snipe-it/.github/workflows/SA-phpstan.yml
2022-03-16 15:22:27 +01:00

37 lines
1.3 KiB
YAML

# This workflow runs PHPStan security analysis tool
# More information: https://github.com/phpstan/phpstan
name: PHPStan Security Scan
on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
jobs:
phpstan-security-scan:
name: PHPStan Security Scan
runs-on: ubuntu-latest
steps:
- name: Check out repository code
uses: actions/checkout@v2
- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: '8.0'
#coverage: none
ini-values: "memory_limit=-1"
#extensions: mbstring, intl
- name: Download deps
run: composer update --no-interaction --no-progress
- name: Download PHPStan
run: composer require --dev phpstan/phpstan
- name: Download Larastan v1 # (Laravel Framework 6.20.44), v2 is for Laravel >=9
run: composer require nunomaduro/larastan:^1.0 --dev
- name: Download mcrypt helper
run: wget https://raw.githubusercontent.com/JetBrains/phpstorm-stubs/master/mcrypt/mcrypt.php -O _mcrypt_helper.php
- name: Delete conflicting file
run: rm -f database/migrations/2015_11_05_183749_image.php
- name: Execute PHPStan
run: vendor/bin/phpstan analyze app config routes --no-progress --error-format=github -l 5
env:
APP_KEY: APP_KEY_CREATED_FOR_PHPSTAN_SDLC