feat - Add sobelow on build pipeline

.circleci/config.yml

@@ -28,6 +28,7 @@ jobs:
       - store_test_results:  # upload junit test results for display in Test Summary
           path: _build/test/lib
       - run: mix credo
+      - run: mix sobelow
   publish:
     parallelism: 1
     docker:
@@ -40,22 +41,6 @@ jobs:
       - run: mix deps.get
       - run: mix hex.publish --yes
 
-  sec_code_analysis:
-    docker:
-    - image: circleci/elixir:1.7.3
-    environment:
-      MIX_ENV: test
-
-    steps:
-      - attach_workspace: 
-          at: ~/
-      - run: 
-          name: Fetch dependencies
-          command: | 
-            mix local.hex --force
-            mix local.rebar --force
-      - run: mix sobelow
-
 workflows:
   version: 2.1
   build_and_test:
@@ -70,9 +55,6 @@ workflows:
                 - hexpm/elixir:1.9.4-erlang-20.3.8.26-alpine-3.12.0
                 - hexpm/elixir:1.10.4-erlang-21.3.8.17-alpine-3.12.0
                 - hexpm/elixir:1.10.4-erlang-23.0.3-alpine-3.12.0
-      - sec_code_analysis:
-          requires:
-            - build_and_test
       - publish_production_approval:
           type: approval
           filters:
@@ -88,5 +70,4 @@ workflows:
               only:
                 - master
           requires:
-            - publish_production_approval
-            - sec_code_analysis
+            - publish_production_approval

mix.exs

@@ -52,7 +52,7 @@ defmodule BRAN.MixProject do
       {:credo, "~> 1.4", only: [:dev, :test], runtime: false},
       {:junit_formatter, "~> 3.1", only: :test, runtime: false},
       {:excoveralls, "~> 0.10", only: :test},
-      {:ex_parameterized, "~> 1.3", only: [:test]},
+      {:ex_parameterized, "~> 1.3", only: [:dev, :test]},
       {:sobelow, "~> 0.10.4", only: :dev}
     ]
   end