Static analysis
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
mypy |
Type checking | mypy lib/mypy --config-file pyproject.toml "$@"' -- |
pre-commit, ci | .github/workflows/type-checker.yml .pre-commit-config.yaml pyproject.toml |
ruff-check |
Linting | ruff check lib/ruff check --config pyproject.toml "$@"' -- |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml pyproject.toml |
banditconfigured, not run |
Security scanning | pyproject.toml |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (include: 2)tests-matrix (python-version: 4, group: 8)type-checker-matrix (python-version: 4) |
ci | .github/workflows/codeql.yml .github/workflows/tests.yml .github/workflows/type-checker.yml .github/workflows/update-test-durations.yml |
pytest |
Unit and integration tests | pytest lib/cli/tests/test_create_crew.py -k agents_md -p no:randomly -n 0pytest lib/devtools/tests/test_agents_md_eval.py -n 0pytest -vv --splits 8 --group $EXPR --randomly-seed=$EXPR $DURATIONS_ARG --du... |
ci | .github/workflows/agents-md.yml .github/workflows/tests.yml .github/workflows/update-test-durations.yml pyproject.toml |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ruff-format |
Formatting | ruff format --check lib/ruff format --config pyproject.toml "$@"' -- |
pre-commit, ci | .github/workflows/linter.yml .pre-commit-config.yaml |
Supply chain
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
pip-audit |
Dependency audit | pip-audit ${pip_audit_args[@]}pip-audit --skip-editable --ignore-vuln PYSEC-2024-277 --ignore-vuln PYSEC-20... |
pre-commit, ci | .github/workflows/vulnerability-scan.yml .pre-commit-config.yaml pyproject.toml |
uv-lock |
Lockfile consistency | pre-commit hook uv-lock |
pre-commit | .pre-commit-config.yaml |
10 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
bash -c 'case "$OSTYPE" in msys*docs = Path(docs)esacpre-commit hook commitizenpre-commit hook commitizen-branchpython src/crewai_tools/generate_tool_specs.pyraise SystemExit(fdocs.json version labels do not match directories: {missing})spec = json.loads(spec_path.read_text())spec_path = docs / docs.jsonwith open(pip-audit-report.json) as f:
Review prompts
most discussed first