scan for security vulnerabilities in Ruby Dependencies
         run: bin/brakeman
 <% end -%>
+<%- if options[:javascript] == "importmap" -%>
+
+  scan_js:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Scan for security vulnerabilities in Javascript Dependencies
+        run: bin/importmap audit
+<% end -%>
 <%- unless skip_rubocop? -%>
 
   lint: