Static analysis
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
semgrep |
Security scanning | semgrep scan --severity ERROR --error --sarif --config auto --exclude-rule ja... |
ci | .github/workflows/pr-code-security.yml |
biomeconfigured, not run |
Linting | package.json apps/telemetry-backend/biome.jsonc biome.jsonc examples/mongo-blog-leaderboard/biome.jsonc |
||
tscconfigured, not run |
Type checking | package.json |
Testing
3 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | test-packages (index: 4)analyze (ref: 2, language: 1) |
ci | .github/workflows/ci.yml .github/workflows/codeql-analysis.yml |
node-test |
Unit and integration tests | node --test scripts/coverage-config.test.mjs scripts/coverage-report.test.mjs... |
ci, local | .github/workflows/ci.yml package.json |
vitest |
Unit and integration tests | vitest run --coveragevitest --merge-reports=.vitest/blob --coveragevitest run |
ci, local | .github/workflows/ci.yml package.json apps/telemetry-backend/vitest.config.ts examples/bundle-size/vitest.config.ts |
43 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
depcruise --config dependency-cruiser.config.mjs packagesnode scripts/check-clean-tree.mjsnode scripts/check-conformance.mjsnode scripts/check-publish-deps.mjsnode scripts/check-release-notes.mjsnode scripts/check-upgrade-coverage.mjsnode scripts/coverage-report.mjsnode scripts/lint-app-space-id.mjsnode scripts/lint-architecture-registration.mjsnode scripts/lint-consumer-internal-imports.mjsnode scripts/lint-framework-target-imports.mjsnode scripts/lint-legacy-name.mjsnode scripts/lint-no-contract-cast.mjsnode scripts/lint-publishability.mjsnode scripts/lint-ratchets.mjsnode scripts/lint-single-import-root.mjsnode scripts/lint-target-layering.mjsnode scripts/lint-vitest-timeouts.mjsnode scripts/lint-workflow-triggers.mjsnode scripts/list-error-codes.mjs --verify docs/reference/error-reference.mdnode scripts/rules-footprint.mjs --checknode scripts/run-logged.mjs fixtures-check pnpm fixtures:checknode scripts/run-logged.mjs lint pnpm lintnode scripts/run-logged.mjs lint-deps pnpm lint:depsnode scripts/run-logged.mjs test-e2e pnpm test:e2enode scripts/run-logged.mjs test-integration pnpm test:integrationnode scripts/run-logged.mjs test-packages pnpm test:packagesnode scripts/run-logged.mjs typecheck pnpm typechecknode scripts/sync-agent-rules.mjs --checknode scripts/validate-package-manifests.mjsnode scripts/validate-package-readmes.mjsnode scripts/validate-rules.mjsnode scripts/validate-skills.mjsnode scripts/validate-typescript-peer.mjsturbo run build --filter=!./examples/** --filter=!./test/**turbo run lintturbo run lint --filter=!./examples/**turbo run lint --filter=./examples/**turbo run test --continueturbo run test --filter=./examples/** --continue
Review prompts
most discussed first