occupation
Software Developers
description
Run CodeQL security/quality analysis and fix findings. Use when the user asks to run CodeQL, security scan, static analysis, or fix CodeQL findings.
updated
Menu
SkillsMP has collected 3 skills from yu-iskw/google-cloud-tools. Open a skill to review its source and details.
Showing 3 of 3 collected skills.
Run CodeQL security/quality analysis and fix findings. Use when the user asks to run CodeQL, security scan, static analysis, or fix CodeQL findings.
Scan for vulnerable dependencies and CVEs via pnpm lint:security (Trunk Trivy/OSV-scanner), optional pnpm security:grype or pnpm lint:all (Trunk-all plus Grype). Use for dependency CVE checks, security-scoped lint, or post-bump verification.
Run ESLint (type-aware fixes and checks) then Trunk for formatting and remaining linters. Use when code quality checks fail, before submitting PRs, or to repair broken linting states.