This repository was archived by the owner on Nov 7, 2025. It is now read-only.
chore(deps): update ghcr.io/psalm/psalm-github-actions docker digest to 35cd632 #997
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Quality: Static Analysis" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| types: [opened, synchronize, reopened, edited] | |
| permissions: | |
| contents: read | |
| jobs: | |
| phpstan: | |
| name: "PHPStan" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout code | |
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| - name: Setup PHP | |
| uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # 2.35.5 | |
| with: | |
| php-version: "8.3" | |
| extensions: dom, curl, libxml, mbstring, zip, fileinfo | |
| tools: composer:v2 | |
| - name: Install dependencies | |
| run: composer update --prefer-stable --no-interaction --no-progress --ansi | |
| - name: Run PHPStan | |
| run: vendor/bin/phpstan analyse --no-progress | |
| psalm: | |
| name: "Psalm" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout code | |
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| - name: Setup PHP | |
| uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # 2.35.5 | |
| with: | |
| php-version: "8.3" | |
| extensions: dom, curl, libxml, mbstring, zip, fileinfo | |
| tools: composer:v2 | |
| - name: Install dependencies | |
| run: composer update --prefer-stable --no-interaction --no-progress --ansi | |
| - name: Run Psalm | |
| run: vendor/bin/psalm --output-format=github --shepherd |