Skip to content

Commit 33f0534

Browse files
committed
Merge branch '4.4' into 5.3
* 4.4: Update Checking Security Vulnerabilities doc part
2 parents 73a7ce3 + 659c490 commit 33f0534

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

setup.rst

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -231,15 +231,11 @@ require --no-unpack ...`` option to disable unpacking.
231231
Checking Security Vulnerabilities
232232
---------------------------------
233233

234-
The ``symfony`` binary created when you `install Symfony CLI`_ provides a command to
235-
check whether your project's dependencies contain any known security
236-
vulnerability:
234+
A good and recommended security practice is to check from time to time whether your
235+
project's dependencies contain any known security vulnerabilities. You can leverage the
236+
`Local PHP Security Checker`_ to do so.
237237

238-
.. code-block:: terminal
239-
240-
$ symfony check:security
241-
242-
A good security practice is to execute this command regularly to be able to
238+
You can also execute this process regularly to be able to
243239
update or replace compromised dependencies as soon as possible. The security
244240
check is done locally by fetching the public `PHP security advisories database`_,
245241
so your ``composer.lock`` file is not sent on the network.
@@ -321,6 +317,7 @@ Learn More
321317
.. _`The Symfony Demo Application`: https://github.com/symfony/demo
322318
.. _`Symfony Flex`: https://github.com/symfony/flex
323319
.. _`PHP security advisories database`: https://github.com/FriendsOfPHP/security-advisories
320+
.. _`Local PHP Security Checker`: https://github.com/fabpot/local-php-security-checker
324321
.. _`Symfony releases`: https://symfony.com/releases
325322
.. _`Main recipe repository`: https://github.com/symfony/recipes
326323
.. _`Contrib recipe repository`: https://github.com/symfony/recipes-contrib

0 commit comments

Comments
 (0)