Skip to content

Commit 63c19ab

Browse files
sboldyrevasboldyreva
committed
updates
1 parent 9f561fb commit 63c19ab

File tree

1 file changed

+83
-51
lines changed
  • docs/els-for-libraries/php-libraries

1 file changed

+83
-51
lines changed

‎docs/els-for-libraries/php-libraries/README.md‎

Lines changed: 83 additions & 51 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ You need a username and password in order to use TuxCare ELS for PHP Libraries r
4242
4343
</CodeWithCopy>
4444
45-
2. Use either the Composer CLI or edit `auth.json` directly to set the repository as `nexus.repo.tuxcare.com`.
45+
2. Use either the Composer CLI or edit `auth.json` directly add your credentials for `nexus.repo.tuxcare.com`.
4646
4747
<CodeTabs :tabs="[
4848
{ title: 'Composer CLI', content: `composer config --global --auth http-basic.nexus.repo.tuxcare.com USERNAME PASSWORD` },
@@ -53,104 +53,108 @@ You need a username and password in order to use TuxCare ELS for PHP Libraries r
5353
5454
### Step 3: Register the TuxCare repository
5555
56-
Add the shared `els_php_custom1` Composer repository either via CLI or by editing `composer.json`:
56+
Add the `els_php_custom1` Composer repository either via CLI or by editing `composer.json`:
5757
5858
<CodeTabs :tabs="[
59-
{ title: 'Composer CLI', content:cli },
59+
{ title: 'Composer CLI', content: cli },
6060
{ title: 'composer.json', content: composerjson }
6161
]" />
6262
63-
### Step 4: Install or update packages
63+
### Step 4: Install packages
6464
65-
* After Composer recognizes the repository, run the `composer require` command to install the TuxCare-maintained release that matches your project:
65+
* Install the TuxCare-maintained release that matches your project using either the CLI or by editing `composer.json` directly:
6666
67-
<CodeWithCopy>
68-
69-
```text
70-
composer require vendor/package:VERSION-pN+tuxcare
71-
```
72-
73-
</CodeWithCopy>
67+
<CodeTabs :tabs="[
68+
{ title: 'Composer CLI', content: `composer require vendor/package:VERSION-pN+tuxcare` },
69+
{ title: 'composer.json', content: requirejson }
70+
]" />
7471
7572
Replace:
76-
* `vendor/package` with the needed package (`laravel/framework`, `livewire/livewire`, or `symfony/process`)
77-
* `VERSION-pN+tuxcare` with the exact version listed in your TuxCare Nexus account provided by sales. `pN` stands for TuxCare patch number.
73+
* `vendor/package` with the needed package (`laravel/framework`, `livewire/livewire`, or `symfony/process`);
74+
* `VERSION-pN+tuxcare` with the exact version listed in your TuxCare Nexus account. `pN` stands for TuxCare patch number.
7875
79-
* To upgrade to a newer TuxCare build, keep the repository configured and run:
76+
**Please refer to the following examples to install the needed libraries. Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.**
8077
81-
<CodeWithCopy>
78+
<TableTabs label="Choose a library: " >
8279
83-
```text
84-
composer update
85-
```
80+
<template #Laravel>
8681
87-
</CodeWithCopy>
82+
<CodeTabs :tabs="[
83+
{ title: 'Composer CLI', content: `composer require laravel/framework:10.48.28-p1+tuxcare` },
84+
{ title: 'composer.json', content: laraveljson }
85+
]" />
8886
89-
Composer will resolve dependencies against the TuxCare repository and install the patched releases.
87+
</template>
9088
91-
## Package-specific guidance
89+
<template #Livewire>
9290
93-
Please refer to these examples of `require` commands to install the needed libraries. Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.
91+
<CodeTabs :tabs="[
92+
{ title: 'Composer CLI', content: `composer require livewire/livewire:3.6.3-p1+tuxcare` },
93+
{ title: 'composer.json', content: livewirejson }
94+
]" />
9495
95-
* Laravel
96+
</template>
9697
97-
<CodeWithCopy>
98+
<template #Symfony_process>
9899
99-
```text
100-
composer require laravel/framework:10.48.28-p1+tuxcare
101-
```
100+
<CodeTabs :tabs="[
101+
{ title: 'Composer CLI', content: `composer require symfony/process:6.4.13-p1+tuxcare` },
102+
{ title: 'composer.json', content: symfonyjson }
103+
]" />
102104
103-
</CodeWithCopy>
105+
</template>
104106
105-
* Livewire
107+
</TableTabs>
106108
107-
<CodeWithCopy>
108-
109-
```text
110-
composer require livewire/livewire:3.6.3-p1+tuxcare
111-
```
112-
113-
</CodeWithCopy>
114-
115-
* Symfony Process
109+
* If you edited `composer.json` manually, run `composer update` to install the package:
116110
117111
<CodeWithCopy>
118112
119113
```text
120-
composer require symfony/process:6.4.13-p1+tuxcare
114+
composer update
121115
```
122116
123117
</CodeWithCopy>
124118
119+
* Composer will resolve dependencies against the TuxCare repository and install the patched releases.
120+
125121
### Conclusion
126122
127123
You've successfully integrated the TuxCare ELS for PHP Libraries repository into your project. You can now benefit from the secure and vetted PHP libraries it provides.
128124
129125
## Vulnerability Exploitability eXchange (VEX)
130126
131-
VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks.
127+
VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives and helps prioritize real risks.
132128
133129
TuxCare provides VEX for PHP Libraries ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_php/](https://security.tuxcare.com/vex/cyclonedx/els_lang_php/).
134130
135131
## How to Upgrade to a Newer Version of TuxCare Packages
136132
137-
If you have already installed a TuxCare package and want to upgrade to a newer release, update the version string in your `composer.json` file or run the `composer require` command with the new version:
133+
* If you have already installed a TuxCare package and want to upgrade to a newer release, update the version string in your `composer.json` file or run the `composer require` command with the new version:
134+
135+
<CodeWithCopy>
136+
137+
```text
138+
composer require vendor/package:VERSION-pN+tuxcare
139+
```
140+
141+
</CodeWithCopy>
138142

139-
<CodeWithCopy>
143+
* Then run `composer update` to apply the changes:
140144

141-
```text
142-
composer require vendor/package:VERSION-pN+tuxcare
143-
```
145+
<CodeWithCopy>
144146

145-
</CodeWithCopy>
147+
```text
148+
composer update
149+
```
146150

147-
Then run `composer update` to apply the changes.
151+
</CodeWithCopy>
148152

149153
## Resolved CVEs in ELS for PHP Libraries
150154

151-
Fixes for the following vulnerabilities are available in ELS for PHP Libraries from TuxCare versions:
155+
Fixes for the following vulnerabilities are available in ELS for PHP Libraries from TuxCare:
152156

153-
<TableTabs label="Choose your version: " >
157+
<TableTabs label="Choose a library: " >
154158

155159
<template #Laravel_framework>
156160

@@ -166,7 +170,7 @@ Fixes for the following vulnerabilities are available in ELS for PHP Libraries f
166170

167171
| CVE ID | Severity | Vulnerable versions | Fixed in version |
168172
|----------------|----------|----------------------|------------------|
169-
| CVE-2025-54068 | Critical | < 3.6.4 | 3.6.3-p1+tuxcare |
173+
| CVE-2025-54068 | Critical | < 3.6.4 | 3.6.3-p1+tuxcare |
170174

171175
</template>
172176

@@ -213,4 +217,32 @@ const composerjson =
213217
const cli =
214218
`composer config repositories.tuxcare '{"type":"composer","url":"https://nexus.repo.tuxcare.com/repository/els_php_custom1/","options":{"http":{"verify":true}}}' --json`
215219

220+
const requirejson =
221+
`{
222+
"require": {
223+
"vendor/package": "VERSION-pN+tuxcare"
224+
}
225+
}`
226+
227+
const laraveljson =
228+
`{
229+
"require": {
230+
"laravel/framework": "10.48.28-p1+tuxcare"
231+
}
232+
}`
233+
234+
const livewirejson =
235+
`{
236+
"require": {
237+
"livewire/livewire": "3.6.3-p1+tuxcare"
238+
}
239+
}`
240+
241+
const symfonyjson =
242+
`{
243+
"require": {
244+
"symfony/process": "6.4.13-p1+tuxcare"
245+
}
246+
}`
247+
216248
</script>

0 commit comments

Comments
 (0)