Analyze code repositories to produce SARIF-formatted evidence with OpenSSF scoring.
npx skills add https://github.com/parhumm/jaan-to --skill detect-dev
Please help me install this Agent Skill. Skill: detect-dev Source: https://github.com/parhumm/jaan-to/tree/main/adapters/codex/skillpack/skills/detect-dev Command: npx skills add https://github.com/parhumm/jaan-to --skill detect-dev
Engineering teams need objective, machine-parseable assessments of repository health and code quality. detect-dev provides SARIF-backed evidence and OpenSSF-style scoring to guide remediation.
Run the detect-dev skill on your repository to generate SARIF-backed findings and an overall health score.
High-intent search queries and answers about installing and using this skill.
SARIF-formatted evidence for repository code quality audits is generated by analyzing manifests, containers, CI/CD, and infrastructure signals. The process applies OpenSSF scoring with a four-level confidence model and outputs structured findings to a standardized directory.
OpenSSF scoring applies a four-level confidence model to categorize static analysis findings from repository health evaluations. It provides actionable remediation guidance alongside SARIF-formatted evidence for engineering compliance checks.
Yes, Docker, container, and CI/CD configurations can be scanned to generate compliance evidence. The analysis produces SARIF-formatted findings and OpenSSF-style scoring to guide remediation across infrastructure signals and deployment pipelines.
Manifest analysis works across npm, go.mod, and pyproject package managers. It evaluates repository health by detecting dependencies and configurations, then outputs SARIF-backed evidence with an overall health score to a standardized directory.
Automating repository health evaluations with machine-parseable outputs involves generating SARIF-formatted findings with OpenSSF scoring. This standardized output directory structure enables seamless integration with CI/CD pipelines and compliance tracking systems.
efiadmDetect package managers from lock files and install project dependencies.
jakubciszakParse, deduplicate, and aggregate SARIF 2.1.0 findings across multiple runs.
iiammaeMap SARIF and weAudit findings onto Trailmark code graphs for security audits.
BerryKuipersRun TypeScript/JavaScript quality checks and generate a JSON report.
