@@ -225,15 +225,11 @@ require --no-unpack ...`` option to disable unpacking.
225
225
Checking Security Vulnerabilities
226
226
---------------------------------
227
227
228
- The `` symfony `` binary created when you ` install Symfony CLI `_ provides a command to
229
- check whether your project's dependencies contain any known security
230
- vulnerability:
228
+ A good and recommended security practice is to check from time to time whether your
229
+ project's dependencies contain any known security vulnerability. You can leverage the
230
+ ` Local PHP Security Checker `_ to do so.
231
231
232
- .. code-block :: terminal
233
-
234
- $ symfony check:security
235
-
236
- A good security practice is to execute this command regularly to be able to
232
+ You can also execute this process regularly to be able to
237
233
update or replace compromised dependencies as soon as possible. The security
238
234
check is done locally by fetching the public `PHP security advisories database `_,
239
235
so your ``composer.lock `` file is not sent on the network.
@@ -314,6 +310,7 @@ Learn More
314
310
.. _`The Symfony Demo Application` : https://github.com/symfony/demo
315
311
.. _`Symfony Flex` : https://github.com/symfony/flex
316
312
.. _`PHP security advisories database` : https://github.com/FriendsOfPHP/security-advisories
313
+ .. _`Local PHP Security Checker` : https://github.com/fabpot/local-php-security-checker
317
314
.. _`Symfony releases` : https://symfony.com/releases
318
315
.. _`Main recipe repository` : https://github.com/symfony/recipes
319
316
.. _`Contrib recipe repository` : https://github.com/symfony/recipes-contrib
0 commit comments