madikon / grumphp-composer-audit
A composer audit task for grumphp
1.1.0
2023-08-07 11:03 UTC
Requires
- php: ^8.0
- phpro/grumphp: ^2
Requires (Dev)
- friendsofphp/php-cs-fixer: ^3.16
- phpstan/phpstan: ^1
README
Grumphp composer audit
Executes composer audit with GrumPHP. Since Composer 2.4 there is a new command called audit, that lists reported security vulnerabilities on current package versions. If the task encounters a vulnerable version, a warning is displayed.
Installation
Install composer package
composer require --dev madikon/grumphp-composer-audit
Add the extension loader to your grumphp.yml
grumphp: extensions: - Madikon\GrumphpComposerAudit\Extension\Loader
Usage
Default configuration for grumphp
grumphp: tasks: composer_audit: path: ./ format: table | sumary | json
Results in the folowing command line call
composer audit --working-dir=path --format=format