nccgroup / sobelow

Security-focused static analysis for the Phoenix Framework
Apache License 2.0
1.66k stars 92 forks source link

Create robust testing suite against other popular Elixir repos #119

Open houllette opened 1 year ago

houllette commented 1 year ago

Like the title suggests, we should consider creating some sort of additional testing suite (most likely through GitHub Actions) that runs Sobelow against the Top X of Elixir repositories in GitHub.

This would ensure that on new feature releases we still maintain parity with previous version on code comprehension.

Inspiration could be taken from how Semgrep creates parsing statistics when adding support for a new scanner.