{
  "repository": "dotnet/runtime",
  "ref": "1e8e623dc1563ce2779c1253ad986d7c2e448453",
  "methods": [
    {
      "slug": "formal",
      "title": "Formal verification and model checking"
    },
    {
      "slug": "static_analysis",
      "title": "Static analysis"
    },
    {
      "slug": "testing",
      "title": "Testing"
    },
    {
      "slug": "formatting",
      "title": "Formatting and hygiene"
    },
    {
      "slug": "supply_chain",
      "title": "Supply chain"
    },
    {
      "slug": "unclassified",
      "title": "Unclassified"
    }
  ],
  "verifications": [
    {
      "tool": "eslint",
      "method": "static_analysis",
      "commands": [],
      "triggers": [],
      "evidence": [
        {
          "path": "src/mono/browser/runtime/.eslintrc.cjs",
          "locator": "config file"
        },
        {
          "path": "src/native/.eslintrc.cjs",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/eslint/eslint",
      "docs": "https://eslint.org/docs/latest/use/command-line-interface#exit-codes",
      "exit_codes": {
        "0": "no errors",
        "1": "linting errors found",
        "2": "configuration problem or internal error"
      },
      "autofix": true,
      "declared_only": true
    },
    {
      "tool": "pylint",
      "method": "static_analysis",
      "commands": [],
      "triggers": [],
      "evidence": [
        {
          "path": "src/coreclr/scripts/.pylintrc",
          "locator": "config file"
        }
      ],
      "upstream": "https://github.com/pylint-dev/pylint",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": true
    },
    {
      "tool": "node-test",
      "method": "testing",
      "commands": [
        "node --test $RUNNER_TEMP/trusted-evals/kbe-search.test.mjs"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[8] (Test the KBE search support)"
        }
      ],
      "upstream": "https://github.com/nodejs/node",
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "PAT Secret"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/validate-pat-pool.yml",
          "locator": "jobs.validate.steps[12] (Build summary)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bash ${RUNNER_TEMP}/gh-aw/actions/audit_pre_agent_workspace.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/breaking-change-doc.lock.yml",
          "locator": "jobs.agent.steps[23] (Audit pre-agent workspace)"
        },
        {
          "path": ".github/workflows/ci-failure-fix.lock.yml",
          "locator": "jobs.agent.steps[26] (Audit pre-agent workspace)"
        },
        {
          "path": ".github/workflows/ci-failure-scan-feedback.lock.yml",
          "locator": "jobs.agent.steps[25] (Audit pre-agent workspace)"
        },
        {
          "path": ".github/workflows/ci-failure-scan.lock.yml",
          "locator": "jobs.agent.steps[30] (Audit pre-agent workspace)"
        },
        {
          "path": ".github/workflows/closed-issue-reference-check.lock.yml",
          "locator": "jobs.agent.steps[25] (Audit pre-agent workspace)"
        },
        {
          "path": ".github/workflows/holistic-review.lock.yml",
          "locator": "jobs.agent.steps[28] (Audit pre-agent workspace)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bash ${RUNNER_TEMP}/gh-aw/actions/check_oauth_tokens.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/breaking-change-doc.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        },
        {
          "path": ".github/workflows/ci-failure-fix.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        },
        {
          "path": ".github/workflows/ci-failure-scan-feedback.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        },
        {
          "path": ".github/workflows/ci-failure-scan.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        },
        {
          "path": ".github/workflows/closed-issue-reference-check.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        },
        {
          "path": ".github/workflows/holistic-review.lock.yml",
          "locator": "jobs.activation.steps[6] (Check for OAuth tokens)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bash ${RUNNER_TEMP}/gh-aw/actions/check_otlp_default_credentials.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/breaking-change-doc.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        },
        {
          "path": ".github/workflows/ci-failure-fix.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        },
        {
          "path": ".github/workflows/ci-failure-scan-feedback.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        },
        {
          "path": ".github/workflows/ci-failure-scan.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        },
        {
          "path": ".github/workflows/closed-issue-reference-check.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        },
        {
          "path": ".github/workflows/holistic-review.lock.yml",
          "locator": "jobs.agent.steps[3] (Check OTLP telemetry configuration)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bash ${RUNNER_TEMP}/gh-aw/actions/verify_git_credentials.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/breaking-change-doc.lock.yml",
          "locator": "jobs.agent.steps[22] (Clean credentials)"
        },
        {
          "path": ".github/workflows/ci-failure-fix.lock.yml",
          "locator": "jobs.agent.steps[25] (Clean credentials)"
        },
        {
          "path": ".github/workflows/ci-failure-scan-feedback.lock.yml",
          "locator": "jobs.agent.steps[24] (Clean credentials)"
        },
        {
          "path": ".github/workflows/ci-failure-scan.lock.yml",
          "locator": "jobs.agent.steps[29] (Clean credentials)"
        },
        {
          "path": ".github/workflows/closed-issue-reference-check.lock.yml",
          "locator": "jobs.agent.steps[24] (Clean credentials)"
        },
        {
          "path": ".github/workflows/holistic-review.lock.yml",
          "locator": "jobs.agent.steps[27] (Clean credentials)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bash .github/workflows/shared/filter-scanner-kbes.sh"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-failure-fix.lock.yml",
          "locator": "jobs.scanner_kbes.steps[2] (Filter scanner-authored KBEs (deterministic))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "for refspec in ${refspecs[@]}"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/holistic-review.lock.yml",
          "locator": "jobs.agent.steps[5] (Fetch additional refs)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "for spec in $SPECS"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[3] (Preserve the trusted eval inputs)"
        },
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[7] (Restore the trusted eval inputs)"
        },
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[9] (Lint the selected spec(s))"
        },
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[10] (Run the eval(s))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "markdownlint **/*.md"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/markdownlint.yml",
          "locator": "jobs.lint.steps[2] (Run Markdownlint)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "python runtime/src/coreclr/scripts/jitformat.py -r runtime -o $EXPR -a x64 $EXPR"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/jit-format.yml",
          "locator": "jobs.format.steps[3] (Run jitformat.py)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "tee skill-check-agents.txt"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/skill-validation.yml",
          "locator": "jobs.validate.steps[2] (Run skill-validator check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "tee skill-check-skills.txt"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/skill-validation.yml",
          "locator": "jobs.validate.steps[2] (Run skill-validator check)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "typeof item.user?.login !== string"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-failure-scan.lock.yml",
          "locator": "jobs.agent.steps[24] (Write MCP Scripts Tool Files)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "vally lint --eval-spec $spec --strict ${grader_args[@]}"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/ci-eval.yml",
          "locator": "jobs.eval.steps[9] (Lint the selected spec(s))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    }
  ]
}