Lints

Field	Value
Type	Skill Resource
Source	~/.copilot/skills/security/lints.toml
Description	Not specified

Source Content

# Lint registry for scripts/lint.py — the extension point.
# Add a lint: append a [[lint]] block. No code changes needed.
#
# Fields:
#   name     — shown in the summary table.
#   globs    — files this lint applies to. A lint whose file type didn't
#              change never runs.
#   command  — {skill} expands to this skill's directory; {files} to the
#              matched files. If the first token isn't an installed tool,
#              the lint is skipped with a warning, never failed.
#   required — true: a non-zero exit fails the run. false: advisory.
#   note     — one line of context, echoed when the lint runs.
#
# threat_modeler.py is NOT registered — it's a generative tool driven by
# --component/--assets flags, not a file-change validator. secret_scanner.py
# is also excluded: it always scans a whole project path as a unit, the same
# reasoning as backend's verify_scaffold.sh.

[[lint]]
name = "control-mapping"
globs = ["**/control-mapping*.md", "**/ato-*.md", "**/*-ato.md"]
command = "bash {skill}/scripts/lint_control_mapping.sh {files}"
required = true
note = "every Aligned-verdict control row has a non-placeholder evidence cell"

[[lint]]
name = "security-review"
globs = ["**/security-review*.md", "**/threat-model*.md", "**/*-security-review.md"]
command = "bash {skill}/scripts/lint_security_review.sh {files}"
required = true
note = "every finding has severity + reproduction/impact + remediation"