Skip to content

GH Actions: also lint against _next_ PHP version #344

GH Actions: also lint against _next_ PHP version

GH Actions: also lint against _next_ PHP version #344

Workflow file for this run

---
name: Security check
on:
- push
- pull_request
# Allow manually triggering the workflow.
- workflow_dispatch
# Cancels all previous workflow runs for the same branch that have not yet completed.
concurrency:
# The concurrency group contains the workflow name and the branch name.
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
security-check:
runs-on: ubuntu-latest
name: "Security check"
strategy:
matrix:
php: ['5.4', 'latest']
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Install PHP
uses: shivammathur/setup-php@v2
with:
php-version: ${{ matrix.php }}
coverage: none
- name: Enable creation of `composer.lock` file
run: composer config --unset lock
# Install dependencies and handle caching in one go.
# @link https://github.com/marketplace/actions/install-php-dependencies-with-composer
- name: Install Composer dependencies
uses: "ramsey/composer-install@v3"
with:
# Bust the cache at least once a month - output format: YYYY-MM.
custom-cache-suffix: $(date -u "+%Y-%m")
- name: Download security checker
# yamllint disable-line rule:line-length
run: wget -P . https://github.com/fabpot/local-php-security-checker/releases/download/v2.0.6/local-php-security-checker_2.0.6_linux_amd64
- name: Make security checker executable
run: chmod +x ./local-php-security-checker_2.0.6_linux_amd64
- name: Check against insecure dependencies
run: ./local-php-security-checker_2.0.6_linux_amd64 --path=composer.lock