Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add allow-list functionality to securitychecker_enlightn #1161

Open
wants to merge 5 commits into
base: v2.x
Choose a base branch
from

Conversation

peterjaap
Copy link

Q A
Branch v2.x
Bug fix? no
New feature? yes
BC breaks? no
Deprecations? no
Documented? yes

Copy link
Contributor

@veewee veewee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like a nice addition, thanks!
Can you make sure to add a test-case for this new allow_list argument? Otherwise we won't be able to merge this.

src/Task/SecurityCheckerEnlightn.php Outdated Show resolved Hide resolved
@peterjaap
Copy link
Author

@veewee I've added a test case and used addArgumentArrayWithSeparatedValue().

Copy link
Contributor

@veewee veewee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. It's curently not working as expected.
I've added some additional pointers in code.

@@ -50,6 +52,7 @@ public function run(ContextInterface $context): TaskResultInterface
$arguments = $this->processBuilder->createArgumentsForCommand('security-checker');
$arguments->add('security:check');
$arguments->addOptionalArgument('%s', $config['lockfile']);
$arguments->addArgumentArrayWithSeparatedValue('--allow-list', $config['allow_list'] ?? []);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

allow_list is not nullable since it has a default of []

[
'security:check',
'./composer.lock',
'--allow-list=allow_advisory_1,allow_advisory_2'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not how addArgumentArrayWithSeparatedValue works.
If you want this output, you could use something like:

addOptionalCommaSeparatedArgument('--allow-list=%s', $config['allow_list']);

@@ -19,6 +19,10 @@ grumphp:
securitychecker_enlightn:
lockfile: ./composer.lock
run_always: false
allow_list:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This configuraiton option should be explained in more details underneath.

@@ -24,10 +24,12 @@ public static function getConfigurableOptions(): ConfigOptionsResolver
$resolver->setDefaults([
'lockfile' => './composer.lock',
'run_always' => false,
'allow_list' => []
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The method provideConfigurableOptions in the test should be altered to cover this newly added default.

@leonhelmus
Copy link

@peterjaap nice addition. This is something i could use as well. Thanks for adding it. When will you have time to look at the changes needed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants