Static analysis
5 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
cargo-check |
Type checking | cargo check --workspace --lockedcargo check --workspace --all-targets --all-features --lockedcargo check --target aarch64-unknown-linux-ohos -p codewhale-tui -p codewhale... |
ci | .github/workflows/ci.yml .github/workflows/ohos.yml .github/workflows/release-parity.yml |
clippy |
Linting | cargo clippy --workspace --all-targets --all-features --locked -- -D warnings... |
ci | .github/workflows/ci.yml .github/workflows/release-parity.yml |
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
eslint |
Linting | eslint . |
ci, local | .github/workflows/release-candidate.yml web/package.json .github/workflows/web.yml web/eslint.config.mjs |
tsc |
Type checking | tsc --noEmittsc -p tsconfig.json --noEmit |
ci, local | .github/workflows/release-candidate.yml web/package.json .github/workflows/telemetry-ingest.yml telemetry-ingest/package.json |
Testing
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | extension-host-runtimes (os: 3)analyze (include: 4) |
ci | .github/workflows/ci.yml .github/workflows/codeql.yml |
node-test |
Unit and integration tests | node --test .github/scripts/d8-executable.test.jsnode --test scripts/release/assemble-release-assets.test.jsnode --test scripts/release/ensure-release-assets-absent.test.js |
ci, local | .github/workflows/ci.yml .github/workflows/release-artifacts.yml .github/workflows/release-candidate.yml web/package.json |
unittest |
Unit and integration tests | unittest scripts/catalog_models_dev_test.py |
ci | .github/workflows/ci.yml |
vitest |
Unit and integration tests | vitest run |
ci, local | .github/workflows/release-candidate.yml web/package.json .github/workflows/telemetry-ingest.yml telemetry-ingest/package.json |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
rustfmt |
Formatting | cargo fmt --all -- --check |
ci | .github/workflows/ci.yml .github/workflows/release-parity.yml |
Supply chain
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
cargo-audit |
Dependency audit | cargo audit |
ci | .github/workflows/security-audit.yml |
cargo-deny |
Dependency audit | uses EmbarkStudios/cargo-deny-action |
ci | .github/workflows/cargo-deny.yml deny.toml |
npm-audit |
Dependency audit | npm audit --json > $EXPR/npm-audit.json |
ci | .github/workflows/security-audit.yml |
95 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
Add-Type -TypeDefinition @'New-Item -ItemType Directory -Force probebash .github/scripts/agent-task-metadata.test.shbash .github/scripts/update-homebrew-tap.test.shbash packaging/aur/render.test.shbash scripts/check-readme-locales.shbash scripts/preflight.sh --checkbash scripts/release/check-feature-release-notes.test.shbash scripts/release/generate-release-body.test.shbash scripts/release/install-dogfood.test.shbash scripts/release/prepare-release.test.shbash scripts/release/prune-actions-caches.test.shbash scripts/release/require-rc-receipt.test.shbash scripts/release/require-release-tag-checkout.test.shbash scripts/release/validate-crate-publish-order.test.shbash scripts/release/verify-remote-tag.test.shcf workers typesdone < $evidence/required-tests.txtlog --format=%B -n1 $commit)node .github/scripts/release-workflows.test.jsnode marketplace/scripts/check-marketplace.mjsnode marketplace/scripts/check-marketplace.mjs --core corenode repo/scripts/release/assemble-release-assets.js --verify artifactsnode repo/scripts/release/verify-release-inventory.js --draft --asset-dir artifacts --publish ${GITHUB_REPOSITORY} ${...node scripts/audit-dependencies.mjsnode scripts/build-pet.mjs --checknode scripts/check-cloud-facts.mjsnode scripts/check-cloudflare-deploy-env.mjsnode scripts/check-docs.mjsnode scripts/check-facts.mjsnode scripts/check-kv-id.mjsnode scripts/check-locales.mjsnode scripts/compare-deployed-facts.mjs --require-currentnode scripts/derive-install.mjsnode scripts/gt-site.mjs checknode scripts/release/assemble-release-assets.js --verify release-assetsnode scripts/release/fetch-compiled-host-proof.js --repo ${GITHUB_REPOSITORY} --run-id ${QUALIFICATION_RUN} --source-...node scripts/release/verify-release-inventory.js --manifest ${GITHUB_REPOSITORY} ${TAG}node scripts/render-terminal-capture.mjs --checknode scripts/sync-latest-release.mjs
Review prompts
most discussed first