stank icon indicating copy to clipboard operation
stank copied to clipboard

stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts

Results 71 stank issues
Sort by recently updated
recently updated
newest added

Take care to avoid false positives, when the pipe symbol is passed in a double or single quoted command argument. Perhaps we keep the scan simple and ignore the false...

* [ ] Promote Ignores[] and Ignore() to the stank library. * [ ] Add Ignore() filter to the Walk implementation in the stank binary. * [ ] Add Ignore()...

Calling `$0` or `exec $0` with no further CLI arguments is asking for trouble.

Not itself POSIX, but can generate POSIX artifacts https://github.com/llamasoft/polyshell

Not itself POSIX, but can generate POSIX artifacts https://github.com/batsh-dev-team/Batsh

LISPy, not POSIXy

The act of implementing our own AST, can help to identify many subtle quirks of sh coding. A PEG-based AST could do wonders for richer linter warnings. More performant application....

https://github.com/dotenv-linter/dotenv-linter

(the shell, not the security tool) https://github.com/mitnk/cicada