PHP Security Check Action

GitHub Action to check PHP dependencies for known security vulnerabilities.

Features

• ✅ Checks composer.lock for vulnerabilities
• ✅ Uses Symfony Security Checker
• ✅ Configurable failure behavior

Usage

- uses: zeroseven/action-php-security@v1

Inputs

Input	Description	Required	Default
working-directory	Directory containing composer.lock	No	.
fail-on-issues	Fail build if vulnerabilities found	No	true

Examples

Basic Usage

steps:
  - uses: actions/checkout@v4
  - uses: zeroseven/action-php-security@v1

Warning Only (Don't Fail)

steps:
  - uses: actions/checkout@v4
  - uses: zeroseven/action-php-security@v1
    with:
      fail-on-issues: 'false'

In Monorepo

steps:
  - uses: actions/checkout@v4
  - uses: zeroseven/action-php-security@v1
    with:
      working-directory: 'packages/my-package'

License

MIT