Supported Files
Oxlint will run on files with the following extensions:.js.mjs.cjs.jsx.ts.mts.cts.tsx.vue.astro.svelte
Configuration
Oxlint supports the following configuration files:.oxlintrc.jsonoxlintrc.json.oxlintrcoxlint.json
CodeRabbit only runs Oxlint when an Oxlint config file is present and Biome is disabled.
Security policy and restrictions
CodeRabbit runs Oxlint in a sandbox. Because JavaScript-based plugins can execute repository-controlled code, CodeRabbit does not run Oxlint analysis when the Oxlint configuration enables them. A non-emptyjsPlugins array at the top level or inside any overrides entry causes CodeRabbit to skip Oxlint analysis. Configurations that omit jsPlugins or set it to an empty array continue to receive Oxlint findings as before.
Oxlint’s built-in plugins setting continues to work and does not affect eligibility.
When we skip Oxlint
CodeRabbit will skip running Oxlint when:- Oxlint is already running in GitHub workflows.
- No Oxlint config file is found.
- Biome is enabled.
- The Oxlint configuration declares a non-empty JavaScript plugins array (
jsPlugins) at the top level or inside anyoverridesentry. - The repository’s Oxlint configuration cannot be read, is not valid JSON, or does not parse to a JSON object.