The image is for running security-checker, security-checker is installed in /app/ in case you need to customize the install before usage. The image is based on php:7.2-alpine3.8
php-security-checker:
stage: linting
image: registry.gitlab.com/pipeline-components/php-security-checker:latest
script:
- cd ${COMPOSER_LOCATION:-.} && security-checker security:check composer.lock