zappzarapp-php-security/Makefile at master · marcstraube/zappzarapp-php-security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
.PHONY: help analyse check check-coverage check-full clean cs-check cs-fix deptrac docs hooks infection install md-check md-fix md-lint phpmd psalm psalm-taint rector rector-fix sbom security test

# Use php84 for compatibility with xdebug
PHP ?= php84

help: ## Show this help
	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-20s\033[0m %s\n", $$1, $$2}'

analyse: ## Run PHPStan static analysis
	$(PHP) vendor/bin/phpstan analyse --memory-limit=512M

check: security cs-check analyse psalm phpmd rector deptrac test ## Run all checks (without mutation testing)

check-full: check infection psalm-taint ## Run all checks including mutation testing and taint analysis

clean: ## Clean build artifacts
	rm -rf vendor build docs .rector .phpunit.cache .php-cs-fixer.cache .psalm .deptrac.cache

cs-check: ## Check code style
	$(PHP) vendor/bin/php-cs-fixer fix --dry-run --diff

cs-fix: ## Fix code style
	$(PHP) vendor/bin/php-cs-fixer fix

deptrac: ## Run architecture analysis
	$(PHP) vendor/bin/deptrac analyse

docs: ## Generate API documentation
	$(PHP) vendor/bin/phpdoc

hooks: ## Install git hooks (Captainhook)
	vendor/bin/captainhook install --force

infection: ## Run mutation testing (requires pcov)
	@mkdir -p build/bin && ln -sf /usr/bin/php84 build/bin/php
	PATH="$(CURDIR)/build/bin:$(PATH)" PCOV_ENABLED=1 $(PHP) -d extension=pcov.so -d pcov.enabled=1 vendor/bin/infection --threads=4 --initial-tests-php-options="-d extension=pcov.so -d pcov.enabled=1"

install: ## Install dependencies
	composer install

md-check: ## Check markdown formatting (Prettier)
	pnpm dlx prettier --check "**/*.md"

md-fix: ## Fix markdown formatting (Prettier)
	pnpm dlx prettier --write "**/*.md"

md-lint: ## Lint markdown files
	npx --yes markdownlint-cli2 "**/*.md"

phpmd: ## Run PHPMD mess detector
	$(PHP) vendor/bin/phpmd src,tests text phpmd.xml

psalm: ## Run Psalm static analysis
	$(PHP) vendor/bin/psalm --show-info=false

psalm-taint: ## Run Psalm taint analysis
	$(PHP) vendor/bin/psalm --taint-analysis

rector: ## Check for Rector suggestions
	$(PHP) vendor/bin/rector process --dry-run

rector-fix: ## Apply Rector refactorings
	$(PHP) vendor/bin/rector process

sbom: ## Generate Software Bill of Materials
	composer sbom

security: ## Run security audit
	composer audit --no-dev

test: ## Run tests
	$(PHP) vendor/bin/phpunit

test-coverage: ## Run tests with coverage report (pcov)
	$(PHP) -d extension=pcov.so -d pcov.enabled=1 vendor/bin/phpunit --coverage-text --coverage-html=build/coverage --coverage-clover=build/coverage.xml

check-coverage: ## Check for uncovered classes/methods (requires coverage.xml)
	@if [ ! -f build/coverage.xml ]; then \
		echo "Error: build/coverage.xml not found. Run 'make test-coverage' first."; \
		exit 1; \
	fi
	$(PHP) bin/check-coverage.php build/coverage.xml

.DEFAULT_GOAL := help