AI Developer Tool · Python

codeql-goose

Unofficial community Goose checks that report to GitHub Code scanning via SARIF. Not made or endorsed by GitHub, the CodeQL team or the Goose authors. https://github.com/marketplace/actions/goose-analyzer-for-code-scanning-unofficial

flisk@flisk-sh · Atlas 65.1 · #16= builder

View on GitHub2 Open flisk's Atlas

What it is

codeql-goose is a GitHub Action that provides static analysis for Goose source code, implementing a lexer and three safety rules to produce SARIF 2.1.0 output for integration with GitHub Code scanning. It includes tests, documentation, and a release process for the GitHub Marketplace.

code-quality
code-scanning-ready
codeql
codeql-goose
flisk
github-actions
goose

Scored ate02b72b26 Oct 2026Changes since

Merit describes the code at this commit. Later pushes count once the owner rescans. How merit is scored

Where it counts

MLOps15%
Data Science10%

How much of the project is about each field, as scoring counts it. It ranks in the field it is most about.

What the judge found

Read from the project's code at its scored commit.

Strengths4

Self-contained with no external dependencies, making it easy to deploy and use.
Comprehensive test suite covering the rules and SARIF output generation.
Clear documentation and usage instructions for both local and CI integration.
Produces standard SARIF 2.1.0 output that integrates seamlessly with GitHub Code scanning.

Limitations