search

nccgroup / sobelow

Security-focused static analysis for the Phoenix Framework
Apache License 2.0
1.66k stars 92 forks source link

Suggestion for installation instructions #120

Closed dmarcoux closed 1 year ago

dmarcoux commented 1 year ago

sobelow is often running in continuous integration pipelines and when it does, it will more often than not be in the test environment. On top of this, sobelow doesn't have to be started as a runtime application, so runtime: false should also be added to the installation instructions. This is what I suggest for the README:

def deps do
  [
    {:sobelow, "~> 0.11", only: [:dev, :test], runtime: false}
  ]
end

I am happy to send a PR if you agree with the suggestion.

houllette commented 1 year ago

Great suggestion, @dmarcoux - I would happily welcome a PR if you made one!