Awesome Reviewers checks + prompts

sources / snyk/cli

snyk/cli

The checks this repository runs, scanned at 2f1dcd4, and the review prompts derived from its discussions.

8 recognised tools
33 prompts
5178 stars
Security & Access Control
GitHub

Static analysis

4 tools

ToolKindCommandRuns inFound in
eslint Linting eslint --quiet --color --cache **/*.{js,ts} local Makefile
package.json
.eslintrc.json
test/fixtures/qs-package/node_modules/extend/.eslintrc
gitleaks Secret scanning pre-commit hook gitleaks pre-commit .pre-commit-config.yaml
golangci-lint Linting golangci-lint run -v local cliv2/Makefile
cliv2/.golangci.yaml
tsc Type checking tsc local ts-binary-wrapper/package.json
package.json

Testing

2 tools

ToolKindCommandRuns inFound in
go-test Unit and integration tests go test ./... local Makefile
jest Unit and integration tests jest --runInBand --testPathPattern '/test(/jest)?/unit/
jest --maxWorkers=1 --testPathPattern /test(/jest)?/acceptance/ --reporters=j...
jest test/*
local Makefile
package.json
ts-binary-wrapper/package.json
cliv2/jest.config.ts
ToolKindCommandRuns inFound in
gofmt Formatting gofmt -w -l -e . local cliv2/Makefile
prettier Formatting prettier --write **/*.md
prettier --write README.md
prettier --write **/*.{js,ts,json,yaml,yml,md}
ci, local .github/workflows/sync-cli-help-to-user-docs.yml
.github/workflows/sync-cli-readme.yml
Makefile
package.json
13 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

  • ISSIGNED_SCRIPT = $(SPECIAL_SHELL) $(WORKING_DIR)/scripts/issigned_$(GOHOSTOS).ps1
  • SHASUM_CMD = $(SPECIAL_SHELL) $(WORKING_DIR)/scripts/shasum.ps1
  • SIGN_SCRIPT = $(SPECIAL_SHELL) $(WORKING_DIR)/scripts/sign_$(GOHOSTOS).ps1
  • SPECIAL_SHELL = powershell
  • gpg --verify sha256sums-experimental.txt.asc
  • gpg --verify sha256sums-preview.txt.asc
  • gpg --verify sha256sums-stable.txt.asc
  • npm-run-all --serial --continue-on-error lint:*
  • sh -s -- -b ${GO_BIN} ${OVERRIDE_GOCI_LINT_V}
  • tap -Rspec --timeout=300 test/tap/*.test.*
  • tr -d )
  • ts-node ./scripts/check-dependencies.ts
  • wc -l

full scan as JSON

Review prompts

most discussed first

  • snyk/cli Code Style TypeScript security
    raw open
  • snyk/cli Error Handling TypeScript security
    raw open
  • snyk/cli Naming Conventions TypeScript security
    raw open
  • snyk/cli Logging Go security
    raw open
  • snyk/cli Documentation TypeScript security
    raw open
  • snyk/cli Error Handling Go security
    raw open
  • snyk/cli Testing TypeScript security
    raw open
  • snyk/cli API TypeScript security
    raw open
  • snyk/cli Configurations Json security
    raw open
  • snyk/cli Testing Go security
    raw open
  • snyk/cli Null Handling TypeScript security
    raw open
  • snyk/cli Logging TypeScript security
    raw open
  • snyk/cli Documentation Markdown security
    raw open
  • snyk/cli Configurations Go security
    raw open
  • snyk/cli Configurations TypeScript security
    raw open
  • snyk/cli Code Style Go security
    raw open
  • snyk/cli Configurations Other security
    raw open
  • snyk/cli Configurations JavaScript security
    raw open
  • snyk/cli Concurrency TypeScript security
    raw open
  • snyk/cli CI/CD Yaml security
    raw open
  • snyk/cli Configurations Yaml security
    raw open
  • snyk/cli Configurations Shell security
    raw open
  • snyk/cli Security TypeScript security
    raw open
  • snyk/cli Concurrency Go security
    raw open
  • snyk/cli CI/CD Markdown security
    raw open
  • snyk/cli CI/CD Other security
    raw open
  • snyk/cli Naming Conventions Go security
    raw open
  • snyk/cli Naming Conventions Yaml security
    raw open
  • snyk/cli Security Python security
    raw open
  • snyk/cli CI/CD Shell security
    raw open
  • snyk/cli Documentation Go security
    raw open
  • snyk/cli API Go security
    raw open
  • snyk/cli Security Go security
    raw open