To install all the necessary dependencies, you must first have Composer. Once that's installed, run
git clone https://github.com/muglug/WordPressAnalysis
cd WordPressAnalysis
git clone https://github.com/wordpress/wordpress src
cp src/wp-config-sample.php src/wp-config.php
composer install
To do the actual analysis, run
./vendor/bin/psalm
If you're interested in looking for potential security vulnerabilities, you can run Psalm with the --taint-analysis
flag:
./vendor/bin/psalm --taint-analysis