verify / rust
Verifying Rust changes
Files: .rs.
Run the checks under every change, add the checks for what your diff touches, then
apply the review prompts for what the tools miss. Usage is measured across
28 scanned repositories that write Rust; prompts come from
332 review discussions.
Run on every change
the tool most Rust repositories run for each check
-
Formatting Layout drift that buries the real change in the diff.
rustfmt96% · 27 of 28 repos autofixcargo fmt --allexit codes, docs, alternatives, where it runs
- Commands seen
cargo fmt --allcargo fmt --all -- --checkcargo fmt --all --check - Runs inpre-commit, ci, local
- Seen inrust-lang/rust, denoland/deno, unionlabs/union, zed-industries/zed, astral-sh/uv, alacritty/alacritty
- Docshttps://github.com/rust-lang/rustfmt
- Commands seen
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
clippy89% · 25 of 28 reposcargo clippy --workspace --all-targets -- -D warningsexit codes, docs, alternatives, where it runs
- Commands seen
cargo clippy --workspace --all-targets -- -D warningscargo clippy --all-targets -- -D warningscargo clippy --workspace --all-targets --all-features -- -D warnings - Runs inci, local
- Seen inrust-lang/rust, denoland/deno, unionlabs/union, zed-industries/zed, astral-sh/uv, alacritty/alacritty
- Docshttps://github.com/rust-lang/rust-clippy
- Commands seen
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
cargo-check43% · 12 of 28 reposcargo checkexit codes, docs, alternatives, where it runs
- Commands seen
cargo checkcargo check --locked --target wasm32-unknown-unknown -p goose-agent -p goose-provider-typescargo check --workspace --locked --all-targets - Runs inci, local
- Seen inwarpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix, pola-rs/polars, juspay/hyperswitch
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
Review prompts for every change 53 in total
Add when the change touches
open the ones that describe your diff
Authentication, input handling, secrets, permissions
-
Security scanning Injection, unsafe APIs and tainted data reaching a sink.
codeql4% · 1 of 28 reposruns via GitHub Action github/codeql-action/analyze
exit codes, docs, alternatives, where it runs
- Runs inci
- Seen inHmbown/DeepSeek-TUI
- Docshttps://github.com/github/codeql
-
Secret scanning Credentials and tokens committed to the repository.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
cargo-deny57% · 16 of 28 reposcargo deny --locked --all-features check licensesexit codes, docs, alternatives, where it runs
- Commands seen
cargo deny --all-features check banscargo deny --all-features check licensescargo deny --all-features check sources - Runs inci, local
- Alternatives
cargo-audit7%,dependency-review4% - Seen inastral-sh/uv, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, can1357/oh-my-pi, pola-rs/polars
- Docshttps://github.com/EmbarkStudios/cargo-deny
- Commands seen
Public APIs, signatures, error paths, nullability
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
cargo-check43% · 12 of 28 reposcargo checkexit codes, docs, alternatives, where it runs
- Commands seen
cargo checkcargo check --locked --target wasm32-unknown-unknown -p goose-agent -p goose-provider-typescargo check --workspace --locked --all-targets - Runs inci, local
- Seen inwarpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix, pola-rs/polars, juspay/hyperswitch
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
proptest36% · 10 of 28 reposexit codes, docs, alternatives, where it runs
79 more in API, Error Handling, Null Handling — the playbook lists the top 12.
Service and framework code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix64% · 18 of 28 reposdesktop-updater-install (os: 2)exit codes, docs, alternatives, where it runs
- Commands seen
desktop-updater-install (os: 2)rust-build-and-test-tls (tls-feature: 2)analyze (include: 4) - Runs inci
- Alternatives
cargo-hack14% - Seen inastral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Algorithms, parsers, data transforms
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
proptest36% · 10 of 28 reposexit codes, docs, alternatives, where it runs
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
cargo-fuzz18% · 5 of 28 reposcargo fuzz build -s noneexit codes, docs, alternatives, where it runs
- Commands seen
cargo fuzz build -s nonecargo fuzz check --all-features - Runs inci
- Seen inrust-lang/rust, denoland/deno, astral-sh/ruff, influxdata/influxdb, tokio-rs/tokio
- Docshttps://github.com/rust-fuzz/cargo-fuzz
- Commands seen
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.
coq4% · 1 of 28 reposexit codes, docs, alternatives, where it runs
- Alternatives
tla-plus4% - Seen inhelix-editor/helix
- Docshttps://github.com/rocq-prover/rocq
- Alternatives
20 more in Algorithms — the playbook lists the top 12.
Threads, async code, locks, shared state
-
Concurrency model checking Races and orderings that fail only under specific interleavings.
loom4% · 1 of 28 reposruns via loom via environment
exit codes, docs, alternatives, where it runs
- Runs inci
- Seen intokio-rs/tokio
- Docshttps://github.com/tokio-rs/loom
-
Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.
miri11% · 3 of 28 reposcargo miri test --features object -p polars-coreexit codes, docs, alternatives, where it runs
- Commands seen
cargo miri cleancargo miri nextest run --features full --lib --no-fail-fastcargo miri nextest run --features full --test * --no-fail-fast - Runs inci, local
- Seen inzed-industries/zed, pola-rs/polars, tokio-rs/tokio
- Docshttps://github.com/rust-lang/miri
- Commands seen
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
proptest36% · 10 of 28 reposexit codes, docs, alternatives, where it runs
22 more in Concurrency — the playbook lists the top 12.
Network calls, retries, timeouts, protocols
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
cargo-fuzz18% · 5 of 28 reposcargo fuzz build -s noneexit codes, docs, alternatives, where it runs
- Commands seen
cargo fuzz build -s nonecargo fuzz check --all-features - Runs inci
- Seen inrust-lang/rust, denoland/deno, astral-sh/ruff, influxdata/influxdb, tokio-rs/tokio
- Docshttps://github.com/rust-fuzz/cargo-fuzz
- Commands seen
4 more in Networking, Axios — the playbook lists the top 9.
UI components and pages
-
End-to-end browser tests User flows broken across components, routing and the network.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
clippy89% · 25 of 28 reposcargo clippy --workspace --all-targets -- -D warningsexit codes, docs, alternatives, where it runs
- Commands seen
cargo clippy --workspace --all-targets -- -D warningscargo clippy --all-targets -- -D warningscargo clippy --workspace --all-targets --all-features -- -D warnings - Runs inci, local
- Seen inrust-lang/rust, denoland/deno, unionlabs/union, zed-industries/zed, astral-sh/uv, alacritty/alacritty
- Docshttps://github.com/rust-lang/rust-clippy
- Commands seen
Databases, migrations, caching
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix64% · 18 of 28 reposdesktop-updater-install (os: 2)exit codes, docs, alternatives, where it runs
- Commands seen
desktop-updater-install (os: 2)rust-build-and-test-tls (tls-feature: 2)analyze (include: 4) - Runs inci
- Alternatives
cargo-hack14% - Seen inastral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
7 more in Database, Migrations, Caching — the playbook lists the top 12.
Hot paths and performance
No tool-based check applies. The review prompts below are the verification.
21 more in Performance Optimization — the playbook lists the top 12.
Model, prompt and LLM code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
cargo-test75% · 21 of 28 reposcargo test --lockedexit codes, docs, alternatives, where it runs
- Commands seen
cargo test --lockedcargo testcargo test --locked --target wasm32-unknown-unknown -p goose-agent --test wasm - Runs inci, local
- Seen inrust-lang/rust, zed-industries/zed, astral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose
- Docshttps://github.com/rust-lang/cargo
- Commands seen
Logging, metrics, tracing
No tool-based check applies. The review prompts below are the verification.
3 more in Logging, Observability — the playbook lists the top 8.
CI workflows and configuration files
-
CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
pre-commit-hooks4% · 1 of 28 repos autofixruns via pre-commit hook end-of-file-fixer
exit codes, docs, alternatives, where it runs
- Commands seen
pre-commit hook check-merge-conflictpre-commit hook end-of-file-fixer - Runs inpre-commit
- Seen inastral-sh/ruff
- Docshttps://github.com/pre-commit/pre-commit-hooks
- Commands seen
19 more in CI/CD, Configurations — the playbook lists the top 12.
Dependencies and lockfiles
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
cargo-deny57% · 16 of 28 reposcargo deny --locked --all-features check licensesexit codes, docs, alternatives, where it runs
- Commands seen
cargo deny --all-features check banscargo deny --all-features check licensescargo deny --all-features check sources - Runs inci, local
- Alternatives
cargo-audit7%,dependency-review4% - Seen inastral-sh/uv, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, can1357/oh-my-pi, pola-rs/polars
- Docshttps://github.com/EmbarkStudios/cargo-deny
- Commands seen
-
Lockfile consistency A lockfile that no longer matches its manifest.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix64% · 18 of 28 reposdesktop-updater-install (os: 2)exit codes, docs, alternatives, where it runs
- Commands seen
desktop-updater-install (os: 2)rust-build-and-test-tls (tls-feature: 2)analyze (include: 4) - Runs inci
- Alternatives
cargo-hack14% - Seen inastral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
The tests themselves
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix64% · 18 of 28 reposdesktop-updater-install (os: 2)exit codes, docs, alternatives, where it runs
- Commands seen
desktop-updater-install (os: 2)rust-build-and-test-tls (tls-feature: 2)analyze (include: 4) - Runs inci
- Alternatives
cargo-hack14% - Seen inastral-sh/uv, alacritty/alacritty, warpdotdev/warp, aaif-goose/goose, astral-sh/ruff, helix-editor/helix
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Documentation and comments
-
Docs build Broken cross-references, links and markup in documentation.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Spelling Typos in identifiers, comments and docs.
codespell7% · 2 of 28 reposcodespellexit codes, docs, alternatives, where it runs
- Commands seen
codespelluses codespell-project/actions-codespell - Runs inci
- Seen inopenai/codex, jj-vcs/jj
- Docshttps://github.com/codespell-project/codespell
- Commands seen
11 more in Documentation — the playbook lists the top 12.
Where this comes from
28 scanned repositories with at least a fifth of their prompts in Rust
rust-lang/rust7 · denoland/deno4 · unionlabs/union7 · zed-industries/zed9 · astral-sh/uv11 · alacritty/alacritty4 · warpdotdev/warp6 · aaif-goose/goose12 · astral-sh/ruff20 · helix-editor/helix7 · can1357/oh-my-pi6 · pola-rs/polars13 · juspay/hyperswitch8 · servo/servo10 · openai/codex12 · influxdata/influxdb5 · tokio-rs/tokio10 · vercel/turborepo11 · ogulcancelik/herdr5 · tokio-rs/axum8 · tree-sitter/tree-sitter7 · Hmbown/DeepSeek-TUI13 · jj-vcs/jj9 · block/goose12 · neondatabase/neon8 · firecrawl/pdf-inspector7 · huggingface/tokenizers6 · smallcloudai/refact5