pieceofcake2 / security-check

v1.0.1 2026-10-18 02:00 UTC

Requires

• php: >=8.0
• pieceofcake2/security-dast: ^1.0
• pieceofcake2/security-sast: ^1.0
• pieceofcake2/security-sca: ^1.0

Requires (Dev)

• cakephp/cakephp-codesniffer: ^5.0
• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^9.6

MIT

• security
• pdf
• cakephp
• report
• owasp
• ZAP
• cakephp2
• PHPStan
• sca
• SAST
• DAST
• semgrep

Published on Packagist.org on 2026-10-18 02:02 UTC

README

The security checks of a CakePHP 2 application in one command: the known vulnerabilities of its Composer packages (pieceofcake2/security-sca), its code and configuration (pieceofcake2/security-sast), and the running application with OWASP ZAP (pieceofcake2/security-dast), each as an A4 PDF report in the design of pieceofcake2/report, with an exit code that fails CI.

composer require --dev pieceofcake2/security-check
vendor/bin/security-check

Documentation

• Website: https://pieceofcake2.github.io/security-check/ (日本語: https://pieceofcake2.github.io/security-check/ja/)
• Markdown: docs/README.md (日本語: docs/ja/README.md) (for AI tools and offline reading)

Requirements

• PHP 8.0+ and Composer 2.8+
• Docker (for ZAP, and for Semgrep when SAST uses it)
• Google Chrome or Chromium 131+

Installation

composer require --dev pieceofcake2/security-check

Reporting Issues

Please open an issue on GitHub. To report a security vulnerability, use private vulnerability reporting.

Contributing

See the contribution guidelines.

Origin

This package was created by pieceofcake2, which also maintains it. It is not a fork of another project and is not based on one.

License

The MIT License. See LICENSE.