Static analysis
6 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
biome |
Linting | biome check --error-on-warnings core harness scripts plugins tests |
ci, local | .github/workflows/preview-release.yml package.json biome.json |
gitleaks |
Secret scanning | gitleaks versiongitleaks git --config=.gitleaks.toml --baseline-path=.gitleaks-baseline.json ... |
ci | .github/workflows/security-scanners.yml .gitleaks.toml |
semgrep |
Security scanning | semgrep scan --oss-only --metrics=off --config=p/typescript --severity=ERROR ... |
ci | .github/workflows/security-scanners.yml |
shellcheck |
Linting | shellcheck scripts/install.sh |
ci | .github/workflows/preview-release.yml .github/workflows/release.yml |
tsc |
Type checking | tsc --noEmit -p tsconfig.jsontsc --noEmit -p tsconfig.tests.jsontsc --noEmit -p tsconfig.adapters.json |
ci, local | .github/workflows/preview-release.yml package.json |
eslintconfigured, not run |
Linting | package.json tests/fixtures/v05-mr9-sensor-fire/failing-linter/eslint.config.js tests/fixtures/v05-mr9-sensor-fire/passing-typescript/eslint.config.js |
57 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
Add-Content -LiteralPath $env:AIDLC_TEST_GH_MARKER `Add-Type -AssemblyName System.IO.Compression.FileSystemCHECK_WORK_DEADLINE - $(date +%s) ))Format-Table -AutoSizeStart-Sleep -Milliseconds 100Write-Output git: $((Get-Command git -CommandType Application).Source)ai-pr-review test -r $destinationaws_secret_access_keybash .github/scripts/prepare-live-runtime.sh provebash .github/scripts/prepare-live-runtime.sh prove $EXPRbash scripts/ci-check-budget.sh bun install --frozen-lockfilebash scripts/ci-check-budget.sh bun run checkbash scripts/ci-check-budget.sh bun scripts/ci-changelog-guard.ts $CHANGELOG_BASEbash scripts/ci-check-budget.sh bun scripts/package.tsbash scripts/ci-check-budget.sh bun tests/gen-coverage-registry.ts --check --base HEAD^1bash scripts/ci-check-budget.sh shellcheck scripts/install.shbash tests/run-tests.sh --debug -P 8 --no-llm ${args[@]} --file-timeout 7200 --run-timeout $run_budget > $capture/run...bash tests/run-tests.sh --debug -P 8 --no-llm ${args[@]} > $capture/run.log 2>&1 &bash tests/run-tests.sh --debug -P 8 --production-guards --unit --integration --no-llm --file-timeout 7200 --run-time...bash tests/run-tests.sh --debug -P 8 --production-guards --unit --integration --no-llm --file-timeout 7200 --run-time...bash tests/run-tests.sh --debug -P 8 --unit --integration --e2e --no-llm --isolated-e2e --file-timeout 7200 --run-tim...bash tests/run-tests.sh --debug -P 8 --unit --no-llm --file-timeout 7200 --run-timeout 14400 --filter $TEST_FILTER > ...bun audit --json > bun-audit.json 2> bun-audit.stderrbun release-tools/scripts/verify-release.ts candidate --directory build/release --tag $RELEASE_TAG --source-digest $A...bun scripts/ci-preview-test-report.ts $RUNNER_TEMP/full-suite-evidence $RUNNER_TEMP/full-suite-jobs.json $reportbun scripts/ci-preview-test-report.ts --stage-notes $plan $RUNNER_TEMP/preview-test-report/preview-test-report.mdbun scripts/ci-sanitize-logs.ts tests/logsbun scripts/ci-test-weights.ts report $TEST_TIER tmp/ci-deterministic/stamp.txtbun scripts/docs-rewrite-links.tsbun scripts/package.tsbun scripts/package.ts --checkbun scripts/release-promotion.ts verify --tag $RELEASE_TAG --repository $GITHUB_REPOSITORYbun scripts/verify-release.ts candidate --directory build/release --tag $RELEASE_TAG --source-digest $AUTHORIZED_SHAbun test tests/unit/t238-build-binaries.test.tsbun test tests/unit/t244-install-management.test.ts -t t244 Windows and completion release surfacesbun tests/reconcile-tests.ts prepare --profile tests/native-terminal-profile.json --cohort nightly-$EXPR-$EXPR --repo...bun tests/run-tests.ts --debug -P 4 --smoke --no-llm --file-timeout 7200 --run-timeout 14400 --filter ^(?!(smoke-)?t0...bun tests/run-tests.ts --debug -P 4 --unit --no-llm --file-timeout 7200 --run-timeout 14400 --filter '^(t07-hook-audi...canonical_pr > /tmp/latest-pr.jsoncase $TEST_TIER in
Review prompts
most discussed first