@@ -225,15 +225,11 @@ require --no-unpack ...`` option to disable unpacking.
225225Checking Security Vulnerabilities
226226---------------------------------
227227
228- The `` symfony `` binary created when you ` install Symfony CLI `_ provides a command to
229- check whether your project's dependencies contain any known security
230- vulnerability:
228+ A good and recommended security practice is to check from time to time whether your
229+ project's dependencies contain any known security vulnerability. You can leverage the
230+ ` Local PHP Security Checker `_ to do so.
231231
232- .. code-block :: terminal
233-
234- $ symfony check:security
235-
236- A good security practice is to execute this command regularly to be able to
232+ You can also execute this process regularly to be able to
237233update or replace compromised dependencies as soon as possible. The security
238234check is done locally by fetching the public `PHP security advisories database `_,
239235so your ``composer.lock `` file is not sent on the network.
@@ -314,6 +310,7 @@ Learn More
314310.. _`The Symfony Demo Application` : https://github.com/symfony/demo
315311.. _`Symfony Flex` : https://github.com/symfony/flex
316312.. _`PHP security advisories database` : https://github.com/FriendsOfPHP/security-advisories
313+ .. _`Local PHP Security Checker` : https://github.com/fabpot/local-php-security-checker
317314.. _`Symfony releases` : https://symfony.com/releases
318315.. _`Main recipe repository` : https://github.com/symfony/recipes
319316.. _`Contrib recipe repository` : https://github.com/symfony/recipes-contrib
0 commit comments