Popular developer website GitHub has announced that it will add support for Dependency Graph for Composer-based PHP projects.
The Dependency Graph feature is linked to the Security Alerts feature. So, with the new addition, GitHub users will be able to receive security automatically if there is a vulnerability in their PHP projects.
Security Alerts
Security Alerts is one of the most important and useful servicesthat GitHub has. This feature scans users ' programs and projects for vulnerabilities using a list of known bugs as a basis for comparison.
If GitHub discovers a vulnerability, Security Alerts informs the developer. This can be done in several ways:
- With a banner in the GitHub interface
- With notifications on GitHub domain
- By sending an email for every vulnerability discovered
- By sending emails on a daily or weekly basis for all errors that have been found.
Initially, GitHub offered the "Security Alerts" feature for JavaScript and Ruby projects in November 2017.In July 2018, it was also used for Python projects, and in October 2018, it was expanded to Java and .NET projects.
Support for PHP projects has been something that developers have been waiting for for a long time, since PHP is one of the most popular programming languages.
However, GitHub stated that the Dependency Graph and Alerts will not work for all PHP projects, but only for Composer-based PHP projects. Composer is a package manager, used to automatically import PHP libraries into a PHP project.
GitHub users interested in the new feature can find more information here.
GitHub also announced that it has acquired a security analytics platform , Semmle .
Microsoft ( which owns GitHub) said it wants to leverage code to improve GitHub's vulnerability scanning process.
