@@ -231,15 +231,11 @@ require --no-unpack ...`` option to disable unpacking.
231
231
Checking Security Vulnerabilities
232
232
---------------------------------
233
233
234
- The `` symfony `` binary created when you ` install Symfony CLI `_ provides a command to
235
- check whether your project's dependencies contain any known security
236
- vulnerability:
234
+ A good and recommended security practice is to check from time to time whether your
235
+ project's dependencies contain any known security vulnerabilities. You can leverage the
236
+ ` Local PHP Security Checker `_ to do so.
237
237
238
- .. code-block :: terminal
239
-
240
- $ symfony check:security
241
-
242
- A good security practice is to execute this command regularly to be able to
238
+ You can also execute this process regularly to be able to
243
239
update or replace compromised dependencies as soon as possible. The security
244
240
check is done locally by fetching the public `PHP security advisories database `_,
245
241
so your ``composer.lock `` file is not sent on the network.
@@ -321,6 +317,7 @@ Learn More
321
317
.. _`The Symfony Demo Application` : https://github.com/symfony/demo
322
318
.. _`Symfony Flex` : https://github.com/symfony/flex
323
319
.. _`PHP security advisories database` : https://github.com/FriendsOfPHP/security-advisories
320
+ .. _`Local PHP Security Checker` : https://github.com/fabpot/local-php-security-checker
324
321
.. _`Symfony releases` : https://symfony.com/releases
325
322
.. _`Main recipe repository` : https://github.com/symfony/recipes
326
323
.. _`Contrib recipe repository` : https://github.com/symfony/recipes-contrib
0 commit comments