public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code
11,359 Commits
3 Branches
206 Tags
52 MiB
PHP 100%
 
Go to file
naveen 14476ec2a6
chore: Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 		2022-06-22 08:18:22 +02:00
.github chore: Set permissions for GitHub actions 2022-06-22 08:18:22 +02:00
bin Detect exec failures in compile script, refs #10693 2022-04-02 13:04:27 +02:00
doc docs: Fix inconsist semver operator suggestion (#10810) 2022-05-31 13:24:38 +02:00
phpstan Fix TypeError when a JSON file can not be read (#10818) 2022-06-04 15:20:58 +02:00
res Backport schema fixes for gitlab-token, fixes #10800 2022-06-01 21:32:29 +02:00
src Fix exported path with space in binary installer proxy (#10836) 2022-06-10 21:56:11 +02:00
tests Parse openssl 3 versions cleaner 2022-06-02 21:17:44 +02:00
.editorconfig Enhancement: Add .editorconfig 2019-01-03 10:49:27 +01:00
.gitattributes Update HTTP URLs to their HTTPS if they already redirect automatically 2020-04-13 06:22:02 +07:00
.gitignore Upgrade php-cs-fixer to 3.x and fix CS 2021-10-27 16:21:45 +02:00
.php-cs-fixer.php Remove duplicated keys (#10517) 2022-02-06 16:55:58 +01:00
CHANGELOG.md Update changelog 2022-06-06 16:32:44 +02:00
CODE_OF_CONDUCT.md Add coc file to appease the github UI 2020-04-23 11:14:08 +02:00
LICENSE lets avoid silly commits in the future 2017-01-19 12:10:26 +01:00
PORTING_INFO Import initial partial port of the libzypp satsolver. 2011-04-05 17:37:19 +02:00
README.md Update branch name in badge link 2021-10-16 22:32:18 +02:00
UPGRADE-2.0.md Escape special characters in Markdown files 2020-10-24 11:53:20 +01:00
composer.json Allow xdebug-handler 3.x, fixes #10528 2022-02-16 10:43:40 +01:00
composer.lock Update deps 2022-05-24 14:46:47 +02:00
phpunit.xml.dist PHPUnit: move environment variable into PHPUnit config file (#10062) 2021-08-19 13:21:04 +02:00

README.md

Composer - Dependency Management for PHP

Composer helps you declare, manage, and install dependencies of PHP projects.

See https://getcomposer.org/ for more information and documentation.

Continuous Integration

Installation / Usage

Download and install Composer by following the official instructions.

For usage, see the documentation.

Packages

Find packages on Packagist.

Community

Follow @packagist or @seldaek on Twitter for announcements, or check the #composerphp hashtag.

For support, Stack Overflow offers a good collection of Composer related questions, or you can use the GitHub discussions.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project and its community you agree to abide by those terms.

Requirements

PHP 5.3.2 or above (at least 5.3.4 recommended to avoid potential bugs)

Authors

See also the list of contributors who participated in this project.

Security Reports

Please send any sensitive issue to security@packagist.org. Thanks!

License

Composer is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments