build: adds check to dependencies vulnerability

.github/workflows/check-dependencies.yml

@@ -21,6 +21,9 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v2
 
+      - name: Check dependencies vulnerability
+        uses: symfonycorp/security-checker-action@v3
+
       - name: Validate composer.json and composer.lock
         run: composer validate --strict
 

composer.json

@@ -19,17 +19,18 @@
     "webmozart/assert": "^1.9"
   },
   "require-dev": {
-    "symfony/orm-pack": "^1.0",
     "aws/aws-sdk-php": "^3.134",
-    "phpunit/phpunit": "^9",
-    "mockery/mockery": "^1.3",
-    "vimeo/psalm": "^4.4",
-    "weirdan/doctrine-psalm-plugin": "^1.1",
+    "doctrine/orm": "^2.10",
     "friendsofphp/php-cs-fixer": "^3.0",
-    "psalm/plugin-phpunit": "^0.16",
+    "mockery/mockery": "^1.3",
+    "nyholm/dsn": "^2.0",
+    "phpunit/phpunit": "^9",
     "psalm/plugin-mockery": "^0.9",
-    "doctrine/orm": "^2.10",
-    "nyholm/dsn": "^2.0"
+    "psalm/plugin-phpunit": "^0.16",
+    "roave/security-advisories": "dev-latest",
+    "symfony/orm-pack": "^1.0",
+    "vimeo/psalm": "^4.4",
+    "weirdan/doctrine-psalm-plugin": "^1.1"
   },
   "authors": [
     {