Add allow-list config option to securitychecker_enlightn

doc/tasks/securitychecker/enlightn.md

@@ -19,6 +19,7 @@ grumphp:
         securitychecker_enlightn:
             lockfile: ./composer.lock
             run_always: false
+            allow-list: []
 ```
 
 **lockfile**
@@ -32,3 +33,9 @@ If your `composer.lock` file is located in an exotic location, you can specify t
 *Default: false*
 
 When this option is set to `false`, the task will only run when the `composer.lock` file has changed. If it is set to `true`, the `composer.lock` file will be checked on every commit.
+
+**allow-list**
+
+*Default: empty array*
+
+When an array is set, these values (vulnerabilities) will be passed on to the security checker to ignore the given values. See [the enlightn/security-checker docs](https://github.com/enlightn/security-checker#allow-vulnerabilities) for more information.

src/Task/SecurityChecker.php

@@ -22,13 +22,15 @@ public static function getConfigurableOptions(): OptionsResolver
             'end_point' => null,
             'timeout' => null,
             'run_always' => false,
+            'allow-list' => [],
         ]);
 
         $resolver->addAllowedTypes('lockfile', ['string']);
         $resolver->addAllowedTypes('format', ['null', 'string']);
         $resolver->addAllowedTypes('end_point', ['null', 'string']);
         $resolver->addAllowedTypes('timeout', ['null', 'int']);
         $resolver->addAllowedTypes('run_always', ['bool']);
+        $resolver->addAllowedTypes('allow-list', ['array']);
 
         return $resolver;
     }

src/Task/SecurityCheckerEnlightn.php

@@ -19,10 +19,12 @@ public static function getConfigurableOptions(): OptionsResolver
         $resolver->setDefaults([
             'lockfile' => './composer.lock',
             'run_always' => false,
+            'allow-list' => []
         ]);
 
         $resolver->addAllowedTypes('lockfile', ['string']);
         $resolver->addAllowedTypes('run_always', ['bool']);
+        $resolver->addAllowedTypes('allow-list', ['array']);
 
         return $resolver;
     }
@@ -45,6 +47,9 @@ public function run(ContextInterface $context): TaskResultInterface
         $arguments = $this->processBuilder->createArgumentsForCommand('security-checker');
         $arguments->add('security:check');
         $arguments->addOptionalArgument('%s', $config['lockfile']);
+        foreach ($config['allow-list'] as $cve) {
+            $arguments->addOptionalArgument('--allow-list=%s', $cve);
+        }
 
         $process = $this->processBuilder->buildProcess($arguments);
         $process->run();

test/Unit/Task/SecurityCheckerEnlightnTest.php

@@ -27,6 +27,7 @@ public function provideConfigurableOptions(): iterable
             [
                 'lockfile' => './composer.lock',
                 'run_always' => false,
+                'allow-list' => [],
             ]
         ];
     }