Docker based on https://github.com/fabpot/local-php-security-checker
513
Docker image based on local-php-security-checker
You can use it to scan your composer dependencies. Useful to make a CI fail.
Parameters and return codes are documented on the tool's Readme. You can run it with -help to display some help.
docker run -v /path/to/your/project:/project:ro viviengaetan69/docker-local-php-security-checker:0.1.6 -path=/project
Note
In this example, application is in the `app` directory, adapt it to your own usage
security:advisories:
image: viviengaetan69/docker-local-php-security-checker:0.1.6
stage: sast
script:
- cd app
- local-php-security-checker --format=junit src > $CI_PROJECT_DIR/report-security-checker.xml
artifacts:
reports:
junit:
- "$CI_PROJECT_DIR/report-security-checker.xml"
rules:
- exists:
- app/composer.lock
Content type
Image
Digest
sha256:bd7520b37…
Size
2.6 MB
Last updated
over 2 years ago
docker pull viviengaetan69/docker-local-php-security-checker