Packages

mix_audit

0.0.5
2.1.5 2.1.4 2.1.3 2.1.2 2.1.1 2.1.0 2.0.2 2.0.1 2.0.0 1.0.1 1.0.0 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.0.6 0.0.5 0.0.4 0.0.3 0.0.2 0.0.1

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

HexDocs

Current section

Files

Jump to
Readme
22 Versions
2 Dependencies
Dependants
Files
Activity
mix_audit lib mix_audit.ex
Raw

lib/mix_audit.ex 

defmodule MixAudit do

  require Logger



  def scan(args) do

    {opts, _, _} = OptionParser.parse(args, switches: [format: :string, path: :string])



    path = Keyword.get(opts, :path, ".")

    format = Keyword.get(opts, :format, "human")



    # Synchronize and get security advisories

    advisories = MixAudit.Repo.advisories()



    # Get project dependencies

    dependencies = MixAudit.Project.dependencies(path)



    # Generate a security report

    report = MixAudit.Audit.report(dependencies, advisories)



    # Format the report according to the specified format

    formatted_report = MixAudit.Formatting.format(report, format)



    # Output the result

    IO.puts(String.trim(formatted_report))



    unless report.pass do

      System.halt(1)

    end

  end

end