Filter plugin/theme update requests with nonstandard UpdateURI #19

	name: PHP Static Analysis

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions: # added using https://github.com/step-security/secure-repo
	contents: read

	jobs:
	php-static-analysis:
	runs-on: ubuntu-24.04

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- name: Setup PHP
	uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # v2
	with:
	php-version: 8.4

	- name: Get composer cache directory
	id: composer-cache
	run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

	- name: Cache composer dependencies
	uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
	with:
	path: ${{ steps.composer-cache.outputs.dir }}
	key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
	restore-keys: ${{ runner.os }}-composer-

	- name: Install dependencies
	run: composer install

	- name: Run Static Analysis
	run: composer run analyze:ci

Provide feedback