Skip to content

rules.md

Latest commit

 

History

History
30 lines (22 loc) · 1.11 KB

rules.md

File metadata and controls

30 lines (22 loc) · 1.11 KB
Raw

Rules

pr-audit v0.1 ships deterministic diff-only rules. They use changed hunks and file classification; they do not execute project code or send code to an external service.

Test mutation

  • test-mutation/assertion-removed: removed assertion-like line in a test file.
  • test-mutation/expectation-changed: removed assertion and added assertion in the same hunk.
  • test-mutation/skip-added: test.skip, it.skip, describe.skip, or Rust #[ignore].
  • test-mutation/todo-added: TODO or placeholder test.
  • test-mutation/sleep-added: sleeps, timers, or delays in tests.
  • test-mutation/assertion-weakened: strict assertion replaced by a broader one.
  • test-mutation/snapshot-large-change: large .snap churn.

Unsafe usage

  • unsafe/rust-unsafe-added
  • unsafe/rust-unwrap-expect-added
  • unsafe/typescript-any-added
  • unsafe/typescript-ignore-added
  • unsafe/typescript-cast-added
  • unsafe/go-unsafe-added
  • unsafe/go-panic-added

Hygiene

  • hygiene/merge-conflict-marker
  • security/secret-added

Each finding includes a stable fingerprint, evidence, severity, confidence, and recommendation.