{
  "repository": "argoproj/argo-cd",
  "ref": "211c2b4fdc82f2ebd0b94c3fbf48779c06d83bad",
  "methods": [
    {
      "slug": "formal",
      "title": "Formal verification and model checking"
    },
    {
      "slug": "static_analysis",
      "title": "Static analysis"
    },
    {
      "slug": "testing",
      "title": "Testing"
    },
    {
      "slug": "formatting",
      "title": "Formatting and hygiene"
    },
    {
      "slug": "supply_chain",
      "title": "Supply chain"
    },
    {
      "slug": "unclassified",
      "title": "Unclassified"
    }
  ],
  "verifications": [
    {
      "tool": "actionlint",
      "method": "static_analysis",
      "commands": [
        "actionlint --version",
        "actionlint"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.lint-actions.steps[4] (Run actionlint)"
        },
        {
          "path": "Makefile",
          "locator": "target actionlint-local (line 381)"
        }
      ],
      "upstream": "https://github.com/rhysd/actionlint",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "codeql",
      "method": "static_analysis",
      "commands": [
        "uses github/codeql-action/analyze"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/codeql.yml",
          "locator": "jobs.CodeQL-Build.steps[6] (Perform CodeQL Analysis)"
        }
      ],
      "upstream": "https://github.com/github/codeql",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "eslint",
      "method": "static_analysis",
      "commands": [
        "eslint",
        "eslint --fix"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target lint-ui-local (line 407)"
        },
        {
          "path": "ui/package.json",
          "locator": "scripts.lint"
        },
        {
          "path": "ui/package.json",
          "locator": "scripts.lint:fix"
        },
        {
          "path": "ui/package.json",
          "locator": "devDependencies: eslint"
        },
        {
          "path": "ui/eslint.config.mjs",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/eslint/eslint",
      "docs": "https://eslint.org/docs/latest/use/command-line-interface#exit-codes",
      "exit_codes": {
        "0": "no errors",
        "1": "linting errors found",
        "2": "configuration problem or internal error"
      },
      "autofix": true,
      "declared_only": false
    },
    {
      "tool": "golangci-lint",
      "method": "static_analysis",
      "commands": [
        "uses golangci/golangci-lint-action",
        "golangci-lint --version",
        "golangci-lint run --fix --verbose",
        "golangci-lint run"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.lint-go.steps[4] (Run golangci-lint)"
        },
        {
          "path": "Makefile",
          "locator": "target lint-local (line 370)"
        },
        {
          "path": "gitops-engine/Makefile",
          "locator": "target lint (line 17)"
        },
        {
          "path": ".golangci.yaml",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/golangci/golangci-lint",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "mkdocs",
      "method": "static_analysis",
      "commands": [
        "mkdocs build"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target build-docs-local (line 570)"
        }
      ],
      "upstream": "https://github.com/mkdocs/mkdocs",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "shellcheck",
      "method": "static_analysis",
      "commands": [
        "shellcheck -e SC2059 -e SC2154 -e SC2034 -e SC2016 -e SC1091 $(find . -type f -name *.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.shellcheck.steps[1]"
        }
      ],
      "upstream": "https://github.com/koalaman/shellcheck",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "tsc",
      "method": "static_analysis",
      "commands": [
        "tsc --noEmit --project ./src/app"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target lint-ui-local (line 407)"
        },
        {
          "path": "ui/package.json",
          "locator": "scripts.lint"
        },
        {
          "path": "ui/package.json",
          "locator": "devDependencies: typescript"
        }
      ],
      "upstream": "https://github.com/microsoft/TypeScript",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "zizmor",
      "method": "static_analysis",
      "commands": [
        "uses zizmorcore/zizmor-action"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/zizmor.yaml",
          "locator": "jobs.zizmor.steps[1] (Run zizmor)"
        }
      ],
      "upstream": "https://github.com/zizmorcore/zizmor",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "go-test",
      "method": "testing",
      "commands": [
        "go test ./hack/gen-catalog",
        "go test -race -cover ./... -args -test.gocoverdir=$(PWD)/test-results/gitops-engine",
        "go test -race ./... -coverprofile=coverage.out"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target notification-catalog-test (line 219)"
        },
        {
          "path": "Makefile",
          "locator": "target test-gitops-engine (line 440)"
        },
        {
          "path": "gitops-engine/Makefile",
          "locator": "target test (line 13)"
        }
      ],
      "upstream": "https://github.com/golang/go",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "jest",
      "method": "testing",
      "commands": [
        "jest"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "ui/package.json",
          "locator": "scripts.test"
        },
        {
          "path": "ui/package.json",
          "locator": "devDependencies: jest"
        },
        {
          "path": "ui/jest.config.js",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/jestjs/jest",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": "prettier",
      "method": "formatting",
      "commands": [],
      "triggers": [],
      "evidence": [
        {
          "path": "ui/package.json",
          "locator": "devDependencies: prettier"
        },
        {
          "path": "ui/.prettierrc",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/prettier/prettier",
      "docs": "https://prettier.io/docs/cli#exit-codes",
      "exit_codes": {
        "0": "everything formatted",
        "1": "something was not formatted (--check)",
        "2": "prettier error"
      },
      "autofix": true,
      "declared_only": true
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "e2e-code-coverage -mindepth 2 -maxdepth 2 -type d ( -name applicationset-controller -o -name repo-server -o -name app-controller -o -name commit-server )"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.analyze.steps[8] (Generate e2e test coverage profile)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "else DIST_DIR=${DIST_DIR} RERUN_FAILS=0 PACKAGES=$(TEST_MODULE) ./hack/test.sh -args -test.gocoverdir=$(PWD)/test-results $(TEST_MODULE)"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-go.steps[15] (Run all unit tests)"
        },
        {
          "path": "Makefile",
          "locator": "target test-local (line 432)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "else DIST_DIR=${DIST_DIR} RERUN_FAILS=0 PACKAGES=$(TEST_MODULE) ./hack/test.sh -race -args -test.gocoverdir=$(PWD)/test-results"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-go-race.steps[15] (Run all unit tests)"
        },
        {
          "path": "Makefile",
          "locator": "target test-race-local (line 454)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "go run ./hack/e2e-shard-weights-refresh -shards ${SHARDS} -report ${RUNNER_TEMP}/report.md -repo ${GITHUB_REPOSITORY} ${RUNNER_TEMP}/runs/*"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/e2e-shard-weights.yaml",
          "locator": "jobs.refresh.steps[4] (Compute refreshed weights)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "go run ./hack/gen-catalog docs"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target notification-docs (line 223)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "go run ./hack/gen-docs"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target notification-docs (line 223)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "go run ./hack/k8s"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target start-test-k8s (line 645)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "go run tools/cmd-docs/main.go"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target clidocsgen (line 234)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "goreman -f $(ARGOCD_PROCFILE) start ${ARGOCD_START}"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl apply --server-side --force-conflicts -f -"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl apply -f https://raw.githubusercontent.com/open-cluster-management/api/a6845f2ebcb186ec26b832f60c988537a58f3859/cluster/v1alpha1/0000_04_clusters.open-cluster-management.io_placementdecisions.crd.yaml"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl config set-context --current --namespace=argocd-e2e"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl create ns argocd-e2e"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl create ns argocd-e2e-external"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl create ns argocd-e2e-external-2"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl get secret argocd-redis -o jsonpath={.data.auth}"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target start-local (line 536)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kubectl wait --for=condition=Established --timeout=60s crd/applications.argoproj.io crd/applicationsets.argoproj.io crd/appprojects.argoproj.io crd/placementdecisions.cluster.open-cluster-management.io"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "log -1 --pretty=format:%B"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/cherry-pick-single.yml",
          "locator": "jobs.cherry-pick.steps[4] (Cherry pick commit)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "mkdocs serve"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target serve-docs-local (line 578)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "see the e2e-server log artifact\""
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[20] (Run E2E testsuite)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "select (.type==Checksum)"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/release.yaml",
          "locator": "jobs.goreleaser.steps[7] (Generate subject for provenance)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "sha256sum ./dist/$(BIN_NAME)-*"
      ],
      "triggers": [
        "local"
      ],
      "evidence": [
        {
          "path": "Makefile",
          "locator": "target checksums (line 657)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "true"
      ],
      "triggers": [
        "ci",
        "local"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-build.yaml",
          "locator": "jobs.test-e2e.steps[19] (Run E2E server and wait for it being available)"
        },
        {
          "path": "Makefile",
          "locator": "target start-e2e-local (line 494)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    }
  ]
}