Tests: ignore security advisories for PHP_CodeSniffer #606

	---
	name: Security check

	on:
	- push
	- pull_request
	# Allow manually triggering the workflow.
	- workflow_dispatch

	env:
	COMPOSER_AUTH: '{"github-oauth": {"github.com": "${{ secrets.GITHUB_TOKEN }}"}}'

	# Cancels all previous workflow runs for the same branch that have not yet completed.
	concurrency:
	# The concurrency group contains the workflow name and the branch name.
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	security-check:
	runs-on: ubuntu-latest
	name: "Security check"

	strategy:
	matrix:
	php: ['7.2', 'latest']

	steps:
	- name: Checkout code
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Install PHP
	uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
	with:
	php-version: ${{ matrix.php }}
	coverage: none

	# Install dependencies and handle caching in one go.
	# @link https://github.com/marketplace/actions/install-php-dependencies-with-composer
	- name: Install Composer dependencies
	uses: "ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda" # 4.0.0
	with:
	# Bust the cache at least once a month - output format: YYYY-MM.
	custom-cache-suffix: $(date -u "+%Y-%m")
	# Ignore development-only packages in security check
	composer-options: "--no-dev"

	- name: Check against insecure dependencies
	run: composer audit --abandoned=fail

Navigation Menu