dependencies.yml

name: "Validate"

on: [ "pull_request" ]

jobs:
  security:
    name: "Local PHP Security Checker (PHP ${{ matrix.php-versions }})"
    runs-on: "ubuntu-latest"
    strategy:
      matrix:
        php-versions: [ '8.0', '8.1' ]
    steps:
      - name: "Checkout"
        uses: "actions/checkout@v3"
      - name: "Setup PHP, with composer and extensions"
        uses: "shivammathur/setup-php@v2"
        with:
          php-version: "${{ matrix.php-versions }}"
          extensions: "mbstring, xml, ctype, iconv, intl, gd"
          tools: "composer:v2"
      - name: "Get composer cache directory"
        id: "composer-cache"
        run: 'echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT'
      - name: "Cache composer dependencies"
        uses: "actions/cache@v3"
        with:
          path: "${{ steps.composer-cache.outputs.dir }}"
          key: "${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}"
          restore-keys: "${{ runner.os }}-composer-"
      - name: "Validate composer"
        run: "composer validate"
      - name: "Install Composer dependencies"
        run: "composer install --prefer-dist --no-progress --no-suggest --optimize-autoloader"

      # Ensure our dependencies are fine
      - name: "Local PHP Security Checker"
        uses: "docker://pplotka/local-php-security-checker-github-actions:v1.0.0"
        with:
          path: "./modules/btcpay/composer.lock"