reviewdog
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the reviewdog binary and its official installation script from the tool's public repository on GitHub.
- [EXTERNAL_DOWNLOADS]: Fetches multiple security scanners and linters (including Bandit, Semgrep, and Checkov) from official package registries like PyPI and NPM, or via Docker Hub images.
- [REMOTE_CODE_EXECUTION]: Instructs the execution of an official installation script for the reviewdog tool via shell piping in CI/CD environment configurations.
- [COMMAND_EXECUTION]: Utilizes shell commands to coordinate the execution of security scanners and aggregate their outputs for review.
- [SAFE]: Promotes secure practices by recommending the use of CI/CD secrets (e.g., GITHUB_TOKEN) for API authentication instead of hardcoding sensitive credentials.
Audit Metadata