aleblanc / security-checker
A PHP security checker for your composer.lock with github/advisory-database
Installs: 782
Dependents: 0
Suggesters: 0
Security: 0
Stars: 3
Watchers: 0
Forks: 115
pkg:composer/aleblanc/security-checker
Requires
- php: >=7.1.3
- ext-zip: *
- symfony/console: ^2.8|^3.4|^4.2|^5.0
- symfony/http-client: ^4.3|^5.0
- symfony/mime: ^4.3|^5.0
- symfony/polyfill-ctype: ^1.11
- dev-master
- v7.0.3
- v7.0.2
- v7.0.1
- v7.0.0
- v6.0.3
- v6.0.2
- v6.0.1
- v6.0.0
- v5.0.3
- v5.0.2
- v5.0.1
- v5.0.0
- 4.1.x-dev
- v4.1.8
- v4.1.7
- v4.1.6
- v4.1.5
- v4.1.4
- v4.1.3
- v4.1.2
- v4.1.1
- v4.1.0
- v4.0.5
- v4.0.4
- v4.0.3
- v4.0.2
- v4.0.1
- v4.0.0
- v3.0.7
- v3.0.6
- v3.0.5
- v3.0.4
- v3.0.3
- v3.0.2
- v3.0.1
- v3.0.0
- v2.0.6
- v2.0.5
- v2.0.4
- v2.0.3
- v2.0.2
- v2.0.1
- v2.0.0
- v1.3.4
- v1.3.3
- v1.3.2
- v1.3.1
- v1.3
- v1.2
- v1.1
- v1.0
- dev-github-actions
- dev-empty-error-fix
This package is auto-updated.
Last update: 2025-10-28 23:17:04 UTC
README
Use Github advisory database for perform a Symfony security check.
Installation / use :
composer require aleblanc/security-checker --dev php vendor/aleblanc/security-checker/security-checker security:check
Perform a security scan with Github Actions / Github CI from Github advisory database
  api_security_checker_github:
    name: Github Advisory Security checker (PHP ${{ matrix.php }})
    runs-on: ubuntu-latest
    timeout-minutes: 20
    strategy:
      matrix:
        php:
          - '8.1'
      fail-fast: false
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          token: "${{ secrets.GITHUB_TOKEN }}"
      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
          extensions: intl, bcmath, curl, openssl, mbstring, zip
          ini-values: memory_limit=-1
          tools: pecl, composer
          coverage: none
      - run: composer require aleblanc/security-checker --dev
      - run: php vendor/aleblanc/security-checker/security-checker security:check