add simplecov and brakeman

.gitignore

@@ -24,3 +24,5 @@
 
 /.vscode
 .DS_Store
+coverage
+erd.pdf

Gemfile

@@ -39,6 +39,8 @@ end
 group :test do
   gem 'database_cleaner', '~> 1.6', '>= 1.6.1'
   gem 'launchy', '~> 2.4', '>= 2.4.3'
+  gem 'simplecov', :require => false
+  gem 'brakeman', '~> 3.7', '>= 3.7.2', :require => false
 end
 
 group :production do

Gemfile.lock

@@ -48,6 +48,7 @@ GEM
     bootstrap-sass (3.3.7)
       autoprefixer-rails (>= 5.2.1)
       sass (>= 3.3.4)
+    brakeman (3.7.2)
     builder (3.2.3)
     byebug (9.1.0)
     capybara (2.15.1)
@@ -76,6 +77,7 @@ GEM
       responders
       warden (~> 1.2.3)
     diff-lcs (1.3)
+    docile (1.1.5)
     erubi (1.6.1)
     execjs (2.7.0)
     factory_girl (4.8.0)
@@ -96,6 +98,7 @@ GEM
       rails-dom-testing (>= 1, < 3)
       railties (>= 4.2.0)
       thor (>= 0.14, < 2.0)
+    json (2.1.0)
     launchy (2.4.3)
       addressable (~> 2.3)
     listen (3.1.5)
@@ -197,6 +200,11 @@ GEM
     selenium-webdriver (3.5.1)
       childprocess (~> 0.5)
       rubyzip (~> 1.0)
+    simplecov (0.15.0)
+      docile (~> 1.1.0)
+      json (>= 1.8, < 3)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.2)
     spring (2.0.2)
       activesupport (>= 4.2)
     spring-watcher-listen (2.0.1)
@@ -238,6 +246,7 @@ PLATFORMS
 
 DEPENDENCIES
   bootstrap-sass (~> 3.3.6)
+  brakeman (~> 3.7, >= 3.7.2)
   byebug
   capybara (~> 2.13)
   coffee-rails (~> 4.2)
@@ -257,6 +266,7 @@ DEPENDENCIES
   rspec-rails (~> 3.6, >= 3.6.1)
   sass-rails (~> 5.0)
   selenium-webdriver
+  simplecov
   spring
   spring-watcher-listen (~> 2.0.0)
   sqlite3

spec/spec_helper.rb

@@ -1,3 +1,7 @@
+# Must be at top
+require 'simplecov'
+SimpleCov.start
+
 # This file was generated by the `rails generate rspec:install` command. Conventionally, all
 # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
 # The generated `.rspec` file contains `--require spec_helper` which will cause