PHP Insights needs an internet connection to inspect security issues

[tarlepp]

Currently PHP Insights is failing because of following error:

• [Security] Security issues found on dependencies:
  PHP Insights needs an internet connection to inspect security issues.

This can be "solved" by adding following to phpinsights.php file:

<?php

return [
    ...,
    remove => [
        ...
        NunoMaduro\PhpInsights\Domain\Insights\ForbiddenSecurityIssues::class,
    ],
];

Any proper solution for this?

[trovster]

I have been getting the same error. The code checks against https://repo.packagist.org/api/security-advisories/ which is returning a 404, so I think that is why.

Running composer audit I get no issues.

[nivseb]

The problem is the url for the api from the constant PACKAGIST_ADVISORIES_URL.

curl "https://packagist.org/api/security-advisories/?packages[]=monolog/monolog" works correct.
But the subdomain it lead in to the 404.

[soymgomez]

I just made a PR #705 making the change. Let's see if @nunomaduro can see it and accept it.