formatter = $formatter; } /** * Displays a security report as plain text. * * @param OutputInterface $output * @param string $lockFilePath The file path to the checked lock file * @param array $vulnerabilities An array of vulnerabilities */ public function displayResults(OutputInterface $output, $lockFilePath, array $vulnerabilities) { $output->writeln("\nSecurity Check Report\n~~~~~~~~~~~~~~~~~~~~~\n"); $output->writeln(sprintf('Checked file: %s', realpath($lockFilePath))); $output->write("\n"); if ($count = count($vulnerabilities)) { $status = 'CRITICAL'; $style = 'error'; } else { $status = 'OK'; $style = 'bg=green;fg=white'; } $message = sprintf('%d %s known vulnerabilities', $count, 1 === $count ? 'package has' : 'packages have'); $output->writeln($this->formatter->formatBlock(array('['.$status.']', $message), $style, true)); $output->write("\n"); if (0 !== $count) { foreach ($vulnerabilities as $dependency => $issues) { $dependencyFullName = $dependency.' ('.$issues['version'].')'; $output->writeln(''.$dependencyFullName."\n".str_repeat('-', strlen($dependencyFullName))."\n"); foreach ($issues['advisories'] as $issue => $details) { $output->write(' * '); if ($details['cve']) { $output->write(''.$details['cve'].': '); } $output->writeln($details['title']); if ('' !== $details['link']) { $output->writeln(' '.$details['link']); } $output->writeln(''); } } } $output->writeln(' This checker can only detect vulnerabilities that are referenced'); $output->writeln(' Disclaimer in the SensioLabs security advisories database. Execute this'); $output->writeln(" command regularly to check the newly discovered vulnerabilities.\n"); } }