ci: fix and upgrade workflow

DannyvdSluijs · DannyvdSluijs · commit dd0344f6ba26 · 2025-02-19T09:27:31.000+01:00
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -79,6 +79,7 @@ jobs:
         continue-on-error: ${{ matrix.allow_fail }}
 
       - name: Check for vulnerabilities
+        if: ${{ contains(matrix.composer_update_flags, '--prefer-lowest') == false }}
         run: composer security-checker
         continue-on-error: ${{ matrix.allow_fail }}
 
diff --git a/composer.json b/composer.json
@@ -49,7 +49,7 @@
         }
     },
     "scripts": {
-        "security-checker": "security-checker security:check"
+        "security-checker": "security-checker security:check --no-dev"
     },
     "scripts-descriptions": {
         "security-checker": "Checks if your application uses dependencies with known security vulnerabilities."

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@`
`49`	`49`	`}`
`50`	`50`	`},`
`51`	`51`	`"scripts": {`
`52`		`- "security-checker": "security-checker security:check"`
	`52`	`+ "security-checker": "security-checker security:check --no-dev"`
`53`	`53`	`},`
`54`	`54`	`"scripts-descriptions": {`
`55`	`55`	`"security-checker": "Checks if your application uses dependencies with known security vulnerabilities."`