How to detect insecure packages in your PHP project

4 years ago medium.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

When your project relies on public packages, it’s clear that detecting public security vulnerabilities is a great addition to your CI/CD pipeline. Disclaimer: This method only works for publically reported vulnerabilities. This is as simple as adding the following composer package: If the command fails, this means that you are using an insecure package in your project 😱. You can have more details about how it works by visiting the following link. Below examples of CI/CD integrations in Github and Gitlab: Join the Newsletter and keep informed about the latest stories.

DevOps Articles