Packages

mix_audit

0.0.4
2.1.5 2.1.4 2.1.3 2.1.2 2.1.1 2.1.0 2.0.2 2.0.1 2.0.0 1.0.1 1.0.0 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.0.6 0.0.5 0.0.4 0.0.3 0.0.2 0.0.1

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

HexDocs

Current section

Files

Jump to
Readme
22 Versions
1 Dependency
Dependants
Files
Activity
mix_audit lib mix_audit.ex
Raw

lib/mix_audit.ex 

defmodule MixAudit do

  require Logger



  def scan(path) do

    # Synchronize and get security advisories

    advisories = MixAudit.Repo.advisories()



    # Get project dependencies

    dependencies = MixAudit.Project.dependencies(path)



    # Generate a security report

    report = MixAudit.Audit.report(dependencies, advisories)



    # Print everything for now

    IO.inspect(report)



    unless report.pass do

      System.halt(1)

    end

  end

end