@@ -5,24 +5,19 @@ How to Check for Known Security Vulnerabilities in Your Dependencies
5
5
====================================================================
6
6
7
7
When using lots of dependencies in your Symfony projects, some of them may
8
- contain security vulnerabilities. That's why the Symfony client includes a
9
- command called ``security:check `` that checks your ``composer.lock `` file to
10
- find known security vulnerabilities in your installed dependencies:
8
+ contain security vulnerabilities. That's why the :doc: ` Symfony local server < /setup/symfony_server >`
9
+ includes a command called ``security:check `` that checks your ``composer.lock ``
10
+ file to find known security vulnerabilities in your installed dependencies:
11
11
12
12
.. code-block :: terminal
13
13
14
14
$ symfony security:check
15
15
16
- .. tip ::
17
-
18
- The Symfony client is distributed as a free installable binary without any
19
- dependency and support for Linux, macOS and Windows. Go to `symfony.com/download `_
20
- and follow the instructions for your operating system.
21
-
22
16
A good security practice is to execute this command regularly to be able to
23
- update or replace compromised dependencies as soon as possible. Internally,
24
- this command uses the public `security advisories database `_ published by the
25
- FriendsOfPHP organization.
17
+ update or replace compromised dependencies as soon as possible. The security
18
+ check is done locally by cloning the `security advisories database `_ published
19
+ by the FriendsOfPHP organization, so your ``composer.lock `` file is not sent on
20
+ the network.
26
21
27
22
.. tip ::
28
23
@@ -31,10 +26,4 @@ FriendsOfPHP organization.
31
26
This way you can add it to your project build process and your continuous
32
27
integration workflows to make them fail when there are vulnerabilities.
33
28
34
- .. tip ::
35
-
36
- The security check is done locally: the `security advisories database `_ is
37
- cloned and your ``composer.lock `` file is not sent on the network.
38
-
39
- .. _`symfony.com/download` : https://symfony.com/download
40
29
.. _`security advisories database` : https://github.com/FriendsOfPHP/security-advisories
0 commit comments