Merge branch 'next-32255/remove-definition-from-write-command' into '… #6198

	name: Security

	on:
	push:
	branches:
	- trunk
	pull_request:
	schedule:
	- cron: '0 6 * * 4'

	jobs:
	php:
	runs-on: ubuntu-latest
	name: "Composer dependencies"
	steps:
	- name: Clone platform
	uses: actions/checkout@v4

	- name: Setup PHP
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.2'

	- name: Install Composer
	run: \|
	composer install --no-interaction --no-scripts
	curl --location --output local-php-security-checker https://github.com/fabpot/local-php-security-checker/releases/download/v1.0.0/local-php-security-checker_1.0.0_linux_amd64
	echo 'e5b12488ca78bc07c149e9352278bf10667b88a8461caac10154f9a6f5476369 local-php-security-checker' > local-php-security-checker.sha256
	sha256sum --check local-php-security-checker.sha256
	chmod +x local-php-security-checker

	- name: Run on platform
	run: ./local-php-security-checker
	code-ql:
	name: Analyze
	runs-on: ubuntu-latest

	strategy:
	fail-fast: false
	matrix:
	language: [ 'javascript' ]

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	fetch-depth: 2

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: ${{ matrix.language }}

	- name: Autobuild
	uses: github/codeql-action/autobuild@v3

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3

Provide feedback