1.4

Adjusted Signal

1.4

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

14.9K

Stars

Bicep

Language

794.2K

Lines of Code

6.6K

Files

452

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 256 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 28 finding(s).

Agent Over-Engineering Ratio 3.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 170 finding(s).

PR Review Velocity Impact 6.4/100 · LOW

Which changes need focused human review? 452 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 7HIGH 2MEDIUM 266LOW 177

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 452 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators165 hits · 488 pts

Severity	File	Line	Snippet	Context
MEDIUM	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	2	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	18	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	42	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	47	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	52	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	56	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	62	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	83	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	107	# -------------------------------------------------------------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	307	#------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	312	#-----------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	323	#--------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	349	#---------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	435	#----------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	551	#----------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	279	#------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	284	#-----------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	295	#--------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	321	#---------------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	408	#----------------------	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	477	#----------------------	COMMENT
MEDIUM	…enthub-elk/scripts/logstash-eventhub-install-ubuntu.sh	3	# ========================================================================================	COMMENT
MEDIUM	…enthub-elk/scripts/logstash-eventhub-install-ubuntu.sh	6	# ========================================================================================	COMMENT
MEDIUM	…iagnostics-with-elk/scripts/logstash-install-ubuntu.sh	3	# ========================================================================================	COMMENT
MEDIUM	…iagnostics-with-elk/scripts/logstash-install-ubuntu.sh	6	# ========================================================================================	COMMENT
MEDIUM	…gnostics-with-elk/scripts/elk-simple-install-ubuntu.sh	3	# ========================================================================================	COMMENT
MEDIUM	…gnostics-with-elk/scripts/elk-simple-install-ubuntu.sh	6	# ========================================================================================	COMMENT
MEDIUM⚡	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	287	#------------------------	COMMENT
MEDIUM⚡	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	294	#-----------------------	COMMENT
MEDIUM⚡	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	299	#-----------------------	COMMENT
MEDIUM⚡	…rkloads/kafka/kafka-on-ubuntu/kafka-cluster-install.sh	215	#------------------------	COMMENT
MEDIUM⚡	…rkloads/kafka/kafka-on-ubuntu/kafka-cluster-install.sh	222	#-----------------------	COMMENT
MEDIUM⚡	…rkloads/kafka/kafka-on-ubuntu/kafka-cluster-install.sh	227	#-----------------------	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	25	#--------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	30	#--------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	25	#--------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	30	#--------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	188	# ========================================================	COMMENT
MEDIUM⚡	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	215	#=========================================================	COMMENT
MEDIUM⚡	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	220	#=========================================================	COMMENT
MEDIUM⚡	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	228	#================================================================	COMMENT
MEDIUM	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	259	#------------------------	COMMENT
MEDIUM	…rkloads/spark/spark-on-ubuntu/spark-cluster-install.sh	263	#-----------------------	COMMENT
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	1	# ──────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	1501	# ── Validate file exists ──────────────────────────────────────────	COMMENT
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	1508	# ── Validate .testResult ──────────────────────────────────────────	COMMENT
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	1516	# ── Validate .testResult.deployments is an array ──────────────────	COMMENT
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	1525	# ── Filter prereqs entries ────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	33	# ──────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	57	# ============================================================================	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	69	# ============================================================================	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	90	# ── Security gate 1/2: commenter authorization ─────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	109	# ── Security gate 2/2: block edits to protected workflow files ─────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	309	# ── Commenter authorization (defense-in-depth) ─────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	329	# ── 1. Resolve the PR head ref ──────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	344	# ── 2. Detect changed sample folders (API only, no checkout) ────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	450	# ── 4. Add reaction to acknowledge the command ──────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	471	# ── 6. Parse SARIF security findings ────────────────────────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	557	# ── 7. Build bounded context and run Copilot inference ──────────────	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	659	# ── 8. Post the summary when inference succeeds ────────────────────	COMMENT
105 more matches not shown…

Self-Referential Comments56 hits · 172 pts

Severity	File	Line	Snippet	Context
MEDIUM	az-group-deploy.sh	154	# Create the resource group only if it doesn't already exist	COMMENT
MEDIUM	…rkloads/nagios/nagios-on-ubuntu/nagios-core-install.sh	113	# Create a new Nagios user account and give it a password	COMMENT
MEDIUM	…rkloads/nagios/nagios-on-ubuntu/nagios-core-install.sh	118	# Create a new nagcmd group for allowing external commands to be submitted through the web interface. Add both the nagio	COMMENT
MEDIUM	…rkloads/nagios/nagios-on-ubuntu/nagios-core-install.sh	147	# Create a nagios admin account for logging into the Nagios web interface.	COMMENT
MEDIUM	…stre/intel-lustre-clients-vmss-centos/lustre_client.sh	11	# Initialize local variables	COMMENT
MEDIUM	…re/intel-lustre-client-server/scripts/lustre_client.sh	11	# Initialize local variables	COMMENT
MEDIUM	…el-lustre/intel-lustre-client-server/scripts/lustre.sh	12	# Initialize local variables	COMMENT
MEDIUM	…ustre/intel-lustre-client-server/scripts/monitoring.sh	13	# Initialize local variables	COMMENT
MEDIUM	…lustre/intel-lustre-clients-on-centos/lustre_client.sh	11	# Initialize local variables	COMMENT
MEDIUM	…s/netapp/netapp-ontap-sql/scripts/deploy-netapp-otc.sh	82	## Create a ONTAP Cloud working environment on Azure	COMMENT
MEDIUM	…o/vsts-tomcat-redhat-vm/scripts/tomcat-setup-redhat.sh	20	# Create a mod_jk config file	COMMENT
MEDIUM	…o/vsts-tomcat-redhat-vm/scripts/tomcat-setup-redhat.sh	146	# Create an RSA public and private key for SSH	COMMENT
MEDIUM	…o/vsts-tomcat-ubuntu-vm/scripts/tomcat-setup-ubuntu.sh	23	# Create a new JkWorkers workers.propeties file	COMMENT
MEDIUM	…o/vsts-tomcat-ubuntu-vm/scripts/tomcat-setup-ubuntu.sh	38	# Create a link to the Tomcat manager	COMMENT
MEDIUM	…o/vsts-tomcat-ubuntu-vm/scripts/tomcat-setup-ubuntu.sh	98	# Create an RSA public and private key for SSH	COMMENT
MEDIUM	…jboss-eap-standalone-rhel7/scripts/eap-setup-redhat.sh	93	# Create an RSA public and private key for SSH	COMMENT
MEDIUM	…/elasticsearch/scripts/elasticsearch-centos-install.sh	244	# Create a new yum repository file for Elasticsearch	COMMENT
MEDIUM	…tflow/nextflow-genomics-cluster-ubuntu/scripts/init.sh	139	#Create a log folder for each node	COMMENT
MEDIUM	…tflow/nextflow-genomics-cluster-ubuntu/scripts/init.sh	288	#Create a systemd unit	COMMENT
MEDIUM	…ds/dosyago/browserbox/installBrowserBox_then_notify.sh	79	# Create a new user and add to sudoers	COMMENT
MEDIUM	…ds/dosyago/browserbox/installBrowserBox_then_notify.sh	147	# Create a Node.js script using a heredoc	COMMENT
MEDIUM	…solace/solace-message-router/scripts/install-solace.sh	334	#Define a create script	COMMENT
MEDIUM	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	204	# Create a script to sync /mahara/html/mahara (gluster/NFS) and /var/www/html/mahara (local) and set up a minutely cron	COMMENT
MEDIUM	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	254	# Create a script to modify the last modified timestamp file (/mahara/html/mahara/last_modified_time.mahara_on_azure)	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	339	# Create a system administrator	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	332	# Create a system administrator	COMMENT
MEDIUM	…nkins-cluster-2-linux-1-win/scripts/install-jenkins.sh	9	## Create the TOOLS directory	COMMENT
MEDIUM	…ads/jenkins/jenkins-cicd-vmss/scripts/packer/script.sh	11	# Create a tomcat group	COMMENT
MEDIUM	…ads/jenkins/jenkins-cicd-vmss/scripts/packer/script.sh	13	# Create a new tomcat user and make this user member of the tomcat group with home directory /opt/tomcat	COMMENT
MEDIUM	…ads/jenkins/jenkins-cicd-vmss/scripts/packer/script.sh	43	# Create a systemd Service File	COMMENT
MEDIUM	…/openldap/openldap-singlevm-ubuntu/install_openldap.sh	60	# Create the certificate	COMMENT
MEDIUM	…lication-workloads/django/django-app/install_django.sh	18	# Create a new file named views.py in the /var/www/helloworld/helloworld directory. This will contain the view	COMMENT
MEDIUM	…kloads/django/sqldb-django-on-ubuntu/install_django.sh	22	# Create a new file named views.py in the /var/www/helloworld/helloworld directory. This will contain the view	COMMENT
MEDIUM	demos/nfs-ha-cluster-ubuntu/scripts/helper_functions.sh	322	# Create a script to sync /moodle/html/moodle (gluster/NFS) and /var/www/html/moodle (local) and set up a minutely cron	COMMENT
MEDIUM	demos/nfs-ha-cluster-ubuntu/scripts/helper_functions.sh	379	# Create a script to modify the last modified timestamp file (/moodle/html/moodle/last_modified_time.moodle_on_azure)	COMMENT
MEDIUM	…age-import-zipped-vhds/prereqs/prereq.azuredeploy.json	183	"scriptContent": "# 210602 \n \n ##### Parameters \n \n $StorageAccountName = ${Env:StorageAccountName	CODE
MEDIUM	…os/load-balancer-gateway/scripts/nginx-serverblocks.sh	85	### Create the content you want to display on the websites hosted on Nginx server	COMMENT
MEDIUM	…os/load-balancer-gateway/scripts/nginx-serverblocks.sh	104	### Create the server blocks for the site web101	COMMENT
MEDIUM	…os/load-balancer-gateway/scripts/nginx-serverblocks.sh	143	### Create the folders for the logs:	COMMENT
MEDIUM	…arts/microsoft.compute/vmss-ubuntu-web-ssl/keyvault.sh	19	# Create a resource group for the keyvault	COMMENT
MEDIUM	…arts/microsoft.compute/vmss-ubuntu-web-ssl/keyvault.sh	36	# Create the key vault	COMMENT
MEDIUM	…arts/microsoft.compute/vmss-ubuntu-web-ssl/keyvault.sh	125	# Create a random password with 33 bytes of entropy	COMMENT
MEDIUM	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	18	# Create the certificate's key	COMMENT
MEDIUM	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	21	# Create the CSR (Certificate Signing Request)	COMMENT
MEDIUM⚡	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	46	# Create a root CA certificate	COMMENT
MEDIUM⚡	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	47	# Create the root key	COMMENT
MEDIUM⚡	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	50	# Create a Root Certificate and self-sign it	COMMENT
MEDIUM⚡	…bapp-with-app-gateway-and-apim/scripts/create-certs.sh	60	# Create a new directory for the certificates	COMMENT
MEDIUM	…t.cache/redis-high-availability/redis-cluster-setup.sh	110	# Create a cluster based upon the specified host list and replica count	COMMENT
MEDIUM	…eployment-script-azcli-graph-azure-ad/azuredeploy.json	40	"$fxv#0": "# Create the Azure AD application.\napplication=$(az ad app create --display-name $AzureADApplicationName	CODE
MEDIUM	…ipt-azcli-graph-azure-ad/scripts/create-application.sh	1	# Create the Azure AD application.	COMMENT
MEDIUM	…ipt-azcli-graph-azure-ad/scripts/create-application.sh	6	# Create a service principal for the application.	COMMENT
MEDIUM	…ll-dns-proxy/scripts/test-dns-and-private-endpoints.sh	178	# Create a directory in the ADLS Gen2 file system	COMMENT
MEDIUM	…ll-dns-proxy/scripts/test-dns-and-private-endpoints.sh	208	# Create a file to upload to the ADLS Gen2 file system in the storage account	COMMENT
MEDIUM	…ft.network/route-server-quagga/scripts/quaggadeploy.sh	36	## Create a folder for the quagga logs	COMMENT
MEDIUM	…ft.network/route-server-quagga/scripts/quaggadeploy.sh	42	## Create the configuration files for Quagga daemon	COMMENT

Over-Commented Block124 hits · 117 pts

Severity	File	Line	Snippet	Context
LOW	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	21	# The MIT License (MIT)	COMMENT
LOW	…orkloads/neo4j/docker-neo4j/scripts/setup_data_disk.sh	1	#!/bin/bash	COMMENT
LOW	…rkloads/neo4j/neo4j-ubuntu-vm/scripts/install-neo4j.sh	1	#!/bin/bash	COMMENT
LOW	…rkloads/neo4j/neo4j-ubuntu-vm/scripts/install-neo4j.sh	21	# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,	COMMENT
LOW	…rkloads/neo4j/neo4j-ubuntu-vm/scripts/install-neo4j.sh	41	# Installing Neo4j. Neo4j version and edition passed as parameter	COMMENT
LOW	…rkloads/nagios/nagios-on-ubuntu/nagios-core-install.sh	1	#!/bin/bash	COMMENT
LOW	…drupal8-vmss-glusterfs-mysql/scripts/install_drupal.sh	1	#!/bin/bash	COMMENT
LOW	…-vmss-glusterfs-mysql/scripts/mount-azure-fileshare.sh	1	#!/bin/bash	COMMENT
LOW	…nbuildjava-ubuntu-vm/scripts/java-vstsbuild-install.sh	1	#!/bin/sh	COMMENT
LOW	…-fullbuild-ubuntu-vm/scripts/full-vstsbuild-install.sh	21	# Install Oracle Java in silent mode	COMMENT
LOW	…ads/postgre/postgresql-on-ubuntu/install_postgresql.sh	1	#!/bin/bash	COMMENT
LOW	…rkloads/elastic/elasticsearch-jmeter/jmeter-install.sh	1	#!/bin/bash	COMMENT
LOW	…ds/elastic/elasticsearch-vmss/install-elasticsearch.sh	1	#!/bin/bash	COMMENT
LOW	…kloads/elastic/elasticsearch/scripts/kibana-install.sh	1	#!/bin/bash	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	1	#!/bin/bash	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	61	if [ "${UID}" -ne 0 ];	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	281	# Primary Install Tasks	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	301		COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	421	# 1.x Marvel node	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	521	log "elasticsearch service is in unhealthy state, exit"	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	541	#--------------- TEMP (We will use this for the update path yet) ---------------	COMMENT
LOW	…elastic/elasticsearch/scripts/kibana-centos-install.sh	1	#!/bin/bash	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	1	#!/bin/bash	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	401	# Increase maximum mmap count	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	461	#echo "elasticsearch - memlock unlimited" >> /etc/security/limits.conf	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/setup_webserver.sh	1	# Custom Script for Linux	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	1	# Custom Script for Linux	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	41	# configure elastic search repository & install elastic search	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	61	# Please consult the documentation for further information on configuration options:	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	81	#	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	101	#	COMMENT
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	121	# Prevent the "split brain" by configuring the majority of nodes (total number of master-eligible nodes / 2 + 1):	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	1	#!/bin/bash	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	81	echo "Invalid dbServerType ($dbServerType) given. Only 'mysql' or 'postgres' is allowed. Exiting"	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	121	# "backend" specifies the backend used to get files modification.	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	141	# but it will be logged as info.	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	181	action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	501	# These jails block attacks against named (bind9). By default, logging is off	COMMENT
LOW	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	521	# victim. See	COMMENT
LOW	…datameer-trend-chef-riskanalysis/scripts/chefserver.sh	1	#!/bin/bash	COMMENT
LOW	…r-trend-chef-riskanalysis/scripts/vm-disk-utils-0.1.sh	1	#!/bin/bash	COMMENT
LOW	…r-trend-chef-riskanalysis/scripts/vm-disk-utils-0.1.sh	21	# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,	COMMENT
LOW	…oud-pak-for-data/scripts/deployCloudPakDB2aaService.sh	41		COMMENT
LOW	…nfluxDB-Grafana/scripts/Configfiles/docker-compose.yml	21	# Update these credentials with secure values when building the production image.	COMMENT
LOW	…enthub-elk/scripts/logstash-eventhub-install-ubuntu.sh	1	#!/bin/bash	COMMENT
LOW	…iagnostics-with-elk/scripts/logstash-install-ubuntu.sh	1	#!/bin/bash	COMMENT
LOW	…gnostics-with-elk/scripts/elk-simple-install-ubuntu.sh	1	#!/bin/bash	COMMENT
LOW	…solace/solace-message-router/scripts/install-solace.sh	1	#!/bin/bash	COMMENT
LOW	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	1	#!/bin/bash	COMMENT
LOW	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	21	# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,	COMMENT
LOW	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	121	done	COMMENT
LOW	…kafka/kafka-ubuntu-multidisks/kafka-cluster-install.sh	281	# Primary Install Tasks	COMMENT
LOW	…rkloads/kafka/kafka-on-ubuntu/kafka-cluster-install.sh	1	#!/bin/bash	COMMENT
LOW	…rkloads/kafka/kafka-on-ubuntu/kafka-cluster-install.sh	21	# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,	COMMENT
LOW	…hara/mahara-autoscale-cache/scripts/setup_webserver.sh	1	# Custom Script for Linux for Mahara/Azure	COMMENT
LOW	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	281	# Fail2Ban configuration file.	COMMENT
LOW	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	301	ignoreip = 127.0.0.1/8	COMMENT
LOW	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	321	# pyinotify, gamin, polling.	COMMENT
LOW	…ara/mahara-autoscale-cache/scripts/helper_functions.sh	341	sendername = Fail2Ban	COMMENT
64 more matches not shown…

Hallucination Indicators7 hits · 105 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	242	at System.Management.Automation.Tracing.PSEtwLogProvider.LogPipelineExecutionDetailEvent(System.Management.Automation	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	244	at System.Management.Automation.Internal.PipelineProcessor.LogToEventLog()	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	245	at System.Management.Automation.Internal.PipelineProcessor.DisposeCommands()	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	246	at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(System.Object)	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	247	at System.Management.Automation.Runspaces.LocalPipeline.InvokeHelper()	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	248	at System.Management.Automation.Runspaces.LocalPipeline.InvokeThreadProc()	CODE
CRITICAL⚡	demos/s2d-oms-mgmt-solution/README.md	249	at System.Management.Automation.Runspaces.PipelineThread.WorkerProc()	CODE

AI Slop Vocabulary30 hits · 80 pts

Severity	File	Line	Snippet	Context
MEDIUM	…cation-workloads/expanse/go-expanse-on-ubuntu/setup.sh	14	# elevate privileges on the node.	COMMENT
MEDIUM	…drupal8-vmss-glusterfs-mysql/scripts/install_drupal.sh	82	# Log input parameters (except the admin password) to facilitate troubleshooting	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-centos-install.sh	353	# Set cluster and machine names - just use hostname for our node.name	COMMENT
LOW	…/elasticsearch/scripts/elasticsearch-ubuntu-install.sh	325	# Set cluster and machine names - just use hostname for our node.name	COMMENT
MEDIUM	…dle-scalable-cluster-ubuntu/scripts/setup_webserver.sh	539	# More comprehensive varnish error page. Display time, instance hostname, host header, url for easier troubleshootin	COMMENT
MEDIUM	…odle-scalable-cluster-ubuntu/scripts/install_moodle.sh	1087	# More comprehensive varnish error page. Display time, instance hostname, host header, url for easier troubleshootin	COMMENT
MEDIUM⚡	…datameer-trend-chef-riskanalysis/scripts/chefserver.sh	11	##Checking availability of file pivotal.pem before creating organisation and user.	COMMENT
MEDIUM⚡	…datameer-trend-chef-riskanalysis/scripts/chefserver.sh	12	#while [ ! -f /etc/opscode/pivotal.pem ]; do	COMMENT
MEDIUM⚡	…datameer-trend-chef-riskanalysis/scripts/chefserver.sh	14	#while [ ! -f /etc/opscode/pivotal.pem ]	COMMENT
MEDIUM	…hara/mahara-autoscale-cache/scripts/setup_webserver.sh	585	# More comprehensive varnish error page. Display time, instance hostname, host header, url for easier troubleshootin	COMMENT
MEDIUM	…ahara/mahara-autoscale-cache/scripts/install_mahara.sh	552	# More comprehensive varnish error page. Display time, instance hostname, host header, url for easier troubleshootin	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	87	# Log input parameters (except the admin password) to facilitate troubleshooting	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	166	# Add local machine name to the hosts file to facilitate IP address resolution	COMMENT
MEDIUM	…go/mongodb-high-availability/mongodb-ubuntu-install.sh	235	# Log a message to facilitate troubleshooting	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	85	# Log input parameters (except the admin password) to facilitate troubleshooting	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	162	# Add local machine name to the hosts file to facilitate IP address resolution	COMMENT
MEDIUM	…odb-nodejs-high-availability/mongodb-ubuntu-install.sh	231	# Log a message to facilitate troubleshooting	COMMENT
MEDIUM	…ap/openldap-cluster-ubuntu/scripts/install_openldap.sh	108	# TODO: This regex could be made more robust	COMMENT
MEDIUM	…/openldap/openldap-singlevm-ubuntu/install_openldap.sh	78	# TODO: This regex could be made more robust	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	1266	# Extract field values by column name (robust against column-order changes)	COMMENT
MEDIUM	.github/workflows/ValidateSampleDeployments.yml	1683	# Extract field values by column name (robust against column-order changes)	COMMENT
LOW	demos/nfs-ha-cluster-ubuntu/scripts/setup_nfs_ha.sh	250	# Don't create a file system, but just set up a disk (RAID if multiple unpartitioned disks)	COMMENT
MEDIUM	…cache/redis-high-availability/redis-cluster-install.sh	124	# Add local machine name to the hosts file to facilitate IP address resolution	COMMENT
MEDIUM	…s/microsoft.costmanagement/finops-hub/azuredeploy.json	1673	"$fxv#1": "// Copyright (c) Microsoft Corporation.\r\n// Licensed under the MIT License.\r\n\r\n.cre	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	223	"markdownText": "# FinOps hubs 0.10 (May 2025)\nThe FinOps hub dashboard provides several summaries of your cost a	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	1271	"markdownText": "### Data ingestion\nData ingestion refers to the process of collecting, transforming, and organiz	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	1289	"markdownText": "### Reporting + analytics\nReporting and analytics involve analyzing cloud data and creating repo	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	2670	"markdownText": "### Workload optimization\nWorkload optimization refers to the process of ensuring cloud services	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	2829	"markdownText": "### FinOps practice operations\nFinOps practice operations refer to the process of:\n\n- Building	CODE
MEDIUM	…rts/microsoft.costmanagement/finops-hub/dashboard.json	2829	"markdownText": "### FinOps practice operations\nFinOps practice operations refer to the process of:\n\n- Building	CODE

Modern AI Meta-Vocabulary16 hits · 38 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	.github/workflows/ValidateSampleDeployments.yml	10	# and feeds findings to the AI model via an agentic tool-calling loop.	COMMENT
MEDIUM	…mpute/vmss-flexible-orchestration-quickstart/README.md	25	[![Deploy To Azure](https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/image	CODE
MEDIUM	…mpute/vmss-flexible-orchestration-quickstart/README.md	27	[![Visualize](https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/images/visu	CODE
MEDIUM⚡	…te/vmss-flexible-orchestration-manual-add-vm/README.md	22	[![Deploy To Azure](https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/image	CODE
MEDIUM⚡	…te/vmss-flexible-orchestration-manual-add-vm/README.md	23	[![Deploy To Azure US Gov](https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUID	CODE
MEDIUM⚡	…te/vmss-flexible-orchestration-manual-add-vm/README.md	24	[![Visualize](https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/images/visu	CODE
MEDIUM	…ft.costmanagement/governance-workbook/azuredeploy.json	269	"json": "The objective of this workbook is to provide a comprehensive overview of the governance	CODE
MEDIUM	…ft.costmanagement/governance-workbook/azuredeploy.json	269	"json": "The objective of this workbook is to provide a comprehensive overview of the governance	CODE
MEDIUM	…ft.costmanagement/governance-workbook/azuredeploy.json	5869	"json": "## Build and scale your applications quickly while maintaining control\r\nTake advantag	CODE
MEDIUM	…osoft.costmanagement/governance-workbook/workbook.json	221	"json": "The objective of this workbook is to provide a comprehensive overview of the governance pos	CODE
MEDIUM	…osoft.costmanagement/governance-workbook/workbook.json	221	"json": "The objective of this workbook is to provide a comprehensive overview of the governance pos	CODE
MEDIUM	…osoft.costmanagement/governance-workbook/workbook.json	5821	"json": "## Build and scale your applications quickly while maintaining control\r\nTake advantage of	CODE
MEDIUM	….costmanagement/optimization-workbook/azuredeploy.json	5496	"json": "# Virtual Machine Scale Sets\r\n## Save with Azure Spot VMs on Virtual Mach	CODE
MEDIUM	…oft.costmanagement/optimization-workbook/workbook.json	5448	"json": "# Virtual Machine Scale Sets\r\n## Save with Azure Spot VMs on Virtual Machine	CODE
MEDIUM	…s/microsoft.costmanagement/finops-hub/azuredeploy.json	1673	"$fxv#1": "// Copyright (c) Microsoft Corporation.\r\n// Licensed under the MIT License.\r\n\r\n.cre	CODE
MEDIUM	…ppplatform/microservice-apps-enterprise-plan/README.md	12	# Deploy a simple Azure Spring Apps microservice application	COMMENT

Structural Annotation Overuse12 hits · 23 pts

Severity	File	Line	Snippet	Context
LOW⚡	.github/agents/summarizer.agent.md	21	### Step 1: Review template files	COMMENT
LOW⚡	.github/agents/summarizer.agent.md	29	### Step 2: Review security findings	COMMENT
LOW⚡	.github/agents/summarizer.agent.md	35	### Step 3: Produce the summary	COMMENT
LOW⚡	…gration-to-containers-on-azure/scripts/mongo_nodejs.sh	3	#Step 1 - Importing the Public Key	COMMENT
LOW⚡	…gration-to-containers-on-azure/scripts/mongo_nodejs.sh	6	#Step 2 - Create source list file MongoDB:	COMMENT
LOW⚡	…gration-to-containers-on-azure/scripts/mongo_nodejs.sh	9	#Step 3 - Update the repository	COMMENT
LOW⚡	…gration-to-containers-on-azure/scripts/mongo_nodejs.sh	12	#Step 4 - Install MongoDB	COMMENT
LOW	…rts/microsoft.compute/vmss-azure-files-linux/README.md	41	## Step 2: Run this template with parameters	COMMENT
LOW	…ft.azurestackhci/create-cluster-with-prereqs/README.md	34	### Step 1: Prepare your cluster nodes and Active Directory	COMMENT
LOW	…ft.azurestackhci/create-cluster-with-prereqs/README.md	44	### Step 2: Create the Arc App Registration and assign permissions	COMMENT
LOW	…ft.azurestackhci/create-cluster-with-prereqs/README.md	82	### Step 3: Register the Microsoft.AzureStackHCI Resource Provider in your subscription	COMMENT
LOW	…ft.azurestackhci/create-cluster-with-prereqs/README.md	86	### Step 4: Update the deployment parameter file	COMMENT

Fake / Example Data13 hits · 13 pts

Severity	File	Line	Snippet	Context
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	236	"placeholder": "Select the main game engine",	CODE
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	466	"placeholder": "tcp:perforce:1666",	CODE
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	563	"placeholder": "E.g. //game/main",	CODE
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	609	"placeholder": "E.g. //depot/...",	CODE
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	628	"placeholder": "E.g. /...",	CODE
LOW	…-cicd-webapp/src/main/java/com/cvz/azure/DbAccess.java	70	String sqlData = "INSERT INTO products VALUES(1, 'Lorem ipsum dolor sit amet', 'Nullam', 'Donec id nulla molest	CODE
LOW	…-cicd-webapp/src/main/java/com/cvz/azure/DbAccess.java	70	String sqlData = "INSERT INTO products VALUES(1, 'Lorem ipsum dolor sit amet', 'Nullam', 'Donec id nulla molest	CODE
LOW	…r-portainer-traefik-windows-vm/createUiDefinition.json	11	"placeholder": "your.name@example.com",	CODE
LOW	…osoft.mission/enclave-storage-account/azuredeploy.json	73	"defaultValue": "placeholder"	CODE
LOW	…osoft.mission/enclave-storage-account/azuredeploy.json	121	"defaultValue": "placeholder"	CODE
LOW	…ts/microsoft.mission/enclave-keyvault/azuredeploy.json	29	"defaultValue": "placeholder"	CODE
LOW	…ts/microsoft.mission/enclave-keyvault/azuredeploy.json	57	"defaultValue": "placeholder"	CODE
LOW	…osoft.mission/enclave-keyvault/createUiDefinition.json	82	{ "name": "keys", "type": "Microsoft.Common.EditableGrid", "ariaLabel": "Enter key information",	CODE

Redundant / Tautological Comments8 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	…er-s4hana-fully-activated-appliance/scripts/install.sh	79	# Check if mount point exist, if not log failure	COMMENT
LOW	…drupal8-vmss-glusterfs-mysql/scripts/install_drupal.sh	200	# Check if this is the first drupal node based on existance of files directory and lockfile, and set IS_FIRST_MEMBER	COMMENT
LOW	…dp-vnc-gateway-existing-vnet/scripts/docker-mariadb.sh	19	# Check if the MySQL database has been prepared already	COMMENT
LOW	…dp-vnc-gateway-existing-vnet/scripts/cloud-config.yaml	138	# Check if the MySQL database has been prepared already	COMMENT
LOW	…ds/dosyago/browserbox/installBrowserBox_then_notify.sh	53	# Check if essential fields are present	COMMENT
LOW	…spark/hdinsight-apache-spark/spark141-installer-v04.sh	4	# Check if the current host is headnode.	COMMENT
LOW	…ds/spark/hdinsight-genomics-adam/adam-installer-v03.sh	4	# Check if the current host is headnode.	COMMENT
LOW	.github/workflows/validate-samples.yml	85	# Check if the file is under a recognised root	COMMENT

Synthetic Comment Markers1 hit · 11 pts

Severity	File	Line	Snippet	Context
HIGH⚡	.github/workflows/ValidateSampleDeployments.yml	7	# Posts an AI-generated reviewer-friendly summary comment on a PR using the	COMMENT

Slop Phrases5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…dle-scalable-cluster-ubuntu/scripts/install_elastic.sh	55	# Before you set out to tweak and tune the configuration, make sure you	COMMENT
MEDIUM	…k/ibm-cloud-pak-for-data/scripts/deployCloudPakLite.sh	332	name: ibmcpd-cr # This is the recommended name, but you can change it	CODE
LOW	…loads/azure-gamedev/gamedev-vm/createUiDefinition.json	863	"text": "<b>IMPORTANT:</b>\r\n\r\nIn order to successfully register and use this VM as an AVD session	CODE
LOW	…hara/mahara-autoscale-cache/scripts/install_elastic.sh	54	# Before you set out to tweak and tune the configuration, make sure you	COMMENT
MEDIUM	…ongo/mongodb-nodejs-high-availability/azuredeploy.json	244	"_comment2": "/* Feel free to modify the default allocations if you are comfortable and understand what you are doin	CODE

Unused Imports7 hits · 7 pts

Severity	File	Line	Context
LOW	…/machine-learning-service-create-aci/prereqs/Driver.py	5	CODE
LOW	…/machine-learning-job-create-sweep-job/scripts/main.py	2	CODE
LOW	…/machine-learning-job-create-sweep-job/scripts/main.py	8	CODE
LOW	…/machine-learning-job-create-sweep-job/scripts/main.py	10	CODE
LOW	…/machine-learning-job-create-sweep-job/scripts/main.py	10	CODE
LOW	…/machine-learning-service-create-aks/prereqs/Driver.py	5	CODE
LOW	…alakestore/yash-datalake/scripts/raw_to_transformed.py	3	CODE

Cross-Language Confusion1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…oads/jupyter/jupyterhub-classroom/scripts/bootstrap.py	27	"source /etc/os-release && echo ${{{key}}}".format(key=key)	CODE

Excessive Try-Catch Wrapping2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…/machine-learning-service-create-aci/prereqs/Driver.py	28	except Exception as e:	CODE
LOW	…/machine-learning-service-create-aks/prereqs/Driver.py	28	except Exception as e:	CODE

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…umentdb/cosmosdb-sql-container-sprocs/azuredeploy.json	208	"body": "function validateToDoItemTimestamp(){var context=getContext();var request=context.getRequest();var it	CODE
LOW	…1-automation/scripts/AzureAutomationTutorialPython2.py	13	def get_automation_runas_credential(runas_connection, resource_url, authority_url ):	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/scripts/apply-ruleset.sh	11	# Usage:	COMMENT

Modern Structural Boilerplate1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…oads/jupyter/jupyterhub-classroom/scripts/bootstrap.py	17	logger = logging.getLogger(__name__)	CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…/machine-learning-job-create-sweep-job/scripts/main.py	44	def process_data(df):	CODE

Azure/azure-quickstart-templates

Open-Source Code Quality, Security and Technical Debt Review