Download the PHP package bringyourownideas/silverstripe-composer-security-checker without Composer
On this page you can find all versions of the php package bringyourownideas/silverstripe-composer-security-checker. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download bringyourownideas/silverstripe-composer-security-checker
More information about bringyourownideas/silverstripe-composer-security-checker
Files in bringyourownideas/silverstripe-composer-security-checker
Package silverstripe-composer-security-checker
Short Description Provides information if your SilverStripe application uses dependencies with known vulnerabilities.
License BSD-3-Clause
Homepage https://github.com/bringyourownideas/silverstripe-composer-security-checker
Informations about the package silverstripe-composer-security-checker
SilverStripe Security Checker
WARNING: As of January 2021, this module no longer works because the underlying service has been shut down (see announcement and discussion).
NOTE: This module is no longer commercially supported in Silverstripe CMS 5 and it does not provide a CMS5-compatible version.
Adds a task which runs a check if any of the dependencies has known security vulnerabilities. It uses the SensioLabs Security Check Web service and the Security Advisories Database.
BSD 3-clause License
Requirements
- SilverStripe Framework ^4
- SilverStripe QueuedJobs ^4
Suggested Module
This module will automatically amend the SiteSummary report provided by the SilverStripe Maintenance module, adding alerts if security updates are present for installed modules.
Installation
The following installation commands includes schedulding a queuedjob to populate the data. Run the following command to install this package as a development dependency:
Usage
The information gets updated via a BuildTask, which in turn can be run via a queuedjob.
You will need to set up a scheduled process (e.g. cron
) to run either the buildtask directly, or the task to process the queuedjobs queue in order to refresh the information.
Use the information is stored in the SecurityAlert
object, and can be consumed as needed. Please be careful how you expose this information. If the SilverStripe Maintenance module is present, a relationship will be connected between Package
and SecurityAlert
.
Documentation
Please see the user guide section of the SilverStripe Maintenance module.
All versions of silverstripe-composer-security-checker with dependencies
silverstripe/framework Version ^4
sensiolabs/security-checker Version ^5 || ^6
symbiote/silverstripe-queuedjobs Version ^4