feat(MPM-658): composer update audit (#49)

Author: ruzakaranbol

.circleci/config.yml

@@ -2,7 +2,7 @@ version: 2.1
 
 orbs:
   ci-caching: jobcloud/[email protected]
-  ci-php: jobcloud/ci-php@2.4
+  ci-php: jobcloud/ci-php@2.7
 
 workflows:
   test-console-kafka-schema-registry:
@@ -40,3 +40,27 @@ workflows:
           dependencyCheckSumFile: "./composer.json"
           requires:
             - ci-php/install-dependencies
+  daily:
+    triggers:
+      - schedule:
+          cron: "0 7 * * *"
+          filters:
+            branches:
+              only:
+                - main
+    jobs:
+      - ci-caching/build-docker-images:
+          context: dockerhub-credentials
+          name: build-docker-images
+      - ci-php/install-dependencies:
+          context: dockerhub-credentials
+          name: install-dependencies
+          dependencyCheckSumFile: "./composer.json"
+          requires:
+            - build-docker-images
+      - ci-php/composer-audit:
+          context: dockerhub-credentials
+          dependencyCheckSumFile: "./composer.json"
+          requires:
+            - build-docker-images
+            - install-dependencies

docker/dev/php/Dockerfile

@@ -41,7 +41,7 @@ RUN pecl channel-update pecl.php.net && \
     php-ext-enable pcov rdkafka
 
 # COMPOSER: install binary
-RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/bin --filename=composer
+RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/bin --filename=composer --version=2.5.1
 
 USER 'www-data'
 

docker/docker-compose.ci.yml

@@ -0,0 +1,17 @@
+version: '3.2'
+services:
+  php:
+    build:
+      context: dev/php
+      args:
+        HOST_USER_ID: ${USER_ID}
+    container_name: console-kafka-schema-registry-php
+    hostname: console-kafka-schema-registry-php
+    environment:
+      KAFKA_SCHEMA_REGISTRY_URL: 'jobcloud-kafka-schema-registry:9081'
+    extra_hosts:
+      - "jobcloud-kafka-schema-registry:host-gateway"
+    volumes:
+      - ../:/app/
+    working_dir: /app
+    tty: true