Text rules
| Rule | Category |
|---|---|
commented-out-config unexplained disabled config blocks or adjacent alternatives | maintainability |
config-comment-wall four or more nearby configuration comments mostly repeat their entries | maintainability |
declarative-deployment-boundary recognized control-plane commands mutate infrastructure outside Terraform | architecture |
ephemeral-execution-artifact ephemeral execution brief, audit report, or change diary | maintainability |
exact-config-comment-restatement YAML or TOML comment exactly repeats the adjacent scalar assignment | maintainability |
hidden-markdown-heading HTML comment hides a Markdown heading | maintainability |
iac-source-coupled-test shell test asserts on raw IaC source text | testing |
large-shell-program shell program contains at least 200 substantive lines | architecture |
no-unsafe-command-argument-interpolation raw Claude command argument interpolated into an executable shell or query fence | security |
no-wildcard-secret-read-permission Claude settings grant wildcard access to secret values | security |
workflow-embedded-program GitHub workflow run: embeds procedural logic | architecture |