Create Flex endpoint

index.json

@@ -1,8 +1,8 @@
 {
     "aliases": [],
     "recipes": {
-        "traceway/opentelemetry-symfony": [
+        "vinceamstoutz/symfony-security-auditor": [
-            "2.1"
+            "1.0"
         ]
     },
     "recipe-conflicts": [],
@@ -12,9 +12,9 @@
     "_links": {
         "repository": "github.com/symfony/recipes-contrib",
         "origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
-        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1991/{package_dotted}.{version}.json",
+        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1990/{package_dotted}.{version}.json",
         "recipe_template_relative": "{package_dotted}.{version}.json",
-        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1991/archived/{package_dotted}/{ref}.json",
+        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1990/archived/{package_dotted}/{ref}.json",
         "archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
     }
 }

traceway.opentelemetry-symfony.2.1.json

@@ -1,66 +0,0 @@
-{
-    "manifests": {
-        "traceway/opentelemetry-symfony": {
-            "manifest": {
-                "bundles": {
-                    "Traceway\\OpenTelemetryBundle\\OpenTelemetryBundle": [
-                        "all"
-                    ]
-                },
-                "copy-from-recipe": {
-                    "config/": "%CONFIG_DIR%/"
-                },
-                "env": {
-                    "#1": "OpenTelemetry SDK auto-initialization",
-                    "OTEL_PHP_AUTOLOAD_ENABLED": "true",
-                    "#2": "Service identity (shown in your backend)",
-                    "OTEL_SERVICE_NAME": "%project_name%",
-                    "#3": "Traces exporter: otlp | zipkin | console | none",
-                    "OTEL_TRACES_EXPORTER": "otlp",
-                    "#4": "Collector or backend endpoint",
-                    "OTEL_EXPORTER_OTLP_ENDPOINT": "http://localhost:4318",
-                    "#5": "Protocol: http/json | http/protobuf | grpc \u2014 use http/json unless ext-protobuf is installed",
-                    "OTEL_EXPORTER_OTLP_PROTOCOL": "http/json"
-                },
-                "post-install-output": [
-                    "",
-                    "  * <fg=blue>OpenTelemetry Symfony Bundle</> is wired and ready to trace your app.",
-                    "",
-                    "  * Verify your wiring:",
-                    "",
-                    "      <comment>$ bin/console traceway:doctor</comment>",
-                    "",
-                    "  * Override <comment>OTEL_*</> environment variables in <comment>.env.local</> to point at your backend.",
-                    "",
-                    "  * Documentation:",
-                    "",
-                    "      <comment>https://github.com/tracewayapp/opentelemetry-symfony-bundle</>"
-                ]
-            },
-            "files": {
-                "config/packages/open_telemetry.yaml": {
-                    "contents": [
-                        "open_telemetry:",
-                        "    traces:",
-                        "        excluded_paths: ['/_profiler', '/_wdt', '/health']",
-                        "",
-                        "when@test:",
-                        "    open_telemetry:",
-                        "        traces:",
-                        "            enabled: false",
-                        "        metrics:",
-                        "            enabled: false",
-                        "        logs:",
-                        "            correlation:",
-                        "                enabled: false",
-                        "            export:",
-                        "                enabled: false",
-                        ""
-                    ],
-                    "executable": false
-                }
-            },
-            "ref": "6f6a343b626a4b2dbfcbc0c8e9ae9e467e3058c7"
-        }
-    }
-}

vinceamstoutz.symfony-security-auditor.1.0.json

@@ -0,0 +1,44 @@
+{
+    "manifests": {
+        "vinceamstoutz/symfony-security-auditor": {
+            "manifest": {
+                "bundles": {
+                    "VinceAmstoutz\\SymfonySecurityAuditor\\SymfonySecurityAuditorBundle": [
+                        "dev",
+                        "test"
+                    ]
+                },
+                "copy-from-recipe": {
+                    "config/": "%CONFIG_DIR%/"
+                }
+            },
+            "files": {
+                "config/packages/symfony_security_auditor.yaml": {
+                    "contents": [
+                        "# Full configuration reference (models, scan, audit loop, rate limits, caching):",
+                        "# https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md",
+                        "#",
+                        "when@dev: &symfony_security_auditor",
+                        "    symfony_security_auditor:",
+                        "        model: 'claude-opus-4-8' # Model for both the Attacker and Reviewer roles. Bundle default: claude-opus-4-7.",
+                        "        # attacker_model: 'claude-opus-4-8' # Dedicated model for the Attacker role. Falls back to `model` when unset.",
+                        "        # reviewer_model: 'claude-haiku-4-5-20251001' # Lighter model for the Reviewer role. Falls back to `model` when unset.",
+                        "",
+                        "        # Proactive rate limiting \u2014 adjust the values to your provider plan.",
+                        "        # Any single dimension enables it: https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling",
+                        "        # audit:",
+                        "        #     rate_limit: # Example: Anthropic Tier 1 quotas for Claude Opus 4.x (https://platform.claude.com/docs/en/api/rate-limits)",
+                        "        #         requests_per_minute: 50",
+                        "        #         input_tokens_per_minute: 500000 # Cached input tokens don't count toward Anthropic's limit.",
+                        "        #         output_tokens_per_minute: 80000",
+                        "",
+                        "when@test: *symfony_security_auditor",
+                        ""
+                    ],
+                    "executable": false
+                }
+            },
+            "ref": "87aec5ddb2d71e0b0571c2197f91ed9b28d51af5"
+        }
+    }
+}