148: Security Scanning our Apps with Sobelow
Thinking Elixir Podcast
00:00
How to Use Compile Trace to Detect Issues With Code in Elixir
Holden: Compile tracers were introduced in 1.10. We're on the eve of 1.5 now. So I know that since away, so below detects issues with code is by statically analyzing the AST at compile time and learn these patterns. But I have to assume, correct me if I'm wrong, that that was done before compile tracing was there. Is that something that could really help so below to be more effective? Like we had talked about like the use controller thing. If you did some weird metadata meta programming thing that didn't use that like nomenclature anymore, like you could still compile trace that it is importing the Phoenix dot control or plug dot.
Transcript
Play full episode
