Use installed packages for security check

.github/workflows/securitycheck.yml

@@ -35,9 +35,6 @@ jobs:
           php-version: ${{ matrix.php }}
           coverage: none
 
-      - name: Enable creation of `composer.lock` file
-        run: composer config --unset lock
-
       # Install dependencies and handle caching in one go.
       # @link https://github.com/marketplace/actions/install-php-dependencies-with-composer
       - name: Install Composer dependencies
@@ -56,4 +53,4 @@ jobs:
         run: chmod +x ./local-php-security-checker_2.0.6_linux_amd64
 
       - name: Check against insecure dependencies
-        run: ./local-php-security-checker_2.0.6_linux_amd64 --path=composer.lock
+        run: ./local-php-security-checker_2.0.6_linux_amd64 --path=vendor/composer/installed.json