elixir-broadway / broadway

93%

main: 93%

LAST BUILD ON BRANCH ty/sobelow

branch: ty/sobelow

CHANGE BRANCH

x

Reset

Sync Branches

• ty/sobelow
• 225-skipped-with-dummy-producer
• 245-adding-context-to-telemtry-events
• FEATURE/add-configurable-ack
• acco/add-reset-opt-to-update_rate_limiting
• adding_supervisor_init_telemetry_event
• al/1.18
• al/minor-doc-improvements
• al/more-types
• al/rename
• al/update-deps-and-ci
• al/update-elixir
• andrea-demand-docs
• andrea/fix-process-name-callback
• andrea/more-nimble-options
• andrea/nimble
• andrea/rpdoucers
• andrea/speed-up-ci
• byte-size-batching
• cg/improve-prepare-docs
• change-failed-typespec
• ci-housekeeping
• code-coverage-on-coveralls
• concurrency_setting_notes
• default-batcher
• demand-dispatcher-shuffle-demands
• docs
• edits
• fan-in-producer
• feat/add-credo-and-fix-issues
• feat/add-is-full-to-batch-info
• feat/config-storage-behaviour
• feat/telemetry-span
• fix-crash_reason-for-erlang-errors
• fix-graceful-shutdown
• fix-telemetry-docs
• fix-typo
• fix-typos
• fix/batcher-fullsweep-after
• fix/ensure-ets-table-exists
• fix_typos
• labels
• main
• master
• patch-1
• ps-add-batcher-key-telemetry-md
• ps-add-more-telemetry-metadata
• ps-add-topology-function
• ps-change-persistent-term-key-value
• ps-fix-intermittent-test
• ps-fix-telemetry-events-and-docs
• ps-topology-fun-from-process
• ps-update-telemetry-docs-2
• refs/pull/328/merge
• refs/pull/329/merge
• sdc/add-producer
• subscriber-remove-shuffle
• switching_to_counters
• telemetry-failed-messages
• wm-ci
• yordis/add-producer-to-telemetry
• yordis/fixes-353
• yordis/handle-failed-telemetry-span

Build # 9ab19841df2bc0e198aa90fa448feea466a48dcd-PR-373

Build Type

Pull #373

github

Committed by s3cur3

Commit Message

chore: Add Sobelow security scanning

In response to the rash of CVEs from vulnerabilities that static analysis can detect (see [the EEF's list of most common weaknesses](https://cna.erlef.org/common-weaknesses), of which uncontrolled resource consumption like as atom table exhaustion is number 1), I thought it might be valuable to add Sobelow scanning to the project. It didn't find anything actionable (yay! 🎉), but I figured it might be valuable to have it running in CI so that future potential vulnerabilities can be called out.

Pull Request Pull Request #373: chore: Add Sobelow security scanning

Coverage Stats

651 of 699 relevant lines covered (93.13%)

149.68 hits per line