About deepsource
deepsource is a command-line skill for querying DeepSource repository analysis, suited to reviewing code issues, vulnerabilities, and analysis status. It filters results by severity, category, path, PR, commit, or branch, and can return JSON.
Key features
- 01Query and filter code review issues
- 02View scores across report card categories
- 03Filter vulnerabilities by severity
- 04Check repository status and analysis runs
- 05Scope results to PRs, commits, or branches
- 06Return machine-readable JSON
Use cases
- 01Find critical issues in a specific path
- 02Review vulnerabilities for a PR
- 03Check analysis scores for a commit
- 04Verify whether repository analysis has run
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ deepsourcecorp/ skills --skill deepsourceAfter installing, type/deepsourcein Claude Code to confirm it loaded.
Details
From the project READMEDeepSource CLI
Authentication
deepsource auth login
Goals
Get code review issues
deepsource issues --output json
Narrow by severity, category, or path:
deepsource issues --severity critical,major --output json
deepsource issues --category security,bug-risk --output json
deepsource issues --path src/auth --output json
deepsource issues --severity critical --category security --limit 20 --output json
Scope to a PR or branch:
deepsource issues --pr 42 --output json
deepsource issues --default-branch --output json
Get report card
deepsource report-card --output json
Returns grades (A-F) and scores for security, reliability, complexity, hygiene, coverage, and an aggregate.
Scope to a PR or commit:
deepsource report-card --pr 42 --output json
deepsource report-card --commit abc123 --output json
Get vulnerabilities
deepsource vulnerabilities --output json
Filter by severity:
deepsource vulnerabilities --severity critical,high --output json
Scope to a PR or branch:
deepsource vulnerabilities --pr 42 --output json
deepsource vulnerabilities --default-branch --output json
Check analysis status
deepsource repo status --output json
deepsource runs --output json
deepsource runs --commit abc123 --output json
repo status shows activation and configured analyzers. runs shows recent analysis run history.
Key patterns
- Auto-detection: Inside a git repo the CLI auto-detects the repo and current branch. Use
--repowhen outside the repo or targeting a different one. Use scope flags (--pr,--commit,--default-branch) to override the auto-detected branch. - Always use
--output jsonfor machine-readable output. - Repo format:
--repo provider/owner/name— providers:gh,gl,bb,ads. - Scope flags are mutually exclusive:
--commit,--pr, and--default-branchcannot be combined. Omit all three to use auto-detection.
Documentation
Full CLI docs: https://deepsource.com/docs/developers/cli/installation
Run deepsource <command> --help for detailed flag reference.