Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
eslint |
Linting | eslint .eslint . --fix |
ci, local | .github/workflows/ci.yml package.json .eslintrc.yml |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 2) |
ci | .github/workflows/codeql.yml |
mocha |
Unit and integration tests | mocha --require test/support/env --reporter spec --check-leaks test/ test/acc...mocha --require test/support/env --reporter tap --check-leaks test/ test/acce... |
local | package.json |
5 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
const latest = execFileSync(npm, [view, name, version], { encoding: utf8 }).trim()const latestMajor = Number(latestParsed[1])const latestParsed = SEMVER.exec(latest)nyc --exclude examples --exclude test --exclude benchmarks --reporter=html --reporter=text npm testnyc --exclude examples --exclude test --exclude benchmarks --reporter=lcovonly --reporter=text npm test
Review prompts
most discussed first