erlef / erlef/elixir-secure-coding

CI/CD Tools - Linting

Aperta
#9 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
discussion new content non-elixir content
Lingua principale
Elixir
Stelle
731
Fork
172
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

Linting, code patterns, security anti-patterns, SAST all run in similar circles - I believe there is some things you could implement in your linting practices that could have an effect on code security.

What that is exactly is still to be determined, but I'd love to start collecting thoughts on it and if should be included in the training module for CI/CD Tooling.

For the Elixir specific examples, it would most likely be referencing [Credo](https://github.com/rrrene/credo).

Relevant Resources:
- https://owasp.org/www-project-devsecops-guideline/latest/01b-Linting-Code#:~:text=What%20Is%20Linting%3F,a%20basic%20static%20code%20analyzer.
- https://medium.com/greenwolf-security/linting-for-bugs-vulnerabilities-49bc75a61c6

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.