Static analysis
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
eslint |
Linting | eslint . --ext mdx |
local | website/package.json website/.eslintrc.js |
golangci-lintconfigured, not run |
Linting | .golangci.yml |
Testing
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | e2e-tests (include: 5)unit-tests (include: 5)exp-eng-tests (include: 1) |
ci | .github/workflows/build.yml .github/workflows/checks.yml .github/workflows/experimental-engine.yml |
go-test |
Unit and integration tests | go test -v ./internal/command/e2etestgo test ./...go test -race ./internal/tofu ./internal/command ./internal/states ./internal... |
ci, local | .github/workflows/build.yml .github/workflows/checks.yml .github/workflows/experimental-engine.yml Makefile |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
govulncheck |
Dependency audit | govulncheck -format json ./cmd/tofu |
ci | .github/workflows/govulncheck.yml |
7 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
do echo Database is getting ready, waitinggo mod vendorgo tool cover -html=coverage.out -o coverage.htmllicensei cache --debuglicensei check --debuglicensei header --debugshow --no-patch --format=%cd --date=format:%Y%m%d%H%M%S ${GITHUB_SHA}`
Review prompts
most discussed first