From 16fe3bf28f3faa29b917d2a51b74c675b87feab0 Mon Sep 17 00:00:00 2001
From: Fabien Potencier <fabien@potencier.org>
Date: Tue, 31 Aug 2021 10:03:09 +0200
Subject: [PATCH] Add a cron that automatically check for security issue in
 prod

---
 symfonycorp/platformsh-meta/1.0/.platform.app.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/symfonycorp/platformsh-meta/1.0/.platform.app.yaml b/symfonycorp/platformsh-meta/1.0/.platform.app.yaml
index 5f5a767f..109f6c84 100644
--- a/symfonycorp/platformsh-meta/1.0/.platform.app.yaml
+++ b/symfonycorp/platformsh-meta/1.0/.platform.app.yaml
@@ -48,6 +48,16 @@ hooks:
 
         (>&2 symfony-deploy)
 
+crons:
+    security-check:
+        # Check that no security issues have been found for PHP packages deployed in production
+        # See https://github.com/fabpot/local-php-security-checker
+        spec: '50 23 * * *'
+        cmd: |
+            if [ "$SYMFONY_BRANCH" = "master" ]; then
+                croncape php-security-checker
+            fi
+
 workers:
     messenger:
         # PHP background workers usually don't require much CPU.