texthtml/composer-cve-check repository overview

⁠Composer CVE check

Docker image that check your PHP dependencies managed by composer⁠ for known vulnerabilities using security.sensiolabs.org⁠ or versioneye.com⁠.

⁠Usage

docker run -v $(pwd)/composer.lock:/scripts/composer.lock:ro texthtml/composer-cve-check

⁠Configuration

You can set env var to customize composer-cve-check behavior

• SENSIOLABS=false: disable check on sensiolabs.org
• VERSIONEYE_PROJECT_ID=.......: versioneye project id⁠ to activate check on versioneye
• VERSIONEYE_API_KEY=.......: your versioneye API key⁠