Static analysis
5 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
cargo-check |
Type checking | cargo check --features native --verbose |
ci | .github/workflows/federation-peer-rust.yml |
clippy |
Linting | cargo clippy --all-targets -- -D warnings |
ci | .github/workflows/federation-peer-rust.yml |
codeql |
Security scanning | uses github/codeql-action/analyze |
ci | .github/workflows/codeql.yml |
tsc |
Type checking | tsctsc -p v3/@claude-flow/performance/tsconfig.jsontsc --noEmit |
ci, local | .github/workflows/ci.yml package.json .github/workflows/codex-activity.yml .github/workflows/no-agentbbs-smoke.yml |
eslintconfigured, not run |
Linting | package.json plugins/ruflo-arena/eslint.config.js ruflo/src/ruvocal/.eslintrc.cjs v3/@claude-flow/cli/.eslintrc.json |
Testing
4 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
cargo-test |
Unit and integration tests | cargo test --verbose |
ci | .github/workflows/federation-peer-rust.yml |
ci-matrix |
Version and platform matrix | test (os: 1)build (os: 3, include: 3)analyze (include: 3) |
ci | .github/workflows/ci.yml .github/workflows/codeql.yml .github/workflows/codex-activity.yml .github/workflows/resource-admission.yml |
node-test |
Unit and integration tests | node --test tests/external-plugins.test.mjsnode --test tests/check-guard-tool-names.test.mjs tests/all-plugins-smoke-wor...node --test tests/plugins/codex-mod-hooks.test.mjs |
ci | .github/workflows/all-plugins-smoke.yml .github/workflows/business-pods-smoke.yml .github/workflows/metaharness-ci.yml |
vitest |
Unit and integration tests | vitestvitest run __tests__/funnel.test.ts __tests__/statusline-cost-display.test.tsvitest run v3/@claude-flow/performance/__tests__/resource-admission.test.ts v... |
ci, local | .github/workflows/chatgpt-federation.yml package.json .github/workflows/codex-activity.yml .github/workflows/funnel-gates.yml |
Formatting and hygiene
1 tool
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
prettierconfigured, not run |
Formatting | ruflo/src/ruvocal/.prettierrc |
Supply chain
2 tools
| Tool | Kind | Command | Runs in | Found in |
|---|---|---|---|---|
dependency-review |
Dependency audit | uses actions/dependency-review-action |
ci | .github/workflows/v3-ci.yml |
npm-audit |
Dependency audit | npm audit --audit-level=highnpm audit --production --audit-level=moderatenpm audit --audit-level=critical |
ci, local | .github/workflows/ci.yml .github/workflows/cve-audit.yml .github/workflows/stable-npm-release.yml .github/workflows/verification-pipeline.yml |
150 other commands the scanner could not classify
Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.
CheckINSERT INTO test_sessions (id, metadata) VALUESNew-Item -ItemType Directory -Path $tmpPipeline finished. Check individual jobs for details.SecurityStart-Sleep -Seconds 5TestsWrite-Host ::group::Phase 3: verify daemon survives parent exitWrite-Host Install took $($installSw.Elapsed.TotalSeconds)sWrite-Host Testing daemon survival for @claude-flow/cli@$cliVerWrite-Host cmd.exe parent exited in $($spawnSw.Elapsed.TotalSeconds)s with code $($proc.ExitCode)agent_type TEXT,async function healthCheck() {async function testAgentCoordination() {async function testCommunication() {async function testFailureRecovery() {async function testMemorySync() {async function testPerformance() {async function testResilience() {async function testScalability() {async function testSharedMemory() {async function testTaskDistribution() {audit --json 2>/dev/nullaudit-ci --config .audit-ci.jsonawait import(./v3/@claude-flow/security/dist/policy/product-plane.js)bestPerformance = scalTest.throughputchecks.configuration.message = Configuration files presentchecks.configuration.status = passedchecks.dependencies.message = `${deps} runtime, ${devDeps} dev dependencies`checks.dependencies.status = passedchecks.overall.healthy = passedChecks >= 3checks.overall.message = e.messagechecks.overall.status = checks.overall.healthy ? passed : failedchecks.overall.status = errorchecks.packageJson.message = `Package: ${pkg.name}@${pkg.version}`checks.packageJson.status = passedcomplexity-report --format json --output complexity-report.json src/const checks = {const loadTest = {const passedChecks = Object.values(checks).filter(c => c.status === passed).length
Review prompts
most discussed first