GitHub Actions with ESLint/Prettier/Ruff, WarpFix for auto‑patches, GitHub Advanced Security or Semgrep for static analysis.