composer-scan:
  stage: test
  image: git.hcbmedia.nl:5005/hcb/docker/composer-security-scanner/composer-security-scanner:latest
  services:
    - docker:stable-dind
  variables:
    DOCKER_DRIVER: overlay2
  before_script:
    - "if [ -z \"${COMPOSER_PROJECT_NAME}\" ]; then echo \"\\$COMPOSER_PROJECT_NAME is not set\"; exit 1; fi"
  script:
    - composer config repositories.affiliwings-yaml vcs ${CI_PROJECT_URL}
    - composer require --no-suggest ${COMPOSER_PROJECT_NAME} --ignore-platform-reqs
    - security-checker security:check composer.lock