namespace :audit do
  desc 'Print CVE audit commands (run via Docker on this machine)'
  task :help do
    puts <<~HELP
      Fibitex dependency CVE audit — see Docs/10-cve-audit.md

      Ruby (Dena):
        docker run --rm -v "#{Dir.pwd}/../Dena:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"

      Ruby (Dalan):
        docker run --rm -v "#{Dir.pwd}/../Dalan:/app" -w /app ruby:2.6.6 bash -c "gem install bundler:2.1.4 bundler-audit --no-document && bundle audit check --update"

      OSV (summary):
        docker run --rm -v "#{Dir.pwd}/../Dena:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
        docker run --rm -v "#{Dir.pwd}/../Dalan:/src" ghcr.io/google/osv-scanner:latest -L /src/Gemfile.lock
        docker run --rm -v "#{Dir.pwd}/../Gereh:/src" ghcr.io/google/osv-scanner:latest -L /src/yarn.lock

      Config secrets check:
        bundle exec rake config:check
    HELP
  end
end