Skip to content

Commit 2a9d69c

Browse files
94nonijaviereguiluz
authored andcommitted
Update Checking Security Vulnerabilities doc part
1 parent 569b773 commit 2a9d69c

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

setup.rst

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -225,15 +225,11 @@ require --no-unpack ...`` option to disable unpacking.
225225
Checking Security Vulnerabilities
226226
---------------------------------
227227

228-
The ``symfony`` binary created when you `install Symfony CLI`_ provides a command to
229-
check whether your project's dependencies contain any known security
230-
vulnerability:
228+
A good and recommended security practice is to check from time to time whether your
229+
project's dependencies contain any known security vulnerability. You can leverage the
230+
`Local PHP Security Checker`_ to do so.
231231

232-
.. code-block:: terminal
233-
234-
$ symfony check:security
235-
236-
A good security practice is to execute this command regularly to be able to
232+
You can also execute this process regularly to be able to
237233
update or replace compromised dependencies as soon as possible. The security
238234
check is done locally by fetching the public `PHP security advisories database`_,
239235
so your ``composer.lock`` file is not sent on the network.
@@ -314,6 +310,7 @@ Learn More
314310
.. _`The Symfony Demo Application`: https://github.com/symfony/demo
315311
.. _`Symfony Flex`: https://github.com/symfony/flex
316312
.. _`PHP security advisories database`: https://github.com/FriendsOfPHP/security-advisories
313+
.. _`Local PHP Security Checker`: https://github.com/fabpot/local-php-security-checker
317314
.. _`Symfony releases`: https://symfony.com/releases
318315
.. _`Main recipe repository`: https://github.com/symfony/recipes
319316
.. _`Contrib recipe repository`: https://github.com/symfony/recipes-contrib

0 commit comments

Comments
 (0)