engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wave4: psalm-0001 flagship patch + linter/CI/config scan survey

Browse source 
psalm-0001: FileFilter.allowsClass runs in_array() on every class the
analyzer visits. For C classes and F filter entries, per-run cost is
O(C*F). Fix: lazy array_fill_keys hash set; O(1) probe per class.
Bench: 336x at C=F=5000. Patch + ticket + bench + intel brief ship.

wave4-linter-ci-survey.md: consolidated report on 40 projects scanned
across linters (eslint, biome, prettier, pylint, ruff, black, rubocop,
shellcheck, stylelint, sqlfluff, phpstan, PHP_CodeSniffer, psalm,
rustfmt, golangci-lint, scalafmt, hadolint, yamllint, markdownlint,
ktlint, detekt), CI runners (act, buildkite-agent, tektoncd/pipeline,
concourse, woodpecker), config management (aws-cdk, cdk8s, kustomize),
and build tools (rollup, parcel, vite, turborepo, nx, lerna, swc,
babel, gulp).

Clean scans (zero HIGH+ findings): hadolint, shellcheck, gulp.

Document includes per-target finding counts and 7 triage follow-ups for
future waves (PHP_CodeSniffer ReDoS, ktlint spacing rule, pylint
MSG_ORDER.index, black pgen2 dfa, golangci-lint migrate, tektoncd
forbidden-env scan, aws-cdk region-info).
This commit is contained in:
russell@unturf.com 2026-04-24 17:21:51 -04:00
parent 788514bcf7
commit bb81a1a3a0
No known key found for this signature in database
9 changed files with 384 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
UNDF-REGISTRY.json
View file

@ -1293,5 +1293,6 @@
"check-0001": "UNDF-2026-000001292",
"jasmine-0001": "UNDF-2026-000001293",
"testng-0001": "UNDF-2026-000001294",
"vitest-0001": "UNDF-2026-000001295"
"vitest-0001": "UNDF-2026-000001295",
"psalm-0001": "UNDF-2026-000001296"
}