swift-testing-baseline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited swift-testing-baseline (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
@Test case.<Type>Tests.swift) and group related cases with @Suite.assertSnapshot.__Snapshots__/ next to the test file) so visual diffs show up in PR review.#### Snapshot gate strategy — strict content / tolerant board (a settled design decision, not a global knob)
Tolerance is per-suite by view type, not a global knob:
badges) use the default strict `.image` (precision 1.0). Bit-exact is the point: adding any visible element (a new label/badge) changes pixels and fails without a re-record → the gate catches unintended UI drift. This is the only reliable "a new label appeared" gate (see dead end below).
*Board*, terminal overlays) keep a`.tolerantImage` (≈0.95 precision, defined once in each app's SnapshotConfig.swift as a project-local extension — .tolerantImage is NOT a built-in pointfreeco/swift-snapshot-testing strategy; the library ships .image(precision:) / .image(perceptualPrecision:)) — strict false-fails on dozens of antialiased cells. Choose strategy at the call site via as: .image vs as: .tolerantImage; never sprinkle ad-hoc `precision:` overrides at call sites.
changed → STOP and investigate; do not* re-record to make it pass. Re-record only for an intended visual change or a deliberate Xcode-version bump.
.enabled(if: !SnapshotEnv.isXcodeCloud))— cross-machine AA drift makes them unreliable on CI runners.
DEAD END — do not re-spike: building a non-pixel "new label appeared" gate by extracting rendered SwiftUI text via the accessibility tree (accessibilityLabel/Value + accessibilityChildren) returns 0 lines headlessly on both a bare and a windowed NSHostingView — SwiftUI builds the AX tree lazily, tied to a live AX client that headless swift test lacks. Strict pixels (above) is the only viable content gate.
<Project>KitTesting target consumed by multiple test targets. ┌─────────────────────┐
│ Snapshot (UI) │ Few, starting from main screens
├─────────────────────┤
│ Integration │ With fakes
│ (with fakes) │
├─────────────────────┤
│ Unit (logic) │ Most, fastest
└─────────────────────┘.mise.toml..serialized trait to avoid races.#expect).<Module>Tests.__Snapshots__/ is committed to git and not accidentally excluded by .gitignore..image; only AA-heavy board suites use .tolerantImage (project-local extension) — no ad-hoc per-call precision: overrides.swiftpm-modularization: one-to-one test target layout and shared <Project>KitTesting.xcode-cloud-single-track-ci: CI Xcode lock and when PR CI runs tests.mise-tool-management: Xcode version managed by mise.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.