Skip to content


Trivy supports Hex repository for Elixir.

The following scanners are supported.

Package manager SBOM Vulnerability License
hex -

The following table provides an outline of the features Trivy offers.

Package manager File Transitive dependencies Dev dependencies Dependency graph Position
hex mix.lock1 Excluded -


In order to detect dependencies, Trivy searches for mix.lock1.

Configure your project to use mix.lock1 file.

  1. mix.lock is default name. To scan a custom filename use file-patterns