Merge pull request #9025 from matsadler/update-magnus-gem-template #1814

	name: read-only

	on:
	pull_request:

	push:
	branches:
	- master

	concurrency:
	group: ci-${{ github.ref }}-${{ github.workflow }}
	cancel-in-progress: true

	permissions: # added using https://github.com/step-security/secure-workflows
	contents: read

	defaults:
	run:
	shell: bash

	jobs:
	read-only:
	name: Bundler on read-only system (${{ matrix.ruby.name }})
	runs-on: ubuntu-24.04
	strategy:
	fail-fast: false
	matrix:
	ruby:
	- { name: ruby-3.2, value: 3.2.9 }
	- { name: ruby-3.3, value: 3.3.9 }
	- { name: ruby-3.4, value: 3.4.5 }

	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	persist-credentials: false
	- name: Basic usage on a read-only filesystem
	run: docker run --mount type=bind,source=.,target=/rubygems --rm --read-only ruby:${{ matrix.ruby.value }} ruby -I/rubygems/bundler/lib -r'bundler/inline' -e 'gemfile {}; puts :ok'

	timeout-minutes: 15

	all-pass:
	name: All read-only jobs pass

	if: always()

	needs:
	- read-only

	runs-on: ubuntu-latest

	steps:
	- name: check dependent jobs
	uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
	with:
	jobs: ${{ toJSON(needs) }}

Provide feedback