{ "repository": "elie222/inbox-zero", "ref": "1ab004f03c34cc2324f9f78b1e77f1af807ad931", "methods": [ { "slug": "formal", "title": "Formal verification and model checking" }, { "slug": "static_analysis", "title": "Static analysis" }, { "slug": "testing", "title": "Testing" }, { "slug": "formatting", "title": "Formatting and hygiene" }, { "slug": "supply_chain", "title": "Supply chain" }, { "slug": "unclassified", "title": "Unclassified" } ], "verifications": [ { "tool": "biome", "method": "static_analysis", "commands": [], "triggers": [], "evidence": [ { "path": "package.json", "locator": "devDependencies: @biomejs/biome" }, { "path": "biome.json", "locator": "config file" } ], "upstream": "https://github.com/biomejs/biome", "docs": null, "exit_codes": {}, "autofix": true, "declared_only": true }, { "tool": "gitleaks", "method": "static_analysis", "commands": [], "triggers": [], "evidence": [ { "path": ".gitleaks.toml", "locator": "config file" } ], "upstream": "https://github.com/gitleaks/gitleaks", "docs": null, "exit_codes": {}, "autofix": false, "declared_only": true }, { "tool": "ci-matrix", "method": "testing", "commands": [ "test (shard: 2)" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/test.yml", "locator": "jobs.test.strategy.matrix" } ], "upstream": "https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations", "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": "node-test", "method": "testing", "commands": [ "node --test .claude/skills/pr-watch/pr-digest.test.mjs .claude/skills/pr-watch/pr-screenshots.test.mjs" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/test.yml", "locator": "jobs.test.steps[4] (Check PR monitor failure reporting)" } ], "upstream": "https://github.com/nodejs/node", "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": "vitest", "method": "testing", "commands": [], "triggers": [], "evidence": [ { "path": "apps/desktop/vitest.config.ts", "locator": "config file" }, { "path": "apps/web/vitest.config.mts", "locator": "config file" }, { "path": "packages/api/vitest.config.ts", "locator": "config file" }, { "path": "packages/cli/vitest.config.ts", "locator": "config file" } ], "upstream": "https://github.com/vitest-dev/vitest", "docs": null, "exit_codes": {}, "autofix": false, "declared_only": true }, { "tool": null, "method": "unclassified", "commands": [ "codesign --verify --deep --strict --verbose=2 $1" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[11] (Verify macOS signature and notarization)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "continue" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 28" }, { "path": ".husky/pre-push", "locator": "line 45" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "do" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 26" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "done" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 53" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "else" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 17" }, { "path": ".husky/pre-push", "locator": "line 36" }, { "path": ".husky/pre-push", "locator": "line 39" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "head -n 1)" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 12" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "lint-staged" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-commit", "locator": "line 1" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "merge-base $local_oid $remote_default_ref 2>/dev/null)" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 32" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "node --experimental-strip-types apps/desktop/src/update-feed-cli.ts --should-replace $next_feed" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.publish.steps[3] (Publish GitHub Release)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "node --experimental-strip-types apps/desktop/src/update-feed-cli.ts --should-replace $next_feed $current_feed" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.publish.steps[3] (Publish GitHub Release)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "node --experimental-strip-types apps/desktop/src/update-feed-cli.ts dist $TAG" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.publish.steps[3] (Publish GitHub Release)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "node docs/scripts/build-changelog.mjs" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/build-changelog.yml", "locator": "jobs.validate.steps[1] (Build changelog.mdx from entries)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "remote show $remote_name 2>/dev/null" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 12" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "rev-list --count $log_opts 2>/dev/null)" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 43" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "secrets.UPSTASH_REDIS_TOKEN }} -e UPSTASH_REDIS_URL=$EXPR -e UPSTASH_REDIS_TOKEN=$EXPR -e REDIS_URL=$EXPR -e GOOGLE_CLIENT_ID=$EXPR -e GOOGLE_CLIENT_SECRET=$EXPR -e GOOGLE_PUBSUB_TOPIC_NAME=$EXPR -e GOOGLE_PUBSUB_VERIFICATION_TOKEN=$EXPR -e MICROSOFT_CLIENT_ID=$EXPR -e MICROSOFT_CLIENT_SECRET=$EXPR -e MICROSOFT_TENANT_ID=$EXPR -e MICROSOFT_WEBHOOK_CLIENT_STATE=$EXPR -e DEFAULT_LLMS=${{ secrets.DEFAULT_LLMS" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/e2e-flows.yml", "locator": "jobs.e2e-flows.steps[8] (Start app with Docker)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "secrets.UPSTASH_REDIS_URL }} -e REDIS_HTTP_TOKEN=${{ secrets.REDIS_HTTP_TOKEN" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/e2e-flows.yml", "locator": "jobs.e2e-flows.steps[8] (Start app with Docker)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security create-keychain -p $keychain_password $keychain_path" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security delete-keychain $RUNNER_TEMP/desktop-signing.keychain-db" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[13] (Clean up macOS signing files)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security import $certificate_path -k $keychain_path -P $MAC_CSC_KEY_PASSWORD -T /usr/bin/codesign -T /usr/bin/productbuild" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security list-keychains -d user -s $keychain_path $HOME/Library/Keychains/login.keychain-db" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security set-key-partition-list -S apple-tool:,apple: -s -k $keychain_password $keychain_path > /dev/null" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security set-keychain-settings -lut 21600 $keychain_path" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "security unlock-keychain -p $keychain_password $keychain_path" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[7] (Import macOS signing certificate)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "symbolic-ref refs/remotes/$remote_name/HEAD 2>/dev/null" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 9" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "turbo lint" ], "triggers": [ "local" ], "evidence": [ { "path": "package.json", "locator": "scripts.lint" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "turbo run test --filter=./apps/web -- --run" ], "triggers": [ "ci", "local" ], "evidence": [ { "path": ".github/workflows/test.yml", "locator": "jobs.test.steps[12] (Run tests)" }, { "path": "package.json", "locator": "scripts.test" }, { "path": ".github/workflows/test.yml", "locator": "jobs.test.steps[13] (Run package tests)" }, { "path": "package.json", "locator": "scripts.test:packages" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "ultracite check" ], "triggers": [ "ci", "local" ], "evidence": [ { "path": ".github/workflows/test.yml", "locator": "jobs.test.steps[5] (Run lint check)" }, { "path": "package.json", "locator": "scripts.check" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "verify_app $app" ], "triggers": [ "ci" ], "evidence": [ { "path": ".github/workflows/desktop-release.yml", "locator": "jobs.package.steps[11] (Verify macOS signature and notarization)" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false }, { "tool": null, "method": "unclassified", "commands": [ "while read -r local_ref local_oid remote_ref remote_oid" ], "triggers": [ "pre_commit" ], "evidence": [ { "path": ".husky/pre-push", "locator": "line 25" } ], "upstream": null, "docs": null, "exit_codes": {}, "autofix": false, "declared_only": false } ] }