snowflakedb / pdo_snowflake

PHP PDO driver for snowflake
Apache License 2.0
59 stars 30 forks source link

[#87] Add composer.json and composer.lock files for snyk test #307

Closed sfc-gh-ext-simba-jl closed 1 year ago

sfc-gh-ext-simba-jl commented 1 year ago

Request: https://github.com/snowflakedb/snowflake-sdks-drivers-issues-teamwork/issues/87 Snyk requirements for PHP: https://docs.snyk.io/scan-application-code/snyk-open-source/language-and-package-manager-support/snyk-for-php

Files changed:

Snyk only supports Composer for PHP which requires the composer.json and composer.lock files to be present in the repository. However, the PHP driver is written in C and it only needs dependencies from libsnowflakeclient. Snyk test result will show 1 dependency only which is the minimum PHP version.

"require": {
    "php": ">=7.4"
}

Snyk test result:

C:\GitRepo\SNOW-665303-snyk-test\pdo_snowflake>snyk test

Testing C:\GitRepo\SNOW-665303-snyk-test\pdo_snowflake...

Organization:      sfc-gh-ext-simba-jl
Package manager:   composer
Target file:       composer.lock
Project name:      snowflakedb/pdo_snowflake
Open source:       no
Project path:      C:\GitRepo\SNOW-665303-snyk-test\pdo_snowflake
Licenses:          enabled

✔ Tested 1 dependencies for known issues, no vulnerable paths found.