security.yaml

name: Security

on:
  push:
  pull_request:

jobs:

  security:

    name: Security check (PHP ${{ matrix.php }})

    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        php: ['7.4', '8.0', '8.1']

    steps:
      - uses: actions/checkout@v3

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
            php-version: ${{ matrix.php }}
            ini-values: date.timezone=UTC

      - name: Set project php-version
        run: |
          echo ${{ matrix.php }} > .php-version

      - name: Determine composer cache directory
        id: composer-cache-directory
        run: echo "directory=$(composer config cache-dir)" >> $GITHUB_OUTPUT

      - name: Cache dependencies installed with composer
        uses: actions/cache@v3
        id: cache-composer
        with:
          path: ${{ steps.composer-cache-directory.outputs.directory }}
          key: composer2-php:${{ matrix.php }}-${{ hashFiles('**/composer.json') }}
          restore-keys: composer2-php:${{ matrix.php }}-

      - name: Ensure that composer cache directory exists
        run: mkdir -p ${{ steps.composer-cache-directory.outputs.directory }}

      - name: Composer Github Auth
        run: composer config -g github-oauth.github.com ${{ github.token }}

      - name: Install PHP dependencies
        run: composer update --prefer-dist

      - uses: symfonycorp/security-checker-action@v4