An open-source background agents coding system
This report presents the forensic synthetic code analysis of ColeMurray/background-agents, a TypeScript project with 2,449 GitHub stars. SynthScan v2.0 examined 232,109 lines of code across 1049 source files, recording 1268 pattern matches distributed across 19 syntactic categories. The overall adjusted score of 8.1 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1268 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 36 | async def test_env_set_when_enabled(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 54 | async def test_env_omitted_when_disabled(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 72 | async def test_env_omitted_when_default(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 93 | async def test_env_set_when_enabled(self, monkeypatch): | CODE |
| LOW | …kages/modal-infra/tests/test_agent_slack_notify_env.py | 115 | async def test_env_omitted_when_default(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 13 | def test_returns_nonempty_password(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 17 | def test_generates_unique_passwords(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 28 | async def test_returns_tunnel_url_on_success(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 39 | async def test_returns_empty_on_exception_after_retries(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 51 | async def test_returns_empty_when_port_missing_after_retries(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 62 | async def test_retries_then_succeeds(self): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 84 | async def test_handle_contains_code_server_fields(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 127 | async def test_code_server_skipped_when_disabled(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 169 | async def test_handle_contains_code_server_fields(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_code_server.py | 219 | async def test_code_server_skipped_when_disabled(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 25 | def test_allows_fractional_cpu(self): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 53 | async def test_create_sandbox_passes_cpu_and_memory(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 75 | async def test_create_sandbox_omits_resources_without_settings(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_resources.py | 91 | async def test_restore_from_snapshot_passes_resources(self, monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 21 | def test_has_repository_accepts_complete_or_absent_metadata(repo_owner, repo_name, expected): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 32 | def test_has_repository_rejects_partial_repo_metadata(repo_owner, repo_name): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 45 | async def test_create_sandbox_rejects_partial_repo_metadata(repo_owner, repo_name): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 60 | async def test_restore_rejects_partial_repo_metadata(session_config): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 71 | async def test_user_env_vars_override_order(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 106 | async def test_restore_user_env_vars_override_order(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 156 | async def test_restore_uses_default_timeout(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 195 | async def test_restore_uses_custom_timeout(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 235 | async def test_create_and_restore_timeout_consistency(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 308 | async def test_restore_includes_branch_in_session_config(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 330 | async def test_restore_omits_branch_when_none(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 351 | async def test_restore_with_session_config_object(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 398 | async def test_vcs_env_vars_default_github(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 440 | async def test_vcs_env_vars_bitbucket(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 460 | async def test_repo_image_boot_omits_fallback_tokens(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 489 | async def test_repo_image_boot_preserves_user_github_cli_token(monkeypatch, token_key): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 519 | async def test_session_snapshot_boot_preserves_clone_token(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 542 | async def test_no_repo_session_snapshot_boot_omits_clone_token(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 572 | async def test_no_repo_sandbox_gets_provider_host_scoping(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 592 | async def test_restore_no_repo_gets_host_scoping_without_tokens(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 623 | async def test_restore_preserves_vcs_clone_token_for_legacy_snapshots(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 663 | async def test_restore_github_includes_gh_cli_aliases(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_sandbox_env_vars.py | 701 | async def test_no_repo_restore_omits_clone_token(monkeypatch): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 26 | def test_generates_valid_token(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 43 | def test_token_rejected_with_wrong_secret(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 49 | def test_timestamp_is_milliseconds(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 64 | async def test_success_on_first_try(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 125 | async def test_returns_false_after_all_retries_exhausted(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 146 | async def test_includes_auth_header(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 189 | async def test_returns_sha_and_complete(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 206 | async def test_complete_without_sha(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 221 | async def test_incomplete_when_sandbox_exits(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 237 | async def test_captures_setup_failure_tail(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 265 | async def test_falls_back_to_supervisor_error(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 285 | async def test_falls_back_to_supervisor_fatal(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 305 | async def test_returns_incomplete_on_error(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 321 | async def test_handles_malformed_json(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 340 | def test_build_error_is_exception(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 397 | async def test_uses_snapshot_timeout_and_terminates_on_success(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 430 | async def test_forwards_build_timeout_to_create_build_sandbox(self): | CODE |
| LOW | packages/modal-infra/tests/test_image_builder_v2.py | 458 | async def test_defaults_build_timeout_when_unset(self): | CODE |
| 771 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .openinspect/setup.sh | 7 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 9 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 21 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .openinspect/setup.sh | 23 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 44 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 48 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 115 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 117 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 125 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .openinspect/setup.sh | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/environments/production/web-cloudflare.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-cloudflare.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 110 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/outputs.tf | 112 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-github.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-github.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/r2.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/r2.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/main.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/opencomputer.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/opencomputer.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/modal.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/modal.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-slack.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-slack.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/moved.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/moved.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-linear.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/workers-linear.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/kv.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/kv.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-vercel.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/web-vercel.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/environments/production/variables.tf | 283 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/environments/production/variables.tf | 285 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/environments/production/variables.tf | 293 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/environments/production/variables.tf | 295 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 112 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 114 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 127 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 129 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 154 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 156 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 174 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 176 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 202 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 204 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 237 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/environments/production/variables.tf | 239 | # ============================================================================= | COMMENT |
| 189 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/web_api.py | 209 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/web_api.py | 314 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/web_api.py | 449 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/web_api.py | 574 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/web_api.py | 645 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/clone_token.py | 33 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/app.py | 125 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 106 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 162 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 239 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 389 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 516 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 687 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 703 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 715 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 748 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 181 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 310 | except Exception as e: | CODE |
| LOW | packages/modal-infra/src/sandbox/manager.py | 669 | except Exception as e: | CODE |
| LOW | …box-runtime/src/sandbox_runtime/repo_image_callback.py | 135 | except Exception as exc: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1864 | except Exception: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1867 | except Exception as e: | CODE |
| LOW⚡ | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1875 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 335 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 448 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 493 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 527 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 556 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 623 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 764 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1554 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1608 | except Exception as e: | CODE |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1889 | except Exception as e: | CODE |
| LOW⚡ | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1688 | except Exception as e: | CODE |
| LOW⚡ | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1693 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 249 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 461 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 481 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 542 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 631 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 682 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 807 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 894 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 945 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1040 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1259 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1433 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1456 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1477 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1501 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1605 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1732 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1949 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1960 | except Exception as e: | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1990 | except Exception as e: | CODE |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 307 | except Exception as e: | CODE |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 345 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/deploy.py | 18 | CODE | |
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/log_config.py | 3 | CODE | |
| LOW | packages/modal-infra/src/__init__.py | 5 | CODE | |
| LOW | packages/modal-infra/src/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/__init__.py | 7 | CODE | |
| LOW | packages/modal-infra/src/auth/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/auth/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/auth/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/auth/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/auth/__init__.py | 6 | CODE | |
| LOW | packages/modal-infra/src/images/__init__.py | 3 | CODE | |
| LOW | packages/modal-infra/src/images/__init__.py | 3 | CODE | |
| LOW | packages/modal-infra/src/scheduler/__init__.py | 4 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 7 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 7 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 7 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 7 | CODE | |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 7 | CODE | |
| LOW | packages/sandbox-runtime/tests/test_gh_wrapper.py | 15 | CODE | |
| LOW | …es/sandbox-runtime/tests/test_git_credential_helper.py | 3 | CODE | |
| LOW | …box-runtime/src/sandbox_runtime/repo_image_callback.py | 3 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 12 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 3 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 4 | CODE | |
| LOW | …c/sandbox_runtime/credentials/git_credential_helper.py | 26 | CODE | |
| LOW | packages/daytona-infra/src/bootstrap.py | 3 | CODE | |
| LOW | packages/daytona-infra/src/config.py | 3 | CODE | |
| LOW | packages/daytona-infra/src/toolchain.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/modal-infra/src/web_api.py | 140 | "snapshot_id": null, | STRING |
| HIGH | packages/modal-infra/src/images/base.py | 81 | "apt-get update && apt-get install -y gh && rm -rf /var/lib/apt/lists/*", | CODE |
| HIGH | packages/modal-infra/src/images/base.py | 116 | "opencode --version || echo 'OpenCode installed'", | CODE |
| HIGH | packages/modal-infra/src/images/base.py | 140 | "cd /app/opencode-deps && npm install --ignore-scripts --no-audit --no-fund", | CODE |
| HIGH⚡ | packages/sandbox-runtime/tests/test_mcp.py | 235 | "pkg && cat /etc/passwd", | CODE |
| HIGH | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 88 | "token=$(python3 -m sandbox_runtime.credentials.git_credential_helper gh-token || true)\n" | CODE |
| HIGH | packages/daytona-infra/src/toolchain.py | 40 | "apt-get update && apt-get install -y gh && rm -rf /var/lib/apt/lists/*", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/OPENAI_MODELS.md | 29 | ### Step 1: Obtain OpenAI OAuth Credentials | COMMENT |
| LOW | docs/OPENAI_MODELS.md | 49 | ### Step 2: Add Secrets to Your Deployment | COMMENT |
| LOW | docs/OPENAI_MODELS.md | 59 | ### Step 3: Select an OpenAI Model | COMMENT |
| LOW | docs/GETTING_STARTED.md | 70 | ## Step 1: Fork the Repository | COMMENT |
| LOW | docs/GETTING_STARTED.md | 96 | ## Step 2: Create Cloud Provider Credentials | COMMENT |
| LOW | docs/GETTING_STARTED.md | 240 | ## Step 3: Create GitHub App | COMMENT |
| LOW | docs/GETTING_STARTED.md | 307 | ## Step 4: Create Slack App (Optional) | COMMENT |
| LOW | docs/GETTING_STARTED.md | 368 | ## Step 5: Generate Security Secrets | COMMENT |
| LOW | docs/GETTING_STARTED.md | 396 | ## Step 6: Configure Terraform | COMMENT |
| LOW | docs/GETTING_STARTED.md | 573 | ## Step 7: Deploy with Terraform | COMMENT |
| LOW | docs/GETTING_STARTED.md | 744 | ## Step 8: Deploy the Web App | COMMENT |
| LOW | docs/GETTING_STARTED.md | 804 | ## Step 9: Verify Deployment | COMMENT |
| LOW | docs/GETTING_STARTED.md | 842 | ## Step 10: Set Up CI/CD (Optional) | COMMENT |
| LOW | docs/SETUP_GUIDE.md | 46 | ## Step 0: Bootstrap the Repo | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 251 | // Step 1: Look up by provider identity | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 255 | // Step 2: Existing identity → load linked user, update if needed | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 313 | // Step 3: No identity found — try email-based cross-provider linking | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 333 | // Step 4: Brand new user — batch user + identity creation so a UNIQUE | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 126 | // Step 1: D1 index (must succeed before DO init starts sandbox warming) | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 150 | // Step 2: DO init | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/sandbox-runtime/src/sandbox_runtime/auth/internal.py | 51 | Generate an internal API token for service-to-service calls. Token format: `timestamp.signature` where: - | STRING |
| HIGH | …s/sandbox-runtime/src/sandbox_runtime/auth/internal.py | 85 | Verify an internal API token from the Authorization header. Token format: `Bearer timestamp.signature` where: | STRING |
| HIGH | …sandbox-runtime/src/sandbox_runtime/auth/github_app.py | 39 | Exchange a JWT for an installation access token. Args: jwt_token: The signed JWT installation_ | STRING |
| HIGH | …sandbox-runtime/src/sandbox_runtime/auth/github_app.py | 70 | Generate a fresh GitHub App installation token. This is the main entry point for token generation. It: 1. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/web/src/lib/github-email-schema.test.ts | 8 | { email: "user@example.com", primary: true, verified: true, visibility: "private" }, | CODE |
| LOW⚡ | packages/web/src/lib/github-email-schema.test.ts | 16 | { email: "user@example.com", primary: true, verified: true, visibility: null }, | CODE |
| LOW⚡ | packages/web/src/lib/github-email-schema.test.ts | 23 | expect(githubEmailListSchema.safeParse({ email: "user@example.com" }).success).toBe(false); | CODE |
| LOW⚡ | packages/web/src/lib/github-email-schema.test.ts | 26 | { email: "user@example.com", primary: true, verified: true }, | CODE |
| LOW⚡ | packages/web/src/lib/github-email-schema.test.ts | 31 | { email: "user@example.com", primary: true, verified: "yes", visibility: null }, | CODE |
| LOW | packages/web/src/lib/access-control.test.ts | 144 | expect(checkAccessAllowed(config, { emails: ["user@example.com"] })).toBe(false); | CODE |
| LOW | …ntime/src/sandbox_runtime/plugins/codex-auth-plugin.js | 14 | const OAUTH_DUMMY_KEY = "opencode-oauth-dummy-key"; | CODE |
| LOW | packages/shared/src/slack/resolve-users.test.ts | 65 | real_name: "John Doe", | CODE |
| LOW | packages/shared/src/slack/resolve-users.test.ts | 66 | profile: { display_name: "", real_name: "John Doe" }, | CODE |
| LOW | packages/slack-bot/src/index.test.ts | 1686 | real_name: "Jane Doe", | CODE |
| LOW | …ckages/slack-bot/src/sessions/session-launcher.test.ts | 103 | profile: { display_name: "Display Name", email: "user@example.com" }, | CODE |
| LOW | …ckages/slack-bot/src/sessions/session-launcher.test.ts | 149 | actorEmail: "user@example.com", | CODE |
| LOW | …e/src/source-control/providers/github-provider.test.ts | 26 | privateKey: "fake-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/sandbox-runtime/tests/test_codex_auth_plugin_setup.py | 0 | create a sandboxsupervisor with default test config. | STRING |
| HIGH | …kages/sandbox-runtime/tests/test_openai_oauth_setup.py | 0 | create a sandboxsupervisor with default test config. | STRING |
| HIGH | …ckages/sandbox-runtime/tests/test_tool_installation.py | 0 | create a sandboxsupervisor with default test config. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 251 | // Step 1: Look up by provider identity | COMMENT |
| LOW⚡ | packages/control-plane/src/db/user-store.ts | 255 | // Step 2: Existing identity → load linked user, update if needed | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 313 | // Step 3: No identity found — try email-based cross-provider linking | COMMENT |
| LOW | packages/control-plane/src/db/user-store.ts | 333 | // Step 4: Brand new user — batch user + identity creation so a UNIQUE | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 126 | // Step 1: D1 index (must succeed before DO init starts sandbox warming) | COMMENT |
| LOW | packages/control-plane/src/session/initialize.ts | 150 | // Step 2: DO init | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/deploy.py | 21 | __all__ = ["app"] | CODE |
| LOW | packages/modal-infra/src/log_config.py | 5 | __all__ = ["StructuredLogger", "configure_logging", "get_logger"] | CODE |
| LOW | packages/modal-infra/src/__init__.py | 9 | __all__ = ["app", "image_builder", "web_api"] | CODE |
| LOW | packages/modal-infra/src/auth/__init__.py | 14 | __all__ = [ | CODE |
| LOW | packages/modal-infra/src/images/__init__.py | 5 | __all__ = ["OPENCODE_VERSION", "base_image"] | CODE |
| LOW | packages/modal-infra/src/scheduler/__init__.py | 6 | __all__ = ["image_builder"] | CODE |
| LOW | packages/modal-infra/src/sandbox/__init__.py | 33 | __all__ = [ | CODE |
| LOW | …ckages/sandbox-runtime/src/sandbox_runtime/__init__.py | 21 | __all__ = [ | CODE |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 860 | def _setup_openai_oauth(self) -> None: | CODE |
| LOW | …s/sandbox-runtime/src/sandbox_runtime/auth/__init__.py | 11 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/scheduler/image_builder.py | 194 | CODE | |
| LOW | packages/modal-infra/src/sandbox/manager.py | 157 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 297 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 397 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 633 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 854 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 925 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 982 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1027 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1463 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1841 | CODE | |
| LOW | packages/sandbox-runtime/src/sandbox_runtime/bridge.py | 1091 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1334 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1696 | CODE | |
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1744 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | terraform/environments/production/main.tf | 1 | # ============================================================================= | COMMENT |
| LOW | terraform/environments/production/backend.tf | 1 | # Terraform State Backend Configuration | COMMENT |
| LOW | docs/GETTING_STARTED.md | 441 | modal_workspace = "your-modal-workspace" | COMMENT |
| LOW | docs/GETTING_STARTED.md | 501 | repo_secrets_encryption_key = "your-generated-value" | COMMENT |
| LOW | scripts/migrate-kv-to-d1.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/wrangler-secrets.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/modal-infra/src/images/base.py | 121 | # Pre-build OpenCode plugin deps into a staging directory. | COMMENT |
| LOW | …kages/sandbox-runtime/src/sandbox_runtime/constants.py | 21 | # for. The manager's write can land before the entrypoint starts (it only | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | terraform/environments/production/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …es/sandbox-runtime/tests/test_entrypoint_build_mode.py | 829 | # Create the directory so _update_existing_repo proceeds after clone. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/modal-infra/tests/test_image_builder_v2.py | 310 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/migrate-kv-to-d1.sh | 13 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ages/sandbox-runtime/src/sandbox_runtime/entrypoint.py | 1308 | # Check if bridge exited immediately during startup | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/modal-infra/src/sandbox/manager.py | 673 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/control-plane/src/router.ts | 341 | export async function handleRequest( | CODE |