Elixir

Trivy supports Hex repository for Elixir.

The following scanners are supported.

Package manager	SBOM	Vulnerability	License
hex	✓	✓	-

The following table provides an outline of the features Trivy offers.

Package manager	File	Transitive dependencies	Dev dependencies	Dependency graph	Position
hex	mix.lock1	✓	Excluded	-	✓

Hex

In order to detect dependencies, Trivy searches for mix.lock¹.

Configure your project to use mix.lock¹ file.

Footnotes

1. mix.lock is default name. To scan a custom filename use file-patterns ↩ ↩² ↩³