aislop Quality Gate
Version updated for https://github.com/scanaislop/aislop to version v0.10.2.
- This action is used across all versions by 1 repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed
A patch release: safer release/CI plumbing and sharper scan consistency.
Added
- Suppression directives — silence an intentional finding inline:
// aislop-ignore-next-line [rule...],// aislop-ignore-line [rule...], or// aislop-ignore-file [rule...]. Scope to named rules or omit to silence every rule on the line, and add a reason after--. Works in any comment syntax. Suppressed findings are dropped before scoring and reported as a count. .aislopignore— a root-level ignore file (same glob semantics as theexcludeconfig) to keep whole paths out of every scan.aislop fix --safe— an opt-in mode restricted to behaviour-preserving fixes (unused-import removal, import merging, narrative-comment removal, formatting). Anything that deletes code or rewrites behaviour is skipped. The defaultfixis unchanged.- Action smoke coverage across default/explicit
latest, pinned npm-version, JSON, human, and node-version-override modes.
Changed
- Coverage gate — the numeric score is now withheld when only a negligible fraction of a repo is analysable: no files in a supported language, or unsupported-language code (C, C++, C#, Swift, Kotlin, etc.) outnumbering supported files by more than three to one.
--jsonreturnsscore: nullwithscoreable: falseand acoveragebreakdown, andcidoes not gate on a withheld score.
Fixed
- No-downgrade guard on
aislop fix -f: a dependency override that would pin a package below the installed version is skipped and reported, not applied. - CVE root-cause collapse: a transitive vulnerability is attributed to the package that carries the advisory instead of emitting a near-duplicate finding for every intermediate package.
- Python comma imports:
import os, sysis now handled per-module instead of deleting the whole line when one module is unused. - Hook telemetry:
aislop hook <agent>flushes its event before the process exits (bounded to 1.5s) instead of dropping it. - GitHub Action exact-version pins: pins such as
version: "0.10.1"run from an isolated temp directory so npm resolves the published package, not a checked-out local one. - Rule catalog consistency across
aislop rules, rule labels, anddocs/rules.md. - Empty-function detection:
ai-slop/empty-functionrecognises normal function declarations, not only arrow stubs.
Tests
1029 passing; self-scan 100/100 with zero diagnostics.
Install: npx aislop@0.10.2 scan · npm i -g aislop@0.10.2