Static analysis
7 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
bandit |
Security scanning | bandit -r --severity-level medium --confidence-level medium -f html -o bandit... |
ci | .github/workflows/python.yml |
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
gitleaks |
Secret scanning | pre-commit hook gitleaks |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml .gitleaks.toml |
pyright |
Type checking | pyright --statspyright |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml .github/workflows/python.yml src/ecs-mcp-server/pyrightconfig.json |
ruff-check |
Linting | pre-commit hook ruff-checkruff check . |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml .github/workflows/python.yml .ruff.toml |
semgrep |
Security scanning | semgrep scan --config auto --sarif-output semgrep.sarif.json --no-error --dry... |
ci | .github/workflows/semgrep.yml |
tsc |
Type checking | tsc |
local | docusaurus/package.json |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (include: 2) |
ci | .github/workflows/codeql.yml |
pytest |
Unit and integration tests | pytest --cov --cov-branch --cov-report=term-missingpytest --cov --cov-branch --cov-report=term-missing --cov-report=xml:$EXPR-co... |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml .github/workflows/python.yml |
Formatting and hygiene
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
pre-commit-hooks |
File hygiene | pre-commit hook check-added-large-filespre-commit hook check-astpre-commit hook check-case-conflict |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml |
ruff-format |
Formatting | pre-commit hook ruff-formatruff format . |
pre-commit, ci | .github/workflows/pre-commit.yml .pre-commit-config.yaml .github/workflows/python.yml |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
dependency-review |
Dependency audit | uses actions/dependency-review-action |
ci | .github/workflows/dependency-review-action.yml |
22 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
bash -c 'for x in "$@"detect-secrets scan --baseline .secrets.baselinedo (cd `dirname $x`do if test -f $fdonepre-commit hook check-builtin-literalspre-commit hook check-illegal-windows-namespre-commit hook check-shebang-scripts-are-executablepre-commit hook check-symlinkspre-commit hook check-vcs-permalinkspre-commit hook check-xmlpre-commit hook destroyed-symlinkspre-commit hook detect-aws-credentialspre-commit hook detect-secretspre-commit hook forbid-new-submodulespre-commit hook forbid-submodulespre-commit hook no-commit-to-branchpre-commit hook pretty-format-jsonpwdpython scripts/verify_package_name.py src/$EXPRpython scripts/verify_tool_names.py src/$EXPRsyft scan $EXPR/image.tar -o json > $EXPR/syft-results.json
Review prompts
most discussed first