Static analysis
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
semgrep |
Security scanning | semgrep test .semgrepsemgrep scan --config .semgrep --metrics=off --exclude .semgrep --json --outp...semgrep scan --config .semgrep --metrics=off --exclude .semgrep --sarif --out... |
ci | .github/workflows/ci.yml .github/workflows/security-scan.yml |
zizmor |
CI workflow linting | zizmor --format github .github |
ci | .github/workflows/ci.yml |
eslintconfigured, not run |
Linting | apps/console/eslint.config.js |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 1) |
ci | .github/workflows/codeql-analysis.yml |
playwrightconfigured, not run |
End-to-end browser tests | apps/console/playwright.config.ts |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
prettier |
Formatting | prettier --write docker-compose.yml docker-compose.override.ymlprettier --check docker-compose.yml docker-compose.override.yml |
local | package.json apps/console/prettier.config.js |
21 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
bash .semgrep/prove.shbun run e2e -- $EXPRbun run lint:contentbun run lint:native-dialogsbun run lint:removed-blog-linksbun run lint:sdk-pinsbun run lint:snippetsbun run lint:types --against HEAD^1bun run test:unitcommander test commander.yamlentry.type = entry.type.replace(/-/g, _)hurl --test --variable base_url=http://localhost:$EXPR --error-format long --report-junit artifacts/hurl/report.xml -...mise run test $EXPR --headless --debug-output=$PWD/artifacts/maestro --flatten-debug-output --format=junit --output=$...mise run test --debug-output=$PWD/artifacts/maestro --flatten-debug-output --format=junit --output=$PWD/artifacts/mae...node .semgrep/baseline.js check semgrep.jsonreturn `${typeof parsed}`return `[${typeof firstItem}] (${parsed.length} items)`typeof branchName !== stringtypeof method !== string) {typeof name !== string) {typeof req !== object) {
Review prompts
most discussed first