orchestrator:validate

To validate PHP code quality automatically, run automated checks for PHPStan, PSR-12, test coverage, and security vulnerabilities. This process scopes to PHP projects using configurable checklists for general PHP, API, or security reviews, highlighting areas needing manual review.

Automated PHP security validation scans your code to identify potential security vulnerabilities like hardcoded passwords or direct SQL queries. It also checks for non-final classes and setters, flagging these issues in an immediate report before execution or deployment.

Set up a pre-commit hook by running an automated validation check that counts tests and verifies PSR-12 code style. This satisfies the requirements for pre-commit hooks and CI/CD pipeline quality gates by preventing potential issues before they impact development.

Yes, you can specify a target directory when running PHPStan and PSR-12 checks. The validation process allows scoping to PHP projects with configurable checklists, ensuring the automated checks only analyze the relevant parts of your codebase.

Yes, the automated code validation supports API-specific PHP reviews through configurable checklists. It runs PHPStan, checks PSR-12 compliance, counts tests, and identifies security vulnerabilities, providing a tailored quality gate for API endpoints.

While automated checklists run PHPStan, PSR-12, and security checks effectively, they serve to highlight areas needing manual review rather than replacing human oversight entirely. The validation focuses on known patterns like hardcoded passwords and direct SQL queries, which may not catch all complex architectural flaws.