ML-9: add mix_audit for CVE scanning (warn-only)

2026-04-24 08:13:42 +01:00
parent f79e1e4ddf
commit 815b34c024
5 changed files with 30 additions and 3 deletions
@@ -80,6 +80,9 @@ jobs:
        run: mix credo --strict
      - name: 👮 Run Sobelow
        run: mix sobelow
+      - name: 🛡️ Audit dependencies for CVEs
+        run: mix deps.audit
+        continue-on-error: true
      - name: 🐚 Run Shellcheck
        run: |
          fd . 'scripts/' --exclude '*.hurl' -t file --exec shellcheck --color