Skip to content

Commit

Permalink
Update vulnerability scan command in PHP workflow
Browse files Browse the repository at this point in the history
The command used to scan for vulnerabilities in the composer.lock file within the GitHub Actions PHP workflow has been updated. Formerly, it utilized 'osv-scanner scan' but it has now been changed to 'scan --no-ignore' for improved performance.
  • Loading branch information
MarjovanLier committed Feb 16, 2024
1 parent d4505e8 commit ed01274
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/php.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ jobs:
run: go install github.com/google/osv-scanner/cmd/osv-scanner@v1

- name: Scan composer.lock for vulnerabilities
run: osv-scanner scan composer.lock
run: scan --no-ignore composer.lock

# This step checks for vulnerabilities in the project dependencies.
- name: Check for vulnerabilities
Expand Down

0 comments on commit ed01274

Please sign in to comment.