sgerrand / ex_bamboo_hr

100%

main: 100%

LAST BUILD ON BRANCH gh-actions-review-and-report-dependencies

branch: gh-actions-review-and-report-dependencies

CHANGE BRANCH

x

Reset

• gh-actions-review-and-report-dependencies
• actions-apply-least-privilege
• coveralls
• dependabot/hex/ex_doc-0.38.0
• dependabot/hex/ex_doc-0.38.1
• dependabot/hex/ex_doc-0.38.2
• dependabot/hex/req-0.5.12
• main
• refs/pull/28/merge
• refs/pull/29/merge
• refs/pull/30/merge
• refs/pull/31/merge
• refs/pull/32/merge

Build # 1db66a8dfa8e9d0b0d34530591121c8a870f3818-PR-23

Build Type

Pull #23

github

Committed by web-flow

Commit Message

Review and report Mix dependencies


This change introduces a new workflow to review dependencies in this project, with the initial job focused on:
- submitting Mix dependencies to the GitHub Dependency Submission API
- reviewing Mix dependencies for potential vulnerabilities and invalid licenses

The first part unlocks some interesting data:
- 🔐 Dependabot alerts and security updates — including transitive deps
- 📈 Full dependency graph visibility — even without lockfiles
- 👀 Dependency Review — see what changed in PRs
- 🧾 Helps with auditing and compliance for third-party packages

The second part requires a GitHub Advanced Security license, which is freely available for public repositories and could be useful.

Pull Request Pull Request #23: Review and report Mix dependencies

Run Details

31 of 31 relevant lines covered (100.0%)

13.06 hits per line