security.yml

on:
    pull_request: null
    push:
        branches:
            - '*.*'

name: build

jobs:
    security:
        name: Security
        runs-on: ${{ matrix.os }}

        strategy:
            fail-fast: false
            matrix:
                php: ['8.3']
                os: [ubuntu-latest]

        steps:
            - name: Set Git To Use LF
              run: |
                  git config --global core.autocrlf false
                  git config --global core.eol lf
            - name: Checkout
              uses: actions/checkout@v4

            - name: Setup PHP ${{ matrix.php }}
              uses: shivammathur/setup-php@v2
              with:
                  php-version: ${{ matrix.php }}

            - name: Validate Composer
              run: composer validate

            - name: Get Composer Cache Directory
                # Docs: <https://github.com/actions/cache/blob/master/examples.md#php---composer>
              id: composer-cache
              run: echo "::set-output name=dir::$(composer config cache-files-dir)"

            - name: Restore Composer Cache
              uses: actions/cache@v4
              with:
                  path: ${{ steps.composer-cache.outputs.dir }}
                  key: ${{ runner.os }}-${{ matrix.php }}-composer-${{ hashFiles('**/composer.json') }}
                  restore-keys: ${{ runner.os }}-${{ matrix.php }}-composer-

            - name: Install Dependencies
              uses: nick-invision/retry@v3
              with:
                  timeout_minutes: 5
                  max_attempts: 5
                  command: composer update --prefer-dist --no-interaction --no-progress

            - name: Security Advisories
              run: composer require --dev roave/security-advisories:dev-latest