test2

Author: jekuaitk

scripts/code-analysis

@@ -38,12 +38,11 @@ drupal_composer config minimum-stability dev
 # https://getcomposer.org/doc/06-config.md#allow-plugins
 drupal_composer config --no-plugins allow-plugins true
 
-# Ignore security advisories for simplesamlphp/saml2-legacy for now.
-drupal_composer config --merge --json policy.advisories.ignore-id '["PKSA-11bv-m3wk-h9sn","PKSA-4y26-97zb-p98g"]'
-# Ignore security advisories for simplesamlphp to allow resolving to a version
-# compatible with the Drupal 10 platform (psr/http-message ^1.0 and
-# symfony/console ^6.4).
-drupal_composer config --merge --json policy.advisories.ignore '["simplesamlphp/simplesamlphp"]'
+# Resolving simplesamlphp (via drupal/simplesamlphp_auth) on the Drupal 10
+# platform (psr/http-message ^1.0 and symfony/console ^6.4) requires old
+# package versions that are flagged by security advisories. Disable Composer's
+# policy blocking; this throwaway project is only used for static analysis.
+export COMPOSER_NO_BLOCKING=1
 
 # Making Drupal 10 compatible
 drupal_composer require psr/http-message:^1.0