Symfony Security Auditor
Version updated for https://github.com/vinceAmstoutz/symfony-security-auditor to version 1.16.0.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
This GitHub Action is an AI-powered security auditor designed for Symfony applications. It uses multi-agent techniques to identify application-level flaws that traditional static analysis tools (PHPStan, Psalm) miss. The Auditor runs alongside other SAST tools and dependency scanners to provide a comprehensive security audit experience. The auditor can be used standalone as a CLI tool or integrated into a Symfony app via a bundle.
What’s Changed
What’s Changed
- feat(standalone): add a self-update command by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/166
- chore(deps): update mcp/sdk requirement from ^0.6.0 to ^0.7.0 by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/167
- fix(standalone): restore Windows binary build by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/168
- ci: retry apt installs by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/169
- ci: hide the macOS tap-trust warnings by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/170
- ci: add a Launchpad fallback for apt by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/171
- feat(scan): add an HTTP trust-boundary attacker skill by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/172
- feat(ci): add standalone mode and outputs to the GitHub Action by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/173
- feat(pipeline): controllers on voter changes in diff mode by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/174
- feat(scan): add five security misconfiguration audits by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/175
- feat(scan): parse sarif code flows into taint paths by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/176
- feat(agent): add cross-run reviewer triage memory by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/177
- docs(ci): add a sticky PR-comment recipe for the summary by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/178
- chore(deps): update symfony/ai-bundle from ^0.10 to ^0.11 by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/179
- feat(scan): audit LDAP, admin panels and Mercure by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/180
- feat(llm): add MiniMax provider support by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/181
- feat(llm): expose finish reasons and retry 5xx errors by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/183
- fix: resolve audit vulnerabilities, triage, and CI defects by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/184
- chore: enforce slow tests in CI by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/185
- ci: add zizmor GitHub Actions security scanning by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/186
- fix: 1.16.0 pre-release fixes by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/188
- chore: release 1.16.0 by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/189
Full Changelog: https://github.com/vinceAmstoutz/symfony-security-auditor/compare/1.15.0...1.16.0