1.5

Adjusted Signal

1.5

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

15.9K

Stars

Language

684.1K

Lines of Code

2.8K

Files

944

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 928 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 16 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 14 finding(s).

PR Review Velocity Impact 6.9/100 · LOW

Which changes need focused human review? 944 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 0MEDIUM 11LOW 931

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 944 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block868 hits · 868 pts

Severity	File	Line	Snippet	Context
LOW	ROADMAP.md	21	# CI/CD	COMMENT
LOW	docs-v1/content/en/samples/renderers/kustomize.yaml	1	manifests:	COMMENT
LOW	docs-v1/content/en/samples/deployers/kustomize.yaml	1	deploy:	COMMENT
LOW	docs-v1/design_proposals/ko-builder.md	281		COMMENT
LOW	docs-v1/design_proposals/ko-builder.md	301		COMMENT
LOW	docs-v1/design_proposals/ko-builder.md	321	// If main is a pattern with wildcards, such as `./...`,	COMMENT
LOW	deploy/setup-secret.sh	1	#!/bin/bash	COMMENT
LOW	deploy/docs-v1/build.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/docs-v1/preview.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/docs-v1/local-preview.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/vuln-monitor/scan.sh	1	#!/bin/bash	COMMENT
LOW	deploy/vuln-monitor/report.sh	1	#!/bin/bash	COMMENT
LOW	deploy/buildpacks/publish.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/buildpacks/third_party/entrypoint.sh	1	#!/bin/sh	COMMENT
LOW	deploy/buildpacks/third_party/entrypoint.sh	21	#	COMMENT
LOW	deploy/triage-party/skaffold.yaml	1	# Copyright 2020 Google Inc.	COMMENT
LOW	deploy/docs-v2/build.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/docs-v2/preview.sh	1	#!/usr/bin/env bash	COMMENT
LOW	deploy/docs-v2/local-preview.sh	1	#!/usr/bin/env bash	COMMENT
LOW	integration/run_test.go	161	// },	COMMENT
LOW	integration/run_test.go	381	// // building machines on gcb are linux/amd64, kaniko doesn't support cross-platform builds.	COMMENT
LOW	…ion/testdata/init/helm-project/hello-world/values.yaml	1	# This is a YAML-formatted file.	COMMENT
LOW	…/testdata/helm-render-delete/skaffold-helm/values.yaml	21	annotations:	COMMENT
LOW	integration/testdata/helm/skaffold-helm/values.yaml	21	annotations:	COMMENT
LOW	…ation/testdata/helm-multi-config/charts/app/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	…ation/testdata/helm-multi-config/charts/app/Chart.yaml	21	# incremented each time you make changes to the application. Versions are not expected to	COMMENT
LOW	…gration/testdata/helm-render/skaffold-helm/values.yaml	21	annotations:	COMMENT
LOW	integration/skaffold/helper.go	381	// If the test is killed by a timeout, go test will wait for	COMMENT
LOW	integration/examples/annotated-skaffold.yaml	1	# This documentation has been moved to https://skaffold.dev/docs/references/yaml/	COMMENT
LOW	integration/examples/ko-sync-infer/skaffold.yaml	1	# Copyright 2022 The Skaffold Authors	COMMENT
LOW	integration/examples/ko-sync-infer/k8s/example.yaml	1	# Copyright 2022 The Skaffold Authors	COMMENT
LOW	…tegration/examples/templated-fields/charts/values.yaml	1	# Default values for skaffold-helm.	COMMENT
LOW	integration/examples/typescript/backend/tsconfig.json	1	{	COMMENT
LOW	integration/examples/typescript/backend/tsconfig.json	21	// "removeComments": true, /* Do not emit comments to output. */	COMMENT
LOW	integration/examples/typescript/backend/tsconfig.json	41	// "noFallthroughCasesInSwitch": true, /* Report errors for fallthrough cases in switch statement. */	COMMENT
LOW	integration/examples/custom-tests/test.sh	1	#!/bin/bash	COMMENT
LOW	…ration/examples/multiple-renderers/backend/values.yaml	1	# This is a YAML-formatted file.	COMMENT
LOW	…on/examples/helm-deployment-dependencies/skaffold.yaml	21	# some:	COMMENT
LOW	…helm-deployment-dependencies/skaffold-helm/values.yaml	21	annotations:	COMMENT
LOW	…dependencies/skaffold-helm/charts/subchart/values.yaml	21	- chart-example.local	COMMENT
LOW	integration/examples/custom-buildx/buildx.sh	1	#!/bin/sh	COMMENT
LOW	…tegration/examples/go-integration-coverage/coverage.go	1	// Copyright 2023 The Skaffold Authors	COMMENT
LOW	…tegration/examples/go-integration-coverage/coverage.go	21	"runtime/coverage"	COMMENT
LOW	…gration/examples/go-integration-coverage/skaffold.yaml	1	# Copyright 2023 The Skaffold Authors	COMMENT
LOW	integration/examples/go-integration-coverage/main.go	1	// Copyright 2023 The Skaffold Authors	COMMENT
LOW	…mples/go-integration-coverage/k8s/base/deployment.yaml	1	# Copyright 2023 The Skaffold Authors	COMMENT
LOW	…examples/go-integration-coverage/k8s/base/service.yaml	1	# Copyright 2023 The Skaffold Authors	COMMENT
LOW	…amples/go-integration-coverage/integration-test/run.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/go-integration-coverage/integration-test/coverage.sh	1	#!/usr/bin/env bash	COMMENT
LOW	integration/examples/ko/cloudbuild.yaml	1	# Copyright 2021 The Skaffold Authors	COMMENT
LOW	integration/examples/ko/skaffold.yaml	1	# Copyright 2021 The Skaffold Authors	COMMENT
LOW	integration/examples/ko/k8s/example.yaml	1	# Copyright 2021 The Skaffold Authors	COMMENT
LOW	hack/update-lts-dependencies.sh	1	#!/bin/bash	COMMENT
LOW	hack/skaffold-deps-sha1.sh	1	#!/usr/bin/env bash	COMMENT
LOW	hack/generate-k3d-registries.sh	1	#!/bin/sh	COMMENT
LOW	hack/check-licenses.sh	1	#!/usr/bin/env bash	COMMENT
LOW	hack/gofmt.sh	1	#!/bin/bash	COMMENT
LOW	hack/linters.sh	1	#!/bin/bash	COMMENT
LOW	hack/check-schema-changes.sh	1	#!/usr/bin/env bash	COMMENT
LOW	hack/check-schema-changes.sh	21	# If they are structural changes and the package is not "latest",	COMMENT
808 more matches not shown…

Structural Annotation Overuse30 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	docs-v1/content/en/docs/tutorials/ci_cd.md	14	## Step 1: Getting the project and Dockerfile ready	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	37	## Step 2: Choosing the deployment method	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	43	## Step 3: Choosing the image and tag strategy	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	49	## Step 4: Plugins (optional)	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	53	## Step 5: The `skaffold.yaml` file	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	130	## Step 6: Development & Testing locally	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	140	## Step 7: Setting up authentication with the registry	COMMENT
LOW⚡	docs-v1/content/en/docs/tutorials/ci_cd.md	150	## Step 8: Using DIND Service (Optional)	COMMENT
LOW	docs-v1/content/en/docs/tutorials/ci_cd.md	251	## Step 9: Getting the CI pipeline setup	COMMENT
LOW	docs-v1/content/en/docs/tutorials/ci_cd.md	300	## Step 10: That’s all folks	COMMENT
LOW	…rs/backend/templates/guestbook-mongodb.deployment.yaml	2	# WARNING: This MongoDB deployment is not suitable for production as the data is	COMMENT
LOW	integration/examples/custom-buildx/README.md	29	##### Step 1: Obtain the example	COMMENT
LOW	integration/examples/custom-buildx/README.md	39	##### Step 2: Configure the custom builder	COMMENT
LOW	integration/examples/custom-buildx/README.md	65	##### Step 3: Configure node affinities	COMMENT
LOW	integration/examples/custom-buildx/README.md	74	##### Step 4: Build and deploy the example	COMMENT
LOW	…rs/backend/templates/guestbook-mongodb.deployment.yaml	2	# WARNING: This MongoDB deployment is not suitable for production as the data is	COMMENT
LOW	examples/custom-buildx/README.md	29	##### Step 1: Obtain the example	COMMENT
LOW	examples/custom-buildx/README.md	39	##### Step 2: Configure the custom builder	COMMENT
LOW	examples/custom-buildx/README.md	65	##### Step 3: Configure node affinities	COMMENT
LOW	examples/custom-buildx/README.md	74	##### Step 4: Build and deploy the example	COMMENT
LOW	docs-v2/content/en/docs/tutorials/ci_cd.md	14	## Step 1: Getting the project and Dockerfile ready	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	37	## Step 2: Choosing the deployment method	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	43	## Step 3: Choosing the image and tag strategy	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	49	## Step 4: Plugins (optional)	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	53	## Step 5: The `skaffold.yaml` file	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	130	## Step 6: Development & Testing locally	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	140	## Step 7: Setting up authentication with the registry	COMMENT
LOW⚡	docs-v2/content/en/docs/tutorials/ci_cd.md	150	## Step 8: Using DIND Service (Optional)	COMMENT
LOW	docs-v2/content/en/docs/tutorials/ci_cd.md	251	## Step 9: Getting the CI pipeline setup	COMMENT
LOW	docs-v2/content/en/docs/tutorials/ci_cd.md	300	## Step 10: That’s all folks	COMMENT

Hallucination Indicators2 hits · 30 pts

Severity	File	Line	Snippet	Context
CRITICAL	docs-v1/static/swagger/swagger-ui-bundle.js	133	*/o=[],void 0===(i="function"==typeof(r=function(){var e,t,n,r,o,i,a,s=function(e){e=e\|\|{},this.version=s.version,this.	COMMENT
CRITICAL	docs-v2/static/swagger/swagger-ui-bundle.js	133	*/o=[],void 0===(i="function"==typeof(r=function(){var e,t,n,r,o,i,a,s=function(e){e=e\|\|{},this.version=s.version,this.	COMMENT

AI Slop Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs-v1/static/swagger/swagger-ui-bundle.js	79	*/Object.defineProperty(t,"__esModule",{value:!0});var r="function"==typeof Symbol&&Symbol.for,o=r?Symbol.for("react.el	COMMENT
MEDIUM	docs-v2/static/swagger/swagger-ui-bundle.js	79	*/Object.defineProperty(t,"__esModule",{value:!0});var r="function"==typeof Symbol&&Symbol.for,o=r?Symbol.for("react.el	COMMENT
MEDIUM	pkg/skaffold/debug/transform_go.go	47	// dlvSpec captures the useful delve runtime options	COMMENT
MEDIUM	pkg/skaffold/debug/transform_go.go	157	// delve's defaults	COMMENT
MEDIUM	pkg/skaffold/debug/transform_go.go	175	// this is actually an error: delve insists on a :port	COMMENT

Hyper-Verbose Identifiers14 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	260	function stopInfiniteResizingOfIFrame(){	CODE
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	352	function disconnectMutationObserver(){	CODE
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	371	function injectClearFixIntoBodyElement(){	CODE
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	530	setHeightCalculationMethod: function setHeightCalculationMethodF(heightCalculationMethod){	CODE
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	535	setWidthCalculationMethod: function setWidthCalculationMethodF(widthCalculationMethod){	CODE
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	563	function setupBodyMutationObserver(){	CODE
LOW	docs-v1/static/scripts/iframeResizer.js	78	function setupRequestAnimationFrame(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	260	function stopInfiniteResizingOfIFrame(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	352	function disconnectMutationObserver(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	371	function injectClearFixIntoBodyElement(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	530	setHeightCalculationMethod: function setHeightCalculationMethodF(heightCalculationMethod){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	535	setWidthCalculationMethod: function setWidthCalculationMethodF(widthCalculationMethod){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	563	function setupBodyMutationObserver(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.js	78	function setupRequestAnimationFrame(){	CODE

Fake / Example Data13 hits · 13 pts

Severity	File	Line	Snippet	Context
LOW	docs-v1/static/swagger/swagger-ui.js	1	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE
LOW	docs-v1/static/swagger/swagger-ui-bundle.js	51	function n(e){return e instanceof t\|\|e instanceof Date\|\|e instanceof RegExp}function r(e){if(e instanceof t){var n=t.all	CODE
LOW	docs-v1/static/swagger/swagger-ui-bundle.js	71	var n=this&&this.__extends\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n]);function r(){this.constructor=	CODE
LOW	docs-v1/static/swagger/swagger-ui-standalone-preset.js	13	var r=n(237),i=n(238),o=n(135);function u(){return a.TYPED_ARRAY_SUPPORT?2147483647:1073741823}function s(t,e){if(u()<e)	CODE
LOW	integration/build_test.go	302	{"config", "user.name", "John Doe"},	CODE
LOW	docs-v2/static/swagger/swagger-ui.js	1	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE
LOW	docs-v2/static/swagger/swagger-ui-bundle.js	51	function n(e){return e instanceof t\|\|e instanceof Date\|\|e instanceof RegExp}function r(e){if(e instanceof t){var n=t.all	CODE
LOW	docs-v2/static/swagger/swagger-ui-bundle.js	71	var n=this&&this.__extends\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n]);function r(){this.constructor=	CODE
LOW	docs-v2/static/swagger/swagger-ui-standalone-preset.js	13	var r=n(237),i=n(238),o=n(135);function u(){return a.TYPED_ARRAY_SUPPORT?2147483647:1073741823}function s(t,e){if(u()<e)	CODE
LOW	pkg/skaffold/sync/sync_test.go	217	Tag: "placeholder",	CODE
LOW	pkg/skaffold/sync/sync_test.go	237	Tag: "placeholder",	CODE
LOW	pkg/skaffold/sync/sync_test.go	583	Tag: "placeholder",	CODE
LOW	pkg/skaffold/tag/git_commit_test.go	744	Name: "John Doe",	CODE

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	hack/generate-k3d-registries.sh	17	# Create a k3s/k3d registries.yaml to use the docker daemon's configured registry-mirrors.	COMMENT
MEDIUM	hack/generate-kind-config.sh	17	# Create a kind configuration to use the docker daemon's configured registry-mirrors.	COMMENT

Modern AI Meta-Vocabulary2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	…cs-v1/content/en/docs/tutorials/config-dependencies.md	7	Skaffold's [config dependencies]({{<relref "/docs/design/config#configuration-dependencies" >}}) feature allows you to i	CODE
MEDIUM	…cs-v2/content/en/docs/tutorials/config-dependencies.md	7	Skaffold's [config dependencies]({{<relref "/docs/design/config#configuration-dependencies" >}}) feature allows you to i	CODE

Slop Phrases2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs-v1/static/swagger/swagger-ui-bundle.js	51	function n(e){return e instanceof t\|\|e instanceof Date\|\|e instanceof RegExp}function r(e){if(e instanceof t){var n=t.all	CODE
MEDIUM	docs-v2/static/swagger/swagger-ui-bundle.js	51	function n(e){return e instanceof t\|\|e instanceof Date\|\|e instanceof RegExp}function r(e){if(e instanceof t){var n=t.all	CODE

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	pkg/skaffold/inspect/output.go	26	// TODO: implement other output formatters. Currently only JSON is implemented	COMMENT
LOW	pkg/skaffold/deploy/cloudrun/deploy.go	91	// TODO: implement logger for Cloud Run.	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	docs-v1/static/scripts/iframeResizer.contentWindow.js	1026	function getData(){	CODE
LOW	docs-v2/static/scripts/iframeResizer.contentWindow.js	1026	function getData(){	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/boilerplate/boilerplate.py	17		CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/boilerplate/boilerplate.py	119		CODE

GoogleContainerTools/skaffold

Open-Source Code Quality, Security and Technical Debt Review