Merge pull request #150 from f1amy/disable-dependabot-alerts #177

	name: Static Analysis

	on:
	push:
	branches:
	- main
	pull_request:

	jobs:
	static-analysis:
	name: PHPStan
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup PHP with composer
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.1'
	tools: cs2pr

	- name: Validate composer.json and composer.lock
	run: composer validate --strict

	- name: Get composer cache directory
	id: composer-cache
	run: echo "::set-output name=dir::$(composer config cache-files-dir)"

	- name: Cache composer dependencies
	uses: actions/cache@v3.0.3
	with:
	path: ${{ steps.composer-cache.outputs.dir }}
	key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
	restore-keys: ${{ runner.os }}-composer-

	- name: Install composer dependencies
	run: composer create-project --no-progress --prefer-dist

	- name: Run PHPStan
	run: >
	vendor/bin/phpstan analyse -c phpstan.neon
	--no-progress --error-format=checkstyle \| cs2pr

Provide feedback