Add allow-list config option to securitychecker_enlightn

doc/tasks/securitychecker/enlightn.md

@@ -19,6 +19,7 @@ grumphp:
  securitychecker_enlightn:
  lockfile: ./composer.lock
  run_always: false
+ allow-list: []
 ```
 
 **lockfile**
@@ -32,3 +33,9 @@ If your `composer.lock` file is located in an exotic location, you can specify t
 *Default: false*
 
 When this option is set to `false`, the task will only run when the `composer.lock` file has changed. If it is set to `true`, the `composer.lock` file will be checked on every commit.
+
+**allow-list**
+
+*Default: empty array*
+
+When an array is set, these values (vulnerabilities) will be passed on to the security checker to ignore the given values. See [the enlightn/security-checker docs](https://github.com/enlightn/security-checker#allow-vulnerabilities) for more information.

src/Task/SecurityChecker.php

@@ -22,13 +22,15 @@ public static function getConfigurableOptions(): OptionsResolver
  'end_point' => null,
  'timeout' => null,
  'run_always' => false,
+ 'allow-list' => [],
  ]);
 
  $resolver->addAllowedTypes('lockfile', ['string']);
  $resolver->addAllowedTypes('format', ['null', 'string']);
  $resolver->addAllowedTypes('end_point', ['null', 'string']);
  $resolver->addAllowedTypes('timeout', ['null', 'int']);
  $resolver->addAllowedTypes('run_always', ['bool']);
+ $resolver->addAllowedTypes('allow-list', ['array']);
 
  return $resolver;
  }

src/Task/SecurityCheckerEnlightn.php

@@ -19,10 +19,12 @@ public static function getConfigurableOptions(): OptionsResolver
  $resolver->setDefaults([
  'lockfile' => './composer.lock',
  'run_always' => false,
+ 'allow-list' => []
  ]);
 
  $resolver->addAllowedTypes('lockfile', ['string']);
  $resolver->addAllowedTypes('run_always', ['bool']);
+ $resolver->addAllowedTypes('allow-list', ['array']);
 
  return $resolver;
  }
@@ -45,6 +47,9 @@ public function run(ContextInterface $context): TaskResultInterface
  $arguments = $this->processBuilder->createArgumentsForCommand('security-checker');
  $arguments->add('security:check');
  $arguments->addOptionalArgument('%s', $config['lockfile']);
+ foreach ($config['allow-list'] as $cve) {
+ $arguments->addOptionalArgument('--allow-list=%s', $cve);
+ }
 
  $process = $this->processBuilder->buildProcess($arguments);
  $process->run();

test/Unit/Task/SecurityCheckerEnlightnTest.php

@@ -27,6 +27,7 @@ public function provideConfigurableOptions(): iterable
  [
  'lockfile' => './composer.lock',
  'run_always' => false,
+ 'allow-list' => [],
  ]
  ];
  }