Static analysis
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql-analysis.yml |
golangci-lint |
Linting | uses golangci/golangci-lint-action |
ci | .github/workflows/ci.yml .golangci.yml |
zizmor |
CI workflow linting | uses zizmorcore/zizmor-action |
ci | .github/workflows/zizmor.yml |
eslintconfigured, not run |
Linting | web/ui/mantine-ui/eslint.config.mjs web/ui/module/codemirror-promql/eslint.config.mjs web/ui/react-app/eslint.config.mjs |
Testing
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
ci-matrix |
Version and platform matrix | analyze (language: 1)fuzzing (fuzz_test: 4) |
ci | .github/workflows/codeql-analysis.yml .github/workflows/fuzzing.yml |
go-test |
Unit and integration tests | go test ./tsdb/ -test.tsdb-isolation=falsego test --tags=dedupelabels ./...go test --tags=slicelabels -race ./cmd/prometheus ./cmd/promtool/... ./model/... |
ci | .github/workflows/ci.yml .github/workflows/fuzzing.yml |
jestconfigured, not run |
Unit and integration tests | web/ui/module/codemirror-promql/jest.config.cjs web/ui/module/lezer-promql/jest.config.cjs |
||
vitestconfigured, not run |
Unit and integration tests | web/ui/mantine-ui/vitest.config.ts |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
prettier |
Formatting | prettier --write --print-width 120 src/promql/functionSignatures.ts src/promq... |
local | Makefile |
Supply chain
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
govulncheck |
Dependency audit | uses golang/govulncheck-action |
ci | .github/workflows/govulncheck.yml |
3 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
The scan can report existing issues in files your PR did not change.buf lint prompb --error-format github-actionsfor fuzz_test in $EXPR
Review prompts
most discussed first