Static analysis
5 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
mypy |
Type checking | mypy --num-workers=4 homeassistant packages/pylint-home-assistantmypy --num-workers=4 $(printf homeassistant/components/%s ${INTEGRATIONS_GLOB}) |
ci | .github/workflows/ci.yaml mypy.ini |
pylint |
Linting | pylint --jobs 0 --ignore-missing-annotations=y homeassistantpylint --ignore-missing-annotations=y $(printf homeassistant/components/%s $...pylint --jobs 0 tests packages/pytest-homeassistant/pytest_homeassistant |
ci | .github/workflows/ci.yaml pyproject.toml |
ruff-check |
Linting | pre-commit hook ruff-check |
pre-commit | .pre-commit-config.yaml pyproject.toml homeassistant/components/mvglive/ruff.toml packages/hassfest/ruff.toml |
zizmor |
CI workflow linting | pre-commit hook zizmor |
pre-commit | .pre-commit-config.yaml |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
playwright |
End-to-end browser tests | playwright test |
ci | .github/workflows/e2e-tests.yml tests/e2e/playwright.config.ts |
pytest |
Unit and integration tests | pytest -c packages/hassfest/pyproject.toml packages/hassfest/testspytest -qq --timeout=9 --durations=0 --durations-min=1 --numprocesses logical...pytest -qq --timeout=20 --numprocesses logical --dist=loadfile --snapshot-det... |
ci | .github/workflows/ci.yaml pyproject.toml packages/pytest-homeassistant/tests/standalone/pytest.ini |
Formatting and hygiene
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codespell |
Spelling | pre-commit hook codespell |
pre-commit | .pre-commit-config.yaml |
pre-commit-hooks |
File hygiene | pre-commit hook check-executables-have-shebangspre-commit hook check-json |
pre-commit | .pre-commit-config.yaml |
prettier |
Formatting | pre-commit hook prettier |
pre-commit | .pre-commit-config.yaml .prettierrc.js |
ruff-format |
Formatting | pre-commit hook ruff-format |
pre-commit | .pre-commit-config.yaml |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
dependency-review |
Dependency audit | uses actions/dependency-review-action |
ci | .github/workflows/ci.yaml |
17 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
bash ${RUNNER_TEMP}/gh-aw/actions/audit_pre_agent_workspace.shbash ${RUNNER_TEMP}/gh-aw/actions/check_oauth_tokens.shbash ${RUNNER_TEMP}/gh-aw/actions/check_otlp_default_credentials.shbuild packages/pytest-homeassistant --outdir distcosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp htt...pre-commit hook no-commit-to-branchpre-commit hook yamllintrequirements_test.txtrequirements_test_pre_commit.txt zizmor --pedantic --collect=all --strict-collection --no-exit-codes --no-progress --...script.check_requirements --pr-number ${PR_NUMBER} --head-sha ${HEAD_SHA} --diff deterministic/pr.diff --output deter...script.licenses check licenses-${PYTHON_VERSION}.jsonscript.split_tests --cache pytest_test_counts.json ${TEST_GROUP_COUNT} teststee pytest-${PYTHON_VERSION}-${TEST_GROUP}.txttee pytest-${PYTHON_VERSION}-${mariadb}.txttee pytest-${PYTHON_VERSION}-${postgresql}.txttee pytest-${PYTHON_VERSION}-sqlite-${EXPECTED_SQLITE_VERSION}.txtxmllint --format junit.xml > junit.xml-tmp
Review prompts
most discussed first