Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
tsc |
Type checking | tsc -b |
local | devops/package.json e2e/package.json package.json |
Testing
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 1) |
ci | .github/workflows/codeql.yml |
node-test |
Unit and integration tests | node --test devops/check-agent-instructions.spec.mjs devops/check-agent-skill... |
ci, local | .github/workflows/checks.yaml package.json |
playwright |
End-to-end browser tests | playwright test -c playwright.mcp-app.config.tsplaywright testplaywright test --update-snapshots |
ci, local | .github/workflows/checks.yaml e2e/package.json .github/workflows/e2e-update-screenshots.yaml package.json |
vitest |
Unit and integration tests | vitest run --no-isolatevitest runvitest --no-isolate |
ci, local | .github/workflows/checks.yaml package.json e2e/package.json devops/package.json |
11 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
dprint fmtnode devops/check-agent-instructions.mjsnode devops/check-agent-skills.mjsoxlintoxlint --fix-suggestionsoxlint --format=github --quietoxlint --quietturbo run lint:package --filter=!./apps/*turbo run test --affected --filter=!./apps/*turbo run typecheckturbo run typecheck --filter=!./apps/*
Review prompts
most discussed first