Main repository for Datadog Agent
This report presents the forensic synthetic code analysis of DataDog/datadog-agent, a Go project with 3,673 GitHub stars. SynthScan v2.0 examined 3,298,625 lines of code across 20052 source files, recording 7441 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 2.8 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 7441 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .copyright-overrides.yml | 1 | # this file contains overrides for the automatic determination of copyright | COMMENT |
| LOW | .gitlab-ci.yml | 221 | # the agent is build with a special flag that allow computing code coverage of the binary when it is running. | COMMENT |
| LOW | .gitlab-ci.yml | 421 | COMMENT | |
| LOW | flakes.yaml | 1 | # * Here is the file format: | COMMENT |
| LOW | omnibus/config/software/preparation.rb | 1 | # | COMMENT |
| LOW | omnibus/config/software/datadog-agent-finalize.rb | 161 | COMMENT | |
| LOW | omnibus/config/software/datadog-agent.rb | 101 | if osx_target? | COMMENT |
| LOW | omnibus/config/software/systemd.rb | 1 | # | COMMENT |
| LOW | omnibus/config/software/datadog-agent-dependencies.rb | 21 | # Delete empty folders that can still be present when building | COMMENT |
| LOW | packaging/aix/sitecustomize.py | 1 | # AIX: best-effort preload of libc++abi.a with RTLD_GLOBAL. | COMMENT |
| LOW | packaging/aix/build.sh | 1 | #!/bin/sh | COMMENT |
| LOW | packaging/aix/package.sh | 61 | # gen.template.in contains two placeholder tokens: | COMMENT |
| LOW | packaging/aix/package.sh | 101 | } > "$STAGING/gen.template" | COMMENT |
| LOW | packaging/aix/clean.sh | 1 | #!/bin/sh | COMMENT |
| LOW | packaging/aix/agent-wrapper.sh | 1 | #!/bin/sh | COMMENT |
| LOW | packaging/aix/stages/07-checks-base.sh | 61 | # ─── Step 1: Install datadog-checks-base ────────────────────────────────────── | COMMENT |
| LOW | packaging/aix/stages/03-rtloader.sh | 61 | # -DPython3_INCLUDE_DIR : staging path (where headers are during the build) | COMMENT |
| LOW | packaging/aix/stages/03-rtloader.sh | 121 | # SystemError: initialization of _datetime did not return an extension module | COMMENT |
| LOW | packaging/aix/stages/03-rtloader.sh | 141 | eval "$LINK_CMD_FIXED" | COMMENT |
| LOW | packaging/aix/stages/03-rtloader.sh | 161 | # The LIBPATH baked into the rtloader .so files (via CMAKE_INSTALL_RPATH) already | COMMENT |
| LOW | packaging/aix/stages/10-assemble.sh | 61 | COMMENT | |
| LOW | packaging/aix/stages/10-assemble.sh | 81 | mkdir -p "$STAGING_CONFD" | COMMENT |
| LOW | packaging/aix/stages/10-assemble.sh | 181 | # | COMMENT |
| LOW | packaging/aix/stages/09-strip-bytecode.sh | 41 | log "Stripping debug info from .so files under $EMBEDDED_DESTDIR/lib" | COMMENT |
| LOW | packaging/aix/stages/09-strip-bytecode.sh | 61 | # extensions such as ibm_db. Linux/macOS omnibus packages also ship these | COMMENT |
| LOW | packaging/aix/stages/05-python-extensions.sh | 121 | # | COMMENT |
| LOW | packaging/aix/stages/05-python-extensions.sh | 181 | # ensure it links against our bundled libxml2 and libxslt from Stage 1. | COMMENT |
| LOW | packaging/aix/stages/05-python-extensions.sh | 201 | # flags like -fPIC, -ffunction-sections, -maix64 | COMMENT |
| LOW | packaging/aix/stages/06-pydantic.sh | 101 | # | COMMENT |
| LOW | packaging/aix/stages/06-pydantic.sh | 121 | log " CARGO_HOME=$CARGO_HOME" | COMMENT |
| LOW | packaging/aix/stages/08-integrations.sh | 81 | # Install each check from the pinned integrations-core checkout. | COMMENT |
| LOW | packaging/aix/stages/04-agent.sh | 61 | # and link against the .so files we built in Stage 03. | COMMENT |
| LOW | packaging/aix/stages/02-python.sh | 101 | # | COMMENT |
| LOW | packaging/aix/stages/02-python.sh | 141 | # executable. When Python uses __thread in libpython${PYTHON_MAJ_MIN}.so (a startup-linked | COMMENT |
| LOW | packaging/aix/stages/02-python.sh | 161 | # XCOFF "local-exec" TLS model, which AIX's loader rejects in shared libs. | COMMENT |
| LOW | packaging/aix/stages/02-python.sh | 321 | fi | COMMENT |
| LOW | packaging/aix/stages/02-python.sh | 341 | # The toolbox libintl.so.8 has a hardcoded path to /opt/freeware/lib/libiconv.a | COMMENT |
| LOW | packaging/aix/stages/01-native-libs.sh | 101 | touch "$BUILD_DIR/.done/01-lib-$1-$2" | COMMENT |
| LOW | packaging/aix/stages/01-native-libs.sh | 501 | # pkg-config | COMMENT |
| LOW | packaging/aix/lib/env.sh | 1 | # shellcheck shell=sh | COMMENT |
| LOW | packaging/aix/lib/env.sh | 101 | # Create private gcc/g++ symlinks pointing to gcc-8 in $BUILD_DIR/bin and | COMMENT |
| LOW | cmd/dogstatsd/windows_resources/version.h | 1 | COMMENT | |
| LOW | cmd/process-agent/windows_resources/version.h | 1 | COMMENT | |
| LOW | cmd/iot-agent/docs.go | 1 | // Unless explicitly stated otherwise all files in this repository are licensed | COMMENT |
| LOW | cmd/security-agent/windows_resources/version.h | 1 | COMMENT | |
| LOW | cmd/serverless-init/docs.go | 1 | // Unless explicitly stated otherwise all files in this repository are licensed | COMMENT |
| LOW | cmd/serverless-init/main.go | 81 | // Azure Container Apps: 30s — https://learn.microsoft.com/en-us/azure/container-apps/application-lifecycle-management# | COMMENT |
| LOW | cmd/serverless-init/main.go | 101 | // buckets, into the serializer and through the forwarder. Set via the | COMMENT |
| LOW | cmd/serverless-init/main.go | 121 | // drain the worker batchers and the aggregator sample channel internally | COMMENT |
| LOW | cmd/serverless-init/main.go | 141 | // than SourceEnvVar/SourceFile). | COMMENT |
| LOW | cmd/serverless-init/main.go | 161 | // metrics-pipeline bounds are in one place and readable alongside the | COMMENT |
| LOW | cmd/serverless-init/main.go | 181 | COMMENT | |
| LOW | cmd/serverless-init/main.go | 201 | // workload that ends mid-bucket would drop its last bucket), then | COMMENT |
| LOW | cmd/serverless-init/main.go | 241 | COMMENT | |
| LOW | cmd/serverless-init/main.go | 261 | COMMENT | |
| LOW | cmd/serverless-init/main.go | 281 | // point), the dogstatsd server has no useful work — every sample it | COMMENT |
| LOW | cmd/serverless-init/main.go | 381 | // 2. cloudService.Shutdown submits the task.ended metric; the enhanced | COMMENT |
| LOW | cmd/serverless-init/main.go | 401 | // (set in preloadEarly) — first drains each time-sampler worker's | COMMENT |
| LOW | …ommands/usm/debug_scripts/usm_leak_detector/network.py | 61 | # IPv6 in /proc/net/tcp6: four 32-bit words, each printed in big-endian hex | COMMENT |
| LOW | cmd/system-probe/modules/gpu.go | 261 | COMMENT | |
| 4429 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnibus/python-scripts/pre_tests.py | 40 | def test_pre_with_empty_files(self): | CODE |
| LOW | omnibus/python-scripts/pre_tests.py | 72 | def test_pre_falls_back_to_legacy_tmp(self): | CODE |
| LOW | omnibus/python-scripts/pre_tests.py | 102 | def test_pre_falls_back_to_install_directory(self): | CODE |
| LOW | omnibus/python-scripts/pre_tests.py | 129 | def test_pre_no_baseline_first_install_returns_zero(self): | CODE |
| LOW | omnibus/python-scripts/pre_tests.py | 154 | def test_pre_no_baseline_on_upgrade_returns_error(self): | CODE |
| LOW | omnibus/python-scripts/pre_tests.py | 188 | def test_pre_with_populated_pre_file(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 21 | def test_create_python_installed_packages_file(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 43 | def test_create_diff_installed_packages_file(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 80 | def test_run_command_success_returns_zero_rc(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 87 | def test_run_command_failure_returns_nonzero_rc(self): | CODE |
| LOW⚡ | omnibus/python-scripts/packages_tests.py | 101 | def test_install_datadog_package_succeeds_on_first_attempt(self): | CODE |
| LOW⚡ | omnibus/python-scripts/packages_tests.py | 107 | def test_install_datadog_package_succeeds_on_retry(self): | CODE |
| LOW⚡ | omnibus/python-scripts/packages_tests.py | 114 | def test_install_datadog_package_raises_after_two_failures(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 128 | def test_install_diff_packages_file_collects_failures(self): | CODE |
| LOW | omnibus/python-scripts/packages_tests.py | 159 | def test_install_diff_packages_file_succeeds_silently(self): | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 99 | def pre_python_installed_packages_file(directory): | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 105 | def post_python_installed_packages_file(directory): | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 111 | def diff_python_installed_packages_file(directory): | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 117 | def requirements_agent_release_file(directory): | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 123 | def check_file_owner_system_windows(filename): | CODE |
| LOW | omnibus/python-scripts/packages.py | 146 | def check_all_files_owner_system_windows(directory): | CODE |
| LOW | omnibus/python-scripts/packages.py | 167 | def create_python_installed_packages_file(filename): | CODE |
| LOW | omnibus/python-scripts/packages.py | 183 | def create_diff_installed_packages_file(directory, old_file, new_file): | CODE |
| LOW | omnibus/python-scripts/packages.py | 242 | def install_dependency_package(pip, package): | CODE |
| LOW | omnibus/python-scripts/packages.py | 264 | def install_diff_packages_file(install_directory, filename, exclude_filename): | CODE |
| LOW | omnibus/python-scripts/post_tests.py | 35 | def test_post_with_empty_files(self): | CODE |
| LOW | omnibus/python-scripts/post_tests.py | 77 | def test_datadog_integration_vs_python_package_installation(self, mock_instalL_dependency, mock_install_datadog): | CODE |
| LOW | omnibus/python-scripts/post_tests.py | 115 | def test_excluded_packages_are_skipped(self, mock_load_requirements, mock_instalL_dependency, mock_install_datadog): | CODE |
| LOW | omnibus/python-scripts/post_tests.py | 162 | def test_post_returns_one_when_restore_fails(self): | CODE |
| LOW | omnibus/lib/project_extension.rb | 72 | def normalize_path_tree_permissions(root) | CODE |
| LOW | omnibus/lib/project_extension.rb | 94 | def normalize_path_permissions(path) | CODE |
| LOW | omnibus/lib/project_extension.rb | 308 | def shared_external_directory_entry(path, filepath) | CODE |
| LOW | omnibus/lib/fips.rb | 39 | def fips_check_binary_for_expected_symbol(path) | CODE |
| LOW | …mands/usm/debug_scripts/usm_leak_detector/validator.py | 34 | def _validate_across_all_namespaces(conn: ConnTuple, connection_index: Dict[int, ConnectionIndex]) -> Tuple[bool, str]: | CODE |
| LOW | tasks/k8s_versions.py | 280 | def _extract_version_from_latest_job(content: str) -> dict[str, str] | None: | CODE |
| LOW | tasks/k8s_versions.py | 497 | def update_kind_versions_file(_, versions_file=VERSIONS_FILE): | CODE |
| LOW | tasks/host_profiler.py | 28 | def _get_profiler_agent_version(ctx): | CODE |
| LOW | tasks/host_profiler.py | 137 | def _get_agent_module_version(ctx: Context, module: str) -> str: | CODE |
| LOW | tasks/install_tasks.py | 115 | def install_rust_license_tool(ctx): | CODE |
| LOW | tasks/quality_gates.py | 55 | def _print_quality_gates_report(verdicts: list[GateVerdict]): | CODE |
| LOW | tasks/release.py | 761 | def get_active_release_branch(ctx, release_branch): | CODE |
| LOW | tasks/macos.py | 76 | def list_runner_active_versions(ctx, lang): | CODE |
| LOW | tasks/files_inventory.py | 117 | def _inventory_changes_to_comment(added, removed, changed): | CODE |
| LOW | tasks/selinux.py | 18 | def compile_system_probe_policy_file( | CODE |
| LOW | tasks/build_tags.py | 155 | def build_tags_codegen_payload() -> dict[str, object]: | CODE |
| LOW | tasks/build_tags.py | 194 | def compute_build_tags_for_flavor( | CODE |
| LOW | tasks/build_tags.py | 351 | def compute_config_build_tags( | CODE |
| LOW | tasks/kmt.py | 189 | def gen_config_from_ci_pipeline( | CODE |
| LOW | tasks/kmt.py | 1060 | def compute_package_dependencies(ctx: Context, packages: list[str], build_tags: list[str]) -> dict[str, set[str]]: | CODE |
| LOW | tasks/renovate.py | 63 | def _parse_top_level_namespace(text: str) -> dict: | CODE |
| LOW | tasks/fuzz_infra.py | 19 | def get_slack_channel_for_directory(directory_path: str) -> str: | CODE |
| LOW | tasks/anomalydetection.py | 1203 | def _validate_ddeval_scenario_filter(eval_backend: str, scenarios: str) -> bool: | CODE |
| LOW | tasks/anomalydetection.py | 1222 | def _ddeval_experiment_config( | CODE |
| LOW | tasks/anomalydetection.py | 1387 | def _parse_ddeval_workflow_result(stdout: str) -> dict[str, object]: | CODE |
| LOW | tasks/anomalydetection.py | 1402 | def _parse_ddeval_workflow_id(stdout: str) -> str | None: | CODE |
| LOW | tasks/anomalydetection.py | 1411 | def _parse_ddeval_workflow_run_id(stdout: str) -> str | None: | CODE |
| LOW | tasks/anomalydetection.py | 2070 | def eval_component_workspace_report( | CODE |
| LOW | tasks/anomalydetection.py | 2134 | def eval_pipeline_workspace_report( | CODE |
| LOW | tasks/collector.py | 411 | def update_versions_in_ocb_yaml(yaml_file_path, modules_version): | CODE |
| LOW | tasks/collector.py | 416 | def update_component_versions(components): | CODE |
| 1098 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | omnibus/config/projects/agent.rb | 136 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent.rb | 138 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent.rb | 218 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent.rb | 220 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent-binaries.rb | 43 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent-binaries.rb | 45 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent-binaries.rb | 70 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/agent-binaries.rb | 72 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/installer.rb | 101 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/installer.rb | 103 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/installer.rb | 153 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/installer.rb | 155 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 61 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 63 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 110 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 112 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 153 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/iot-agent.rb | 155 | # ------------------------------------ | COMMENT |
| MEDIUM⚡ | omnibus/config/projects/dogstatsd.rb | 80 | # ------------------------------------ | COMMENT |
| MEDIUM⚡ | omnibus/config/projects/dogstatsd.rb | 82 | # ------------------------------------ | COMMENT |
| MEDIUM⚡ | omnibus/config/projects/dogstatsd.rb | 89 | # ------------------------------------ | COMMENT |
| MEDIUM⚡ | omnibus/config/projects/dogstatsd.rb | 91 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/ddot.rb | 81 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/ddot.rb | 83 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/ddot.rb | 108 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/config/projects/ddot.rb | 110 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/lib/ostools.rb | 1 | # ------------------------------------ | COMMENT |
| MEDIUM | omnibus/lib/ostools.rb | 3 | # ------------------------------------ | COMMENT |
| MEDIUM | packaging/aix/build.sh | 33 | # ── Source shared environment ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 48 | # ── Bootstrap embedded symlink ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 61 | # ── Check required tools ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 110 | # ── Source shared environment ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 122 | # ── Bootstrap build directories ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 128 | # ── Stage list ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 144 | # ── Helper: run one stage script ────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/build.sh | 165 | # ── Main ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/package.sh | 37 | # ─── Step 1: Pre-flight — verify staging tree is assembled ──────────────────── | COMMENT |
| MEDIUM | packaging/aix/package.sh | 104 | # ─── Step 3: Run mkinstallp to generate the BFF ─────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/package.sh | 123 | # ─── Step 4: Copy BFF to final artifact name ────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packaging/aix/clean.sh | 55 | # ── Remove stage sentinels ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packaging/aix/clean.sh | 64 | # ── Remove staging tree ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packaging/aix/clean.sh | 74 | # ── Remove build logs ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packaging/aix/clean.sh | 80 | # ── Remove temporary packaging files ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packaging/aix/clean.sh | 83 | # ── Wheel cache ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/07-checks-base.sh | 61 | # ─── Step 1: Install datadog-checks-base ────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/07-checks-base.sh | 74 | # ─── Step 1b: Install datadog-checks-base [deps] extra packages ─────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/07-checks-base.sh | 112 | # ─── Step 2: Freeze installed state to constraints file ─────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/00-checkout.sh | 37 | # ─── Step 1: Validate agent source tree ─────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/00-checkout.sh | 62 | # ─── Step 2: Read INTEGRATIONS_CORE_VERSION from release.json ───────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/00-checkout.sh | 81 | # ─── Step 3: Clone or fetch integrations-core ───────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 47 | # ─── Step 1: Clean and create rtloader build directory ──────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 54 | # ─── Step 2: CMake configure ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 106 | # ─── Step 3: Build ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 112 | # ─── Step 3b: Relink libdatadog-agent-three.so to use libpython${PYTHON_MAJ_MIN}.a ───────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 151 | # ─── Step 3c: Bundle GCC 8 runtime libraries ────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 183 | # ─── Step 4: Copy outputs to staging ────────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 196 | # ─── Step 4b: Create AIX .a archive wrappers ────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 217 | # ─── Step 4c: Copy .a archive wrappers to staging ───────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/03-rtloader.sh | 230 | # ─── Step 5: Verify XCOFF64 magic bytes ─────────────────────────────────────── | COMMENT |
| MEDIUM | packaging/aix/stages/10-assemble.sh | 37 | # ─── Step 1: Pre-flight — verify agent binary exists ────────────────────────── | COMMENT |
| 315 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packaging/aix/stages/03-rtloader.sh | 134 | # Step 1: Re-run the cmake ExportImportList (export symbols file generation) | COMMENT |
| LOW⚡ | packaging/aix/stages/03-rtloader.sh | 138 | # Step 2: Re-run the link command, substituting .so with .a for libpython${PYTHON_MAJ_MIN} | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 83 | # Step 1: Get eBPF backend | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 90 | # Step 2: List eBPF maps | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 101 | # Step 3: Check ConnTuple-keyed maps (unless --pid-only) | COMMENT |
| LOW | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 134 | # Step 4: Check PID-keyed maps (unless --conn-tuple-only) | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 156 | # Step 5: Print reports (PID-keyed first, then ConnTuple-keyed) | COMMENT |
| LOW | tasks/quality_gates.py | 245 | # Step 1: Fetch PR metrics from Datadog | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 264 | # Step 2: Identify gates with size increase (not just failing gates) | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 281 | # Step 3: Fetch main branch headroom (for gates with size increase) | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 290 | # Step 4: Load current config | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 294 | # Step 5: Calculate and apply new thresholds for gates with size increase | COMMENT |
| LOW | tasks/quality_gates.py | 324 | # Step 6: Write updated config | COMMENT |
| LOW⚡ | tasks/release.py | 336 | # Step 2: Update internal module dependencies | COMMENT |
| LOW⚡ | tasks/release.py | 340 | # Step 3: Branch out, commit change, push branch | COMMENT |
| LOW⚡ | tasks/release.py | 476 | # Step 1: Update release entries | COMMENT |
| LOW⚡ | tasks/release.py | 482 | # Step 2: Update internal module dependencies | COMMENT |
| LOW⚡ | tasks/release.py | 487 | # Step 3: Run tidy task | COMMENT |
| LOW⚡ | tasks/release.py | 491 | # Step 4: branch out, push branch, then add, and create signed commit with Github API | COMMENT |
| LOW⚡ | tasks/release.py | 798 | # Step 1: Lead Time for Changes data | COMMENT |
| LOW⚡ | tasks/release.py | 804 | # Step 2: Agent stability data | COMMENT |
| LOW⚡ | tasks/release.py | 814 | # Step 3: Code changes | COMMENT |
| LOW | tasks/release.py | 297 | # Step 1: Preparation | COMMENT |
| LOW | tasks/release.py | 369 | # Step 4: Add release changelog preludes | COMMENT |
| LOW | tasks/release.py | 386 | # Step 5: Push branch and create PR | COMMENT |
| LOW | tasks/release.py | 454 | # Step 0: checks | COMMENT |
| LOW | tasks/release.py | 537 | # Step 5 - Send a slack message | COMMENT |
| LOW | tasks/release.py | 603 | # Step 0: checks | COMMENT |
| LOW | tasks/release.py | 626 | # Step 1: Tag versions | COMMENT |
| LOW | tasks/release.py | 648 | # Step 2: Run the RC pipeline | COMMENT |
| LOW⚡ | tasks/notes.py | 49 | # Step 1 - generate the changelogs | COMMENT |
| LOW | tasks/notes.py | 73 | # Step 2 - commit changes | COMMENT |
| LOW | tasks/notes.py | 101 | # Step 3 - Push and create PR | COMMENT |
| LOW | tasks/schema/generate.py | 153 | # Step 1: Generate base schema using the agent binary. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 67 | // Step 1: fetch current VM state. Returns '{}' when the VM does not exist. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 80 | // Step 2: parse the state JSON in Go and decide what shell command to run. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 102 | // Step 3: execute the action (launch / start / no-op). | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 115 | // Step 4: fetch the final VM info JSON. This resource also owns the delete. | COMMENT |
| LOW | …/new-e2e/tests/usm/windows_remote_service_tags_test.go | 150 | // Step 1: send 1000 connections to site A (port 8081), hold 20s, then verify. | COMMENT |
| LOW | …/new-e2e/tests/usm/windows_remote_service_tags_test.go | 167 | // Step 2: send 1000 connections to site B (port 8082). | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 115 | // Step 1: create statefulset without spot label — all pods go on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 125 | // Step 2: opt in to spot scheduling. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 128 | // Step 3: expect rebalancing to converge to 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 223 | // Step 1: opt in — wait for 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 233 | // Step 2: remove spot label to opt out, then restart to replace existing pods. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 237 | // Step 3: all pods should land on on-demand without the spot-assigned label. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 129 | // Step 1: create deployment without spot label — all pods go on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 139 | // Step 2: opt in to spot scheduling. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 142 | // Step 3: expect rebalancing to converge to 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 236 | // Step 1: opt in — wait for 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 246 | // Step 2: remove spot label to opt out, then restart to replace existing pods. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 250 | // Step 3: all pods should land on on-demand without the spot-assigned label. | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 365 | // Step 1: Clean up any existing dd-agent user/group | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 373 | // Step 2: Set up NSS extrausers | COMMENT |
| LOW | test/new-e2e/tests/installer/unix/package_agent_test.go | 456 | // Step 3: Verify that getent can find the user/group (confirming NSS is working) | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 471 | // Step 4: Install the agent | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 475 | // Step 5: Verify no new entries were added to /etc/passwd or /etc/group | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 482 | // Step 6: Verify the agent is installed and running | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 131 | // Step 1: install the agent via the standard install script | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 136 | // Step 2: remove the agent package while keeping config files. | COMMENT |
| 172 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packaging/aix/stages/03-rtloader.sh | 134 | # Step 1: Re-run the cmake ExportImportList (export symbols file generation) | COMMENT |
| LOW⚡ | packaging/aix/stages/03-rtloader.sh | 138 | # Step 2: Re-run the link command, substituting .so with .a for libpython${PYTHON_MAJ_MIN} | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 83 | # Step 1: Get eBPF backend | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 90 | # Step 2: List eBPF maps | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 101 | # Step 3: Check ConnTuple-keyed maps (unless --pid-only) | COMMENT |
| LOW | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 134 | # Step 4: Check PID-keyed maps (unless --conn-tuple-only) | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 156 | # Step 5: Print reports (PID-keyed first, then ConnTuple-keyed) | COMMENT |
| LOW | tasks/quality_gates.py | 245 | # Step 1: Fetch PR metrics from Datadog | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 264 | # Step 2: Identify gates with size increase (not just failing gates) | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 281 | # Step 3: Fetch main branch headroom (for gates with size increase) | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 290 | # Step 4: Load current config | COMMENT |
| LOW⚡ | tasks/quality_gates.py | 294 | # Step 5: Calculate and apply new thresholds for gates with size increase | COMMENT |
| LOW | tasks/quality_gates.py | 324 | # Step 6: Write updated config | COMMENT |
| LOW⚡ | tasks/release.py | 336 | # Step 2: Update internal module dependencies | COMMENT |
| LOW⚡ | tasks/release.py | 340 | # Step 3: Branch out, commit change, push branch | COMMENT |
| LOW⚡ | tasks/release.py | 476 | # Step 1: Update release entries | COMMENT |
| LOW⚡ | tasks/release.py | 482 | # Step 2: Update internal module dependencies | COMMENT |
| LOW⚡ | tasks/release.py | 487 | # Step 3: Run tidy task | COMMENT |
| LOW⚡ | tasks/release.py | 491 | # Step 4: branch out, push branch, then add, and create signed commit with Github API | COMMENT |
| LOW⚡ | tasks/release.py | 798 | # Step 1: Lead Time for Changes data | COMMENT |
| LOW⚡ | tasks/release.py | 804 | # Step 2: Agent stability data | COMMENT |
| LOW⚡ | tasks/release.py | 814 | # Step 3: Code changes | COMMENT |
| LOW | tasks/release.py | 297 | # Step 1: Preparation | COMMENT |
| LOW | tasks/release.py | 369 | # Step 4: Add release changelog preludes | COMMENT |
| LOW | tasks/release.py | 386 | # Step 5: Push branch and create PR | COMMENT |
| LOW | tasks/release.py | 454 | # Step 0: checks | COMMENT |
| LOW | tasks/release.py | 603 | # Step 0: checks | COMMENT |
| LOW | tasks/release.py | 626 | # Step 1: Tag versions | COMMENT |
| LOW | tasks/release.py | 648 | # Step 2: Run the RC pipeline | COMMENT |
| LOW | tasks/schema/generate.py | 153 | # Step 1: Generate base schema using the agent binary. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 67 | // Step 1: fetch current VM state. Returns '{}' when the VM does not exist. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 80 | // Step 2: parse the state JSON in Go and decide what shell command to run. | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 102 | // Step 3: execute the action (launch / start / no-op). | COMMENT |
| LOW | test/e2e-framework/resources/local/vm/multipass/vm.go | 115 | // Step 4: fetch the final VM info JSON. This resource also owns the delete. | COMMENT |
| LOW | test/e2e-framework/components/datadog/agent/package.go | 110 | // If we're on Windows, we need to check if the pipeline ID is in the package name, this is a workaround to avoid an | COMMENT |
| LOW | …/new-e2e/tests/usm/windows_remote_service_tags_test.go | 150 | // Step 1: send 1000 connections to site A (port 8081), hold 20s, then verify. | COMMENT |
| LOW | …/new-e2e/tests/usm/windows_remote_service_tags_test.go | 167 | // Step 2: send 1000 connections to site B (port 8082). | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 115 | // Step 1: create statefulset without spot label — all pods go on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 125 | // Step 2: opt in to spot scheduling. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 128 | // Step 3: expect rebalancing to converge to 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 223 | // Step 1: opt in — wait for 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 233 | // Step 2: remove spot label to opt out, then restart to replace existing pods. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/statefulset_test.go | 237 | // Step 3: all pods should land on on-demand without the spot-assigned label. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 129 | // Step 1: create deployment without spot label — all pods go on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 139 | // Step 2: opt in to spot scheduling. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 142 | // Step 3: expect rebalancing to converge to 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 236 | // Step 1: opt in — wait for 6 spot / 4 on-demand. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 246 | // Step 2: remove spot label to opt out, then restart to replace existing pods. | COMMENT |
| LOW⚡ | test/new-e2e/tests/autoscaling/spot/deployment_test.go | 250 | // Step 3: all pods should land on on-demand without the spot-assigned label. | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 365 | // Step 1: Clean up any existing dd-agent user/group | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 373 | // Step 2: Set up NSS extrausers | COMMENT |
| LOW | test/new-e2e/tests/installer/unix/package_agent_test.go | 456 | // Step 3: Verify that getent can find the user/group (confirming NSS is working) | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 471 | // Step 4: Install the agent | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 475 | // Step 5: Verify no new entries were added to /etc/passwd or /etc/group | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_agent_test.go | 482 | // Step 6: Verify the agent is installed and running | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 131 | // Step 1: install the agent via the standard install script | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 136 | // Step 2: remove the agent package while keeping config files. | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 149 | // Step 3: move datadog.yaml out of the way so the reinstall has no yaml. | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 152 | // Step 4: reinstall via the package manager with DD_OTELCOLLECTOR_ENABLED=true. | COMMENT |
| LOW⚡ | test/new-e2e/tests/installer/unix/package_ddot_test.go | 171 | // Step 5: ddot must NOT have started — there is no datadog.yaml to enable it. | COMMENT |
| 76 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnibus/python-scripts/post.py | 43 | except Exception as e: | CODE |
| MEDIUM | omnibus/python-scripts/post.py | 44 | print(f"Error: {e}") | CODE |
| MEDIUM | omnibus/python-scripts/packages.py | 84 | print(f"Error: {e.stderr}") | CODE |
| LOW⚡ | omnibus/python-scripts/packages.py | 95 | except Exception as e: | CODE |
| MEDIUM⚡ | omnibus/python-scripts/packages.py | 96 | print(f"Error parsing specifier: {e}") | CODE |
| LOW | omnibus/python-scripts/pre.py | 75 | except Exception as e: | CODE |
| MEDIUM | omnibus/python-scripts/pre.py | 76 | print(f"Error: {e}") | CODE |
| LOW | packaging/aix/sitecustomize.py | 24 | except Exception: | CODE |
| MEDIUM⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 86 | print("Error: No eBPF backend available. Install bpftool or ensure system-probe is accessible.", | CODE |
| MEDIUM⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 94 | print("Error: Could not list eBPF maps.", file=sys.stderr) | CODE |
| LOW | …sm/debug_scripts/usm_leak_detector/subprocess_utils.py | 28 | except Exception: | CODE |
| LOW | …sm/debug_scripts/usm_leak_detector/subprocess_utils.py | 149 | except Exception: | CODE |
| LOW | …ripts/usm_leak_detector/backends/bpftool_downloader.py | 68 | except Exception as e: | CODE |
| LOW | …ripts/usm_leak_detector/backends/bpftool_downloader.py | 155 | except Exception as e: | CODE |
| LOW | cmd/ai_prompt_logger/scripts/test_host.py | 107 | except Exception as e: | CODE |
| LOW | tasks/k8s_versions.py | 131 | except Exception as e: | CODE |
| MEDIUM | tasks/k8s_versions.py | 406 | print("Error: At least one source must be enabled") | CODE |
| MEDIUM | tasks/k8s_versions.py | 419 | print("Error: Could not find any Kubernetes versions") | CODE |
| LOW | tasks/kind_node_image.py | 160 | except Exception as e: | CODE |
| MEDIUM | tasks/kind_node_image.py | 161 | print(f"Error building RC image {tag}: {e}") | CODE |
| LOW | tasks/quality_gates.py | 74 | except Exception: | CODE |
| LOW | tasks/virustotal.py | 73 | except Exception as e: | CODE |
| LOW | tasks/virustotal.py | 92 | except Exception as e: | CODE |
| LOW | tasks/virustotal.py | 118 | except Exception as e: | CODE |
| LOW | tasks/virustotal.py | 331 | except Exception as e: | CODE |
| LOW | tasks/kmt.py | 462 | except Exception as e: | CODE |
| LOW | tasks/kmt.py | 626 | except Exception as e: | CODE |
| LOW | tasks/kmt.py | 2029 | except Exception as e: | CODE |
| LOW | tasks/kmt.py | 1665 | except Exception: | STRING |
| LOW | tasks/renovate.py | 86 | except Exception: | CODE |
| LOW | tasks/renovate.py | 473 | except Exception: | CODE |
| LOW | tasks/systray.py | 94 | except Exception as e: | CODE |
| LOW | tasks/fuzz_infra.py | 52 | except Exception as e: | CODE |
| LOW | tasks/fuzz_infra.py | 94 | except Exception as e: | CODE |
| LOW | tasks/anomalydetection.py | 148 | except Exception as e: | CODE |
| LOW | tasks/anomalydetection.py | 269 | except Exception as e: | CODE |
| LOW | tasks/anomalydetection.py | 594 | except Exception as e: | CODE |
| LOW | tasks/anomalydetection.py | 856 | except Exception: | CODE |
| LOW | tasks/anomalydetection.py | 1012 | except Exception as e: | CODE |
| LOW | tasks/collector.py | 166 | except Exception as e: | CODE |
| LOW | tasks/collector.py | 177 | except Exception as e: | CODE |
| LOW | tasks/collector.py | 207 | except Exception as e: | CODE |
| LOW | tasks/collector.py | 238 | except Exception as e: | CODE |
| LOW | tasks/collector.py | 255 | except Exception as e: | CODE |
| MEDIUM | tasks/new_e2e_tests.py | 280 | print(f"Error: {failure_count} packages failed to build") | CODE |
| MEDIUM | tasks/new_e2e_tests.py | 346 | print(f"Error: {upload_failures} uploads failed") | CODE |
| LOW⚡ | tasks/new_e2e_tests.py | 1538 | except Exception as e: | CODE |
| LOW⚡ | tasks/new_e2e_tests.py | 1548 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 64 | except Exception: | CODE |
| LOW | tasks/new_e2e_tests.py | 152 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 241 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 335 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 613 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 1608 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 1720 | except Exception: | CODE |
| LOW | tasks/new_e2e_tests.py | 1758 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 1830 | except Exception as e: | CODE |
| LOW | tasks/new_e2e_tests.py | 1844 | except Exception as e: | CODE |
| LOW⚡ | tasks/notify.py | 198 | except Exception: | CODE |
| LOW⚡ | tasks/notify.py | 205 | except Exception: | CODE |
| 153 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .golangci.yml | 40 | # note that if it's just for a single file, you can just add `//nolint:depguard` before the import | COMMENT |
| LOW | omnibus/config/software/installer.rb | 70 | # When the diffs go away, we delete the package job and just use this one. | COMMENT |
| MEDIUM | cmd/system-probe/subcommands/usm/netstat_linux.go | 91 | // Read TCP connections using procnet package (provides robust parsing and PID/FD mapping) | COMMENT |
| MEDIUM | cmd/otel-agent/subcommands/run/command.go | 278 | // TODO: this would be much better if we could leverage traceconfig.Module | COMMENT |
| MEDIUM | cmd/otel-agent/subcommands/run/command.go | 345 | // this is the current workaround to leverage it. | COMMENT |
| MEDIUM | tasks/worktree.py | 74 | """Enters the worktree environment in order to invoke tasks in this context. | STRING |
| MEDIUM | tasks/omnibus.py | 312 | # Individual developers are still able to leverage the cache by providing | COMMENT |
| MEDIUM | tasks/debugging/dump.py | 152 | # launch windbg and delve | COMMENT |
| LOW | tasks/kernel_matrix_testing/infra.py | 22 | # warnings about changed host keys. We need the combination of both options, if we just set | COMMENT |
| MEDIUM | tasks/libs/common/utils.py | 357 | # if you want to be able to use the delve debugger. | COMMENT |
| MEDIUM | test/e2e-framework/testing/e2e/suite.go | 557 | // goroutine terminates, so it is robust to Goexit/panic during setup. The cleanupCalled | COMMENT |
| MEDIUM | …2e/tests/anomalydetection/anomalydetection_nix_test.go | 253 | batchSize = 20 // count=20 vs baseline count=1 → 20x step change; robust | CODE |
| MEDIUM | …w-e2e/tests/anomalydetection/scorer_helper_nix_test.go | 23 | // OnSeverityTransition fired — which is robust and consistent with the rest of | COMMENT |
| MEDIUM | …w-e2e/tests/anomalydetection/scorer_helper_nix_test.go | 64 | // seconds, making the test robust against SSH latency and dropped ticks. | COMMENT |
| MEDIUM | …branch/anomalydetection-testbench/ui/package-lock.json | 4056 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz", | CODE |
| MEDIUM | …nomalydetection/observer/impl/metrics_detector_rrcf.go | 62 | // NumTrees is the number of trees in the forest. More trees = more robust but slower. | COMMENT |
| MEDIUM | …malydetection/observer/impl/metrics_detector_scanmw.go | 42 | // changepoint detector that's robust to distribution shape. | COMMENT |
| MEDIUM | …malydetection/observer/impl/metrics_detector_scanmw.go | 283 | // Check robust deviation at best split. | COMMENT |
| MEDIUM | …ection/observer/impl/metrics_detector_holt_residual.go | 104 | // 16 entries gives a robust median. | COMMENT |
| MEDIUM | …ection/observer/impl/metrics_detector_holt_residual.go | 109 | // HoltResidualDetector fires when a Holt forecast residual exceeds a robust | COMMENT |
| MEDIUM | …ction/observer/impl/metrics_detector_tukey_biweight.go | 66 | // biweight robust to "one historical glitch followed by a real shift later". | COMMENT |
| MEDIUM | …ction/observer/impl/metrics_detector_tukey_biweight.go | 73 | // Default: 80, enough context for a robust local baseline without making | COMMENT |
| MEDIUM | …ction/observer/impl/metrics_detector_tukey_biweight.go | 350 | // "robust-to-historical-outlier" test case. | COMMENT |
| MEDIUM | …ction/observer/impl/metrics_detector_tukey_biweight.go | 358 | // (b) Initial robust location/scale: median + 1.4826·MAD. The MAD scaling | COMMENT |
| MEDIUM | comp/logs-library/pipeline/provider.go | 37 | // SenderConcurrency via config options should utilize the endpoint's BatchMaxConcurrentSend override instead. | COMMENT |
| MEDIUM | comp/core/agenttelemetry/impl/sender.go | 545 | // message/payload contains multiples metrics for a single index of tag set. Essentially | COMMENT |
| MEDIUM | …eta/collectors/internal/kubeapiserver/kubeapiserver.go | 162 | // to utilize namespace labels for target based configuration and to determine | COMMENT |
| MEDIUM | comp/core/profiler/impl/profiler.go | 217 | // to utilize this provider over time, which will require additional plumbing. For | COMMENT |
| MEDIUM | comp/core/flare/types/types.go | 38 | // Return 0 from this function to utilize the default timeout instead. | COMMENT |
| MEDIUM | comp/core/flare/types/types.go | 56 | // are strongly encouraged to utilize the NewProvider or NewProviderWithTimeout functions instead. | COMMENT |
| MEDIUM | comp/logs/streamlogs/impl/streamlogs.go | 153 | // to utilize this provider over time, which will require additional plumbing. | COMMENT |
| MEDIUM | …ission/mutate/autoinstrumentation/language_versions.go | 102 | // wishes to utilize the default version found in languageVersions. | COMMENT |
| MEDIUM | pkg/clusteragent/autoscaling/workload/external/tls.go | 46 | // Create a certificate manager that will reload the certificate periodically for seamless updates | COMMENT |
| MEDIUM | pkg/clusteragent/clusterchecks/ksm_sharding.go | 94 | // We use the same defaults for sharding to provide a seamless experience | COMMENT |
| MEDIUM | pkg/gpu/safenvml/lib.go | 368 | // found, to make it more convenient and robust, without users having to | COMMENT |
| MEDIUM | pkg/util/containerd/containerd_util.go | 52 | // ContainerdItf is the interface implementing a subset of methods that leverage the Containerd api. | COMMENT |
| MEDIUM | pkg/util/scrubber/yaml_scrubber_test.go | 1182 | // This is more robust than string comparison since YAML formatting can vary | COMMENT |
| MEDIUM | pkg/util/fxutil/test.go | 87 | // This function does *not* leverage fxtest.App because we want to be | COMMENT |
| MEDIUM | pkg/util/kernel/headers/download/extract/tarball.go | 94 | // In order to force CopyBuffer to actually utilize the given buffer, we have to ensure | COMMENT |
| MEDIUM | pkg/config/setup/common_settings.go | 446 | config.BindEnvAndSetDefault("ec2_use_dmi", true) // should the agent leverage DMI informati | CODE |
| MEDIUM | pkg/config/model/types.go | 255 | // The following helpers are legacy and should no longer be used. Instead leverage the one above | COMMENT |
| MEDIUM | pkg/security/ebpf/probes/all.go | 182 | // AllBPFForEachMapElemProgramFunctions returns the list of programs that leverage the bpf_for_each_map_elem helper | COMMENT |
| MEDIUM | pkg/network/go/goversion/version.go | 7 | // delve debugger | COMMENT |
| MEDIUM | pkg/network/go/goversion/version.go | 16 | // GoVersion is just a wrapper around go-delve's goversion.GoVersion that also | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 82 | // - https://github.com/go-delve/delve/pull/2704/files#diff-fb7b7a020e32bf8bf477c052ac2d2857e7e587478be6039aebc7135c6584 | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 83 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L86-L95 | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 84 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L374 | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 114 | // - https://github.com/go-delve/delve/pull/2704/files#diff-fb7b7a020e32bf8bf477c052ac2d2857e7e587478be6039aebc7135c6584 | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 115 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L86-L95 | COMMENT |
| MEDIUM⚡ | pkg/network/go/asmscan/scan.go | 116 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/breakpoints.go#L374 | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/compile_unit.go | 25 | // This struct is based on github.com/go-delve/delve/pkg/proc.*compileUnit: | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/compile_unit.go | 26 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L436 | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/compile_unit.go | 40 | // This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).findCompileUnit: | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/compile_unit.go | 41 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1115 | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/type_finder.go | 19 | // It wraps github.com/go-delve/delve/pkg/dwarf/godwarf | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/locexpr/exec.go | 45 | // This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).Location: | COMMENT |
| MEDIUM | pkg/network/go/dwarfutils/locexpr/exec.go | 46 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1062 | COMMENT |
| MEDIUM | pkg/network/go/bininspect/types.go | 143 | // - https://github.com/go-delve/delve/pull/2704#issuecomment-944374511 | COMMENT |
| MEDIUM⚡ | pkg/network/go/bininspect/newproc.go | 140 | // This implementation is based on github.com/go-delve/delve/pkg/proc.(*BinaryInfo).setGStructOffsetElf: | COMMENT |
| MEDIUM⚡ | pkg/network/go/bininspect/newproc.go | 141 | // - https://github.com/go-delve/delve/blob/75bbbbb60cecda0d65c63de7ae8cb8b8412d6fc3/pkg/proc/bininfo.go#L1413 | COMMENT |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnibus/python-scripts/post.py | 13 | CODE | |
| LOW | omnibus/python-scripts/packages.py | 183 | CODE | |
| LOW | omnibus/python-scripts/packages.py | 264 | CODE | |
| LOW | omnibus/python-scripts/packages.py | 305 | CODE | |
| LOW | omnibus/python-scripts/pre.py | 44 | CODE | |
| LOW | …ommands/usm/debug_scripts/usm_leak_detector/network.py | 89 | CODE | |
| LOW | …ommands/usm/debug_scripts/usm_leak_detector/network.py | 138 | CODE | |
| LOW | …sm/debug_scripts/usm_leak_detector/subprocess_utils.py | 32 | CODE | |
| LOW | …bug_scripts/usm_leak_detector/backends/system_probe.py | 117 | CODE | |
| LOW | …/debug_scripts/usm_leak_detector/backends/streaming.py | 15 | CODE | |
| LOW | …ripts/usm_leak_detector/backends/bpftool_downloader.py | 87 | CODE | |
| LOW | tasks/k8s_versions.py | 136 | CODE | |
| LOW | tasks/install_tasks.py | 52 | CODE | |
| LOW | tasks/quality_gates.py | 79 | CODE | |
| LOW | tasks/pre_commit.py | 26 | CODE | |
| LOW | tasks/pre_commit.py | 48 | CODE | |
| LOW | tasks/pre_commit.py | 30 | CODE | |
| LOW | tasks/release.py | 101 | CODE | |
| LOW | tasks/release.py | 860 | CODE | |
| LOW | tasks/release.py | 900 | CODE | |
| LOW | tasks/macos.py | 108 | CODE | |
| LOW | tasks/agent_ci_api.py | 38 | CODE | |
| LOW | tasks/kmt.py | 189 | CODE | |
| LOW | tasks/kmt.py | 630 | CODE | |
| LOW | tasks/kmt.py | 1091 | CODE | |
| LOW | tasks/kmt.py | 1256 | CODE | |
| LOW | tasks/kmt.py | 1572 | CODE | |
| LOW | tasks/kmt.py | 1648 | CODE | |
| LOW | tasks/kmt.py | 1739 | CODE | |
| LOW | tasks/kmt.py | 1886 | CODE | |
| LOW | tasks/kmt.py | 2146 | CODE | |
| LOW | tasks/kmt.py | 2238 | CODE | |
| LOW | tasks/kmt.py | 2461 | CODE | |
| LOW | tasks/owners.py | 42 | CODE | |
| LOW | tasks/winbuild.py | 67 | CODE | |
| LOW | tasks/renovate.py | 168 | CODE | |
| LOW | tasks/renovate.py | 482 | CODE | |
| LOW | tasks/renovate.py | 524 | CODE | |
| LOW | tasks/test_core.py | 105 | CODE | |
| LOW | tasks/test_core.py | 72 | CODE | |
| LOW | tasks/fuzz_infra.py | 151 | CODE | |
| LOW | tasks/anomalydetection.py | 1765 | CODE | |
| LOW | tasks/collector.py | 80 | CODE | |
| LOW | tasks/collector.py | 125 | CODE | |
| LOW | tasks/collector.py | 161 | CODE | |
| LOW | tasks/collector.py | 185 | CODE | |
| LOW | tasks/collector.py | 289 | CODE | |
| LOW | tasks/collector.py | 372 | CODE | |
| LOW | tasks/new_e2e_tests.py | 165 | CODE | |
| LOW | tasks/new_e2e_tests.py | 539 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1028 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1157 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1250 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1519 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1557 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1701 | CODE | |
| LOW | tasks/new_e2e_tests.py | 1865 | CODE | |
| LOW | tasks/notify.py | 140 | CODE | |
| LOW | tasks/go_deps.py | 112 | CODE | |
| LOW | tasks/testwasher.py | 219 | CODE | |
| 179 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tasks/quality_gates.py | 256 | print(color_message(" - Update your branch: git fetch origin main && git rebase origin/main", "cyan")) | CODE |
| HIGH | tasks/anomalydetection.py | 167 | f"bin/anomalydetection-testbench --scenarios-dir {scenarios_dir}{flags} & ( cd internal/qbranch/anomalydetec | CODE |
| HIGH⚡ | tasks/notify.py | 69 | # "job1": {"consecutive_failures": 2, "jobs_info": [{"id": null, "failing": false, "commit": "abcdef42"}, {" | COMMENT |
| HIGH⚡ | tasks/notify.py | 70 | # "job2": {"consecutive_failures": 0, "cumulative_failures": [{"id": 314618, "failing": true, "commit": "abc | COMMENT |
| HIGH⚡ | tasks/installer.py | 114 | if command -v dpkg >/dev/null && dpkg -s datadog-agent >/dev/null 2>&1; then | STRING |
| HIGH⚡ | tasks/installer.py | 115 | "${sudo_cmd[@]+"${sudo_cmd[@]}"}" datadog-agent purge >/dev/null 2>&1 || true | STRING |
| HIGH⚡ | tasks/installer.py | 116 | "${sudo_cmd[@]+"${sudo_cmd[@]}"}" dpkg --purge datadog-agent >/dev/null 2>&1 || true | STRING |
| HIGH⚡ | tasks/installer.py | 118 | elif command -v rpm >/dev/null && rpm -q datadog-agent >/dev/null 2>&1; then | STRING |
| HIGH⚡ | tasks/installer.py | 119 | "${sudo_cmd[@]+"${sudo_cmd[@]}"}" datadog-agent purge >/dev/null 2>&1 || true | STRING |
| HIGH⚡ | tasks/installer.py | 120 | "${sudo_cmd[@]+"${sudo_cmd[@]}"}" rpm -e datadog-agent >/dev/null 2>&1 || true | STRING |
| HIGH | tasks/setup.py | 249 | ctx.run('brew update && brew upgrade ddtool', hide=True) | CODE |
| HIGH | tasks/devcontainer.py | 131 | " && dda inv -- -e install-tools && dda inv -- -e deps" | CODE |
| HIGH | tasks/devcontainer.py | 216 | " && helm repo add datadog https://helm.datadoghq.com && helm repo update" | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 447 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 454 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 461 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 468 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 475 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/gitlab_api_tests.py | 483 | diff = f'diff --git a/{file} b/{file}\nindex 561eb1a201..5e43218090 100644\n--- a/{file}\n+++ b/{file}\n@@ -1,4 | CODE |
| HIGH⚡ | tasks/unit_tests/experimental_gates_tests.py | 562 | created_by="RUN apt-get update && apt-get install -y wget", | CODE |
| HIGH⚡ | tasks/unit_tests/experimental_gates_tests.py | 568 | self.assertEqual(layer_info.created_by, "RUN apt-get update && apt-get install -y wget") | CODE |
| HIGH⚡ | tasks/unit_tests/releasenotes_linter_tests.py | 283 | """Empty (null) sections should produce a warning.""" | STRING |
| HIGH⚡ | tasks/unit_tests/linter_tests.py | 36 | " - DD_API_KEY=$(aws ssm get-parameter --region us-east-1 --name $API_KEY_ORG2 --with-decryption --que | CODE |
| HIGH | tasks/kernel_matrix_testing/compiler.py | 282 | f"cp /root/.bashrc /home/{self.compiler_user}/.bashrc && chown {self.host_uid}:{self.host_gid} /home/{self.c | CODE |
| HIGH | tasks/kernel_matrix_testing/compiler.py | 285 | self.exec("mkdir ~/.cargo && touch ~/.cargo/env", user=self.compiler_user) | CODE |
| HIGH | tasks/kernel_matrix_testing/gdb.py | 73 | ctx.run(f"cd {gdb_paths.kernel_source} && make defconfig && make scripts_gdb") | CODE |
| HIGH | tasks/kernel_matrix_testing/stacks.py | 278 | ctx.run("cd ./test/new-e2e && go build -o start-microvms ./scenarios/system-probe/main.go") | CODE |
| HIGH | tasks/libs/ciproviders/github_api.py | 713 | "Please run `brew update && brew upgrade ddtool`." | CODE |
| HIGH | tasks/libs/linter/releasenotes.py | 290 | message=f"Section '{section}' is empty (null). Remove it or add content.", | CODE |
| HIGH | tasks/libs/common/auth.py | 25 | else "`ddtool auth token` returned an invalid token, it might be due to ddtool outdated. Please run `brew update | CODE |
| HIGH | tasks/libs/common/go.py | 71 | with timed("go mod download && go mod tidy"): | CODE |
| HIGH | tasks/libs/releasing/notes.py | 88 | ctx.run(f"cat {changelog_file} >> /tmp/new_changelog.rst && mv /tmp/new_changelog.rst {changelog_file}") | CODE |
| HIGH | pkg/gohai/cpu/from-lscpu-arm.py | 38 | //go:build linux && arm64 | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | modules.yml | 1 | # This file contains the go modules configuration. | COMMENT |
| MEDIUM | omnibus/config/software/datadog-agent-finalize.rb | 87 | # Create the installer symlink if the file doesn't already exist | COMMENT |
| MEDIUM | packaging/aix/stages/02-python.sh | 395 | # Create the runtime-path symlink BEFORE make so that the baked-in -blibpath | COMMENT |
| MEDIUM⚡ | packaging/aix/stages/02-python.sh | 470 | # Create a version-agnostic symlink so Go code can link with -lpython3 instead | COMMENT |
| MEDIUM⚡ | packaging/aix/lib/env.sh | 7 | # This file is sourced, never executed directly. Callers control set -e/set -u. | COMMENT |
| MEDIUM | packaging/aix/lib/env.sh | 190 | # Create the sentinel file that marks STAGE_NAME as complete. | COMMENT |
| MEDIUM | cmd/agent/macos/install_mac_os_v1.sh | 360 | # The following block covers both cases so that we have tbe username we want in the real_user variable. | COMMENT |
| MEDIUM | tasks/msi.py | 282 | # Create a MSI build cmd, not the full MSI | STRING |
| MEDIUM | tasks/ebpf.py | 630 | # Define the complexity level for all assembly instructions | COMMENT |
| MEDIUM | tasks/pipeline.py | 628 | # Create a new main and push it | COMMENT |
| MEDIUM | tasks/pipeline.py | 637 | # Create a PR towards this new branch and adds it to the merge queue | COMMENT |
| MEDIUM | tasks/windows_dev_env.py | 92 | # Create the Windows development environment. | COMMENT |
| MEDIUM⚡ | tasks/components.py | 626 | # Create the root folder. We temporary set the umask to 0 to prevent 'os.makedirs' from giving wrong permissions to | COMMENT |
| MEDIUM⚡ | tasks/components.py | 638 | # Create the components framework common files from predefined templates | COMMENT |
| MEDIUM | tasks/unit_tests/components_tests.py | 12 | # Create a temporary directory of the source directory to allow | COMMENT |
| MEDIUM | tasks/unit_tests/experimental_gates_tests.py | 161 | # Create a temporary config file | COMMENT |
| MEDIUM | tasks/unit_tests/experimental_gates_tests.py | 287 | # Create a sample report with regular files and symlinks | COMMENT |
| MEDIUM | tasks/unit_tests/experimental_gates_tests.py | 772 | # Create a temporary config file | COMMENT |
| MEDIUM | tasks/unit_tests/experimental_gates_tests.py | 919 | # Create a sample report | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 44 | # Create a context mock with run method | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 110 | # Create a context mock with run method | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 166 | # Create a context mock | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 203 | # Create a context mock | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 244 | # Create a context mock with run method | COMMENT |
| MEDIUM | tasks/unit_tests/url_tests.py | 279 | # Create a context mock | COMMENT |
| MEDIUM | tasks/unit_tests/libs/common/s3_test.py | 20 | # Create a temporary file for testing | COMMENT |
| MEDIUM | tasks/unit_tests/libs/common/s3_test.py | 90 | # Create a temporary directory for testing | COMMENT |
| MEDIUM | tasks/unit_tests/libs/dynamic_test/backend_test.py | 42 | # Create a mock JSON file that will be "downloaded" | COMMENT |
| MEDIUM | tasks/static_quality_gates/gates_reporter.py | 93 | # Create a lookup for gate states | COMMENT |
| MEDIUM | tasks/kernel_matrix_testing/vmconfig.py | 235 | # Create a new entry for this architecture | COMMENT |
| MEDIUM | tasks/libs/ciproviders/github_api.py | 479 | # Create a commit from the given tree, see details in https://github.com/orgs/community/discussions/50055 | STRING |
| MEDIUM | tasks/libs/ciproviders/ci_config.py | 9 | # This file is used to set exceptions for jobs that do not require needs or rules | COMMENT |
| MEDIUM | tasks/libs/pipeline/github_jira_map.yaml | 1 | # This file contains a mapping of DataDog Github teams to JIRA projects. | COMMENT |
| MEDIUM | tasks/libs/pipeline/github_slack_map.yaml | 1 | # This file contains a mapping of DataDog Github teams to slack channels. | COMMENT |
| MEDIUM | tasks/libs/common/gomodules.py | 33 | # This file contains the go modules configuration. | COMMENT |
| MEDIUM | tasks/libs/releasing/version.py | 155 | ## The following functions aim at returning the correct version to use for a given | COMMENT |
| MEDIUM | tasks/schema/codegen_init_settings.py | 69 | # Create the function, declare all settings in it | STRING |
| MEDIUM | .gitlab/test/integration_test/otel.yml | 66 | # Create a buildx builder, see .ddot_byoc_build_cache_setup for the rationale behind this. | COMMENT |
| MEDIUM | …tInstaller/CustomActions.Tests/WriteConfigUnitTests.cs | 63 | # Define a single property so that the YAML loader doesn't | COMMENT |
| MEDIUM | bazel/tools/generate_module_bazel.py | 29 | """# This file is generated. Do not hand edit.""", | STRING |
| MEDIUM | bazel/rules/macos/codesign/sign_jar_macos.sh | 33 | # Create a temporary directory for unpacking | COMMENT |
| MEDIUM | Dockerfiles/agent/secrets-helper/test_readsecret.py | 48 | # Create a sensitive file and symlink it in the allowed folder | COMMENT |
| MEDIUM | .dda/extend/pythonpath/lab/providers/__init__.py | 23 | # Create the resource | STRING |
| MEDIUM | .dda/extend/commands/gh/cherry_pick_pr/__init__.py | 80 | # Create a new working tree | COMMENT |
| MEDIUM | .dda/extend/commands/gh/cherry_pick_pr/__init__.py | 84 | # Create a new branch | COMMENT |
| MEDIUM | .dda/extend/commands/gh/cherry_pick_pr/__init__.py | 100 | # Create the backport PR | COMMENT |
| MEDIUM | pkg/config/config_template.yaml | 9 | ## Create a new API key here: https://app.datadoghq.com/organization-settings/api-keys . | COMMENT |
| MEDIUM | pkg/config/config_template.yaml | 17 | ## Create a new application key here: https://app.datadoghq.com/organization-settings/application-keys . | COMMENT |
| MEDIUM | pkg/config/config_template.yaml | 1245 | # # Define the endpoint and port to hit when using a proxy for logs. | COMMENT |
| MEDIUM | pkg/config/config_template.yaml | 1470 | # # Define the endpoint and port to hit when using a proxy for APM. The traces are forwarded in TCP | COMMENT |
| MEDIUM | pkg/config/config_template.yaml | 2883 | ## Define a custom remote syslog uri if needed. If 'syslog_uri' is left undefined/empty, | COMMENT |
| MEDIUM | pkg/network/usm/testutil/iis_helper.go | 50 | # Create the IIS site | COMMENT |
| MEDIUM | pkg/network/protocols/redis/testdata/runner.sh | 6 | # Create a directory to store the configuration files | COMMENT |
| MEDIUM | pkg/network/protocols/postgres/testdata/runner.sh | 6 | # Create a directory to store the configuration files | COMMENT |
| MEDIUM | pkg/network/protocols/postgres/testdata/runner.sh | 9 | # Define the paths to the configuration files | COMMENT |
| MEDIUM | pkg/network/protocols/mysql/testdata/runner.sh | 6 | # Create a directory to store the configuration files | COMMENT |
| MEDIUM | pkg/compliance/dbconfig/loader_test.go | 837 | # This file is read on server startup and when the server receives a SIGHUP | COMMENT |
| MEDIUM | …ubscribe/procscan/testdata/scanner/non_go_process.yaml | 2 | # Create a Python process - it should never be discovered. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ce-agent/test/testsuite/testdata/trace_with_rates.json | 114 | "error.stack": "java.lang.InterruptedException: Thread interrupted for external calls timeout.\n\tat com.datadog.e | CODE |
| CRITICAL | …agent/test/testsuite/testdata/trace_without_rates.json | 121 | "error.stack":"java.lang.InterruptedException: Thread interrupted for external calls timeout.\n\tat com.datadog | CODE |
| CRITICAL | comp/core/gui/impl/views/private/js/jquery-3.5.1.min.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | comp/syntheticstestscheduler/impl/worker.go | 377 | SubType: strings.ToLower(string(w.testCfg.cfg.Config.Request.GetSubType())), | CODE |
| CRITICAL | pkg/clusteragent/autoscaling/cluster/controller.go | 219 | knp.Spec.Template.Spec.NodeClassRef = targetNp.Spec.Template.Spec.NodeClassRef.DeepCopy() | CODE |
| CRITICAL | pkg/clusteragent/autoscaling/cluster/controller.go | 272 | desired.Spec.Template.Spec.NodeClassRef = datadogNp.Spec.Template.Spec.NodeClassRef.DeepCopy() | CODE |
| CRITICAL | pkg/security/tests/accept_test.go | 70 | assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address") | CODE |
| CRITICAL | pkg/security/tests/accept_test.go | 86 | assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address") | CODE |
| CRITICAL | pkg/security/tests/accept_test.go | 171 | assert.Equal(t, "127.0.0.1", event.Accept.Addr.IPNet.IP.String(), "wrong address") | CODE |
| CRITICAL | pkg/security/tests/accept_test.go | 195 | assert.Equal(t, "::1", event.Accept.Addr.IPNet.IP.String(), "wrong address") | CODE |
| CRITICAL | pkg/security/tests/accept_test.go | 214 | assert.Equal(t, "::1", event.Accept.Addr.IPNet.IP.String(), "wrong address") | CODE |
| CRITICAL | pkg/security/security_profile/ad.go | 303 | if !ad.Profile.Metadata.CGroupContext.CGroupPathKey.IsNull() { | CODE |
| CRITICAL | pkg/security/security_profile/ad.go | 350 | if !ad.Profile.Metadata.CGroupContext.CGroupPathKey.IsNull() { | CODE |
| CRITICAL | pkg/security/security_profile/testing.go | 96 | if !ad.Profile.Metadata.CGroupContext.CGroupPathKey.IsNull() { | CODE |
| CRITICAL | …ks/cluster/orchestrator/transformers/k8s/deployment.go | 37 | deploy.MaxUnavailable = d.Spec.Strategy.RollingUpdate.MaxUnavailable.String() | CODE |
| CRITICAL | …ks/cluster/orchestrator/transformers/k8s/deployment.go | 40 | deploy.MaxSurge = d.Spec.Strategy.RollingUpdate.MaxSurge.String() | CODE |
| CRITICAL | …cks/cluster/orchestrator/transformers/k8s/daemonset.go | 45 | daemonSet.Spec.MaxUnavailable = ds.Spec.UpdateStrategy.RollingUpdate.MaxUnavailable.String() | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnibus/python-scripts/packages_tests.py | 2 | CODE | |
| LOW | omnibus/python-scripts/packages_tests.py | 3 | CODE | |
| LOW | omnibus/python-scripts/packages_tests.py | 5 | CODE | |
| LOW | omnibus/python-scripts/packages_tests.py | 9 | CODE | |
| LOW | omnibus/python-scripts/post_tests.py | 4 | CODE | |
| LOW | omnibus/python-scripts/post_tests.py | 6 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 5 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 6 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 7 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 8 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 9 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 9 | CODE | |
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 9 | CODE | |
| LOW | tasks/k8s_versions.py | 7 | CODE | |
| LOW | tasks/virustotal.py | 1 | CODE | |
| LOW | tasks/build_tags.py | 12 | CODE | |
| LOW | tasks/kmt.py | 1 | CODE | |
| LOW | tasks/code_review.py | 1 | CODE | |
| LOW | tasks/claude.py | 7 | CODE | |
| LOW | tasks/renovate.py | 21 | CODE | |
| LOW | tasks/test_core.py | 1 | CODE | |
| LOW | tasks/new_e2e_tests.py | 5 | CODE | |
| LOW | tasks/notify.py | 1 | CODE | |
| LOW | tasks/vscode.py | 7 | CODE | |
| LOW | tasks/testwasher.py | 1 | CODE | |
| LOW | tasks/setup.py | 5 | CODE | |
| LOW | tasks/ai_sandbox.py | 9 | CODE | |
| LOW | tasks/ebpf.py | 1 | CODE | |
| LOW | tasks/system_probe.py | 1 | CODE | |
| LOW | tasks/go.py | 5 | CODE | |
| LOW | tasks/bazel.py | 1 | CODE | |
| LOW | tasks/gotest.py | 5 | CODE | |
| LOW | tasks/python_version.py | 9 | CODE | |
| LOW | tasks/modules.py | 1 | CODE | |
| LOW | tasks/gpu.py | 1 | CODE | |
| LOW | tasks/security_agent.py | 1 | CODE | |
| LOW | tasks/github_tasks.py | 1 | CODE | |
| LOW | tasks/linter.py | 3 | CODE | |
| LOW | tasks/update_go.py | 1 | CODE | |
| LOW | tasks/buildimages.py | 1 | CODE | |
| LOW | tasks/gitlab_helpers.py | 3 | CODE | |
| LOW | tasks/unit_tests/notify_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/github_tasks_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/renovate_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/release_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/kmt_tests.py | 8 | CODE | |
| LOW | tasks/unit_tests/code_review_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/modules_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/libs/notify/alerts_tests.py | 1 | CODE | |
| LOW | tasks/unit_tests/libs/utof/test_failure_parser.py | 12 | CODE | |
| LOW | tasks/unit_tests/libs/utof/e2e_converter_tests.py | 8 | CODE | |
| LOW | tasks/debugging/__init__.py | 1 | CODE | |
| LOW | tasks/debugging/__init__.py | 2 | CODE | |
| LOW | tasks/debugging/__init__.py | 3 | CODE | |
| LOW | tasks/static_quality_gates/metrics.py | 1 | CODE | |
| LOW | tasks/static_quality_gates/thresholds.py | 1 | CODE | |
| LOW | tasks/static_quality_gates/decisions.py | 1 | CODE | |
| LOW | tasks/static_quality_gates/github.py | 1 | CODE | |
| LOW | tasks/static_quality_gates/pr_comment.py | 1 | CODE | |
| LOW | tasks/kernel_matrix_testing/vars.py | 1 | CODE | |
| 110 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …sm/debug_scripts/usm_leak_detector/subprocess_utils.py | 39 | Run a subprocess with timeout using select() instead of sleep(). This avoids the seccomp issue where nanosleep | STRING |
| HIGH | tasks/anomalydetection.py | 189 | Runs the observer F1 eval: replays scenarios, scores Gaussian F1. The main score is a metric between 0 and 1, | STRING |
| HIGH | tasks/python_version.py | 182 | Fetch SHA256 hash for Python source tarball using SBOM file. Args: version: Python version string (e.g | STRING |
| HIGH | tasks/static_quality_gates/experimental_gates.py | 625 | Measure an artifact using the configured processor. Args: ctx: Invoke context for running | STRING |
| HIGH | tasks/static_quality_gates/experimental_gates.py | 1075 | Measure a package artifact and generate a comprehensive report. Args: ctx: Invoke context | STRING |
| HIGH | tasks/static_quality_gates/experimental_gates.py | 1136 | Measure a Docker image and generate a comprehensive report. Args: ctx: Invoke context for | STRING |
| HIGH | tasks/static_quality_gates/gates.py | 257 | Measure an artifact's on-wire and on-disk sizes. Args: ctx: Invoke context for running com | STRING |
| HIGH | tasks/static_quality_gates/gates.py | 516 | Execute the quality gate. Args: ctx: Invoke context Returns: GateResu | STRING |
| HIGH | tasks/static_quality_gates/gates.py | 608 | Create a quality gate with the appropriate measurement strategy. Args: gate_name: Technica | STRING |
| HIGH | tasks/static_quality_gates/gates.py | 633 | Create the appropriate artifact measurer based on gate name. Args: gate_name: Technical ga | STRING |
| HIGH | tasks/static_quality_gates/gates.py | 654 | Create all quality gates from a configuration file. Args: config_path: Path to YAML config | STRING |
| HIGH | tasks/libs/ciproviders/gitlab_api.py | 416 | Will iterate over all jobs in all files for the given states. Args: only_leaves: If True, will retu | STRING |
| HIGH | tasks/libs/ciproviders/gitlab_api.py | 574 | Will iterate over all jobs in all files for the given states. Args: only_leaves: If True, will retu | STRING |
| HIGH | tasks/libs/common/bazel_query.py | 17 | Run a Bazel query with --output=streamed_jsonproto and yield matching objects. Each line of the stream is a JSON-en | STRING |
| HIGH | tasks/libs/common/s3.py | 11 | Upload a file to S3 using boto3. Args: file_path: Local path to the file to upload s3_path: S3 | STRING |
| HIGH | tasks/libs/common/s3.py | 83 | Download a folder from S3 to a specified local path. Args: s3_path: S3 path (bucket name and key) | STRING |
| HIGH | tasks/libs/common/s3.py | 168 | List all direct subfolders of a given S3 path, that contains a file with the given filename. The list is sorted | STRING |
| HIGH | tasks/libs/dynamic_test/backend.py | 40 | Upload a DynamicTestIndex to the backend storage. The implementation should: 1. Serialize the index to | STRING |
| HIGH | tasks/libs/dynamic_test/backend.py | 62 | Retrieve a DynamicTestIndex from the backend storage. The implementation should: 1. Locate the stored i | STRING |
| HIGH | tasks/libs/dynamic_test/indexer.py | 55 | Build and return a DynamicTestIndex from the configured data source. This method should: 1. Process the | STRING |
| HIGH | tasks/libs/dynamic_test/executor.py | 81 | Find and load the best available index for the given commit. Searches through available indexed commits to find | STRING |
| HIGH | docs/dev/checks/builtins/_util.md | 20 | Run an external process and return the output. NOTE: If unicode is passed to any of the params accepting it, the | STRING |
| HIGH | docs/dev/checks/builtins/tagger.md | 31 | Get tags for an entity. Args: id (string): entity identifier. cardinality (int): constant represent | STRING |
| HIGH | docs/dev/checks/builtins/datadog_agent.md | 29 | Get an item from the Agent configuration store. Args: key (string or unicode): the key of the Agent config | STRING |
| HIGH | docs/dev/checks/builtins/datadog_agent.md | 75 | Log a message through the agent logger. Args: message (string or unicode): the log message. log_lev | STRING |
| HIGH | docs/dev/checks/builtins/datadog_agent.md | 90 | Send external host tags (internal feature, never ever use it). Args: tags (list): a list of external tags w | STRING |
| HIGH | docs/dev/checks/builtins/containers.md | 22 | Returns whether a container is excluded per name and image. NOTE: If unicode is passed to any of the params accepti | STRING |
| HIGH | docs/dev/checks/builtins/aggregator.md | 35 | Submit a metric to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the string is | STRING |
| HIGH | docs/dev/checks/builtins/aggregator.md | 60 | Submit a service check to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the str | STRING |
| HIGH | docs/dev/checks/builtins/aggregator.md | 85 | Submit an event to the aggregator. NOTE: If unicode is passed to any of the params accepting it, the string is | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/usm/debug_scripts/usm_leak_detector/map_discovery.py | 25 | # Check if this is a target map (handle kernel name truncation) | COMMENT |
| LOW | …s/usm/debug_scripts/usm_leak_detector/pid_validator.py | 88 | # Check if this is a target map (handle kernel name truncation) | COMMENT |
| LOW | …s/usm/debug_scripts/usm_leak_detector/pid_validator.py | 140 | # Check if we've already validated this PID | COMMENT |
| LOW⚡ | …subcommands/usm/debug_scripts/usm_leak_detector/cli.py | 151 | # Check if we found anything | COMMENT |
| LOW | …sm/debug_scripts/usm_leak_detector/subprocess_utils.py | 94 | # Check if process finished first | COMMENT |
| LOW | cmd/agent/macos/install_mac_os_v1.sh | 263 | # Check if the version is a classic release version or a pre-release version | COMMENT |
| LOW | cmd/agent/macos/install_mac_os_v1.sh | 529 | # Check if this user has per-user installations | COMMENT |
| LOW | cmd/agent/macos/install_mac_os_v1.sh | 560 | # Check if any socket files exist | COMMENT |
| LOW | tasks/k8s_versions.py | 298 | # Check if it has a digest | COMMENT |
| LOW | tasks/k8s_versions.py | 439 | # Check if any new versions are RCs | COMMENT |
| LOW | tasks/k8s_versions.py | 470 | # Check if there are new versions to process | COMMENT |
| LOW | tasks/skaffold.py | 148 | # Check if Skaffold is installed | COMMENT |
| LOW | tasks/kmt.py | 269 | # Check if this test is already included in some parent test | COMMENT |
| LOW | tasks/new_e2e_tests.py | 193 | # Check if directory contains Go test files | COMMENT |
| LOW | tasks/new_e2e_tests.py | 1638 | # Check if it's an absolute path first | COMMENT |
| LOW | tasks/new_e2e_tests.py | 1642 | # Check if it's a file in the output directory | COMMENT |
| LOW | tasks/coverage.py | 294 | # Check if the mode is the same in both files. | COMMENT |
| LOW | tasks/msi.py | 138 | # Check if wix is installed globally | STRING |
| LOW | tasks/gotest.py | 926 | # Check if the package is in the target list of the module we want to test | COMMENT |
| LOW | tasks/gotest.py | 1249 | # Check if the module is in the target list of the modules we want to test | COMMENT |
| LOW | tasks/gotest.py | 1253 | # Check if the package is in the target list of the module we want to test | COMMENT |
| LOW | tasks/python_version.py | 69 | # Check if update is needed | COMMENT |
| LOW | tasks/modules.py | 387 | # Check if any go.mod files were modified | STRING |
| LOW | tasks/e2e_framework/setup/setup.py | 524 | # Check if aws creds are valid | COMMENT |
| LOW | tasks/e2e_framework/setup/gcp.py | 47 | # Check if gke-gcloud-auth-plugin is installed and install it if not | COMMENT |
| LOW | tasks/e2e_framework/aws/gensim_eks.py | 221 | # Check if cluster is reachable | COMMENT |
| LOW | tasks/unit_tests/releasenotes_linter_tests.py | 17 | # Check if docutils is available for tests that depend on it | COMMENT |
| LOW | tasks/static_quality_gates/experimental_gates.py | 807 | # Check if this is OCI format (has index.json and oci-layout) | COMMENT |
| LOW | tasks/static_quality_gates/experimental_gates.py | 953 | # Check if this is OCI format | COMMENT |
| LOW | tasks/static_quality_gates/pr_comment.py | 204 | # Check if this is a blocking or non-blocking failure | STRING |
| LOW | tasks/kernel_matrix_testing/compiler.py | 200 | # Check if the image exists | COMMENT |
| LOW | tasks/kernel_matrix_testing/vmconfig.py | 225 | # Check if image is available locally | COMMENT |
| LOW | tasks/kernel_matrix_testing/vmconfig.py | 253 | # Check if image is up to date using hash comparison | COMMENT |
| LOW | tasks/kernel_matrix_testing/infra.py | 328 | # Check if it's a key name that's there in the agent | COMMENT |
| LOW | tasks/libs/pipeline/tools.py | 363 | # Check if old job already in notification list, to append retry message | COMMENT |
| LOW | tasks/libs/types/types.py | 127 | # Check if we have to match tags | COMMENT |
| LOW | tasks/libs/types/types.py | 142 | # Check if the job tags match any possible combination of the dependency tags | COMMENT |
| LOW | tasks/libs/testing/e2e.py | 60 | # Check if candidate_test is a leaf test | COMMENT |
| LOW | tasks/libs/common/s3.py | 217 | # Check if there are more pages | COMMENT |
| LOW | tasks/libs/common/datadog_api.py | 153 | # Check if there are more pages | COMMENT |
| LOW | tasks/libs/owners/linter.py | 140 | # Check if root is matching the pattern, without "./" at the begining | COMMENT |
| LOW | tasks/libs/owners/linter.py | 151 | # Check if the file path matches any of the regex patterns | COMMENT |
| LOW | .gitlab/test/functional_test/regression_detector.yml | 57 | # Check if image exists for the baseline SHA, walking backwards on the | COMMENT |
| LOW | test/e2e-framework/scenarios/aws/gensim-eks/run.go | 749 | # Check if all images are already cached in ECR under the hash tag. | COMMENT |
| LOW | q_branch/setup-k8s-host.sh | 34 | # Check if VM exists | COMMENT |
| LOW | q_branch/setup-k8s-host.sh | 40 | # Check if cluster exists | COMMENT |
| LOW | .github/workflows/upgrade-python-patch-version.yml | 49 | # Check if files were modified | COMMENT |
| LOW | .dda/extend/pythonpath/lab/providers/local/kind.py | 111 | # Check if kind is installed | COMMENT |
| LOW | pkg/config/config_template.yaml | 3932 | ## Set this to false to disable tag collection for the Agent. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tasks/package.py | 125 | CODE | |
| LOW | tasks/package.py | 193 | CODE | |
| LOW | tasks/release.py | 166 | CODE | |
| LOW | tasks/release.py | 219 | CODE | |
| LOW | tasks/agent_ci_api.py | 38 | CODE | |
| LOW | tasks/kmt.py | 132 | CODE | |
| LOW | tasks/kmt.py | 189 | CODE | |
| LOW | tasks/kmt.py | 870 | CODE | |
| LOW | tasks/kmt.py | 1360 | CODE | |
| LOW | tasks/kmt.py | 1485 | CODE | |
| LOW | tasks/kmt.py | 2375 | CODE | |
| LOW | tasks/kmt.py | 2620 | CODE | |
| LOW | tasks/anomalydetection.py | 84 | CODE | |
| LOW | tasks/anomalydetection.py | 175 | CODE | |
| LOW | tasks/anomalydetection.py | 476 | CODE | |
| LOW | tasks/anomalydetection.py | 759 | CODE | |
| LOW | tasks/anomalydetection.py | 1430 | CODE | |
| LOW | tasks/anomalydetection.py | 1765 | CODE | |
| LOW | tasks/cws_instrumentation.py | 29 | CODE | |
| LOW | tasks/new_e2e_tests.py | 539 | CODE | |
| LOW | tasks/go_deps.py | 475 | CODE | |
| LOW | tasks/installer.py | 26 | CODE | |
| LOW | tasks/ai_sandbox.py | 57 | CODE | |
| LOW | tasks/pipeline.py | 148 | CODE | |
| LOW | tasks/cluster_agent.py | 29 | CODE | |
| LOW | tasks/agent.py | 53 | CODE | |
| LOW | tasks/agent.py | 280 | CODE | |
| LOW | tasks/agent.py | 383 | CODE | |
| LOW | tasks/agent.py | 617 | CODE | |
| LOW | tasks/system_probe.py | 191 | CODE | |
| LOW | tasks/system_probe.py | 234 | CODE | |
| LOW | tasks/system_probe.py | 324 | CODE | |
| LOW | tasks/go.py | 47 | CODE | |
| LOW | tasks/gotest.py | 198 | CODE | |
| LOW | tasks/gotest.py | 620 | CODE | |
| LOW | tasks/gotest.py | 1404 | CODE | |
| LOW | tasks/modules.py | 287 | CODE | |
| LOW | tasks/security_agent.py | 295 | CODE | |
| LOW | tasks/omnibus.py | 103 | CODE | |
| LOW | tasks/omnibus.py | 215 | CODE | |
| LOW | tasks/omnibus.py | 390 | CODE | |
| LOW | tasks/github_tasks.py | 316 | CODE | |
| LOW | tasks/linter.py | 65 | CODE | |
| LOW | tasks/linter.py | 418 | CODE | |
| LOW | tasks/gitlab_helpers.py | 246 | CODE | |
| LOW | tasks/e2e_framework/deploy.py | 35 | CODE | |
| LOW | tasks/e2e_framework/azure/vm.py | 43 | CODE | |
| LOW | tasks/e2e_framework/azure/aks.py | 27 | CODE | |
| LOW | tasks/e2e_framework/gcp/vm.py | 50 | CODE | |
| LOW | tasks/e2e_framework/gcp/openshift.py | 29 | CODE | |
| LOW | tasks/e2e_framework/gcp/gke.py | 37 | CODE | |
| LOW | tasks/e2e_framework/aws/kind.py | 37 | CODE | |
| LOW | tasks/e2e_framework/aws/deploy.py | 12 | CODE | |
| LOW | tasks/e2e_framework/aws/eks.py | 43 | CODE | |
| LOW | tasks/e2e_framework/aws/vm.py | 53 | CODE | |
| LOW | tasks/e2e_framework/aws/docker.py | 30 | CODE | |
| LOW | tasks/e2e_framework/aws/gensim_eks.py | 57 | CODE | |
| LOW | tasks/e2e_framework/aws/ecs.py | 33 | CODE | |
| LOW | tasks/e2e_framework/localpodman/vm.py | 31 | CODE | |
| LOW | tasks/kernel_matrix_testing/stacks.py | 281 | CODE | |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tasks/cluster_agent_helpers.py | 0 | clean up and refresh cluster agent's assets and config files | STRING |
| HIGH | tasks/cluster_agent_cloudfoundry.py | 0 | clean up and refresh cluster agent's assets and config files | STRING |
| HIGH | tasks/cluster_agent.py | 0 | clean up and refresh cluster agent's assets and config files | STRING |
| HIGH | tasks/collector.py | 0 | // unless explicitly stated otherwise all files in this repository are licensed // under the apache license version 2.0. | STRING |
| HIGH | tasks/libs/types/copyright.py | 0 | // unless explicitly stated otherwise all files in this repository are licensed // under the apache license version 2.0. | STRING |
| HIGH | tasks/schema/codegen_init_settings.py | 0 | // unless explicitly stated otherwise all files in this repository are licensed // under the apache license version 2.0. | STRING |
| HIGH | tasks/__init__.py | 0 | invoke entrypoint, import here all the tasks we want to make available | STRING |
| HIGH | tasks/components.py | 0 | invoke entrypoint, import here all the tasks we want to make available | STRING |
| HIGH | devenv/tasks/__init__.py | 0 | invoke entrypoint, import here all the tasks we want to make available | STRING |
| HIGH | tasks/e2e_framework/azure/common.py | 0 | returns the deploy job name within the datadog agent repo that creates images used in create-vm | STRING |
| HIGH | tasks/e2e_framework/gcp/common.py | 0 | returns the deploy job name within the datadog agent repo that creates images used in create-vm | STRING |
| HIGH | tasks/e2e_framework/aws/common.py | 0 | returns the deploy job name within the datadog agent repo that creates images used in create-vm | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packaging/aix/package.sh | 78 | # Files like "Lorem ipsum.txt" and "launcher manifest.xml" (setuptools vendor docs) | COMMENT |
| LOW | …cret-generic-connector/backend/hashicorp/vault_test.go | 436 | _, _ = w.Write([]byte(`{"auth":{"client_token":"fake-token"}}`)) | CODE |
| LOW | …cret-generic-connector/backend/hashicorp/vault_test.go | 467 | assert.Equal(t, "fake-token", vb.Client.Token()) | CODE |
| LOW | cmd/ai_prompt_logger/src/datadog.rs | 316 | "user@example.com".to_string(), | CODE |
| LOW | tasks/system_probe.py | 1361 | ctx.run(f"mkdir -p {output_dir}/dummy_data") | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 20 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 71 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 103 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 134 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 165 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 191 | 'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token', | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 231 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 277 | {'PR_REQUESTED_TEAMS': '[{"slug": "team1"}]', 'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 324 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | tasks/unit_tests/issue_tests.py | 367 | {'SLACK_DATADOG_AGENT_BOT_TOKEN': 'fake-token'}, | CODE |
| LOW | …e/tests/agent-log-pipelines/k8s-logs/long_line_log.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW | …e/tests/agent-log-pipelines/k8s-logs/long_line_log.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW | docs/public/guidelines/docs.md | 75 | Lorem ipsum ... | CODE |
| LOW | docs/public/guidelines/docs.md | 84 | Lorem ipsum ... | CODE |
| LOW | comp/core/gui/impl/views/private/js/purify.min.js | 2 | !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define | CODE |
| LOW | pkg/obfuscate/sql_test.go | 919 | "* SELECT * FROM fake_data(1, 2, 3);", | CODE |
| LOW | pkg/obfuscate/sql_test.go | 920 | "* SELECT * FROM fake_data ( ? )", | CODE |
| LOW | pkg/trace/api/tracer_flare_test.go | 62 | writer.WriteField("email", "test@test.com") | CODE |
| LOW | pkg/trace/api/tracer_flare_test.go | 135 | assert.Equal(t, "test@test.com", req.FormValue("email")) | CODE |
| LOW | …ateactionrunner/bundle-support/enrich_actions_types.go | 14 | Placeholder string `json:"placeholder"` | CODE |
| LOW | pkg/util/scrubber/yaml_scrubber_test.go | 59 | "email": "user@example.com", | CODE |
| LOW | pkg/util/scrubber/yaml_scrubber_test.go | 65 | "email": "user@example.com", | CODE |
| LOW | pkg/util/scrubber/json_scrubber_test.go | 38 | input: []byte(`{"user": {"password": "secret", "email": "user@example.com"}}`), | CODE |
| LOW | pkg/util/scrubber/json_scrubber_test.go | 39 | expected: []byte(`{"user": {"password": "********", "email": "user@example.com"}}`), | CODE |
| LOW | pkg/config/remote/service/service_test.go | 191 | AppKey: "fake_key", | CODE |
| LOW | pkg/security/secl/model/model_helpers_unix.go | 337 | "placeholder", | CODE |
| LOW | pkg/template/html/attr.go | 98 | "placeholder": contentTypePlain, | CODE |
| LOW | …ector/corechecks/agentprofiling/agentprofiling_test.go | 115 | check := createTestCheck(t, "100MB", 50, "TICKET-123", "user@example.com", true) | CODE |
| LOW | …ector/corechecks/agentprofiling/agentprofiling_test.go | 120 | assert.Equal(t, "user@example.com", check.instance.UserEmail) | CODE |
| LOW | …ector/corechecks/agentprofiling/agentprofiling_test.go | 193 | userEmail: "user@example.com", | CODE |
| LOW | …ector/corechecks/agentprofiling/agentprofiling_test.go | 247 | instance: &Config{TicketID: "TICKET-123", UserEmail: "user@example.com"}, | CODE |
| LOW | …ector/corechecks/agentprofiling/agentprofiling_test.go | 256 | user_email: "user@example.com"`) | CODE |
| LOW | …em/windowscertificate/windows_certificate_tags_test.go | 206 | EmailAddresses: []string{"admin@example.com"}, | CODE |
| LOW | …g/opentelemetry-mapping-go/otlp/rum/rum_traces_test.go | 43 | "email": "test@test.com", | CODE |
| LOW | …g/opentelemetry-mapping-go/otlp/rum/rum_traces_test.go | 79 | assert.Equal(t, "test@test.com", usrEmail.AsString()) | CODE |
| LOW | pkg/opentelemetry-mapping-go/otlp/rum/rum_test.go | 213 | m.PutStr("name", "John Doe") | CODE |
| LOW | pkg/opentelemetry-mapping-go/otlp/rum/rum_test.go | 228 | "name": "John Doe", | CODE |
| LOW | …pentelemetry-mapping-go/otlp/attributes/source_test.go | 195 | "ec2.tag.kubernetes.io/cluster/clustername": "dummy_value", | CODE |
| LOW | …entelemetry-mapping-go/otlp/attributes/ec2/ec2_test.go | 83 | "ec2.tag.kubernetes.io/cluster/clustername": "dummy_value", | CODE |
| LOW | pkg/process/metadata/workloadmeta/grpc_test.go | 35 | cfg.SetInTest("process_config.language_detection.grpc_port", "lorem ipsum") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/public/tutorials/dev/lab/index.md | 41 | export E2E_API_KEY=your_api_key | CODE |
| HIGH | docs/public/tutorials/dev/lab/index.md | 50 | apiKey: your_api_key | CODE |
| HIGH | Dockerfiles/manifests/agent.yaml | 30 | - {name: DD_API_KEY, value: <YOUR_API_KEY>} | CODE |
| HIGH | Dockerfiles/manifests/agent.yaml | 30 | - {name: DD_API_KEY, value: <YOUR_API_KEY>} | CODE |
| HIGH | Dockerfiles/manifests/agent-kubelet-only.yaml | 23 | value: <YOUR_API_KEY> | CODE |
| HIGH | Dockerfiles/manifests/agent-kubelet-only.yaml | 23 | value: <YOUR_API_KEY> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packaging/aix/build.sh | 4 | # Usage: | COMMENT |
| LOW | packaging/aix/clean.sh | 17 | # Usage: | COMMENT |
| LOW | .gitlab/.pre/common/shared.yml | 24 | # Usage: | COMMENT |
| LOW | devenv/gcloud.pkr.hcl | 3 | # Usage: | COMMENT |
| LOW | …amework/components/activedirectory/active_directory.go | 52 | // Example usage: | COMMENT |
| LOW | …k/components/datadog/agentparams/msi/install_params.go | 29 | // Example usage: | COMMENT |
| LOW | test/e2e-framework/components/iis/component.go | 46 | // Example usage: | COMMENT |
| LOW | …explain-lading-config/scripts/resolve-lading-config.sh | 9 | # Usage: | COMMENT |
| LOW | comp/core/flare/builder/builder.go | 47 | // Usage example: | COMMENT |
| LOW | pkg/config/setup/config.go | 761 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …m/debug_scripts/usm_leak_detector/backends/__init__.py | 11 | __all__ = [ | CODE |
| LOW | tasks/k8s_versions.py | 243 | def _set_github_output(name: str, value: str) -> None: | CODE |
| LOW | tasks/kind_node_image.py | 118 | def _set_github_output(name: str, value: str) -> None: | CODE |
| LOW | tasks/e2e_framework/aws/gensim_eks.py | 498 | def update_manifest_shas_gensim_eks(ctx: Context) -> None: | CODE |
| LOW | tasks/debugging/gitlab_artifacts.py | 35 | def _set_text_property(self, attr: str, value: str) -> None: | CODE |
| LOW | tasks/libs/ciproviders/github_api.py | 33 | __all__ = ["GithubAPI"] | CODE |
| LOW | tasks/libs/ciproviders/github_api.py | 432 | def update_review_complexity_labels(self, pr_id: int, new_label: str) -> None: | STRING |
| LOW | tasks/libs/linter/gitlab_exceptions.py | 47 | def set_linter_name(self, linter_name: str) -> None: | CODE |
| LOW | tasks/libs/linter/gitlab_exceptions.py | 163 | def set_linter_name(self, linter_name: str) -> None: | CODE |
| LOW | tasks/libs/testing/utof/__init__.py | 17 | __all__ = [ | CODE |
| LOW | tasks/libs/testing/utof/go/parser/__init__.py | 19 | __all__ = [ | CODE |
| LOW | tasks/libs/testing/utof/go/e2e/__init__.py | 5 | __all__ = [ | CODE |
| LOW | …2e/tests/discovery/testdata/provision/python/server.py | 7 | logger = logging.getLogger(__name__) | CODE |
| LOW | q_branch/gensim-status.py | 745 | def _update_pod_logs_visibility(self) -> None: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tasks/protobuf.py | 33 | print("Generation complete and new files were updated, don't forget to commit and push") | CODE |
| LOW | …etection/observer/impl/log_tagged_pattern_clusterer.go | 22 | // Warning: Don't forget to update functions parsing tags when adding new fields | COMMENT |
| LOW | pkg/security/resolvers/sbom/resolver.go | 149 | // don't forget to set the refresher to nil otherwise it generates a memleak | COMMENT |
| MEDIUM | pkg/template/text/doc.go | 463 | constant. Here is a simple example: | CODE |
| MEDIUM | pkg/compliance/dbconfig/loader_test.go | 1751 | # initial_token allows you to specify tokens manually. While you can use # it with | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ternal/qbranch/anomalydetection-testbench/ui/README.md | 39 | ├── testbench.go # Scenario loading, analysis orchestration | CODE |
| MEDIUM | docs/public/components/creating-components.md | 56 | You can use the [command](../setup/required.md#tooling) `dda inv components.new-component comp/<COMPONENT_NAME>` to gene | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/new-e2e/tests/ha-agent/haagent_test.go | 79 | // TODO: Add test for Agent behaviour when receiving RC HA_AGENT messages | COMMENT |
| LOW | …orkdevice/profile/profiledefinition/validation_test.go | 950 | // TODO: Add test for ValidateEnrichMetricTags | COMMENT |