stank
stank copied to clipboard
stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts
Take care to avoid false positives, when the pipe symbol is passed in a double or single quoted command argument. Perhaps we keep the scan simple and ignore the false...
* [ ] Promote Ignores[] and Ignore() to the stank library. * [ ] Add Ignore() filter to the Walk implementation in the stank binary. * [ ] Add Ignore()...
Calling `$0` or `exec $0` with no further CLI arguments is asking for trouble.
Not itself POSIX, but can generate POSIX artifacts https://github.com/llamasoft/polyshell
Not itself POSIX, but can generate POSIX artifacts https://github.com/batsh-dev-team/Batsh
LISPy, not POSIXy
The act of implementing our own AST, can help to identify many subtle quirks of sh coding. A PEG-based AST could do wonders for richer linter warnings. More performant application....
https://github.com/dotenv-linter/dotenv-linter
(the shell, not the security tool) https://github.com/mitnk/cicada