erlef / erlef/elixir-secure-coding

CI/CD Tools - Linting

Open
#9 0 comments 0 reactions 0 assignees View on GitHub
discussion new content non-elixir content
Dominant language
Elixir
Stars
731
Forks
172
PR merge metrics
No merged PRs in 30d

Description

Linting, code patterns, security anti-patterns, SAST all run in similar circles - I believe there is some things you could implement in your linting practices that could have an effect on code security.

What that is exactly is still to be determined, but I'd love to start collecting thoughts on it and if should be included in the training module for CI/CD Tooling.

For the Elixir specific examples, it would most likely be referencing [Credo](https://github.com/rrrene/credo).

Relevant Resources:
- https://owasp.org/www-project-devsecops-guideline/latest/01b-Linting-Code#:~:text=What%20Is%20Linting%3F,a%20basic%20static%20code%20analyzer.
- https://medium.com/greenwolf-security/linting-for-bugs-vulnerabilities-49bc75a61c6

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.