Merge pull request #35 from Guiziweb/chore/ci-composer-audit

ci: add composer audit step to detect dependency CVEs

Author: camilleislasse

.github/workflows/build.yaml

@@ -152,6 +152,10 @@ jobs:
                 name: Validate composer.json
                 run: composer validate --ansi
 
+            -
+                name: Audit dependencies
+                run: composer audit --ansi --abandoned=report
+
             -
                 name: Validate container
                 run: vendor/bin/console lint:container