The Symfony binary is a must-have tool when developing Symfony applications on your local machine. It provides:
- The best way to create new Symfony applications;
- A powerful local web server to develop your projects with support for TLS certificates;
- A tool to check for security vulnerabilities;
- Managed Symfony-specific diagnostics for local development and CI;
- Seamless integration with Upsun (formerly Platform.sh).
Read the installation instructions on symfony.com.
Symfony release artifacts are signed using cosign, which is part of sigstore. Download an artifact and its matching Sigstore bundle, then verify it as follows:
$ cosign verify-blob \
--bundle symfony-cli_linux_amd64.tar.gz.sigstore.json \
--certificate-identity-regexp='^https://github\.com/symfony-cli/symfony-cli/\.github/workflows/releaser\.yml@refs/tags/v[0-9]+\.[0-9]+\.[0-9]+$' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
symfony-cli_linux_amd64.tar.gz
Verified OKThe signatures use Sigstore's keyless signing method.
If you discover a security vulnerability, please follow our disclosure procedure.
Package repository hosting is graciously provided by cloudsmith. Cloudsmith is the only fully hosted, cloud-native, universal package management solution, that enables your organization to create, store and share packages in any format, to any place, with total confidence. We believe there’s a better way to manage software assets and packages, and they're making it happen!