Automated Composer Security Audits in Laravel with Warden

Warden is a Laravel package that performs security audits on your Composer dependencies and provides automated notifications for vulnerabilities. With your CI pipeline automation, Warden can help you promptly identify and address issues.

This package supports webhook or email notifications, sending reports with affected packages, affected versions, and more from the composer audit command. All this gets triggered from the warden:audit Artisan command:

php artisan warden:audit
 
# Run without sending notifications
php artisan warden:audit --silent

The documentation includes configuration and setup steps required to install the package, as well as instructions on incorporating it into your CI/CD pipeline. You can learn more about this package, get full installation instructions, and view the source code on GitHub.