AI-Assisted Code Review on GitHub: Approaches, Implementation, Pros and Cons
Compare GitHub Copilot, hosted review apps, custom review pipelines, and local models, with implementation steps, security boundaries, and practical pros and cons.
GitHub Actions
Lint Twig Templates with djLint in GitHub Actions
Detect malformed Twig templates in custom Drupal modules and themes using djLint in a fast GitHub Actions job.
PHPStan Static Analysis for Drupal in GitHub Actions
Run PHPStan against custom Drupal code in GitHub Actions to find type errors and unsafe code paths.
Audit Custom PHP Code with PHPCS Security Audit
Apply PHPCS security rules to custom Drupal modules and themes while excluding third-party code.
Audit Production npm Dependencies with GitHub Actions
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Publish Lighthouse Scores for Key Pages with GitHub Actions
Test common pages across environments and publish Lighthouse performance, accessibility, best-practices, and SEO scores.
Scan the Current Checkout for Secrets with Gitleaks
Use Gitleaks in GitHub Actions to detect credentials and tokens in the current checkout without exposing findings.
Lint JavaScript and CSS in GitHub Actions
Run ESLint and Stylelint against a custom Drupal theme to catch frontend defects and inconsistent code before release.
Composer Dependency Audit with GitHub Actions
Audit locked PHP dependencies for known vulnerabilities and abandoned packages with Composer and GitHub Actions.
Common GitHub Workflows for Code Scanning, Image Builds, Lighthouse, and Deployments
A practical guide to common GitHub Actions workflows: PHPCS, PHPStan, CodeQL, dependency review, Docker image builds, container scans, Lighthouse tests, smoke tests, and deployment gates.