-
Notifications
You must be signed in to change notification settings - Fork 583
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add elixir support #1739
feat: add elixir support #1739
Conversation
src/lib/plugins/index.ts
Outdated
@@ -55,6 +56,9 @@ export function loadPlugin( | |||
case 'cocoapods': { | |||
return cocoapodsPlugin; | |||
} | |||
case 'elixir': { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
would a new language not be added via the new ecosystems flow now? I believe @darscan mentioned all new languages/plugins now go via that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yep, this should be using the new flow. @admons let's chat
90a4c3a
to
a0c4894
Compare
a0c4894
to
bf35fec
Compare
src/lib/detect.ts
Outdated
@@ -31,6 +31,7 @@ const DETECTABLE_FILES: string[] = [ | |||
'Podfile.lock', | |||
'pyproject.toml', | |||
'poetry.lock', | |||
// 'mix.exs', // todo: remove when hex is going GA |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Out of interest do we not need mix.lock here too?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Of course, was just interested if it was a new approach or not 👍
src/lib/package-managers.ts
Outdated
@@ -49,6 +51,7 @@ export const GRAPH_SUPPORTED_PACKAGE_MANAGERS: SupportedPackageManagers[] = [ | |||
'yarn', | |||
'rubygems', | |||
'poetry', | |||
'hex', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Had a chat with @anthogez as I wanted to flag that this might be required for Gradle (I had incorrectly recalled something about Gradle moving to dep-graphs but it was actually around introducing support cycles).
It could definitely be better named but we don't need to add hex here if we build the dep graph from scratch, like Go (so it sounds like Poetry also shouldn't be there). This variable is for package managers that build a dep tree and convert to dep graph.
We should add a test in here: |
ca5a5d5
to
f3c8e87
Compare
package.json
Outdated
@@ -78,6 +78,7 @@ | |||
"@snyk/graphlib": "^2.1.9-patch.3", | |||
"@snyk/inquirer": "^7.3.3-patch", | |||
"@snyk/snyk-cocoapods-plugin": "2.5.2", | |||
"@snyk/snyk-hex-plugin": "^1.0.0", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please remove ^
from "@snyk/snyk-hex-plugin": "^1.0.0"
It could bring involuntary breaking changes in the future
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You're right, I'm used to projects with lock file
f3c8e87
to
9572d2e
Compare
What does this PR do?
Adds support for elixir ecosystem