security-check.yml

name: Security

on: [push, pull_request]

concurrency:
  cancel-in-progress: ${{ !contains(github.ref, 'release/')}}
  group: tests-${{ github.workflow }}-${{ github.ref }}

jobs:
  security:
    name: Security Checks (PHP ${{ matrix.php }}, OS ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        # Note: This workflow requires only the LATEST version of PHP
        php: [ 8.2 ]
        os: [ ubuntu-latest ]
    steps:
      - name: Set up PHP ${{ matrix.php }}
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
          extensions: dom, sockets, grpc, curl

      - name: Check Out Code
        uses: actions/checkout@v4

      - name: Install dependencies with composer
        uses: ramsey/composer-install@v3
        with:
          dependency-versions: ${{ matrix.dependencies }}

      - name: Verify
        run: composer require --dev roave/security-advisories:dev-latest