nccgroup / sobelow

Security-focused static analysis for the Phoenix Framework
Apache License 2.0
1.66k stars 92 forks source link

Add support for --version opt #110

Closed houllette closed 1 year ago

houllette commented 2 years ago

We've been integrating Sobelow into another open-source project Salus (a Security Scanning Orchestration tool) and in extending it to support running Sobelow for Elixir code, the class created needs to support version outputs from the underlying scanner.

We've circumvented this by returning a hardcoded string with whatever version Sobelow is currently on, but a more robust solution would be to allow for a Sobelow to run as mix sobelow --version and have it simply return the current version to stout