From ed01274a197fb45e2f8e3d5b0c669ab5cd73a6c7 Mon Sep 17 00:00:00 2001 From: Marjo van Lier Date: Fri, 16 Feb 2024 14:54:57 +0100 Subject: [PATCH] Update vulnerability scan command in PHP workflow The command used to scan for vulnerabilities in the composer.lock file within the GitHub Actions PHP workflow has been updated. Formerly, it utilized 'osv-scanner scan' but it has now been changed to 'scan --no-ignore' for improved performance. --- .github/workflows/php.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index f1ae327..aeb5945 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -60,7 +60,7 @@ jobs: run: go install github.com/google/osv-scanner/cmd/osv-scanner@v1 - name: Scan composer.lock for vulnerabilities - run: osv-scanner scan composer.lock + run: scan --no-ignore composer.lock # This step checks for vulnerabilities in the project dependencies. - name: Check for vulnerabilities