Verifying C++ changes

• Security scanning Injection, unsafe APIs and tainted data reaching a sink.
  codeql 31% · 4 of 13 repos

  runs via GitHub Action github/codeql-action/analyze

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inllvm/llvm-project, duckdb/duckdb, Tencent/ncnn, maplibre/maplibre-native
  • Docshttps://github.com/github/codeql
• Secret scanning Credentials and tokens committed to the repository.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• validate user inputsAlways validate and properly escape user-controlled input before incorporating it into structured data formats like JSON, SQL, XML, or co...

  ClickHouse/ClickHouse Security C++ data-systems 2025-07-25

  copy raw open
• Preserve pointer authenticationWhen implementing Pointer Authentication (PAC) for security, maintain signed pointers throughout their entire lifecycle to prevent potent...

  dotnet/runtime Security C++ runtimes 2025-05-19

  copy raw open
• secure sensitive data handlingWhen handling sensitive data like encryption keys, passwords, or authentication tokens, avoid using standard string types that can be eas...

  duckdb/duckdb Security C++ data-systems 2025-06-10

  copy raw open
• Verify cryptographic function behaviorWhen implementing cryptographic algorithms, always verify the exact behavior and return values of security-critical functions. Misinterpr...

  oven-sh/bun Security C++ runtimes 2025-05-16

  copy raw open
• Buffer bounds validationAlways validate buffer boundaries before performing memory operations to prevent buffer overflow vulnerabilities. When copying data into ...

  maplibre/maplibre-native Security C++ app-frameworks 2023-09-12

  copy raw open

1 more in Security — the playbook lists the top 6.

• Type checking Wrong types, unhandled null or None, call signatures broken across modules.

  The compiler type-checks on every build and test run; a failing build is this check failing.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Explicit error handlingAlways handle error conditions explicitly rather than silently ignoring them or using generic error responses. Use specific error codes t...

  ClickHouse/ClickHouse Error Handling C++ data-systems 2025-08-07

  copy raw open
• Assert before castAlways validate values before performing unsafe operations like dynamic casting. When a value could be null, zero, or undefined, store it...

  oven-sh/bun Null Handling C++ runtimes 2025-06-23

  copy raw open
• prevent null dereferencesAlways verify pointers are valid before dereferencing to prevent crashes and undefined behavior. This applies to regular pointers, weak p...

  hyprwm/Hyprland Null Handling C++ devtools 2025-06-01

  copy raw open
• Graceful Error PropagationWhen writing library code, never hard-terminate or silently ignore failures. Always (1) validate inputs/shape compatibility correctly (in...

  Tencent/ncnn Error Handling C++ ml-systems 2025-09-13

  copy raw open
• Clear API contractsDesign APIs with clear contracts that behave exactly as their names and signatures suggest. Functions should do precisely what they claim...

  opencv/opencv API C++ ml-systems 2025-07-01

  copy raw open

31 more in API, Error Handling, Null Handling — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 23% · 3 of 13 repos

  codeql-analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (os: 3, python-version: 2)
codeql-analyze (language: 3)
  • Runs inci
  • Seen induckdb/duckdb, Tencent/ncnn, maplibre/maplibre-native
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Spec-aligned Algorithm CorrectnessAll algorithm implementations must be spec-aligned for the exact operator variant, tensor shapes/axes, and boundary conditions. Before me...

  Tencent/ncnn Algorithms C++ ml-systems 2025-09-24

  copy raw open
• optimize algorithmic choicesChoose efficient algorithms and data structures to improve performance and reduce computational overhead. This involves selecting appropr...

  microsoft/terminal Algorithms C++ devtools 2025-08-13

  copy raw open
• Use optimized functionsWhen implementing algorithms, prefer using OpenCV's built-in optimized functions over writing custom implementations. OpenCV's library fu...

  opencv/opencv Algorithms C++ ml-systems 2025-04-28

  copy raw open
• explicit control flow logicUse explicit control flow structures like switch statements instead of complex boolean logic or implicit reasoning when handling algorith...

  ggml-org/llama.cpp Algorithms C++ llm-infra 2025-07-14

  copy raw open
• optimize algorithmic complexityAlways consider the algorithmic complexity and performance implications of data structure choices, memory allocation patterns, and contai...

  ClickHouse/ClickHouse Algorithms C++ data-systems 2025-08-14

  copy raw open

10 more in Algorithms — the playbook lists the top 12.

• Concurrency model checking Races and orderings that fail only under specific interleavings.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• manage object lifetimes carefullyEnsure proper object lifetime management in concurrent scenarios to prevent crashes from dangling pointers and premature destruction. Use...

  microsoft/terminal Concurrency C++ devtools 2025-07-22

  copy raw open
• Protect shared stateAlways protect shared mutable state with appropriate synchronization mechanisms to prevent race conditions and data corruption in multi-t...

  duckdb/duckdb Concurrency C++ data-systems 2025-07-22

  copy raw open
• Enforce clear data ownershipAlways establish and maintain clear ownership semantics in concurrent code to prevent data races. This includes: 1. Use RAII patterns for...

  maplibre/maplibre-native Concurrency C++ app-frameworks 2025-05-07

  copy raw open
• Framework synchronization practicesWhen implementing concurrent code, always use the framework''s provided synchronization primitives rather than direct language features. ...

  opencv/opencv Concurrency C++ ml-systems 2025-04-02

  copy raw open
• Evaluate synchronization necessityBefore implementing thread safety mechanisms like atomic operations or mutexes for global variables, critically assess whether perfect sy...

  facebook/yoga Concurrency C++ runtimes 2022-10-03

  copy raw open

5 more in Concurrency — the playbook lists the top 10.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Avoid duplicate HTTP headersEnsure HTTP headers are sent only once per response to prevent network protocol violations and connection errors. Sending headers multipl...

  ClickHouse/ClickHouse Networking C++ data-systems 2025-08-12

  copy raw open
• Platform-agnostic network APIsWhen implementing networking functionality, ensure code uses platform-agnostic APIs and appropriate abstraction layers to handle differen...

  dotnet/runtime Networking C++ runtimes 2025-06-24

  copy raw open
• Validate network inputsNetwork code must validate all inputs and handle error conditions properly to prevent security vulnerabilities and reliability issues. Th...

  oven-sh/bun Networking C++ runtimes 2025-06-03

  copy raw open
• Protocol response formattingWhen implementing terminal protocol responses (CSI, DCS, OSC sequences), ensure proper formatting with correct terminators and maintain p...

  microsoft/terminal Networking C++ devtools 2024-10-05

  copy raw open

• End-to-end browser tests User flows broken across components, routing and the network.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Linting Bug-prone patterns, unused code and conventions the formatter does not cover.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 23% · 3 of 13 repos

  codeql-analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (os: 3, python-version: 2)
codeql-analyze (language: 3)
  • Runs inci
  • Seen induckdb/duckdb, Tencent/ncnn, maplibre/maplibre-native
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• validate before executing operationsAlways validate inputs and preconditions before executing database operations, and fail explicitly rather than silently ignoring invalid ...

  ClickHouse/ClickHouse Database C++ data-systems 2025-08-19

  copy raw open
• validate inputs comprehensivelyEnsure thorough input validation and comprehensive edge case handling in database operations. This includes checking parameter validity, ...

  duckdb/duckdb Database C++ data-systems 2025-08-18

  copy raw open
• use default serialization methodsWhen adding new properties to serialization methods, use `WritePropertyWithDefault` and `ReadPropertyWithDefault` instead of `WriteProper...

  duckdb/duckdb Migrations C++ data-systems 2025-05-19

  copy raw open
• Optimize database interactionsWhen working with database operations, prioritize efficiency by avoiding redundant query executions. Instead of executing statements mult...

  oven-sh/bun Database C++ runtimes 2025-06-06

  copy raw open
• avoid redundant cache lookupsWhen implementing cache functionality, avoid performing the same cache lookup multiple times. Instead, store and reuse the result from th...

  ClickHouse/ClickHouse Caching C++ data-systems 2025-03-19

  copy raw open

No tool-based check applies. The review prompts below are the verification.

• Avoid unnecessary allocationsMinimize memory allocations, data copying, and expensive operations by implementing early exits, using move semantics, and choosing appro...

  ClickHouse/ClickHouse Performance Optimization C++ data-systems 2025-08-13

  copy raw open
• Cache expensive computationsIdentify and cache the results of expensive operations that are computed repeatedly with the same inputs. This includes function calls, d...

  microsoft/terminal Performance Optimization C++ devtools 2025-07-14

  copy raw open
• Unrolled SIMD LocalityWhen optimizing hot kernels (SIMD/vectorized paths), remove avoidable overhead and improve locality: 1) Unroll small fixed-size tails (e....

  Tencent/ncnn Performance Optimization C++ ml-systems 2025-08-21

  copy raw open
• avoid repeated expensive operationsIdentify and eliminate repeated expensive computations, especially in loops and frequently executed code paths. This optimization princip...

  duckdb/duckdb Performance Optimization C++ data-systems 2025-08-08

  copy raw open
• avoid unnecessary allocationsMinimize performance overhead by avoiding unnecessary memory allocations, expensive data structures, and redundant object creation. Choos...

  llvm/llvm-project Performance Optimization C++ runtimes 2025-07-28

  copy raw open

10 more in Performance Optimization — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Optimize numerical precisionWhen implementing AI operations that involve matrix multiplication or neural network components, explicitly support modern numerical prec...

  pytorch/pytorch AI C++ ml-systems 2025-07-08

  copy raw open
• use model metadataLeverage model metadata from GGUF format instead of hardcoded configuration values or filename-based logic. Model metadata provides autho...

  ggml-org/llama.cpp AI C++ llm-infra 2025-07-26

  copy raw open
• Inference Compatibility RulesEnsure layer math, parameter semantics, and model conversion/backends remain consistent so inference results don’t silently change. Apply...

  Tencent/ncnn AI C++ ml-systems 2023-09-14

  copy raw open
• Validate tensor dimensionsWhen implementing AI model inference code, always validate tensor dimensions and shapes before manipulating them. Neural network outputs ...

  opencv/opencv AI C++ ml-systems 2025-06-10

  copy raw open
• Actionable error messagesWhen writing error messages in PyTorch code, include not only what went wrong but also clear guidance on how to fix the issue. This helps...

  pytorch/pytorch Pytorch C++ ml-systems 2025-07-03

  copy raw open

2 more in AI, Pytorch — the playbook lists the top 7.

No tool-based check applies. The review prompts below are the verification.

• Use proper loggingAlways use the project's standard logging system (mbgl::Log) with appropriate log levels instead of ad-hoc solutions like std::cout, prin...

  maplibre/maplibre-native Logging C++ app-frameworks 2025-06-04

  copy raw open
• Guard expensive logging operationsAvoid executing expensive operations in logging code paths when logging is disabled or not needed. Always check if logging should occur b...

  duckdb/duckdb Logging C++ data-systems 2025-08-06

  copy raw open
• Use appropriate logging levelsReserve logging statements for their appropriate purposes and levels. Use debugging-level logs (`sd_debug`) for development-time diagnost...

  deeplearning4j/deeplearning4j Logging C++ ml-systems 2023-02-03

  copy raw open
• Conditional observability instrumentationWrap all tracing, profiling, and debugging instrumentation in appropriate conditional compilation blocks (like `MLN_TRACY_ENABLE`) to pre...

  maplibre/maplibre-native Observability C++ app-frameworks 2024-08-26

  copy raw open

• CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
  pre-commit-hooks 15% · 2 of 13 repos autofix

  runs via pre-commit hook check-yaml

  exit codes, docs, alternatives, where it runs

  • Commands seenpre-commit hook check-added-large-files
pre-commit hook check-yaml
pre-commit hook end-of-file-fixer
  • Runs inpre-commit, ci
  • Seen inggml-org/llama.cpp, maplibre/maplibre-native
  • Docshttps://github.com/pre-commit/pre-commit-hooks

• Capability-Guarded ConfigurationWhen code depends on environment/build features (SIMD/FP16 availability, OpenCV versioned APIs, packing layout support, OS/ABI-specific m...

  Tencent/ncnn Configurations C++ ml-systems 2026-01-03

  copy raw open
• Dynamic configuration handlingWhen implementing configuration changes that need to be applied at runtime, follow these practices: 1. **Use reload mechanisms instead of...

  hyprwm/Hyprland Configurations C++ devtools 2025-06-15

  copy raw open
• Setting declaration practicesAlways declare settings before using them and optimize access patterns for performance. Settings must be properly declared in the appropr...

  ClickHouse/ClickHouse Configurations C++ data-systems 2025-08-08

  copy raw open
• Configuration completeness validationEnsure configuration options are complete and properly validated before use. When implementing configuration parsing or option handling, ...

  llvm/llvm-project Configurations C++ runtimes 2025-07-28

  copy raw open
• prefer settings over pragmasWhen implementing configuration options, prefer database settings over pragma functions to maintain consistency and better user experienc...

  duckdb/duckdb Configurations C++ data-systems 2025-07-07

  copy raw open

6 more in CI/CD, Configurations — the playbook lists the top 11.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Lockfile consistency A lockfile that no longer matches its manifest.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 23% · 3 of 13 repos

  codeql-analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (os: 3, python-version: 2)
codeql-analyze (language: 3)
  • Runs inci
  • Seen induckdb/duckdb, Tencent/ncnn, maplibre/maplibre-native
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 23% · 3 of 13 repos

  codeql-analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 1)
build (os: 3, python-version: 2)
codeql-analyze (language: 3)
  • Runs inci
  • Seen induckdb/duckdb, Tencent/ncnn, maplibre/maplibre-native
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• comprehensive test coverageTests should comprehensively cover all relevant scenarios, including return values, edge cases, different compilation modes, and abnormal...

  llvm/llvm-project Testing C++ runtimes 2025-07-24

  copy raw open
• Use proper assertionsWrite tests with proper assertions to ensure reliability and maintainability. Follow these guidelines: 1. **Check for empty data** before...

  opencv/opencv Testing C++ ml-systems 2025-06-02

  copy raw open
• Intentional Test CoverageAll unit tests should be (1) intentionally designed for coverage, (2) non-redundant, and (3) maintainable. Apply these rules: 1) Enforce ...

  Tencent/ncnn Testing C++ ml-systems 2025-03-07

  copy raw open
• systematic test coverageWhen writing tests that need to cover multiple scenarios (different data types, backend capabilities, etc.), structure them systematicall...

  ggml-org/llama.cpp Testing C++ llm-infra 2025-07-25

  copy raw open
• Use specific test assertionsAlways use the most specific test assertion method available for your test case rather than generic assertions. Specific assertions provi...

  maplibre/maplibre-native Testing C++ app-frameworks 2025-06-20

  copy raw open

• Docs build Broken cross-references, links and markup in documentation.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Spelling Typos in identifiers, comments and docs.
  codespell 8% · 1 of 13 repos

  exit codes, docs, alternatives, where it runs

  • Seen inpytorch/pytorch
  • Docshttps://github.com/codespell-project/codespell

• Provide contextual code documentationCode should include documentation that explains the purpose, rationale, and context behind implementation decisions, not just what the co...

  llvm/llvm-project Documentation C++ runtimes 2025-07-25

  copy raw open
• Documentation precision standardsEnsure API documentation uses precise type specifications, proper formatting, and clear language to improve developer understanding and u...

  ClickHouse/ClickHouse Documentation C++ data-systems 2025-08-15

  copy raw open
• Document implementation rationaleAdd comments that explain the reasoning behind non-obvious code decisions, technical constraints, or complex logic, while avoiding over-d...

  microsoft/terminal Documentation C++ devtools 2025-08-05

  copy raw open
• Document function contractsAlways document function contracts completely, even when surrounding code lacks documentation. Include header comments that describe the ...

  dotnet/runtime Documentation C++ runtimes 2025-06-12

  copy raw open