Skip to content

Commit

Permalink
Use built in command "composer audit" for the security monitoring
Browse files Browse the repository at this point in the history
  • Loading branch information
Aeliot-Tm committed Nov 11, 2024
1 parent ed6e371 commit a035487
Show file tree
Hide file tree
Showing 4 changed files with 6 additions and 702 deletions.
15 changes: 3 additions & 12 deletions .github/workflows/automated_testing.yml
Original file line number Diff line number Diff line change
Expand Up @@ -254,19 +254,10 @@ jobs:
- uses: shivammathur/setup-php@v2
with:
php-version: 8.2
tools: composer
coverage: none

- uses: actions/checkout@v4

- name: Cache Installed Dependencies
id: composer-cache
uses: actions/cache@v4
with:
path: vendor
key: "os-${{ runner.os }}-php-${{ runner.php-version }}-composer-${{ hashFiles('**/composer.lock') }}"
restore-keys: "os-${{ runner.os }}-php-${{ runner.php-version }}-composer-"

- name: Install packages by Composer
uses: ramsey/composer-install@v3

- name: 'Check security vulnerabilities'
run: composer check-security
run: composer audit
2 changes: 0 additions & 2 deletions composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,6 @@
},
"require-dev": {
"dg/bypass-finals": "^1.7",
"enlightn/security-checker": "^2.0",
"phpstan/phpstan": "^2.0",
"roave/security-advisories": "dev-latest"
},
Expand All @@ -71,7 +70,6 @@
"cs-fixer-baseline": "XDEBUG_MODE=off tools/pcsf-baseline.phar -b scripts/php-cs-fixer/baseline.json -c scripts/php-cs-fixer/config.php -f scripts/php-cs-fixer/finder.php",
"cs-fixer-check": "@cs-fixer-fix --dry-run",
"cs-fixer-fix": "tools/php-cs-fixer.phar fix -vv --config=scripts/php-cs-fixer/config.php",
"check-security": "XDEBUG_MODE=off vendor/bin/security-checker security:check composer.lock",
"phive-install": "phive install --trust-gpg-keys $(cat .phive/trust-gpg-keys.txt)",
"phpstan": [
"@phpstan-clear",
Expand Down
Loading

0 comments on commit a035487

Please sign in to comment.