OpenFGA MCP

name: "Security: Dependencies" on: push: paths: - composer.lock - .github/workflows/security-dependencies.yml pull_request: paths: - composer.lock schedule: - cron: "0 9 * * 3" # Run weekly on Wednesdays at 9 AM UTC permissions: contents: read jobs: audit: name: "Vulnerability Scan" runs-on: ubuntu-latest permissions: contents: read steps: - name: Harden the runner (Audit all outbound calls) uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 with: egress-policy: audit - name: Checkout code uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Setup PHP uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # 2.35.4 with: php-version: "8.3" tools: composer:v2 - name: Validate composer.json and composer.lock run: composer validate --strict - name: Install dependencies run: composer install --prefer-dist --no-progress - name: Run security audit run: composer audit