misc

.tool-versions

@@ -1,2 +1,2 @@
 erlang 25.2
-elixir 1.14.2-otp-25
+elixir 1.14.3-otp-25

justfile

@@ -631,6 +631,9 @@ licenses:
 	@mkdir -p docs/DEPENDENCIES/
 	just mix-remote licenses && mv DEPENDENCIES.md docs/DEPENDENCIES/$FLAVOUR.md
 
+audit:
+	AS_UMBRELLA=1 just mix sobelow
+
 # Extract strings to-be-localised from the app and installed extensions
 # FIXME: should extract to root app, not activity_pub like it's doing (for whatever reason)
 localise-extract: 

mix.exs

@@ -318,7 +318,8 @@ defmodule Bonfire.Umbrella.MixProject do
       "ecto.setup": ["ecto.create", "ecto.migrate"],
       "ecto.migrate": ["bonfire.seeds"],
       "ecto.reset": ["ecto.drop --force", "ecto.setup"],
-      test: ["ecto.create --quiet", "ecto.migrate --quiet", "test"]
+      test: ["ecto.create --quiet", "ecto.migrate --quiet", "test"],
+      sobelow: ["cmd mix sobelow"]
     ]
   end
 end