vet currently does not support scanning PHP projects. We can start by supporting composer.json based projects.
Example repository to test against:
https://github.com/mollie/mollie-api-php
- We need to support this in 
vet 
- We need to update the supported lockfile formats in 
vet-action