From a0f097a6b3e40091e85f9d707f18b26dbbfdd1c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=F0=9F=91=A8=E2=80=8D=F0=9F=92=BB=F0=9F=93=8A=20Vincent=20?= =?UTF-8?q?Amstoutz?= Date: Thu, 4 Jun 2026 23:05:26 +0200 Subject: [PATCH] Add recipe for vinceamstoutz/symfony-security-auditor 1.0 (#1990) * Add recipe for vinceamstoutz/symfony-security-auditor 1.0 Co-Authored-By: Claude Opus 4.8 (1M context) * feat: update default attacker model suggestion * feat: document rate_limit in the recipe Refer to https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling --------- Co-authored-by: Claude Opus 4.8 (1M context) --- .../packages/symfony_security_auditor.yaml | 18 ++++++++++++++++++ .../symfony-security-auditor/1.0/manifest.json | 8 ++++++++ 2 files changed, 26 insertions(+) create mode 100644 vinceamstoutz/symfony-security-auditor/1.0/config/packages/symfony_security_auditor.yaml create mode 100644 vinceamstoutz/symfony-security-auditor/1.0/manifest.json diff --git a/vinceamstoutz/symfony-security-auditor/1.0/config/packages/symfony_security_auditor.yaml b/vinceamstoutz/symfony-security-auditor/1.0/config/packages/symfony_security_auditor.yaml new file mode 100644 index 00000000..10f84996 --- /dev/null +++ b/vinceamstoutz/symfony-security-auditor/1.0/config/packages/symfony_security_auditor.yaml @@ -0,0 +1,18 @@ +# Full configuration reference (models, scan, audit loop, rate limits, caching): +# https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md +# +when@dev: &symfony_security_auditor + symfony_security_auditor: + model: 'claude-opus-4-8' # Model for both the Attacker and Reviewer roles. Bundle default: claude-opus-4-7. + # attacker_model: 'claude-opus-4-8' # Dedicated model for the Attacker role. Falls back to `model` when unset. + # reviewer_model: 'claude-haiku-4-5-20251001' # Lighter model for the Reviewer role. Falls back to `model` when unset. + + # Proactive rate limiting — adjust the values to your provider plan. + # Any single dimension enables it: https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling + # audit: + # rate_limit: # Example: Anthropic Tier 1 quotas for Claude Opus 4.x (https://platform.claude.com/docs/en/api/rate-limits) + # requests_per_minute: 50 + # input_tokens_per_minute: 500000 # Cached input tokens don't count toward Anthropic's limit. + # output_tokens_per_minute: 80000 + +when@test: *symfony_security_auditor diff --git a/vinceamstoutz/symfony-security-auditor/1.0/manifest.json b/vinceamstoutz/symfony-security-auditor/1.0/manifest.json new file mode 100644 index 00000000..e1909840 --- /dev/null +++ b/vinceamstoutz/symfony-security-auditor/1.0/manifest.json @@ -0,0 +1,8 @@ +{ + "bundles": { + "VinceAmstoutz\\SymfonySecurityAuditor\\SymfonySecurityAuditorBundle": ["dev", "test"] + }, + "copy-from-recipe": { + "config/": "%CONFIG_DIR%/" + } +}