Preset Reference

membership6 direct rules

recommended

Quiet practical default for most teams: curated high-signal checks for AI-native repos.

Membership preset: directly activates this rule set.

Coverage

Covered Rules

SEC324GitHub Actions: unpinned third-party actionGitHub Actions workflow uses a third-party action that is not pinned to a full commit SHAstablegithub_workflow

SEC328GitHub Actions: write-capable third-party actionGitHub Actions workflow combines explicit write-capable permissions with a third-party actionpreviewgithub_workflow

SEC329MCP config: mutable package runnerMCP configuration launches tooling through a mutable package runnerstablejson

SEC340Claude hook: mutable package launcherClaude settings command hook uses a mutable package launcherstableclaude_settings

SEC347AI markdown: MCP via mutable package runnerAI-native markdown example launches MCP through a mutable package runnerpreviewmarkdown

SEC352AI markdown: unscoped Bash tool grantAI-native markdown frontmatter grants unscoped Bash tool accessstablemarkdown

What This Preset Enables

The recommended preset is the quiet practical default for most teams. It enables a curated set of high-signal shipped rules that already read well for broad AI-native repo hardening.

When To Use It

Use this when you want the main lintai experience without immediately opting into noisier context-sensitive preview checks or workflow-governance review findings.

Tradeoffs

You get a calmer default with stronger practical signal, but broader context-sensitive review stays in preview, and shared-authority policy checks stay in governance.