From ce00a7a236bfa659c4a147e059629cced8604e94 Mon Sep 17 00:00:00 2001 From: Marco Pivetta <ocramius@gmail.com> Date: Mon, 17 Dec 2018 20:41:39 +0100 Subject: [PATCH 1/2] Add \`roave/security-advisories\` as suggested dependency It is a very simple addition that leads to the exclusion of vulnerable dependencies directly when \`composer update\` is running Signed-off-by: Marco Pivetta <ocramius@gmail.com> --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 4cf113b..1280a97 100755 --- a/README.md +++ b/README.md @@ -41,6 +41,7 @@ Supported by: [GuardRails.io](https://github.com/apps/guardrails) - [security-checker](https://github.com/sensiolabs/security-checker) - PHP frontend for security.symfony.com. - `docker pull guardrails/security-checker` - [Symfony Security Monitoring](https://security.symfony.com/) - PHP security vulnerabilities monitoring. +- [`roave/security-advisories`](https://github.com/Roave/SecurityAdvisories) - Add this dependency to disallow known/vulnerable installation of packages directly through `composer update` - [Security Advisories](https://github.com/FriendsOfPHP/security-advisories) - A database of PHP security advisories. - [php-malware-detector](https://github.com/ollyxar/php-malware-detector) - PHP malware detector From ca0a35d78c193915d2fa73b602e05485b717cd2a Mon Sep 17 00:00:00 2001 From: Marco Pivetta <ocramius@gmail.com> Date: Tue, 18 Dec 2018 13:43:58 +0100 Subject: [PATCH 2/2] Removed backticks from `roave/security-advisories` package name Ref: https://github.com/guardrailsio/awesome-php-security/pull/4#discussion_r242396378 --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 1280a97..9651dd8 100755 --- a/README.md +++ b/README.md @@ -41,7 +41,7 @@ Supported by: [GuardRails.io](https://github.com/apps/guardrails) - [security-checker](https://github.com/sensiolabs/security-checker) - PHP frontend for security.symfony.com. - `docker pull guardrails/security-checker` - [Symfony Security Monitoring](https://security.symfony.com/) - PHP security vulnerabilities monitoring. -- [`roave/security-advisories`](https://github.com/Roave/SecurityAdvisories) - Add this dependency to disallow known/vulnerable installation of packages directly through `composer update` +- [roave/security-advisories](https://github.com/Roave/SecurityAdvisories) - Add this dependency to disallow known/vulnerable installation of packages directly through `composer update` - [Security Advisories](https://github.com/FriendsOfPHP/security-advisories) - A database of PHP security advisories. - [php-malware-detector](https://github.com/ollyxar/php-malware-detector) - PHP malware detector