Static analysis
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
actionlint |
CI workflow linting | actionlint |
ci | .github/workflows/actionlint.yml |
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
zizmor |
CI workflow linting | zizmor --format sarif . > results.sarif |
ci | .github/workflows/actionlint.yml |
22 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
base64 --decode >${RUNNER_TEMP:?}/check_template.rbbase64 --decode >${RUNNER_TEMP}/check-issues/templates/${repo//\//-}-${template_path##*/}bash .github/scripts/check-licenses.shbrewtest /opt/homebrew/bin/hello --versionbrewtest /usr/bin/env HOMEBREW_NO_SUDO=1 /opt/homebrew/bin/brew install --force-bottle hellodone <${RUNNER_TEMP:?}/check-issues/incomplete-template-comment-idsdone <${RUNNER_TEMP:?}/check-prs/incomplete-template-comment-idsdone <${RUNNER_TEMP:?}/check-prs/missing-description-comment-idsread -ra test_flags <<< $TEST_FLAGSruby ${RUNNER_TEMP:?}/check_template.rb issue ${RUNNER_TEMP}/check-issues/body ${RUNNER_TEMP}/check-issues/templates ...ruby ${RUNNER_TEMP:?}/check_template.rb pull-request ${RUNNER_TEMP}/check-prs/body ${RUNNER_TEMP}/check-prs/template ...ruby ${RUNNER_TEMP}/check_template.rb pull-request-description ${RUNNER_TEMP}/check-prs/body ${RUNNER_TEMP}/check-prs...security create-keychain -p ${TEMPORARY_KEYCHAIN_PASSWORD} ${TEMPORARY_KEYCHAIN_PATH}security delete-keychain ${RUNNER_TEMP}/${TEMPORARY_KEYCHAIN_FILE}security import ${RUNNER_TEMP}/${TEMPORARY_CERTIFICATE_FILE} -k ${RUNNER_TEMP}/${TEMPORARY_KEYCHAIN_FILE} -P ${PKG_AP...security list-keychain -d user -s ${RUNNER_TEMP}/${TEMPORARY_KEYCHAIN_FILE}security set-keychain-settings -l -u -t 21600 ${TEMPORARY_KEYCHAIN_PATH}security unlock-keychain -p ${TEMPORARY_KEYCHAIN_PASSWORD} ${TEMPORARY_KEYCHAIN_PATH}sysadminctl -addUser brewtest -password $(uuidgen) -shell /bin/bashtypeset -A push_hashtypeset -A tag_hashvale docs/
Review prompts
most discussed first