148: Security Scanning our Apps with Sobelow
Thinking Elixir Podcast
00:00
Sobolo: A Static Analysis Tool
The tool is just parsing the AST and looking for potentially concerning patterns. It's not doing any dynamic analysis or runtime analysis, which means that there's a degree of uncertainty and findings. And to add on to that too, I think that one of the allures of the Elixir programming language is this concept of meta programming. So below is just being able to break apart the Elixir code base into what it natively knows so we can work in it that way.
Transcript
Play full episode
