Free catalog · v0.0.26
Reviews Go command-line applications for predictable configuration, cancellation, diagnostics, and exit behavior.
| Area | Scans for |
|---|---|
| Process ownership | Process termination below main and discarded root command errors |
| Cancellation | Detached contexts and subprocesses that ignore cancellation |
| Injection | Shell command construction from composed or untrusted strings |
| Diagnostics | User-facing output on the wrong stream and discarded subprocess errors |
| Contracts | Ambiguous exit codes, missing version identity, and secrets passed on argv |
Reviews Depot CI workflows for security, correctness, reliability, caching, and performance concerns.
ci/github-actionsReviews GitHub Actions workflows for security, supply-chain, and reliability defects.
container/dockerfileReviews Dockerfile-style files for container build and runtime security concerns.