turborepo

Fail

Audited by Runlayer on Mar 14, 2026

Risk Level: HIGH
Scan Summary
Max Score
91%
Files
28
Flagged
7
Chunks
32
Flagged Files (7)
turborepo/references/caching/remote-cache.mdHIGH
91.4%

Malicious tool definition detected

For local dev and other CI: ### Local Development Setup ```bash # Authenticate with Vercel npx turbo login # Link repo to your Vercel team npx turbo link ``` This creates `.turbo/config.json` with your team info (gitignored by default).

turborepo/references/cli/commands.mdMEDIUM
79.5%

Malicious tool definition detected

```bash turbo build --ui=tui # interactive terminal UI (default in TTY) turbo build --ui=stream # streaming logs (default in CI) ``` --- # turbo-ignore Full docs: https://turborepo.dev/docs/reference/turbo-ignore Skip CI work when nothing relevant changed. Useful for skipping container setup.

turborepo/references/ci/vercel.mdMEDIUM
77.5%

Malicious tool definition detected

Returns exit code 1 (build) if changes detected ### Options ```bash # Check specific package npx turbo-ignore web # Use specific comparison ref npx turbo-ignore --fallback=HEAD~1 # Verbose output npx turbo-ignore --verbose ``` ## Environment Variables Set environment variables in Vercel Dashboard: 1.

turborepo/references/ci/patterns.mdLOW
73.0%

Malicious tool definition detected

## PR vs Main Branch Builds ### PR Builds: Only Affected Test only what changed in the PR: ```yaml - name: Test (PR) if: github.event_name == 'pull_request' run: turbo run build test --affected ``` ### Main Branch: Full Build Ensure complete validation on merge: ```yaml - name: Test (Main) if: github.ref == 'refs/heads/main' run: turbo run build test ``` ## Custom Git Ranges with --filter For advanced scenarios, use `--filter` with git refs: ```bash # Changes since specific commit turbo run test

turborepo/references/ci/RULE.mdLOW
69.8%

Tool passed security scan

turborepo/SYNC.mdLOW
62.6%

Tool passed security scan

turborepo/references/ci/github-actions.mdLOW
56.8%

Tool passed security scan

Passed Files (21)Click to expand
turborepo/SKILL.mdOK
46.9%

Tool passed security scan

turborepo/references/filtering/RULE.mdOK
46.3%

Tool passed security scan

turborepo/references/caching/gotchas.mdOK
44.7%

Tool passed security scan

turborepo/references/environment/gotchas.mdOK
42.6%

Tool passed security scan

turborepo/references/caching/RULE.mdOK
36.9%

Tool passed security scan

turborepo/references/filtering/patterns.mdOK
32.8%

Tool passed security scan

turborepo/references/configuration/gotchas.mdOK
29.1%

Tool passed security scan

turborepo/references/cli/RULE.mdOK
28.4%

Tool passed security scan

turborepo/references/configuration/global-options.mdOK
27.5%

Tool passed security scan

turborepo/references/environment/modes.mdOK
25.0%

Tool passed security scan

turborepo/LICENSE.mdOK
24.3%

Tool passed security scan

turborepo/references/best-practices/packages.mdOK
23.5%

Tool passed security scan

turborepo/references/environment/RULE.mdOK
23.1%

Tool passed security scan

turborepo/references/configuration/RULE.mdOK
21.6%

Tool passed security scan

turborepo/references/watch/RULE.mdOK
21.2%

Tool passed security scan

turborepo/references/best-practices/structure.mdOK
21.0%

Tool passed security scan

turborepo/references/best-practices/dependencies.mdOK
20.5%

Tool passed security scan

turborepo/command/turborepo.mdOK
7.7%

Tool passed security scan

turborepo/references/best-practices/RULE.mdOK
6.7%

Tool passed security scan

turborepo/references/configuration/tasks.mdOK
6.0%

Tool passed security scan

turborepo/references/boundaries/RULE.mdOK
3.5%

Tool passed security scan

Audit Metadata
Max File Score
91%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
28
Files Flagged
7
Chunks Analyzed
32
Analyzed
Mar 14, 2026, 08:16 AM
Security Audit — runlayer — turborepo