Static analysis
5 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
eslint |
Linting | eslint . --ext .ts,.tsx --max-warnings 0eslint integration-tests --max-warnings 0eslint . --ext .ts,.tsx |
ci, local | .github/workflows/release.yml package.json Makefile eslint.config.js |
mypy |
Type checking | mypy --config-file packages/sdk-python/pyproject.toml packages/sdk-python/src |
ci, local | .github/workflows/release-sdk-python.yml .github/workflows/sdk-python.yml package.json |
ruff-check |
Linting | ruff check --config packages/sdk-python/pyproject.toml packages/sdk-python |
ci, local | .github/workflows/release-sdk-python.yml .github/workflows/sdk-python.yml package.json |
tsc |
Type checking | tsc -p integration-tests/tsconfig.json --pretty false |
ci, local | .github/workflows/cd-cua-driver.yml package.json .github/workflows/ci.yml .github/workflows/live-host-release.yml |
Testing
6 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
cargo-test |
Unit and integration tests | cargo test -p cua-driver-core --locked model_payloadcargo test --manifest-path src-tauri/Cargo.toml |
ci | .github/workflows/cd-cua-driver.yml .github/workflows/desktop-release.yml |
ci-matrix |
Version and platform matrix | web_shell_e2e_smoke (shard: 4)codeql (include: 3)desktop_shell (os: 2) |
ci | .github/workflows/ci.yml .github/workflows/codeql.yml .github/workflows/desktop-release.yml .github/workflows/sdk-python.yml |
node-test |
Unit and integration tests | node --test --test-concurrency=1 $EXPRnode --test --test-concurrency=1 $EXPR 2>&1node --test scripts/tests/package-managed-agent-reference.test.mjs scripts/te... |
ci | .github/workflows/ci.yml .github/workflows/release-managed-agent-reference.yml |
playwright |
End-to-end browser tests | playwright test test/coord-norm.test.ts test/mobile-ui-dump.test.ts test/payl... |
ci | .github/workflows/cd-mobile-mcp.yml packages/mobile-mcp/playwright.config.ts packages/web-shell/playwright.config.ts |
pytest |
Unit and integration tests | pytest -c packages/sdk-python/pyproject.toml packages/sdk-python/tests -q |
ci, local | .github/workflows/release-sdk-python.yml .github/workflows/sdk-python.yml package.json |
vitest |
Unit and integration tests | vitest run --root ./integration-tests ./chat-transcript-document.test.ts --re...vitest run --config ./scripts/tests/vitest.config.tsvitest run scripts/tests/install-script.test.js scripts/tests/opentui-preview... |
ci, local | .github/workflows/ci.yml package.json .github/workflows/desktop-release.yml .github/workflows/e2e.yml |
Formatting and hygiene
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
prettier |
Formatting | prettier --experimental-cli --write . |
local | Makefile package.json .prettierrc.json |
ruff-format |
Formatting | ruff format --check --config packages/sdk-python/pyproject.toml packages/sdk-... |
ci | .github/workflows/release-sdk-python.yml .github/workflows/sdk-python.yml |
179 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
CheckNOOP_NOTICE_GRACE_SEC / 60 ))New-Item -ItemType Directory -Force -Path $rootNew-Item -ItemType Directory -Force -Path $tempNew-Item -ItemType Directory -Force -Path release/$stageNew-Item -ItemType Directory -Path $consumerNew-Item -ItemType SymbolicLink -Path $link -Target $targetSECONDS + RESOLVE_TIMEOUT_SECONDS ))api "repos/${REPO}/commits/${HEAD_SHA}/check-runs?check_name=Managed%20Agent%20gate&per_page=100" --jq '.check_runs[]asset.sha256 !== checksum) throw new Error(`Manifest asset verification failed for ${architecture}.`)asset.sha256 !== checksum) throw new Error(`Mirrored asset verification failed for ${architecture}.`)audit corepack pnpm audit --prod --audit-level highaudit npm audit --omit=dev --audit-level=high --workspaces=falsebash ../../.github/scripts/verify-managed-agent-embedding.shbash .github/scripts/check-disk-floor.sh ${GITHUB_WORKSPACE} ${RUNNER_TEMP:-/tmp}bash .github/scripts/e2e-build-pack.sh ${RUNNER_TEMP}/e2e-build.tar.gzbash .github/scripts/e2e-build-unpack.sh ${RUNNER_TEMP}/e2e-build/e2e-build.tar.gzbash .github/scripts/ecs-runner/check-font-baseline.shbash .github/scripts/run-e2e-tests.sh $EXPR $EXPRcheckout may fail on leftover read-only files"checkout may fail on leftover root-owned files"cmp dist/desktop/desktop-latest.json $RUNNER_TEMP/desktop-latest.jsoncodesign --verify --deep --strict --verbose=2 $appcodesign --verify --strict $filecodesign --verify --strict --verbose=2 release/QwenCuaDriver.appcodesign --verify --strict --verbose=2 release/universal/cua-cursor-themecodesign --verify --strict --verbose=2 release/universal/libcua_driver_sdk.dylibcodesign --verify --strict --verbose=2 release/universal/qwen-cua-driverconst checksum = createHash(sha256).update(readFileSync(file)).digest(hex)const linters = getLinters()cross-env DEV=true npm run bundlecross-env NODE_OPTIONS=--max-old-space-size=3072 npm run test --workspaces --if-presentcross-env NODE_OPTIONS=--max-old-space-size=3072 npm run test:ci --workspaces --if-present --cross-env NODE_OPTIONS=--max-old-space-size=3072 npm run test:ci --workspaces --if-present -- --coverage.enabled=falsecross-env QWEN_E2E_RENDERER=ink QWEN_E2E_RUNTIME=bun QWEN_SANDBOX=false vitest run --root ./integration-tests interac...cross-env QWEN_E2E_RENDERER=ink VERBOSE=true KEEP_OUTPUT=true QWEN_SANDBOX=false vitest run --root ./integration-test...cross-env QWEN_E2E_RENDERER=opentui QWEN_SANDBOX=false vitest run --root ./integration-tests interactivecross-env QWEN_E2E_RENDERER=opentui QWEN_SANDBOX=false vitest run --root ./integration-tests interactive --exclude **...cross-env QWEN_SANDBOX=docker npm run build:sandboxcross-env QWEN_SANDBOX=false vitest run --root ./integration-tests
Review prompts
most discussed first