Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
tsc |
Type checking | tsc --noEmit |
local | package.json e2e/package.json |
Testing
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 2)test-app (shard: 3)test-server (shard: 2) |
ci | .github/workflows/codeql.yml .github/workflows/test.yml |
node-test |
Unit and integration tests | node --test .github/scripts/check-fts-mapping-history.test.mjsnode --test .github/scripts/vercel-ignored-build-step.test.cjs .github/script...node --test .github/scripts/hotfixWorkflow.test.mjs |
ci | .github/workflows/fts-search-mapping-history.yml .github/workflows/test.yml |
playwright |
End-to-end browser tests | playwright test --ui |
local | package.json e2e/package.json |
vitest |
Unit and integration tests | vitest run --config vitest.config.mts --silent=passed-onlyvitest runvitest run --config vitest.config.mts --silent=passed-only tsdown.config.test... |
ci, local | .github/workflows/e2e.yml package.json e2e/package.json .github/workflows/release-sdk.yml |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
prettier |
Formatting | prettier -c --write locales/**prettier -c --write **/** |
ci, local | .github/workflows/auto-i18n.yml package.json |
45 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
alintalint --config alint.audit.toml --format json --rule-concurrency 48 src packagesbun packages/alint/report.ts alint-output.jsonbun packages/alint/setup.tsbun run .agents/scripts/check/cli.tsbun run packages/local-file-shell/scripts/verify-windows-shell.tsbun scripts/generate-sdk.ts --checkbun scripts/stylexMigration/verification/run.tscross-env HEADLESS=false cucumber-js --config cucumber.config.jscucumber-js --config cucumber.config.jscucumber-js --config cucumber.config.js --tags @oidccucumber-js --config cucumber.config.js --tags @routescucumber-js --config cucumber.config.js --tags @routes and not @ci-skipcucumber-js --config cucumber.config.js --tags @smokecucumber-js --config cucumber.config.js src/features/community/dpdm packages/**/src/**/*.ts --no-warning --no-tree --exit-code circular:1 --no-progress -T true --skip-dynamic-impor...dpdm src/**/*.ts --no-warning --no-tree --exit-code circular:1 --no-progress -T true --skip-dynamic-imports circularknip --include files,exports,types,enumMembers,duplicateslobe-i18n mdlobe-seonode $RUNNER_TEMP/security-policy-runtime/scripts/desktopSecurityPolicy.mjs --request $RUNNER_TEMP/security-policy-re...node $RUNNER_TEMP/security-policy-runtime/scripts/desktopSecurityPolicy.mjs --validate-request > $RUNNER_TEMP/securit...node .github/scripts/bundle-size-gate.cjs check --current size-report/entry-graph.json --baseline .size-baseline/entr...node .github/scripts/bundle-size-gate.cjs check --current size-report/web.json --baseline .size-baseline/web.json --l...node .github/scripts/bundle-size-gate.cjs check --current size-reports/asar-${platform}.json --baseline .size-baselin...node .github/scripts/check-fts-mapping-history.mjs $BASE_SHA HEADnode .github/scripts/desktopReleaseCli.mjs check-prnode .github/scripts/desktopReleaseCli.mjs prepare-releasenode .github/scripts/desktopReleaseCli.mjs publishnode .github/scripts/desktopReleaseCli.mjs resolvenode .github/scripts/desktopReleaseCli.mjs verify-checkoutoxlint src/ tests/ apps/server/src/packageJson.type = modulepackageJson.types = ./dist/index.d.mtspnpx @upstash/qstash-cli@latest devremark . --silent --outputremark docs/**/*.mdx -r ./.remarkrc.mdx.mjs --silent --outputstylelint src/**/*.{css,less} --fix --allow-empty-inputstylelint {src,tests}/**/*.{css,less} --fix --allow-empty-inputtsrs --noEmit -p tsconfig.type-check.json --checkers 4
Review prompts
most discussed first