@@ -231,15 +231,11 @@ require --no-unpack ...`` option to disable unpacking.
231231Checking Security Vulnerabilities
232232---------------------------------
233233
234- The `` symfony `` binary created when you ` install Symfony CLI `_ provides a command to
235- check whether your project's dependencies contain any known security
236- vulnerability:
234+ A good and recommended security practice is to check from time to time whether your
235+ project's dependencies contain any known security vulnerabilities. You can leverage the
236+ ` Local PHP Security Checker `_ to do so.
237237
238- .. code-block :: terminal
239-
240- $ symfony check:security
241-
242- A good security practice is to execute this command regularly to be able to
238+ You can also execute this process regularly to be able to
243239update or replace compromised dependencies as soon as possible. The security
244240check is done locally by fetching the public `PHP security advisories database `_,
245241so your ``composer.lock `` file is not sent on the network.
@@ -321,6 +317,7 @@ Learn More
321317.. _`The Symfony Demo Application` : https://github.com/symfony/demo
322318.. _`Symfony Flex` : https://github.com/symfony/flex
323319.. _`PHP security advisories database` : https://github.com/FriendsOfPHP/security-advisories
320+ .. _`Local PHP Security Checker` : https://github.com/fabpot/local-php-security-checker
324321.. _`Symfony releases` : https://symfony.com/releases
325322.. _`Main recipe repository` : https://github.com/symfony/recipes
326323.. _`Contrib recipe repository` : https://github.com/symfony/recipes-contrib
0 commit comments