##### Categories

Static Application Security Testing (SAST)

##### Import Options

- API Import
- UI Import
- Universal Importer (Pro)

##### File Types

- JSON

##### Integrations

# PHP Security Audit v2

[PHP Security Audit V2](https://github.com/FloeDesignTechnologies/phpcs-security-audit) is a set of PHP\_CodeSniffer rules that performs static code analysis to identify security vulnerabilities and weaknesses in PHP code including SQL injection, cross-site scripting (XSS), command injection, file inclusion vulnerabilities, and insecure cryptographic practices across core PHP and framework-specific implementations such as Drupal. The tool integrates seamlessly into continuous integration pipelines through PHP\_CodeSniffer with customizable rulesets and framework-specific security checks, enabling developers to detect security flaws that traditional object-oriented analysis tools might miss while also checking for CVE issues and security advisories related to CMS and framework components throughout the development lifecycle.

[Docs](https://docs.defectdojo.com/supported_tools/parsers/file/php_security_audit_v2/)