@@ -225,26 +225,15 @@ require --no-unpack ...`` option to disable unpacking.
225
225
Checking Security Vulnerabilities
226
226
---------------------------------
227
227
228
- The `` symfony `` binary created when you ` install Symfony CLI `_ provides a command to
229
- check whether your project's dependencies contain any known security
230
- vulnerability:
228
+ A good and recommended security practice is to check from time to time whether your
229
+ project's dependencies contain any known security vulnerability. You can leverage the
230
+ ` Local PHP Security Checker `_ to do so.
231
231
232
- .. code-block :: terminal
233
-
234
- $ symfony check:security
235
-
236
- A good security practice is to execute this command regularly to be able to
232
+ You can also execute this process regularly to be able to
237
233
update or replace compromised dependencies as soon as possible. The security
238
234
check is done locally by fetching the public `PHP security advisories database `_,
239
235
so your ``composer.lock `` file is not sent on the network.
240
236
241
- .. tip ::
242
-
243
- The ``check:security `` command terminates with a non-zero exit code if
244
- any of your dependencies is affected by a known security vulnerability.
245
- This way you can add it to your project build process and your continuous
246
- integration workflows to make them fail when there are vulnerabilities.
247
-
248
237
Symfony LTS Versions
249
238
--------------------
250
239
@@ -314,6 +303,7 @@ Learn More
314
303
.. _`The Symfony Demo Application` : https://github.com/symfony/demo
315
304
.. _`Symfony Flex` : https://github.com/symfony/flex
316
305
.. _`PHP security advisories database` : https://github.com/FriendsOfPHP/security-advisories
306
+ .. _`Local PHP Security Checker` : https://github.com/fabpot/local-php-security-checker
317
307
.. _`Symfony releases` : https://symfony.com/releases
318
308
.. _`Main recipe repository` : https://github.com/symfony/recipes
319
309
.. _`Contrib recipe repository` : https://github.com/symfony/recipes-contrib
0 commit comments