aspirecloud/.github/workflows/php-static-analysis.yml
dependabot[bot] 129d43f852
build(deps): bump shivammathur/setup-php
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 7bf05c6b704e0b9bfee22300130a31b5ea68d593 to 29e04e0a1de507bff9e6baf0e082d764333c7e5a.
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](7bf05c6b70...29e04e0a1d)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 29e04e0a1de507bff9e6baf0e082d764333c7e5a
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 14:37:16 +00:00

45 lines
1.3 KiB
YAML

name: PHP Static Analysis
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
permissions: # added using https://github.com/step-security/secure-repo
contents: read
jobs:
php-static-analysis:
runs-on: ubuntu-24.04
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- name: Setup PHP
uses: shivammathur/setup-php@29e04e0a1de507bff9e6baf0e082d764333c7e5a # v2
with:
php-version: 8.4
- name: Get composer cache directory
id: composer-cache
run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
- name: Cache composer dependencies
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
with:
path: ${{ steps.composer-cache.outputs.dir }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
restore-keys: ${{ runner.os }}-composer-
- name: Install dependencies
run: composer install
- name: Run Static Analysis
run: composer run analyze:ci