Static analysis
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
pyrightconfigured, not run |
Type checking | package.json | ||
ruff-checkconfigured, not run |
Linting | pyproject.toml |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | compatibility (include: 6) |
ci | .github/workflows/ci.yml |
pytest |
Unit and integration tests | pytest -o addopts= --quiet tests/test_client.py tests/test_streaming.py tests... |
ci | .github/workflows/ci.yml pyproject.toml |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
uv-lock |
Lockfile consistency | uv lock --check |
ci | .github/workflows/ci.yml |
10 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
node scripts/steady/publication.test.cjspython scripts/check-example-security.py $EXPRpython scripts/check-example-security.py demopython scripts/check-python-version-policy.pypython scripts/utils/validate-python-version-wheel.py --check-python-39sections = executable(config)trusted = tomllib.loads(subprocess.check_output([git, show, base + :pyproject.toml], text=True)) if fork else configtrusted_lock = tomllib.loads(subprocess.check_output([git, show, base + :uv.lock], text=True)) if fork else lockty check $EXPRty check --extra-search-path examples/browser examples/browser-use-demo
Review prompts
most discussed first