Report unsafe array string key casting - detect/prevent options #350
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # https://help.github.com/en/categories/automating-your-workflow-with-github-actions | |
| name: "Base PR on previous branch" | |
| on: | |
| pull_request_target: | |
| types: | |
| - opened | |
| branches: | |
| - '2.2.x' | |
| permissions: | |
| contents: read | |
| jobs: | |
| comment: | |
| name: "Comment on pull request" | |
| runs-on: 'ubuntu-latest' | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 | |
| with: | |
| egress-policy: audit | |
| - name: Comment PR | |
| uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 | |
| with: | |
| body: "You've opened the pull request against the latest branch 2.2.x. PHPStan 2.2 is not going to be released for months. If your code is relevant on 2.1.x and you want it to be released sooner, please rebase your pull request and change its target to 2.1.x." | |
| token: ${{ secrets.PHPSTAN_BOT_TOKEN }} | |
| issue-number: ${{ github.event.pull_request.number }} |