Turn your PC, Mac, or Linux box into an AI server. LLM inference, chat UI, voice, agents, workflows, RAG, and image generation.
3018 matches across 17 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .claude/commands/test-coverage.md | 202 | # ============================================================================ |
| MEDIUM | .claude/commands/test-coverage.md | 204 | # ============================================================================ |
| MEDIUM | .github/workflows/claude-review.yml | 34 | # ─── Phase 1: Basic comment-only review ─────────────────────────── |
| MEDIUM | .github/workflows/claude-review.yml | 141 | # ─── Phase 2: Sensitive file detection ──────────────────────────── |
| MEDIUM | .github/workflows/claude-review.yml | 248 | # ─── Phase 3: Auto-fix (opt-in via 'ai-fix' label) ─────────────── |
| MEDIUM | .github/workflows/issue-to-pr.yml | 16 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 18 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 58 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 60 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 151 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 153 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 314 | # ============================================================ |
| MEDIUM | .github/workflows/issue-to-pr.yml | 316 | # ============================================================ |
| MEDIUM | dream-server/test-stack.sh | 2 | #============================================================================= |
| MEDIUM | dream-server/test-stack.sh | 18 | #============================================================================= |
| MEDIUM | dream-server/test-stack.sh | 110 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 112 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 120 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 122 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 128 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 130 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 157 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 160 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 169 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 171 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 199 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/test-stack.sh | 201 | # ═══════════════════════════════════════════════════════════════ |
| MEDIUM | dream-server/get-dream-server.sh | 41 | # ── Banner ────────────────────────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 55 | # ── Detect OS ────────────────────────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 83 | # ── Check prerequisites ────────────────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 188 | # ── Check for existing installation ────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 212 | # ── Clone repository ────────────────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 290 | # ── Bundle extensions-library templates ────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 309 | # ── Make scripts executable ────────────────────────── |
| MEDIUM | dream-server/get-dream-server.sh | 315 | # ── Run installer ────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 499 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 501 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 509 | # ── Step 1: rollback snapshot ───────────────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 18 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 20 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 43 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 45 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 317 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 319 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 382 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 384 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 436 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 438 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 544 | # ── Step 2: pull latest changes ─────────────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 557 | # ── Step 3: migrations ──────────────────────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 573 | # ── Step 4: restart services ────────────────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 598 | # ── Step 5: health-check with timeout ──────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 606 | # ── Step 6: record new version ──────────────────────────────────────────── |
| MEDIUM | dream-server/dream-update.sh | 622 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 624 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 721 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 723 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 753 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 755 | #============================================================================== |
| MEDIUM | dream-server/dream-update.sh | 823 | #============================================================================== |
| 1158 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .claude/commands/test-coverage.md | 260 | def test_returns_expected_result(self, test_client): |
| LOW | .claude/commands/test-coverage.md | 266 | def test_rejects_unauthenticated(self, test_client): |
| LOW | .claude/commands/tdd.md | 149 | def test_feature_does_expected_thing(self, test_client): |
| LOW | .github/scripts/generate-type-hints.py | 131 | def generate_type_hints_batch( |
| LOW | .github/scripts/generate-docstrings.py | 131 | def generate_docstrings_batch( |
| LOW | dream-server/bin/dream-mdns.py | 161 | def _direct_ports_lan_reachable(env: dict[str, str]) -> bool: |
| LOW | dream-server/bin/dream-host-agent.py | 135 | def _detect_docker_network_gateway(network_name: str) -> str: |
| LOW | dream-server/bin/dream-host-agent.py | 169 | def _detect_docker_bridge_gateway() -> str: |
| LOW | dream-server/bin/dream-host-agent.py | 396 | def validate_core_recreate_ids(service_ids: list[str]) -> tuple[bool, str]: |
| LOW | dream-server/bin/dream-host-agent.py | 430 | def _post_install_core_recreate(service_id: str) -> None: |
| LOW | dream-server/bin/dream-host-agent.py | 947 | def _service_has_docker_container(service_id: str) -> tuple[bool, str]: |
| LOW | dream-server/bin/dream-host-agent.py | 996 | def _narrow_install_pull_flags(flags: list, service_id: str) -> list: |
| LOW | dream-server/bin/dream-host-agent.py | 1014 | def _narrowed_compose_set_resolves(narrowed_flags: list, service_id: str, |
| LOW | dream-server/bin/dream-host-agent.py | 1065 | def _fail_stale_update_status(data: dict) -> dict: |
| LOW | dream-server/bin/dream-host-agent.py | 1173 | def _write_tailscale_status_payload(self, payload: dict, source: str): |
| LOW | dream-server/bin/dream-host-agent.py | 1197 | def _find_native_tailscale_cli(self) -> str | None: |
| LOW | dream-server/bin/dream-host-agent.py | 1214 | def _try_native_tailscale_status(self) -> bool: |
| LOW | dream-server/bin/dream-host-agent.py | 1454 | def _handle_invalidate_compose_cache(self): |
| LOW | dream-server/bin/dream-host-agent.py | 1622 | def _handle_network_wifi_scan(self): |
| LOW | dream-server/bin/dream-host-agent.py | 1693 | def _handle_network_wifi_connect(self): |
| LOW | dream-server/bin/dream-host-agent.py | 1758 | def _handle_network_wifi_forget(self): |
| LOW | dream-server/bin/dream-host-agent.py | 2124 | def _handle_extension_compose_toggle(self, activate: bool): |
| LOW | dream-server/bin/dream-host-agent.py | 2182 | def _handle_extension_sync_config(self): |
| LOW | dream-server/bin/dream-host-agent.py | 3192 | def _handle_model_download_cancel(self): |
| LOW | dream-server/bin/dream-host-agent.py | 3795 | def _patch_hermes_model_config(path: Path, model_name: str) -> bool: |
| LOW | dream-server/bin/dream-host-agent.py | 3950 | def _launch_native_llama_server(env_path: Path, llama_bin: Path, llama_log: Path, pid_file: Path): |
| LOW | dream-server/bin/dream-host-agent.py | 3998 | def _compose_restart_llama_server(env: dict): |
| LOW | dream-server/tests/test-fedora-strix-compat.py | 49 | def test_amd_dockerfile_arg_scope() -> None: |
| LOW | dream-server/tests/test-fedora-strix-compat.py | 63 | def test_selinux_labels_on_relative_bind_mounts() -> None: |
| LOW | dream-server/tests/test-fedora-strix-compat.py | 83 | def test_dream_doctor_all_backend_wildcard() -> None: |
| LOW | dream-server/tests/test-fedora-strix-compat.py | 89 | def test_token_spy_key_wiring() -> None: |
| LOW | dream-server/tests/test-runtime-config-wiring.py | 16 | def test_linux_installer_uses_renderer_with_fallback() -> None: |
| LOW | dream-server/tests/test-runtime-config-wiring.py | 24 | def test_bootstrap_upgrade_uses_renderer_with_fallback() -> None: |
| LOW | dream-server/tests/test-runtime-config-wiring.py | 32 | def test_host_agent_uses_renderer_with_fallback() -> None: |
| LOW | dream-server/tests/test_todo_fixes.py | 30 | def test_vad_patch_single_line_transcribe_call() -> None: |
| LOW | dream-server/tests/test_todo_fixes.py | 43 | def test_vad_patch_multiline_transcribe_call() -> None: |
| LOW | dream-server/tests/test_todo_fixes.py | 60 | def test_vad_patch_is_idempotent_when_kwargs_already_exist() -> None: |
| LOW | dream-server/tests/test_todo_fixes.py | 72 | def test_vad_patch_uses_rightmost_paren_for_nested_single_line_call() -> None: |
| LOW | dream-server/tests/test-assign-gpus.py | 57 | def test_model_too_large_errors(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 67 | def test_no_topology_analysis_needed(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 79 | def test_model_fits_one_gpu_rank_first_takes_pair(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 85 | def test_model_fits_one_gpu_strategy_colocated(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 90 | def test_model_fits_one_gpu_services_share_last(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 95 | def test_model_fits_one_gpu_pipeline(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 103 | def test_model_needs_both_gpus_strategy_colocated(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 107 | def test_model_needs_both_gpus_llama_gets_both(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 111 | def test_model_needs_both_gpus_services_share_llamas_last(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 116 | def test_model_needs_both_gpus_llama_pipeline(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 141 | def test_model_fits_one_gpu_picks_phb_pair(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 149 | def test_model_fits_one_gpu_colocated(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 154 | def test_model_fits_one_gpu_pipeline(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 161 | def test_model_fits_one_gpu_no_gpu_idle(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 165 | def test_model_needs_two_gpus_colocated(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 169 | def test_model_needs_two_gpus_picks_phb_pair(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 176 | def test_model_needs_two_gpus_pipeline(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 182 | def test_model_needs_three_gpus_colocated(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 186 | def test_model_needs_three_gpus_pipeline_cross_numa(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 192 | def test_model_too_large_errors(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 210 | def test_model_fits_one_gpu_picks_nvlink_pair(self): |
| LOW | dream-server/tests/test-assign-gpus.py | 215 | def test_model_fits_one_gpu_colocated(self): |
| 1081 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | dream-server/bin/dream-host-agent.py | 3509 | # Lemonade returns {"status":"ok","model_loaded":null} |
| HIGH | dream-server/bin/dream-host-agent.py | 3663 | Lemonade returns {"status": "ok", "model_loaded": null} when healthy |
| HIGH | dream-server/tests/test-perplexica-entrypoint.py | 32 | sample = 'g.push({content:k,metadata:{url:a,title:j}})' |
| HIGH | dream-server/tests/test-perplexica-entrypoint.py | 39 | assert patched == 'g.push({content:k.slice(0,30000),metadata:{url:a,title:j}})' |
| HIGH | …xtensions/services/dashboard-api/routers/extensions.py | 480 | # `deploy: { resources: null }` or `resources: { reservations: null }` |
| HIGH | …rver/extensions/services/dashboard-api/routers/talk.py | 571 | "status": "ok", "warning": null} |
| HIGH | …nsions/services/dashboard-api/tests/test_extensions.py | 2587 | ' "phase_label": "stale", "error": null,' |
| HIGH | …nsions/services/dashboard-api/tests/test_extensions.py | 2035 | """Strict regression for the audit-flagged bug: `deploy: { resources: null }`. |
| HIGH | …nsions/services/dashboard-api/tests/test_extensions.py | 2055 | """Defense-in-depth: `resources: { reservations: null }`. |
| HIGH | …ns/services/dashboard-api/tests/test_model_activate.py | 38 | body = '{"status": "ok", "model_loaded": null}' |
| HIGH | …ns/services/dashboard-api/tests/test_model_activate.py | 52 | """model_loaded=false is unusual but non-null, so should be True.""" |
| HIGH | …ns/services/dashboard-api/tests/test_model_activate.py | 57 | """model_loaded="" is non-null, so should be True.""" |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2067 | totalCost += d.total_cost || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2068 | totalInput += d.total_input_tokens || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2069 | totalOutput += d.total_output_tokens || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2070 | totalTurns += d.turns || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2071 | totalCacheRead += d.total_cache_read || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2072 | totalCacheWrite += d.total_cache_write || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2154 | { label: 'Input', data: sorted.map(u => u.input_tokens || 0), color: '#58a6ff' }, |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2155 | { label: 'Output', data: sorted.map(u => u.output_tokens || 0), color: '#f0883e' }, |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2156 | { label: 'Cache Read', data: sorted.map(u => u.cache_read_tokens || 0), color: '#3fb950' }, |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2157 | { label: 'Cache Write', data: sorted.map(u => u.cache_write_tokens || 0), color: '#da3633' }, |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2167 | cacheRead += (u.cache_read_tokens || 0); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2168 | cacheWrite += (u.cache_write_tokens || 0); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2169 | input += (u.input_tokens || 0); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2170 | output += (u.output_tokens || 0); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2172 | const total = cacheRead + cacheWrite + input + output || 1; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2202 | const cost = u.estimated_cost_usd || 0; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2205 | totalData.push({x: ts, y: runningTotal}); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2206 | if (running[u.agent] !== undefined) { |
| HIGH | dream-server/extensions/services/token-spy/main.py | 1943 | let tokensChart = null, breakdownChart = null, costChart = null, historyChart = null, cumulativeChart = null; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 1964 | window._scl = sessions.reduce((max, s) => Math.max(max, s.session_char_limit || 200000), 200000); |
| HIGH | dream-server/extensions/services/token-spy/main.py | 1989 | if (n == null) return '\\u2014'; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 1996 | if (n == null) return '$0.00'; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2036 | const limit = s.session_char_limit || 200000; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2102 | points: agentData.map(u => ({x: parseTs(u.timestamp), y: u.estimated_cost_usd || 0})), |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2126 | points: agentData.map(u => ({x: parseTs(u.timestamp), y: u.conversation_history_chars || 0})), |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2138 | { value: window._scl || 200000, color: '#f0883e', label: fmt(window._scl || 200000) + ' (~' + fmt(Math.round((wind |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2139 | { value: (window._scl || 200000) * 2.5, color: '#da3633', label: fmt((window._scl || 200000) * 2.5) + ' (~' + fmt( |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2273 | window._scl = s.session_char_limit || 200000; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2300 | if (cfg.session_char_limit != null) { |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2319 | if (!el) return null; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2329 | if (!h4 || h4.textContent === 'Global Defaults') return; |
| HIGH | dream-server/extensions/services/token-spy/main.py | 2355 | window._scl = body.session_char_limit || window._scl; |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/workflows/openclaw-image-diff.yml | 1 | name: openclaw filesystem write gate |
| LOW | dream-server/test-stack.sh | 1 | #!/bin/bash |
| LOW | dream-server/docker-compose.intel.yml | 1 | # Dream Server — Intel Arc GPU Overlay (SYCL backend) |
| LOW | dream-server/docker-compose.lemonade-external.yml | 1 | # Dream Server - external Lemonade SDK runtime overlay |
| LOW | dream-server/docker-compose.multigpu-amd.yml | 1 | # Dream Server — AMD Multi-GPU Overlay |
| LOW | dream-server/dream-update.sh | 1 | #!/bin/bash |
| LOW | dream-server/test-install.sh | 1 | #!/bin/bash |
| LOW | dream-server/install-core.sh | 1 | #!/bin/bash |
| LOW | dream-server/install-core.sh | 221 | --no-dreamforge) warn "DreamForge has been removed; ignoring --no-dreamforge"; shift ;; |
| LOW | dream-server/docker-compose.arc.yml | 1 | # Dream Server — Intel Arc GPU Overlay (oneAPI SYCL, build-from-source) |
| LOW | dream-server/dream-uninstall.sh | 121 | memory-shepherd-workspace.service memory-shepherd-memory.service \ |
| LOW | dream-server/dream-uninstall.sh | 141 | # the user ends up hitting the 19-hour-old orphan with no DB wired up. |
| LOW | dream-server/docker-compose.base.yml | 101 | # links into the install. |
| LOW | dream-server/docker-compose.base.yml | 221 | # aligned with dream-proxy and dream-mdns so invite QR codes point at |
| LOW | dream-server/bin/dream-host-agent.py | 1601 | |
| LOW | dream-server/bin/dream-host-agent.py | 2221 | # Reject ANY symlink in the config/ tree (or if config/ itself is a |
| LOW | dream-server/bin/dream-host-agent.py | 2701 | # `flags` so cross-service `depends_on` still resolves. |
| LOW | dream-server/config/ape/policy.yaml | 1 | # APE Policy Configuration |
| LOW | dream-server/config/openclaw/inject-token.js | 1 | // Inject gateway auth token into Control UI so it auto-connects |
| LOW | dream-server/config/openclaw/inject-token.js | 41 | // ON, so device auth defaults to ON regardless of bind mode. Disabling it is an |
| LOW | dream-server/tests/test-service-registry.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-openclaw-device-auth-default.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-preflight.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-doc-links.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/test-tier-map.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-extension-integration.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-dream-test.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-openclaw-inject-token.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-hardware-compatibility.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-bind-address-sweep.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-validate-env.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-network-security.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-hooks.sh | 1 | #!/bin/bash |
| LOW | …-server/tests/test-bootstrap-openclaw-compose-guard.sh | 1 | #!/usr/bin/env bash |
| LOW | …-server/tests/test-bootstrap-openclaw-compose-guard.sh | 61 | echo ""; echo "Result: $PASSED passed, $FAILED failed"; exit 1 |
| LOW | dream-server/tests/test-dream-config-secret-mask.sh | 1 | #!/usr/bin/env bash |
| LOW | …eam-server/tests/test-fleet-multi-distro-keep-going.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/test-gpu-apple.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/fleet-external-lemonade-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/test-multi-distro.sh | 1 | #!/bin/bash |
| LOW | dream-server/tests/test-secret-security.sh | 1 | #!/bin/bash |
| LOW | …eam-server/tests/test-macos-host-agent-verification.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/smoke/installer-env-smoke.sh | 1 | #!/bin/bash |
| LOW | …m-server/tests/contracts/test-overlay-map-coherence.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/contracts/test-dream-doctor.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/tests/reproducers/langfuse-uid-check.sh | 1 | #!/usr/bin/env bash |
| LOW | dream-server/docs/TAILSCALE.md | 61 | # 1. Generate an auth key. |
| LOW | dream-server/docs/TAILSCALE.md | 101 | # "hostname": "dream", |
| LOW | dream-server/docs/HERMES-SSO.md | 41 | # 3. Generate an owner card from the dashboard |
| LOW | …ver/extensions/library/templates/compose-gpu-swap.yaml | 1 | # ============================================================================= |
| LOW | …ver/extensions/library/templates/compose-gpu-swap.yaml | 21 | # extensions/services/my-service/ |
| LOW | …ver/extensions/library/templates/compose-gpu-swap.yaml | 61 | # compose.amd.yaml — AMD ROCm overlay (same file, different name) |
| LOW | …ver/extensions/library/templates/compose-gpu-swap.yaml | 81 | # # The container user must belong to the video and render groups on the host. |
| LOW | …ver/extensions/library/templates/compose-gpu-swap.yaml | 101 | # reservations: |
| LOW | …ver/extensions/library/templates/service-template.yaml | 1 | # ============================================================================= |
| LOW | …ver/extensions/library/templates/service-template.yaml | 21 | # VALIDATION: |
| LOW | …ver/extensions/library/templates/service-template.yaml | 61 | external_port_env: MY_SERVICE_PORT # env var name (optional) |
| LOW | …ver/extensions/library/templates/service-template.yaml | 81 | # ── Compose Fragment (REQUIRED for non-core services) ── |
| LOW | …ver/extensions/library/templates/service-template.yaml | 101 | # depends_on: [llama-server, qdrant] |
| LOW | …ver/extensions/library/templates/compose-template.yaml | 1 | # ============================================================================= |
| 139 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/scripts/generate-type-hints.py | 61 | except Exception as e: |
| LOW | .github/scripts/generate-type-hints.py | 180 | except Exception as e: |
| LOW | .github/scripts/generate-docstrings.py | 61 | except Exception as e: |
| LOW | .github/scripts/generate-docstrings.py | 180 | except Exception as e: |
| MEDIUM | dream-server/bin/dream-host-agent.py | 677 | def _thread_target() -> None: |
| MEDIUM | dream-server/bin/dream-host-agent.py | 1496 | def _handle_update_check(self): |
| MEDIUM | dream-server/bin/dream-host-agent.py | 2499 | def restart_container_later(): |
| LOW | dream-server/bin/dream-host-agent.py | 2812 | except Exception: |
| LOW | dream-server/bin/dream-host-agent.py | 297 | except Exception as e: |
| LOW | dream-server/bin/dream-host-agent.py | 688 | except Exception: |
| LOW | dream-server/bin/dream-host-agent.py | 697 | except Exception: |
| LOW | dream-server/bin/dream-host-agent.py | 1406 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 1585 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 2387 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 2440 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 2510 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 2530 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 2831 | except Exception: |
| LOW | dream-server/bin/dream-host-agent.py | 2880 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 3183 | except Exception as exc: |
| LOW | dream-server/bin/dream-host-agent.py | 3596 | except Exception as exc: |
| LOW | dream-server/tests/test-service-registry.sh | 203 | except Exception: |
| LOW | dream-server/tests/test-openclaw-device-auth-default.sh | 54 | except Exception: print("__MISSING__") |
| LOW | dream-server/tests/test-templates.sh | 76 | except Exception: |
| LOW | dream-server/tests/dashboard-load-test.py | 62 | except Exception as e: |
| LOW | dream-server/tests/dashboard-load-test.py | 87 | except Exception as e: |
| LOW | dream-server/tests/validate-agent-templates.py | 139 | except Exception as exc: # noqa: BLE001 - diagnostic script should continue |
| LOW | dream-server/extensions/library/services/bark/server.py | 175 | except Exception as e: |
| LOW | dream-server/extensions/library/services/bark/server.py | 197 | except Exception as e: |
| LOW | …server/extensions/library/services/bark/test_server.py | 177 | except Exception as e: |
| LOW | …server/extensions/library/services/bark/test_server.py | 274 | except Exception as e: |
| MEDIUM | …server/extensions/library/services/bark/test_server.py | 173 | def make_request(): |
| MEDIUM | …server/extensions/library/services/bark/test_server.py | 270 | def load_and_check(): |
| LOW | dream-server/extensions/services/ape/main.py | 420 | except Exception: # pragma: no cover - best effort |
| LOW | dream-server/extensions/services/ape/main.py | 426 | except Exception as e: |
| LOW | dream-server/extensions/services/ape/main.py | 77 | except Exception: # pragma: no cover - platform dependent |
| LOW | dream-server/extensions/services/ape/main.py | 214 | except Exception as e: |
| LOW | dream-server/extensions/services/ape/main.py | 281 | except Exception: # pragma: no cover - non-serialisable args |
| LOW | dream-server/extensions/services/ape/main.py | 404 | except Exception as e: # corrupt / partial file → start clean, keep file |
| LOW | dream-server/extensions/services/ape/main.py | 705 | except Exception as e: |
| LOW | dream-server/extensions/services/ape/main.py | 1040 | except Exception as e: |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 195 | except Exception: # pragma: no cover — best-effort cleanup |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 199 | except Exception: # pragma: no cover |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 215 | except Exception: |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 220 | except Exception: |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 287 | except Exception: # pragma: no cover — keep sweeper alive on bugs |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 945 | except Exception: |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 1602 | except Exception: |
| LOW | …ver/extensions/services/dashboard-api/routers/voice.py | 31 | except Exception: |
| LOW | …ver/extensions/services/dashboard-api/routers/voice.py | 43 | except Exception: |
| LOW | …ver/extensions/services/dashboard-api/routers/setup.py | 179 | except Exception as exc: # noqa: BLE001 — sentinel contract requires *some* terminal signal |
| LOW | …erver/extensions/services/dashboard-api/routers/gpu.py | 447 | except Exception: # Broad catch: background task must survive transient failures |
| LOW | …rver/extensions/services/dashboard-api/routers/talk.py | 212 | except Exception: |
| LOW | …r/extensions/services/dashboard-api/routers/privacy.py | 76 | except Exception: |
| LOW | …am-server/extensions/services/token-spy/db_postgres.py | 137 | except Exception: |
| LOW | …am-server/extensions/services/token-spy/db_postgres.py | 210 | except Exception: |
| LOW | dream-server/extensions/services/token-spy/main.py | 1011 | except Exception as e: |
| LOW | dream-server/extensions/services/token-spy/main.py | 1020 | except Exception: |
| LOW | dream-server/extensions/services/token-spy/main.py | 1508 | except Exception as e: |
| LOW | dream-server/extensions/services/token-spy/main.py | 405 | except Exception as e: |
| 53 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/scripts/generate-type-hints.py | 34 | |
| LOW | .github/scripts/apply-type-hints.py | 89 | |
| LOW | .github/scripts/generate-docstrings.py | 34 | |
| LOW | dream-server/bin/dream-host-agent.py | 233 | |
| LOW | dream-server/bin/dream-host-agent.py | 282 | |
| LOW | dream-server/bin/dream-host-agent.py | 598 | |
| LOW | dream-server/bin/dream-host-agent.py | 852 | |
| LOW | dream-server/bin/dream-host-agent.py | 4050 | |
| LOW | dream-server/bin/dream-host-agent.py | 1151 | |
| LOW | dream-server/bin/dream-host-agent.py | 1409 | |
| LOW | dream-server/bin/dream-host-agent.py | 1693 | |
| LOW | dream-server/bin/dream-host-agent.py | 1844 | |
| LOW | dream-server/bin/dream-host-agent.py | 2182 | |
| LOW | dream-server/bin/dream-host-agent.py | 2661 | |
| LOW | dream-server/bin/dream-host-agent.py | 2838 | |
| LOW | dream-server/bin/dream-host-agent.py | 2897 | |
| LOW | dream-server/bin/dream-host-agent.py | 3233 | |
| LOW | dream-server/bin/dream-host-agent.py | 3604 | |
| LOW | dream-server/bin/dream-host-agent.py | 2678 | |
| LOW | dream-server/bin/dream-host-agent.py | 3004 | |
| LOW | dream-server/bin/dream-host-agent.py | 3040 | |
| LOW | dream-server/tests/dashboard-load-test.py | 38 | |
| LOW | dream-server/tests/validate-agent-templates.py | 75 | |
| LOW | dream-server/tests/test_mdns_subdomains.py | 45 | |
| LOW | dream-server/tests/contracts/test-port-contracts.py | 55 | |
| LOW | dream-server/extensions/services/ape/main.py | 293 | |
| LOW | dream-server/extensions/services/ape/main.py | 409 | |
| LOW | dream-server/extensions/services/ape/main.py | 482 | |
| LOW | dream-server/extensions/services/ape/main.py | 790 | |
| LOW | dream-server/extensions/services/ape/main.py | 1011 | |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 257 | |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 321 | |
| LOW | …eam-server/extensions/services/dashboard-api/config.py | 55 | |
| LOW | …eam-server/extensions/services/dashboard-api/config.py | 315 | |
| LOW | …eam-server/extensions/services/dashboard-api/config.py | 409 | |
| LOW | …m-server/extensions/services/dashboard-api/settings.py | 178 | |
| LOW | dream-server/extensions/services/dashboard-api/gpu.py | 37 | |
| LOW | dream-server/extensions/services/dashboard-api/gpu.py | 144 | |
| LOW | dream-server/extensions/services/dashboard-api/gpu.py | 257 | |
| LOW | dream-server/extensions/services/dashboard-api/gpu.py | 487 | |
| LOW | dream-server/extensions/services/dashboard-api/gpu.py | 652 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 128 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 259 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 418 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 582 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 1356 | |
| LOW | dream-server/extensions/services/dashboard-api/main.py | 1358 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 482 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 526 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 592 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 662 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 690 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 761 | |
| LOW | …am-server/extensions/services/dashboard-api/helpers.py | 794 | |
| LOW | …r/extensions/services/dashboard-api/user_extensions.py | 19 | |
| LOW | …er/extensions/services/dashboard-api/routers/models.py | 74 | |
| LOW | …r/extensions/services/dashboard-api/routers/updates.py | 38 | |
| LOW | …r/extensions/services/dashboard-api/routers/updates.py | 262 | |
| LOW | …/extensions/services/dashboard-api/routers/features.py | 114 | |
| LOW | …extensions/services/dashboard-api/routers/templates.py | 99 | |
| 47 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | install.sh | 16 | # Check if dream-server directory exists |
| LOW | .github/workflows/autonomous-code-scanner.yml | 363 | # Check if budget exceeded |
| LOW | dream-server/dream-backup.sh | 669 | # Check if running in Dream Server directory |
| LOW | dream-server/dream-restore.sh | 625 | # Check if running in Dream Server directory |
| LOW | dream-server/dream-preflight.sh | 205 | # Check if container is running but model still loading |
| LOW | dream-server/tests/test-tts-full.sh | 27 | # Check if we got audio data (MP3 starts with ID3 or empty binary) |
| LOW | dream-server/tests/test-phase-c-p1.sh | 55 | # Check if values are hardcoded (static string detection) |
| LOW | dream-server/tests/test-phase-c-p1.sh | 131 | # Check if settings endpoint returns data |
| LOW | dream-server/tests/test-phase-c-p1.sh | 145 | # Check if voice agent service is running properly |
| LOW | dream-server/tests/test-hardware-compatibility.sh | 230 | # Check if installer validates disk space |
| LOW | dream-server/tests/test-network-security.sh | 107 | # Check if ports are bound to localhost only |
| LOW | dream-server/tests/test-network-security.sh | 113 | # Check if this is intentional (dashboard, API endpoints) |
| LOW | dream-server/tests/benchmark-status-performance.sh | 25 | # Check if dream-cli exists |
| LOW | dream-server/tests/test-network-timeouts.sh | 53 | # Check if timeout is present on the same line or nearby |
| LOW | dream-server/tests/test-network-timeouts.sh | 60 | # Check if timeout is on the same line (use grep -F for fixed string) |
| LOW | dream-server/tests/test-stt-full.sh | 18 | # Check if we can generate a simple test |
| LOW | dream-server/tests/test-secret-security.sh | 303 | # Check if there's allowlist validation to mitigate the risk |
| LOW | dream-server/tests/smoke/installer-env-smoke.sh | 337 | # Check if it's defined anywhere else |
| LOW | …xtensions/services/dashboard-api/routers/extensions.py | 1762 | # Check if service is still enabled (built-in or user extension) |
| LOW | …nsions/services/dashboard-api/tests/test_extensions.py | 3063 | # Set updated_at to far in the past (well over 1 hour) |
| LOW | …am-server/extensions/services/token-spy/db_postgres.py | 72 | # Check if tenant exists |
| LOW | dream-server/extensions/services/token-spy/main.py | 1511 | # Check if this agent needs an auto-reset |
| LOW | dream-server/extensions/services/token-spy/filters.py | 290 | # Check if tail messages are already in filtered_conv |
| LOW | …ver/extensions/services/privacy-shield/pii_scrubber.py | 90 | # Check if we've seen this PII before |
| LOW | …erver/extensions/services/whisper/docker-entrypoint.sh | 59 | # Check if VAD parameters already exist |
| LOW | dream-server/scripts/migrate-config.sh | 9 | # ./migrate-config.sh check # Check if migration needed |
| LOW | dream-server/scripts/migrate-config.sh | 166 | # Check if migration is needed |
| LOW | dream-server/scripts/migrate-config.sh | 242 | # Check if this migration is needed |
| LOW | dream-server/scripts/pre-download.sh | 194 | # Check if model is cached |
| LOW | dream-server/scripts/validate.sh | 123 | # Check if container is running |
| LOW | dream-server/scripts/session-cleanup.sh | 94 | # Check if this session is active |
| LOW | dream-server/scripts/validate-compose-stack.sh | 47 | # Check if docker/docker compose is available |
| LOW | dream-server/scripts/dream-doctor.sh | 221 | # Check if extension is enabled |
| LOW | dream-server/scripts/dream-test-functional.sh | 114 | # Check if response contains "4" (the answer to 2+2) |
| LOW | dream-server/scripts/dream-test-functional.sh | 200 | # Check if response contains array of numbers |
| LOW | dream-server/scripts/llm-cold-storage.sh | 55 | # Check if any running process references this model |
| LOW | dream-server/memory-shepherd/memory-shepherd.sh | 307 | # Check if the agent exists in config |
| LOW | dream-server/installers/macos/install-macos.sh | 1277 | # Check if process died |
| LOW | dream-server/installers/macos/install-macos.sh | 1396 | # Check if "apple" is not listed but service works on CPU |
| LOW | dream-server/installers/macos/lib/env-generator.sh | 669 | # Check if Perplexica is responding |
| LOW | dream-server/installers/macos/lib/env-generator.sh | 681 | # Check if already configured |
| LOW | dream-server/installers/macos/lib/detection.sh | 103 | # Check if docker CLI is available |
| LOW | dream-server/installers/macos/lib/detection.sh | 127 | # Check if Docker daemon is responsive |
| LOW | dream-server/installers/lib/packaging.sh | 127 | # Check if a package is available in the repos |
| LOW | dream-server/installers/lib/background-tasks.sh | 85 | # Check if process is still running |
| LOW | dream-server/installers/lib/background-tasks.sh | 163 | # Check if still running |
| LOW | dream-server/installers/lib/path-utils.sh | 83 | # Check if path is empty |
| LOW | dream-server/installers/lib/path-utils.sh | 89 | # Check if parent directory exists and is writable |
| LOW | dream-server/installers/phases/13-summary.sh | 72 | # Check if any background tasks are registered |
| LOW | dream-server/installers/phases/11-services.sh | 376 | # Check if model exists and verify integrity |
| LOW | dream-server/installers/phases/02-detection.sh | 222 | # Check if upgrade succeeded |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | dream-server/docker-compose.lemonade-external.yml | 7 | # This file is intentionally not standalone. It is selected by |
| MEDIUM | dream-server/config/litellm/lemonade.yaml | 6 | # This file is a template. The installer (06-directories.sh) generates |
| MEDIUM | dream-server/tests/benchmark-status-performance.sh | 35 | # Create a simple HTTP server that responds to health checks |
| MEDIUM | dream-server/tests/test-hooks.sh | 76 | # Create a test extension with both setup_hook and hooks.post_install |
| MEDIUM | dream-server/tests/test-restore-safety-ux.sh | 28 | # Create a minimal backup (manifest only, no data dirs) |
| MEDIUM | dream-server/tests/test-doctor-command.sh | 123 | # Create a mock report with failures |
| MEDIUM | dream-server/tests/test-backup-integrity.sh | 25 | # Create a minimal fake Dream directory with some data |
| MEDIUM | dream-server/tests/test-stt-full.sh | 14 | # Create a small test audio file (silence + tone) |
| MEDIUM | dream-server/tests/test-disk-space-preflight.sh | 37 | # Create a minimal fake Dream dir with some data so the estimated size is > ~0 |
| MEDIUM | dream-server/tests/test-disk-space-preflight.sh | 57 | # Create a minimal backup directory for restore size estimation |
| MEDIUM | …ver/extensions/library/templates/compose-template.yaml | 5 | # This file is merged into the compose stack via: |
| MEDIUM | dream-server/extensions/templates/compose-template.yaml | 5 | # This file is merged into the compose stack via: |
| MEDIUM | …nsions/services/dashboard-api/tests/test_extensions.py | 421 | # Create a broken user extension directory (no compose.yaml or compose.yaml.disabled) |
| MEDIUM | …nsions/services/dashboard-api/tests/test_extensions.py | 2512 | # Create a real file and symlink compose.yaml to it |
| MEDIUM | …nsions/services/dashboard-api/tests/test_extensions.py | 2534 | # Create a real file and symlink the .disabled to it |
| MEDIUM | …eam-server/extensions/services/dashboard/entrypoint.sh | 6 | # This file is generated by dashboard-api on first start. |
| MEDIUM | …am-server/extensions/services/token-spy/db_postgres.py | 83 | # Create the default tenant |
| MEDIUM | dream-server/scripts/dream-test-functional.sh | 218 | # Create a simple test audio file or use existing |
| MEDIUM | dream-server/lib/python-cmd.sh | 5 | # This file is sourced by other scripts, so it must not change the caller's shell options. |
| MEDIUM | dream-server/installers/phases/04-requirements.sh | 276 | # This file is sourced by install-core.sh under `set -e`. Keep the phase's |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | dream-server/bin/dream-host-agent.py | 2803 | # Step 4: Success |
| LOW | dream-server/bin/dream-host-agent.py | 2806 | # Step 5: Post-install core recreate (best-effort, non-fatal). |
| LOW | dream-server/bin/dream-host-agent.py | 1784 | # Step 1: resolve and verify this is a Wi-Fi profile. Use -t for |
| LOW | dream-server/bin/dream-host-agent.py | 1824 | # Step 2: type-confirmed Wi-Fi → safe to delete. |
| LOW | dream-server/bin/dream-host-agent.py | 2688 | # Step 1: Setup hook (if requested). The helper is a no-op |
| LOW | dream-server/bin/dream-host-agent.py | 2697 | # Step 2: Pull (best-effort — failure is non-fatal if cached image exists). |
| LOW | dream-server/bin/dream-host-agent.py | 2735 | # Step 3: Start |
| LOW | …ashboard/src/components/__tests__/SetupWizard.test.jsx | 79 | // Step 4: type a name so Next becomes enabled |
| LOW | dream-server/extensions/services/token-spy/filters.py | 228 | # Step 1: Separate system messages from conversation messages |
| LOW | dream-server/extensions/services/token-spy/filters.py | 237 | # Step 2: Group conversation messages into atomic units |
| LOW | dream-server/extensions/services/token-spy/filters.py | 242 | # Step 3: Apply max_pairs — keep only the N most recent units |
| LOW | dream-server/extensions/services/token-spy/filters.py | 249 | # Step 4: Drop old tool calls from older units |
| LOW | dream-server/extensions/services/token-spy/filters.py | 268 | # Step 5: Truncate tool result content in all kept messages |
| LOW | dream-server/extensions/services/token-spy/filters.py | 281 | # Step 6: Flatten units back into message list |
| LOW | dream-server/extensions/services/token-spy/filters.py | 286 | # Step 7: Apply always_keep_last_n safety — ensure the last N raw messages |
| LOW | dream-server/extensions/services/token-spy/filters.py | 301 | # Step 8: Apply max_total_chars if set |
| LOW | dream-server/installers/macos/install-macos.sh | 1920 | # Step 2: skip if already cached. |
| LOW | dream-server/installers/macos/install-macos.sh | 1924 | # Step 3: POST to trigger download. |
| LOW | dream-server/installers/macos/install-macos.sh | 1934 | # Step 4: verify the model is actually cached. |
| LOW | dream-server/installers/macos/install-macos.sh | 1907 | # Step 1: wait briefly for the models API to be ready (max 15s). |
| LOW | dream-server/installers/lib/detection.sh | 563 | # Step 1: Is there even NVIDIA hardware on this machine? |
| LOW | dream-server/installers/lib/detection.sh | 570 | # Step 2: Ensure a driver package is installed |
| LOW | dream-server/installers/lib/detection.sh | 602 | # Step 3: Try loading the module — see why it fails |
| LOW | dream-server/installers/lib/detection.sh | 616 | # Step 4: If it's not a Secure Boot issue, bail out |
| LOW | dream-server/installers/lib/detection.sh | 622 | # Step 5: Secure Boot is blocking the module — ensure it's properly signed |
| LOW | dream-server/installers/lib/detection.sh | 694 | # Step 6: Try loading — if MOK key is already enrolled, this works immediately |
| LOW | dream-server/installers/lib/detection.sh | 705 | # Step 7: MOK key needs firmware enrollment — one reboot required |
| LOW | dream-server/installers/phases/11-services.sh | 881 | # Step 1: start any containers already in Created state |
| LOW | dream-server/installers/phases/11-services.sh | 883 | # Step 2: wait for services to stabilize, then compose pass |
| LOW | dream-server/installers/phases/11-services.sh | 886 | # Step 3: catch any stragglers from the second pass |
| LOW | dream-server/installers/phases/12-health.sh | 343 | # Step 1: wait briefly for the models API to be ready. Whisper's /health |
| LOW | dream-server/installers/phases/12-health.sh | 358 | # Step 2: skip download if already cached. |
| LOW | dream-server/installers/phases/12-health.sh | 362 | # Step 3: POST to trigger download. Log stdout/stderr to install log. |
| LOW | dream-server/installers/phases/12-health.sh | 372 | # Step 4: verify the model is actually cached. POST can return 200 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | dream-server/bin/dream-mdns.py | 27 | |
| LOW | dream-server/bin/dream-host-agent.py | 12 | |
| LOW | dream-server/tests/test-fedora-strix-compat.py | 10 | |
| LOW | dream-server/tests/test-runtime-config-wiring.py | 4 | |
| LOW | dream-server/tests/test_todo_fixes.py | 4 | |
| LOW | dream-server/tests/test-dependency-pins.py | 4 | |
| LOW | dream-server/tests/test-perplexica-entrypoint.py | 4 | |
| LOW | dream-server/tests/test-render-runtime-configs.py | 4 | |
| LOW | dream-server/tests/validate-agent-templates.py | 11 | |
| LOW | dream-server/tests/test_mdns_subdomains.py | 18 | |
| LOW | dream-server/tests/test_setup_card.py | 72 | |
| LOW | dream-server/tests/test_setup_card.py | 73 | |
| LOW | …erver/tests/contracts/test-hermes-worker-guardrails.py | 4 | |
| LOW | dream-server/tests/contracts/test-port-contracts.py | 9 | |
| LOW | …eam-server/tests/contracts/test-dream-cli-contracts.py | 9 | |
| LOW | …ver/tests/contracts/test-network-exposure-contracts.py | 4 | |
| LOW | …ver/extensions/services/dashboard-api/hermes_bridge.py | 27 | |
| LOW | …er/extensions/services/dashboard-api/gguf_inspector.py | 8 | |
| LOW | …xtensions/services/dashboard-api/performance_oracle.py | 12 | |
| LOW | …er/extensions/services/dashboard-api/session_signer.py | 47 | |
| LOW | …rver/extensions/services/dashboard-api/routers/auth.py | 28 | |
| LOW | …ns/services/dashboard-api/routers/oauth_passthrough.py | 51 | |
| LOW | …xtensions/services/dashboard-api/routers/magic_link.py | 49 | |
| LOW | …rver/extensions/services/dashboard-api/routers/talk.py | 9 | |
| LOW | …ver/extensions/services/dashboard-api/routers/usage.py | 3 | |
| LOW | …services/dashboard-api/tests/test_oauth_passthrough.py | 5 | |
| LOW | …er/extensions/services/dashboard-api/tests/conftest.py | 29 | |
| LOW | …ns/services/dashboard-api/tests/test_setup_sentinel.py | 10 | |
| LOW | …/extensions/services/dashboard-api/tests/test_usage.py | 3 | |
| LOW | …extensions/services/dashboard-api/tests/test_models.py | 3 | |
| LOW | …xtensions/services/dashboard-api/tests/test_routers.py | 3 | |
| LOW | …er/extensions/services/token-spy/providers/__init__.py | 6 | |
| LOW | …er/extensions/services/token-spy/providers/__init__.py | 7 | |
| LOW | …er/extensions/services/token-spy/providers/__init__.py | 7 | |
| LOW | …er/extensions/services/token-spy/providers/__init__.py | 8 | |
| LOW | …er/extensions/services/token-spy/providers/__init__.py | 9 | |
| LOW | …tensions/services/token-spy/tests/test_usage_report.py | 3 | |
| LOW | …r/extensions/services/privacy-shield/key_management.py | 6 | |
| LOW | dream-server/scripts/validate-generated-configs.py | 4 | |
| LOW | dream-server/scripts/patch-hermes-config.py | 10 | |
| LOW | dream-server/scripts/check-dependency-pins.py | 9 | |
| LOW | dream-server/scripts/audit-extensions.py | 7 | |
| LOW | dream-server/scripts/healthcheck.py | 46 | |
| LOW | dream-server/scripts/validate-golden-paths.py | 4 | |
| LOW | dream-server/scripts/build-installation-context.py | 25 | |
| LOW | dream-server/scripts/validate-sim-summary.py | 27 | |
| LOW | dream-server/scripts/render-runtime-configs.py | 9 | |
| LOW | dream-server/scripts/generate-setup-card.py | 41 | |
| LOW | dream-server/scripts/generate-setup-card.py | 348 | |
| LOW | dream-server/scripts/select-model.py | 10 | |
| LOW | dream-server/scripts/check-version-consistency.py | 4 | |
| LOW | dream-server/scripts/maintainers/list-stale-branches.py | 9 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | .claude/commands/deep-research.md | 527 | *Generated by Claude Code Deep Research with Rube MCP + PAL MCP* |
| HIGH | .claude/commands/code-review.md | 384 | *Generated by Claude Code Review with PAL MCP Consensus* |
| HIGH | .github/workflows/claude-review.yml | 390 | Generated by Claude Code Review. |
| HIGH | .github/workflows/autonomous-code-scanner.yml | 1029 | Types were generated by Claude Haiku 4.5 and applied via AST-based function lookup. |
| HIGH | .github/workflows/autonomous-code-scanner.yml | 1110 | Docstrings were generated by Claude Haiku 4.5 and inserted via AST-based function lookup. |
| HIGH | .github/workflows/nightly-docs-update.yml | 305 | Generated by Claude Code (claude-sonnet-4-6) | [Workflow Run](${{ github.server_url }}/${{ github.repository |
| HIGH | .github/workflows/nightly-code-review.yml | 249 | Automated code improvements generated by Claude Code. |
| HIGH | dream-server/config/n8n/llm-summarizer.json | 14 | "content": "## LLM Summarizer\n\nThis is a template workflow for sending text or URLs to a webhook and getting a |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | dream-server/test-stack.sh | 8 | # Usage: |
| LOW | dream-server/test-install.sh | 7 | # Usage: |
| LOW | dream-server/tests/test-multi-distro.sh | 8 | # Usage: |
| LOW | dream-server/tests/reproducers/langfuse-uid-check.sh | 13 | # Usage: |
| LOW | dream-server/scripts/migrate-config.sh | 8 | # Usage: |
| LOW | dream-server/scripts/extension-runtime-check.sh | 6 | # Usage: |
| LOW | dream-server/scripts/validate-manifests.sh | 5 | # Usage: |
| LOW | dream-server/scripts/pre-download.sh | 10 | # Usage: |
| LOW | dream-server/scripts/upgrade-model.sh | 10 | # Usage: |
| LOW | dream-server/scripts/dream-test.sh | 12 | # Usage: |
| LOW | dream-server/scripts/llm-cold-storage.sh | 11 | # Usage: |
| LOW | dream-server/scripts/linux-install-preflight.sh | 5 | # Usage: |
| LOW | dream-server/lib/rsync.sh | 11 | # Usage: |
| LOW | dream-server/installers/macos/install-macos.sh | 11 | # Usage: |
| LOW | dream-server/installers/macos/dream-macos.sh | 8 | # Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | dream-server/config/openclaw/inject-token.js | 77 | // (device auth ON). Deleting is more robust than setting false against |
| MEDIUM | dream-server/tests/fleet-multi-distro.sh | 6 | # cron, or a fleet harness without pre-created per-distro containers. |
| MEDIUM | …er/tests/test-bootstrap-upgrade-close-inherited-fds.sh | 5 | # opened (e.g. FD 9 from the fleet harness, or common FD 200 wrappers) for the |
| MEDIUM | dream-server/tests/test-docker-image-pull-retry.sh | 41 | # Run in a clean bash so we can stub sleep/spin_task without affecting this test harness. |
| MEDIUM | …er/extensions/services/dashboard-api/routers/agents.py | 16 | """Get comprehensive agent monitoring metrics.""" |
| MEDIUM | …ns/services/dashboard-api/tests/test_setup_sentinel.py | 115 | # the test harness — but assert only the structural contract here so |
| MEDIUM | …ns/services/dashboard-api/tests/test_setup_sentinel.py | 116 | # this test stays robust against fixture changes. |
| MEDIUM | dream-server/scripts/validate-env.sh | 83 | # .env parsing (robust) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …-server/extensions/library/workflows/comfyui/README.md | 34 | -H "X-API-Key: your-api-key" \ |
| HIGH | …-server/extensions/library/workflows/comfyui/README.md | 66 | -H "X-API-Key: your-api-key" \ |
| HIGH | …server/extensions/library/workflows/langflow/README.md | 32 | -H "X-API-Key: your-api-key" \ |
| HIGH | …-server/extensions/library/workflows/flowise/README.md | 32 | -H "X-API-Key: your-api-key" \ |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …er/extensions/services/token-spy/providers/registry.py | 30 | Get a provider instance by name. Creates a new instance with the given config. Does not cache instances |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/scripts/generate-type-hints.py | 115 | "original_signature": "def process_data(data, options=None):", |
| LOW | .github/scripts/generate-type-hints.py | 116 | "typed_signature": "def process_data(data: List[dict], options: Optional[dict] = None) -> dict:", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ons/services/privacy-shield/tests/test_pii_scrubber.py | 30 | assert "user@example.com" not in result |