Composer CVE check

Docker image that check your PHP dependencies managed by composer for known vulnerabilities using security.sensiolabs.org or versioneye.com.

Usage

docker run -v $(pwd)/composer.lock:/scripts/composer.lock:ro texthtml/composer-cve-check

Configuration

You can set env var to customize composer-cve-check behavior

• SENSIOLABS=false: disable check on sensiolabs.org
• VERSIONEYE_PROJECT_ID=.......: versioneye project id to activate check on versioneye
• VERSIONEYE_API_KEY=.......: your versioneye API key