Skip to content

Commit 60783c4

Browse files
committed
minor #1359 Use 'composer audit' instead of 'symfony check:security' (rosier)
This PR was merged into the main branch. Discussion ---------- Use 'composer audit' instead of 'symfony check:security' Since Composer 2.4, there is a new command called audit, that outputs a list of reported security vulnerabilities for the list of packages versions currently installed. This removes the need to download and install Symfony CLI Commits ------- c958cfe Use 'composer audit' instead of 'symfony check:security'
2 parents fbc76bb + c958cfe commit 60783c4

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

.github/workflows/lint.yaml

+1-5
Original file line numberDiff line numberDiff line change
@@ -86,13 +86,9 @@ jobs:
8686
if: always() && steps.install.outcome == 'success'
8787
run: composer validate --strict
8888

89-
- name: Download Symfony CLI
90-
if: always() && steps.install.outcome == 'success'
91-
run: wget https://get.symfony.com/cli/installer -O - | bash
92-
9389
- name: Check if any dependencies are compromised
9490
if: always() && steps.install.outcome == 'success'
95-
run: /home/runner/.symfony5/bin/symfony check:security
91+
run: composer audit
9692

9793
- name: Run PHPStan
9894
if: always() && steps.install.outcome == 'success'

0 commit comments

Comments
 (0)