turborepo

Fail

Audited by Runlayer on Mar 16, 2026

Risk Level: HIGH
Scan Summary
Max Score
91%
Files
26
Flagged
7
Chunks
30
Flagged Files (7)
turborepo/references/caching/remote-cache.mdHIGH
91.4%

Malicious tool definition detected

For local dev and other CI: ### Local Development Setup ```bash # Authenticate with Vercel npx turbo login # Link repo to your Vercel team npx turbo link ``` This creates `.turbo/config.json` with your team info (gitignored by default).

turborepo/references/cli/commands.mdMEDIUM
79.5%

Malicious tool definition detected

turborepo/references/ci/vercel.mdMEDIUM
77.5%

Malicious tool definition detected

Returns exit code 1 (build) if changes detected ### Options ```bash # Check specific package npx turbo-ignore web # Use specific comparison ref npx turbo-ignore --fallback=HEAD~1 # Verbose output npx turbo-ignore --verbose ``` ## Environment Variables Set environment variables in Vercel Dashboard: 1.

turborepo/references/ci/patterns.mdLOW
73.0%

Malicious tool definition detected

## PR vs Main Branch Builds ### PR Builds: Only Affected Test only what changed in the PR: ```yaml - name: Test (PR) if: github.event_name == 'pull_request' run: turbo run build test --affected ``` ### Main Branch: Full Build Ensure complete validation on merge: ```yaml - name: Test (Main) if: github.ref == 'refs/heads/main' run: turbo run build test ``` ## Custom Git Ranges with --filter For advanced scenarios, use `--filter` with git refs: ```bash # Changes since specific commit turbo run test

turborepo/references/ci/RULE.mdLOW
68.7%

Tool passed security scan

turborepo/references/ci/github-actions.mdLOW
56.7%

Tool passed security scan

turborepo/SKILL.mdLOW
52.1%

Tool passed security scan

Passed Files (19)Click to expand
turborepo/references/filtering/RULE.mdOK
46.3%

Tool passed security scan

turborepo/references/caching/gotchas.mdOK
45.5%

Tool passed security scan

turborepo/references/environment/gotchas.mdOK
42.6%

Tool passed security scan

turborepo/references/caching/RULE.mdOK
36.9%

Tool passed security scan

turborepo/references/environment/RULE.mdOK
33.4%

Tool passed security scan

turborepo/references/filtering/patterns.mdOK
32.8%

Tool passed security scan

turborepo/references/configuration/gotchas.mdOK
29.1%

Tool passed security scan

turborepo/references/cli/RULE.mdOK
28.4%

Tool passed security scan

turborepo/references/best-practices/structure.mdOK
25.7%

Tool passed security scan

turborepo/references/configuration/RULE.mdOK
25.1%

Tool passed security scan

turborepo/references/environment/modes.mdOK
25.0%

Tool passed security scan

turborepo/references/configuration/global-options.mdOK
24.5%

Tool passed security scan

turborepo/references/best-practices/packages.mdOK
22.6%

Tool passed security scan

turborepo/references/watch/RULE.mdOK
21.2%

Tool passed security scan

turborepo/references/best-practices/dependencies.mdOK
20.5%

Tool passed security scan

turborepo/command/turborepo.mdOK
7.7%

Tool passed security scan

turborepo/references/best-practices/RULE.mdOK
6.7%

Tool passed security scan

turborepo/references/configuration/tasks.mdOK
6.0%

Tool passed security scan

turborepo/references/boundaries/RULE.mdOK
3.5%

Tool passed security scan

Audit Metadata
Max File Score
91%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
26
Files Flagged
7
Chunks Analyzed
30
Analyzed
Mar 16, 2026, 02:42 PM
Security Audit — runlayer — turborepo