I just started to review "drush security:review" and ran into this error:
[error] TypeError: Drupal\security_review\SecurityReview::getServerUid(): Return value must be of type int, null returned
I believe there is fundamental problem with the logic for getting webserver uid in cli mode and check write permissions cannot work currently. But at first the wrapping function need a default int value to avoid type error.
In my setup I only need to use "drush security:review".
At first I thougt a drupal way of using "0" but this for the super user on posix systems. So I think "-1" (uid_t) is a good default value as used in in chown: https://pubs.opengroup.org/onlinepubs/009695399/functions/chown.html
See also https://en.wikipedia.org/wiki/User_identifier
Closed: duplicate
3.0
Code
@smustgrave, just saw the other issue 🐛 Get server uid function return unexpected type null Active . Let's discuss there.