Repository files navigation

TheSymfony binary is a must-have tool when developing Symfony applicationson your local machine. It provides:

• The best way tocreate new Symfony applications;
• A powerfullocal web server to develop your projects with support forTLS certificates;
• A tool tocheck for security vulnerabilities;
• Seamless integration withUpsun (formerly Platform.sh).

Read the installation instructions onsymfony.com.

Symfony binaries are signed usingcosign, which is part ofsigstore.Signatures can be verified as follows (OS and architecture omitted for clarity):

$COSIGN_EXPERIMENTAL=1 cosign verify-blob --signature symfony-cli.sig symfony-clitlog entry verified with uuid: "2b7ca2bfb7ee09114a15d60761c2a0a8c97f07cc20c02e635a92ba137a08a6de" index: 1261963Verified OK

The above uses the (currently experimental)keyless signing method.Alternatively, one can verify the signature by also providing the certificate:

$cosign verify-blob --cert symfony-cli.pem --signature symfony-cli.sig symfony-cliVerified OK

If you discover a security vulnerability, please follow ourdisclosure procedure.

Package repository hosting is graciously provided bycloudsmith. Cloudsmith is the only fully hosted,cloud-native, universal package management solution, that enables yourorganization to create, store and share packages in any format, to any place,with total confidence. We believe there’s a better way to manage softwareassets and packages, and they're making it happen!