Quickstart

Use these commands to install Thirdpass, check a project, and contribute review evidence.

Install Thirdpass

Install the CLI with Cargo:

cargo install thirdpass

For ecosystem support that is not built in, install the matching extension. For example, the Ansible extension is installed as:

cargo install thirdpass-ansible

For more installation detail, see Installation.

From a project directory, compare its dependencies against available review evidence:

thirdpass check

This is the simplest first command. It reads the project dependency files and reports matching review evidence.

Ask the server for the next package that needs review:

thirdpass review-any

To keep reviewing assigned work in a loop:

thirdpass review-any --nightshift

To focus review work on a campaign:

thirdpass review-any --campaign bitcoin-only

Review a known GitHub project:

thirdpass review SeedSigner/seedsigner --extension github --campaign bitcoin-only

To focus on selected files:

thirdpass review d3 4.10.0 \
  --file index.js \
  --file build/d3.js

From a project directory, ask Thirdpass to review packages used by that project:

thirdpass review-deps

Completed reviews are written under .thirdpass/reviews/ so they can travel with the project.