static.yml

on: [pull_request]
name: Static analysis
jobs:
  php-cs-fixer:
    name: 🧽 PHP-CS-Fixer
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: 8.3

      - name: Install php-cs-fixer
        uses: ramsey/composer-install@v2
        with:
          composer-options: "--working-dir=tools/php-cs-fixer"

      - name: PHP-CS-Fixer
        run: tools/php-cs-fixer/vendor/bin/php-cs-fixer fix --dry-run --diff --config=.php-cs-fixer.dist.php

  audit:
    name: 🔍 Audit vendors
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: 8.3

      - name: Download dependencies
        uses: ramsey/composer-install@v2

      - name: Check whether a PHP dependency is compromised
        shell: bash
        run: composer audit