Merge branch 'main' into js/endorlabs-update

code-scanning/properties/psalm.properties.json

@@ -0,0 +1,10 @@
+{
+    "name": "Psalm Security Scan",
+    "creator": "psalm",
+    "description": "Psalm is a static analysis tool for finding errors in PHP applications",
+    "iconName": "psalm",
+    "categories": [
+        "Code Scanning",
+        "PHP"
+    ]
+}

code-scanning/psalm.yml

@@ -0,0 +1,38 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: Psalm Security Scan
+
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ $default-branch ]
+  schedule:
+    - cron: $cron-weekly
+
+permissions:
+  contents: read
+
+jobs:
+  php-security:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Psalm Security Scan
+        uses: psalm/psalm-github-security-scan@f3e6fd9432bc3e44aec078572677ce9d2ef9c287
+
+      - name: Upload Security Analysis results to GitHub
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: results.sarif

icons/psalm.svg

@@ -0,0 +1 @@
+<svg width="292" height="292" viewBox="0 0 292 292" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#FFF" d="M0 0h292v292H0z"/><path fill="#DEB100" fill-rule="nonzero" d="M164.62 96h9.58l-9.58 29h-9.58z"/><g opacity=".86" fill="#404040"><path d="M83.5 58.5v11.4L74 76.3l9.4 5.6v12.6L61 76.5l22.6-18h-.1zm10.7-3.8l2.3 8.2s9-7.3 11.4-1.8c2.3 5.5-9.9 9.2-8.2 18.4 0 0 2-.6 5-.6s5.1.6 5.1.6-.2-4.8 3.2-7.6c4.5-3.7 8.1-10 3.8-17-3.7-6.1-13.6-7.8-22.6-.2z" fill-rule="nonzero"/><path d="M111 89.6c0 3.2-2.6 5.2-5.8 5.2-3.2 0-5.8-2-5.8-5.2s2.6-5.3 5.8-5.3c3.2 0 5.8 2.1 5.8 5.3"/></g><g fill="#9C7800"><path opacity=".8" d="M210 96h-74V72h74z"/><path opacity=".5" d="M210 72h-74V58h74z"/></g><g fill="#171717"><path opacity=".8" d="M99 163H37v-24h62z"/><path opacity=".5" d="M99 139H37v-14h62z"/></g><g fill="#B13423"><path opacity=".99" d="M149 230H66v-24h83z"/><path opacity=".64" d="M149 206H66v-14h83z"/></g><g fill="#9C7800"><path opacity=".8" d="M178 163h-62v-24h62z"/><path opacity=".5" d="M178 139h-62v-14h62z"/></g><g fill="#171717"><path opacity=".8" d="M226 230h-62v-24h62z"/><path opacity=".5" d="M226 206h-62v-14h62z"/></g><g fill="#171717"><path opacity=".8" d="M255 163h-62v-24h62z"/><path opacity=".5" d="M255 139h-62v-14h62z"/></g><path fill="#DEB100" fill-rule="nonzero" d="M130.58 163h9.58l-9.58 29H121z"/></g></svg>