DefectDojo/django-DefectDojo

10.0

Adjusted Score

10.0

Raw Score

100%

Time Factor

2026-08-29

Last Push

4.9K

Stars

HTML

Language

1.7M

Lines of Code

6.7K

Files

8.3K

Pattern Hits

2026-08-29

Scan Date

0.17

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 971HIGH 151MEDIUM 673LOW 6534

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 8329 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hallucination Indicators971 hits · 7715 pts

Severity	File	Line	Snippet	Context
CRITICAL	dojo/models.py	12	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/validators.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/forms.py	12	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/system_settings/models.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/nikto/xml_parser.py	6	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_bugcrowd/importer.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_bugcrowd/parser.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_vulners/importer.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_sonarqube/importer.py	9	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_edgescan/importer.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/openscap/parser.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/ptart/ptart_parser_tools.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_cobalt/importer.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/tools/api_blackduck/importer.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/test/ui/views.py	12	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/importers/base_importer.py	6	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/importers/location_manager.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/importers/endpoint_manager.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/finding/models.py	1168	return self.test.engagement.product.github_pkey_set.all()[0].git_conf	CODE
CRITICAL	dojo/finding/ui/forms.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/finding/api/serializer.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/finding/api/views.py	6	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/file_uploads/models.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/location/utils.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	…jo/management/commands/jira_refactor_data_migration.py	37	# jira_project = jira_issue.finding.test.engagement.product.jira_project_set.all()[0]	COMMENT
CRITICAL	dojo/user/validators.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/user/api/serializer.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/url/models.py	10	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/url/validators.py	6	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/engagement/api/views.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/risk_acceptance/ui/forms.py	7	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/jira/models.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/jira/forms.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/endpoint/models.py	10	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/endpoint/utils.py	7	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/endpoint/api/serializer.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/api_v2/serializers.py	11	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/api_v2/exception_handler.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/api_v2/views.py	8	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/cicd_infrastructure/models.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/base_models/validators.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	dojo/notifications/api/serializer.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	…ns/0246_endpoint_idx_ep_product_lower_host_and_more.py	16	index=models.Index(models.F('product'), django.db.models.functions.text.Lower('host'), name='idx_ep_product_	CODE
CRITICAL	…o/db_migrations/0287_vulnerability_id_entity_tables.py	44	"indexes": [django.contrib.postgres.indexes.GinIndex(django.contrib.postgres.search.SearchVector("vulner	CODE
CRITICAL	dojo/db_migrations/0064_jira_refactor_populate.py	43	jira_projects = jira_issue.finding.test.engagement.product.jira_project_set.all()	CODE
CRITICAL	unittests/test_endpoint_model.py	6	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_importers_deleted_target.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_authorization_queryset_coverage.py	132	self.product.prod_type.__class__.objects.count(),	CODE
CRITICAL⚡	unittests/test_cicd_infrastructure.py	9	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_validators.py	1	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_importers_importer.py	5	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_importers_blank_engagement_status.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/test_location_models.py	2	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/tools/test_api_edgescan_importer.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/tools/test_api_cobalt_importer.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/tools/test_api_bugcrowd_importer.py	3	from django.core.exceptions import ValidationError	CODE
CRITICAL	unittests/tools/test_api_sonarqube_importer.py	4	from django.core.exceptions import ValidationError	CODE
CRITICAL	…tests/scans/xanitizer/multiple-findings-no-details.xml	138	- In method org.owasp.webgoat.plugin.HttpOnly.createCustomCookieValue()	CODE
CRITICAL	unittests/scans/xanitizer/multiple-findings.xml	324	- In method org.owasp.webgoat.plugin.HttpOnly.createCustomCookieValue()	CODE
CRITICAL	unittests/scans/xygeni/sast_many_findings.json	13236	"description" : "io.xygeni.sast.scanner.parser.ParseException: \nEncountered an error at (or somewhere around) /home	CODE
911 more matches not shown…

Hyper-Verbose Identifiers4625 hits · 4830 pts

Severity	File	Line	Snippet	Context
LOW	tests/notifications_test.py	36	def test_disable_personal_notification(self):	CODE
LOW	tests/notifications_test.py	52	def test_enable_personal_notification(self):	CODE
LOW	tests/notifications_test.py	65	def test_disable_system_notification(self):	CODE
LOW	tests/notifications_test.py	81	def test_enable_system_notification(self):	CODE
LOW	tests/notifications_test.py	95	def test_disable_template_notification(self):	CODE
LOW	tests/notifications_test.py	111	def test_enable_template_notification(self):	CODE
LOW	tests/notifications_test.py	124	def test_user_mail_notifications_change(self):	CODE
LOW⚡	tests/engagement_test.py	12	def test_list_active_engagements_found(self):	CODE
LOW⚡	tests/engagement_test.py	17	def test_list_active_engagements_empty(self):	CODE
LOW⚡	tests/engagement_test.py	22	def test_list_all_engagements_by_product(self):	CODE
LOW	tests/engagement_test.py	41	def test_edit_created_new_engagement(self):	CODE
LOW	tests/engagement_test.py	56	def test_close_new_engagement(self):	CODE
LOW	tests/engagement_test.py	67	def test_delete_new_closed_engagement(self):	CODE
LOW	tests/engagement_test.py	82	def test_new_ci_cd_engagement(self):	CODE
LOW	tests/engagement_presets_test.py	11	def _navigate_to_engagement_presets(self, driver):	CODE
LOW	tests/engagement_presets_test.py	23	def test_list_engagement_presets(self):	CODE
LOW	tests/engagement_presets_test.py	29	def test_add_engagement_preset(self):	CODE
LOW	tests/engagement_presets_test.py	43	def test_edit_engagement_preset(self):	CODE
LOW	tests/engagement_presets_test.py	58	def test_delete_engagement_preset(self):	CODE
LOW	tests/finding_extended_test.py	115	def test_ad_hoc_finding_create(self):	STRING
LOW	tests/reimport_scan_test.py	32	def test_import_scan_page_loads(self):	CODE
LOW	tests/reimport_scan_test.py	48	def test_import_scan_from_engagement(self):	CODE
LOW	tests/user_test.py	46	def test_create_user_with_writer_global_role(self):	CODE
LOW⚡	tests/user_test.py	84	def enable_user_profile_writing(self):	CODE
LOW⚡	tests/user_test.py	94	def disable_user_profile_writing(self):	CODE
LOW⚡	tests/user_test.py	104	def test_user_edit_permissions(self):	CODE
LOW	tests/user_test.py	159	def test_user_with_writer_role_delete(self):	CODE
LOW	tests/user_test.py	196	def test_user_profile_form_disabled(self):	CODE
LOW	tests/user_test.py	202	def test_user_profile_form_enabled(self):	CODE
LOW	tests/user_test.py	219	def test_user_edit_configuration(self):	CODE
LOW	tests/threat_model_test.py	14	def test_create_engagement_for_threatmodel(self):	CODE
LOW	tests/threat_model_test.py	29	def test_view_threatmodel_upload_page(self):	CODE
LOW	tests/user_profile_test.py	12	def test_view_profile_page_loads(self):	CODE
LOW	tests/user_profile_test.py	40	def test_change_password_page_loads(self):	CODE
LOW	tests/report_builder_test.py	41	def assert_report_charts_painted(self, chart_ids):	CODE
LOW	tests/report_builder_test.py	166	def test_product_endpoint_report(self):	CODE
LOW	tests/report_builder_test.py	217	def add_report_tests_to_suite(suite):	CODE
LOW	tests/false_positive_history_test.py	69	def edit_toggle_false_positive(self, finding_url):	CODE
LOW	tests/false_positive_history_test.py	101	def test_retroactive_edit_finding(self):	CODE
LOW	tests/false_positive_history_test.py	131	def test_retroactive_bulk_edit_finding(self):	CODE
LOW	tests/ibm_appscan_test.py	16	def test_import_ibm_app_scan_result(self):	CODE
LOW	tests/announcement_banner_test.py	56	def test_create_dismissable_announcement(self):	CODE
LOW	tests/announcement_banner_test.py	77	def test_dismissing_announcement_does_not_dismiss_for_others(self):	CODE
LOW	tests/announcement_banner_test.py	103	def test_announcement_ui_disabled_when_set(self):	CODE
LOW	tests/announcement_banner_test.py	121	def test_announcement_empty_after_removal(self):	CODE
LOW	tests/calendar_test.py	14	def test_create_engagement_for_calendar(self):	CODE
LOW	tests/calendar_test.py	29	def test_engagement_calendar_loads(self):	CODE
LOW	tests/calendar_test.py	41	def test_calendar_default_loads(self):	CODE
LOW	tests/calendar_test.py	47	def test_calendar_filter_apply(self):	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	107	def test_add_same_engagement_engagement(self):	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	129	def test_import_same_engagement_tests(self):	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	190	def test_check_endpoint_status(self):	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	199	def test_add_same_product_engagement(self):	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	237	def test_import_same_product_tests(self):	CODE
LOW	tests/close_old_findings_dedupe_test.py	54	def test_enable_deduplication(self):	CODE
LOW	tests/close_old_findings_dedupe_test.py	168	def test_close_same_engagement_tests(self):	CODE
LOW	tests/close_old_findings_dedupe_test.py	275	def test_close_same_product_tests(self):	CODE
LOW	tests/close_old_findings_dedupe_test.py	297	def test_check_same_product_status(self):	CODE
LOW	tests/close_old_findings_dedupe_test.py	301	def add_close_old_tests_to_suite(suite, *, jira=False, github=False, block_execution=False):	CODE
LOW	tests/action_history_test.py	13	def test_product_action_history(self):	CODE
4565 more matches not shown…

Decorative Section Separators402 hits · 1450 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	19	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	23	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	102	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	105	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	121	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	127	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	193	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	196	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	228	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_dedupe_test.py	234	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	21	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	23	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	176	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	179	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	308	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	314	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	376	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/dedupe_test.py	379	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	tests/dedupe_test.py	101	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	tests/dedupe_test.py	104	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	tests/dedupe_test.py	447	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	tests/dedupe_test.py	449	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	18	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	21	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	62	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	64	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	79	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	85	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	147	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	150	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	182	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/close_old_findings_test.py	188	# --------------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	dojo/admin.py	39	# ==============================	COMMENT
MEDIUM	dojo/admin.py	41	# ==============================	COMMENT
MEDIUM	dojo/utils.py	976	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	dojo/utils.py	995	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	dojo/utils_ssrf.py	109	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	dojo/utils_ssrf.py	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	dojo/metrics/views.py	712	# ---------------	COMMENT
MEDIUM	dojo/metrics/views.py	727	# --------------------	COMMENT
MEDIUM	dojo/metrics/views.py	761	# --------------------------	COMMENT
MEDIUM⚡	dojo/metrics/views.py	778	# --------------	COMMENT
MEDIUM⚡	dojo/metrics/views.py	783	# ----------------------------------	COMMENT
MEDIUM⚡	dojo/metrics/views.py	793	# -------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	684	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	686	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	695	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	697	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	898	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	900	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	905	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	907	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1869	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1871	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1880	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1882	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1885	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1887	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1890	# ------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	dojo/settings/settings.dist.py	1892	# ------------------------------------------------------------------------------	COMMENT
342 more matches not shown…

Deep Nesting423 hits · 383 pts

Severity	File	Line	Context
LOW	tests/base_test_class.py	412	CODE
LOW	tests/questionnaire_advanced_test.py	144	CODE
LOW	dojo/tasks.py	177	CODE
LOW	dojo/forms.py	556	CODE
LOW	dojo/utils.py	134	CODE
LOW	dojo/utils.py	233	CODE
LOW	dojo/utils.py	310	CODE
LOW	dojo/utils.py	419	CODE
LOW	dojo/utils.py	509	CODE
LOW	dojo/utils.py	1065	CODE
LOW	dojo/utils.py	1133	CODE
LOW	dojo/utils.py	1249	CODE
LOW	dojo/utils.py	1643	CODE
LOW	dojo/utils.py	1821	CODE
LOW	dojo/utils.py	2113	CODE
LOW	dojo/utils.py	2314	CODE
LOW	dojo/filters.py	313	CODE
LOW	dojo/views.py	43	CODE
LOW	dojo/utils_cascade_delete.py	64	CODE
LOW	dojo/decorators.py	145	CODE
LOW	dojo/decorators.py	146	CODE
LOW	dojo/decorators.py	148	CODE
LOW	dojo/benchmark/ui/views.py	40	CODE
LOW	dojo/benchmark/ui/views.py	88	CODE
LOW	dojo/templatetags/display_tags.py	166	CODE
LOW	dojo/templatetags/display_tags.py	275	CODE
LOW	dojo/templatetags/display_tags.py	379	CODE
LOW	dojo/templatetags/display_tags.py	860	CODE
LOW	dojo/metrics/views.py	164	CODE
LOW	dojo/system_settings/ui/views.py	51	CODE
LOW	dojo/tools/utils.py	78	CODE
LOW	dojo/tools/testssl/parser.py	20	CODE
LOW	dojo/tools/qualys/csv_parser.py	180	CODE
LOW	dojo/tools/qualys/parser.py	204	CODE
LOW	dojo/tools/retirejs/parser.py	23	CODE
LOW	dojo/tools/retirejs/parser.py	70	CODE
LOW	dojo/tools/appspider/parser.py	95	CODE
LOW	dojo/tools/ggshield/parser.py	24	CODE
LOW	dojo/tools/anchore_engine/parser.py	100	CODE
LOW	dojo/tools/burp_api/parser.py	32	CODE
LOW	dojo/tools/burp_api/parser.py	107	CODE
LOW	dojo/tools/php_security_audit_v2/parser.py	19	CODE
LOW	dojo/tools/bundler_audit/parser.py	21	CODE
LOW	dojo/tools/immuniweb/parser.py	117	CODE
LOW	dojo/tools/pip_audit/parser.py	56	CODE
LOW	dojo/tools/talisman/parser.py	25	CODE
LOW	dojo/tools/sarif/parser.py	470	CODE
LOW	dojo/tools/sarif/parser.py	525	CODE
LOW	dojo/tools/sarif/parser.py	557	CODE
LOW	dojo/tools/sarif/parser.py	598	CODE
LOW	dojo/tools/sarif/parser.py	149	CODE
LOW	dojo/tools/sarif/parser.py	333	CODE
LOW	dojo/tools/semgrep_pro/parser.py	20	CODE
LOW	dojo/tools/npm_audit_7_plus/parser.py	95	CODE
LOW	dojo/tools/npm_audit_7_plus/parser.py	184	CODE
LOW	dojo/tools/burp_dastardly/parser.py	27	CODE
LOW	dojo/tools/anchorectl_vulns/parser.py	16	CODE
LOW	dojo/tools/snyk_issue_api/parser.py	79	CODE
LOW	dojo/tools/aide/parser.py	75	CODE
LOW	dojo/tools/checkmarx/parser.py	101	CODE
363 more matches not shown…

Cross-Language Confusion66 hits · 374 pts

Severity	File	Line	Snippet	Context
HIGH	dojo/tools/composer_audit/parser.py	120	The CVE is a top-level field but is often null, in which case the GitHub advisory id from	STRING
HIGH	dojo/tools/checkmarx_osa/parser.py	128	# 1->2 = Certain (0 is like null)	COMMENT
HIGH	dojo/test/ui/views.py	705	jira_services.push(new_finding)	CODE
HIGH	dojo/importers/default_importer.py	344	jira_services.push(findings[0].finding_group)	CODE
HIGH	dojo/importers/default_importer.py	346	jira_services.push(findings[0])	CODE
HIGH	dojo/importers/default_importer.py	454	jira_services.push(finding_group)	CODE
HIGH	dojo/importers/default_reimporter.py	639	jira_services.push(finding_group)	CODE
HIGH	dojo/importers/default_reimporter.py	1133	jira_services.push(object_to_push)	CODE
HIGH	dojo/importers/default_reimporter.py	1144	jira_services.push(finding_group)	CODE
HIGH	dojo/finding/helper.py	253	jira_services.push(finding_group)	CODE
HIGH	dojo/finding/helper.py	281	jira_services.push(group)	CODE
HIGH	dojo/finding/helper.py	359	jira_services.push(group)	CODE
HIGH	dojo/finding/helper.py	461	jira_services.push(finding)	CODE
HIGH	dojo/finding/helper.py	463	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/helper.py	582	jira_services.push(object_to_push)	CODE
HIGH	dojo/finding/helper.py	1624	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/ui/views.py	1055	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/ui/views.py	1338	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/ui/views.py	1396	jira_services.push(finding)	CODE
HIGH	dojo/finding/ui/views.py	1606	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/ui/views.py	1700	jira_services.push(finding.finding_group)	CODE
HIGH	dojo/finding/ui/views.py	2856	jira_services.push(group)	CODE
HIGH	dojo/finding/ui/views.py	2907	jira_services.push(finding)	CODE
HIGH	dojo/finding/ui/views.py	3304	if jira_services.push_succeeded(jira_services.push(finding)):	CODE
HIGH	dojo/finding/api/serializer.py	586	success, message = jira_services.push(instance, force_sync=True)	CODE
HIGH	dojo/finding/api/serializer.py	767	jira_services.push(new_finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	121	jira_services.push(finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	174	jira_services.push(finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	220	jira_services.push(finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	248	jira_services.push(finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	442	jira_services.push(finding)	CODE
HIGH	dojo/risk_acceptance/helper.py	482	jira_services.push(finding)	CODE
HIGH	dojo/api_v2/exception_handler.py	47	(foreign key, not-null, check constraint) points at a defect on our side	STRING
HIGH	dojo/finding_group/views.py	100	jira_services.push(finding_group, force_sync=True)	CODE
HIGH	dojo/finding_group/views.py	197	if jira_services.push_succeeded(jira_services.push(group, force_sync=True)):	CODE
HIGH⚡	unittests/test_jira_webhook.py	168	"customfield_10182":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	170	"customfield_12043":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	171	"customfield_10340":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	172	"customfield_10341":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	173	"customfield_12045":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	174	"customfield_10100":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	181	"customfield_10740":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	187	"timeestimate":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	188	"aggregatetimeoriginalestimate":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	223	"timeoriginalestimate":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	224	"customfield_10052":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	226	"customfield_10010":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	231	"aggregatetimeestimate":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	271	"customfield_10641":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	272	"environment":null,	CODE
HIGH⚡	unittests/test_jira_webhook.py	273	"duedate":null,	CODE
HIGH	unittests/test_jira_webhook.py	156	"resolutiondate":null,	CODE
HIGH⚡	unittests/test_filter_finding_mitigation.py	102	# Returns only findings with non-null, non-empty mitigation	COMMENT
HIGH	unittests/test_apiv2_unique_violation_conflict.py	25	(foreign key, not-null, check constraints) indicate a server-side defect and	STRING
HIGH	unittests/tools/test_kubelinter_parser.py	26	A clean scan reports "Reports": null, not an empty list.	STRING
HIGH⚡	unittests/tools/test_kubelinter_parser.py	41	list(KubeLinterParser().get_findings(io.StringIO('{"Reports": null}'), Test())),	CODE
HIGH	unittests/tools/test_zap_parser.py	418	{"data":[{"item1":"[FEATURE_FLAG_1]","item2":true},{"item1":"[FEATURE_FLAG_2]","item2":true},{"i	CODE
HIGH	unittests/tools/test_sonarqube_parser.py	63	"Connection conn = null;\n"	CODE
HIGH	unittests/tools/test_sonarqube_parser.py	76	"Connection conn = null;\n"	CODE
HIGH	unittests/tools/test_sonarqube_parser.py	113	"Connection conn = null;\n"	CODE
6 more matches not shown…

Modern Structural Boilerplate332 hits · 344 pts

Severity	File	Line	Snippet	Context
LOW	docker/install_chrome_dependencies.py	9	logger = logging.getLogger(__name__)	CODE
LOW⚡	tests/close_old_findings_dedupe_test.py	15	logger = logging.getLogger(__name__)	CODE
LOW	tests/zap.py	13	logger = logging.getLogger(__name__)	CODE
LOW	tests/product_type_test.py	8	logger = logging.getLogger(__name__)	CODE
LOW	tests/engagement_extended_test.py	14	logger = logging.getLogger(__name__)	CODE
LOW	tests/product_member_test.py	13	logger = logging.getLogger(__name__)	CODE
LOW	tests/product_type_member_test.py	12	logger = logging.getLogger(__name__)	CODE
LOW	tests/notes_test.py	10	logger = logging.getLogger(__name__)	CODE
LOW⚡	tests/base_test_class.py	20	logger = logging.getLogger(__name__)	CODE
LOW⚡	tests/finding_test.py	16	logger = logging.getLogger(__name__)	CODE
LOW⚡	tests/dedupe_test.py	17	logger = logging.getLogger(__name__)	CODE
LOW⚡	tests/close_old_findings_test.py	14	logger = logging.getLogger(__name__)	CODE
LOW	dojo/labels.py	35	logger = logging.getLogger(__name__)	CODE
LOW	dojo/models.py	25	logger = logging.getLogger(__name__)	CODE
LOW	dojo/validators.py	11	logger = logging.getLogger(__name__)	CODE
LOW	dojo/product_announcements.py	8	logger = logging.getLogger(__name__)	CODE
LOW	dojo/apps.py	12	logger = logging.getLogger(__name__)	CODE
LOW	dojo/forms.py	73	logger = logging.getLogger(__name__)	CODE
LOW	dojo/utils.py	92	logger = logging.getLogger(__name__)	CODE
LOW	dojo/celery.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/urls.py	93	logger = logging.getLogger(__name__)	CODE
LOW	dojo/utils_watson_prefetch.py	23	logger = logging.getLogger(__name__)	CODE
LOW	dojo/filters.py	60	logger = logging.getLogger(__name__)	CODE
LOW	dojo/middleware.py	27	logger = logging.getLogger(__name__)	CODE
LOW	dojo/views.py	25	logger = logging.getLogger(__name__)	CODE
LOW	dojo/utils_cascade_delete.py	17	logger = logging.getLogger(__name__)	CODE
LOW	dojo/wsgi.py	21	logger = logging.getLogger(__name__)	CODE
LOW	dojo/decorators.py	14	logger = logging.getLogger(__name__)	CODE
LOW	dojo/benchmark/signals.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/benchmark/ui/views.py	27	logger = logging.getLogger(__name__)	CODE
LOW	dojo/templatetags/display_tags.py	35	logger = logging.getLogger(__name__)	CODE
LOW	dojo/metrics/utils.py	36	logger = logging.getLogger(__name__)	CODE
LOW	dojo/metrics/views.py	49	logger = logging.getLogger(__name__)	CODE
LOW	dojo/settings/settings.dist.py	35	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tool_type/ui/views.py	15	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tool_type/api/views.py	11	logger = logging.getLogger(__name__)	CODE
LOW	dojo/system_settings/ui/views.py	13	logger = logging.getLogger(__name__)	CODE
LOW	dojo/note_type/ui/views.py	13	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/factory.py	13	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/utils.py	8	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/tool_issue_updater.py	13	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/nikto/xml_parser.py	12	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/twistlock/parser.py	14	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/qualys/parser.py	15	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/promptfoo/parser.py	6	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/burp_api/parser.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/immuniweb/parser.py	14	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/neuvector/parser.py	6	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/sarif/parser.py	14	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/npm_audit_7_plus/parser.py	8	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/burp_dastardly/parser.py	7	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/checkmarx/parser.py	13	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/fortify/fpr_parser.py	13	logger = logging.getLogger(__name__)	CODE
LOW⚡	dojo/tools/mend/parser.py	11	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/outpost24/parser.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/govulncheck/parser.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/api_bugcrowd/importer.py	9	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/api_bugcrowd/parser.py	20	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/wapiti/parser.py	11	logger = logging.getLogger(__name__)	CODE
LOW	dojo/tools/api_vulners/importer.py	9	logger = logging.getLogger(__name__)	CODE
272 more matches not shown…

Cross-File Repetition67 hits · 335 pts

Severity	File	Line	Snippet	Context
HIGH	dojo/tools/tfsec/parser.py	0	a class that can be used to parse the kics json report file	STRING
HIGH	dojo/tools/detect_secrets/parser.py	0	a class that can be used to parse the kics json report file	STRING
HIGH	dojo/tools/terrascan/parser.py	0	a class that can be used to parse the kics json report file	STRING
HIGH	dojo/tools/kics/parser.py	0	a class that can be used to parse the kics json report file	STRING
HIGH	dojo/tools/ggshield/parser.py	0	a class that can be used to parse the dockle json report files	STRING
HIGH	dojo/tools/gitleaks/parser.py	0	a class that can be used to parse the dockle json report files	STRING
HIGH	dojo/tools/talisman/parser.py	0	a class that can be used to parse the dockle json report files	STRING
HIGH	dojo/tools/wfuzz/parser.py	0	a class that can be used to parse the dockle json report files	STRING
HIGH	dojo/tools/dockle/parser.py	0	a class that can be used to parse the dockle json report files	STRING
HIGH	dojo/tools/tenable/parser.py	0	return the list of dedupe fields used in the tenable csv parser fields: - title: made using the name, plugin name, and a	STRING
HIGH	dojo/tools/tenable/xml_format.py	0	return the list of dedupe fields used in the tenable csv parser fields: - title: made using the name, plugin name, and a	STRING
HIGH	dojo/tools/tenable/csv_format.py	0	return the list of dedupe fields used in the tenable csv parser fields: - title: made using the name, plugin name, and a	STRING
HIGH	dojo/tools/gitlab_container_scan/parser.py	0	normalise gitlab's severity to defectdojo's (critical, high, medium, low, unknown, info) -> (critical, high, medium, low	STRING
HIGH	dojo/tools/gitlab_secret_detection_report/parser.py	0	normalise gitlab's severity to defectdojo's (critical, high, medium, low, unknown, info) -> (critical, high, medium, low	STRING
HIGH	dojo/tools/gitlab_api_fuzzing/parser.py	0	normalise gitlab's severity to defectdojo's (critical, high, medium, low, unknown, info) -> (critical, high, medium, low	STRING
HIGH	dojo/importers/location_manager.py	0	record endpoints from the finding + any form-added extras for later batch creation.	STRING
HIGH	dojo/importers/base_location_manager.py	0	record endpoints from the finding + any form-added extras for later batch creation.	STRING
HIGH	dojo/importers/endpoint_manager.py	0	record endpoints from the finding + any form-added extras for later batch creation.	STRING
HIGH	dojo/importers/location_manager.py	0	accumulate status changes (mitigate/reactivate) based on old vs new finding.	STRING
HIGH	dojo/importers/base_location_manager.py	0	accumulate status changes (mitigate/reactivate) based on old vs new finding.	STRING
HIGH	dojo/importers/endpoint_manager.py	0	accumulate status changes (mitigate/reactivate) based on old vs new finding.	STRING
HIGH	dojo/management/commands/pghistory_backfill_simple.py	0	get the list of excluded fields for a specific model from pghistory configuration.	STRING
HIGH	dojo/management/commands/pghistory_backfill.py	0	get the list of excluded fields for a specific model from pghistory configuration.	STRING
HIGH	dojo/auditlog/backfill.py	0	get the list of excluded fields for a specific model from pghistory configuration.	STRING
HIGH	dojo/db_migrations/0242_file_upload_cleanup.py	0	we cannot possibly return to the original state without knowing the original value at the time the migration is revoked.	STRING
HIGH	dojo/db_migrations/0235_clean_tags.py	0	we cannot possibly return to the original state without knowing the original value at the time the migration is revoked.	STRING
HIGH	dojo/db_migrations/0227_migrate_tags.py	0	we cannot possibly return to the original state without knowing the original value at the time the migration is revoked.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.de.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…ports/dashboards/PRO__custom_dashboards_api.zh-hans.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.fr.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.it.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.es.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…reports/dashboards/PRO__custom_dashboards_api.pt-br.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.ja.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…trics_reports/dashboards/PRO__custom_dashboards_api.md	0	build a defectdojo pro dashboard layout end-to-end using only the stdlib.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.de.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…ports/dashboards/PRO__custom_dashboards_api.zh-hans.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.fr.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.it.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.es.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…reports/dashboards/PRO__custom_dashboards_api.pt-br.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.ja.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…trics_reports/dashboards/PRO__custom_dashboards_api.md	0	make an authenticated request. returns parsed json.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.de.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…ports/dashboards/PRO__custom_dashboards_api.zh-hans.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.fr.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.it.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.es.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…reports/dashboards/PRO__custom_dashboards_api.pt-br.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…cs_reports/dashboards/PRO__custom_dashboards_api.ja.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…trics_reports/dashboards/PRO__custom_dashboards_api.md	0	build a (widget, position) pair sharing a freshly generated uuid.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.it.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.es.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.fr.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.de.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…ics_reports/reports/PRO__report_builder_api.zh-hans.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…ent/metrics_reports/reports/PRO__report_builder_api.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.ja.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…trics_reports/reports/PRO__report_builder_api.pt-br.md	0	build and run a defectdojo pro report end-to-end using only the stdlib.	STRING
HIGH	…/metrics_reports/reports/PRO__report_builder_api.it.md	0	make an authenticated request. returns parsed json (or raw bytes).	STRING
7 more matches not shown…

Excessive Try-Catch Wrapping273 hits · 291 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/base_test_class.py	31	except Exception:	CODE
MEDIUM	tests/base_test_class.py	28	def wrapper(self, args, *kwargs):	CODE
LOW	dojo/tasks.py	220	except Exception as e:	CODE
LOW	dojo/tasks.py	254	except Exception as e:	CODE
LOW	dojo/tasks.py	260	except Exception as e:	CODE
LOW	dojo/product_announcements.py	61	except Exception:	CODE
LOW	dojo/context_processors.py	105	except Exception:	CODE
MEDIUM	dojo/utils.py	1198	def get_celery_queue_length():	CODE
LOW	dojo/utils.py	405	except Exception:	CODE
LOW	dojo/utils.py	545	except Exception:	CODE
LOW	dojo/utils.py	556	except Exception:	CODE
LOW	dojo/utils.py	576	except Exception:	CODE
LOW	dojo/utils.py	583	except Exception:	CODE
LOW	dojo/utils.py	612	except Exception:	CODE
LOW	dojo/utils.py	1194	except Exception:	CODE
LOW	dojo/utils.py	1206	except Exception:	CODE
LOW	dojo/utils.py	1244	except Exception:	CODE
LOW	dojo/utils.py	1261	except Exception:	CODE
LOW	dojo/utils.py	1287	except Exception:	CODE
LOW	dojo/utils_ssrf.py	89	except Exception as exc:	CODE
LOW	dojo/utils_watson_prefetch.py	105	except Exception:	CODE
LOW	dojo/utils_watson_prefetch.py	125	except Exception:	CODE
LOW⚡	dojo/filters.py	351	except Exception:	CODE
LOW	dojo/middleware.py	156	except Exception as e:	CODE
LOW	dojo/benchmark/ui/views.py	211	except Exception:	CODE
LOW	dojo/templatetags/get_banner.py	29	except Exception:	CODE
MEDIUM	dojo/templatetags/get_banner.py	12	def get_banner_conf(attribute):	CODE
LOW	dojo/templatetags/display_tags.py	217	except Exception:	CODE
LOW	dojo/tools/factory.py	51	except Exception:	CODE
MEDIUM	dojo/tools/factory.py	48	def get_inactive_test_types():	CODE
LOW	dojo/tools/twistlock/parser.py	173	except Exception:	CODE
LOW	dojo/tools/twistlock/parser.py	175	except Exception:	CODE
MEDIUM	dojo/tools/twistlock/parser.py	168	def parse_json(self, json_output):	CODE
LOW	dojo/tools/qualys/csv_parser.py	210	except Exception:	CODE
LOW	dojo/tools/qualys/csv_parser.py	259	except Exception:	CODE
LOW	dojo/tools/qualys/parser.py	238	except Exception:	CODE
LOW	dojo/tools/php_security_audit_v2/parser.py	23	except Exception:	CODE
LOW	dojo/tools/neuvector/parser.py	26	except Exception:	CODE
LOW	dojo/tools/neuvector/parser.py	28	except Exception:	CODE
MEDIUM	dojo/tools/neuvector/parser.py	21	def parse_json(self, json_output):	CODE
LOW	dojo/tools/npm_audit_7_plus/parser.py	54	except Exception:	CODE
LOW	dojo/tools/npm_audit_7_plus/parser.py	56	except Exception:	CODE
LOW	dojo/tools/snyk_issue_api/parser.py	28	except Exception:	CODE
LOW	dojo/tools/snyk_issue_api/parser.py	30	except Exception:	CODE
MEDIUM	dojo/tools/snyk_issue_api/parser.py	23	def parse_json(self, json_output):	CODE
LOW⚡	dojo/tools/mend/parser.py	31	except Exception:	CODE
LOW	dojo/tools/mend/parser.py	96	except Exception:	CODE
LOW	dojo/tools/mend/parser.py	130	except Exception:	CODE
LOW	dojo/tools/mend/parser.py	159	except Exception:	CODE
LOW	dojo/tools/mend/parser.py	171	except Exception:	CODE
LOW	dojo/tools/govulncheck/parser.py	154	except Exception:	CODE
LOW	dojo/tools/rusty_hog/parser.py	24	except Exception:	CODE
LOW	dojo/tools/veracode_sca/parser.py	75	except Exception:	CODE
LOW	dojo/tools/veracode_sca/parser.py	214	except Exception:	CODE
LOW	dojo/tools/netsparker/parser.py	47	except Exception:	CODE
LOW	dojo/tools/netsparker/parser.py	59	except Exception:	CODE
LOW	dojo/tools/legitify/parser.py	33	except Exception:	CODE
LOW	dojo/tools/legitify/parser.py	35	except Exception:	CODE
MEDIUM	dojo/tools/legitify/parser.py	28	def parse_json(self, file):	CODE
LOW	dojo/tools/api_sonarqube/importer.py	255	except Exception as e:	CODE
213 more matches not shown…

Self-Referential Comments95 hits · 284 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	tests/tool_product_test.py	48	# Create a custom tool type	COMMENT
MEDIUM	tests/tool_product_test.py	81	# Create a new tool configuration using a non-API tool type	COMMENT
MEDIUM	dojo/utils.py	897	# Create the folder	COMMENT
MEDIUM	dojo/decorators.py	54	# Create a shared instance	COMMENT
MEDIUM	dojo/benchmark/ui/views.py	206	# Create the benchmark summary category	COMMENT
MEDIUM	dojo/templatetags/get_banner.py	19	# Create a copy of ALLOWED_ATTRIBUTES to avoid mutating the global	COMMENT
MEDIUM	dojo/templatetags/display_tags.py	102	# Create a copy of ALLOWED_ATTRIBUTES to avoid mutating the global	COMMENT
MEDIUM	dojo/settings/settings.dist.py	1728	# Create a unique finding for all findings in qualys WAS parser	COMMENT
MEDIUM	dojo/tools/cred_scan/parser.py	40	# Create the description	COMMENT
MEDIUM	dojo/tools/wiz/parser.py	100	# Create the finding object	COMMENT
MEDIUM	dojo/tools/wiz/parser.py	170	# Create the finding object	COMMENT
MEDIUM	dojo/tools/tenable/xml_format.py	308	# Create a new url object	COMMENT
MEDIUM	dojo/tools/tenable/xml_format.py	322	# Create a new endpoint object	COMMENT
MEDIUM	dojo/tools/tenable/csv_format.py	200	# Create the finding object	COMMENT
MEDIUM	dojo/tools/checkmarx_one/parser.py	89	# Create the finding object	COMMENT
MEDIUM	dojo/tools/checkmarx_one/parser.py	186	# Create the finding object	COMMENT
MEDIUM	dojo/tools/osv_scanner/parser.py	135	# Define the description	COMMENT
MEDIUM	dojo/tools/orca_security/csv_parser.py	78	# Create the Finding object with all mapped fields	COMMENT
MEDIUM	dojo/tools/orca_security/json_parser.py	83	# Create the Finding object with all mapped fields	COMMENT
MEDIUM	dojo/tools/veracode/json_parser.py	206	# Create the Location object from the url	COMMENT
MEDIUM	dojo/tools/veracode/json_parser.py	215	# Create the Location object from all the pieces	COMMENT
MEDIUM	dojo/tools/veracode/json_parser.py	226	# Create the Endpoint object from the url	COMMENT
MEDIUM	dojo/tools/veracode/json_parser.py	235	# Create the Endpoint object from all of the pieces	COMMENT
MEDIUM	dojo/tools/sonarqube/soprasteria_helper.py	52	# Create the finding and add it into the dupes list	COMMENT
MEDIUM	dojo/tools/sonarqube/soprasteria_helper.py	111	# Create the finding and add it into the dupes list	COMMENT
MEDIUM	dojo/tools/openreports/parser.py	108	# Create a ParserTest for each source	STRING
MEDIUM	dojo/tools/asff/parser.py	65	# Define the control_description	COMMENT
MEDIUM⚡	dojo/tools/trivy/parser.py	497	# Create the header row	STRING
MEDIUM⚡	dojo/tools/trivy/parser.py	500	# Create the table string	STRING
MEDIUM	dojo/test/ui/views.py	588	# Create a notification	COMMENT
MEDIUM	dojo/importers/base_importer.py	308	# Create a new test if it has not already been created	COMMENT
MEDIUM	dojo/importers/base_importer.py	546	# Create a dictionary to stuff into the test import object	COMMENT
MEDIUM	dojo/importers/base_importer.py	564	# Create the test import object	COMMENT
MEDIUM	dojo/importers/base_importer.py	575	# Create a history record for each finding	COMMENT
MEDIUM	dojo/importers/default_importer.py	137	# Create a test import history object to record the flags sent to the importer	COMMENT
MEDIUM	dojo/importers/default_importer.py	473	# Create a new test if it has not already been created	COMMENT
MEDIUM	dojo/importers/auto_create_context.py	262	# Create the product	COMMENT
MEDIUM	dojo/importers/auto_create_context.py	322	# Create the engagement	COMMENT
MEDIUM	dojo/importers/default_reimporter.py	143	# Create a test import history object to record the flags sent to the importer	COMMENT
MEDIUM	dojo/api_helpers/serializers.py	66	# Initialize the serializer class	COMMENT
MEDIUM	dojo/finding/ui/views.py	615	# Create the note object	COMMENT
MEDIUM	dojo/finding/api/serializer.py	769	# Create a notification	COMMENT
MEDIUM	dojo/location/models.py	409	# Create the list of hashes of the supplied locations; we will also use this to reconstruct the initial ordering	COMMENT
MEDIUM	dojo/location/models.py	426	# Create the list of new locations to create	COMMENT
MEDIUM	dojo/management/commands/pghistory_backfill_simple.py	37	# Define the models to process	COMMENT
MEDIUM	dojo/management/commands/import_surveys.py	33	# Create the new id line	COMMENT
MEDIUM	dojo/product/ui/views.py	1527	# Create the necessary nested objects	COMMENT
MEDIUM	dojo/product/ui/views.py	1539	# Create the necessary nested objects	COMMENT
MEDIUM	dojo/url/models.py	383	# Create the initial object, assuming no exceptions are thrown	COMMENT
MEDIUM	dojo/url/ui/views.py	218	# Create the product tab for the view	COMMENT
MEDIUM	dojo/url/ui/views.py	305	# Create the product tab for the view	COMMENT
MEDIUM	dojo/engagement/ui/views.py	973	# Create the engagement if necessary	COMMENT
MEDIUM	dojo/jira/helper.py	1069	# Create a new issue in Jira with the fields set in the last step	COMMENT
MEDIUM	dojo/db_migrations/0106_role_model.py	24	# Create the table for the role	COMMENT
MEDIUM	dojo/db_migrations/0049_create_endpoint_status.py	23	# Create a new status for each endpoint	COMMENT
MEDIUM	unittests/test_false_positive_history_logic.py	1758	# Create a finding before the batch import so it pre-exists.	COMMENT
MEDIUM	unittests/test_user_ui_timestamps.py	25	# Create a target user and rotate their token at a fixed time.	COMMENT
MEDIUM	unittests/test_flush_auditlog.py	42	# Create a test product type to generate events	COMMENT
MEDIUM⚡	unittests/test_flush_auditlog.py	64	# Create a test product type	COMMENT
MEDIUM⚡	unittests/test_endpoint_model.py	172	# Define the product	COMMENT
35 more matches not shown…

Structural Annotation Overuse147 hits · 238 pts

Severity	File	Line	Snippet	Context
LOW⚡	dojo/utils.py	1882	# Step 1: Determine finding scope	COMMENT
LOW⚡	dojo/utils.py	1889	# Step 2: Prepare duplicate clusters (must happen before any deletion)	COMMENT
LOW⚡	dojo/utils.py	1894	# Step 3: Delete the main scope findings	COMMENT
LOW⚡	dojo/utils.py	1902	# Step 4: Delete all remaining related objects (Tests, Engagements,	COMMENT
LOW⚡	dojo/utils.py	1911	# Step 5: Delete the top-level object via ORM to fire Django signals	COMMENT
LOW⚡	dojo/utils.py	1916	# Step 6: Recalculate product grade once (Engagement/Test deletes only). Skip when the	COMMENT
LOW⚡	dojo/importers/endpoint_manager.py	254	# Step 1: Ensure all recorded endpoints exist in DB	COMMENT
LOW⚡	dojo/importers/endpoint_manager.py	257	# Step 2: Bulk-create Endpoint_Status rows	COMMENT
LOW	dojo/importers/endpoint_manager.py	272	# Step 3: Bulk-update mitigated endpoint statuses	COMMENT
LOW	dojo/importers/endpoint_manager.py	291	# Step 4: Bulk-update reactivated endpoint statuses	COMMENT
LOW	dojo/finding/helper.py	1259	# NOTE: This function is recursive and does per-finding DB queries without prefetching.	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	61	# Step 1: Create CICDInfrastructure model	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	76	# Step 2: Remove old pgtrigger triggers FIRST.	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	96	# Step 3: Add new FK fields to Engagement (before removing old ones)	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	136	# Step 4: Migrate data from Tool_Configuration to CICDInfrastructure	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	149	# Step 5: Remove old FK fields from Engagement	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	162	# Step 6: Update pghistory event table FK fields to point to CICDInfrastructure	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	193	# Step 7: Re-create pgtrigger triggers with new column names	COMMENT
LOW⚡	…rations/0253_migrate_vulnerability_ids_to_textfield.py	93	# Step 1: Migrate data from Vulnerability_Id_Template to vulnerability_ids_text	COMMENT
LOW⚡	…rations/0253_migrate_vulnerability_ids_to_textfield.py	98	# Step 2: Delete old Vulnerability_Id_Template records	COMMENT
LOW⚡	unittests/test_import_reimport.py	782	# Step 2: Mitigate finding A	COMMENT
LOW⚡	unittests/test_import_reimport.py	790	# Step 3: Import again into engagement 2 → tries to deduplicate against A (mitigated),	COMMENT
LOW⚡	unittests/test_import_reimport.py	907	# Step 2: Mitigate finding A	COMMENT
LOW⚡	unittests/test_import_reimport.py	915	# Step 3: Import again into engagement 2 → exception, finding B created as new active	COMMENT
LOW⚡	unittests/test_import_reimport.py	970	# Step 5: Mitigate finding B	COMMENT
LOW⚡	unittests/test_import_reimport.py	978	# Step 6: Import again into engagement 4 → should find A (mitigated, exception), B (mitigated, exception),	COMMENT
LOW⚡	unittests/test_import_reimport.py	2640	# Step 3: test1's 4 findings must all still be active	COMMENT
LOW⚡	unittests/test_import_reimport.py	2656	# Step 1: Baseline import (default batch size)	COMMENT
LOW⚡	unittests/test_import_reimport.py	2827	# Step 1: Baseline import (default batch size)	COMMENT
LOW	unittests/test_import_reimport.py	755	# Step 1: Import scan into engagement 1 → finding A (active)	COMMENT
LOW	unittests/test_import_reimport.py	820	# Step 4: Import again into engagement 3 → should find both A (mitigated) and B (active)	COMMENT
LOW	unittests/test_import_reimport.py	883	# Step 1: Import scan into engagement 1 → finding A (active)	COMMENT
LOW	unittests/test_import_reimport.py	941	# Step 4: Import again into engagement 3 → should skip finding1 (mitigated, exception),	COMMENT
LOW	unittests/test_import_reimport.py	2611	# Step 1: import 4 findings into an existing test (test1) in the engagement.	COMMENT
LOW	unittests/test_import_reimport.py	2622	# Step 2: call the reimport endpoint with auto_create_context=True and a	COMMENT
LOW	unittests/test_import_reimport.py	2701	# Step 2: Reimport scan (same test)	COMMENT
LOW	unittests/test_import_reimport.py	2728	# Step 3: Import scan in NEW engagement with batch_size=50	COMMENT
LOW	unittests/test_import_reimport.py	2784	# Step 4: Reimport scan in same new engagement (batch_size=50)	COMMENT
LOW	unittests/test_import_reimport.py	2866	# Step 2: Import scan again (same engagement)	COMMENT
LOW	unittests/test_import_reimport.py	2892	# Step 3: Import scan in NEW engagement with batch_size=50	COMMENT
LOW	unittests/test_import_reimport.py	2947	# Step 4: Import scan again in same new engagement (batch_size=50)	COMMENT
LOW	…ttests/scans/dependency_track/deptrack_npm_4.14.1.json	697	"description": "## Summary\n\nDOMPurify versions 3.0.1 through 3.3.3 (latest) are vulnerable to a protot	CODE
LOW	…dings/finding_deduplication/avoid_excess_duplicates.md	21	## Step 1: Clean up your excess Duplicates	COMMENT
LOW	…dings/finding_deduplication/avoid_excess_duplicates.md	25	### Step 2: Evaluate your Engagements for redundancies	COMMENT
LOW	…dings/finding_deduplication/avoid_excess_duplicates.md	41	### Step 3: Check for redundant Tests	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	24	## Step 1: Enable the Jira integration in System Settings	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	64	## Step 2: Connect a Jira Instance	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	161	## Step 3: Connect an Asset or Engagement to Jira	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	284	## Step 4: Configure Bidirectional Sync: Jira Webhook	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	513	#### Step 1: Record the names of your Custom Fields in Jira	COMMENT
LOW	docs/content/connectors/os_jira/os__jira_guide.md	525	#### Step 2: Finding your Jira Custom Field Key Values	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	330	## Step 4: Configure Bidirectional Sync: Jira Webhook	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	605	#### Step 1: Record the names of your Custom Fields in Jira	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	617	#### Step 2: Finding your Jira Custom Field Key Values	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	641	#### Step 3 - Finding the Custom Fields on a Jira Issue	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	656	#### Step 4 - Creating a JSON Field Reference from each Jira Custom Field Key	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	778	#### Step 5 - Adding the Custom Fields to a DefectDojo Product	COMMENT
LOW	…cs/content/connectors/downstream/PRO__jira_guide.ja.md	782	#### Step 6 - Testing your Jira Custom Fields from a new Finding:	COMMENT
LOW	docs/content/connectors/downstream/PRO__jira_guide.md	82	## Step 1: Enable the Jira integration in System Settings	COMMENT
LOW	docs/content/connectors/downstream/PRO__jira_guide.md	112	## Step 2: Connect a Jira Instance	COMMENT
87 more matches not shown…

Unused Imports319 hits · 234 pts

Severity	File	Line	Context
LOW	dojo/tasks.py	25	CODE
LOW	dojo/tasks.py	25	CODE
LOW	dojo/tasks.py	25	CODE
LOW	dojo/tasks.py	148	CODE
LOW	dojo/models.py	23	CODE
LOW	dojo/models.py	127	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	128	CODE
LOW	dojo/models.py	138	CODE
LOW	dojo/models.py	149	CODE
LOW	dojo/models.py	150	CODE
LOW	dojo/models.py	150	CODE
LOW	dojo/models.py	151	CODE
LOW	dojo/models.py	152	CODE
LOW	dojo/models.py	152	CODE
LOW	dojo/models.py	156	CODE
LOW	dojo/models.py	156	CODE
LOW	dojo/models.py	161	CODE
LOW	dojo/models.py	162	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	163	CODE
LOW	dojo/models.py	368	CODE
LOW	dojo/models.py	369	CODE
LOW	dojo/models.py	379	CODE
LOW	dojo/models.py	380	CODE
LOW	dojo/models.py	380	CODE
LOW	dojo/models.py	380	CODE
LOW	dojo/models.py	381	CODE
LOW	dojo/models.py	381	CODE
LOW	dojo/models.py	408	CODE
LOW	dojo/models.py	408	CODE
LOW	dojo/models.py	408	CODE
LOW	dojo/models.py	408	CODE
LOW	dojo/models.py	408	CODE
LOW	dojo/models.py	417	CODE
LOW	dojo/models.py	417	CODE
LOW	dojo/models.py	475	CODE
LOW	dojo/models.py	475	CODE
LOW	dojo/models.py	475	CODE
LOW	dojo/models.py	480	CODE
LOW	dojo/models.py	481	CODE
LOW	dojo/models.py	481	CODE
LOW	dojo/models.py	481	CODE
LOW	dojo/models.py	481	CODE
LOW	dojo/models.py	481	CODE
LOW	dojo/models.py	488	CODE
LOW	dojo/models.py	488	CODE
LOW	dojo/models.py	488	CODE
LOW	dojo/models.py	488	CODE
259 more matches not shown…

AI Slop Vocabulary141 hits · 213 pts

Severity	File	Line	Snippet	Context
LOW	dojo/settings/settings.dist.py	1739	# There seems to be no way just use the default and just leave out jquery, so we have to copy...	COMMENT
MEDIUM	dojo/tools/twistlock/parser.py	297	# Build comprehensive description	COMMENT
LOW	dojo/tools/generic/parser.py	31	# if the file is a CSV just use the old function	COMMENT
MEDIUM	dojo/tools/ibm_app/parser.py	158	"""Function that parse advisory-group in order to get the item's description"""	STRING
LOW	dojo/importers/auto_create_context.py	305	# If we have an engagement, we cna just return it	COMMENT
LOW	unittests/test_import_reimport.py	1458	# and the logic below will get confused and just create a new finding	COMMENT
MEDIUM⚡	unittests/test_deduplication_logic.py	2025	# 'absolutely great title' becomes 'Absolutely Great Title'	COMMENT
MEDIUM	…ittests/scans/snyk_code/single_project_many_vulns.json	495	"markdown": "\n## Details\n\nWithout unlimited resources, software operating in the real world is inhere	CODE
MEDIUM	…ittests/scans/snyk_code/single_project_many_vulns.json	2113	"markdown": "## Details\n\nA cross-site scripting attack occurs when the attacker tricks a legitimate we	CODE
MEDIUM	…ittests/scans/snyk_code/single_project_many_vulns.json	3720	"markdown": "## Details\n\nA cross-site scripting attack occurs when the attacker tricks a legitimate we	CODE
MEDIUM	unittests/scans/snyk_code/snykcode_issue_9270.json	22	"markdown": "## Details\n\nA cross-site scripting attack occurs when the attacker tricks a legitimate	CODE
MEDIUM	unittests/scans/snyk_code/snykcode_issue_9270.json	101	"markdown": "\n## Details\n\nWithout unlimited resources, software operating in the real world is inhe	CODE
MEDIUM	unittests/scans/snyk_code/snykcode_issue_9270.json	3997	"markdown": "## Details\n\nPrototype Pollution is a vulnerability affecting JavaScript. Prototype Poll	CODE
MEDIUM	unittests/scans/snyk_code/snykcode_issue_9270.json	4097	"markdown": "## Details\n\nA cross-site scripting attack occurs when the attacker tricks a legitimate	CODE
MEDIUM	unittests/scans/snyk/snykcontainer_issue_9270.json	3319	"description": "## Overview\n[sanitize-html](https://github.com/punkave/sanitize-html) is a library that all	CODE
MEDIUM	unittests/scans/snyk/snykcontainer_issue_9270.json	3740	"description": "## Overview\nSanitization of HTML strings is not applied recursively to input, allowing an a	CODE
MEDIUM	unittests/scans/snyk/snykcontainer_issue_9270.json	3826	"description": "## Overview\n[`sanitize-html`](https://www.npmjs.com/package/sanitize-html) is a library for	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1691	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1691	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1757	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1757	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1825	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1825	"description": "## Overview\n[ajv](https://www.npmjs.com/package/ajv) is an Another JSON Schema Validator\n\nAff	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	1893	"description": "## Overview\n[@angular/core](https://www.npmjs.com/package/@angular/core) is a package that lets	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2495	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2495	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2614	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2614	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2696	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2696	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2756	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2756	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2952	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	2952	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3073	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3073	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3157	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3157	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3219	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3219	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3421	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3421	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3544	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3544	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3630	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3630	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3694	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3694	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3758	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3758	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3886	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	3886	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4020	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4020	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4148	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4148	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4278	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4278	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4410	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
MEDIUM	unittests/scans/snyk/all_projects_issue4277.json	4410	"description": "## Overview\n[minimist](https://www.npmjs.com/package/minimist) is a parse argument options modu	CODE
81 more matches not shown…

Fake / Example Data151 hits · 192 pts

Severity	File	Line	Snippet	Context
LOW	dojo/settings/settings.dist.py	1749	TAGULOUS_AUTOCOMPLETE_SETTINGS = {"placeholder": "Enter some tags (comma separated, use enter to select / create a new t	CODE
LOW	dojo/finding/ui/filters.py	257	date_input_widget = forms.DateInput(attrs={"class": "datepicker", "placeholder": "YYYY-MM-DD"}, format="%Y-%m-%d	CODE
LOW	dojo/templates_classic/base.html	1257	<!-- 'placeholder': 'Select or add some tags...', -->	CODE
LOW	dojo/templates_classic/dojo/report_builder.html	68	$(this).attr("placeholder", label.html().replace(':', "..."));	CODE
LOW	dojo/jira/forms.py	148	self.fields["project_key"].widget = forms.TextInput(attrs={"placeholder": f"JIRA settings inherited from pro	CODE
LOW	dojo/jira/forms.py	297	self.fields["jira_issue"].widget = forms.TextInput(attrs={"placeholder": "Leave empty and check push to jira	CODE
LOW	dojo/jira/forms.py	299	self.fields["jira_issue"].widget = forms.TextInput(attrs={"placeholder": "Leave empty and check push to jira	CODE
LOW	dojo/templates/dojo/report_builder.html	68	$(this).attr("placeholder", label.html().replace(':', "..."));	CODE
LOW⚡	unittests/test_rest_framework.py	2236	result = self.client.patch(self.url + "2/", data={"steps_to_reproduce": "Lorem ipsum dolor sit amet"})	CODE
LOW⚡	unittests/test_rest_framework.py	2236	result = self.client.patch(self.url + "2/", data={"steps_to_reproduce": "Lorem ipsum dolor sit amet"})	CODE
LOW⚡	unittests/test_rest_framework.py	2238	self.assertEqual(result.json()["steps_to_reproduce"], "Lorem ipsum dolor sit amet")	CODE
LOW⚡	unittests/test_rest_framework.py	2238	self.assertEqual(result.json()["steps_to_reproduce"], "Lorem ipsum dolor sit amet")	CODE
LOW⚡	unittests/test_rest_framework.py	2249	self.assertEqual(result_json["results"][0]["steps_to_reproduce"], "Lorem ipsum dolor sit amet")	CODE
LOW⚡	unittests/test_rest_framework.py	2249	self.assertEqual(result_json["results"][0]["steps_to_reproduce"], "Lorem ipsum dolor sit amet")	CODE
LOW⚡	unittests/test_finding_model.py	411	finding.references = "Lorem ipsum dolor sit amet, consetetur sadipscing elitr"	CODE
LOW⚡	unittests/test_finding_model.py	411	finding.references = "Lorem ipsum dolor sit amet, consetetur sadipscing elitr"	CODE
LOW⚡	unittests/test_finding_model.py	412	self.assertEqual("Lorem ipsum dolor sit amet, consetetur sadipscing elitr", finding.get_references_with_links())	CODE
LOW⚡	unittests/test_finding_model.py	412	self.assertEqual("Lorem ipsum dolor sit amet, consetetur sadipscing elitr", finding.get_references_with_links())	CODE
LOW⚡	unittests/tools/test_threat_composer_parser.py	28	self.assertEqual("lorem ipsum", finding.title)	CODE
LOW⚡	unittests/tools/test_ptart_parser.py	202	self.assertEqual("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt	CODE
LOW⚡	unittests/tools/test_ptart_parser.py	202	self.assertEqual("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt	CODE
LOW	unittests/tools/test_ptart_parser.py	191	"caption": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididun	CODE
LOW	unittests/tools/test_ptart_parser.py	191	"caption": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididun	CODE
LOW	unittests/tools/test_ptart_parser.py	944	self.assertEqual("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt	CODE
LOW	unittests/tools/test_ptart_parser.py	944	self.assertEqual("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt	CODE
LOW	unittests/tools/test_gitleaks_parser.py	98	self.assertIn("\nCommit message: Lorem ipsum dolor sit amet, consetetur sadipscing elitr", finding.d	CODE
LOW	unittests/tools/test_gitleaks_parser.py	98	self.assertIn("\nCommit message: Lorem ipsum dolor sit amet, consetetur sadipscing elitr", finding.d	CODE
LOW	unittests/tools/test_gitleaks_parser.py	116	Lorem ipsum dolor sit amet,	CODE
LOW	unittests/tools/test_gitleaks_parser.py	116	Lorem ipsum dolor sit amet,	CODE
LOW	…ittests/scans/snyk_code/single_project_many_vulns.json	2394	"line": "email : 'test@test.com'\n",	CODE
LOW	unittests/scans/snyk_code/snykcode_issue_9270.json	4377	"line": "email : 'test@test.com'\n",	CODE
LOW	unittests/scans/arachni/dd.com.afr.json	285	"body" : "\n\n\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n\n <meta charset=\"utf-8\">\n <meta http-eq	CODE
LOW	unittests/scans/arachni/dd.com.afr.json	296	"body" : "\n\n\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n\n <meta charset=\"utf-8\">\n <meta http-eq	CODE
LOW	unittests/scans/arachni/dd.com.afr.json	332	"body" : "\n\n\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n\n <meta charset=\"utf-8\">\n <meta http-eq	CODE
LOW	unittests/scans/whitehat_sentinel/invalid_data.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW	unittests/scans/whitehat_sentinel/invalid_data.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW	unittests/scans/zap/zap_2.16.1_with_req_resp.xml	794	<requestbody>"John Doe"</requestbody>	CODE
LOW	unittests/scans/xygeni/secrets_many_findings.json	818	"secretId" : "user@example.com",	CODE
LOW	…ittests/scans/ptart/ptart_one_vul_screenshot_long.json	48	"caption": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut l	CODE
LOW	…ittests/scans/ptart/ptart_one_vul_screenshot_long.json	48	"caption": "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut l	CODE
LOW	unittests/scans/burp_suite_dast/many_vulns.html	1231	The following email addresses were disclosed in the response:<ul><li>fake-user@testing.com</li><li>fake-admin@testing.co	CODE
LOW	unittests/scans/snyk/snykcode_issue_9270.json	4377	"line": "email : 'test@test.com'\n",	CODE
LOW	unittests/scans/harbor_vulnerability/harborapipip.json	54	"description": "Lorem ipsum.",	CODE
LOW	unittests/scans/cyclonedx/issue_8022.json	76	"name": "Jane Doe",	CODE
LOW	unittests/scans/cyclonedx/valid-vulnerability-1.4.json	77	"name": "Jane Doe",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	19	"content": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	21	"lorem ipsum"	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	26	"value": "lorem ipsum"	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	36	"content": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	38	"lorem ipsum"	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	43	"value": "lorem ipsum"	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	51	"content": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	55	"value": "lorem ipsum"	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	82	"statement": "A lorem ipsum lorem ipsum can lorem ipsum, which leads to lorem ipsum, negatively impacting lorem	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	83	"threatSource": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	84	"prerequisites": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	85	"threatAction": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	86	"threatImpact": "lorem ipsum",	CODE
LOW⚡	…hreat_composer/threat_composer_broken_assumptions.json	88	"lorem ipsum"	CODE
LOW	…hreat_composer/threat_composer_broken_assumptions.json	109	"value": "lorem ipsum. lorem ipsum lorem ipsum"	CODE
91 more matches not shown…

Redundant / Tautological Comments80 hits · 140 pts

Severity	File	Line	Snippet	Context
LOW	docker/install_chrome_dependencies.py	14	# Check if ldd has failed for a good reason, or if there are no results	COMMENT
LOW	docker/install_chrome_dependencies.py	34	# Check if ldd has failed for a good reason, or if there are no results	COMMENT
LOW⚡	tests/tool_product_test.py	39	# Check if any non-API tool type exists	COMMENT
LOW	tests/tool_product_test.py	69	# Check if any tool config exists (any row in the table)	COMMENT
LOW⚡	tests/tool_config.py	33	# Check if form is prefieled	COMMENT
LOW⚡	tests/tool_config.py	56	# Check if ToolType is selected	COMMENT
LOW	dojo/context_processors.py	93	# Check if there was an error stored on the request (from middleware)	COMMENT
LOW	dojo/utils.py	894	# Check if threat folder exist.	COMMENT
LOW	dojo/tools/qualys/parser.py	188	# Check if CVSS field contains the CVSS vector	COMMENT
LOW	dojo/tools/sarif/parser.py	476	# Check if this is a CWE taxonomy reference	COMMENT
LOW	dojo/tools/snyk_issue_api/parser.py	62	# Check if any fix is available	COMMENT
LOW	dojo/tools/qualys_webapp/parser.py	79	port = "" # Set port to empty string by default	CODE
LOW	dojo/tools/mend/parser.py	187	# Check if adding this location will exceed the limit	COMMENT
LOW	dojo/tools/noseyparker/parser.py	43	# Set rule to the current secret type (e.g. AWS S3 Bucket)	COMMENT
LOW	dojo/tools/api_sonarqube/updater.py	120	# Check if there is at least one transition from current_status...	COMMENT
LOW	dojo/tools/auditjs/parser.py	74	# Check if there are any vulnerabilities	COMMENT
LOW	dojo/tools/h1/parser.py	288	# Iterate over the items and build the string	COMMENT
LOW	dojo/tools/veracode/xml_parser.py	205	# Check if it's a FP in veracode.	COMMENT
LOW	dojo/tools/qualys_vmdr/helpers.py	260	# Check if this is end of field: "" followed by , or end of string	COMMENT
LOW	dojo/tools/openreports/parser.py	58	# Check if it's a Kubernetes List object	STRING
LOW	dojo/tools/openreports/parser.py	61	# Check if it's a single Report object	STRING
LOW	dojo/tools/openreports/parser.py	275	# Set vuln_id_from_tool to policy field for display	STRING
LOW	dojo/test/signals.py	60	# Check if the test type has changed	COMMENT
LOW	dojo/importers/options.py	151	# Check if we are working with a list of models	COMMENT
LOW⚡	dojo/finding/models.py	790	# Check if all needed settings are defined	COMMENT
LOW⚡	dojo/finding/models.py	797	# Check if hash_code fields are found in the settings	COMMENT
LOW⚡	dojo/finding/models.py	803	# Check if all elements of HASHCODE_FIELDS_PER_SCANNER are in HASHCODE_ALLOWED_FIELDS	COMMENT
LOW	dojo/finding/models.py	1204	# Check if a mandatory field is empty. If it's the case, fill it with "no <fieldName> given"	COMMENT
LOW	dojo/finding/models.py	1405	# Check if match isn't already a markdown link	COMMENT
LOW	dojo/finding/ui/views.py	1317	# Check if there is a jira issue that needs to be updated	COMMENT
LOW	dojo/finding/ui/views.py	1589	# Check if there is a jira issue that needs to be updated	COMMENT
LOW	dojo/finding/ui/views.py	1683	# Check if there is a jira issue that needs to be updated	COMMENT
LOW	dojo/finding/ui/views.py	2546	# Check if finding is duplicate and user wants to set active/verified	COMMENT
LOW	dojo/location/models.py	128	# Check if there is an existing reference for this finding and location	COMMENT
LOW	dojo/location/models.py	175	# Check if there is an existing reference for this finding and location	COMMENT
LOW	dojo/management/commands/pghistory_backfill_simple.py	113	# Check if event table exists	COMMENT
LOW	dojo/management/commands/pghistory_backfill.py	295	# Set pgh_created_at to current time (this is for the event creation time)	COMMENT
LOW	dojo/management/commands/pghistory_backfill_fast.py	121	# Check if we can use COPY (PostgreSQL only)	COMMENT
LOW	dojo/management/commands/migrate_surveys.py	22	# Check if there are any tables to migrate	COMMENT
LOW	dojo/url/models.py	269	# Check if it's a valid IP address first	COMMENT
LOW	dojo/url/ui/views.py	485	# Check if the uploaded file exceeds the maximum allowed size	COMMENT
LOW	dojo/engagement/ui/views.py	644	# Set status to in progress if a test is added	COMMENT
LOW	dojo/jira/views.py	95	# Check if the events supplied are supported	COMMENT
LOW⚡	dojo/jira/views.py	186	# Check if the issue is originally a 404	COMMENT
LOW⚡	dojo/github/services.py	27	# Check if we have github info related to the product	COMMENT
LOW⚡	dojo/github/services.py	35	# Check if we have github info related to the finding	COMMENT
LOW⚡	dojo/github/services.py	62	# Check if we have github info related to the product	COMMENT
LOW⚡	dojo/github/services.py	70	# Check if we have github info related to the finding	COMMENT
LOW⚡	dojo/github/services.py	97	# Check if we have github info related to the product	COMMENT
LOW⚡	dojo/github/services.py	105	# Check if we have github info related to the finding	COMMENT
LOW	dojo/github/services.py	129	# Check if we have github info related to the product	COMMENT
LOW	dojo/api_v2/prefetch/prefetcher.py	119	# Check if the field represents a many-to-many relationship as we need to instantiate the serializer accordingly	COMMENT
LOW⚡	dojo/db_migrations/0197_parser_merge.py	29	# Check if nessus is in found by list and remove	COMMENT
LOW⚡	dojo/db_migrations/0197_parser_merge.py	32	# Check if nessus WAS is in found by list and remove	COMMENT
LOW⚡	dojo/db_migrations/0197_parser_merge.py	35	# Check if tenable is already in list somehow before adding it	COMMENT
LOW⚡	dojo/db_migrations/0197_parser_merge.py	43	# Check if nessus is in found by list and remove	COMMENT
LOW⚡	dojo/db_migrations/0197_parser_merge.py	46	# Check if tenable is already in list somehow before adding it	COMMENT
LOW	dojo/db_migrations/0049_create_endpoint_status.py	28	# Check if the status object was created, otherwise, there is nothing to do	COMMENT
LOW⚡	dojo/db_migrations/0187_nessus_to_tenable.py	20	# Check if nessus is in found by list and remove	COMMENT
LOW⚡	dojo/db_migrations/0187_nessus_to_tenable.py	23	# Check if nessus WAS is in found by list and remove	COMMENT
20 more matches not shown…

Over-Commented Block134 hits · 112 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.override.unit_tests_cicd.yml	21	DD_DATABASE_HOST: ${DD_DATABASE_HOST:-postgres}	COMMENT
LOW	manage.py	1	#!/usr/bin/env python	COMMENT
LOW	docker/entrypoint-unit-tests.sh	21	# echo "Creating settings.py"	COMMENT
LOW	docker/entrypoint-unit-tests.sh	121	if [ "${DD_TEST_DB_MODE}" = "prepare" ]; then	COMMENT
LOW	docker/entrypoint-integration-tests.sh	61	# whitespace; CI passes groups of files that share one compose stack.	COMMENT
LOW	tests/test_test.py	61	# Click on the 'Engagement' Dropdown button	COMMENT
LOW	tests/test_test.py	141	# Test To Add Finding To Test	COMMENT
LOW	tests/test_test.py	161	Select(driver.find_element(By.ID, "id_severity")).select_by_visible_text("High")	COMMENT
LOW	tests/product_test.py	41	# Navigate to the product page	COMMENT
LOW	tests/product_test.py	81		COMMENT
LOW	tests/product_test.py	141	driver = self.driver	COMMENT
LOW	tests/product_test.py	261	driver.find_element(By.LINK_TEXT, "Add New Finding").click()	COMMENT
LOW	tests/product_test.py	381	# Test To Edit Product Custom Fields	COMMENT
LOW	tests/finding_test.py	541	# Select and click on the particular finding to edit	COMMENT
LOW	tests/finding_test.py	561	# Navigate to All Finding page	COMMENT
LOW	tests/dedupe_test.py	301	@on_exception_html_source_logger	COMMENT
LOW	dojo/signals.py	1	from django.dispatch import Signal	COMMENT
LOW	dojo/apps.py	21	# logger.info('ready(): initializing watson')	COMMENT
LOW	dojo/apps.py	81	watson.register(app_config.get_model("Finding"), fields=get_model_fields_with_extra(app_config.get_model("Finding"),	COMMENT
LOW	dojo/apps.py	101		COMMENT
LOW	dojo/utils.py	981	# time they are saved.	COMMENT
LOW	dojo/utils.py	1901		COMMENT
LOW	dojo/celery.py	181	# for task in tasks:	COMMENT
LOW	dojo/db_utils.py	1	"""Database-level helpers that are not tied to any particular model or app."""	COMMENT
LOW	dojo/middleware.py	161	pass	COMMENT
LOW	dojo/wsgi.py	21	logger = logging.getLogger(__name__)	COMMENT
LOW	dojo/settings/settings.dist.py	121	# If a task sits in the broker queue for longer than this without being picked up by a worker,	COMMENT
LOW	dojo/settings/settings.dist.py	181	DD_SIMILAR_FINDINGS_MAX_RESULTS=(int, 25),	COMMENT
LOW	dojo/settings/settings.dist.py	201	DD_JIRA_EXTRA_ISSUE_TYPES=(str, ""),	COMMENT
LOW	dojo/settings/settings.dist.py	241	# Examples include 5/m 100/h and more https://django-ratelimit.readthedocs.io/en/stable/rates.html#simple-rates	COMMENT
LOW	dojo/settings/settings.dist.py	281	# When set to True, use the older version of the qualys parser that is a more heavy handed in setting severity	COMMENT
LOW	dojo/settings/settings.dist.py	421	# see https://docs.djangoproject.com/en/3.2/releases/3.2/#customizing-type-of-auto-created-primary-keys	COMMENT
LOW	dojo/settings/settings.dist.py	441	# ------------------------------------------------------------------------------	COMMENT
LOW	dojo/settings/settings.dist.py	741	SPECTACULAR_SETTINGS["SWAGGER_UI_DIST"] = "SIDECAR"	COMMENT
LOW	dojo/settings/settings.dist.py	1021	"options": {	COMMENT
LOW	dojo/settings/settings.dist.py	1061	# List of fields used to compute the hash_code	COMMENT
LOW	dojo/settings/settings.dist.py	1321	# 'unique_id_from_tool' is often not needed here as it can be used directly in the dedupe algorithm, but it's also possi	COMMENT
LOW	dojo/settings/settings.dist.py	1881	# Notifications	COMMENT
LOW	dojo/settings/settings.dist.py	1901	# The setting is here to avoid RemovedInDjango60Warning. It is here only for transition period.	COMMENT
LOW	dojo/settings/settings.dist.py	1961		COMMENT
LOW	dojo/system_settings/views.py	1	# Backward-compat shim: the view logic moved to dojo.system_settings.ui.views during the	COMMENT
LOW	dojo/tools/promptfoo/parser.py	21		COMMENT
LOW	dojo/tools/spotbugs/parser.py	61	mitigation += "\n\n#### Example\n"	COMMENT
LOW	dojo/tools/dependency_check/parser.py	221	# TODO: what happens when there multiple evidencecollectednodes with	COMMENT
LOW	dojo/tools/tenable/utils.py	1		COMMENT
LOW	dojo/tools/checkmarx_osa/parser.py	121		COMMENT
LOW	dojo/tools/aqua/parser.py	61	# def get_fields(self) -> list[str]:	COMMENT
LOW	dojo/tools/aqua/parser.py	81	# ]	COMMENT
LOW	dojo/tools/sysdig_cli/parser.py	241	csv_data_record.epss_score = row.get("epss score", "")	COMMENT
LOW	dojo/tools/api_blackduck/api_client.py	21	timeout=120,	COMMENT
LOW	dojo/tools/mobsf/api_report_json.py	241	# specific node for Android reports	COMMENT
LOW	dojo/test/views.py	1	# Backward-compat shim: the view logic moved to dojo.test.ui.views during the	COMMENT
LOW	dojo/importers/base_importer.py	301	# this is the same as the old behavior as current import/reimporter implementation doesn't handle the case	COMMENT
LOW	dojo/importers/default_importer.py	121	# Close any old findings in the processed list if the the user specified for that	COMMENT
LOW	dojo/importers/default_reimporter.py	121	) = self.process_findings(parsed_findings, **kwargs)	COMMENT
LOW	dojo/importers/default_reimporter.py	461	unsaved_finding,	COMMENT
LOW	dojo/importers/default_reimporter.py	481	# The two batch types serve different purposes:	COMMENT
LOW	dojo/importers/default_reimporter.py	601	"""	COMMENT
LOW	dojo/finding/helper.py	1261	# in bulk, but loops are rare (only from past bugs or high parallel load) so the	COMMENT
LOW	dojo/finding/views.py	1	# Backward-compat shim: the view logic moved to dojo.finding.ui.views during the	COMMENT
74 more matches not shown…

Magic Placeholder Names17 hits · 85 pts

Severity	File	Line	Snippet	Context
HIGH	docs/content/supported_tools/parsers/file/talisman.md	15	DEFECTDOJO_API_KEY="your-api-key"	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.it.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.it.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.es.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.es.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.fr.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.fr.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.de.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.de.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.ja.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…mport_data/pro/specialized_import/external_tools.ja.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…_data/pro/specialized_import/external_tools.zh-hans.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…_data/pro/specialized_import/external_tools.zh-hans.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…rt_data/pro/specialized_import/external_tools.pt-br.md	50	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…rt_data/pro/specialized_import/external_tools.pt-br.md	53	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…t/import_data/pro/specialized_import/external_tools.md	51	`export DD_CLI_API_TOKEN=YOUR_API_KEY`	CODE
HIGH	…t/import_data/pro/specialized_import/external_tools.md	54	`export DD_IMPORTER_DOJO_API_TOKEN=YOUR_API_KEY`	CODE

Verbosity Indicators46 hits · 72 pts

Severity	File	Line	Snippet	Context
LOW⚡	dojo/utils.py	1882	# Step 1: Determine finding scope	COMMENT
LOW⚡	dojo/utils.py	1889	# Step 2: Prepare duplicate clusters (must happen before any deletion)	COMMENT
LOW⚡	dojo/utils.py	1894	# Step 3: Delete the main scope findings	COMMENT
LOW⚡	dojo/utils.py	1902	# Step 4: Delete all remaining related objects (Tests, Engagements,	COMMENT
LOW⚡	dojo/utils.py	1911	# Step 5: Delete the top-level object via ORM to fire Django signals	COMMENT
LOW⚡	dojo/utils.py	1916	# Step 6: Recalculate product grade once (Engagement/Test deletes only). Skip when the	COMMENT
LOW⚡	dojo/importers/endpoint_manager.py	254	# Step 1: Ensure all recorded endpoints exist in DB	COMMENT
LOW⚡	dojo/importers/endpoint_manager.py	257	# Step 2: Bulk-create Endpoint_Status rows	COMMENT
LOW	dojo/importers/endpoint_manager.py	272	# Step 3: Bulk-update mitigated endpoint statuses	COMMENT
LOW	dojo/importers/endpoint_manager.py	291	# Step 4: Bulk-update reactivated endpoint statuses	COMMENT
LOW	dojo/authorization/api_permissions.py	575	# the engagement doesn't exist, so we need to check if the user has	COMMENT
LOW	dojo/authorization/api_permissions.py	764	# the test doesn't exist, so we need to check if the user has	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	61	# Step 1: Create CICDInfrastructure model	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	76	# Step 2: Remove old pgtrigger triggers FIRST.	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	96	# Step 3: Add new FK fields to Engagement (before removing old ones)	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	136	# Step 4: Migrate data from Tool_Configuration to CICDInfrastructure	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	149	# Step 5: Remove old FK fields from Engagement	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	162	# Step 6: Update pghistory event table FK fields to point to CICDInfrastructure	COMMENT
LOW	dojo/db_migrations/0286_cicd_infrastructure.py	193	# Step 7: Re-create pgtrigger triggers with new column names	COMMENT
LOW⚡	…rations/0253_migrate_vulnerability_ids_to_textfield.py	93	# Step 1: Migrate data from Vulnerability_Id_Template to vulnerability_ids_text	COMMENT
LOW⚡	…rations/0253_migrate_vulnerability_ids_to_textfield.py	98	# Step 2: Delete old Vulnerability_Id_Template records	COMMENT
LOW	unittests/test_jira_import_and_pushing_api.py	1028	# Note: finding_group is a cached property, so we need to check if findings are in any group	COMMENT
LOW⚡	unittests/test_import_reimport.py	782	# Step 2: Mitigate finding A	COMMENT
LOW⚡	unittests/test_import_reimport.py	790	# Step 3: Import again into engagement 2 → tries to deduplicate against A (mitigated),	COMMENT
LOW⚡	unittests/test_import_reimport.py	907	# Step 2: Mitigate finding A	COMMENT
LOW⚡	unittests/test_import_reimport.py	915	# Step 3: Import again into engagement 2 → exception, finding B created as new active	COMMENT
LOW⚡	unittests/test_import_reimport.py	970	# Step 5: Mitigate finding B	COMMENT
LOW⚡	unittests/test_import_reimport.py	978	# Step 6: Import again into engagement 4 → should find A (mitigated, exception), B (mitigated, exception),	COMMENT
LOW⚡	unittests/test_import_reimport.py	2640	# Step 3: test1's 4 findings must all still be active	COMMENT
LOW⚡	unittests/test_import_reimport.py	2656	# Step 1: Baseline import (default batch size)	COMMENT
LOW⚡	unittests/test_import_reimport.py	2827	# Step 1: Baseline import (default batch size)	COMMENT
LOW	unittests/test_import_reimport.py	755	# Step 1: Import scan into engagement 1 → finding A (active)	COMMENT
LOW	unittests/test_import_reimport.py	820	# Step 4: Import again into engagement 3 → should find both A (mitigated) and B (active)	COMMENT
LOW	unittests/test_import_reimport.py	883	# Step 1: Import scan into engagement 1 → finding A (active)	COMMENT
LOW	unittests/test_import_reimport.py	941	# Step 4: Import again into engagement 3 → should skip finding1 (mitigated, exception),	COMMENT
LOW	unittests/test_import_reimport.py	2611	# Step 1: import 4 findings into an existing test (test1) in the engagement.	COMMENT
LOW	unittests/test_import_reimport.py	2622	# Step 2: call the reimport endpoint with auto_create_context=True and a	COMMENT
LOW	unittests/test_import_reimport.py	2701	# Step 2: Reimport scan (same test)	COMMENT
LOW	unittests/test_import_reimport.py	2728	# Step 3: Import scan in NEW engagement with batch_size=50	COMMENT
LOW	unittests/test_import_reimport.py	2784	# Step 4: Reimport scan in same new engagement (batch_size=50)	COMMENT
LOW	unittests/test_import_reimport.py	2866	# Step 2: Import scan again (same engagement)	COMMENT
LOW	unittests/test_import_reimport.py	2892	# Step 3: Import scan in NEW engagement with batch_size=50	COMMENT
LOW	unittests/test_import_reimport.py	2947	# Step 4: Import scan again in same new engagement (batch_size=50)	COMMENT
LOW	…ttests/scans/dependency_track/deptrack_npm_4.14.1.json	697	"description": "## Summary\n\nDOMPurify versions 3.0.1 through 3.3.3 (latest) are vulnerable to a protot	CODE
LOW⚡	scripts/update_performance_test_counts.py	21	# Step 1: Run tests and generate report only (without updating)	STRING
LOW⚡	scripts/update_performance_test_counts.py	24	# Step 2: Verify all tests pass	STRING

Slop Phrases14 hits · 23 pts

Severity	File	Line	Snippet	Context
LOW	tests/user_test.py	22	# Don't forget to clear before inserting	COMMENT
LOW	tests/user_test.py	57	# Don't forget to clear before inserting	COMMENT
LOW	dojo/utils.py	313	# gather findings over past half year, make sure to start on a sunday	COMMENT
LOW	dojo/templatetags/display_tags.py	814	# outputs html, so make sure to escape user provided fields	COMMENT
LOW	dojo/settings/settings.dist.py	457	# Don't forget to use absolute paths, not relative paths.	COMMENT
MEDIUM	unittests/scans/whitehat_sentinel/many_vuln.json	160	"solution_prepend": "In Apache (https://httpd.apache.org/docs/trunk/vhosts/examples.html#defaultallports) and Ng	CODE
MEDIUM	unittests/scans/hcl_appscan/many_findings.xml	11627	<item type="string">Here is a simple example of how to use stored procedures in ASP.NET:</item>	CODE
MEDIUM	unittests/scans/hcl_appscan/issue_9279.xml	1286	<text>Here is a simple example of how to use stored procedures in ASP.NET:</text>	CODE
MEDIUM	unittests/scans/hcl_appscan/issue_9279.xml	2548	<text>Here is a simple example of how to use stored procedures in ASP.NET:</text>	CODE
LOW	unittests/scans/rubocop/one_finding.json	1959	"message": "Prefer `$LAST_MATCH_INFO` from the stdlib 'English' module (don't forget to require it)	CODE
LOW	unittests/scans/rubocop/one_finding.json	1975	"message": "Prefer `$LAST_MATCH_INFO` from the stdlib 'English' module (don't forget to require it)	CODE
MEDIUM⚡	unittests/scans/nuclei/issue_14071.json	25	{"template":"http/exposures/files/readme-md.yaml","template-url":"https://cloud.projectdiscovery.io/public/readme-md","t	CODE
LOW⚡	unittests/scans/nuclei/issue_14071.json	25	{"template":"http/exposures/files/readme-md.yaml","template-url":"https://cloud.projectdiscovery.io/public/readme-md","t	CODE
MEDIUM	helm/defectdojo/values.yaml	386	# -- To extra environment variables to the nginx container, you can use extraEnv. For example:	COMMENT

Modern AI Meta-Vocabulary4 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/test_test.py	223	# along with the rest of the stub-finding scaffolding.	COMMENT
MEDIUM	dojo/cicd_infrastructure/models.py	28	# via limit_choices_to (build_server/scm_server/orchestration), so changing the type would create a	COMMENT
MEDIUM	unittests/scans/snyk/single_project_many_vulns.json	1094	"description": "## Overview\n[io.netty:netty-handler](https://github.com/netty/netty.git/netty-handler) is a libra	CODE
MEDIUM	unittests/scans/snyk/single_project_many_vulns.json	3754	"description": "## Overview\n[io.netty:netty-handler](https://github.com/netty/netty.git/netty-handler) is a lib	CODE

AI Structural Patterns14 hits · 10 pts

Severity	File	Line	Context
LOW	tests/finding_test.py	131	CODE
LOW	dojo/tools/locations.py	18	CODE
LOW	dojo/tools/locations.py	45	CODE
LOW	dojo/tools/locations.py	78	CODE
LOW	dojo/importers/auto_create_context.py	281	CODE
LOW	dojo/finding/helper.py	478	CODE
LOW	dojo/management/commands/import_all_unittest_scans.py	66	CODE
LOW	dojo/jira/helper.py	913	CODE
LOW	dojo/notifications/helper.py	65	CODE
LOW	unittests/test_false_positive_history_logic.py	2003	CODE
LOW	unittests/test_import_reimport.py	3174	CODE
LOW	unittests/test_import_reimport.py	3221	CODE
LOW	unittests/dojo_test_case.py	629	CODE
LOW	unittests/dojo_test_case.py	689	CODE

Docstring Block Structure1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	dojo/finding/deduplication.py	126	Mark new_finding as a duplicate of existing_finding. Sets duplicate=True, active=False, verified=False, and du	STRING

Example Usage Blocks3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	run-integration-test-dev.sh	5	# Usage:	COMMENT
LOW	…laude/skills/defectdojo-parser/new-parser-checklist.sh	9	# Usage:	COMMENT
LOW	.claude/skills/defectdojo-dev/run-tests.sh	9	# Usage:	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	unittests/test_rest_framework.py	223	# TODO: implement OneOf / AllOff (enums)	COMMENT
LOW	unittests/test_rest_framework.py	325	# TODO: implement support for enum / OneOff / AllOff	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	dojo/test/ui/views.py	865	def handle_request(	CODE
LOW	dojo/engagement/ui/views.py	786	def handle_request(	CODE

Analysis Overview

What These Metrics Mean

Score History

Severity Breakdown

Directory Score Breakdown

Pattern Findings