Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
biomeconfigured, not run |
Linting | package.json biome.json |
||
gitleaksconfigured, not run |
Secret scanning | .gitleaks.toml |
Testing
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | test (shard: 2) |
ci | .github/workflows/test.yml |
node-test |
Unit and integration tests | node --test .claude/skills/pr-watch/pr-digest.test.mjs .claude/skills/pr-watc... |
ci | .github/workflows/test.yml |
vitestconfigured, not run |
Unit and integration tests | apps/desktop/vitest.config.ts apps/web/vitest.config.mts packages/api/vitest.config.ts packages/cli/vitest.config.ts |
29 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
codesign --verify --deep --strict --verbose=2 $1continuedodoneelsehead -n 1)lint-stagedmerge-base $local_oid $remote_default_ref 2>/dev/null)node --experimental-strip-types apps/desktop/src/update-feed-cli.ts --should-replace $next_feednode --experimental-strip-types apps/desktop/src/update-feed-cli.ts --should-replace $next_feed $current_feednode --experimental-strip-types apps/desktop/src/update-feed-cli.ts dist $TAGnode docs/scripts/build-changelog.mjsremote show $remote_name 2>/dev/nullrev-list --count $log_opts 2>/dev/null)secrets.UPSTASH_REDIS_TOKEN }} -e UPSTASH_REDIS_URL=$EXPR -e UPSTASH_REDIS_TOKEN=$EXPR -e REDIS_URL=$EXPR ...secrets.UPSTASH_REDIS_URL }} -e REDIS_HTTP_TOKEN=${{ secrets.REDIS_HTTP_TOKENsecurity create-keychain -p $keychain_password $keychain_pathsecurity delete-keychain $RUNNER_TEMP/desktop-signing.keychain-dbsecurity import $certificate_path -k $keychain_path -P $MAC_CSC_KEY_PASSWORD -T /usr/bin/codesign -T /usr/bin/product...security list-keychains -d user -s $keychain_path $HOME/Library/Keychains/login.keychain-dbsecurity set-key-partition-list -S apple-tool:,apple: -s -k $keychain_password $keychain_path > /dev/nullsecurity set-keychain-settings -lut 21600 $keychain_pathsecurity unlock-keychain -p $keychain_password $keychain_pathsymbolic-ref refs/remotes/$remote_name/HEAD 2>/dev/nullturbo lintturbo run test --filter=./apps/web -- --runultracite checkverify_app $appwhile read -r local_ref local_oid remote_ref remote_oid
Review prompts
most discussed first