Using the bundler-audit gem is a great way to keep track of vulnerabilities in your Gemfile.

Once installed it's pretty easy to run bundle-audit as a check on every PR submitted to your repo. GitHub Actions is a quick solution that can help accomplish this.