Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
semgrep |
Security scanning | semgrep scan --config=p/default |
ci | .github/workflows/security.yml |
zizmor |
CI workflow linting | uses zizmorcore/zizmor-action |
ci | .github/workflows/zizmor.yml |
Testing
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
go-test |
Unit and integration tests | go test -race ./... |
ci | .github/workflows/validate.yml |
pytest |
Unit and integration tests | pytest -n auto --dist worksteal --cov --cov-report=term-missingpytest tests/eval -x -s |
ci | .github/workflows/validate.yml pyproject.toml |
unittest |
Unit and integration tests | unittest tests.test_subproc -v |
ci | .github/workflows/validate.yml |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
dependency-review |
Dependency audit | uses actions/dependency-review-action |
ci | .github/workflows/security.yml |
Review prompts
most discussed first