Verifying C changes

• Security scanning Injection, unsafe APIs and tainted data reaching a sink.
  codeql 33% · 2 of 6 repos

  runs via GitHub Action github/codeql-action/analyze

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inneovim/neovim, redis/redis
  • Docshttps://github.com/github/codeql
• Secret scanning Credentials and tokens committed to the repository.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fail Fast Input ValidationApply a single security rule: validate arity, lengths, ranges, and invariants before using inputs to index arrays, dereference pointers, ...

  redis/redis Security C data-systems 2026-05-05

  copy raw open
• Secure sensitive data handlingWhen implementing security-sensitive features (parsing untrusted cryptographic configs, enforcing TLS role restrictions, or maintaining a...

  python/cpython Security C security 2026-10-23

  copy raw open
• audit license dependenciesAlways verify the licensing compatibility of all dependencies, especially in security-critical networking code. GPL and other restrictive...

  istio/istio Security C orchestration 2023-01-17

  copy raw open

• Type checking Wrong types, unhandled null or None, call signatures broken across modules.

  The compiler type-checks on every build and test run; a failing build is this check failing.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Robust C API error handlingWhen writing C extension/interpreter code, treat every fallible C API call as a potential failure point and handle it consistently: - **C...

  python/cpython Error Handling C app-frameworks 2026-10-26

  copy raw open
• Nullable Contracts EnforcementAdopt explicit, consistent nullability contracts for pointer/optional-field parameters and honor them at every call site. Practical rules...

  redis/redis Null Handling C data-systems 2026-04-15

  copy raw open
• Fail/Clamp Error ContractsWhen implementing commands with numeric failure modes (overflow, out-of-range, NaN/Inf) or multi-option parsing, define an explicit error...

  redis/redis Error Handling C data-systems 2026-05-06

  copy raw open
• API Contracts And CompatibilityWhen adding or evolving APIs (commands, module interfaces, persistence callbacks), make the contract explicit and stable: define lifecycl...

  redis/redis API C data-systems 2026-05-04

  copy raw open
• validate memory boundsAlways validate array and string bounds before accessing memory to prevent out-of-bounds access and potential crashes. When working with ...

  bytedance/sonic Null Handling C runtimes 2023-06-27

  copy raw open

9 more in API, Error Handling, Null Handling — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 67% · 4 of 6 repos

  build (go-version: 4)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (go-version: 4)
build (go-version: 4, runner_arch: 2)
  • Runs inci
  • Seen inpython/cpython, redis/redis, tree-sitter/tree-sitter, bytedance/sonic
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Correct Fast-Path SemanticsWhen implementing algorithmic optimizations (fast paths, binary search vs linear, prefetch/slot routing, realloc/compaction shortcuts), r...

  redis/redis Algorithms C data-systems 2026-05-07

  copy raw open
• Validate recursive algorithms against nestingWhen an algorithm operates on hierarchical or recursive structures (nested scopes, nested comprehensions, tree-like state), verify it wit...

  python/cpython Algorithms C app-frameworks 2026-10-21

  copy raw open
• validate algorithm boundariesAlways validate boundary conditions and termination criteria in algorithms to prevent infinite loops, out-of-bounds access, and incorrect...

  tree-sitter/tree-sitter Algorithms C runtimes 2024-10-27

  copy raw open
• Decompose complex algorithmsWhen implementing algorithms, break down complex methods that handle multiple concerns into smaller, more focused methods. This improves ...

  dotnet/runtime Algorithms C runtimes 2024-06-27

  copy raw open
• Optimize data structuresWhen implementing algorithms, prioritize data structure choices that minimize resource usage while maintaining functionality. Consider if...

  neondatabase/neon Algorithms C data-systems 2025-07-03

  copy raw open

4 more in Algorithms — the playbook lists the top 9.

• Concurrency model checking Races and orderings that fail only under specific interleavings.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Lock the right resourceWhen protecting shared mutable state, make sure the synchronization actually covers the memory that other threads can see and mutate, and...

  python/cpython Concurrency C app-frameworks 2026-10-24

  copy raw open
• Thread Ownership DisciplineWhen code can run on both main and IO threads, require an explicit ownership + synchronization rule for every shared piece of state (flag...

  redis/redis Concurrency C data-systems 2026-03-22

  copy raw open
• prevent autocommand reentrancyGuard against reentrancy issues when operations may trigger autocommands or async events that could invalidate state or cause recursive e...

  neovim/neovim Concurrency C devtools 2025-07-10

  copy raw open
• Guard against race conditionsWhen working with concurrent operations, always implement proper guards to prevent race conditions between processes. This includes: 1. A...

  neondatabase/neon Concurrency C data-systems 2025-06-16

  copy raw open

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• leverage kernel network structuresWhen implementing eBPF networking programs, prefer using kernel-native data structures and BPF helpers over maintaining custom eBPF maps ...

  istio/istio Networking C orchestration 2023-02-17

  copy raw open
• follow protocol standardsWhen implementing network protocols or communication formats, prioritize standardized specifications over legacy or device-specific forma...

  neovim/neovim Networking C devtools 2025-07-28

  copy raw open
• Handle network interrupts safelyNetwork code must properly handle interrupts and maintain consistent connection state at all potential interruption points. When implemen...

  neondatabase/neon Networking C data-systems 2025-07-08

  copy raw open
• Check feature compatibilityWhen using kernel-specific networking features like io_uring, always implement runtime detection of feature support before enabling them....

  netty/netty Networking C runtimes 2025-01-20

  copy raw open

• End-to-end browser tests User flows broken across components, routing and the network.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Linting Bug-prone patterns, unused code and conventions the formatter does not cover.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 67% · 4 of 6 repos

  build (go-version: 4)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (go-version: 4)
build (go-version: 4, runner_arch: 2)
  • Runs inci
  • Seen inpython/cpython, redis/redis, tree-sitter/tree-sitter, bytedance/sonic
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Consistent TTL Pre-checkWhen handling TTL/expiration, decide “already expired?” (and validate expiry inputs) before performing DB mutations or expensive work, an...

  redis/redis Caching C data-systems 2026-05-01

  copy raw open

No tool-based check applies. The review prompts below are the verification.

• Bounded Prefetch BatchesWhen adding performance optimizations (prefetch/batching/fast paths), make them bounded, gated, and semantics-correct: - **Bound the work...

  redis/redis Performance Optimization C data-systems 2026-05-05

  copy raw open
• Benchmark hot-path regressionsWhen adding bookkeeping for correctness or edge cases (deduplication, debug stats, extra tracking structures), make sure the common/fast ...

  python/cpython Performance Optimization C app-frameworks 2026-10-26

  copy raw open
• Optimize aligned SIMD operationsAlways use proper memory alignment for SIMD (Single Instruction, Multiple Data) operations to maximize performance. When implementing vec...

  dotnet/runtime Performance Optimization C runtimes 2025-06-25

  copy raw open
• Optimize what mattersFocus optimization efforts on performance-critical paths rather than applying micro-optimizations everywhere. Balance code clarity and ma...

  neondatabase/neon Performance Optimization C data-systems 2025-06-20

  copy raw open
• optimize memory usage patternsFocus on reducing memory footprint and improving cache efficiency through careful data structure design and function parameter optimizati...

  tree-sitter/tree-sitter Performance Optimization C runtimes 2025-04-15

  copy raw open

1 more in Performance Optimization — the playbook lists the top 6.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

No tool-based check applies. The review prompts below are the verification.

• consolidate related loggingWhen logging information about the same operation or context, combine multiple related log statements into a single, comprehensive messag...

  tree-sitter/tree-sitter Logging C runtimes 2021-02-08

  copy raw open

• CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
  pre-commit-hooks 17% · 1 of 6 repos autofix

  runs via pre-commit hook check-yaml

  exit codes, docs, alternatives, where it runs

  • Commands seenpre-commit hook check-case-conflict
pre-commit hook check-merge-conflict
pre-commit hook check-toml
  • Runs inpre-commit
  • Seen inpython/cpython
  • Docshttps://github.com/pre-commit/pre-commit-hooks

• Conditional compilation guardsAlways use appropriate preprocessor directives to guard platform-specific, version-dependent, or feature-specific code. Ensure that condi...

  tree-sitter/tree-sitter Configurations C runtimes 2025-01-18

  copy raw open
• Configuration context alignmentChoose the appropriate configuration context based on how changes will be handled by the system. When defining custom configuration varia...

  neondatabase/neon Configurations C data-systems 2025-06-04

  copy raw open
• Explicit configuration requirementsAlways specify explicit configuration parameters rather than relying on default settings that may vary across different build environment...

  llvm/llvm-project Configurations C runtimes 2025-07-27

  copy raw open
• Centralize platform configurationsPlatform-specific code and API usage should be centralized in designated configuration files rather than scattered throughout the codebas...

  dotnet/runtime Configurations C runtimes 2021-06-16

  copy raw open

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Lockfile consistency A lockfile that no longer matches its manifest.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 67% · 4 of 6 repos

  build (go-version: 4)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (go-version: 4)
build (go-version: 4, runner_arch: 2)
  • Runs inci
  • Seen inpython/cpython, redis/redis, tree-sitter/tree-sitter, bytedance/sonic
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 67% · 4 of 6 repos

  build (go-version: 4)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (go-version: 4)
build (go-version: 4, runner_arch: 2)
  • Runs inci
  • Seen inpython/cpython, redis/redis, tree-sitter/tree-sitter, bytedance/sonic
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• preserve known test issuesWhen tests exhibit known false positives or false negatives, preserve these test cases with clear documentation rather than removing them...

  llvm/llvm-project Testing C runtimes 2025-07-28

  copy raw open

• Docs build Broken cross-references, links and markup in documentation.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Spelling Typos in identifiers, comments and docs.
  codespell 17% · 1 of 6 repos

  runs via GitHub Action codespell-project/actions-codespell

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inbytedance/sonic
  • Docshttps://github.com/codespell-project/codespell

• Doc Semantics ConsistencyEnsure comments and public-facing documentation precisely match the actual behavior and contract. Apply this standard by checking: - **No...

  redis/redis Documentation C data-systems 2026-04-29

  copy raw open
• Documentation accuracy standardsEnsure all function documentation accurately reflects the actual code behavior and includes complete, properly formatted descriptions of ...

  neovim/neovim Documentation C devtools 2025-07-28

  copy raw open
• Document non-obvious logicAdd clear comments explaining the purpose and reasoning behind complex or non-obvious code logic. Comments should explain 'why' certain i...

  dotnet/runtime Documentation C runtimes 2025-05-30

  copy raw open
• Meaningful comment practicesComments should explain the reasoning behind code decisions rather than restating what the code obviously does. Focus on the "why" rather...

  bytedance/sonic Documentation C runtimes 2023-06-27

  copy raw open