Enable CodeClimate Bundler-Audit checks (#2862)

* add bundler-audit to Gemfile

* Enable CodeClimate bundler-audit checks

.codeclimate.yml

 engines:
- duplication:
-   enabled: false
- rubocop:
-   enabled: true
- eslint:
-   enabled: true
+  bundler-audit:
+    enabled: true
+  duplication:
+    enabled: false
+  eslint:
+    enabled: true
+  rubocop:
+    enabled: true
 ratings:
- paths:
- - "**.rb"
- - "**.js"
+  paths:
+  - "**.rb"
+  - "**.js"
 exclude_paths:
 - spec/
 - vendor/asset

Gemfile

@@ -86,6 +86,7 @@ group :development do
   gem 'letter_opener'
   gem 'letter_opener_web'
   gem 'rubocop', '0.46.0', require: false
+  gem 'bundler-audit', '~> 0.4.0', require: false
 
   gem 'capistrano', '3.8.0'
   gem 'capistrano-rails'

Gemfile.lock

@@ -71,6 +71,9 @@ GEM
     bullet (5.5.1)
       activesupport (>= 3.0.0)
       uniform_notifier (~> 1.10.0)
+    bundler-audit (0.4.0)
+      bundler (~> 1.2)
+      thor (~> 0.18)
     capistrano (3.8.0)
       airbrussh (>= 1.0.0)
       i18n
@@ -477,6 +480,7 @@ DEPENDENCIES
   better_errors
   binding_of_caller
   bullet
+  bundler-audit (~> 0.4.0)
   capistrano (= 3.8.0)
   capistrano-rails
   capistrano-rbenv