chef/chef

The scan found no tool the scanner recognises.

43 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• New-Item -ItemType Directory -Force -Path $env:GITHUB_WORKSPACE\tmp\tm-creds
• New-Item -ItemType Directory -Force -Path $env:TEMP\test_cookbook_md5\recipes
• New-Item -ItemType Directory -Force -Path $env:TEMP\test_cookbook_sha256\recipes
• New-Item -ItemType Directory -Force -Path $winKeyDir
• New-Item -ItemType Directory -Force -Path C:\temp
• Remove-Item -Path $env:TEMP\test_cookbook_md5 -Recurse -Force -ErrorAction SilentlyContinue
• Remove-Item -Path $env:TEMP\test_cookbook_sha256 -Recurse -Force -ErrorAction SilentlyContinue
• Remove-Item -Path chef-infra-client-latest.hart -Force -ErrorAction SilentlyContinue
• Set-Content -Path $env:TEMP\test_cookbook_md5\recipes\default.rb
• Set-Content -Path $env:TEMP\test_cookbook_sha256\recipes\default.rb
• Write-Host *** ALL TESTS PASSED: FIPS mode is correctly enforced ***
• Write-Host *** FAIL: SHA256 failed (exit code: $exitCodeSHA256) - FIPS blocking approved algorithm ***
• Write-Host *** TESTS FAILED ***
• Write-Host --- Test 1: MD5 Digest (should FAIL in FIPS mode) ---
• Write-Host --- Test 2: SHA256 Digest (should SUCCEED in FIPS mode) ---
• Write-Host === Cleaning up test artifacts ===
• Write-Host FIPS Verification Test Results
• Write-Host Starting FIPS Verification Tests
• Write-Host Test 1 - MD5 Result:
• Write-Host Test 2 - SHA256 Result:
• Write-Host ✓ Copied to chef-infra-client-latest.hart
• bundle exec cookstyle --chefstyle -c .rubocop.yml
• bundle exec rspec spec/functional/resource/chocolatey_package_spec.rb
• bundle exec rspec spec/functional/resource/macos_userdefaults_spec.rb
• bundle exec rspec spec/integration/target_mode/target_mode_run_spec.rb --format doc
• bundle exec rspec spec/integration/target_mode/transport_spec.rb --format doc
• bundle exec tasks/bin/run_external_test chef/berkshelf main rake
• bundle exec tasks/bin/run_external_test chef/chef-zero main rake pedant
• bundle exec tasks/bin/run_external_test chef/cheffish main rake spec
• bundle exec tasks/bin/run_external_test chef/chefspec main rake
• deb [check-valid-until=no] https://snapshot.debian.org/archive/debian-security/20260901T000000Z bullseye-security main
• deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/20260901T000000Z bullseye main
• deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/20260901T000000Z bullseye-updates main
• file /tmp/test_md5 do
• file /tmp/test_sha256 do
• file /tmp/test_sha512 do
• file C:\temp\test_md5 do
• file C:\temp\test_sha256 do
• key_files = [/tmp/id_test]
• kitchen verify end-to-end-$EXPR

full scan as JSON

• Limit token permissionsAlways specify the minimum required permissions for the GITHUB_TOKEN in GitHub Actions workflows to enhance security. By default, the GIT...

  chef/chef Security Yaml cloud-infra 2025-07-01

  copy raw open
• Fail gracefully alwaysEnsure code handles errors robustly by using protective patterns that prevent resource leaks, provide clear diagnostics, and degrade grac...

  chef/chef Error Handling Ruby cloud-infra 2025-06-02

  copy raw open
• Extract and organize methodsBreak down large, complex methods into smaller, focused methods with clear names that describe their purpose. This improves code readabil...

  chef/chef Code Style Ruby cloud-infra 2023-11-15

  copy raw open
• Document with examplesAlways include comprehensive documentation with clear examples for properties, methods, and code patterns. Documentation should include: ...

  chef/chef Documentation Ruby cloud-infra 2025-02-11

  copy raw open
• Consistent descriptive naming patternsUse clear, descriptive names that follow consistent patterns across the codebase. For methods and properties: 1. Use intention-revealing ...

  chef/chef Naming Conventions Ruby cloud-infra 2024-08-27

  copy raw open
• Never commit secretsPrivate cryptographic keys, certificates with private keys, and other secrets must never be committed to source code repositories, even i...

  chef/chef Security Other cloud-infra 2025-06-23

  copy raw open
• Choose semantic algorithmsSelect algorithms and data operations that match the semantic intent of your code rather than using convenient but potentially problemati...

  chef/chef Algorithms Ruby cloud-infra 2025-05-20

  copy raw open
• Externalize configuration valuesAvoid hardcoding configuration values directly in scripts, especially for values that might change between environments or contain sensit...

  chef/chef Configurations Shell cloud-infra 2025-01-06

  copy raw open
• Memoize expensive operationsCache results of expensive operations, especially shell commands and external queries, to avoid redundant executions. Use Ruby's idiomati...

  chef/chef Performance Optimization Ruby cloud-infra 2023-10-27

  copy raw open
• Keep actions versions currentAlways use the latest stable versions of GitHub Actions components in CI/CD workflows to avoid deprecated features, security vulnerabilit...

  chef/chef CI/CD Yaml cloud-infra 2023-10-04

  copy raw open
• Prefer guard clausesUse guard clauses with early returns for null checking instead of wrapping code in conditional blocks. This improves readability by reduc...

  chef/chef Null Handling Ruby cloud-infra 2025-01-06

  copy raw open
• Explicit configuration over implicitAlways define explicit configuration defaults rather than relying on implicit behavior or autovivification. Configuration values should: ...

  chef/chef Configurations Ruby cloud-infra 2024-12-20

  copy raw open
• Secure credential managementWhen handling passwords, certificates, or keys in your code, implement secure encryption and storage mechanisms to prevent exposure of se...

  chef/chef Security Ruby cloud-infra 2024-10-29

  copy raw open
• Standardize installation directory pathsMaintain consistent and separate installation paths for different build types to prevent conflicts and improve system organization. Use `...

  chef/chef Configurations Other cloud-infra 2025-01-24

  copy raw open
• Document configuration decisionsAdd clear comments explaining the rationale behind configuration decisions, especially for workarounds, compatibility fixes, or environme...

  chef/chef Configurations Yaml cloud-infra 2025-01-14

  copy raw open
• Secure network operationsWhen performing network operations, prioritize security and configurability to ensure robustness across different environments. This incl...

  chef/chef Networking Ruby cloud-infra 2023-10-25

  copy raw open
• Document configuration completelyAlways provide complete documentation for configuration options, including defaults, override methods, and security implications. When do...

  chef/chef Configurations Markdown cloud-infra 2023-09-27

  copy raw open
• Use strict test doublesAlways use strict test doubles (instance_double, class_double) instead of basic doubles or OpenStruct in tests. Strict doubles provide co...

  chef/chef Testing Ruby cloud-infra 2021-08-26

  copy raw open
• Standardize shell flagsAlways use `set -eou pipefail` at the beginning of shell scripts to ensure consistent error handling and behavior across the codebase. Th...

  chef/chef Code Style Shell cloud-infra 2025-06-12

  copy raw open
• Remove commented codeAvoid leaving commented-out code in the codebase. Version control systems already track the history of changes, making commented-out code...

  chef/chef Code Style Yaml cloud-infra 2023-04-19

  copy raw open
• Fail fast principleDesign CI/CD pipelines to fail quickly and visibly rather than masking errors through excessive retries or complex conditions. When a bui...

  chef/chef CI/CD Other cloud-infra 2023-02-02

  copy raw open
• Clear abstraction boundariesDesign APIs with clear and consistent abstraction boundaries to maintain\ \ code quality and prevent interface leakage between different ...

  chef/chef API Ruby cloud-infra 2022-08-02

  copy raw open
• Standardize bash error-handlingAlways use `set -eou pipefail` at the beginning of bash scripts to ensure consistent and robust error handling. This combination ensures ...

  chef/chef Error Handling Shell cloud-infra 2025-06-12

  copy raw open
• Structure CI/CD scriptsImprove CI/CD shell scripts' readability and maintainability by using appropriate shell script patterns. Use heredocs for multiline outpu...

  chef/chef CI/CD Shell cloud-infra 2023-01-20

  copy raw open
• Verify automated documentationWhen using automated tools to generate documentation, always verify the output for accuracy and document any additional manual steps requ...

  chef/chef Documentation Markdown cloud-infra 2023-01-09

  copy raw open
• Log message qualityEnsure all log messages are consistent in formatting and clear in purpose. Complete sentences in logs should end with proper punctuation ...

  chef/chef Logging Markdown cloud-infra 2021-08-27

  copy raw open
• Update security-critical dependenciesRegularly audit and update third-party libraries and dependencies to address known security vulnerabilities. Pay special attention to com...

  chef/chef Security Markdown cloud-infra 2021-08-27

  copy raw open