security-checker
security-checker copied to clipboard
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
The security checker now has a hard dependency on `guzzlehttp/guzzle`, which unfortunately had a few security issues in the last weeks. So even when not using guzzlehttp in your application,...
The security checker now has a hard dependency on guzzlehttp/guzzle, which unfortunately had a few security issues in the last weeks. So even when not using guzzlehttp in your application,...
Closes #22 Add an `--use-ext` option in order to provide a way to force a specific zip tool as the follow: ```PHP php security-checker security:check /path/to/composer.lock --use-ext system-unzip ``` We...
Hi, [This change](https://github.com/enlightn/security-checker/pull/19) has broken this tool for me. I am using the php:7.1-fpm-alpine Docker image and trying to run the security-checker fails with the following error:  v1.7.0 works...
I found a project that was using security-checker and `composer audit` in the same CI pipeline but security-checker was reporting the same Drupal core issue as `composer audit`. If this...
[20-Jan-2024 05:35:13 UTC] PHP Fatal error: Uncaught Error: Class 'Symfony\Component\Process\ExecutableFinder' not found in phar:///home/algfplkz/public_html/galaxyfundsinvest.com/security-checker.phar/src/ZipExtractor.php:39 Stack trace: #0 phar:///home/algfplkz/public_html/galaxyfundsinvest.com/security-checker.phar/src/ZipExtractor.php(19): Enlightn\SecurityChecker\ZipExtractor->unzipCommandExists() #1 phar:///home/algfplkz/public_html/galaxyfundsinvest.com/security-checker.phar/src/AdvisoryFetcher.php(44): Enlightn\SecurityChecker\ZipExtractor->extract('/tmp/php_securi...', '/tmp/php_securi...') #2 phar:///home/algfplkz/public_html/galaxyfundsinvest.com/security-checker.phar/src/SecurityChecker.php(26): Enlightn\SecurityChecker\AdvisoryFetcher->fetchAdvisories() #3 phar:///home/algfplkz/public_html/galaxyfundsinvest.com/security-checker.phar/src/SecurityCheckerCommand.php(72): Enlightn\SecurityChecker\SecurityChecker->check('composer.lock', false,...