From 66568e3a39c61546c09a47a5688914a0bdf3c60c Mon Sep 17 00:00:00 2001 From: Jan Tojnar Date: Fri, 1 Jul 2022 15:02:04 +0200 Subject: [PATCH] ci: Fix PHPCompatibility (#2873) > For additional security you should declare the allow-plugins config with a list of packages names that are allowed to run code. See https://getcomposer.org/allow-plugins > You have until July 2022 to add the setting. Composer will then switch the default behavior to disallow all plugins. Oops, it is July now. --- .github/workflows/lint.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index e6507490..ec6561dd 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -31,6 +31,7 @@ jobs: with: php-version: ${{ matrix.php-versions }} - run: composer global require dealerdirect/phpcodesniffer-composer-installer + - run: composer global config --no-plugins allow-plugins.dealerdirect/phpcodesniffer-composer-installer true - run: composer global require phpcompatibility/php-compatibility - run: ~/.composer/vendor/bin/phpcs . --standard=phpcompatibility.xml --warning-severity=0 --extensions=php -p