Verifying Ruby changes

• Security scanning Injection, unsafe APIs and tainted data reaching a sink.
  codeql 40% · 2 of 5 repos

  runs via GitHub Action github/codeql-action/analyze

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inmastodon/mastodon, Homebrew/brew
  • Docshttps://github.com/github/codeql
• Secret scanning Credentials and tokens committed to the repository.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• verify authorization explicitlyAlways perform explicit authorization checks rather than assuming existing security controls are sufficient. Security vulnerabilities oft...

  discourse/discourse Security Ruby app-frameworks 2025-08-20

  copy raw open
• Secure credential managementWhen handling passwords, certificates, or keys in your code, implement secure encryption and storage mechanisms to prevent exposure of se...

  chef/chef Security Ruby cloud-infra 2024-10-29

  copy raw open
• Content security policy configurationImplement Content Security Policy (CSP) configurations appropriately for your application's context. Use report-only mode during implemen...

  rails/rails Security Ruby app-frameworks 2025-01-13

  copy raw open
• Prevent injection vulnerabilitiesAlways sanitize input data before using it in sensitive operations to prevent injection vulnerabilities. This applies to shell commands, ...

  Homebrew/brew Security Ruby devtools 2025-06-03

  copy raw open
• Minimize HTML attack surfaceWhen allowing HTML attributes or rendering user-generated content, explicitly limit the attack surface by restricting allowed properties ...

  mastodon/mastodon Security Ruby app-frameworks 2025-01-03

  copy raw open

• Type checking Wrong types, unhandled null or None, call signatures broken across modules.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Prefer explicit nil handlingHandle nil values explicitly and consistently to improve code clarity and type safety. Follow these guidelines: 1. Use early returns for ...

  Homebrew/brew Null Handling Ruby devtools 2025-06-17

  copy raw open
• Fail gracefully alwaysEnsure code handles errors robustly by using protective patterns that prevent resource leaks, provide clear diagnostics, and degrade grac...

  chef/chef Error Handling Ruby cloud-infra 2025-06-02

  copy raw open
• Standardize API integration patternsEstablish consistent patterns for API integrations by following these guidelines: 1. Document API endpoint usage specifically: - Clearly ...

  Homebrew/brew API Ruby devtools 2025-03-21

  copy raw open
• Minimize public API surfaceDesign APIs with a minimal public surface area by carefully controlling which methods and properties are exposed. Start with a restricted...

  rails/rails API Ruby app-frameworks 2025-06-03

  copy raw open
• Clear error recovery pathsImplement error handling that provides both clear recovery paths for users and graceful degradation for the system. This includes: 1. Cle...

  Homebrew/brew Error Handling Ruby devtools 2025-05-03

  copy raw open

10 more in API, Error Handling, Null Handling — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 20% · 1 of 5 repos

  analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inmastodon/mastodon
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Optimize collection operationsUse Ruby's built-in collection methods to write more efficient and readable code. This reduces algorithmic complexity and improves perfor...

  Homebrew/brew Algorithms Ruby devtools 2025-07-01

  copy raw open
• Choose semantic algorithmsSelect algorithms and data operations that match the semantic intent of your code rather than using convenient but potentially problemati...

  chef/chef Algorithms Ruby cloud-infra 2025-05-20

  copy raw open
• Efficient data processingWhen implementing algorithms that process large data streams or collections, use a chunking approach rather than processing the entire in...

  rails/rails Algorithms Ruby app-frameworks 2025-05-18

  copy raw open
• optimize collection iterationsAvoid multiple passes through the same data structure when a single iteration can accomplish the same work. This reduces computational co...

  mastodon/mastodon Algorithms Ruby app-frameworks 2025-05-03

  copy raw open
• optimize data structure choicesChoose data structures that optimize for your access patterns and computational complexity requirements. When you need frequent membershi...

  discourse/discourse Algorithms Ruby app-frameworks 2025-08-19

  copy raw open

• Concurrency model checking Races and orderings that fail only under specific interleavings.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Secure network operationsWhen performing network operations, prioritize security and configurability to ensure robustness across different environments. This incl...

  chef/chef Networking Ruby cloud-infra 2023-10-25

  copy raw open
• Use ASCII-only URLsURLs in code should exclusively use ASCII characters for maximum security and compatibility. This prevents potential security vulnerabili...

  Homebrew/brew Networking Ruby devtools 2025-05-21

  copy raw open
• Network resource limitsImplement protective limits for network operations to prevent resource exhaustion and denial-of-service attacks. Network operations shoul...

  mastodon/mastodon Networking Ruby app-frameworks 2025-02-18

  copy raw open

• End-to-end browser tests User flows broken across components, routing and the network.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Linting Bug-prone patterns, unused code and conventions the formatter does not cover.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 20% · 1 of 5 repos

  analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inmastodon/mastodon
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Database-specific query optimizationLeverage database-specific features to optimize queries and improve performance. Different database engines have unique capabilities that...

  rails/rails Database Ruby app-frameworks 2025-05-23

  copy raw open
• validate migration data comprehensivelyMigration scripts must thoroughly validate data conditions and handle edge cases to ensure reliable data transformation. Always check for...

  discourse/discourse Migrations Ruby app-frameworks 2025-08-25

  copy raw open
• Optimize database queriesWrite efficient database queries by leveraging proper indexes, using performance-optimized ActiveRecord methods, and avoiding unnecessary...

  mastodon/mastodon Database Ruby app-frameworks 2025-07-23

  copy raw open
• Avoid N+1 queriesPrevent N+1 query performance issues by batching database operations instead of making individual queries within loops. This is critical ...

  discourse/discourse Database Ruby app-frameworks 2025-08-18

  copy raw open
• migration data dependenciesEnsure that migrations properly handle data dependencies and sequencing to prevent deployment failures. When migrations depend on specifi...

  mastodon/mastodon Migrations Ruby app-frameworks 2025-07-23

  copy raw open

No tool-based check applies. The review prompts below are the verification.

• Minimize unnecessary object allocationsAvoid creating unnecessary objects, especially in frequently executed code paths. This includes being mindful of implicit object allocati...

  rails/rails Performance Optimization Ruby app-frameworks 2025-05-06

  copy raw open
• Minimize unnecessary operationsOptimize performance by eliminating redundant operations and arranging code to avoid unnecessary computations, especially in frequently e...

  Homebrew/brew Performance Optimization Ruby devtools 2025-04-02

  copy raw open
• Memoize expensive operationsCache results of expensive operations, especially shell commands and external queries, to avoid redundant executions. Use Ruby's idiomati...

  chef/chef Performance Optimization Ruby cloud-infra 2023-10-27

  copy raw open
• batch similar operationsWhen performing multiple similar operations (database queries, Redis calls, job enqueues, or data lookups), batch them together or elimin...

  mastodon/mastodon Performance Optimization Ruby app-frameworks 2025-06-10

  copy raw open
• Cache expensive operationsIdentify and eliminate duplicate computations by caching results of expensive operations. This includes memoizing method calls, avoiding ...

  discourse/discourse Performance Optimization Ruby app-frameworks 2025-08-22

  copy raw open

• Unit and integration tests Behaviour regressions on the paths the tests exercise.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

No tool-based check applies. The review prompts below are the verification.

• Include contextual log informationLog messages should include sufficient context to make them useful for debugging, monitoring, and audit trails. Include relevant entity I...

  discourse/discourse Logging Ruby app-frameworks 2025-08-18

  copy raw open

• CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• centralize configuration managementMigrate configuration from direct environment variable access to Rails' config_for mechanism for better organization, testability, and ma...

  mastodon/mastodon Configurations Ruby app-frameworks 2025-07-21

  copy raw open
• Configure at proper scopePlace configuration options at their proper scope within the framework hierarchy. Avoid tight coupling between components and ensure user...

  rails/rails Configurations Ruby app-frameworks 2025-01-07

  copy raw open
• Explicit configuration over implicitAlways define explicit configuration defaults rather than relying on implicit behavior or autovivification. Configuration values should: ...

  chef/chef Configurations Ruby cloud-infra 2024-12-20

  copy raw open
• Safe setting modificationsWhen modifying site settings during operations like imports, jobs, or plugin initialization, implement proper safeguards to prevent unint...

  discourse/discourse Configurations Ruby app-frameworks 2025-08-10

  copy raw open
• Structured environment configurationUse structured environment variable handling with explicit validation instead of directly accessing ENV hash. Implement proper parsing fo...

  Homebrew/brew Configurations Ruby devtools 2025-06-05

  copy raw open

2 more in CI/CD, Configurations — the playbook lists the top 7.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Lockfile consistency A lockfile that no longer matches its manifest.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 20% · 1 of 5 repos

  analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inmastodon/mastodon
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 20% · 1 of 5 repos

  analyze (language: 3)copy

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inmastodon/mastodon
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Organize tests for clarityStructure tests to maximize clarity and maintainability by: 1. Placing related tests together in appropriate test files 2. Using built-in...

  rails/rails Testing Ruby app-frameworks 2025-06-03

  copy raw open
• optimize test fixturesUse the `fab!` shorthand syntax for creating test fixtures and reuse fabricated objects across tests to improve performance and maintaina...

  discourse/discourse Testing Ruby app-frameworks 2025-08-20

  copy raw open
• optimize test organizationOrganize tests to minimize factory creation, reduce duplication, and improve performance by chaining assertions and extracting common val...

  mastodon/mastodon Testing Ruby app-frameworks 2024-12-20

  copy raw open
• Use strict test doublesAlways use strict test doubles (instance_double, class_double) instead of basic doubles or OpenStruct in tests. Strict doubles provide co...

  chef/chef Testing Ruby cloud-infra 2021-08-26

  copy raw open
• Structure test fixtures clearlyTest fixtures should clearly separate input parameters from expected outputs to enhance readability and maintainability. For table-driven...

  Homebrew/brew Testing Ruby devtools 2025-06-17

  copy raw open

• Docs build Broken cross-references, links and markup in documentation.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Spelling Typos in identifiers, comments and docs.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Document with examplesAlways include comprehensive documentation with clear examples for properties, methods, and code patterns. Documentation should include: ...

  chef/chef Documentation Ruby cloud-infra 2025-02-11

  copy raw open
• Write complete API examplesAlways provide complete, context-rich code examples in API documentation. Examples should show the full usage context and avoid abbreviat...

  rails/rails Documentation Ruby app-frameworks 2025-06-30

  copy raw open
• Document non-obvious decisionsAlways add clear comments explaining non-obvious code decisions such as magic numbers, arbitrary values, truncation limits, or special ca...

  Homebrew/brew Documentation Ruby devtools 2025-05-30

  copy raw open
• Example documentation standardsOrganize API documentation examples for maximum clarity and usefulness. Place hand-written examples before generated examples since they'...

  aws/aws-sdk-js Documentation Ruby cloud-infra 2015-07-22

  copy raw open