FloeDesignTechnologies / phpcs-security-audit

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
GNU General Public License v3.0
704 stars 86 forks source link

Installation instructions not working #87

Open foreground-randall opened 3 years ago

foreground-randall commented 3 years ago

From a fresh build of Ubuntu 20 LTS with 7.4, running composer install after cloning produces:

Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - dealerdirect/phpcodesniffer-composer-installer[v0.4.1, ..., v0.6.2] require composer-plugin-api ^1.0 -> found composer-plugin-api[2.1.0] but it does not match the constraint.
    - Root composer.json requires dealerdirect/phpcodesniffer-composer-installer ^0.4.1 || ^0.5 || ^0.6 -> satisfiable by dealerdirect/phpcodesniffer-composer-installer[v0.4.1, ..., v0.6.2].

You get a little further Installing with composer require --dev pheromone/phpcs-security-audit, but the Security standards are not available

smurf:/home/ubuntu/static4# composer require --dev pheromone/phpcs-security-audit
Do not run Composer as root/super user! See https://getcomposer.org/root for details
Continue as root/super user [yes]? 
Using version ^2.0 for pheromone/phpcs-security-audit
./composer.json has been created
Running composer update pheromone/phpcs-security-audit
Loading composer repositories with package information
Updating dependencies
Lock file operations: 2 installs, 0 updates, 0 removals
  - Locking pheromone/phpcs-security-audit (2.0.1)
  - Locking squizlabs/php_codesniffer (3.6.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 2 installs, 0 updates, 0 removals
  - Installing squizlabs/php_codesniffer (3.6.0): Extracting archive
  - Installing pheromone/phpcs-security-audit (2.0.1): Extracting archive
Generating autoload files

smurf:/home/ubuntu/static4# vendor/bin/phpcs -i 
The installed coding standards are PEAR, PSR12, Squiz, Zend, PSR1, MySource and PSR2
smurf/home/ubuntu/static4# 
jrfnl commented 3 years ago

Duplicate of #79. Also see #82