Static analysis
5 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
pylint |
Linting | pylint {toxinidir}/opentelemetry-apipylint {toxinidir}/codegen/opentelemetry-codegen-jsonpylint {toxinidir}/opentelemetry-sdk |
ci, local | .github/workflows/benchmarks.yml tox.ini .github/workflows/lint.yml |
pyright |
Type checking | pyright --versionpyright |
ci, local | .github/workflows/misc.yml tox.ini pyproject.toml |
ruff-check |
Linting | pre-commit hook ruff |
pre-commit | .pre-commit-config.yaml pyproject.toml |
sphinx |
Docs build | sphinx-build -E -a -W -b html -T . _build/html |
ci, local | .github/workflows/misc.yml tox.ini |
Testing
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
pytest |
Unit and integration tests | pytest {toxinidir}/opentelemetry-api/tests {posargs}pytest {toxinidir}/codegen/opentelemetry-codegen-json/tests {posargs}pytest {toxinidir}/opentelemetry-sdk/tests {posargs} |
ci, local | .github/workflows/benchmarks.yml tox.ini .github/workflows/lint.yml |
Formatting and hygiene
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codespell |
Spelling | codespell |
ci, local | .github/workflows/misc.yml tox.ini .codespellrc |
ruff-format |
Formatting | pre-commit hook ruff-format |
pre-commit | .pre-commit-config.yaml |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
uv-lock |
Lockfile consistency | pre-commit hook uv-lock |
pre-commit | .pre-commit-config.yaml |
10 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
markdown-link-check --verbose --config .github/workflows/check_links_config.json ${changed_files[@]}markdown-link-check --verbose --config .github/workflows/check_links_config.json /tmp/new_links.mdpre-commit hook rstcheckpython {toxinidir}/scripts/check_license_header.pypython {toxinidir}/scripts/griffe_check.pypython {toxinidir}/scripts/public_symbols_checker.pysh -c "cd testssh -c "find {toxinidir} -name \*.shtype one of added, changed, deprecated, removed, fixed)")xargs shellcheck --severity=warning"
Review prompts
most discussed first