Kong/kong

The scan found no tool the scanner recognises.

15 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• ast-grep scan --format github
• ast-grep test
• bash ./scripts/upgrade-tests/test-upgrade-path.sh -i $EXPR/kong-dev-venv.sh
• else echo all required tools satisfied
• fail $test --title Rule test file/.id mismatch Rule test file .id (%s) does not match rule .id (%s) $test_id $id
• fail $test --title Rule tests insufficient Rule test file must contain at least one valid and one invalid test case
• false
• luacov -c t/phase_checks.luacov
• prove -I. -r t
• prove -I. t/01*/*/00-phase*.t
• pushd ./spec
• readonly CHECKSUM=7fd693b013447582d8befa1695f00d17301c2cff1763cfb0b52191096309dbef
• sha256sum --check --strict <<< ${CHECKSUM} ${FILENAME}
• tail -F servroot/logs/error.log
• tee -a /etc/security/limits.d/kong-ci.conf

full scan as JSON

• Consistent Error PropagationWhen handling failures, choose behavior intentionally: either propagate a real error in a consistent format, or gracefully degrade only f...

  Kong/kong Error Handling Other cloud-infra 2026-05-25

  copy raw open
• Consistent, Actionable LoggingWhen adding/modifying logs, follow these rules: 1) Use the Kong logging API - Prefer `kong.log.` (e.g., `kong.log.err(...)`) over ...

  Kong/kong Logging Other cloud-infra 2025-01-21

  copy raw open
• Nil-Safe Input NormalizationWhen handling optional/null values, normalize and guard them at the boundary so downstream code never has to guess. Apply these rules: 1)...

  Kong/kong Null Handling Other cloud-infra 2025-04-16

  copy raw open
• Concurrency primitive semanticsWhen introducing async work, retries, or batching: 1) Use each concurrency primitive for its intended role - Don’t repurpose a queue as a...

  Kong/kong Concurrency Other cloud-infra 2025-01-21

  copy raw open
• Document Split ContractsWhen implementing algorithmic transformations that clients depend on (especially split/partition functions and any logic that rebuilds/se...

  Kong/kong Algorithms Other cloud-infra 2025-04-16

  copy raw open
• Deterministic isolated testingMake integration/unit tests deterministic, isolated, and robust against async timing and ordering. Checklist - **No ordering dependence:*...

  Kong/kong Testing Other cloud-infra 2025-02-17

  copy raw open
• Hot-Path Performance RulesDefault to performance-aware coding for hot paths (proxy routing, request parsing, metrics/serialization, and request body handling): - *...

  Kong/kong Performance Optimization Other cloud-infra 2025-02-12

  copy raw open
• Semantic Naming RulesAdopt a naming standard where identifiers encode meaning, don’t clash with framework semantics, and don’t obscure behavior. Guidelines: -...

  Kong/kong Naming Conventions Other cloud-infra 2025-04-16

  copy raw open
• Network semantics consistencyWhen implementing HTTP/TCP/WebSocket/networking logic, treat protocol semantics as “correctness-critical”: don’t rely on accidental behav...

  Kong/kong Networking Other cloud-infra 2025-02-11

  copy raw open
• Consistent Early-Exit StyleWhen updating/adding code, prioritize readability and predictable control-flow: - Use early exits (return/goto/continue) for error/invali...

  Kong/kong Code Style Other cloud-infra 2025-01-11

  copy raw open
• Validate Inputs SecurelyTreat runtime-derived values (env vars, request data, rendered attributes) as untrusted unless they’re validated by the framework’s schem...

  Kong/kong Security Other cloud-infra 2025-02-17

  copy raw open
• Cache Consistency RulesWhen implementing caching, make coherence and invalidation explicit and configuration-driven: - If a setting promises immediate consisten...

  Kong/kong Caching Other cloud-infra 2025-01-22

  copy raw open
• API surface compatibilityTreat any change to a public interface (PDK function signatures, plugin config/schema fields, or other externally-consumed API contracts)...

  Kong/kong API Other cloud-infra 2025-01-13

  copy raw open
• Pin and Inline CIHarden CI/CD workflows by (1) pinning external actions/tool versions, (2) minimizing opaque third-party action wrappers when the underlyi...

  Kong/kong CI/CD Yaml cloud-infra 2025-06-18

  copy raw open
• Isolate config stateConfigurable behavior must be isolated per plugin/consumer instance, and derived/internal values must not be injected into the schema-def...

  Kong/kong Configurations Other cloud-infra 2024-11-20

  copy raw open
• YAML Message FoldingWhen writing YAML string fields intended for one-line or sentence-like messages, prefer folded block scalars (`>`) so embedded newlines r...

  Kong/kong Code Style Yaml cloud-infra 2025-09-09

  copy raw open
• Release note formattingWhen updating documentation that is consumed by automated release tooling (such as changelog YAML), verify both the semantic classificati...

  Kong/kong Documentation Yaml cloud-infra 2024-08-12

  copy raw open
• Verify Downloaded ArtifactsAny CI/install workflow that downloads a binary or other external artifact must verify its integrity before use. Apply this standard: - P...

  Kong/kong Security Txt cloud-infra 2025-03-26

  copy raw open
• No Blanket Vulnerability IgnoresSecurity scanner ignore files must not use broad “blanket” suppression that can hide future real issues. **Standard** - Avoid rules that ...

  Kong/kong Security Yaml cloud-infra 2023-09-18

  copy raw open