·
Last changedVersion:
This version passed the hardening gate. Hardening applied 3 targeted changes and preserved all other text. Classified findings before hardening: 0. Classified findings closed: 0. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 14.
None
None
Expand | File | Group | Subtype | Severity | Status |
|---|
No findings available
0 findings
Autonomously review PR comments and build status, resolving what can be done with high confidence (>=80%) and flagging the rest for human review.
Note: this repository requires that you be using node 24. Use nvm to switch to node 24 before running any commands:
Filter to unresolved threads only.
Read the referenced code and investigate. Classify into:
A. False positive / already resolved — The issue no longer exists in current code.
B. Trivial fix (>=80% confidence) — Obvious, mechanical fix. No design decisions or matters of opinion. Examples: typos, missing null checks, wrong variable names, off-by-one, missing imports.
C. Needs human input (<80% confidence) — Design question, significant refactor, or ambiguous fix.
Reply to a comment:
Resolve a thread:
Always push fixes, then reply, then resolve related threads (in that order).
Investigate failures by category:
Lint errors — Run pnpm lint-current. Fix if mechanical (formatting, import order, unused vars). Flag if the lint rule itself is questionable.
Type errors — Run pnpm typecheck from repo root. Fix straightforward type mismatches. Flag if fix requires architectural decisions.
Unit test failures — Run pnpm test run in relevant workspace. Flag if failure reveals actual bug or design concern.
E2E snapshot failures — Determine whether the PR's code changes should cause visual differences:
update-snapshots label to trigger the automated update workflow:
Mysterious/unexpected failures — Do not attempt to fix. Flag for human review with error output.
Stage specific files only. Never force push. Never use git add -A.
Always end with:
Omit empty sections.
pnpm typecheck) or lint (pnpm lint-current).Get started with chainctlchainctl skill install public/tldraw/shepherd-pr:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/tldraw/skills/shepherd-pr:latest
MIT
HARDENING.md
LICENSE
SKILL.md