CI/CD security audit for Elixir: SAFE
Learn about SAFE for Elixir, a security audit developed with Erlang Solutions, ELTE-Soft and Eötvös Loránd University researchers.
SAFE helps businesses identify and address vulnerabilities in their code. https://www.erlang-solutions.com/webinars/safe-for-elixir-strengthening-security-for-elixir-and-erlang/
Watch the webinar in which team behind the audit will break down common security risks, show how SAFE works, and explain why integrating it into your CI/CD pipeline can make your life easier while keeping your applications secure.
What you’ll learn:
-
The biggest security risks in Elixir and Erlang projects (and how to spot them)
-
How SAFE makes vulnerability detection more accurate
-
How to integrate SAFE into your CI/CD pipeline for automated security checks
-
Why secure coding isn’t just about avoiding hacks. It also helps prevent downtime, financial loss, and compliance headaches
Elixir is not owned by Big Tech
I enjoy an ecosystem that is not funded by a megacorp. How does Elixir continue to exist? https://underjord.io/elixir-is-not-owned-by-big-tech.html
Thinking Elixir 251: SSH Vulnerability and Cookies are Changing
Episode 251 of Thinking Elixir. News includes a critical Unauthenticated Remote Code Execution vulnerability in Erlang/OTP SSH, José Valim teasing a new project, Oban Pro v1.6’s impressive new “Cascade Mode” feature, Semaphore CI/CD platform being open-sourced as a primarily Elixir application, new sandboxing options for Elixir code with Dune and Mini Elixir, BeaconCMS development slowing due to DockYard cuts, and a look at the upcoming W3C Device Bound Session Credentials standard that will impact all web applications, and more!
RAFFLE ALERT: Win a ticket to ElixirConfEU!
We’re giving away 1 IN-PERSON ticket and 1 VIRTUAL ticket to ElixirConfEU! To enter: Comment below with what keeps you awake at night in the Elixir world (coding challenges, deployment issues, architecture decisions…) Tag a friend who might be interested in attending The raffle closes in 3 days! Winners will be announced this Friday. Share your Elixir nightmares and you might just win the dream opportunity to attend one of the best Elixir events of the year!
ElixirConf EU schedule is live
The ElixirConf EU schedule is live! With 35+ amazing speakers and a month to go, now’s the time to plan your perfect conference experience. Check it out! https://www.elixirconf.eu/schedule/
Thinking Elixir 250: EEF Elections and Security
Episode 250 of Thinking Elixir. News includes EEF board elections with voting beginning May 9th, Gleam v1.10.0 enhancing security with SBoMs and SLSA build provenance, an AshAuthentication vulnerability with mitigation steps, the Elixir Secure Coding Training project finding a permanent home at the EEF, announcements for both ElixirConf US 2025 in Orlando and ElixirConfEU in Krakow with speaker lineup, and more!
Weaving Stories with Cascading Workflows
Our latest article on Oban Pro v1.6’s new “Cascade Mode”, and using it to generate a collection of children’s stories.
https://oban.pro/articles/weaving-stories-with-cascading-workflows
My journey from Ruby to Elixir: lessons learned ✍️
Why I Looked Beyond Ruby
For years, Ruby was my go-to language for building everything from small prototypes to full-fledged production apps. I fell in love with its elegance and expressiveness and how Ruby on Rails could turn an idea into a working web app in record time. The community—with its focus on kindness and collaboration—only deepened my appreciation. In short, Ruby felt like home.
But as my projects grew in complexity, I started running into bottlenecks. I had apps requiring real-time features, massive concurrency, and high availability. Scaling them with Ruby often meant juggling multiple processes, external services, or creative threading approaches—all of which worked but never felt truly seamless. That’s when I stumbled upon Elixir.
At first glance, Elixir’s syntax reminded me of Ruby. It looked approachable and developer-friendly. But beneath the surface lies a fundamentally different philosophy, heavily influenced by Erlang’s functional model and the concurrency power of the BEAM. Moving from Ruby’s object-oriented approach to Elixir’s functional core was eye-opening. Here’s how I made that transition and why I think it’s worth considering if you’re a fellow Rubyist.
Keep reading 👉👉👉 https://www.erlang-solutions.com/blog/my-journey-from-ruby-to-elixir-lessons-from-a-developer/
Elixir for business 💡
Share it with your non-tech colleagues and bosses Five reasons why Elixir is a game-changer for your business: https://www.erlang-solutions.com/blog/5-ways-elixir-can-improve-business-performance/
What the Critical Erlang SSH Vulnerability Means for Elixir Developers
The summary is if you’re using Phoenix, you are most likely not affected. If you are using Nerves with SSH in production, you may be vulnerable. The Nerves team is aware of this issue and they are actively working on a solution so people can easily update.
ReqEmbed
In this episode, we’ll use ReqEmbed to embed Elixir videos from YouTube in our application using the oEmbed format.
Thinking Elixir 249: LiveDebugger: Peering Inside a LiveView
Episode 249 of Thinking Elixir. News includes Phoenix 1.8.0-rc release with DaisyUI styled Tailwind components and magic link authentication, a new design pattern called “scopes”, a new privacy-focused feature in Ecto for schema redaction, the Elixir Secure Coding Training project finding a new home at TvLabs, a helpful IEx shell tip for multiline commands, and more! We interview Krzysztof Nalepa, the primary creator of LiveDebugger, discussing how this powerful tool helps debug LiveView states and structures, how the project originated, upcoming features, and more.
Exclusive Opportunity: Extended Q&A with José Valim at ElixirConf EU
Join us at ElixirConf EU 2025 for a special Extended Q&A session with the creator of Elixir. Tickets are running out fast, so save your spot now and don’t miss this chance to engage with José! https://www.elixirconf.eu/keynotes/update-from-the-elixir-core-team/
Released benchee 1.4.0! 🚀🚀🚀
Nothing too big, pre_check: :all_same is great when benchmarking alternative implementations of deterministic functions!
Otherwise, some fixes for compatibility with OTP 28 and Windows 11 (or in general more resilient system gathering).
Error Message Documentation Update
Error Message documentation has got a big overhaul using Diataxis!
Standards-compliant HTTP Cookie implementation for Elixir
I’ve released HttpCookie 0.8.0 - check it out at https://github.com/reisub/http_cookie
Mastering metrics with Prometheus (talk recording) 🎥
In this short presentation, Nelson Vides from ESL goes through an overview of the topic of observability, some hints on how to instrument and add metrics to your application – with prometheus, how this dependency works, and what have we done about it to make it work best.
🎥 https://www.erlang-solutions.com/webinars/mastering-metrics-with-prometheus 🎥
Enforcing max query depth with Absinthe
A practical guide to implementing GraphQL query depth limits in Elixir using Absinthe.
https://tomasztomczyk.com/blog/2025/enforcing-max-query-depth-with-absinthe/