code.shellcheckShellCheck
Runs ShellCheck over *.sh/*.bash/*.ksh files and extensionless files with a sh/bash shebang. ShellCheck only parses scripts; it never executes them. It runs with --norc so a repository's .shellcheckrc (source-path, external-sources, enable=...) cannot change what is read or checked, and from a temp directory with absolute file paths. Errors are medium, warnings low, info/style info; quoting hazards (SC2086, SC2046, SC2115, ...) are reported as security.
- Engine
- Wrapped scanner
- Wraps
shellcheck- Targets
- Codebase
- Areas
- Reliability, Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.shellcheckWraps shellcheck. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.