Skip to content

deps(deps): update actions/checkout action to v4.2.2 #106

deps(deps): update actions/checkout action to v4.2.2

deps(deps): update actions/checkout action to v4.2.2 #106

---
on: # yamllint disable-line rule:truthy
pull_request:
branches:
- master
- develop
name: πŸ” Security analysis
env:
# Disable docker support in Makefile
APP_RUNNER: 'cd app &&'
jobs:
security-analysis:
timeout-minutes: 4
runs-on: ${{ matrix.os }}
concurrency:
cancel-in-progress: true
group: security-analysis-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
strategy:
fail-fast: true
matrix:
os:
- ubuntu-latest
php-version:
- '8.3'
dependencies:
- locked
steps:
- name: πŸ“¦ Check out the codebase
uses: actions/checkout@v4.2.2
- name: πŸ› οΈ Setup PHP
uses: shivammathur/setup-php@2.31.1
with:
php-version: ${{ matrix.php-version }}
extensions: none, ctype, dom, json, mbstring, simplexml, tokenizer, xml, xmlwriter, pdo, curl, fileinfo, sockets, decimal
ini-values: error_reporting=E_ALL
coverage: none
- name: πŸ› οΈ Setup problem matchers
run: echo "::add-matcher::${{ runner.tool_cache }}/php.json"
- name: πŸ€– Validate composer.json and composer.lock
run: make validate-composer
- name: πŸ” Get composer cache directory
uses: wayofdev/gh-actions/actions/composer/get-cache-directory@v3.1.1
with:
working-directory: app
- name: ♻️ Restore cached dependencies installed with composer
uses: actions/cache@v4.0.2
with:
path: ${{ env.COMPOSER_CACHE_DIR }}
key: php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-${{ hashFiles('composer.lock') }}
restore-keys: php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-
- name: πŸ“₯ Install "${{ matrix.dependencies }}" dependencies with composer
uses: wayofdev/gh-actions/actions/composer/install@v3.1.1
with:
working-directory: app
dependencies: ${{ matrix.dependencies }}
- name: πŸ› Check installed packages for security vulnerability advisories
run: make lint-audit