local-it/mitgliederverwaltung
local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 59 Pull requests 5 Projects 2 Releases 5 Packages 1 Activity Actions

chore: disable mix hex.audit as long as unfixable security advisories can't be skipped
Some checks failed
continuous-integration/drone/push Build is failing
Details

Browse source
This commit is contained in:
Simon 2026-07-06 19:51:26 +02:00
parent eb20c8f3b6
commit 08bae3ce55
Signed by: simon
GPG key ID: 40E7A58C4AA1EDB2
2 changed files with 13 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.drone.jsonnet
View file

@ -40,8 +40,10 @@ local step_lint = {
'mix compile --warnings-as-errors', // Check for compilation errors & warnings
'mix format --check-formatted', // Check formatting
'mix sobelow --config', // Security checks
'mix deps.audit --ignore-file .deps_audit_ignore', // Known vulnerabilities
'mix hex.audit', // Unmaintained dependencies
// mix hex.audit (Hex >= 2.5) fails on unpatched transitive advisories (cowlib, swoosh).
// mix deps.audit supports .deps_audit_ignore for accepted risks; re-enable hex.audit when
// ignore_advisories lands in Hex or those packages are patched.
'mix deps.audit --ignore-file .deps_audit_ignore',
'mix credo --strict', // Code quality hints
'mix gettext.extract --check-up-to-date', // Translations up to date
],