Skip to content

🐛 Packaging: recognize erlef/setup-beam for Elixir publishing workflows - #5175

Open
daniboybye wants to merge 2 commits into
ossf:mainfrom
daniboybye:packaging-elixir-setup-beam
Open

🐛 Packaging: recognize erlef/setup-beam for Elixir publishing workflows#5175
daniboybye wants to merge 2 commits into
ossf:mainfrom
daniboybye:packaging-elixir-setup-beam

Conversation

@daniboybye

Copy link
Copy Markdown

What

Adds a second Packaging JobMatcher for Elixir/Hex publishing workflows that use erlef/setup-beam instead of erlef/setup-elixir.

Why

erlef/setup-elixir was renamed upstream to erlef/setup-beam (same repository — github.com/erlef/setup-elixir redirects to github.com/erlef/setup-beam). The existing Elixir matcher added in #2564 only recognizes the pre-rename name, so any Elixir project correctly using the current action name gets packaging workflow not detected even when it has a working mix hex.publish step.

Example: https://github.com/daniboybye/ElixirTorrent/actions/workflows/build-and-publish.yml uses erlef/setup-beam and mix hex.publish --yes in the same job, but was scored as having no packaging workflow.

How

Follows the existing pattern used for the two Docker matchers (docker push vs docker/build-push-action) — adds a second, independent JobMatcher entry rather than modifying the existing one, so projects pinned to either action name are recognized.

Added a test fixture (github-workflow-packaging-elixir-setup-beam.yaml) and a corresponding TestIsPackagingWorkflow case; existing tests and fixtures are untouched.

Testing

go test ./checks/fileparser/... -run TestIsPackagingWorkflow -v

All cases pass, including the new elixir-setup-beam one.

erlef/setup-elixir was renamed upstream to erlef/setup-beam (same
repository; github.com/erlef/setup-elixir now redirects to it), so
the existing Elixir JobMatcher no longer matches current Elixir/Hex
publishing workflows that correctly use the new action name. Adds a
second matcher for erlef/setup-beam alongside the existing
erlef/setup-elixir one, following the same pattern already used for
the two Docker matchers (docker push vs docker/build-push-action).

Adds a test fixture and case exercising the new matcher; existing
tests are unaffected.

Signed-off-by: Daniel Urumov <danielplamenovurumov@gmail.com>
@daniboybye
daniboybye requested a review from a team as a code owner August 11, 2026 15:49
@daniboybye
daniboybye requested review from justaugustus and removed request for a team August 11, 2026 15:49
@daniboybye
daniboybye requested a review from AdamKorcz August 11, 2026 15:49
@dosubot dosubot Bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Aug 11, 2026
@daniboybye daniboybye changed the title Packaging: recognize erlef/setup-beam for Elixir publishing workflows 🐛 Packaging: recognize erlef/setup-beam for Elixir publishing workflows Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:S This PR changes 10-29 lines, ignoring generated files.

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

1 participant