Composer install fails Qodana License Audit

[shyim]

📝  See the docs https://jb.gg/qodana-license-audit-docker for problem resolution
❌  Error: not possible to obtain all project dependencies from project
'composer install --no-dev' exited with status 2
        No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
        Loading composer repositories with package information
        Updating dependencies
        Your requirements could not be resolved to an installable set of packages.

          Problem 1
            - Root composer.json requires PHP extension ext-sodium * but it is missing from your system. Install or enable PHP's sodium extension.
          Problem 2
            - Root composer.json requires lcobucci/jwt ~4.1.5 -> satisfiable by lcobucci/jwt[4.1.5].
            - lcobucci/jwt 4.1.5 requires ext-sodium * -> it is missing from your system. Install or enable PHP's sodium extension.
          Problem 3
            - league/oauth2-server 8.3.3 requires lcobucci/jwt ^3.4.6 || ^4.0.4 -> satisfiable by lcobucci/jwt[4.1.5].
            - league/oauth2-server 8.3.2 requires lcobucci/jwt ^3.4 || ^4.0 -> satisfiable by lcobucci/jwt[4.1.5].
            - lcobucci/jwt 4.1.5 requires ext-sodium * -> it is missing from your system. Install or enable PHP's sodium extension.
            - Root composer.json requires league/oauth2-server ~8.3.2 -> satisfiable by league/oauth2-server[8.3.2, 8.3.3].

        To enable extensions, verify that they are enabled in your .ini files:
            - /home/app/.anyenv/envs/phpenv/versions/7.4.16/etc/php.ini
            - /home/app/.anyenv/envs/phpenv/versions/7.4.16/etc/conf.d/xdebug.ini
        You can also run `php --ini` in a terminal to see which files are used by PHP in CLI mode.
        Alternatively, you can run Composer with `--ignore-platform-req=ext-sodium --ignore-platform-req=ext-sodium --ignore-platform-req=ext-sodium` to temporarily ignore these required extensions.
        Running update with --no-dev does not mean require-dev is ignored, it just means the packages will not be installed. If dev requirements are blocking the update you have to resolve those problems.

[tiulpin]

Looks like we can't install dependencies with composer automatically here.

You can install them before running the container with License Audit and declare environment variable (-e) DISABLE_AUTO_INSTALL=true to skip the automatic dependency installation step

[shyim]

@tiulpin Is the docker image somewhere public. I would like to fix this :)

[tiulpin]

Sorry, no, it's not public yet

[niyazialpay]

This is not working with Github Actions. Is there any way the solve this for Github Actions?

[shyim]

@niyazialpay checkout https://github.com/shyim/qodana-php

[niyazialpay]

Thank you