search

phpro / grumphp

A PHP code-quality tool
MIT License
4.11k stars 430 forks source link

Support Enlightn's --allow-list option #1032

Closed phil-s closed 1 year ago

phil-s commented 1 year ago
Q A
Version GrumPHP 1.3.2 (but looks to be the same in master)
Bug? no
New feature? yes
Question? yes
Documentation? yes
Related tickets n/a

https://github.com/phpro/grumphp/blob/master/doc/tasks/securitychecker/enlightn.md indicates that the only options for configuring enlightn are lockfile and run_always; and my reading of SecurityCheckerEnlightn::run() and friends (including ProcessArgumentsCollection.php) seems to agree.

I'd like to be able to configure Enlightn's --allow-list option first and foremost. Can we get support for that?

Refer to: https://github.com/enlightn/security-checker#allow-vulnerabilities

(More generally, it seems as if it would be tremendously useful to have a task-agnostic way of configuring additional command-line options to pass to processes, so that such things can be done with ease even when grumphp doesn't provide specific support for an option.)