Use phive to install and run phpstan

Author: ADmad

.gitattributes

@@ -11,9 +11,11 @@
 
 # Ignore files for distribution archives, generated using `git archive`
 .editorconfig export-ignore
-.git export-ignore
+.github export-ignore
 .gitattributes export-ignore
 .gitignore export-ignore
 phpcs.xml export-ignore
 phpunit.xml.dist export-ignore
 /CakePHP/Tests export-ignore
+phpstan.neon export-ignore
+.phive export-ignore

.github/workflows/ci.yml

@@ -49,14 +49,17 @@ jobs:
       uses: shivammathur/setup-php@v2
       with:
         php-version: '8.1'
-        tools: cs2pr
+        tools: phive, cs2pr
         coverage: none
 
     - name: Composer install
       uses: ramsey/composer-install@v3
 
+    - name: Install PHP tools with phive.
+      run: "phive install --trust-gpg-keys 'CF1A108D0E7AE720,51C67305FFC2E5C0,12CE0F1D262429A5'"
+
     - name: Run PHP CodeSniffer
       run: vendor/bin/phpcs --report=checkstyle | cs2pr
 
     - name: Run PHPStan
-      run: vendor/bin/phpstan
+      run: tools/phpstan analyse --error-format=github

.phive/phars.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phive xmlns="https://phar.io/phive">
+  <phar name="phpstan" version="2.0.3" installed="2.0.3" location="./tools/phpstan" copy="false"/>
+</phive>

composer.json

@@ -24,7 +24,6 @@
         "squizlabs/php_codesniffer": "^3.9"
     },
     "require-dev": {
-        "phpstan/phpstan": "^2.0.3",
         "phpunit/phpunit": "^9.3.4"
     },
     "autoload": {
@@ -46,7 +45,7 @@
         ],
         "cs-check": "phpcs --colors --parallel=16 -p -s CakePHP/",
         "cs-fix": "phpcbf --colors --parallel=16 -p CakePHP/",
-        "stan": "phpstan analyse",
+        "stan": "tools/phpstan analyse",
         "docs": "php docs/generate.php",
         "explain": "phpcs -e --standard=CakePHP"
     }