security-checks.yml

name: security-checks

on:
  push:
    branches:
      - master
  pull_request:
    branches:
      - master

jobs:
  security-checker:
    runs-on: ${{ matrix.operating-system }}
    env:
      COMPOSER_AUTH: '{"github-oauth": {"github.com": "${{ secrets.GITHUB_TOKEN }}"}}'
      COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    strategy:
      fail-fast: true
      matrix:
        operating-system: [ ubuntu-latest ]
        php: [ '8.0', '8.1' ]
        dependencies: [ 'highest' ]

    name: PHP ${{ matrix.php }} on ${{ matrix.operating-system }} with ${{ matrix.dependencies }} dependencies

    steps:
      - uses: actions/checkout@v2
        name: Checkout repository

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}

      - name: Composer install
        uses: ramsey/composer-install@v1
        with:
          dependency-versions: ${{ matrix.dependencies }}
          composer-options: ${{ matrix.composer-options }} --no-dev

      - name: Cache security checker dependencies
        uses: actions/cache@v2
        with:
          path: ~/.symfony/cache
          key: security-checker-db

      - uses: symfonycorp/security-checker-action@v2