element119 / module-sansec-composer-integrity-checker

A Magento 2 module wrapper for the Sansec Composer Integrity plugin.
Open Software License 3.0
31 stars 2 forks source link

Run scanner tool directly, not via Composer/shell #7

Closed fredden closed 1 year ago

fredden commented 1 year ago

This should fix the error that is showing up in https://github.com/element119/module-sansec-composer-integrity-checker/pull/6 by implementing the new method for running the tool. Ref https://github.com/sansecio/composer-integrity-plugin/issues/11 / https://github.com/sansecio/composer-integrity-plugin/pull/14.

This is currently a draft pull request as it relies on a change that has not yet been accepted in the upstream tool. https://github.com/sansecio/composer-integrity-plugin/pull/15

pykettk commented 1 year ago

https://github.com/sansecio/composer-integrity-plugin/pull/14 and https://github.com/sansecio/composer-integrity-plugin/pull/15 are now merged upstream and have been tagged as 0.2.0. I think this is probably good to go once we update the Composer dependency to match and I've done some testing 🙂