Add recipe for vinceamstoutz/symfony-security-auditor 1.0 (#1990)

* Add recipe for vinceamstoutz/symfony-security-auditor 1.0

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat: update default attacker model suggestion

* feat: document rate_limit in the recipe

Refer to https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
👨‍💻📊 Vincent Amstoutz
2026-06-05 01:05:26 +04:00
committed by GitHub
co-authored by Claude Opus 4.8
parent 06f445b3b7
commit a0f097a6b3
2 changed files with 26 additions and 0 deletions
@@ -0,0 +1,18 @@
# Full configuration reference (models, scan, audit loop, rate limits, caching):
# https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md
#
when@dev: &symfony_security_auditor
symfony_security_auditor:
model: 'claude-opus-4-8' # Model for both the Attacker and Reviewer roles. Bundle default: claude-opus-4-7.
# attacker_model: 'claude-opus-4-8' # Dedicated model for the Attacker role. Falls back to `model` when unset.
# reviewer_model: 'claude-haiku-4-5-20251001' # Lighter model for the Reviewer role. Falls back to `model` when unset.
# Proactive rate limiting — adjust the values to your provider plan.
# Any single dimension enables it: https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling
# audit:
# rate_limit: # Example: Anthropic Tier 1 quotas for Claude Opus 4.x (https://platform.claude.com/docs/en/api/rate-limits)
# requests_per_minute: 50
# input_tokens_per_minute: 500000 # Cached input tokens don't count toward Anthropic's limit.
# output_tokens_per_minute: 80000
when@test: *symfony_security_auditor
@@ -0,0 +1,8 @@
{
"bundles": {
"VinceAmstoutz\\SymfonySecurityAuditor\\SymfonySecurityAuditorBundle": ["dev", "test"]
},
"copy-from-recipe": {
"config/": "%CONFIG_DIR%/"
}
}