Google Git
Sign in
fuchsia / shac-project / shac / 5795d43b7aef109d62e6db453cfeb288de92f029
commit5795d43b7aef109d62e6db453cfeb288de92f029[log] [tgz]
authorOliver Newman <olivernewman@google.com>Fri Sep 01 15:26:50 2023 +0000
committerCQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com>Fri Sep 01 15:26:50 2023 +0000
tree697e99d76ea3a518f86f03e5703f6dba142e7677
parentb22077423737575c410af17d28b94c6cbc5ffc8e [diff]
[fork_check] Clean up unused file

I introduced this file in
commit 7fafae0f3d68b0a57a4532f7e2bd0fed7a2a1bf3, then renamed it during
code review (to "internal/go_checks/fork_check/main.go") but forgot to
delete it from the original location.

Change-Id: I7e2f1c49f0b3730cd441a673baa06a4e1162f8d9
Reviewed-on: https://fuchsia-review.googlesource.com/c/shac-project/shac/+/911232
Fuchsia-Auto-Submit: Oliver Newman <olivernewman@google.com>
Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Reviewed-by: Danny Rosen <dannyrosen@google.com>
1 file changed
tree: 697e99d76ea3a518f86f03e5703f6dba142e7677
  1. .github/
  2. checks/
  3. doc/
  4. images/
  5. internal/
  6. scripts/
  7. vendor/
  8. .gitignore
  9. AUTHORS
  10. codecov.yml
  11. CONTRIBUTING.md
  12. go.mod
  13. go.sum
  14. LICENSE
  15. main.go
  16. OWNERS
  17. PATENTS
  18. README.md
  19. shac.star
  20. shac.textproto
README.md

shac

Shac (Scalable Hermetic Analysis and Checks) is a unified and ergonomic tool and framework for writing and running static analysis checks.

Shac checks are written in Starlark.

usage demonstration

Usage

go install go.fuchsia.dev/shac-project/shac@latest
shac check
shac doc shac.star | less

Documentation

Road map

Planned features/changes, in descending order by priority:

  • [x] Configuring files to exclude from shac analysis in shac.textproto
  • [x] Include unstaged files in analysis, including respecting unstaged shac.star files
  • [x] Automatic fix application with handling for conflicting suggestions
  • [ ] Provide a .shac cache directory that checks can write to
  • [ ] Mount checkout directory read-only
    • [x] By default
    • [ ] Unconditionally
  • [ ] Give checks access to the commit message via ctx.scm
  • [ ] Built-in formatting of Starlark files
  • [ ] Configurable “pass-throughs” - non-default environment variables and mounts that can optionally be passed through to the sandbox
  • [ ] Add glob arguments to ctx.scm.{all,affected}_files() functions for easier filtering
  • [ ] Filesystem sandboxing on MacOS
  • [ ] Windows sandboxing
  • [ ] Testing framework for checks

Contributing

⚠ The source of truth is at https://fuchsia.googlesource.com/shac-project/shac.git and uses Gerrit for code review.

See CONTRIBUTING.md to submit changes.