bootspring audit
Quality, security, and best practices audit for your codebase.
Overview
The audit command performs comprehensive quality and security audits, identifying issues and generating prioritized recommendations. Perfect for code reviews, security assessments, and maintaining code health.
Usage
Loading code block...
Commands
| Command | Description |
|---|---|
| (default) | Run full audit |
status | Show current progress |
resume | Continue from checkpoint |
reset | Reset workflow state |
Options
| Option | Description |
|---|---|
--phase=<phase> | Run specific phase only |
--severity=<level> | Filter by severity: critical, high, medium, low |
--fix | Auto-fix safe issues where possible |
--ci | CI mode with exit codes |
Audit Phases
| Phase | Description |
|---|---|
quality | Code quality metrics (complexity, duplication) |
security | Security scan (secrets, vulnerabilities) |
performance | Performance analysis |
practices | Best practices checks |
techDebt | Tech debt inventory |
recommendations | Generate prioritized recommendations |
Severity Levels
| Level | Definition | Action |
|---|---|---|
| CRITICAL | Security vulnerability, data loss risk | Immediate |
| HIGH | Major issue, significant risk | 1-2 days |
| MEDIUM | Moderate issue, tech debt | 1-2 weeks |
| LOW | Minor, optimization opportunity | Backlog |
CI Mode
When running in CI mode, the command returns exit codes:
| Exit Code | Meaning |
|---|---|
| 0 | All checks passed |
| 1 | High severity issues found |
| 2 | Critical issues found |
Loading code block...
Output
Audit generates a report at /planning/AUDIT_REPORT.md containing:
- Executive summary with scores
- Critical/high findings with remediation
- Quality metrics table
- Security vulnerabilities table
- Tech debt inventory
- Prioritized recommendations
Examples
Loading code block...
Related Commands
bootspring analyze- Deep codebase analysisbootspring quality- Run quality gatesbootspring health- Quick health overview