Run Continuous Code Quality Checks
Developer & Ops
Scan
Analyze
Enforce
Set up automated checks that run on every commit or PR to catch security issues, code smells, and test gaps. The workflow covers static analysis, vulnerability scanning, and quality gates that block bad code from shipping.
Useful for
- You skip code quality checks because running them manually takes too long
- You have no idea if your dependencies have known vulnerabilities
- You want a quality gate that blocks merges when standards are not met
Suggested Skills
Pick skills from the phases below based on what you need. Each phase has an example prompt you can copy and try with your agent.
Scan skills check for vulnerabilities, secrets, and insecure patterns. Analyze skills measure code quality, complexity, and test coverage. Gate skills enforce standards and block code that does not pass.
Scan
Check for security vulnerabilities and dangerous patterns.
try in your OpenClaw assistant
Scan my codebase for hardcoded secrets, known vulnerability in dependencies, and any insecure code patterns.
First review and use these skills:
https://clawskills.sh/skills/dmx64-security-scanner
Analyze
Measure code quality and find areas that need improvement.
try in your OpenClaw assistant
Run a code quality analysis on my project and show me the files with the most issues, ranked by severity.
Enforce
Set up quality gates that block bad code from merging.
try in your OpenClaw assistant
Create a CI check that blocks any pull request with critical security issues or test coverage below 80 percent.