Skip to content

PHP Runtime Audit v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@ruslanty ruslanty released this 23 Oct 22:08
· 7 commits to main since this release
v0.1.0
f017b96
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First public release of PHP Runtime Audit.

  • Scans Dockerfile FROM entries and image fields in single-document YAML files.
  • Checks explicit PHP image tags against upstream fixes for PHP2Shell (CVE-2026-109618 and CVE-2026-109619).
  • Supports text and JSON reports; runs with PHP CLI or Docker.

This is a static manifest scan. It does not inspect built images or running
workloads, and cannot identify source fixes, vendor backports, or OS-package
fixes. Build-argument and digest-pinned references are reported as unknown.

Assets 2
Loading