easyaudit-cli/psalm.xml at main · crealoz/easyaudit-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<?xml version="1.0"?>
<psalm
    errorLevel="4"
    resolveFromConfigFile="true"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="https://getpsalm.org/schema/config"
    xsi:schemaLocation="https://getpsalm.org/schema/config vendor/vimeo/psalm/config.xsd"
    findUnusedBaselineEntry="true"
    findUnusedCode="true"
>
    <projectFiles>
        <directory name="src/" />
        <ignoreFiles>
            <directory name="vendor" />
        </ignoreFiles>
    </projectFiles>

    <issueHandlers>
        <!-- Processors and commands are auto-discovered at runtime via directory scan -->
        <UnusedClass>
            <errorLevel type="suppress">
                <directory name="src/Core/Scan/Processor/" />
                <directory name="src/Console/Command/" />
            </errorLevel>
        </UnusedClass>

        <!-- Interface/public methods are called dynamically by the Scanner or are public API -->
        <PossiblyUnusedMethod>
            <errorLevel type="suppress">
                <directory name="src/Console/" />
                <directory name="src/Core/Scan/" />
                <directory name="src/Exception/" />
                <file name="src/Version.php" />
                <file name="src/Service/PayloadPreparers/AbstractPreparer.php" />
                <file name="src/Service/CiEnvironmentDetector.php" />
                <file name="src/Service/CliWriter.php" />
            </errorLevel>
        </PossiblyUnusedMethod>

        <!-- Constants (RED, BLUE, RESET, EA_SCAN_PATH) are defined at runtime in bin/easyaudit -->
        <UndefinedConstant>
            <errorLevel type="suppress">
                <file name="src/Service/Env.php" />
                <file name="src/Service/Api.php" />
                <file name="src/Core/Scan/Scanner.php" />
                <file name="src/Core/Scan/Util/Classes.php" />
            </errorLevel>
        </UndefinedConstant>

        <!-- Intentional shell_exec for terminal stty in interactive auth -->
        <ForbiddenCode>
            <errorLevel type="suppress">
                <file name="src/Console/Command/Auth.php" />
            </errorLevel>
        </ForbiddenCode>

        <!-- Version constants are replaced during CI builds; dev-time values cause false positives -->
        <RedundantCondition>
            <errorLevel type="suppress">
                <file name="src/Version.php" />
                <file name="src/Service/PayloadPreparers/DiPreparer.php" />
            </errorLevel>
        </RedundantCondition>
        <InvalidCast>
            <errorLevel type="suppress">
                <file name="src/Version.php" />
            </errorLevel>
        </InvalidCast>

        <!-- curl_exec returns string|true; json_decode call is guarded by httpCode check -->
        <InvalidScalarArgument>
            <errorLevel type="suppress">
                <file name="src/Service/Api.php" />
            </errorLevel>
        </InvalidScalarArgument>

        <!-- $lineNumber is the foreach loop variable; isset() guard is valid for empty arrays -->
        <TypeDoesNotContainNull>
            <errorLevel type="suppress">
                <file name="src/Core/Scan/Util/Functions.php" />
            </errorLevel>
        </TypeDoesNotContainNull>
    </issueHandlers>
</psalm>