2.9

Adjusted Signal

2.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.8K

Stars

Language

3.7M

Lines of Code

22.8K

Files

8.5K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 10.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 7495 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 303 finding(s).

Agent Over-Engineering Ratio 4.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 2314 finding(s).

PR Review Velocity Impact 13.1/100 · LOW

Which changes need focused human review? 8469 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 17HIGH 120MEDIUM 558LOW 7774

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 8469 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block5019 hits · 4972 pts

Severity	File	Line	Snippet	Context
LOW	.lychee.toml	21	# Generated by the `repo` macro, which resolves every path against the working tree while	COMMENT
LOW	.copyright-overrides.yml	1	# this file contains overrides for the automatic determination of copyright	COMMENT
LOW	mise.toml	1	[settings]	COMMENT
LOW	flakes.yaml	1	# * Here is the file format:	COMMENT
LOW	omnibus/config/software/datadog-agent.rb	121	conf_dir = "#{install_dir}/etc/datadog-agent"	COMMENT
LOW	omnibus/lib/project_extension.rb	181	expose :inspect_binary	COMMENT
LOW	packaging/aix/agent-data-plane-wrapper.sh	1	#!/bin/sh	COMMENT
LOW	packaging/aix/sitecustomize.py	1	# AIX: best-effort preload of libc++abi.a with RTLD_GLOBAL.	COMMENT
LOW	packaging/aix/build.sh	1	#!/bin/sh	COMMENT
LOW	packaging/aix/package.sh	81	#	COMMENT
LOW	packaging/aix/package.sh	121	done < "$SCRIPT_DIR/gen.template.in"	COMMENT
LOW	packaging/aix/clean.sh	1	#!/bin/sh	COMMENT
LOW	packaging/aix/agent-wrapper.sh	1	#!/bin/sh	COMMENT
LOW	packaging/aix/stages/08-checks-base.sh	61	# ─── Step 1: Install datadog-checks-base ──────────────────────────────────────	COMMENT
LOW	packaging/aix/stages/00-checkout.sh	41	trap cleanup EXIT	COMMENT
LOW	packaging/aix/stages/03-rtloader.sh	61	# -DPython3_INCLUDE_DIR : staging path (where headers are during the build)	COMMENT
LOW	packaging/aix/stages/03-rtloader.sh	121	# SystemError: initialization of _datetime did not return an extension module	COMMENT
LOW	packaging/aix/stages/03-rtloader.sh	141	eval "$LINK_CMD_FIXED"	COMMENT
LOW	packaging/aix/stages/03-rtloader.sh	161	# The LIBPATH baked into the rtloader .so files (via CMAKE_INSTALL_RPATH) already	COMMENT
LOW	packaging/aix/stages/07-pydantic.sh	101	#	COMMENT
LOW	packaging/aix/stages/10-strip-bytecode.sh	41	log "Stripping debug info from .so files under $EMBEDDED_DESTDIR/lib"	COMMENT
LOW	packaging/aix/stages/10-strip-bytecode.sh	61	# extensions such as ibm_db. Linux/macOS omnibus packages also ship these	COMMENT
LOW	packaging/aix/stages/04-agent.sh	61	# and link against the .so files we built in Stage 03.	COMMENT
LOW	packaging/aix/stages/02-python.sh	121	if grep -q 'libintl\.h' Python/gettext.c 2>/dev/null; then	COMMENT
LOW	packaging/aix/stages/02-python.sh	141	# (2) Implement the PyThread_tss_t fallback in Python/pystate.c	COMMENT
LOW	packaging/aix/stages/02-python.sh	361	log "INFO: _initializing parent re-import not found in Lib/importlib/_bootstrap.py — patch not needed."	COMMENT
LOW	packaging/aix/stages/02-python.sh	381	# (thread_local/__thread), which hits the same AIX local-exec/shared-library	COMMENT
LOW	packaging/aix/stages/02-python.sh	401	# (python3.13, libpython3.13.so, and every C extension .so built in later stages).	COMMENT
LOW	packaging/aix/stages/11-assemble.sh	61		COMMENT
LOW	packaging/aix/stages/11-assemble.sh	81	mkdir -p "$STAGING_CONFD"	COMMENT
LOW	packaging/aix/stages/11-assemble.sh	181	fi	COMMENT
LOW	packaging/aix/stages/01-native-libs.sh	101	}	COMMENT
LOW	packaging/aix/stages/01-native-libs.sh	261	curl -fSL -o "$TARBALL" "https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz"	COMMENT
LOW	packaging/aix/stages/01-native-libs.sh	521	# /usr/lib/libiconv.a uses member shr4_64.o (different name), so it cannot	COMMENT
LOW	packaging/aix/stages/06-python-extensions.sh	121	#	COMMENT
LOW	packaging/aix/stages/06-python-extensions.sh	181	# ensure it links against our bundled libxml2 and libxslt from Stage 1.	COMMENT
LOW	packaging/aix/stages/06-python-extensions.sh	201	# flags like -fPIC, -ffunction-sections, -maix64	COMMENT
LOW	packaging/aix/stages/09-integrations.sh	81	# Discover every check in the pinned integrations-core checkout whose	COMMENT
LOW	packaging/aix/lib/env.sh	1	# shellcheck shell=sh	COMMENT
LOW	packaging/aix/lib/env.sh	21		COMMENT
LOW	cmd/dogstatsd/windows_resources/version.h	1		COMMENT
LOW	cmd/process-agent/windows_resources/version.h	1		COMMENT
LOW	cmd/iot-agent/docs.go	1	// Unless explicitly stated otherwise all files in this repository are licensed	COMMENT
LOW	cmd/security-agent/windows_resources/version.h	1		COMMENT
LOW	cmd/serverless-init/docs.go	1	// Unless explicitly stated otherwise all files in this repository are licensed	COMMENT
LOW	cmd/serverless-init/main.go	81	// fits within the tightest supported platform grace window. Platform defaults:	COMMENT
LOW	cmd/serverless-init/main.go	101		COMMENT
LOW	cmd/serverless-init/main.go	121	// exceeds this. Four shutdown phases run, each independently	COMMENT
LOW	cmd/serverless-init/main.go	141	// forwarder, DogStatsD server and demultiplexer read at Fx-construction time.	COMMENT
LOW	cmd/serverless-init/main.go	181	// did before this bundle replaced it. Left unset, the serializer would use	COMMENT
LOW	cmd/serverless-init/main.go	201	// All bounded by aggregator_stop_timeout / forwarder_stop_timeout. It only	COMMENT
LOW	cmd/serverless-init/main.go	261	// LoadDatadog again with the real Fx-injected components; that is	COMMENT
LOW	cmd/serverless-init/main.go	281	// configureTags) are picked up. Env-based DD_TAGS / DD_EXTRA_TAGS work	COMMENT
LOW	cmd/serverless-init/main.go	301	// (matching Core Agent behavior) but stay quiet because nothing produces	COMMENT
LOW	cmd/serverless-init/main.go	401	// time-sampler workers during step 5's demux drain.	COMMENT
LOW	cmd/serverless-init/trace/span_modifier_setter_test.go	1	// Unless explicitly stated otherwise all files in this repository are licensed	COMMENT
LOW	cmd/serverless-init/lifecycle/forwarder.go	61	// NewForwarder constructs a Forwarder targeting 127.0.0.1:<port>. The forwardTimeout	COMMENT
LOW	cmd/serverless-init/lifecycle/forwarder.go	101	// (bounded by dialCheckTimeout), then forwards the request bounded by timeout	COMMENT
LOW	cmd/serverless-init/lifecycle/server.go	1	// Unless explicitly stated otherwise all files in this repository are licensed	COMMENT
LOW	cmd/serverless-init/lifecycle/server.go	21	// - /suspend — VM is about to be snapshotted/frozen.	COMMENT
4959 more matches not shown…

Hyper-Verbose Identifiers1565 hits · 1648 pts

Severity	File	Line	Snippet	Context
LOW	omnibus/python-scripts/pre_tests.py	40	def test_pre_with_empty_files(self):	CODE
LOW	omnibus/python-scripts/pre_tests.py	72	def test_pre_falls_back_to_legacy_tmp(self):	CODE
LOW	omnibus/python-scripts/pre_tests.py	102	def test_pre_falls_back_to_install_directory(self):	CODE
LOW	omnibus/python-scripts/pre_tests.py	129	def test_pre_no_baseline_first_install_returns_zero(self):	CODE
LOW	omnibus/python-scripts/pre_tests.py	154	def test_pre_no_baseline_on_upgrade_returns_error(self):	CODE
LOW	omnibus/python-scripts/pre_tests.py	188	def test_pre_with_populated_pre_file(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	21	def test_create_python_installed_packages_file(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	43	def test_create_diff_installed_packages_file(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	80	def test_run_command_success_returns_zero_rc(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	87	def test_run_command_failure_returns_nonzero_rc(self):	CODE
LOW⚡	omnibus/python-scripts/packages_tests.py	101	def test_install_datadog_package_succeeds_on_first_attempt(self):	CODE
LOW⚡	omnibus/python-scripts/packages_tests.py	107	def test_install_datadog_package_succeeds_on_retry(self):	CODE
LOW⚡	omnibus/python-scripts/packages_tests.py	114	def test_install_datadog_package_raises_after_two_failures(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	128	def test_install_diff_packages_file_collects_failures(self):	CODE
LOW	omnibus/python-scripts/packages_tests.py	159	def test_install_diff_packages_file_succeeds_silently(self):	CODE
LOW⚡	omnibus/python-scripts/packages.py	99	def pre_python_installed_packages_file(directory):	CODE
LOW⚡	omnibus/python-scripts/packages.py	105	def post_python_installed_packages_file(directory):	CODE
LOW⚡	omnibus/python-scripts/packages.py	111	def diff_python_installed_packages_file(directory):	CODE
LOW⚡	omnibus/python-scripts/packages.py	117	def requirements_agent_release_file(directory):	CODE
LOW⚡	omnibus/python-scripts/packages.py	123	def check_file_owner_system_windows(filename):	CODE
LOW	omnibus/python-scripts/packages.py	146	def check_all_files_owner_system_windows(directory):	CODE
LOW	omnibus/python-scripts/packages.py	167	def create_python_installed_packages_file(filename):	CODE
LOW	omnibus/python-scripts/packages.py	183	def create_diff_installed_packages_file(directory, old_file, new_file):	CODE
LOW	omnibus/python-scripts/packages.py	242	def install_dependency_package(pip, package):	CODE
LOW	omnibus/python-scripts/packages.py	264	def install_diff_packages_file(install_directory, filename, exclude_filename):	CODE
LOW	omnibus/python-scripts/post_tests.py	35	def test_post_with_empty_files(self):	CODE
LOW	omnibus/python-scripts/post_tests.py	77	def test_datadog_integration_vs_python_package_installation(self, mock_instalL_dependency, mock_install_datadog):	CODE
LOW	omnibus/python-scripts/post_tests.py	115	def test_excluded_packages_are_skipped(self, mock_load_requirements, mock_instalL_dependency, mock_install_datadog):	CODE
LOW	omnibus/python-scripts/post_tests.py	162	def test_post_returns_one_when_restore_fails(self):	CODE
LOW	omnibus/lib/project_extension.rb	72	def normalize_path_tree_permissions(root)	CODE
LOW	omnibus/lib/project_extension.rb	82	def normalize_path_permissions(path)	CODE
LOW	omnibus/lib/project_extension.rb	287	def staged_extra_package_source(source)	CODE
LOW	omnibus/lib/project_extension.rb	325	def shared_external_directory_entry(path, filepath)	CODE
LOW	omnibus/lib/fips.rb	39	def fips_check_binary_for_expected_symbol(path)	CODE
LOW	…mands/usm/debug_scripts/usm_leak_detector/validator.py	34	def _validate_across_all_namespaces(conn: ConnTuple, connection_index: Dict[int, ConnectionIndex]) -> Tuple[bool, str]:	CODE
LOW	tasks/fakeintake.py	90	def _check_version_not_bumped_off_main(ctx, branch: str):	CODE
LOW	tasks/k8s_versions.py	573	def update_kind_versions_file(_, versions_file=VERSIONS_FILE):	CODE
LOW	tasks/host_profiler.py	30	def _get_profiler_agent_version(ctx):	CODE
LOW	tasks/host_profiler.py	143	def _get_agent_module_version(ctx: Context, module: str) -> str:	CODE
LOW	tasks/install_tasks.py	110	def install_rust_license_tool(ctx):	CODE
LOW	tasks/quality_gates.py	55	def _print_quality_gates_report(verdicts: list[GateVerdict]):	CODE
LOW	tasks/release.py	83	def _get_module_pseudo_version(ctx, module, commit):	CODE
LOW	tasks/macos.py	77	def list_runner_active_versions(ctx, lang):	CODE
LOW	tasks/files_inventory.py	70	def _compare_inventory_reports(parent_inventory_report, current_inventory_report) -> tuple[bool, str]:	CODE
LOW	tasks/files_inventory.py	125	def _inventory_changes_to_comment(added, removed, changed):	CODE
LOW	tasks/selinux.py	18	def compile_system_probe_policy_file(	CODE
LOW	tasks/build_tags.py	170	def build_tags_codegen_payload() -> dict[str, object]:	CODE
LOW	tasks/build_tags.py	191	def compute_build_tags_for_flavor(	CODE
LOW	tasks/build_tags.py	306	def compute_config_build_tags(	CODE
LOW	tasks/kmt.py	188	def gen_config_from_ci_pipeline(	CODE
LOW	tasks/kmt.py	1036	def compute_package_dependencies(ctx: Context, packages: list[str], build_tags: list[str]) -> dict[str, set[str]]:	CODE
LOW	tasks/renovate.py	63	def _parse_top_level_namespace(text: str) -> dict:	CODE
LOW	tasks/fuzz_infra.py	32	def get_slack_channel_for_directory(directory_path: str) -> str:	CODE
LOW	tasks/anomalydetection.py	954	def _load_completed_bayesian_report(	CODE
LOW	tasks/anomalydetection.py	984	def _bayesian_evaluation_inputs(	CODE
LOW	tasks/anomalydetection.py	1603	def _validate_ddeval_scenario_filter(eval_backend: str, scenarios: str) -> bool:	CODE
LOW	tasks/anomalydetection.py	1625	def _ddeval_experiment_config(	CODE
LOW	tasks/anomalydetection.py	1791	def _parse_ddeval_workflow_result(stdout: str) -> dict[str, object]:	CODE
LOW	tasks/anomalydetection.py	1806	def _parse_ddeval_workflow_id(stdout: str) -> str \| None:	CODE
LOW	tasks/anomalydetection.py	1815	def _parse_ddeval_workflow_run_id(stdout: str) -> str \| None:	CODE
1505 more matches not shown…

Decorative Section Separators397 hits · 1178 pts

Severity	File	Line	Snippet	Context
MEDIUM	omnibus/config/projects/agent.rb	132	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent.rb	134	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent.rb	214	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent.rb	216	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent-binaries.rb	39	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent-binaries.rb	41	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent-binaries.rb	66	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/agent-binaries.rb	68	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/installer.rb	93	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/installer.rb	95	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/installer.rb	145	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/installer.rb	147	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	53	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	55	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	93	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	95	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	136	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/iot-agent.rb	138	# ------------------------------------	COMMENT
MEDIUM⚡	omnibus/config/projects/dogstatsd.rb	73	# ------------------------------------	COMMENT
MEDIUM⚡	omnibus/config/projects/dogstatsd.rb	75	# ------------------------------------	COMMENT
MEDIUM⚡	omnibus/config/projects/dogstatsd.rb	82	# ------------------------------------	COMMENT
MEDIUM⚡	omnibus/config/projects/dogstatsd.rb	84	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/eudm.rb	53	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/eudm.rb	55	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/eudm.rb	69	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/eudm.rb	71	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/ddot.rb	73	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/ddot.rb	75	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/ddot.rb	100	# ------------------------------------	COMMENT
MEDIUM	omnibus/config/projects/ddot.rb	102	# ------------------------------------	COMMENT
MEDIUM	omnibus/lib/ostools.rb	1	# ------------------------------------	COMMENT
MEDIUM	omnibus/lib/ostools.rb	3	# ------------------------------------	COMMENT
MEDIUM⚡	packaging/aix/setup-host.sh	36	# ── Preflight ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/setup-host.sh	41	# ── Step 1: grow /opt ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/setup-host.sh	50	# ── Step 2: AIX Toolbox packages ─────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	65	# ── Step 3: Go toolchain at /opt/go ───────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	81	# ── Step 4: Python deps for the `tasks` invoke namespace ─────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	104	# ── Step 5: gotestsum (no Bazel on AIX) ──────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	122	# ── Step 5b: Rust SDKs (build/packaging) ─────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	155	# ── Step 5c: IBM MQ Client (build/packaging) ──────────────────────────────────	COMMENT
MEDIUM	packaging/aix/setup-host.sh	174	# ── Step 6: verify ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	33	# ── Source shared environment ─────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	48	# ── Bootstrap embedded symlink ────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	61	# ── Build-specific prerequisite: Rust SDK ───────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	77	# ── Bootstrap build directories ───────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	83	# ── Stage list ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	100	# ── Helper: run one stage script ──────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/build.sh	121	# ── Main ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/package.sh	34	# ─── Step 1: Pre-flight — verify staging tree is assembled ────────────────────	COMMENT
MEDIUM	packaging/aix/package.sh	125	# ─── Step 3: Run mkinstallp to generate the BFF ───────────────────────────────	COMMENT
MEDIUM	packaging/aix/package.sh	144	# ─── Step 4: Copy BFF to final artifact name ──────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/clean.sh	56	# ── Remove stage sentinels ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/clean.sh	65	# ── Remove staging tree ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/clean.sh	75	# ── Remove build logs ──────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/clean.sh	81	# ── Remove temporary packaging files ──────────────────────────────────────────	COMMENT
MEDIUM⚡	packaging/aix/clean.sh	84	# ── Wheel cache ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/stages/08-checks-base.sh	61	# ─── Step 1: Install datadog-checks-base ──────────────────────────────────────	COMMENT
MEDIUM	packaging/aix/stages/08-checks-base.sh	74	# ─── Step 1b: Install datadog-checks-base [deps] extra packages ───────────────	COMMENT
MEDIUM	packaging/aix/stages/08-checks-base.sh	113	# ─── Step 2: Freeze installed state to constraints file ───────────────────────	COMMENT
MEDIUM	packaging/aix/stages/00-checkout.sh	43	# ─── Step 1: Validate agent source tree ───────────────────────────────────────	COMMENT
337 more matches not shown…

Structural Annotation Overuse249 hits · 447 pts

Severity	File	Line	Snippet	Context
LOW⚡	packaging/aix/stages/03-rtloader.sh	134	# Step 1: Re-run the cmake ExportImportList (export symbols file generation)	COMMENT
LOW⚡	packaging/aix/stages/03-rtloader.sh	138	# Step 2: Re-run the link command, substituting .so with .a for libpython${PYTHON_MAJ_MIN}	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	83	# Step 1: Get eBPF backend	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	90	# Step 2: List eBPF maps	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	101	# Step 3: Check ConnTuple-keyed maps (unless --pid-only)	COMMENT
LOW	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	134	# Step 4: Check PID-keyed maps (unless --conn-tuple-only)	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	156	# Step 5: Print reports (PID-keyed first, then ConnTuple-keyed)	COMMENT
LOW	tasks/quality_gates.py	247	# Step 1: Fetch PR metrics from Datadog	COMMENT
LOW⚡	tasks/quality_gates.py	266	# Step 2: Identify gates with size increase (not just failing gates)	COMMENT
LOW⚡	tasks/quality_gates.py	283	# Step 3: Fetch main branch headroom (for gates with size increase)	COMMENT
LOW⚡	tasks/quality_gates.py	292	# Step 4: Load current configs and index gates by which file defines them	COMMENT
LOW⚡	tasks/quality_gates.py	301	# Step 5: Calculate and apply new thresholds for gates with size increase	COMMENT
LOW	tasks/quality_gates.py	335	# Step 6: Write updated configs	COMMENT
LOW⚡	tasks/release.py	348	# Step 2: Update internal module dependencies	COMMENT
LOW⚡	tasks/release.py	352	# Step 3: Branch out, commit change, push branch	COMMENT
LOW⚡	tasks/release.py	489	# Step 1: Update release entries	COMMENT
LOW⚡	tasks/release.py	495	# Step 2: Update internal module dependencies	COMMENT
LOW⚡	tasks/release.py	500	# Step 3: Run tidy task	COMMENT
LOW⚡	tasks/release.py	504	# Step 4: branch out, push branch, then add, and create signed commit with Github API	COMMENT
LOW⚡	tasks/release.py	787	# Step 1: Lead Time for Changes data	COMMENT
LOW⚡	tasks/release.py	793	# Step 2: Agent stability data	COMMENT
LOW⚡	tasks/release.py	803	# Step 3: Code changes	COMMENT
LOW	tasks/release.py	309	# Step 1: Preparation	COMMENT
LOW	tasks/release.py	381	# Step 4: Add release changelog preludes	COMMENT
LOW	tasks/release.py	398	# Step 5: Push branch and create PR	COMMENT
LOW	tasks/release.py	467	# Step 0: checks	COMMENT
LOW	tasks/release.py	550	# Step 5 - Send a slack message	COMMENT
LOW	tasks/release.py	616	# Step 0: checks	COMMENT
LOW	tasks/release.py	639	# Step 1: Tag versions	COMMENT
LOW	tasks/release.py	661	# Step 2: Run the RC pipeline	COMMENT
LOW⚡	tasks/notes.py	49	# Step 1 - generate the changelogs	COMMENT
LOW	tasks/notes.py	73	# Step 2 - commit changes	COMMENT
LOW	tasks/notes.py	101	# Step 3 - Push and create PR	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	67	// Step 1: fetch current VM state. Returns '{}' when the VM does not exist.	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	80	// Step 2: parse the state JSON in Go and decide what shell command to run.	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	102	// Step 3: execute the action (launch / start / no-op).	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	115	// Step 4: fetch the final VM info JSON. This resource also owns the delete.	COMMENT
LOW	…/new-e2e/tests/usm/windows_remote_service_tags_test.go	149	// Step 1: send 1000 connections to site A (port 8081), hold 20s, then verify.	COMMENT
LOW	…/new-e2e/tests/usm/windows_remote_service_tags_test.go	166	// Step 2: send 1000 connections to site B (port 8082).	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	116	// Step 1: create statefulset without spot label — all pods go on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	126	// Step 2: opt in to spot scheduling.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	129	// Step 3: expect rebalancing to converge to 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	260	// Step 1: opt in — wait for 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	270	// Step 2: remove spot label to opt out, then restart to replace existing pods.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	274	// Step 3: all pods should land on on-demand without the spot-assigned label.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	129	// Step 1: create deployment without spot label — all pods go on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	139	// Step 2: opt in to spot scheduling.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	142	// Step 3: expect rebalancing to converge to 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	236	// Step 1: opt in — wait for 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	246	// Step 2: remove spot label to opt out, then restart to replace existing pods.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	250	// Step 3: all pods should land on on-demand without the spot-assigned label.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	419	// Step 1: Clean up any existing dd-agent user/group	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	427	// Step 2: Set up NSS extrausers	COMMENT
LOW	test/new-e2e/tests/installer/unix/package_agent_test.go	499	// Step 3: Verify that getent can find the user/group (confirming NSS is working)	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	514	// Step 4: Install the agent	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	518	// Step 5: Verify no new entries were added to /etc/passwd or /etc/group	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	525	// Step 6: Verify the agent is installed and running	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	145	// Step 1: install the agent via the standard install script	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	150	// Step 2: remove the agent package while keeping config files.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	163	// Step 3: move datadog.yaml out of the way so the reinstall has no yaml.	COMMENT
189 more matches not shown…

Excessive Try-Catch Wrapping216 hits · 261 pts

Severity	File	Line	Snippet	Context
LOW	omnibus/python-scripts/post.py	43	except Exception as e:	CODE
MEDIUM	omnibus/python-scripts/post.py	44	print(f"Error: {e}")	CODE
MEDIUM	omnibus/python-scripts/packages.py	84	print(f"Error: {e.stderr}")	CODE
LOW⚡	omnibus/python-scripts/packages.py	95	except Exception as e:	CODE
MEDIUM⚡	omnibus/python-scripts/packages.py	96	print(f"Error parsing specifier: {e}")	CODE
LOW	omnibus/python-scripts/pre.py	75	except Exception as e:	CODE
MEDIUM	omnibus/python-scripts/pre.py	76	print(f"Error: {e}")	CODE
LOW	packaging/aix/sitecustomize.py	24	except Exception:	CODE
MEDIUM⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	86	print("Error: No eBPF backend available. Install bpftool or ensure system-probe is accessible.",	CODE
MEDIUM⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	94	print("Error: Could not list eBPF maps.", file=sys.stderr)	CODE
LOW	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	28	except Exception:	CODE
LOW	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	149	except Exception:	CODE
LOW	…ripts/usm_leak_detector/backends/bpftool_downloader.py	68	except Exception as e:	CODE
LOW	…ripts/usm_leak_detector/backends/bpftool_downloader.py	155	except Exception as e:	CODE
LOW	cmd/ai_prompt_logger/scripts/test_host.py	106	except Exception as e:	CODE
LOW	tasks/k8s_versions.py	339	except Exception as e:	CODE
LOW	tasks/kind_node_image.py	128	except Exception as e:	CODE
MEDIUM	tasks/kind_node_image.py	129	print(f"Error building image {tag}: {e}")	CODE
LOW	tasks/quality_gates.py	74	except Exception:	CODE
LOW	tasks/virustotal.py	73	except Exception as e:	CODE
LOW	tasks/virustotal.py	92	except Exception as e:	CODE
LOW	tasks/virustotal.py	118	except Exception as e:	CODE
LOW	tasks/virustotal.py	331	except Exception as e:	CODE
LOW	tasks/kmt.py	461	except Exception as e:	CODE
LOW	tasks/kmt.py	625	except Exception as e:	CODE
LOW	tasks/kmt.py	2012	except Exception as e:	CODE
LOW	tasks/kmt.py	1648	except Exception:	STRING
LOW	tasks/renovate.py	86	except Exception:	CODE
LOW	tasks/renovate.py	477	except Exception:	CODE
LOW	tasks/systray.py	109	except Exception as e:	CODE
LOW	tasks/fuzz_infra.py	65	except Exception as e:	CODE
LOW	tasks/fuzz_infra.py	110	except Exception as e:	CODE
LOW	tasks/anomalydetection.py	201	except Exception as e:	CODE
LOW	tasks/anomalydetection.py	598	except Exception as e:	CODE
LOW	tasks/anomalydetection.py	882	except Exception as e:	CODE
LOW	tasks/anomalydetection.py	1238	except Exception:	CODE
LOW	tasks/anomalydetection.py	1405	except Exception as e:	CODE
LOW	tasks/collector.py	177	except Exception as e:	CODE
LOW	tasks/collector.py	188	except Exception as e:	CODE
LOW	tasks/collector.py	218	except Exception as e:	CODE
LOW	tasks/collector.py	249	except Exception as e:	CODE
LOW	tasks/collector.py	266	except Exception as e:	CODE
LOW⚡	tasks/new_e2e_tests.py	1391	except Exception as e:	CODE
LOW⚡	tasks/new_e2e_tests.py	1401	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	76	except Exception:	CODE
LOW	tasks/new_e2e_tests.py	456	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	1237	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	1461	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	1573	except Exception:	CODE
LOW	tasks/new_e2e_tests.py	1611	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	1683	except Exception as e:	CODE
LOW	tasks/new_e2e_tests.py	1697	except Exception as e:	CODE
LOW⚡	tasks/notify.py	198	except Exception:	CODE
LOW⚡	tasks/notify.py	205	except Exception:	CODE
LOW⚡	tasks/notify.py	215	except Exception:	CODE
LOW	tasks/notify.py	269	except Exception as e:	CODE
MEDIUM	tasks/notify.py	270	print(f'Error closing issue {issue["key"]}: {e}', file=sys.stderr)	CODE
LOW	tasks/coverage.py	199	except Exception as e:	CODE
MEDIUM⚡	tasks/notes.py	46	print(f"Error: invalid version: {new_version_int}")	CODE
MEDIUM⚡	tasks/notes.py	58	print("Error: You have uncommitted change, please commit or stash before using update_changelog")	CODE
156 more matches not shown…

Verbosity Indicators132 hits · 256 pts

Severity	File	Line	Snippet	Context
LOW⚡	packaging/aix/stages/03-rtloader.sh	134	# Step 1: Re-run the cmake ExportImportList (export symbols file generation)	COMMENT
LOW⚡	packaging/aix/stages/03-rtloader.sh	138	# Step 2: Re-run the link command, substituting .so with .a for libpython${PYTHON_MAJ_MIN}	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	83	# Step 1: Get eBPF backend	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	90	# Step 2: List eBPF maps	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	101	# Step 3: Check ConnTuple-keyed maps (unless --pid-only)	COMMENT
LOW	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	134	# Step 4: Check PID-keyed maps (unless --conn-tuple-only)	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	156	# Step 5: Print reports (PID-keyed first, then ConnTuple-keyed)	COMMENT
LOW	tasks/quality_gates.py	247	# Step 1: Fetch PR metrics from Datadog	COMMENT
LOW⚡	tasks/quality_gates.py	266	# Step 2: Identify gates with size increase (not just failing gates)	COMMENT
LOW⚡	tasks/quality_gates.py	283	# Step 3: Fetch main branch headroom (for gates with size increase)	COMMENT
LOW⚡	tasks/quality_gates.py	292	# Step 4: Load current configs and index gates by which file defines them	COMMENT
LOW⚡	tasks/quality_gates.py	301	# Step 5: Calculate and apply new thresholds for gates with size increase	COMMENT
LOW	tasks/quality_gates.py	335	# Step 6: Write updated configs	COMMENT
LOW⚡	tasks/release.py	348	# Step 2: Update internal module dependencies	COMMENT
LOW⚡	tasks/release.py	352	# Step 3: Branch out, commit change, push branch	COMMENT
LOW⚡	tasks/release.py	489	# Step 1: Update release entries	COMMENT
LOW⚡	tasks/release.py	495	# Step 2: Update internal module dependencies	COMMENT
LOW⚡	tasks/release.py	500	# Step 3: Run tidy task	COMMENT
LOW⚡	tasks/release.py	504	# Step 4: branch out, push branch, then add, and create signed commit with Github API	COMMENT
LOW⚡	tasks/release.py	787	# Step 1: Lead Time for Changes data	COMMENT
LOW⚡	tasks/release.py	793	# Step 2: Agent stability data	COMMENT
LOW⚡	tasks/release.py	803	# Step 3: Code changes	COMMENT
LOW	tasks/release.py	309	# Step 1: Preparation	COMMENT
LOW	tasks/release.py	381	# Step 4: Add release changelog preludes	COMMENT
LOW	tasks/release.py	398	# Step 5: Push branch and create PR	COMMENT
LOW	tasks/release.py	467	# Step 0: checks	COMMENT
LOW	tasks/release.py	616	# Step 0: checks	COMMENT
LOW	tasks/release.py	639	# Step 1: Tag versions	COMMENT
LOW	tasks/release.py	661	# Step 2: Run the RC pipeline	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	67	// Step 1: fetch current VM state. Returns '{}' when the VM does not exist.	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	80	// Step 2: parse the state JSON in Go and decide what shell command to run.	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	102	// Step 3: execute the action (launch / start / no-op).	COMMENT
LOW	test/e2e-framework/resources/local/vm/multipass/vm.go	115	// Step 4: fetch the final VM info JSON. This resource also owns the delete.	COMMENT
LOW	test/e2e-framework/components/datadog/agent/package.go	110	// If we're on Windows, we need to check if the pipeline ID is in the package name, this is a workaround to avoid an	COMMENT
LOW	…/new-e2e/tests/usm/windows_remote_service_tags_test.go	149	// Step 1: send 1000 connections to site A (port 8081), hold 20s, then verify.	COMMENT
LOW	…/new-e2e/tests/usm/windows_remote_service_tags_test.go	166	// Step 2: send 1000 connections to site B (port 8082).	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	116	// Step 1: create statefulset without spot label — all pods go on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	126	// Step 2: opt in to spot scheduling.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	129	// Step 3: expect rebalancing to converge to 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	260	// Step 1: opt in — wait for 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	270	// Step 2: remove spot label to opt out, then restart to replace existing pods.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/statefulset_test.go	274	// Step 3: all pods should land on on-demand without the spot-assigned label.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	129	// Step 1: create deployment without spot label — all pods go on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	139	// Step 2: opt in to spot scheduling.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	142	// Step 3: expect rebalancing to converge to 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	236	// Step 1: opt in — wait for 6 spot / 4 on-demand.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	246	// Step 2: remove spot label to opt out, then restart to replace existing pods.	COMMENT
LOW⚡	test/new-e2e/tests/autoscaling/spot/deployment_test.go	250	// Step 3: all pods should land on on-demand without the spot-assigned label.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	419	// Step 1: Clean up any existing dd-agent user/group	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	427	// Step 2: Set up NSS extrausers	COMMENT
LOW	test/new-e2e/tests/installer/unix/package_agent_test.go	499	// Step 3: Verify that getent can find the user/group (confirming NSS is working)	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	514	// Step 4: Install the agent	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	518	// Step 5: Verify no new entries were added to /etc/passwd or /etc/group	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_agent_test.go	525	// Step 6: Verify the agent is installed and running	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	145	// Step 1: install the agent via the standard install script	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	150	// Step 2: remove the agent package while keeping config files.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	163	// Step 3: move datadog.yaml out of the way so the reinstall has no yaml.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	166	// Step 4: reinstall via the package manager with DD_OTELCOLLECTOR_ENABLED=true.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	185	// Step 5: otel-config.yaml must exist and contain the api_key and site from env vars.	COMMENT
LOW⚡	test/new-e2e/tests/installer/unix/package_ddot_test.go	192	// Step 6: restore datadog.yaml and append the otelcollector activation stanza.	COMMENT
72 more matches not shown…

AI Slop Vocabulary79 hits · 245 pts

Severity	File	Line	Snippet	Context
LOW	.golangci.yml	40	# note that if it's just for a single file, you can just add `//nolint:depguard` before the import	COMMENT
LOW	omnibus/config/software/installer.rb	68	# When the diffs go away, we delete the package job and just use this one.	COMMENT
MEDIUM	cmd/system-probe/subcommands/usm/netstat_linux.go	91	// Read TCP connections using procnet package (provides robust parsing and PID/FD mapping)	COMMENT
MEDIUM	cmd/otel-agent/subcommands/run/command.go	345	// TODO: this would be much better if we could leverage traceconfig.Module, which	COMMENT
MEDIUM	cmd/otel-agent/subcommands/run/command.go	362	// this is the current workaround to leverage it.	COMMENT
MEDIUM	tasks/worktree.py	74	"""Enters the worktree environment in order to invoke tasks in this context.	STRING
MEDIUM	tasks/omnibus.py	329	# Individual developers are still able to leverage the cache by providing	COMMENT
LOW	tasks/unit_tests/schema_codegen_tests.py	267	# Scalar elements just return None	COMMENT
MEDIUM	tasks/debugging/dump.py	152	# launch windbg and delve	COMMENT
LOW	tasks/kernel_matrix_testing/infra.py	22	# warnings about changed host keys. We need the combination of both options, if we just set	COMMENT
MEDIUM	tasks/libs/common/utils.py	395	# if you want to be able to use the delve debugger.	COMMENT
MEDIUM	tasks/libs/dynamic_test/jev/pr_context.py	92	# Current branch, robust to the detached-HEAD CI checkouts where rev-parse	COMMENT
MEDIUM	.gitlab/test/dynamic_test/jev_dyntest_evaluate.yml	2	# evaluate-index task and DynTestEvaluator harness as the coverage-based	COMMENT
MEDIUM	test/e2e-framework/testing/e2e/suite.go	580	// goroutine terminates, so it is robust to Goexit/panic during setup. The cleanupCalled	COMMENT
MEDIUM	…2e/tests/anomalydetection/anomalydetection_nix_test.go	246	batchSize = 20 // count=20 vs baseline count=1 → 20x step change; robust	CODE
MEDIUM	…w-e2e/tests/anomalydetection/scorer_helper_nix_test.go	23	// OnSeverityTransition fired — which is robust and consistent with the rest of	COMMENT
MEDIUM	…ternal/anomalydetection/testbench/ui/package-lock.json	4056	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz",	CODE
MEDIUM	…malydetection/observer/impl/metrics_detector_scanmw.go	38	// changepoint detector that's robust to distribution shape.	COMMENT
MEDIUM	…malydetection/observer/impl/metrics_detector_scanmw.go	299	// Check robust deviation at best split.	COMMENT
MEDIUM	…ection/observer/impl/metrics_detector_holt_residual.go	102	// 16 entries gives a robust median.	COMMENT
MEDIUM	…ection/observer/impl/metrics_detector_holt_residual.go	107	// HoltResidualDetector fires when a Holt forecast residual exceeds a robust	COMMENT
MEDIUM	…ction/observer/impl/metrics_detector_tukey_biweight.go	58	// biweight robust to "one historical glitch followed by a real shift later".	COMMENT
MEDIUM	…ction/observer/impl/metrics_detector_tukey_biweight.go	66	// Default: 80, enough context for a robust local baseline without making	COMMENT
MEDIUM	…ction/observer/impl/metrics_detector_tukey_biweight.go	316	// "robust-to-historical-outlier" test case.	COMMENT
MEDIUM	…ction/observer/impl/metrics_detector_tukey_biweight.go	330	// (b) Initial robust location/scale: median + 1.4826·MAD. The MAD scaling	COMMENT
MEDIUM	comp/logs-library/pipeline/provider.go	38	// SenderConcurrency via config options should utilize the endpoint's BatchMaxConcurrentSend override instead.	COMMENT
MEDIUM	comp/core/agenttelemetry/impl/sender.go	561	// message/payload contains multiples metrics for a single index of tag set. Essentially	COMMENT
MEDIUM	…eta/collectors/internal/kubeapiserver/kubeapiserver.go	183	// to utilize namespace labels for target and remote policy matching, and to	COMMENT
MEDIUM	comp/core/profiler/impl/profiler.go	218	// to utilize this provider over time, which will require additional plumbing. For	COMMENT
MEDIUM	comp/core/flare/types/types.go	38	// Return 0 from this function to utilize the default timeout instead.	COMMENT
MEDIUM	comp/core/flare/types/types.go	56	// are strongly encouraged to utilize the NewProvider or NewProviderWithTimeout functions instead.	COMMENT
MEDIUM	comp/logs/streamlogs/impl/streamlogs.go	153	// to utilize this provider over time, which will require additional plumbing.	COMMENT
MEDIUM	…ission/mutate/autoinstrumentation/language_versions.go	91	// wishes to utilize the default version found in languageVersions.	COMMENT
MEDIUM	pkg/clusteragent/autoscaling/workload/external/tls.go	46	// Create a certificate manager that will reload the certificate periodically for seamless updates	COMMENT
MEDIUM	pkg/clusteragent/clusterchecks/ksm_sharding.go	111	// We use the same defaults for sharding to provide a seamless experience	COMMENT
MEDIUM	pkg/gpu/safenvml/lib.go	591	// found, to make it more convenient and robust, without users having to	COMMENT
MEDIUM	pkg/util/containerd/containerd_util.go	56	// ContainerdItf is the interface implementing a subset of methods that leverage the Containerd api.	COMMENT
MEDIUM	pkg/util/scrubber/yaml_scrubber_test.go	1334	// This is more robust than string comparison since YAML formatting can vary	COMMENT
MEDIUM	pkg/util/fxutil/test.go	87	// This function does not leverage fxtest.App because we want to be	COMMENT
MEDIUM	pkg/config/model/types.go	299	// The following helpers are legacy and should no longer be used. Instead leverage the one above	COMMENT
MEDIUM	pkg/security/ebpf/probes/all.go	194	// AllBPFForEachMapElemProgramFunctions returns the list of programs that leverage the bpf_for_each_map_elem helper	COMMENT
MEDIUM	pkg/network/go/goversion/version.go	7	// delve debugger	COMMENT
MEDIUM	pkg/network/go/goversion/version.go	16	// GoVersion is just a wrapper around go-delve's goversion.GoVersion that also	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	82	// - https://github.com/go-delve/delve/pull/2704/files#diff-fb7b7a020e32bf8bf477c052ac2d2857e7e587478be6039aebc7135c6584	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	83	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L86-L95	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	84	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L374	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	114	// - https://github.com/go-delve/delve/pull/2704/files#diff-fb7b7a020e32bf8bf477c052ac2d2857e7e587478be6039aebc7135c6584	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	115	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L86-L95	COMMENT
MEDIUM⚡	pkg/network/go/asmscan/scan.go	116	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L374	COMMENT
MEDIUM	pkg/network/go/dwarfutils/compile_unit.go	25	// This struct is based on github.com/go-delve/delve/pkg/proc.*compileUnit:	COMMENT
MEDIUM	pkg/network/go/dwarfutils/compile_unit.go	26	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L436	COMMENT
MEDIUM	pkg/network/go/dwarfutils/compile_unit.go	40	// This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).findCompileUnit:	COMMENT
MEDIUM	pkg/network/go/dwarfutils/compile_unit.go	41	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1115	COMMENT
MEDIUM	pkg/network/go/dwarfutils/type_finder.go	19	// It wraps github.com/go-delve/delve/pkg/dwarf/godwarf	COMMENT
MEDIUM	pkg/network/go/dwarfutils/locexpr/exec.go	45	// This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).Location:	COMMENT
MEDIUM	pkg/network/go/dwarfutils/locexpr/exec.go	46	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1062	COMMENT
MEDIUM	pkg/network/go/bininspect/types.go	143	// - https://github.com/go-delve/delve/pull/2704#issuecomment-944374511	COMMENT
MEDIUM⚡	pkg/network/go/bininspect/newproc.go	140	// This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).setGStructOffsetElf:	COMMENT
MEDIUM⚡	pkg/network/go/bininspect/newproc.go	141	// - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1413	COMMENT
MEDIUM⚡	pkg/network/go/bininspect/newproc.go	144	// This is a bit arcane. Essentially:	COMMENT
19 more matches not shown…

Cross-Language Confusion39 hits · 229 pts

Severity	File	Line	Snippet	Context
HIGH⚡	tasks/quality_gates.py	258	print(color_message(" - Update your branch: git fetch origin main && git rebase origin/main", "cyan"))	CODE
HIGH	tasks/anomalydetection.py	221	f"bin/anomalydetection-testbench --scenarios-dir {scenarios_dir}{flags} & ( cd internal/anomalydetection/tes	CODE
HIGH⚡	tasks/notify.py	69	# "job1": {"consecutive_failures": 2, "jobs_info": [{"id": null, "failing": false, "commit": "abcdef42"}, {"	COMMENT
HIGH⚡	tasks/notify.py	70	# "job2": {"consecutive_failures": 0, "cumulative_failures": [{"id": 314618, "failing": true, "commit": "abc	COMMENT
HIGH⚡	tasks/installer.py	143	if command -v dpkg >/dev/null && dpkg -s datadog-agent >/dev/null 2>&1; then	STRING
HIGH⚡	tasks/installer.py	144	"${sudo_cmd[@]+"${sudo_cmd[@]}"}" datadog-agent purge >/dev/null 2>&1 \|\| true	STRING
HIGH⚡	tasks/installer.py	145	"${sudo_cmd[@]+"${sudo_cmd[@]}"}" dpkg --purge datadog-agent >/dev/null 2>&1 \|\| true	STRING
HIGH⚡	tasks/installer.py	147	elif command -v rpm >/dev/null && rpm -q datadog-agent >/dev/null 2>&1; then	STRING
HIGH⚡	tasks/installer.py	148	"${sudo_cmd[@]+"${sudo_cmd[@]}"}" datadog-agent purge >/dev/null 2>&1 \|\| true	STRING
HIGH⚡	tasks/installer.py	149	"${sudo_cmd[@]+"${sudo_cmd[@]}"}" rpm -e datadog-agent >/dev/null 2>&1 \|\| true	STRING
HIGH	tasks/setup.py	249	ctx.run('brew update && brew upgrade ddtool', hide=True)	CODE
HIGH	tasks/devcontainer.py	164	"git config --global --unset url.ssh://git@github.com/.insteadOf \|\| true"	CODE
HIGH	tasks/devcontainer.py	167	" && dda inv -- -e install-tools && dda inv -- -e deps"	CODE
HIGH	tasks/devcontainer.py	252	" && helm repo add datadog https://helm.datadoghq.com && helm repo update"	CODE
HIGH⚡	tasks/e2e_framework/aws/integrations/_lab_tasks.py	99	"-H 'X-aws-ec2-metadata-token-ttl-seconds: 60' --max-time 2 2>/dev/null \|\| true); "	CODE
HIGH⚡	tasks/e2e_framework/aws/integrations/_lab_tasks.py	102	"http://169.254.169.254/latest/meta-data/instance-id \|\| hostname -f 2>/dev/null \|\| hostname; "	CODE
HIGH⚡	tasks/e2e_framework/aws/integrations/_lab_tasks.py	103	"else hostname -f 2>/dev/null \|\| hostname; fi"	CODE
HIGH	tasks/e2e_framework/aws/integrations/_lab_tasks.py	270	"sudo systemctl restart datadog-agent \|\| sudo service datadog-agent restart",	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	450	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	457	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	464	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	471	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	478	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/gitlab_api_tests.py	486	diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4	CODE
HIGH⚡	tasks/unit_tests/experimental_gates_tests.py	607	created_by="RUN apt-get update && apt-get install -y wget",	CODE
HIGH⚡	tasks/unit_tests/experimental_gates_tests.py	613	self.assertEqual(layer_info.created_by, "RUN apt-get update && apt-get install -y wget")	CODE
HIGH	tasks/unit_tests/par_legacy_startup_template_tests.py	133	kill -0 "$pid" 2>/dev/null && exit 0 \|\| exit 1	CODE
HIGH	tasks/unit_tests/par_legacy_startup_template_tests.py	133	kill -0 "$pid" 2>/dev/null && exit 0 \|\| exit 1	CODE
HIGH⚡	tasks/unit_tests/releasenotes_linter_tests.py	296	"""Empty (null) sections should produce a warning."""	STRING
HIGH⚡	tasks/unit_tests/linter_tests.py	36	" - DD_API_KEY=$(aws ssm get-parameter --region us-east-1 --name $API_KEY_ORG2 --with-decryption --que	CODE
HIGH	tasks/kernel_matrix_testing/compiler.py	440	f"cp /root/.bashrc {self.compiler_home}/.bashrc && chown {self.compiler_uid}:{self.compiler_gid} {self.c	CODE
HIGH	tasks/kernel_matrix_testing/compiler.py	443	self.exec("mkdir ~/.cargo && touch ~/.cargo/env", user=self.compiler_user)	CODE
HIGH	tasks/kernel_matrix_testing/gdb.py	73	ctx.run(f"cd {gdb_paths.kernel_source} && make defconfig && make scripts_gdb")	CODE
HIGH	tasks/libs/ciproviders/github_api.py	654	"Please run `brew update && brew upgrade ddtool`."	CODE
HIGH	tasks/libs/linter/releasenotes.py	316	message=f"Section '{section}' is empty (null). Remove it or add content.",	CODE
HIGH	tasks/libs/common/auth.py	25	else "`ddtool auth token` returned an invalid token, it might be due to ddtool outdated. Please run `brew update	CODE
HIGH	tasks/libs/common/go.py	72	with timed("go mod download && go mod tidy"):	CODE
HIGH	tasks/libs/releasing/notes.py	88	ctx.run(f"cat {changelog_file} >> /tmp/new_changelog.rst && mv /tmp/new_changelog.rst {changelog_file}")	CODE
HIGH	pkg/gohai/cpu/from-lscpu-arm.py	38	//go:build linux && arm64	STRING

Deep Nesting230 hits · 216 pts

Severity	File	Line	Context
LOW	omnibus/python-scripts/post.py	13	CODE
LOW	omnibus/python-scripts/packages.py	183	CODE
LOW	omnibus/python-scripts/packages.py	264	CODE
LOW	omnibus/python-scripts/packages.py	305	CODE
LOW	omnibus/python-scripts/pre.py	44	CODE
LOW	…ommands/usm/debug_scripts/usm_leak_detector/network.py	89	CODE
LOW	…ommands/usm/debug_scripts/usm_leak_detector/network.py	138	CODE
LOW	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	32	CODE
LOW	…bug_scripts/usm_leak_detector/backends/system_probe.py	117	CODE
LOW	…/debug_scripts/usm_leak_detector/backends/streaming.py	15	CODE
LOW	…ripts/usm_leak_detector/backends/bpftool_downloader.py	87	CODE
LOW	tasks/install_tasks.py	47	CODE
LOW	tasks/quality_gates.py	79	CODE
LOW	tasks/pre_commit.py	26	CODE
LOW	tasks/pre_commit.py	48	CODE
LOW	tasks/pre_commit.py	30	CODE
LOW	tasks/release.py	93	CODE
LOW	tasks/release.py	849	CODE
LOW	tasks/release.py	889	CODE
LOW	tasks/macos.py	109	CODE
LOW	tasks/agent_ci_api.py	38	CODE
LOW	tasks/kmt.py	188	CODE
LOW	tasks/kmt.py	629	CODE
LOW	tasks/kmt.py	1069	CODE
LOW	tasks/kmt.py	1238	CODE
LOW	tasks/kmt.py	1555	CODE
LOW	tasks/kmt.py	1631	CODE
LOW	tasks/kmt.py	1722	CODE
LOW	tasks/kmt.py	1869	CODE
LOW	tasks/kmt.py	2129	CODE
LOW	tasks/kmt.py	2221	CODE
LOW	tasks/kmt.py	2444	CODE
LOW	tasks/owners.py	42	CODE
LOW	tasks/winbuild.py	68	CODE
LOW	tasks/renovate.py	168	CODE
LOW	tasks/renovate.py	486	CODE
LOW	tasks/renovate.py	528	CODE
LOW	tasks/test_core.py	105	CODE
LOW	tasks/test_core.py	72	CODE
LOW	tasks/fuzz_infra.py	167	CODE
LOW	tasks/anomalydetection.py	2210	CODE
LOW	tasks/collector.py	80	CODE
LOW	tasks/collector.py	132	CODE
LOW	tasks/collector.py	172	CODE
LOW	tasks/collector.py	196	CODE
LOW	tasks/collector.py	300	CODE
LOW	tasks/collector.py	383	CODE
LOW	tasks/new_e2e_tests.py	383	CODE
LOW	tasks/new_e2e_tests.py	824	CODE
LOW	tasks/new_e2e_tests.py	992	CODE
LOW	tasks/new_e2e_tests.py	1085	CODE
LOW	tasks/new_e2e_tests.py	1372	CODE
LOW	tasks/new_e2e_tests.py	1410	CODE
LOW	tasks/new_e2e_tests.py	1554	CODE
LOW	tasks/new_e2e_tests.py	1718	CODE
LOW	tasks/notify.py	140	CODE
LOW	tasks/go_deps.py	143	CODE
LOW	tasks/testwasher.py	219	CODE
LOW	tasks/testwasher.py	155	CODE
LOW	tasks/installer.py	162	CODE
170 more matches not shown…

Empty Error Handlers38 hits · 190 pts

Severity	File	Line	Snippet	Context
HIGH	packaging/aix/sitecustomize.py	24	except Exception:	CODE
HIGH	…ommands/usm/debug_scripts/usm_leak_detector/network.py	132	except (FileNotFoundError, OSError, PermissionError):	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	23	except (OSError, PermissionError):	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	28	except Exception:	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	141	except (IOError, OSError):	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	107	except (IOError, OSError):	CODE
HIGH	…bug_scripts/usm_leak_detector/backends/system_probe.py	50	except (FileNotFoundError, subprocess.TimeoutExpired):	CODE
HIGH	…bug_scripts/usm_leak_detector/backends/system_probe.py	94	except (ValueError, IndexError):	CODE
HIGH	…ripts/usm_leak_detector/backends/bpftool_downloader.py	112	except (subprocess.TimeoutExpired, OSError):	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/backends/bpftool.py	40	except (FileNotFoundError, subprocess.TimeoutExpired):	CODE
HIGH	…sm/debug_scripts/usm_leak_detector/backends/bpftool.py	63	except (FileNotFoundError, subprocess.TimeoutExpired):	CODE
HIGH	tasks/renovate.py	86	except Exception:	CODE
HIGH	tasks/anomalydetection.py	348	except json.JSONDecodeError:	CODE
HIGH	tasks/pipeline.py	419	except SlackApiError:	CODE
HIGH	tasks/cluster_agent.py	149	except FileExistsError:	CODE
HIGH	tasks/licenses.py	337	except KeyError:	CODE
HIGH	tasks/omnibus.py	83	except FileNotFoundError:	CODE
HIGH	tasks/tools/clang_format.py	274	except AttributeError:	CODE
HIGH	tasks/e2e_framework/setup/aws.py	408	except FileNotFoundError:	CODE
HIGH	tasks/e2e_framework/setup/setup.py	52	except Exception:	CODE
HIGH	tasks/e2e_framework/aws/integrations/_lab_tasks.py	110	except Exception:	CODE
HIGH	tasks/unit_tests/par_legacy_startup_template_tests.py	217	except ProcessLookupError:	CODE
HIGH	tasks/unit_tests/docs_repo_links_tests.py	48	except OSError:	CODE
HIGH	tasks/unit_tests/static_quality_gates/gates_tests.py	715	except OSError:	CODE
HIGH	tasks/unit_tests/static_quality_gates/gates_tests.py	719	except OSError:	CODE
HIGH	tasks/kernel_matrix_testing/tool.py	107	except KeyError:	CODE
HIGH	tasks/libs/ciproviders/github_api.py	27	except ImportError:	CODE
HIGH	tasks/libs/notify/jira_failing_tests.py	16	except ImportError:	CODE
HIGH	tasks/libs/linter/gitlab.py	459	except UnicodeDecodeError:	CODE
HIGH	tasks/libs/common/utils.py	155	except (NotImplementedError, OSError, ValueError):	CODE
HIGH	tasks/commands/interface.py	35	except ValueError:	CODE
HIGH	…2e/tests/discovery/testdata/provision/python/server.py	68	except KeyboardInterrupt:	CODE
HIGH	bazel/rules/go_mod_tidy_all/go_mod_tidy_all.py	24	except ProcessLookupError:	CODE
HIGH	deps/cpython/distrusted_spki_check.py	33	except ssl.SSLWantReadError:	CODE
HIGH	Dockerfiles/agent/test_image_contents.py	71	except FileNotFoundError:	CODE
HIGH	pkg/gohai/cpu/from-lscpu-arm.py	30	except StopIteration:	CODE
HIGH	pkg/config/legacy/testdata/config.py	443	except ConfigParser.NoOptionError:	CODE
HIGH	pkg/config/legacy/testdata/config.py	379	except Exception:	CODE

Unused Imports186 hits · 183 pts

Severity	File	Line	Context
LOW	omnibus/python-scripts/packages_tests.py	2	CODE
LOW	omnibus/python-scripts/packages_tests.py	3	CODE
LOW	omnibus/python-scripts/packages_tests.py	5	CODE
LOW	omnibus/python-scripts/packages_tests.py	9	CODE
LOW	omnibus/python-scripts/post_tests.py	4	CODE
LOW	omnibus/python-scripts/post_tests.py	6	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	5	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	6	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	7	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	8	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	9	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	9	CODE
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	9	CODE
LOW	tasks/k8s_versions.py	8	CODE
LOW	tasks/virustotal.py	1	CODE
LOW	tasks/build_tags.py	12	CODE
LOW	tasks/kmt.py	1	CODE
LOW	tasks/code_review.py	1	CODE
LOW	tasks/claude.py	7	CODE
LOW	tasks/renovate.py	21	CODE
LOW	tasks/test_core.py	1	CODE
LOW	tasks/new_e2e_tests.py	5	CODE
LOW	tasks/notify.py	1	CODE
LOW	tasks/vscode.py	7	CODE
LOW	tasks/testwasher.py	1	CODE
LOW	tasks/setup.py	5	CODE
LOW	tasks/ai_sandbox.py	9	CODE
LOW	tasks/ebpf.py	1	CODE
LOW	tasks/system_probe.py	1	CODE
LOW	tasks/go.py	5	CODE
LOW	tasks/bazel.py	1	CODE
LOW	tasks/gotest.py	5	CODE
LOW	tasks/python_version.py	9	CODE
LOW	tasks/modules.py	1	CODE
LOW	tasks/gpu.py	1	CODE
LOW	tasks/security_agent.py	1	CODE
LOW	tasks/github_tasks.py	1	CODE
LOW	tasks/linter.py	3	CODE
LOW	tasks/update_go.py	1	CODE
LOW	tasks/buildimages.py	1	CODE
LOW	tasks/gitlab_helpers.py	3	CODE
LOW	tasks/e2e_framework/aws/integrations/_lab_tasks.py	8	CODE
LOW	tasks/e2e_framework/aws/integrations/dell_powerflex.py	7	CODE
LOW	tasks/e2e_framework/aws/integrations/lustre.py	8	CODE
LOW	tasks/unit_tests/notify_tests.py	1	CODE
LOW	tasks/unit_tests/github_tasks_tests.py	1	CODE
LOW	tasks/unit_tests/renovate_tests.py	1	CODE
LOW	tasks/unit_tests/release_tests.py	1	CODE
LOW	tasks/unit_tests/kmt_tests.py	13	CODE
LOW	tasks/unit_tests/kmt_tests.py	14	CODE
LOW	tasks/unit_tests/code_review_tests.py	1	CODE
LOW	tasks/unit_tests/modules_tests.py	1	CODE
LOW	tasks/unit_tests/libs/notify/alerts_tests.py	1	CODE
LOW	tasks/unit_tests/libs/utof/test_failure_parser.py	12	CODE
LOW	tasks/unit_tests/libs/utof/e2e_converter_tests.py	8	CODE
LOW	tasks/debugging/__init__.py	1	CODE
LOW	tasks/debugging/__init__.py	2	CODE
LOW	tasks/debugging/__init__.py	3	CODE
LOW	tasks/static_quality_gates/metrics.py	1	CODE
LOW	tasks/static_quality_gates/thresholds.py	1	CODE
126 more matches not shown…

Hallucination Indicators17 hits · 170 pts

Severity	File	Line	Snippet	Context
CRITICAL	…ce-agent/test/testsuite/testdata/trace_with_rates.json	114	"error.stack": "java.lang.InterruptedException: Thread interrupted for external calls timeout.\n\tat com.datadog.e	CODE
CRITICAL	…agent/test/testsuite/testdata/trace_without_rates.json	121	"error.stack":"java.lang.InterruptedException: Thread interrupted for external calls timeout.\n\tat com.datadog	CODE
CRITICAL	comp/core/gui/impl/views/private/js/jquery-3.5.1.min.js	2	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f	CODE
CRITICAL	comp/syntheticstestscheduler/impl/worker.go	408	SubType: strings.ToLower(string(w.testCfg.cfg.Config.Request.GetSubType())),	CODE
CRITICAL	pkg/clusteragent/autoscaling/cluster/controller.go	220	knp.Spec.Template.Spec.NodeClassRef = targetNp.Spec.Template.Spec.NodeClassRef.DeepCopy()	CODE
CRITICAL	pkg/clusteragent/autoscaling/cluster/controller.go	273	desired.Spec.Template.Spec.NodeClassRef = datadogNp.Spec.Template.Spec.NodeClassRef.DeepCopy()	CODE
CRITICAL	pkg/security/tests/accept_test.go	70	assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address")	CODE
CRITICAL	pkg/security/tests/accept_test.go	86	assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address")	CODE
CRITICAL	pkg/security/tests/accept_test.go	171	assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address")	CODE
CRITICAL	pkg/security/tests/accept_test.go	195	assert.Equal(t, "::1", event.Accept.Addr.IPNet.IP.String(), "wrong address")	CODE
CRITICAL	pkg/security/tests/accept_test.go	214	assert.Equal(t, "::1", event.Accept.Addr.IPNet.IP.String(), "wrong address")	CODE
CRITICAL	pkg/security/security_profile/ad.go	303	if !ad.Profile.Metadata.CGroupContext.CGroupPathKey.IsNull() {	CODE
CRITICAL	pkg/security/security_profile/ad.go	350	if !ad.Profile.Metadata.CGroupContext.CGroupPathKey.IsNull() {	CODE
CRITICAL	…ks/cluster/orchestrator/transformers/k8s/deployment.go	37	deploy.MaxUnavailable = d.Spec.Strategy.RollingUpdate.MaxUnavailable.String()	CODE
CRITICAL	…ks/cluster/orchestrator/transformers/k8s/deployment.go	40	deploy.MaxSurge = d.Spec.Strategy.RollingUpdate.MaxSurge.String()	CODE
CRITICAL	…cks/cluster/orchestrator/transformers/k8s/daemonset.go	45	daemonSet.Spec.MaxUnavailable = ds.Spec.UpdateStrategy.RollingUpdate.MaxUnavailable.String()	CODE
CRITICAL	pkg/logs/tokenizer/tokenizer_benchmark_test.go	55	{"StackTrace", []byte(`javax.servlet.ServletException: Request processing failed; nested exception is java.lang.NullPo	CODE

Self-Referential Comments52 hits · 154 pts

Severity	File	Line	Snippet	Context
MEDIUM	modules.yml	1	# This file contains the go modules configuration.	COMMENT
MEDIUM	omnibus/config/software/datadog-agent-finalize.rb	105	# Create the installer symlink if the file doesn't already exist	COMMENT
MEDIUM	packaging/aix/stages/02-python.sh	446	# Create the runtime-path symlink BEFORE make so that the baked-in -blibpath	COMMENT
MEDIUM⚡	packaging/aix/stages/02-python.sh	521	# Create a version-agnostic symlink so Go code can link with -lpython3 instead	COMMENT
MEDIUM⚡	packaging/aix/lib/env.sh	7	# This file is sourced, never executed directly. Callers control set -e/set -u.	COMMENT
MEDIUM	packaging/aix/lib/env.sh	210	# Create the sentinel file that marks STAGE_NAME as complete.	COMMENT
MEDIUM	cmd/agent/macos/install_mac_os_v1.sh	360	# The following block covers both cases so that we have tbe username we want in the real_user variable.	COMMENT
MEDIUM	tasks/msi.py	283	# Create a MSI build cmd, not the full MSI	STRING
MEDIUM	tasks/ebpf.py	630	# Define the complexity level for all assembly instructions	COMMENT
MEDIUM	tasks/pipeline.py	558	# Create a new main and push it	COMMENT
MEDIUM	tasks/pipeline.py	567	# Create a PR towards this new branch and adds it to the merge queue	COMMENT
MEDIUM	tasks/windows_dev_env.py	92	# Create the Windows development environment.	COMMENT
MEDIUM⚡	tasks/components.py	657	# Create the root folder. We temporary set the umask to 0 to prevent 'os.makedirs' from giving wrong permissions to	COMMENT
MEDIUM⚡	tasks/components.py	669	# Create the components framework common files from predefined templates	COMMENT
MEDIUM	tasks/unit_tests/components_tests.py	12	# Create a temporary directory of the source directory to allow	COMMENT
MEDIUM	tasks/unit_tests/experimental_gates_tests.py	182	# Create a temporary config file	COMMENT
MEDIUM	tasks/unit_tests/experimental_gates_tests.py	331	# Create a sample report with regular files and symlinks	COMMENT
MEDIUM	tasks/unit_tests/experimental_gates_tests.py	817	# Create a temporary config file	COMMENT
MEDIUM	tasks/unit_tests/experimental_gates_tests.py	964	# Create a sample report	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	44	# Create a context mock with run method	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	110	# Create a context mock with run method	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	166	# Create a context mock	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	203	# Create a context mock	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	244	# Create a context mock with run method	COMMENT
MEDIUM	tasks/unit_tests/url_tests.py	279	# Create a context mock	COMMENT
MEDIUM	tasks/unit_tests/libs/common/s3_test.py	20	# Create a temporary file for testing	COMMENT
MEDIUM	tasks/unit_tests/libs/common/s3_test.py	90	# Create a temporary directory for testing	COMMENT
MEDIUM	tasks/unit_tests/libs/dynamic_test/backend_test.py	42	# Create a mock JSON file that will be "downloaded"	COMMENT
MEDIUM	tasks/static_quality_gates/gates_reporter.py	93	# Create a lookup for gate states	COMMENT
MEDIUM	tasks/kernel_matrix_testing/vmconfig.py	235	# Create a new entry for this architecture	COMMENT
MEDIUM	tasks/libs/ciproviders/github_api.py	420	# Create a commit from the given tree, see details in https://github.com/orgs/community/discussions/50055	STRING
MEDIUM	tasks/libs/ciproviders/ci_config.py	9	# This file is used to set exceptions for jobs that do not require needs or rules	COMMENT
MEDIUM	tasks/libs/pipeline/github_jira_map.yaml	1	# This file contains a mapping of DataDog Github teams to JIRA projects.	COMMENT
MEDIUM	tasks/libs/pipeline/github_slack_map.yaml	1	# This file contains a mapping of DataDog Github teams to slack channels.	COMMENT
MEDIUM	tasks/libs/common/gomodules.py	34	# This file contains the go modules configuration.	COMMENT
MEDIUM	tasks/libs/releasing/version.py	155	## The following functions aim at returning the correct version to use for a given	COMMENT
MEDIUM	.gitlab/test/integration_test/otel.yml	71	# Create a buildx builder, see .ddot_byoc_build_cache_setup for the rationale behind this.	COMMENT
MEDIUM	…tInstaller/CustomActions.Tests/WriteConfigUnitTests.cs	119	# Define a single property so that the YAML loader doesn't	COMMENT
MEDIUM	.agents/skills/follow-pr/scripts/create_devenv.sh	8	# Create a unique ID	COMMENT
MEDIUM	bazel/tools/generate_module_bazel.py	29	"""# This file is generated. Do not hand edit.""",	STRING
MEDIUM	bazel/rules/macos/codesign/sign_jar_macos.sh	33	# Create a temporary directory for unpacking	COMMENT
MEDIUM	Dockerfiles/agent/secrets-helper/test_readsecret.py	48	# Create a sensitive file and symlink it in the allowed folder	COMMENT
MEDIUM	.dda/extend/pythonpath/lab/providers/__init__.py	23	# Create the resource	STRING
MEDIUM	.dda/extend/commands/gh/cherry_pick_pr/__init__.py	80	# Create a new working tree	COMMENT
MEDIUM	.dda/extend/commands/gh/cherry_pick_pr/__init__.py	84	# Create a new branch	COMMENT
MEDIUM	.dda/extend/commands/gh/cherry_pick_pr/__init__.py	100	# Create the backport PR	COMMENT
MEDIUM	pkg/network/usm/testutil/iis_helper.go	50	# Create the IIS site	COMMENT
MEDIUM	pkg/network/protocols/redis/testdata/runner.sh	6	# Create a directory to store the configuration files	COMMENT
MEDIUM	pkg/network/protocols/postgres/testdata/runner.sh	6	# Create a directory to store the configuration files	COMMENT
MEDIUM	pkg/network/protocols/postgres/testdata/runner.sh	9	# Define the paths to the configuration files	COMMENT
MEDIUM	pkg/network/protocols/mysql/testdata/runner.sh	6	# Create a directory to store the configuration files	COMMENT
MEDIUM	pkg/compliance/dbconfig/loader_test.go	837	# This file is read on server startup and when the server receives a SIGHUP	COMMENT

Docstring Block Structure30 hits · 150 pts

Severity	File	Line	Snippet	Context
HIGH	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	39	Run a subprocess with timeout using select() instead of sleep(). This avoids the seccomp issue where nanosleep	STRING
HIGH	tasks/anomalydetection.py	519	Runs the observer F1 eval: replays scenarios, scores Gaussian F1. The main score is a metric between 0 and 1,	STRING
HIGH	tasks/python_version.py	195	Fetch SHA256 hash for Python source tarball using SBOM file. Args: version: Python version string (e.g	STRING
HIGH	tasks/static_quality_gates/experimental_gates.py	646	Measure an artifact using the configured processor. Args: ctx: Invoke context for running	STRING
HIGH	tasks/static_quality_gates/experimental_gates.py	1096	Measure a package artifact and generate a comprehensive report. Args: ctx: Invoke context	STRING
HIGH	tasks/static_quality_gates/experimental_gates.py	1157	Measure a Docker image and generate a comprehensive report. Args: ctx: Invoke context for	STRING
HIGH	tasks/static_quality_gates/gates.py	257	Measure an artifact's on-wire and on-disk sizes. Args: ctx: Invoke context for running com	STRING
HIGH	tasks/static_quality_gates/gates.py	516	Execute the quality gate. Args: ctx: Invoke context Returns: GateResu	STRING
HIGH	tasks/static_quality_gates/gates.py	634	Create a quality gate with the appropriate measurement strategy. Args: gate_name: Technica	STRING
HIGH	tasks/static_quality_gates/gates.py	659	Create the appropriate artifact measurer based on gate name. Args: gate_name: Technical ga	STRING
HIGH	tasks/static_quality_gates/gates.py	680	Create all quality gates from one or more configuration files. Args: config_path: Path (or	STRING
HIGH	tasks/libs/ciproviders/gitlab_api.py	413	Will iterate over all jobs in all files for the given states. Args: only_leaves: If True, will retu	STRING
HIGH	tasks/libs/ciproviders/gitlab_api.py	571	Will iterate over all jobs in all files for the given states. Args: only_leaves: If True, will retu	STRING
HIGH	tasks/libs/common/bazel_query.py	17	Run a Bazel query with --output=streamed_jsonproto and yield matching objects. Each line of the stream is a JSON-en	STRING
HIGH	tasks/libs/common/s3.py	11	Upload a file to S3 using boto3. Args: file_path: Local path to the file to upload s3_path: S3	STRING
HIGH	tasks/libs/common/s3.py	83	Download a folder from S3 to a specified local path. Args: s3_path: S3 path (bucket name and key)	STRING
HIGH	tasks/libs/common/s3.py	168	List all direct subfolders of a given S3 path, that contains a file with the given filename. The list is sorted	STRING
HIGH	tasks/libs/dynamic_test/backend.py	40	Upload a DynamicTestIndex to the backend storage. The implementation should: 1. Serialize the index to	STRING
HIGH	tasks/libs/dynamic_test/backend.py	62	Retrieve a DynamicTestIndex from the backend storage. The implementation should: 1. Locate the stored i	STRING
HIGH	tasks/libs/dynamic_test/indexer.py	55	Build and return a DynamicTestIndex from the configured data source. This method should: 1. Process the	STRING
HIGH	tasks/libs/dynamic_test/executor.py	81	Find and load the best available index for the given commit. Searches through available indexed commits to find	STRING
HIGH	docs/dev/checks/builtins/_util.md	20	Run an external process and return the output. NOTE: If unicode is passed to any of the params accepting it, the	STRING
HIGH	docs/dev/checks/builtins/tagger.md	31	Get tags for an entity. Args: id (string): entity identifier. cardinality (int): constant represent	STRING
HIGH	docs/dev/checks/builtins/datadog_agent.md	29	Get an item from the Agent configuration store. Args: key (string or unicode): the key of the Agent config	STRING
HIGH	docs/dev/checks/builtins/datadog_agent.md	75	Log a message through the agent logger. Args: message (string or unicode): the log message. log_lev	STRING
HIGH	docs/dev/checks/builtins/datadog_agent.md	90	Send external host tags (internal feature, never ever use it). Args: tags (list): a list of external tags w	STRING
HIGH	docs/dev/checks/builtins/containers.md	22	Returns whether a container is excluded per name and image. NOTE: If unicode is passed to any of the params accepti	STRING
HIGH	docs/dev/checks/builtins/aggregator.md	35	Submit a metric to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the string is	STRING
HIGH	docs/dev/checks/builtins/aggregator.md	60	Submit a service check to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the str	STRING
HIGH	docs/dev/checks/builtins/aggregator.md	85	Submit an event to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the string is	STRING

AI Structural Patterns78 hits · 72 pts

Severity	File	Line	Context
LOW	tasks/package.py	125	CODE
LOW	tasks/package.py	193	CODE
LOW	tasks/release.py	170	CODE
LOW	tasks/release.py	231	CODE
LOW	tasks/agent_ci_api.py	38	CODE
LOW	tasks/dogstatsd.py	31	CODE
LOW	tasks/kmt.py	131	CODE
LOW	tasks/kmt.py	188	CODE
LOW	tasks/kmt.py	843	CODE
LOW	tasks/kmt.py	1342	CODE
LOW	tasks/kmt.py	1467	CODE
LOW	tasks/kmt.py	2358	CODE
LOW	tasks/kmt.py	2603	CODE
LOW	tasks/secret_generic_connector.py	26	CODE
LOW	tasks/anomalydetection.py	116	CODE
LOW	tasks/anomalydetection.py	229	CODE
LOW	tasks/anomalydetection.py	505	CODE
LOW	tasks/anomalydetection.py	759	CODE
LOW	tasks/anomalydetection.py	1141	CODE
LOW	tasks/anomalydetection.py	1834	CODE
LOW	tasks/anomalydetection.py	2210	CODE
LOW	tasks/cws_instrumentation.py	30	CODE
LOW	tasks/new_e2e_tests.py	383	CODE
LOW	tasks/go_deps.py	507	CODE
LOW	tasks/trace_agent.py	30	CODE
LOW	tasks/installer.py	30	CODE
LOW	tasks/ai_sandbox.py	48	CODE
LOW	tasks/pipeline.py	129	CODE
LOW	tasks/cluster_agent.py	29	CODE
LOW	tasks/agent.py	57	CODE
LOW	tasks/agent.py	358	CODE
LOW	tasks/agent.py	461	CODE
LOW	tasks/agent.py	723	CODE
LOW	tasks/system_probe.py	182	CODE
LOW	tasks/system_probe.py	225	CODE
LOW	tasks/system_probe.py	315	CODE
LOW	tasks/go.py	48	CODE
LOW	tasks/gotest.py	176	CODE
LOW	tasks/gotest.py	624	CODE
LOW	tasks/gotest.py	1476	CODE
LOW	tasks/modules.py	290	CODE
LOW	tasks/security_agent.py	362	CODE
LOW	tasks/omnibus.py	119	CODE
LOW	tasks/omnibus.py	235	CODE
LOW	tasks/omnibus.py	407	CODE
LOW	tasks/github_tasks.py	241	CODE
LOW	tasks/linter.py	75	CODE
LOW	tasks/linter.py	435	CODE
LOW	tasks/process_agent.py	26	CODE
LOW	tasks/gitlab_helpers.py	181	CODE
LOW	tasks/e2e_framework/deploy.py	38	CODE
LOW	tasks/e2e_framework/tool.py	257	CODE
LOW	tasks/e2e_framework/azure/vm.py	43	CODE
LOW	tasks/e2e_framework/azure/aks.py	27	CODE
LOW	tasks/e2e_framework/setup/setup.py	107	CODE
LOW	tasks/e2e_framework/gcp/vm.py	50	CODE
LOW	tasks/e2e_framework/gcp/openshift.py	29	CODE
LOW	tasks/e2e_framework/gcp/gke.py	37	CODE
LOW	tasks/e2e_framework/aws/kind.py	37	CODE
LOW	tasks/e2e_framework/aws/deploy.py	16	CODE
18 more matches not shown…

Redundant / Tautological Comments43 hits · 62 pts

Severity	File	Line	Snippet	Context
LOW	…s/usm/debug_scripts/usm_leak_detector/map_discovery.py	25	# Check if this is a target map (handle kernel name truncation)	COMMENT
LOW	…s/usm/debug_scripts/usm_leak_detector/pid_validator.py	88	# Check if this is a target map (handle kernel name truncation)	COMMENT
LOW	…s/usm/debug_scripts/usm_leak_detector/pid_validator.py	140	# Check if we've already validated this PID	COMMENT
LOW⚡	…subcommands/usm/debug_scripts/usm_leak_detector/cli.py	151	# Check if we found anything	COMMENT
LOW	…sm/debug_scripts/usm_leak_detector/subprocess_utils.py	94	# Check if process finished first	COMMENT
LOW	cmd/agent/macos/install_mac_os_v1.sh	263	# Check if the version is a classic release version or a pre-release version	COMMENT
LOW	cmd/agent/macos/install_mac_os_v1.sh	529	# Check if this user has per-user installations	COMMENT
LOW	cmd/agent/macos/install_mac_os_v1.sh	560	# Check if any socket files exist	COMMENT
LOW	tasks/k8s_versions.py	525	# Check if there are new versions to process	COMMENT
LOW	tasks/skaffold.py	192	# Check if Skaffold is installed	COMMENT
LOW	tasks/kmt.py	268	# Check if this test is already included in some parent test	COMMENT
LOW	tasks/new_e2e_tests.py	1491	# Check if it's an absolute path first	COMMENT
LOW	tasks/new_e2e_tests.py	1495	# Check if it's a file in the output directory	COMMENT
LOW	tasks/coverage.py	291	# Check if the mode is the same in both files.	COMMENT
LOW	tasks/msi.py	139	# Check if wix is installed globally	STRING
LOW	tasks/gotest.py	990	# Check if the package is in the target list of the module we want to test.	COMMENT
LOW	tasks/gotest.py	1317	# Check if the module is in the target list of the modules we want to test	COMMENT
LOW	tasks/gotest.py	1321	# Check if the package is in the target list of the module we want to test	COMMENT
LOW	tasks/python_version.py	73	# Check if update is needed	COMMENT
LOW	tasks/modules.py	401	# Check if any go.mod files were modified	STRING
LOW	tasks/e2e_framework/setup/setup.py	533	# Check if aws creds are valid	COMMENT
LOW	tasks/e2e_framework/setup/gcp.py	53	# Check if gke-gcloud-auth-plugin is installed and install it if not	COMMENT
LOW	tasks/e2e_framework/aws/gensim_eks.py	221	# Check if cluster is reachable	COMMENT
LOW	tasks/unit_tests/releasenotes_linter_tests.py	17	# Check if docutils is available for tests that depend on it	COMMENT
LOW	tasks/static_quality_gates/experimental_gates.py	828	# Check if this is OCI format (has index.json and oci-layout)	COMMENT
LOW	tasks/static_quality_gates/experimental_gates.py	974	# Check if this is OCI format	COMMENT
LOW	tasks/static_quality_gates/pr_comment.py	204	# Check if this is a blocking or non-blocking failure	STRING
LOW	tasks/kernel_matrix_testing/compiler.py	333	# Check if the image exists	COMMENT
LOW	tasks/kernel_matrix_testing/vmconfig.py	225	# Check if image is available locally	COMMENT
LOW	tasks/kernel_matrix_testing/vmconfig.py	253	# Check if image is up to date using hash comparison	COMMENT
LOW	tasks/kernel_matrix_testing/infra.py	328	# Check if it's a key name that's there in the agent	COMMENT
LOW	tasks/libs/pipeline/tools.py	363	# Check if old job already in notification list, to append retry message	COMMENT
LOW	tasks/libs/types/types.py	127	# Check if we have to match tags	COMMENT
LOW	tasks/libs/types/types.py	142	# Check if the job tags match any possible combination of the dependency tags	COMMENT
LOW	tasks/libs/testing/e2e.py	60	# Check if candidate_test is a leaf test	COMMENT
LOW	tasks/libs/common/s3.py	217	# Check if there are more pages	COMMENT
LOW	tasks/libs/common/datadog_api.py	153	# Check if there are more pages	COMMENT
LOW	tasks/libs/owners/linter.py	178	# Check if root is matching the pattern, without "./" at the begining	COMMENT
LOW	tasks/libs/owners/linter.py	189	# Check if the file path matches any of the regex patterns	COMMENT
LOW	.gitlab/test/functional_test/regression_detector.yml	108	# Check if image exists for the baseline SHA, walking backwards on the	COMMENT
LOW	test/e2e-framework/scenarios/aws/gensim-eks/run.go	749	# Check if all images are already cached in ECR under the hash tag.	COMMENT
LOW	.github/workflows/upgrade-python-patch-version.yml	49	# Check if files were modified	COMMENT
LOW	.dda/extend/pythonpath/lab/providers/local/kind.py	111	# Check if kind is installed	COMMENT

Fake / Example Data54 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	packaging/aix/package.sh	99	# Files like "Lorem ipsum.txt" and "launcher manifest.xml" (setuptools vendor docs)	COMMENT
LOW	…cret-generic-connector/backend/hashicorp/vault_test.go	487	_, _ = w.Write([]byte(`{"auth":{"client_token":"fake-token"}}`))	CODE
LOW	…cret-generic-connector/backend/hashicorp/vault_test.go	518	assert.Equal(t, "fake-token", vb.Client.Token())	CODE
LOW	tasks/system_probe.py	1263	ctx.run(f"mkdir -p {output_dir}/dummy_data")	CODE
LOW	tasks/unit_tests/issue_tests.py	20	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	71	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	103	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	134	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	165	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	191	'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token',	CODE
LOW	tasks/unit_tests/issue_tests.py	231	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	277	{'PR_REQUESTED_TEAMS': '[{"slug": "team1"}]', 'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	324	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW	tasks/unit_tests/issue_tests.py	367	{'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'},	CODE
LOW⚡	tasks/unit_tests/gitlab_api_tests.py	697	mock_response.json.return_value = {'token': 'fake-token'}	CODE
LOW⚡	tasks/unit_tests/gitlab_api_tests.py	713	self.assertEqual(get_gitlab_token(ctx), 'fake-token')	CODE
LOW	…e/tests/agent-log-pipelines/k8s-logs/long_line_log.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW	…e/tests/agent-log-pipelines/k8s-logs/long_line_log.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW	…alydetection-run-gensim-scenario-on-vm/scripts/test.sh	121	printf 'DD_API_KEY=dummy-key\nDD_APP_KEY=dummy-app\n' > "$workspace/env"	CODE
LOW	…alydetection-run-gensim-scenario-on-vm/scripts/test.sh	136	if grep -q dummy-key "$CALLS"; then echo "credential leaked into SSH script" >&2; exit 1; fi	CODE
LOW	comp/core/gui/impl/views/private/js/purify.min.js	2	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
LOW	doc/guidelines/docs.md	95	Lorem ipsum ...	CODE
LOW	doc/guidelines/docs.md	104	Lorem ipsum ...	CODE
LOW	pkg/obfuscate/sql_test.go	919	"* SELECT * FROM fake_data(1, 2, 3);",	CODE
LOW	pkg/obfuscate/sql_test.go	920	"* SELECT * FROM fake_data ( ? )",	CODE
LOW	pkg/serializer/metrics_test.go	526	cfg.SetInTest("api_key", "fake-key")	CODE
LOW	pkg/serializer/metrics_endpoint_payloads_test.go	39	cfg.SetInTest("api_key", "fake-key")	CODE
LOW	pkg/serializer/metrics_endpoint_payloads_test.go	40	cfg.SetInTest("additional_endpoints", map[string][]string{secondary: {"fake-key"}, empty: {"fake-key"}, noMatch: {"f	CODE
LOW	pkg/trace/api/tracer_flare_test.go	62	writer.WriteField("email", "test@test.com")	CODE
LOW	pkg/trace/api/tracer_flare_test.go	135	assert.Equal(t, "test@test.com", req.FormValue("email"))	CODE
LOW	…ateactionrunner/bundle-support/enrich_actions_types.go	14	Placeholder string `json:"placeholder"`	CODE
LOW	…actionrunner/credentials/resolver/http_domains_test.go	50	for _, pattern := range []string{"", "*", "https://example.com", "example.com:443", "example.com/path", "user@example.c	CODE
LOW	pkg/util/scrubber/yaml_scrubber_test.go	88	"email": "user@example.com",	CODE
LOW	pkg/util/scrubber/yaml_scrubber_test.go	94	"email": "user@example.com",	CODE
LOW	pkg/util/scrubber/json_scrubber_test.go	38	input: []byte(`{"user": {"password": "secret", "email": "user@example.com"}}`),	CODE
LOW	pkg/util/scrubber/json_scrubber_test.go	39	expected: []byte(`{"user": {"password": "********", "email": "user@example.com"}}`),	CODE
LOW	pkg/util/cloudproviders/cloudfoundry/cfclient_test.go	26	fakeCCToken = "fake-token"	CODE
LOW	pkg/config/utils/metrics_endpoint_routing_test.go	23	https://secondary.example/Path: [fake-key]	CODE
LOW	pkg/config/remote/service/service_test.go	192	AppKey: "fake_key",	CODE
LOW	pkg/security/secl/model/model_helpers_unix.go	349	"placeholder",	CODE
LOW	pkg/template/html/attr.go	98	"placeholder": contentTypePlain,	CODE
LOW	…ector/corechecks/agentprofiling/agentprofiling_test.go	120	check := createTestCheck(t, "100MB", 50, "TICKET-123", "user@example.com", true)	CODE
LOW	…ector/corechecks/agentprofiling/agentprofiling_test.go	125	assert.Equal(t, "user@example.com", check.instance.UserEmail)	CODE
LOW	…ector/corechecks/agentprofiling/agentprofiling_test.go	198	userEmail: "user@example.com",	CODE
LOW	…ector/corechecks/agentprofiling/agentprofiling_test.go	252	instance: &Config{TicketID: "TICKET-123", UserEmail: "user@example.com"},	CODE
LOW	…ector/corechecks/agentprofiling/agentprofiling_test.go	261	user_email: "user@example.com"`)	CODE
LOW	…em/windowscertificate/windows_certificate_tags_test.go	207	EmailAddresses: []string{"admin@example.com"},	CODE
LOW	…g/opentelemetry-mapping-go/otlp/rum/rum_traces_test.go	43	"email": "test@test.com",	CODE
LOW	…g/opentelemetry-mapping-go/otlp/rum/rum_traces_test.go	79	assert.Equal(t, "test@test.com", usrEmail.AsString())	CODE
LOW	pkg/opentelemetry-mapping-go/otlp/rum/rum_test.go	213	m.PutStr("name", "John Doe")	CODE
LOW	pkg/opentelemetry-mapping-go/otlp/rum/rum_test.go	228	"name": "John Doe",	CODE
LOW	…pentelemetry-mapping-go/otlp/attributes/source_test.go	1142	"ec2.tag.kubernetes.io/cluster/clustername": "dummy_value",	CODE
LOW	…entelemetry-mapping-go/otlp/attributes/ec2/ec2_test.go	83	"ec2.tag.kubernetes.io/cluster/clustername": "dummy_value",	CODE
LOW	pkg/process/metadata/workloadmeta/grpc_test.go	35	cfg.SetInTest("process_config.language_detection.grpc_port", "lorem ipsum")	CODE

Magic Placeholder Names7 hits · 35 pts

Severity	File	Line	Snippet	Context
HIGH	.agents/skills/injector-dev/SKILL.md	43	export DD_API_KEY="<your-api-key>"	CODE
HIGH	doc/tutorials/dev/lab/index.md	41	export E2E_API_KEY=your_api_key	CODE
HIGH	doc/tutorials/dev/lab/index.md	50	apiKey: your_api_key	CODE
HIGH	Dockerfiles/manifests/agent.yaml	30	- {name: DD_API_KEY, value: <YOUR_API_KEY>}	CODE
HIGH	Dockerfiles/manifests/agent.yaml	30	- {name: DD_API_KEY, value: <YOUR_API_KEY>}	CODE
HIGH	Dockerfiles/manifests/agent-kubelet-only.yaml	23	value: <YOUR_API_KEY>	CODE
HIGH	Dockerfiles/manifests/agent-kubelet-only.yaml	23	value: <YOUR_API_KEY>	CODE

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	tasks/cluster_agent_helpers.py	clean up and refresh cluster agent's assets and config files	STRING
HIGH	tasks/cluster_agent_cloudfoundry.py	clean up and refresh cluster agent's assets and config files	STRING
HIGH	tasks/cluster_agent.py	clean up and refresh cluster agent's assets and config files	STRING
HIGH	tasks/e2e_framework/azure/common.py	returns the deploy job name within the datadog agent repo that creates images used in create-vm	STRING
HIGH	tasks/e2e_framework/gcp/common.py	returns the deploy job name within the datadog agent repo that creates images used in create-vm	STRING
HIGH	tasks/e2e_framework/aws/common.py	returns the deploy job name within the datadog agent repo that creates images used in create-vm	STRING

Modern Structural Boilerplate14 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	…m/debug_scripts/usm_leak_detector/backends/__init__.py	11	__all__ = [	CODE
LOW	tasks/k8s_versions.py	215	def set_kubernetes_image(self, job_name: str, kubernetes_image: KindKubernetesImage) -> None:	CODE
LOW	tasks/k8s_versions.py	399	def _set_github_output(name: str, value: str) -> None:	CODE
LOW	tasks/kind_node_image.py	87	def _set_github_output(name: str, value: str) -> None:	CODE
LOW	tasks/e2e_framework/aws/integrations/_lab_tasks.py	29	__all__ = ["build_collection", "build_kube_collection"]	CODE
LOW	tasks/debugging/gitlab_artifacts.py	35	def _set_text_property(self, attr: str, value: str) -> None:	CODE
LOW	tasks/libs/ciproviders/github_api.py	33	__all__ = ["GithubAPI"]	CODE
LOW	tasks/libs/ciproviders/github_api.py	373	def update_review_complexity_labels(self, pr_id: int, new_label: str) -> None:	STRING
LOW	tasks/libs/linter/gitlab_exceptions.py	47	def set_linter_name(self, linter_name: str) -> None:	CODE
LOW	tasks/libs/linter/gitlab_exceptions.py	163	def set_linter_name(self, linter_name: str) -> None:	CODE
LOW	tasks/libs/testing/utof/__init__.py	17	__all__ = [	CODE
LOW	tasks/libs/testing/utof/go/parser/__init__.py	19	__all__ = [	CODE
LOW	tasks/libs/testing/utof/go/e2e/__init__.py	5	__all__ = [	CODE
LOW	…2e/tests/discovery/testdata/provision/python/server.py	7	logger = logging.getLogger(__name__)	CODE

Example Usage Blocks8 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	packaging/aix/build.sh	4	# Usage:	COMMENT
LOW	packaging/aix/clean.sh	18	# Usage:	COMMENT
LOW	.gitlab/.pre/common/shared.yml	29	# Usage:	COMMENT
LOW	…amework/components/activedirectory/active_directory.go	52	// Example usage:	COMMENT
LOW	…k/components/datadog/agentparams/msi/install_params.go	30	// Example usage:	COMMENT
LOW	test/e2e-framework/components/iis/component.go	46	// Example usage:	COMMENT
LOW	…explain-lading-config/scripts/resolve-lading-config.sh	7	# Usage:	COMMENT
LOW	comp/core/flare/builder/builder.go	47	// Usage example:	COMMENT

Slop Phrases5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	tasks/protobuf.py	33	print("Generation complete and new files were updated, don't forget to commit and push")	CODE
LOW	…etection/observer/impl/log_tagged_pattern_clusterer.go	22	// Warning: Don't forget to update functions parsing tags when adding new fields	COMMENT
LOW	pkg/security/resolvers/sbom/resolver.go	345	// don't forget to set the refresher to nil otherwise it generates a memleak	COMMENT
MEDIUM	pkg/template/text/doc.go	463	constant. Here is a simple example:	CODE
MEDIUM	pkg/compliance/dbconfig/loader_test.go	1751	# initial_token allows you to specify tokens manually. While you can use # it with	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	test/new-e2e/tests/ha-agent/haagent_test.go	79	// TODO: Add test for Agent behaviour when receiving RC HA_AGENT messages	COMMENT
LOW	…orkdevice/profile/profiledefinition/validation_test.go	950	// TODO: Add test for ValidateEnrichMetricTags	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tasks/unit_tests/e2e_stacks_tests.py	82	def run_task(self, job_status, pipeline_jobs):	CODE
LOW	tasks/unit_tests/e2e_internet_access_tests.py	49	def test_function(self):	CODE

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	internal/anomalydetection/testbench/ui/README.md	39	├── bench.go # Scenario loading and analysis orchestration	CODE

DataDog/datadog-agent

Open-Source Code Quality, Security and Technical Debt Review