Tag: composer-audit

GitHub Actions Dependabot PHP Security Automation for Laravel Applications

Automate Laravel security with GitHub Actions: configure Dependabot alerts and updates, run composer audit and ZAP baseline scans, and auto-merge patches.

Automate Laravel security with GitHub Actions: configure Dependabot alerts and updates, run composer audit and ZAP baseline scans, and auto-merge patches.

Read more →

Laravel Security Best Practices: Protecting Against Package Compromise Attacks

Prevent package compromise attacks in Laravel with composer audit, allow-plugins, Composer 2.9 advisory blocking, lock files and safe credential handling.

Prevent package compromise attacks in Laravel with composer audit, allow-plugins, Composer 2.9 advisory blocking, lock files and safe credential handling.

Read more →