8 个专用工具8 focused tools
开发报告与接口Developer reports & APIs
把测试、覆盖率、静态分析和接口文档变成可读摘要。查看声明与引用,快速定位下一步要人工核对的部分。Turn test, coverage, static-analysis, and API documents into readable summaries. Review declarations and references to find the next item for human review.
查看工具Explore tools ↓你可以从这些问题开始。A few useful starting points.
- 持续集成报告:用 JUnitAudit、LCOVAudit 或 SARIFAudit 阅读测试与检查结果。For CI reports: read test and inspection results with JUnitAudit, LCOVAudit, or SARIFAudit.
- 接口描述:用 OpenAPIAudit、AsyncAPIAudit 或 GraphQLSDLAudit 查看结构和引用。For API descriptions: inspect structures and references in OpenAPIAudit, AsyncAPIAudit, or GraphQLSDLAudit.
- 数据模式:用 JSONSchemaAudit 探索声明与引用,再用实际实例和完整验证器核对约束。For data schemas: explore declarations and references with JSONSchemaAudit, then check constraints using actual instances and a complete validator.
选择你的工作台Choose your workbench
物料图CycloneDXAudit
检查 bom-ref 唯一性、依赖目标、未建图组件、许可、哈希与漏洞计数。Audit bom-ref uniqueness, dependency targets, ungraphed components, licenses, hashes, and vulnerability counts.
审计 SBOMAudit SBOM ↗静析账SARIFAudit
遍历 runs、规则、结果级别、消息、首个物理位置、指纹与未知规则引用。Walk runs, rules, result levels, messages, first physical locations, fingerprints, and unknown rule references.
审计 SARIFAudit SARIF ↗测报账JUnitAudit
核对常见 JUnit XML 的测试、失败、错误、跳过、时间与重复用例。Reconcile common JUnit XML tests, failures, errors, skips, time, and duplicate cases.
对账测试报告Reconcile tests ↗覆盖账LCOVAudit
解析 SF、DA、FN/FNDA、BRDA,核对声明汇总并计算行、函数、分支覆盖率。Parse SF, DA, FN/FNDA, and BRDA, reconcile declared totals, and calculate line, function, and branch coverage.
审计 LCOVAudit LCOV ↗接口约OpenAPIAudit
核对 OpenAPI 3 JSON 的路径、操作 ID、参数、响应、安全方案和本地引用。Reconcile OpenAPI 3 JSON paths, operation IDs, parameters, responses, security schemes, and local references.
审计 OpenAPIAudit OpenAPI ↗事件约AsyncAPIAudit
检查 AsyncAPI 3 JSON 的频道地址、收发操作、消息、服务器协议和本地引用。Inspect AsyncAPI 3 JSON channel addresses, send/receive operations, messages, server protocols, and local references.
审计 AsyncAPIAudit AsyncAPI ↗模式图JSONSchemaAudit
遍历 Draft 2020-12 常见结构,核对 $id、$ref、required、enum、type 和正则语法。Walk common Draft 2020-12 structure and reconcile $id, $ref, required, enum, type, and regex syntax.
审计 JSON SchemaAudit JSON Schema ↗图式审GraphQLSDLAudit
汇总常见 GraphQL SDL 的对象、接口、输入、枚举、标量、联合、字段与类型引用。Catalog common GraphQL SDL objects, interfaces, inputs, enums, scalars, unions, fields, and type references.
审计 GraphQL SDLAudit GraphQL SDL ↗本地摘要不等于运行测试、访问接口、完整规范验证或安全扫描。工具不会连接你的仓库或生产系统。Local summaries do not run tests, call APIs, perform complete specification validation, or scan for security issues. The tools do not connect to your repository or production systems.
工具找对了,先试一个样例。Found a tool? Try its sample.
结果配合页面说明一起看,重要用途请独立复核。Read results alongside the tool's explanation, and independently verify important decisions.