added dedicated CI tests for composer v1 and v2

sonatype-nexus-community / bach

Dependency vulnerability auditor for PHP

Apache License 2.0

14 stars 15 forks source link

Closed jkowalleck closed 3 years ago

jkowalleck commented 3 years ago

closes #24

jkowalleck commented 3 years ago

not sure why this PR fails. possible reasons I can think of:

maybe this project lost composer1 support in the past?
maybe it is because the caching is done wrong (currently the vendor dir is cached, what is error-prone! cache the output-dir of composer config cache-dir instead)
maybe it is because the composer.lock is incompatible to the composer.json
maybe it is because of issue #22

jkowalleck commented 3 years ago

pre-mature merge of this PR resulted in broken CI tests in "main" branch. created #28 to track it