Show HN: Pixeebot – a GitHub App that fixes your Sonar findings (Java/Python)

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • cql-evaluator-fork

    Core cql evaluation modules

  • We made a bot, built on an [open source framework](https://codemodder.io), that fixes the problems Sonar (and others!) find in your code. Here are a handful of examples of pixeebot fixing Sonar findings on some OSS code:

    https://github.com/nahsra/cql-evaluator-fork/pull/1/files

  • bsights-engine-spark-fork

    An internal engine for executing bSights Measure and Healthcare CQL rule libraries in Spark from Helix pipelines. Part of the bSights internal products and services.

  • https://github.com/nahsra/bsights-engine-spark-fork/pull/1/f...

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • pygoat

  • https://github.com/pixee/pygoat/pull/2/files

    The changes aren't all super fancy, but we're orienting towards solving real problems and remediating issues -- grunt work you don't want to have to do, but compliance says you should (and you probably should)!

    Right now, we fix around 25 of the things that Sonar commonly finds (and a lot more that it doesn't find!). You can see the complete list of things we fix here:

    https://docs.pixee.ai/codemods/overview/

    I'll tell you, it's so much nicer to receive PRs than tool warnings.

    To try it out:

    1. Install the Pixeebot GitHub App on a Sonar-monitored GitHub repository

      - https://github.com/apps/pixeebot

  • Pixeebot

    Pixeebot finds security and code quality issues in your code and inbound pull requests and creates merge-ready pull requests with recommended fixes. Pixeebot integrates with third party security tools such as Sonar, Semgrep, and CodeQL to automatically fix findings from each tool's scans.

  • https://github.com/pixee/pygoat/pull/2/files

    The changes aren't all super fancy, but we're orienting towards solving real problems and remediating issues -- grunt work you don't want to have to do, but compliance says you should (and you probably should)!

    Right now, we fix around 25 of the things that Sonar commonly finds (and a lot more that it doesn't find!). You can see the complete list of things we fix here:

    https://docs.pixee.ai/codemods/overview/

    I'll tell you, it's so much nicer to receive PRs than tool warnings.

    To try it out:

    1. Install the Pixeebot GitHub App on a Sonar-monitored GitHub repository

      - https://github.com/apps/pixeebot

  • upload-tool-results-action

    A GitHub Action that allows Pixeebot to fix issues found by other code scanners

  • - Put that token in a SONAR_TOKEN repository secret

    3. Add the GitHub Action that will connect Pixeebot to Sonar

    - Copy this sample action into your repo: https://github.com/pixee/upload-tool-results-action/blob/mai...

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project