Static analysis
6 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
bandit |
Security scanning | bandit -b bandit.json -r celery/ |
ci, local | .github/workflows/python-package.yml tox.ini |
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
flake8 |
Linting | pre-commit hook flake8 |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml |
mypy |
Type checking | pre-commit hook mypymypy --config-file pyproject.toml |
pre-commit, ci, local | .github/workflows/linter.yml .pre-commit-config.yaml tox.ini pyproject.toml |
semgrep |
Security scanning | semgrep ci |
ci | .github/workflows/semgrep.yml |
sphinx |
Docs build | sphinx-build -j2 -b apicheck -d {envtmpdir}/doctrees docs docs/_build/apichecksphinx-build -j2 -b configcheck -d {envtmpdir}/doctrees docs docs/_build/conf...sphinx-build -j2 -b linkcheck -d {envtmpdir}/doctrees docs docs/_build/linkcheck |
ci, local | .github/workflows/python-package.yml tox.ini |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 1)Unit (python-version: 6, os: 2) |
ci | .github/workflows/codeql-analysis.yml .github/workflows/python-package.yml |
pytest |
Unit and integration tests | pytest -xsvv {env:TEST_PATH:t/integration} {posargs}pytest -xsvv {env:TEST_PATH:t/smoke} --reruns 5 --reruns-delay 10 {posargs} |
ci, local | .github/workflows/python-package.yml tox.ini pyproject.toml |
Formatting and hygiene
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codespell |
Spelling | pre-commit hook codespell |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml pyproject.toml |
isort |
Formatting | pre-commit hook isort |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml |
pre-commit-hooks |
File hygiene | pre-commit hook check-merge-conflictpre-commit hook check-tomlpre-commit hook check-json |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml |
12 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
coverage reportcoverage run --source=celery -m pytest -vv --maxfail=10 --capture=no -v --junitxml=junit.xml -o junit_family=legacy {...coverage xmlcut -f2do sleep 1look for any errors in the above output " "or in $(BUILDDIR)/linkcheck/output.txt."pre-commit hook pyupgradepre-commit hook yesqapre-commit {posargs:run --all-files --show-diff-on-failure}python ./changelog_formatter.py --clipboardpython setup.py testtimeout 60 sh -c 'until docker logs $$(docker compose -f docker/docker-compose.yml ps -q docs) 2>&1
Review prompts
most discussed first