Skip to content

Latest commit

 

History

History
40 lines (28 loc) · 1.64 KB

security_checker.rst

File metadata and controls

40 lines (28 loc) · 1.64 KB
.. index::
    single: Security; Vulnerability Checker

How to Check for Known Security Vulnerabilities in Your Dependencies

When using lots of dependencies in your Symfony projects, some of them may contain security vulnerabilities. That's why Symfony includes a command called security:check that checks your composer.lock file to find any known security vulnerability in your installed dependencies:

$ php app/console security:check

A good security practice is to execute this command regularly to be able to update or replace compromised dependencies as soon as possible. Internally, this command uses the public security advisories database published by the FriendsOfPHP organization.

Tip

The security:check command terminates with a non-zero exit code if any of your dependencies is affected by a known security vulnerability. Therefore, you can easily integrate it in your build process.

Note

To enable the security:check command, make sure the SensioDistributionBundle is installed and enabled in your application.

Tip

The security checker is also available as an independent console application and distributed as a PHAR file so you can use it in any PHP application. Check out the Security Checker repository for more details.