Below you will find pages that utilize the taxonomy term “Scanaislop”
June 2, 2026
aislop Quality Gate
Version updated for https://github.com/scanaislop/aislop to version v0.10.2.
This action is used across all versions by 1 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed A patch release: safer release/CI plumbing and sharper scan consistency.
Added Suppression directives — silence an intentional finding inline: // aislop-ignore-next-line [rule...], // aislop-ignore-line [rule...], or // aislop-ignore-file [rule...]. Scope to named rules or omit to silence every rule on the line, and add a reason after --. Works in any comment syntax. Suppressed findings are dropped before scoring and reported as a count. .aislopignore — a root-level ignore file (same glob semantics as the exclude config) to keep whole paths out of every scan. aislop fix --safe — an opt-in mode restricted to behaviour-preserving fixes (unused-import removal, import merging, narrative-comment removal, formatting). Anything that deletes code or rewrites behaviour is skipped. The default fix is unchanged. Action smoke coverage across default/explicit latest, pinned npm-version, JSON, human, and node-version-override modes. Changed Coverage gate — the numeric score is now withheld when only a negligible fraction of a repo is analysable: no files in a supported language, or unsupported-language code (C, C++, C#, Swift, Kotlin, etc.) outnumbering supported files by more than three to one. --json returns score: null with scoreable: false and a coverage breakdown, and ci does not gate on a withheld score. Fixed No-downgrade guard on aislop fix -f: a dependency override that would pin a package below the installed version is skipped and reported, not applied. CVE root-cause collapse: a transitive vulnerability is attributed to the package that carries the advisory instead of emitting a near-duplicate finding for every intermediate package. Python comma imports: import os, sys is now handled per-module instead of deleting the whole line when one module is unused. Hook telemetry: aislop hook <agent> flushes its event before the process exits (bounded to 1.5s) instead of dropping it. GitHub Action exact-version pins: pins such as version: "0.10.1" run from an isolated temp directory so npm resolves the published package, not a checked-out local one. Rule catalog consistency across aislop rules, rule labels, and docs/rules.md. Empty-function detection: ai-slop/empty-function recognises normal function declarations, not only arrow stubs. Tests 1029 passing; self-scan 100/100 with zero diagnostics.