Skip to content

Commit 2de7f47

Browse files
authored
Merge pull request #995 from symfony/platformsh-auto-security-check
[platformsh] Add a cron that automatically check for security issues in prod
2 parents fe075cc + 912ef20 commit 2de7f47

File tree

1 file changed

+11
-7
lines changed

1 file changed

+11
-7
lines changed

symfonycorp/platformsh-meta/1.0/.platform.app.yaml

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -48,14 +48,18 @@ hooks:
4848
4949
(>&2 symfony-deploy)
5050
51+
crons:
52+
security-check:
53+
# Check that no security issues have been found for PHP packages deployed in production
54+
# See https://github.com/fabpot/local-php-security-checker
55+
spec: '50 23 * * *'
56+
cmd: |
57+
if [ "$SYMFONY_BRANCH" = "master" ]; then
58+
croncape php-security-checker
59+
fi
60+
5161
workers:
5262
messenger:
53-
# PHP background workers usually don't require much CPU.
54-
# See https://symfony.com/doc/current/cloud/cookbooks/resources_allocation.html
55-
size: XS
56-
resources:
57-
base_memory: 64 # Keep in sync with the `memory-limit` flag value
58-
memory_ratio: 128
5963
commands:
60-
# Don't forget to update your receiver name(s)
64+
# Consume "async" messages (as configured in the routing section of config/packages/messenger.yaml)
6165
start: symfony console --time-limit=3600 --memory-limit=64M messenger:consume async

0 commit comments

Comments
 (0)