Skip to content

Just recipes

just is the task runner for this repo. Recipes are defined in the top-level justfile and discoverable by running just with no arguments inside the devshell:

nix develop --command just

The list below is auto-regenerated by scripts/refresh-just-recipes.sh (run via just show-recipes), so do not edit the block between the markers by hand. The same list also appears in the project README.md.

just                 # Default: list recipes
just build           # Build the linpeas package
just bump            # Manually refresh linpeas pin from upstream latest release
just check           # Run all flake checks (formatting, pre-commit, lint-shell-tools, devshell-renderer-python, derivation build)
just docs-audit-done # Record the current commit as the point the docs audit was last run against
just fmt             # Format every file via treefmt
just image           # Build the OCI image
just lint            # Run pre-commit hooks against all files
just lint-links      # Run lychee link checker over every markdown file lychee.toml does not exclude, the two dotted trees the recipe names included
just show            # Regenerate the <!-- BEGIN/END flake-show --> block in docs/reference/flake-outputs.md
just show-ci-dag     # Regenerate docs/architecture/ci-dag.md from ci.yml needs graph
just show-ci-summary # Regenerate the Continuous integration summary in README.md
just show-enforcement-matrix # Regenerate docs/security/enforcement-matrix.md from invariant-index annotations
just show-hooks      # Regenerate the pre-commit hook table in docs/development/git.md
just show-recipes    # Regenerate the just-recipes list in README.md and docs/reference/just-recipes.md
just show-scripts    # Regenerate docs/reference/scripts.md from in-script annotations
just show-treefmt    # Regenerate docs/reference/treefmt-config.md from treefmt.nix
just site            # Build the Pages site
just site-data       # Regenerate docs/_data/dashboard.yml standalone
just site-dev        # Live-preview site at http://127.0.0.1:8000 (regenerates data first)
just verify          # Run the lint groups, the harness group, the doc-freshness checks, and standalone enforcers