Create Flex endpoint

index.json

@@ -1,8 +1,8 @@
 {
     "aliases": [],
     "recipes": {
-        "mosl/opensign-bridge-bundle": [
-            "0.6"
+        "vinceamstoutz/symfony-security-auditor": [
+            "1.0"
         ]
     },
     "recipe-conflicts": [],
@@ -12,9 +12,9 @@
     "_links": {
         "repository": "github.com/symfony/recipes-contrib",
         "origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
-        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2043/{package_dotted}.{version}.json",
+        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2007/{package_dotted}.{version}.json",
         "recipe_template_relative": "{package_dotted}.{version}.json",
-        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2043/archived/{package_dotted}/{ref}.json",
+        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2007/archived/{package_dotted}/{ref}.json",
         "archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
     }
 }

mosl.opensign-bridge-bundle.0.6.json

@@ -1,41 +0,0 @@
-{
-    "manifests": {
-        "mosl/opensign-bridge-bundle": {
-            "manifest": {
-                "bundles": {
-                    "Mosl\\OpenSignBridgeBundle\\OpenSignBridgeBundle": [
-                        "all"
-                    ]
-                },
-                "copy-from-recipe": {
-                    "config/": "%CONFIG_DIR%/"
-                },
-                "post-install-output": [
-                    "  * <fg=blue>Configure your OpenSign connection in</> <comment>config/packages/opensign_bridge.yaml</>",
-                    "    and set the required env vars: OPENSIGN_APP_ID, OPENSIGN_MASTER_KEY, OPENSIGN_API_URL,",
-                    "    OPENSIGN_USER_ID, OPENSIGN_SESSION_TOKEN. See:",
-                    "    <comment>https://github.com/imdela/OpenSignBridgeBundle#-installation-in-a-host-app</>",
-                    "",
-                    "  * <fg=blue>Deploy a self-hosted OpenSign server (Docker) yourself</> \u2014 this bundle only",
-                    "    provides the PHP client/integration layer, not the OpenSign server itself."
-                ]
-            },
-            "files": {
-                "config/packages/opensign_bridge.yaml": {
-                    "contents": [
-                        "open_sign_bridge:",
-                        "    opensign:",
-                        "        app_id: '%env(OPENSIGN_APP_ID)%'",
-                        "        master_key: '%env(OPENSIGN_MASTER_KEY)%'",
-                        "        api_url: '%env(OPENSIGN_API_URL)%'",
-                        "        user_id: '%env(OPENSIGN_USER_ID)%'",
-                        "        session_token: '%env(OPENSIGN_SESSION_TOKEN)%'",
-                        ""
-                    ],
-                    "executable": false
-                }
-            },
-            "ref": "58782e6fd10d58a93fa1f25055db2593add038a6"
-        }
-    }
-}

vinceamstoutz.symfony-security-auditor.1.0.json

@@ -0,0 +1,46 @@
+{
+    "manifests": {
+        "vinceamstoutz/symfony-security-auditor": {
+            "manifest": {
+                "bundles": {
+                    "VinceAmstoutz\\SymfonySecurityAuditor\\SymfonySecurityAuditorBundle": [
+                        "dev",
+                        "test"
+                    ]
+                },
+                "copy-from-recipe": {
+                    "config/": "%CONFIG_DIR%/"
+                }
+            },
+            "files": {
+                "config/packages/symfony_security_auditor.yaml": {
+                    "contents": [
+                        "# $schema: https://raw.githubusercontent.com/vinceamstoutz/symfony-security-auditor/main/resources/schema.json",
+                        "",
+                        "# Full configuration reference (models, scan, audit loop, rate limits, caching):",
+                        "# https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md",
+                        "#",
+                        "when@dev: &symfony_security_auditor",
+                        "    symfony_security_auditor:",
+                        "        model: 'claude-opus-4-8' # Model for both the Attacker and Reviewer roles. Bundle default: claude-opus-4-7.",
+                        "        # attacker_model: 'claude-opus-4-8' # Dedicated model for the Attacker role. Falls back to `model` when unset.",
+                        "        # reviewer_model: 'claude-haiku-4-5-20251001' # Lighter model for the Reviewer role. Falls back to `model` when unset.",
+                        "",
+                        "        # Proactive rate limiting \u2014 adjust the values to your provider plan.",
+                        "        # Any single dimension enables it: https://github.com/vinceamstoutz/symfony-security-auditor/blob/main/docs/configuration.md#auditrate_limit--proactive-throttling",
+                        "        # audit:",
+                        "        #     rate_limit: # Example: Anthropic Tier 1 quotas for Claude Opus 4.x (https://platform.claude.com/docs/en/api/rate-limits)",
+                        "        #         requests_per_minute: 50",
+                        "        #         input_tokens_per_minute: 500000 # Cached input tokens don't count toward Anthropic's limit.",
+                        "        #         output_tokens_per_minute: 80000",
+                        "",
+                        "when@test: *symfony_security_auditor",
+                        ""
+                    ],
+                    "executable": false
+                }
+            },
+            "ref": "915fef86e9a4a0d808a89b31944f0503c0dd63a0"
+        }
+    }
+}