Version updated for https://github.com/erlef/mix_sbom to version v0.10.0. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action generates a Software Bill of Materials (SBoM) for Elixir Mix projects in the CycloneDX format. It automates the process of identifying and documenting project dependencies, providing a standardized and detailed inventory that enhances software supply chain security and compliance. Key capabilities include support for multiple output formats (JSON, XML, Protobuf), schema versioning, and environment-specific dependency filtering.

Version updated for https://github.com/erlef/mix-dependency-submission to version v1.3.2. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 110 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Dependency Submission Action for Mix automates the extraction and submission of dependencies from Elixir projects using mix to GitHub’s Dependency Submission API. This enables projects to leverage GitHub’s advanced dependency graph, security features, and tools like Dependabot for vulnerability alerts, automated updates, and dependency reviews. It helps improve security, visibility, and compliance by providing insights into both direct and transitive dependencies.