What does oneredoak/claude-code-workflows do?

This project is a suite of automated tools and an LLM code review framework designed for design auditing, security scanning, and AI-driven code analysis. It functions as a developer workflow orchestrator that uses static analysis agents and agent-based workflows to automate pull request analysis and security audits.

What are the main features of oneredoak/claude-code-workflows?

The main features of oneredoak/claude-code-workflows are: Critic Agent Loops, Agentic Code Reviews, Review Customization, Automated Code Review, Security and Vulnerability Scanning, Pull Request Analysis Agents, Development Workflow Orchestrators, Vulnerability Review Scanners.

What are some open-source alternatives to oneredoak/claude-code-workflows?

Open-source alternatives to oneredoak/claude-code-workflows include: qodo-ai/qodo-cover — Qodo Cover is an engineering governance platform and AI-powered assistant designed for automated code review and unit… snyk/cli — The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies,… analysis-tools-dev/static-analysis — This project is a comprehensive, curated directory of static analysis, linting, and security scanning utilities. It… qodo-ai/pr-agent — PR Agent is an AI-powered code analysis tool and pull request reviewer that uses large language models to automate… realpython/materials — This project is a comprehensive collection of Python programming education materials, including tutorials, exercises,… snyk/snyk — Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source…

Claude Code Workflows | Awesome Repos

Features

Critic Agent Loops - Employs a dual-loop architecture using critic-agent loops to coordinate primary analysis and secondary verification.
Agentic Code Reviews - Employs a dual-loop agent architecture to automate pull request analysis and security audits using LLMs.
Review Customization - Allows customization of review prompts and categories to match organization-specific architectural and quality standards.
Automated Code Review - Integrates automated review agents into CI/CD pipelines to provide feedback on pull requests.
Security and Vulnerability Scanning - Detects vulnerabilities, exposed secrets, and risky external dependencies in code changes using industry standards.
Pull Request Analysis Agents - Uses AI-driven agents triggered via CI actions to perform deep reasoning and analysis of pull request modifications.
Development Workflow Orchestrators - Implements an orchestrator using slash commands and agents to coordinate on-demand code and architectural reviews.
Vulnerability Review Scanners - Performs automated security reviews on pull requests to identify vulnerabilities and exposed secrets.
Security Scanning Integrations - Embeds automated security vulnerability scanning into CI/CD pipelines for inline feedback on pull requests.
CI Pipeline Integrations - Triggers automated code and security analysis within deployment pipelines to validate changes before human review.
Automated - Verifies frontend code against design principles and accessibility standards via automated scanning of code and URLs.
CI/CD - Provides automated detection of vulnerabilities and secrets specifically integrated into CI/CD pipelines.
Coding Convention Engines - Applies organization-specific coding conventions and design guidelines to tailor the automated review process.
Coding Standards Enforcement - Enforces organization-specific coding conventions and design principles across the codebase through automated audits.
Automated Design Audits - Assesses front-end changes against established design principles and user experience standards during pull requests.
Browser Automation - Provides tools for simulating user interactions in web browsers to verify frontend visual behavior and accessibility standards.
Automated Code Review - Runs automated agents to check pull requests for bugs, style guide adherence, and architectural patterns.
Component and Interaction Testing - Interacts with live UI elements using browser automation to verify visual behavior and interactive functionality.
Visual Compliance Validations - Checks user interface changes against brand guidelines and accessibility standards using browser automation.
Slash Command Analysis Triggers - Implements specialized slash commands to execute instant code analysis on specific commits or pull requests.
Finding Classification - Categorizes and prioritizes security vulnerabilities and bugs by risk level to guide remediation.
Dependency Vulnerability Scanning - Includes utilities for auditing third-party dependencies and external libraries for known security risks.
On-Demand Code Analysis - Enables instant code analysis on specific commits or pull requests using specialized slash commands.
Static Analysis Engines - Uses AI-driven static analysis to enforce organizational coding conventions and style guides.
Design System Enforcement - Enforces project-specific brand guidelines and design principles to maintain visual consistency.

Open-Source-Alternativen zu Claude Code Workflows

Ähnliche Open-Source-Projekte, sortiert nach der Anzahl der gemeinsamen Funktionen mit Claude Code Workflows.

qodo-ai/qodo-cover
qodo-ai/qodo-cover
5,444Auf GitHub ansehen
Qodo Cover is an engineering governance platform and AI-powered assistant designed for automated code review and unit test generation. It utilizes an abstract syntax tree codebase knowledge graph to map dependencies and architectural relationships, allowing it to analyze pull requests and enforce organizational coding standards. The system distinguishes itself through a multi-agent analysis pipeline that performs architectural reasoning and identifies bugs beyond the immediate diff. It features a model context protocol server to expose codebase intelligence to external tools and can automatic
Pythonagentsaitest-automation
Auf GitHub ansehen5,444
snyk/cli
snyk/cli
5,428Auf GitHub ansehen
The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies, proprietary application code, container images, and infrastructure-as-code configuration files. It also serves as a platform management tool, allowing users to configure organizations, users, SSO, and reporting from the terminal rather than the web dashboard. The CLI integrates directly into development workflows, enabling scanning within IDEs, build pipelines, and version control systems. It implements static analysis with interfile data flow analysis to find complex security f
TypeScriptmonitorsecuritysnyk
Auf GitHub ansehen5,428
analysis-tools-dev/static-analysis
analysis-tools-dev/static-analysis
14,389Auf GitHub ansehen
This project is a comprehensive, curated directory of static analysis, linting, and security scanning utilities. It serves as a central resource for developers to discover, compare, and select tools based on specific programming languages, licensing models, and integration requirements. The directory distinguishes itself by providing deep metadata for each listed utility, including community-driven popularity rankings, maintenance status, and deployment methods. By aggregating these tools into a single searchable index, it enables teams to identify solutions for enforcing coding standards, ma
Rustanalysisawesome-listcode-quality
Auf GitHub ansehen14,389

OneRedOakclaude-code-workflows