Automated Composer Security Audits in Laravel with Warden
Last updated on by Paul Redmond
Warden is a Laravel package that performs security audits on your Composer dependencies and provides automated notifications for vulnerabilities. With your CI pipeline automation, Warden can help you promptly identify and address issues.
This package supports webhook or email notifications, sending reports with affected packages, affected versions, and more from the composer audit
command. All this gets triggered from the warden:audit
Artisan command:
php artisan warden:audit # Run without sending notificationsphp artisan warden:audit --silent
The documentation includes configuration and setup steps required to install the package, as well as instructions on incorporating it into your CI/CD pipeline. You can learn more about this package, get full installation instructions, and view the source code on GitHub.