3 years ago

Category: PHP

When your project relies on public packages, it’s clear that detecting public security vulnerabilities is a great addition to your CI/CD pipeline. Disclaimer: This method only works for publically reported vulnerabilities. This is as simple as adding the following composer package: If the command fails, this means that you are using an insecure package in your project 😱. You can have more details about how it works by visiting the following link. Below examples of CI/CD integrations in Github and Gitlab: Join the Newsletter and keep informed about the latest stories.