Skip to content

Commit 341f0ad

Browse files
authored
Update setup.rst
1 parent 569b773 commit 341f0ad

File tree

1 file changed

+5
-15
lines changed

1 file changed

+5
-15
lines changed

setup.rst

Lines changed: 5 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -225,26 +225,15 @@ require --no-unpack ...`` option to disable unpacking.
225225
Checking Security Vulnerabilities
226226
---------------------------------
227227

228-
The ``symfony`` binary created when you `install Symfony CLI`_ provides a command to
229-
check whether your project's dependencies contain any known security
230-
vulnerability:
228+
A good and recommended security practice is to check from time to time whether your
229+
project's dependencies contain any known security vulnerability. You can leverage the
230+
`Local PHP Security Checker`_ to do so.
231231

232-
.. code-block:: terminal
233-
234-
$ symfony check:security
235-
236-
A good security practice is to execute this command regularly to be able to
232+
You can also execute this process regularly to be able to
237233
update or replace compromised dependencies as soon as possible. The security
238234
check is done locally by fetching the public `PHP security advisories database`_,
239235
so your ``composer.lock`` file is not sent on the network.
240236

241-
.. tip::
242-
243-
The ``check:security`` command terminates with a non-zero exit code if
244-
any of your dependencies is affected by a known security vulnerability.
245-
This way you can add it to your project build process and your continuous
246-
integration workflows to make them fail when there are vulnerabilities.
247-
248237
Symfony LTS Versions
249238
--------------------
250239

@@ -314,6 +303,7 @@ Learn More
314303
.. _`The Symfony Demo Application`: https://github.com/symfony/demo
315304
.. _`Symfony Flex`: https://github.com/symfony/flex
316305
.. _`PHP security advisories database`: https://github.com/FriendsOfPHP/security-advisories
306+
.. _`Local PHP Security Checker`: https://github.com/fabpot/local-php-security-checker
317307
.. _`Symfony releases`: https://symfony.com/releases
318308
.. _`Main recipe repository`: https://github.com/symfony/recipes
319309
.. _`Contrib recipe repository`: https://github.com/symfony/recipes-contrib

0 commit comments

Comments
 (0)