Static analysis
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
eslint |
Linting | eslint . --cache --fixeslint --cache --report-unused-disable-directives |
local | package.json eslint.config.mjs streaming/eslint.config.mjs |
tsc |
Type checking | tsc --noEmit |
ci, local | .github/workflows/lint-js.yml package.json streaming/package.json |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 3) |
ci | .github/workflows/codeql.yml |
vitest |
Unit and integration tests | vitest --project=legacy-testsvitest --project=storybook |
ci, local | .github/workflows/test-js.yml package.json vitest.config.mts |
6 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
for-each-ref --format=%(refname:short) refs/remotes/origin/stable-*.*formatjs extract app/javascript/**/*.{js,jsx,ts,tsx} config/vite/plugin-sw-locales.mts --ignore **/*.d.ts --out-file ...oxfmtoxfmt --checkstylelint **/*.{css,scss}stylelint --fix **/*.{css,scss}
Review prompts
most discussed first