#14 Add Drupal Vendor Hardening Composer Plugin to production build task

test-and-deploy.yml

@@ -200,6 +200,10 @@ Debug:
     # Run the following twice to ensure new patches get applied.
     - composer install --no-interaction --no-progress --no-dev
     - composer install --no-interaction --no-progress --no-dev
+    # Add the Drupal Vendor Hardening Composer Plugin.
+    # see https://github.com/drupal/core-vendor-hardening
+    - composer config --no-interaction allow-plugins.drupal/core-vendor-hardening true
+    - composer require --no-interaction --no-progress drupal/core-vendor-hardening
   artifacts:
     name: build-prod
     when: always