Skip to content

Updated command to generate AES keys.#279

Merged
Sleon4 merged 5 commits into
19.xfrom
support
Dec 28, 2025
Merged

Updated command to generate AES keys.#279
Sleon4 merged 5 commits into
19.xfrom
support

Conversation

@Sleon4

@Sleon4 Sleon4 commented Dec 28, 2025

Copy link
Copy Markdown
Member

Added

  • Test coverage is added.

Changed

  • The workflow is being updated.
  • The lion/security dependency is updated.
  • Updated command to generate AES keys.

@Sleon4 Sleon4 added this to the Support and maintenance milestone Dec 28, 2025
@Sleon4 Sleon4 self-assigned this Dec 28, 2025
@Sleon4 Sleon4 added enhancement New feature or request dependencies Project dependencies are updated tests Tests have been added continuous integration Contains changes to continuous integration labels Dec 28, 2025
@github-actions

github-actions Bot commented Dec 28, 2025

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

composer.lock

PackageVersionLicenseIssue Type
lion/security12.0.0NullUnknown License

composer.json

PackageVersionLicenseIssue Type
php>= 8.5NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
composer/php >= 8.5 🟢 4.4
Details
CheckScoreReason
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 8binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
composer/firebase/php-jwt 7.0.2 🟢 6.9
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ -1no dependencies found
Dangerous-Workflow⚠️ -1no workflows found
Code-Review🟢 9Found 24/25 approved changesets -- score normalized to 9
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ -1No tokens found
Maintained🟢 75 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
composer/lion/security 12.0.0 UnknownUnknown
composer/lion/test 4.0.0 UnknownUnknown

Scanned Files

  • composer.json
  • composer.lock

@sonarqubecloud

Copy link
Copy Markdown

@Sleon4 Sleon4 merged commit ece6875 into 19.x Dec 28, 2025
8 checks passed
@Sleon4 Sleon4 deleted the support branch December 28, 2025 14:23
@codecov

codecov Bot commented Dec 28, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Files with missing lines Coverage Δ Complexity Δ
src/LionBundle/Commands/Lion/New/AESCommand.php 100.00% <100.00%> (ø) 3.00 <0.00> (ø)
src/LionBundle/Commands/Lion/New/RSACommand.php 100.00% <100.00%> (ø) 5.00 <0.00> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

continuous integration Contains changes to continuous integration dependencies Project dependencies are updated enhancement New feature or request tests Tests have been added

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant