10 actions in 7 pieces of software · ranked by words, meaning and measured trust · 760 ms

1. 1@zj669/codeqfound in code, not yet checkedno passport yet
   • find

     Fuzzy file/path lookup, including dotfiles. Query is a path fragment, not a glob. If you already know the directory and filename, Read it; do not find to confirm.

   • graph

     Identifiers, or a short question about how X works, where X is defined, or who calls / uses X. Returns an entry span, direct callees, and direct callers — a map, not an answer or source. The how-it-works entry span plus direct neighborhood is the locate; if you still Read, Read only that span, not t

   • grep

     Content search; this is not rg. regex is required: false for a literal string, true for a regular expression. After this pattern has already returned locators, do not open host Ripgrep on the same token. Pass fuzzy:true for approximate/different identifiers. Need nearby source for a hit, pass contex

2. 2CodeQL: Stubverified and signedpassport

   librarygithub/codeql-actionrecord

   • github/codeql-action

     Stub: Don't use this action directly. Read [the documentation](https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql) instead.

3. 3codeqlverified and signedpassport

   skillgithub/awesome-copilotrecord

   • codeql

     Comprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshoot

4. 4@openai/codex-sdkverified and signedpassport

   libraryopenai/codexnpmrecord8,031,124 downloads/month

   • openai

   • codex

5. 5codeqlverified and signedpassport

   skilltrailofbits/skillsrecord

   • codeql

     Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/

6. 6qrcodeverified and signedpassport

   librarylincolnloop/python-qrcoderecord30,226,393 downloads/month

   • qr

7. 7coverageverified and signedpassport

   librarycoveragepy/coveragepyrecord287,744,815 downloads/month

   • code