From 4902e7aea0e140decb130a69eab464536a497e8d Mon Sep 17 00:00:00 2001 From: Olivier Gorzalka Date: Mon, 26 Oct 2026 16:59:34 +0100 Subject: [PATCH 1/2] chore: enforce the harness gates that pass, observe the others Harness v0.1.3. Reported only: Code style, Rector, Dependency analysis. --- .github/workflows/harness.yml | 2 +- .harness.json | 9 +++++++-- composer.json | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.github/workflows/harness.yml b/.github/workflows/harness.yml index 167170e..0b8fba7 100644 --- a/.github/workflows/harness.yml +++ b/.github/workflows/harness.yml @@ -14,6 +14,6 @@ permissions: {} jobs: harness: - uses: Pollora/harness/.github/workflows/php-package.yml@v0.1.1 + uses: Pollora/harness/.github/workflows/php-package.yml@v0.1.3 permissions: contents: read diff --git a/.harness.json b/.harness.json index 9c6d333..ca9fd08 100644 --- a/.harness.json +++ b/.harness.json @@ -1,11 +1,16 @@ { "profile": "core", - "mode": "observe", + "mode": "enforce", "downstream": [ "framework" ], "ratchet": { "phpstan_level": 5, "phpstan_baseline": 0 - } + }, + "observed": [ + "Code style", + "Rector", + "Dependency analysis" + ] } diff --git a/composer.json b/composer.json index cc70a23..adc2ca1 100644 --- a/composer.json +++ b/composer.json @@ -33,7 +33,7 @@ "mockery/mockery": "^1.6.12", "pestphp/pest": "^3.8.2", "phpstan/phpstan": "^2.1.16", - "pollora/harness": "^0.1", + "pollora/harness": "^0.1.3", "szepeviktor/phpstan-wordpress": "^2.0", "wp-cli/wp-cli": "^2.12" }, From b292825acdd14c8d105e2c843413c42f63137a56 Mon Sep 17 00:00:00 2001 From: Olivier Gorzalka Date: Mon, 26 Oct 2026 17:05:31 +0100 Subject: [PATCH 2/2] chore: observe the security patterns gate: bare exceptions (CONV-10) to name, unserialize calls justified --- .harness.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.harness.json b/.harness.json index ca9fd08..48eb33c 100644 --- a/.harness.json +++ b/.harness.json @@ -11,6 +11,7 @@ "observed": [ "Code style", "Rector", - "Dependency analysis" + "Dependency analysis", + "Security patterns" ] }