Merge pull request #42 from kronostechnologies/dev/PI-76-taint-analysis

PHP Taint analysis
kronostechnologies · Jan 19, 2022 · 90a41bb · 90a41bb
2 parents 3e1b05f + bec41ad
commit 90a41bb
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 23 deletions.
diff --git a/.github/workflows/psalm-security-scan.yml b/.github/workflows/psalm-security-scan.yml
diff --git a/.github/workflows/psalm-taint-analysis.yml b/.github/workflows/psalm-taint-analysis.yml
@@ -0,0 +1,16 @@
+name: Psalm Taint analysis
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  psalm-taint-analysis:
+    uses: equisoft-actions/php-workflows/.github/workflows/[email protected]
+    with:
+      php-version: '7.4'
+      extensions: gearman, pcov
+    secrets:
+      gpr-key: ${{ secrets.GPR_KEY }}
+
diff --git a/composer.json b/composer.json
@@ -44,6 +44,10 @@
   "config": {
     "platform": {
       "php": "7.4"
-    }
+    },
+		"allow-plugins": {
+			"composer/package-versions-deprecated": true,
+			"dealerdirect/phpcodesniffer-composer-installer": true
+		}
   }
 }