Tag
phpstan
Safeguard articles tagged "phpstan" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Application Security
PHPStan vs. Psalm: setting up PHP static analysis to catch security bugs pre-commit
Psalm ships free taint analysis out of the box; PHPStan doesn't track data flow at all without extensions. Here's how to wire either one into pre-commit.
Jul 8, 20266 min read
DevSecOps
PHPStan Security Analysis: Static Typing as a Security Tool for PHP
PHPStan brings static analysis to PHP. Its type checking catches entire classes of bugs that lead to security vulnerabilities in PHP applications.
Jan 8, 20235 min read