Activate composer audit by default (instead of roave security advisor…

…ies)
phpro · May 16, 2024 · cc9b567 · cc9b567
1 parent 87b8fe3
commit cc9b567
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 9 deletions.
diff --git a/README.md b/README.md
@@ -30,11 +30,7 @@ composer recipes
 composer recipes:install THE/DEPENDENCY --force -v
 ```
 
-### roave/security-advisories 
-
-```bash
-composer require --dev roave/security-advisories:dev-master
-```
+### composer audit (security-advisories)
 
 ```yaml 
 # grumphp.yaml

diff --git a/grumphp-convention.yml b/grumphp-convention.yml
@@ -3,7 +3,7 @@ parameters:
     stop_on_first_failure: false
     run_phpstan: false
     run_psalm: false
-    run_security_advisories: false
+    run_security_advisories: true
     grumhp_exec_command: kevin app php
     phpstan.level: "max"
     phpunit.parallel: true
@@ -61,9 +61,7 @@ grumphp:
         phpcsfixer:
             config: ".php-cs-fixer.php"
             config_contains_finder: true
-        securitychecker_roave:
-            jsonfile: ./composer.json
-            lockfile: ./composer.lock
+        securitychecker_composeraudit:
             run_always: true
             metadata:
                 enabled: "%run_security_advisories%"