Complete open-source monitoring and observability platform.
This report summarizes scanner evidence for OneUptime/oneuptime, a TypeScript project with 7,773 GitHub stars. SynthScan examined 13,520,201 lines of code across 32877 source files, recording 8536 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 1.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 6395 finding(s).
Are imports declared and package/API names verified? 1684 finding(s).
Are wrappers, guards, and repeated structures necessary? 5609 finding(s).
Which changes need focused human review? 8536 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 8536 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ts/Server/AuditLogExport/Fakes/FakeAzureBlobStorage.ts | 104 | export function createFakeAzureBlobStorage(options: { | CODE |
| LOW | …/Server/AuditLogExport/Fakes/FakeGoogleCloudStorage.ts | 134 | export function createFakeGoogleCloudStorage(options: { | CODE |
| LOW | ee/Tests/Server/Identity/ProjectSCIMCrossTenant.test.ts | 918 | function expectEmailChangeNotApplied( | CODE |
| LOW | ee/Tests/Server/Identity/SCIMUserUpdate.test.ts | 256 | function expectProjectAccountRetained(): void { | CODE |
| LOW | …/Tests/Server/TeamCompliance/TeamComplianceAPI.test.ts | 139 | function expectAuthenticationRequired(thrown: unknown): void { | CODE |
| LOW | …/Server/Billing/TeamMemberSeatSyncTrialBilling.test.ts | 136 | async function inviteBringingTheProjectTo(people: number): Promise<void> { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExporter.ts | 144 | export function getAuditLogExportBackoffInMinutes( | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportRedaction.ts | 29 | function getRedactedFieldsByResourceType(): Map<string, Set<string>> { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportRedaction.ts | 84 | export function redactAuditLogExportRecord( | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportFiles.ts | 49 | export function getAuditLogExportObjectKey(data: { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 76 | export function toAuditLogExportRetentionInDays( | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 87 | export function getAuditLogExportEntriesLostAt(data: { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 102 | export function getAuditLogExportLosingNoticeAt(data: { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 132 | export function getAuditLogExportFailureNotice(data: { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 193 | export function buildAuditLogExportFailureEmail(data: { | CODE |
| LOW | ee/Server/AuditLogExport/AuditLogExportNotifications.ts | 293 | export async function getAuditLogExportRetentionInDays( | CODE |
| LOW | …ogExport/Destinations/GoogleCloudStorageDestination.ts | 56 | export function getGoogleCloudStorageUploadUrl(data: { | CODE |
| LOW | …ogExport/Destinations/GoogleCloudStorageDestination.ts | 83 | export function describeGoogleCloudStorageFailure(data: { | CODE |
| LOW | ee/Server/AdminHealth/HealthDashboards.ts | 86 | export async function getClickhouseHealthSummary(): Promise<JSONObject> { | CODE |
| LOW | ee/Server/AdminHealth/HealthDashboards.ts | 451 | export async function getClickhouseTelemetryIngestionByProject(): Promise<JSONObject> { | CODE |
| LOW | ee/Server/AdminHealth/HealthDashboards.ts | 510 | export function registerHealthDashboardRoutes(router: ExpressRouter): void { | CODE |
| LOW | ee/Server/AdminHealth/HealthDashboards.ts | 834 | export function createHealthDashboardsRouter(): ExpressRouter { | CODE |
| LOW | ee/Server/AdminHealth/QueryConsole.ts | 71 | export async function assertQueryConsoleAvailable(): Promise<void> { | CODE |
| LOW | ee/Server/AdminHealth/QueryConsole.ts | 277 | export function assertPostgresStatementAllowed(sql: string): void { | CODE |
| LOW | ee/Server/AdminHealth/QueryConsole.ts | 431 | export function clickhouseStatementIsRead(sql: string): boolean { | CODE |
| LOW | ee/Server/AdminHealth/QueryConsole.ts | 890 | export function registerQueryConsoleRoutes(router: ExpressRouter): void { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 65 | export async function getPostgresHealthSettings(): Promise<PostgresHealthSettings> { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 114 | export function buildPostgresStorageCheck(data: { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 202 | export function buildPostgresConnectionCheck(data: { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 269 | export function buildPostgresWraparoundCheck(data: { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 356 | export function buildPostgresReplicationSlotCheck(data: { | CODE |
| LOW | …erver/Workers/InstanceHealth/EvaluatePostgresHealth.ts | 579 | export async function runEvaluatePostgresHealthWithLock(): Promise<void> { | CODE |
| LOW | ee/Server/Workers/InstanceHealth/PostgresHealth.ts | 78 | export async function getPostgresHealthSnapshot(): Promise<PostgresHealthSnapshot | null> { | CODE |
| LOW | ee/Server/Workers/InstanceHealth/EvaluateRedisHealth.ts | 182 | export function buildRedisConnectionCheck(data: { | CODE |
| LOW | ee/Server/Workers/InstanceHealth/EvaluateRedisHealth.ts | 327 | export function buildRedisPersistenceCheck(data: { | CODE |
| LOW | ee/Server/Workers/InstanceHealth/EvaluateRedisHealth.ts | 488 | export async function runEvaluateRedisHealthWithLock(): Promise<void> { | CODE |
| LOW | ee/Server/Backup/BackupLayout.ts | 35 | export function getBackupClickhouseFolderKey( | CODE |
| LOW | ee/Server/Backup/BackupLayout.ts | 43 | export function getBackupClickhouseMetadataKey( | CODE |
| LOW | ee/Server/Backup/BackupNotifications.ts | 36 | export function shouldNotifyBackupFailure(data: { | CODE |
| LOW | ee/Server/Backup/ClickHouse/ClickhouseBackupEngine.ts | 81 | export function getClickhouseBackupEngine(data: { | CODE |
| LOW | ee/Server/Backup/ClickHouse/ClickhouseBackupEngine.ts | 145 | export function describeClickhouseBackupError(error: string): string { | CODE |
| LOW | ee/Server/Backup/ClickHouse/ClickhouseBackupEngine.ts | 224 | export function aggregateClickhouseBackupRows( | CODE |
| LOW | ee/Server/Backup/Storage/BackupHttp.ts | 79 | export function createGuardedBackupTransport( | CODE |
| LOW | ee/Server/Backup/Storage/AzureBackupStorage.ts | 71 | export function describeAzureBackupFailure(data: { | CODE |
| LOW | ee/Server/Backup/Postgres/PostgresTools.ts | 211 | export function getToolProcessBaseEnvironment(): NodeJS.ProcessEnv { | CODE |
| LOW | ee/Server/Backup/Postgres/PostgresTools.ts | 242 | export function buildPostgresToolEnvironment( | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 128 | export function readExportDestinationType( | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 257 | export function auditLogExportUpdatePayload(data: { | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 289 | export function auditLogExportTestDisabledReason(data: { | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 353 | export function getAuditLogExportInitialValues( | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 415 | export function describeAuditLogExportTarget( | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 486 | export function formatAuditLogExportDuration(data: { | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportForm.ts | 540 | export function getAuditLogExportHealthColor( | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportTest.tsx | 71 | export function auditLogExportTestSettingsKey(build: () => JSONObject): string { | CODE |
| LOW | ee/Dashboard/AuditLogExport/AuditLogExportFormModal.tsx | 111 | export function getAuditLogExportConnectionFields(data: { | CODE |
| LOW | ee/AdminDashboard/Backups/BackupDestinationForm.ts | 356 | export function getBackupFormInitialValues( | CODE |
| LOW | ee/AdminDashboard/Backups/BackupsLicenseNotice.tsx | 22 | export function isBackupsPausedNoticeShown( | CODE |
| LOW | ee/AdminDashboard/Backups/BackupFormat.ts | 566 | export function isBackupAtCurrentDestination(data: { | CODE |
| LOW | ee/AdminDashboard/Backups/BackupSettingsFormModal.tsx | 113 | export function getBackupConnectionFields(data: { | CODE |
| LOW | Tests/Ops/CheckIngressPorts.test.js | 90 | function reverseProxyGuideSettings() { | CODE |
| 5092 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ages/App/Tests/Dashboard/DatabaseProductWiring.test.ts | 651 | expect(builder).not.toContain("<YOUR_API_KEY>"); | CODE |
| HIGH | …ages/App/Tests/Dashboard/DatabaseProductWiring.test.ts | 651 | expect(builder).not.toContain("<YOUR_API_KEY>"); | CODE |
| HIGH | …/App/Tests/Dashboard/MessageQueueProductWiring.test.ts | 1392 | '"<YOUR_API_KEY>"', | CODE |
| HIGH | …/App/Tests/Dashboard/MessageQueueProductWiring.test.ts | 1392 | '"<YOUR_API_KEY>"', | CODE |
| HIGH | …ckages/App/Tests/Dashboard/VMwareProductWiring.test.ts | 567 | expect(markdownSource).not.toContain("<YOUR_API_KEY>"); | CODE |
| HIGH | …ckages/App/Tests/Dashboard/VMwareProductWiring.test.ts | 567 | expect(markdownSource).not.toContain("<YOUR_API_KEY>"); | CODE |
| HIGH | …ges/App/Tests/FeatureSet/Docs/DocsContentRules.test.ts | 878 | "curl https://oneuptime.com/api/monitor/<id>/get-item -H 'ApiKey: YOUR_API_KEY'", | CODE |
| HIGH | …ges/App/Tests/FeatureSet/Docs/DocsContentRules.test.ts | 905 | "https://hooks.example.com/notify/your_api_key", | CODE |
| HIGH | packages/App/Tests/FeatureSet/Docs/DocsContentRules.ts | 307 | * your_api_key - not a page such as /docs/introduction/your-account). | COMMENT |
| HIGH | …App/Tests/FeatureSet/APIReference/ReferenceFixtures.ts | 131 | headers: "Content-Type: application/json\nApiKey: YOUR_API_KEY", | CODE |
| HIGH | …s/FeatureSet/APIReference/CodeExampleGenerator.test.ts | 21 | const API_KEY_PLACEHOLDER: string = "YOUR_API_KEY"; | CODE |
| HIGH | packages/App/FeatureSet/MCP/README.md | 39 | "x-api-key": "your-api-key-here" | CODE |
| HIGH | packages/App/FeatureSet/MCP/README.md | 50 | --header "x-api-key: your-api-key-here" | CODE |
| HIGH | packages/App/FeatureSet/MCP/README.md | 89 | "x-api-key": "your-api-key-here" | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/sv/terraform/quick-start.md | 44 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/sv/terraform/quick-start.md | 48 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/sv/terraform/quick-start.md | 52 | $env:ONEUPTIME_API_KEY = "<your-api-key>" | CODE |
| HIGH | …s/App/FeatureSet/Docs/Content/sv/terraform/opentofu.md | 36 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/terraform/complete-guide.md | 36 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/terraform/complete-guide.md | 58 | oneuptime_api_key = "<your-api-key>" | CODE |
| HIGH | …pp/FeatureSet/Docs/Content/sv/terraform/self-hosted.md | 43 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 67 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 67 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 106 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 106 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 114 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 114 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 123 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 123 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 138 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 138 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 150 | apiKey: <YOUR_API_KEY> | CODE |
| HIGH | …FeatureSet/Docs/Content/sv/monitor/kubernetes-agent.md | 150 | apiKey: <YOUR_API_KEY> | CODE |
| HIGH | …tureSet/Docs/Content/sv/api-reference/api-reference.md | 41 | export ONEUPTIME_API_KEY="your-api-key" | CODE |
| HIGH | packages/App/FeatureSet/Docs/Content/sv/cli/index.md | 59 | oneuptime login <your-api-key> https://oneuptime.com | CODE |
| HIGH | …ckages/App/FeatureSet/Docs/Content/sv/ai/mcp-server.md | 162 | claude mcp add --transport http oneuptime https://oneuptime.com/mcp --header "x-api-key: your-api-key-here" | CODE |
| HIGH | …ckages/App/FeatureSet/Docs/Content/sv/ai/mcp-server.md | 173 | "x-api-key": "your-api-key-here" | CODE |
| HIGH | …ckages/App/FeatureSet/Docs/Content/sv/ai/mcp-server.md | 209 | "x-api-key": "your-api-key-here" | CODE |
| HIGH | …ckages/App/FeatureSet/Docs/Content/sv/ai/mcp-server.md | 292 | - `Authorization`: en bearer-token med din API-nyckel (t.ex. `Bearer your-api-key-here`) | CODE |
| HIGH | …/App/FeatureSet/Docs/Content/sv/inventory/cmdb-sync.md | 69 | export ONEUPTIME_API_KEY="your-api-key" | CODE |
| HIGH | …ges/App/FeatureSet/Docs/Content/sv/telemetry/cursor.md | 135 | curl -u YOUR_API_KEY: https://api.cursor.com/teams/members | CODE |
| HIGH | …atureSet/Docs/Content/sv/telemetry/kubernetes-agent.md | 1029 | curl -i -H "x-oneuptime-token: <YOUR_API_KEY>" https://oneuptime.com/otlp/v1/validate | CODE |
| HIGH | …atureSet/Docs/Content/sv/telemetry/kubernetes-agent.md | 1029 | curl -i -H "x-oneuptime-token: <YOUR_API_KEY>" https://oneuptime.com/otlp/v1/validate | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/da/terraform/quick-start.md | 44 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/da/terraform/quick-start.md | 48 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH⚡ | …pp/FeatureSet/Docs/Content/da/terraform/quick-start.md | 52 | $env:ONEUPTIME_API_KEY = "<your-api-key>" | CODE |
| HIGH | …s/App/FeatureSet/Docs/Content/da/terraform/opentofu.md | 36 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/da/terraform/complete-guide.md | 36 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/da/terraform/complete-guide.md | 58 | oneuptime_api_key = "<your-api-key>" | CODE |
| HIGH | …pp/FeatureSet/Docs/Content/da/terraform/self-hosted.md | 43 | export ONEUPTIME_API_KEY="<your-api-key>" | CODE |
| HIGH | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 67 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 67 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 106 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 106 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 114 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 114 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 123 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH⚡ | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 123 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 138 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| HIGH | …FeatureSet/Docs/Content/da/monitor/kubernetes-agent.md | 138 | --set oneuptime.apiKey=<YOUR_API_KEY> \ | CODE |
| 531 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Tests/Ops/package-repository-e2e.sh | 83 | # ─── The docs' commands ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/package-repository-e2e.sh | 104 | # ─── Two releases of a stand-in package ────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/package-repository-e2e.sh | 133 | # ─── Publish them as release.yml's job does ────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/package-repository-e2e.sh | 198 | # ─── Install from it, as the docs say ──────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 178 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 180 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 285 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 287 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 416 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 418 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 483 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 485 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 515 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 517 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 532 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 534 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 557 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/vmware-agent-native-install.sh | 559 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 116 | // ─── Keys and a signed site ────────────────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 266 | // ─── What GitHub answers ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 409 | // ─── ReleaseStatus.sh ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 1027 | // ─── InstallFromPackageRepository.sh ───────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 1172 | // ─── InstallFromHomebrew.sh ────────────────────────────────────────────── | COMMENT |
| MEDIUM | Tests/Ops/InfrastructureAgentReleaseStatus.test.js | 1308 | // ─── The workflow ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 4 | # ------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 43 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 45 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 62 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 64 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | agents/DatabaseAgent/troubleshoot.sh | 228 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | agents/DatabaseAgent/troubleshoot.sh | 232 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | agents/DatabaseAgent/troubleshoot.sh | 234 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 270 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 272 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 386 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 388 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 501 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 503 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 548 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/troubleshoot.sh | 550 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 26 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 28 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 171 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 173 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 654 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/DatabaseAgent/install.sh | 656 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | agents/StorageArrayAgent/troubleshoot.sh | 201 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | agents/StorageArrayAgent/troubleshoot.sh | 205 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | agents/StorageArrayAgent/troubleshoot.sh | 207 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 4 | # ------------------------------------------------------ | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 49 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 51 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 71 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 73 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 93 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 95 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 251 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 253 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 457 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | agents/StorageArrayAgent/troubleshoot.sh | 459 | # ---------------------------------------------------------------------------- | COMMENT |
| 394 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ee/Tests/UI/License/LicenseManagerRefresh.test.tsx | 143 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/License/LicenseManagerRefresh.test.tsx | 315 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/License/LicenseManagerStatus.test.tsx | 163 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/License/LicenseManagerStatus.test.tsx | 201 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/License/LicenseManagerFlows.test.tsx | 127 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/License/LicenseManagerMarketplace.test.tsx | 152 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/UI/Health/TelemetryIngestionUtils.test.ts | 311 | project({ projectId: "aaa", projectName: "Acme Corp" }), | CODE |
| LOW | ee/Tests/UI/Backups/BackupsPage.test.tsx | 870 | "placeholder", | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 148 | expect(listedNames()).toEqual(["Jane Doe", "Omar Haddad", "Priya Patel"]); | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 171 | within(row(JANE_ID)).getByRole("img", { name: "Jane Doe" }), | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 437 | expect(listedNames()).toEqual(["Jane Doe", "Omar Haddad"]); | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 502 | expect(listedNames()).toEqual(["Jane Doe", "Omar Haddad", "Priya Patel"]); | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 540 | expect(listedNames()).toEqual(["Jane Doe", "Omar Haddad", "Priya Patel"]); | CODE |
| LOW⚡ | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 580 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW⚡ | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 584 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW⚡ | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 594 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW⚡ | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 599 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 689 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW | …s/UI/TeamCompliance/TeamComplianceStatusTable.test.tsx | 861 | expect(listedNames()).toEqual(["Jane Doe"]); | CODE |
| LOW | ee/Tests/UI/TeamCompliance/ComplianceView.test.ts | 1276 | expect(getMemberDisplayName(buildMember())).toBe("Jane Doe"); | CODE |
| LOW | ee/Tests/UI/TeamCompliance/ComplianceView.test.ts | 1343 | ).toEqual(["Jane Doe", "Omar Haddad", "Priya Patel"]); | CODE |
| LOW | ee/Tests/UI/TeamCompliance/ComplianceView.test.ts | 1354 | ).toEqual(["Jane Doe"]); | CODE |
| LOW | ee/Tests/UI/TeamCompliance/ComplianceFixtures.ts | 225 | userName: "Jane Doe", | CODE |
| LOW | ee/Tests/UI/TeamCompliance/ComplianceFixtures.ts | 299 | userName: "Jane Doe", | CODE |
| LOW | ee/Tests/UI/TeamCompliance/TeamCompliance.test.tsx | 371 | expect(screen.queryByText("Jane Doe")).not.toBeInTheDocument(); | CODE |
| LOW | ee/Tests/UI/TeamCompliance/TeamCompliance.test.tsx | 673 | userName: "Jane Doe", | CODE |
| LOW | ee/Tests/UI/TeamCompliance/TeamCompliance.test.tsx | 767 | userName: "Jane Doe", | CODE |
| LOW | …iseLicenses/EnterpriseLicenseInstanceActivity.test.tsx | 166 | masterAdminEmails: ["admin@example.com"], | CODE |
| LOW | …iseLicenses/EnterpriseLicenseInstanceActivity.test.tsx | 204 | masterAdminEmails: ["admin@example.com"], | CODE |
| LOW | …UI/EnterpriseLicenses/OfflineLicenseTokenCard.test.tsx | 183 | <OfflineLicenseTokenCard licenseId={LICENSE_ID} companyName="Acme Inc" />, | CODE |
| LOW | …UI/EnterpriseLicenses/OfflineLicenseTokenCard.test.tsx | 197 | <OfflineLicenseTokenCard licenseId={LICENSE_ID} companyName="Acme Inc" />, | CODE |
| LOW | …/Tests/Server/AuditLogExport/AuditLogExportTestData.ts | 45 | userName: "Jane Doe", | CODE |
| LOW | …sts/Server/License/LicenseTokenWhiteLabelClaim.test.ts | 68 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseClientAPI.test.ts | 141 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseClientAPI.test.ts | 171 | enterpriseCompanyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseRanking.test.ts | 83 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseRanking.test.ts | 624 | enterpriseCompanyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseRanking.test.ts | 764 | enterpriseCompanyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseWithoutExpiry.test.ts | 85 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseWithoutExpiry.test.ts | 108 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 63 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 262 | expect(result.updateData.enterpriseCompanyName).toBe("Acme Inc"); | CODE |
| LOW⚡ | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 376 | sync({ companyName: "Acme Inc" }).updateData.enterpriseCompanyName, | CODE |
| LOW⚡ | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 377 | ).toBe("Acme Inc"); | CODE |
| LOW⚡ | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 383 | ).toBe("Acme Inc"); | CODE |
| LOW | ee/Tests/Server/License/EnterpriseLicenseSync.test.ts | 522 | enterpriseCompanyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/ReportUserCount.test.ts | 222 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/ReportUserCount.test.ts | 480 | expect(update["enterpriseCompanyName"]).toBe("Acme Inc"); | CODE |
| LOW | ee/Tests/Server/License/LicenseProvider.test.ts | 211 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseProvider.test.ts | 1060 | expect(snapshot.companyName).toBe("Acme Inc"); | CODE |
| LOW | ee/Tests/Server/License/LicenseToken.test.ts | 96 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseToken.test.ts | 1690 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseToken.test.ts | 1757 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseToken.test.ts | 1897 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/LicenseToken.test.ts | 1926 | expect(lapsed.companyName).toBe("Acme Inc"); | CODE |
| LOW | ee/Tests/Server/License/LicenseArea.test.ts | 116 | companyName: "Acme Inc", | CODE |
| LOW | ee/Tests/Server/License/Helpers/LicenseTestKit.ts | 57 | companyName: "Acme Inc", | CODE |
| LOW⚡ | ee/Tests/Server/Identity/SCIMUtils.test.ts | 23 | userName: "user@example.com", | CODE |
| LOW⚡ | ee/Tests/Server/Identity/SCIMUtils.test.ts | 24 | emails: [{ value: "user@example.com", type: "work", primary: true }], | CODE |
| LOW⚡ | ee/Tests/Server/Identity/SCIMUtils.test.ts | 29 | expect(extractEmailFromSCIM(update)).toBe("user@example.com"); | CODE |
| 1000 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | restore.sh | 1 | #!/bin/bash | COMMENT |
| LOW | restore.sh | 21 | # and nothing was lost. That accident was the only thing protecting you. --clean | COMMENT |
| LOW | restore.sh | 61 | COMMENT | |
| LOW | backup.sh | 21 | # No `git pull` here: taking a backup does not update OneUptime. This used to | COMMENT |
| LOW | backup.sh | 41 | # plain/tar pair, over 30 daily retained copies) and is the only format pg_restore | COMMENT |
| LOW | tsconfig.json | 21 | /* Language and Environment */ | COMMENT |
| LOW | tsconfig.json | 61 | // "removeComments": true, /* Disable emitting comments. */ | COMMENT |
| LOW | docker-compose.base.yml | 201 | # in place, which will not have these keys, neither warns nor hands the | COMMENT |
| LOW | docker-compose.base.yml | 341 | # Keeper and a 1-node "oneuptime" cluster (config.d is merged into the | COMMENT |
| LOW | docker-compose.base.yml | 501 | # Playwright's official Docker profile | COMMENT |
| LOW | Tests/Scripts/status-check.sh | 1 | #!/bin/bash | COMMENT |
| LOW | Tests/Scripts/enable-billing-env-var.sh | 1 | # This script replcaes BILLING_ENABLED in config.env to true | COMMENT |
| LOW | Tests/Scripts/dump-container-logs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-event-severity-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-job-failures-increase-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-job-failures-increase-behaviour.sh | 21 | # send. A wrong statement is not a crash: it is a failing Job that never | COMMENT |
| LOW | Tests/Ops/package-repository-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/package-repository-e2e.sh | 21 | # - the publish reads the signing key with its newlines written as \n, as | COMMENT |
| LOW | Tests/Ops/validate-collector-configs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/validate-collector-configs.sh | 41 | COMMENT | |
| LOW | Tests/Ops/vmware-agent-native-install.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/vmware-agent-native-install.sh | 21 | # - metrics reach OneUptime with the ingestion key, the vCenter name and | COMMENT |
| LOW | Tests/Ops/agent-restarts-increase-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-restarts-increase-behaviour.sh | 21 | # alerts. | COMMENT |
| LOW | Tests/Ops/agent-restarts-increase-behaviour.sh | 41 | # - the restarts of a DaemonSet's pod, a CronJob's Job's, and a pod of no | COMMENT |
| LOW | Tests/Ops/agent-obi-config-load.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-obi-config-load.sh | 21 | # - A feature OBI deprecated still loads, with a warning on every start, until | COMMENT |
| LOW | Tests/Ops/agent-obi-config-load.sh | 41 | # chart pinning an image that does not exist puts every node in | COMMENT |
| LOW | Tests/Ops/container-agent-restarts-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/container-agent-restarts-behaviour.sh | 21 | # Every sample but the first sends the restarts since the one before, | COMMENT |
| LOW | Tests/Ops/agent-trace-filter-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-trace-filter-behaviour.sh | 21 | # dropUnlinkedClientCalls=true, alone and with each database switch off, | COMMENT |
| LOW | Tests/Ops/agent-cpu-names-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/container-agent-cpu-utilization-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/container-agent-cpu-utilization-behaviour.sh | 21 | # processors in order. A quarter of a core reads 25%, one and a half cores | COMMENT |
| LOW | Tests/Ops/agent-metric-filter-behaviour.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/lint-app-dockerfile.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-ebpf-e2e/run.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | Tests/Ops/agent-ebpf-e2e/run.sh | 21 | # harvested route names and the discovery exclusions, on real OBI output. | COMMENT |
| LOW | Tests/Ops/agent-ebpf-e2e/run.sh | 41 | # | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 1 | receivers: | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 21 | # | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 121 | combine_with: "\n" | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 141 | # logfmt's leading "level=error ...". Prose is not: "Connection | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 221 | # so these four build it from the container's CPU time counter: | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 261 | - context: metric | COMMENT |
| LOW | agents/DockerAgent/otel-collector-config.yaml | 281 | # restarts since the previous sample of the same container, however | COMMENT |
| LOW | agents/DockerAgent/docker-compose.yml | 21 | max-size: "10m" | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 1 | receivers: | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 21 | # | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 81 | # container's storage dir. Point the receiver at that location. | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 141 | max_log_size: 1048576 | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 161 | # position wins rather than the last. | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 221 | - notice | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 241 | # used since the previous scrape. A container's first scrape after the | COMMENT |
| LOW | agents/PodmanAgent/otel-collector-config.yaml | 281 | - set(metric.unit, "%") where metric.name == "container.memory.percent" | COMMENT |
| LOW | agents/PodmanAgent/docker-compose.yml | 21 | max-file: "3" | COMMENT |
| LOW | agents/DatabaseAgent/troubleshoot.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | agents/DatabaseAgent/troubleshoot.sh | 21 | # log line that is easy to miss. `GET <url>/otlp/v1/ | COMMENT |
| LOW | agents/DatabaseAgent/install.sh | 21 | if ! docker compose version &> /dev/null 2>&1; then | COMMENT |
| 780 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …peBillingProviderSubscriptionPaymentMethodSync.test.ts | 705 | stripe.subscriptions.update.mock.calls.map((call: unknown) => { | CODE |
| CRITICAL | …peBillingProviderSubscriptionPaymentMethodSync.test.ts | 1179 | return stripe.subscriptions.create.mock.calls.map((call: unknown) => { | CODE |
| CRITICAL | Tests/Ops/KubernetesAgentRestartsIncrease.test.js | 679 | collector.service.pipelines.logs.receivers.push(behaviour.CONNECTOR); | CODE |
| CRITICAL | Tests/Ops/KubernetesAgentRestartsIncrease.test.js | 693 | collector.service.pipelines.metrics.processors.filter((name) => { | CODE |
| CRITICAL | Tests/Ops/validate-collector-configs.sh | 348 | !collector.service.pipelines.metrics.receivers.includes("forward/restarts-increase") | CODE |
| CRITICAL | Tests/Ops/validate-collector-configs.sh | 469 | !config.service.pipelines.metrics.receivers.includes("forward/restarts-increase") | CODE |
| CRITICAL | Tests/Ops/validate-collector-configs.sh | 477 | !config.service.pipelines.metrics.processors.includes("transform/job-failures-increase") || | CODE |
| CRITICAL | Tests/Ops/agent-trace-filter-behaviour.sh | 94 | const inPipeline = collector.service.pipelines.traces.processors.filter((p) => { | CODE |
| CRITICAL | Tests/Ops/agent-metric-filter-behaviour.sh | 82 | if (!collector.service.pipelines.metrics.processors.includes("filter/ebpf-node-inspector")) { | CODE |
| CRITICAL | Tests/Ops/Utils/ContainerAgentRestartsBehaviour.js | 196 | const runs = config.service.pipelines.metrics.processors.filter((name) => { | CODE |
| CRITICAL⚡ | …es/MobileApp/src/hooks/OnCallProjectIsolation.test.tsx | 297 | rendered.result.current.duty.projects.every( | CODE |
| CRITICAL⚡ | …es/MobileApp/src/hooks/OnCallProjectIsolation.test.tsx | 304 | rendered.result.current.schedules.schedules.every( | CODE |
| CRITICAL⚡ | …es/MobileApp/src/hooks/OnCallProjectIsolation.test.tsx | 311 | rendered.result.current.coverage.active.every( | CODE |
| CRITICAL⚡ | …es/MobileApp/src/hooks/OnCallProjectIsolation.test.tsx | 318 | rendered.result.current.pages.pages.every((page: OnCallPageItem) => { | CODE |
| CRITICAL⚡ | …es/MobileApp/src/hooks/OnCallProjectIsolation.test.tsx | 323 | rendered.result.current.shifts.shifts.every((shift: MyOnCallShift) => { | CODE |
| CRITICAL | …ction/CloudConnectionDataSecuritySetupCommands.test.ts | 276 | template.Resources.OneUptimeReadOnlyRole.Properties.Policies.map( | CODE |
| CRITICAL | …es/Common/Tests/App/Dashboard/EventOwnersHook.test.tsx | 582 | expect(hook.result.current.target.resourceId.toString()).toBe( | CODE |
| CRITICAL | …/Dashboard/ContainerHostOverviewTimeRangeZoom.test.tsx | 244 | const startMs: number = request.aggregateBy.query.time.startValue.getTime(); | CODE |
| CRITICAL | …/Dashboard/ContainerHostOverviewTimeRangeZoom.test.tsx | 245 | const endMs: number = request.aggregateBy.query.time.endValue.getTime(); | CODE |
| CRITICAL | …/Dashboard/ContainerHostOverviewTimeRangeZoom.test.tsx | 816 | pending.request.aggregateBy.query.time.startValue.getTime() === | CODE |
| CRITICAL | …/Dashboard/ContainerHostOverviewTimeRangeZoom.test.tsx | 824 | pending.request.aggregateBy.query.time.startValue.getTime() === | CODE |
| CRITICAL | …rver/Services/PushNotificationsTurnedOffSwitch.test.ts | 451 | return config.repository.find.mock.calls.filter( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ee/Tests/Server/Identity/ProjectSCIMCrossTenant.test.ts | 1219 | // Step 2: point the account at a mailbox the admin reads. | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 91 | # Step 1: Dump from old instance | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 118 | # Step 2: Prepare target database | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 157 | # Step 3: Restore to new instance | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 179 | # Step 4: Verify migration | COMMENT |
| LOW⚡ | Scripts/ClickhouseMigration/migrate.sh | 89 | # Step 1: Create database on new instance | COMMENT |
| LOW⚡ | Scripts/ClickhouseMigration/migrate.sh | 96 | # Step 2: Get list of all tables from old instance | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 109 | # Step 3: Copy schema for each table | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 141 | # Step 4: Copy materialized views (if any) | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 167 | # Step 5: Copy data for each table | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 213 | # Step 6: Final verification | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 81 | // Step 1: Clean up existing Terraform directory | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 87 | // Step 2: Generate OpenAPI spec | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 97 | // Step 3: Parse OpenAPI spec | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 134 | // Step 5: Generate Go module files | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 141 | // Step 6: Generate provider main file | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 149 | // Step 7: Generate resources | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 157 | // Step 8: Generate data sources | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 177 | // Step 11: Generate build scripts | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 181 | // Step 12: Upgrade dependencies to the newest releases, then tidy. | COMMENT |
| LOW | Scripts/TerraformProvider/GenerateProvider.ts | 120 | // Step 4: Initialize Terraform provider generator | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 35 | // Step 5: a create is scoped like a read. | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 56 | // Step 6: a block with labels on a create. | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 79 | // Step 7: a change follows the parent rule, and the records a write lists. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 37 | // Step 5: a change of labels is scoped like a create, and the owner comes first. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 58 | // Step 6: a block with labels on a change. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 79 | // Step 7: the one record a write names, and the records a template fills in. | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 50 | ### Step 1: Create Azure App Registration | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 63 | ### Step 2: Configure App Permissions | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 98 | ### Step 3: Create Client Secret | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 105 | ### Step 4: Create a Bot Service | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 129 | ### Step 5: Add Microsoft Teams Channel to the Bot | COMMENT |
| LOW | …/Content/en/self-hosted/microsoft-teams-integration.md | 133 | ### Step 6: Configure OneUptime Environment Variables | COMMENT |
| LOW⚡ | …/Content/en/self-hosted/microsoft-teams-integration.md | 159 | ### Step 7: Grant Admin Consent in OneUptime | COMMENT |
| LOW⚡ | …/Content/en/self-hosted/microsoft-teams-integration.md | 165 | ### Step 8: Upload the Teams App Manifest | COMMENT |
| LOW⚡ | …/Content/en/self-hosted/microsoft-teams-integration.md | 174 | ### Step 9: Add OneUptime to Each Team (Required) | COMMENT |
| LOW | …/Components/Cloud/Connect/CloudConnectionFormModal.tsx | 223 | // Step 1: the way in (AWS: role or key), then its command. | COMMENT |
| LOW | …/Components/Cloud/Connect/CloudConnectionFormModal.tsx | 559 | // Step 3: a sign-in and a count of what there is to monitor. | COMMENT |
| LOW⚡ | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 15 | ##### Step 1: Since this is a self hosted install, you need to create a Slack App with this manifest. | COMMENT |
| LOW⚡ | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 23 | ##### Step 2: Add these env variables to your OneUptime server | COMMENT |
| LOW | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 43 | ##### Step 3: Restart your OneUptime server | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 20 | ##### Step 1: Prerequisites | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 25 | ##### Step 2: Create Azure App Registration | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 39 | ##### Step 3: Configure App Permissions | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 71 | ##### Step 4: Create Client Secret | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 80 | ##### Step 5: Create a Bot Service | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 110 | ##### Step 6: Add Microsoft Teams Channel to the Bot | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 117 | ##### Step 7: Add these environment variables to your OneUptime server | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 143 | ##### Step 8: Upload Teams App Manifest | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 156 | ##### Step 9: Add the App to Every Team You Want Notifications In | COMMENT |
| LOW | …rs/DataMigrations/AddHistogramProjectionToSpanTable.ts | 38 | // Step 1: Add the projection (IF NOT EXISTS makes it safe to re-run) | COMMENT |
| LOW | …Set/Workers/DataMigrations/AddIsRootSpanToSpanTable.ts | 32 | // Step 1: Add isRootSpan column if it doesn't exist | COMMENT |
| LOW | …Set/Workers/DataMigrations/AddIsRootSpanToSpanTable.ts | 56 | // Step 2: Backfill isRootSpan for existing rows where parentSpanId is empty or null | COMMENT |
| LOW | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 133 | // Step 2: Get exception details | COMMENT |
| LOW⚡ | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 179 | // Step 4: Create workspace for the task | COMMENT |
| LOW⚡ | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 185 | // Step 5: Process each repository | COMMENT |
| LOW | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 106 | // Step 2: Get the task context (keyed by the run id). | COMMENT |
| LOW⚡ | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 135 | // Step 4: Create workspace for the task | COMMENT |
| LOW⚡ | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 141 | // Step 5: Process each repository | COMMENT |
| LOW⚡ | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 92 | .split("### Step 4: Create a Bot Service")[1]! | CODE |
| 66 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ee/Tests/Server/Identity/ProjectSCIMCrossTenant.test.ts | 1212 | // Step 1: "provision" the victim, which finds the existing account. | COMMENT |
| LOW⚡ | ee/Tests/Server/Identity/ProjectSCIMCrossTenant.test.ts | 1219 | // Step 2: point the account at a mailbox the admin reads. | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 91 | # Step 1: Dump from old instance | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 118 | # Step 2: Prepare target database | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 157 | # Step 3: Restore to new instance | COMMENT |
| LOW⚡ | Scripts/MigratePostgres.sh | 179 | # Step 4: Verify migration | COMMENT |
| LOW⚡ | Scripts/ClickhouseMigration/migrate.sh | 89 | # Step 1: Create database on new instance | COMMENT |
| LOW⚡ | Scripts/ClickhouseMigration/migrate.sh | 96 | # Step 2: Get list of all tables from old instance | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 109 | # Step 3: Copy schema for each table | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 141 | # Step 4: Copy materialized views (if any) | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 167 | # Step 5: Copy data for each table | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 213 | # Step 6: Final verification | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 81 | // Step 1: Clean up existing Terraform directory | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 87 | // Step 2: Generate OpenAPI spec | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 97 | // Step 3: Parse OpenAPI spec | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 134 | // Step 5: Generate Go module files | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 141 | // Step 6: Generate provider main file | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 149 | // Step 7: Generate resources | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 157 | // Step 8: Generate data sources | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 177 | // Step 11: Generate build scripts | COMMENT |
| LOW⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 181 | // Step 12: Upgrade dependencies to the newest releases, then tidy. | COMMENT |
| LOW | Scripts/TerraformProvider/GenerateProvider.ts | 120 | // Step 4: Initialize Terraform provider generator | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 35 | // Step 5: a create is scoped like a read. | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 56 | // Step 6: a block with labels on a create. | COMMENT |
| LOW | …/Tests/FeatureSet/Docs/ParentScopeOnWritesDocs.test.ts | 79 | // Step 7: a change follows the parent rule, and the records a write lists. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 37 | // Step 5: a change of labels is scoped like a create, and the owner comes first. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 58 | // Step 6: a block with labels on a change. | COMMENT |
| LOW | …ts/FeatureSet/Docs/ReferenceAndLabelWritesDocs.test.ts | 79 | // Step 7: the one record a write names, and the records a template fills in. | COMMENT |
| LOW | …/Components/Cloud/Connect/CloudConnectionFormModal.tsx | 223 | // Step 1: the way in (AWS: role or key), then its command. | COMMENT |
| LOW | …/Components/Cloud/Connect/CloudConnectionFormModal.tsx | 559 | // Step 3: a sign-in and a count of what there is to monitor. | COMMENT |
| LOW⚡ | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 15 | ##### Step 1: Since this is a self hosted install, you need to create a Slack App with this manifest. | COMMENT |
| LOW⚡ | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 23 | ##### Step 2: Add these env variables to your OneUptime server | COMMENT |
| LOW | …src/Components/Slack/SlackIntegrationDocumentation.tsx | 43 | ##### Step 3: Restart your OneUptime server | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 20 | ##### Step 1: Prerequisites | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 25 | ##### Step 2: Create Azure App Registration | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 39 | ##### Step 3: Configure App Permissions | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 71 | ##### Step 4: Create Client Secret | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 80 | ##### Step 5: Create a Bot Service | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 110 | ##### Step 6: Add Microsoft Teams Channel to the Bot | COMMENT |
| LOW⚡ | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 117 | ##### Step 7: Add these environment variables to your OneUptime server | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 143 | ##### Step 8: Upload Teams App Manifest | COMMENT |
| LOW | …rosoftTeams/MicrosoftTeamsIntegrationDocumentation.tsx | 156 | ##### Step 9: Add the App to Every Team You Want Notifications In | COMMENT |
| LOW | …rs/DataMigrations/AddHistogramProjectionToSpanTable.ts | 38 | // Step 1: Add the projection (IF NOT EXISTS makes it safe to re-run) | COMMENT |
| LOW | …Set/Workers/DataMigrations/AddIsRootSpanToSpanTable.ts | 32 | // Step 1: Add isRootSpan column if it doesn't exist | COMMENT |
| LOW | …Set/Workers/DataMigrations/AddIsRootSpanToSpanTable.ts | 56 | // Step 2: Backfill isRootSpan for existing rows where parentSpanId is empty or null | COMMENT |
| LOW | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 133 | // Step 2: Get exception details | COMMENT |
| LOW⚡ | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 179 | // Step 4: Create workspace for the task | COMMENT |
| LOW⚡ | …Runner/TaskHandlers/ExceptionPullRequestTaskHandler.ts | 185 | // Step 5: Process each repository | COMMENT |
| LOW | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 106 | // Step 2: Get the task context (keyed by the run id). | COMMENT |
| LOW⚡ | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 135 | // Step 4: Create workspace for the task | COMMENT |
| LOW⚡ | …s/Runner/TaskHandlers/SubjectPullRequestTaskHandler.ts | 141 | // Step 5: Process each repository | COMMENT |
| LOW⚡ | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 92 | .split("### Step 4: Create a Bot Service")[1]! | CODE |
| LOW⚡ | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 93 | .split("### Step 5:")[0]!; | CODE |
| LOW | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 379 | .split("##### Step 5: Create a Bot Service")[1]! | CODE |
| LOW | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 393 | .split("##### Step 5: Create a Bot Service")[1]! | CODE |
| LOW | …Teams/MicrosoftTeamsMessagingEndpointGuidance.test.tsx | 406 | .split("##### Step 5: Create a Bot Service")[1]! | CODE |
| LOW | …oftTeams/MicrosoftTeamsInstallGuidanceContent.test.tsx | 693 | "##### Step 9: Add the App to Every Team You Want Notifications In", | CODE |
| LOW⚡ | packages/Common/Tests/App/Dashboard/SetupGuide.test.ts | 274 | expect(markdown).toContain("## Step 2: Install"); | CODE |
| LOW⚡ | packages/Common/Tests/App/Dashboard/SetupGuide.test.ts | 275 | expect(markdown).toContain("## Step 3: Configure"); | CODE |
| LOW⚡ | packages/Common/Tests/App/Dashboard/SetupGuide.test.ts | 276 | expect(markdown).not.toContain("## Step 1:"); | CODE |
| 62 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/MobileApp/tests/ui/posture-foldables.spec.js | 40 | // The band the layout keeps clear around a seamless tabletop fold (windowLayout.ts). | COMMENT |
| MEDIUM | packages/Common/package-lock.json | 15732 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | …/Utils/SecurityEvent/Connectors/Splunk/SplunkClient.ts | 20 | * (https://help.splunk.com/en/splunk-enterprise/leverage-rest-apis/rest-api-reference/10.4/access-endpoints/access-e | COMMENT |
| MEDIUM | …/Utils/SecurityEvent/Connectors/Splunk/SplunkClient.ts | 26 | * (https://help.splunk.com/en/splunk-enterprise/leverage-rest-apis/rest-api-reference/10.4/search-endpoints/search-e | COMMENT |
| MEDIUM | …Server/Utils/AI/Remediation/RemediationCommandTools.ts | 2080 | // Certainly never ran: a failed tool call, off the record. | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/run-tests.sh | 57 | # Write the dev_overrides CLI config to a harness-owned file and point the | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/run-tests.sh | 543 | # matches the harness rule that verify-deletion, not the exit code of | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/self-test.sh | 3 | # Self-tests for the E2E harness itself — the plumbing that decides *which* | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/self-test.sh | 10 | # harness fails in seconds instead of after a stack boot. | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/self-test.sh | 330 | # Regression guard. The harness used to write dev_overrides straight into | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/self-test.sh | 494 | # with an empty harness-owned CLI config, never the developer's own. | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/lib.sh | 92 | # The harness's own CLI config, so a developer's ~/.terraformrc or | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/lib.sh | 244 | # Legacy healing only. The harness no longer touches ~/.terraformrc — it writes | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/lib.sh | 248 | # ~/.terraformrc: without a backup we cannot tell a stale harness file from a | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/scripts/cleanup.sh | 19 | # Restore a ~/.terraformrc backup left behind by an older run of the harness | COMMENT |
| MEDIUM | .github/workflows/common-jobs.yaml | 38 | # from that CDN failed this job on 2026-09-21. The harness now installs | COMMENT |
| MEDIUM | .github/workflows/common-jobs.yaml | 39 | # the release tarball whose sha256 HelmChart/Tests/lib/harness.sh pins, | COMMENT |
| MEDIUM | .github/workflows/test.gitops-revert.yaml | 42 | # The harness's default kind (v0.23.0) boots Kubernetes 1.30, older than | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 74 | # packages/E2E/Terraform/e2e-tests/scripts/run-tests.sh (the harness | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 91 | # Hermetic checks of the harness itself (engine dispatch, fixture and | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 94 | # install, provider generation, the Docker stack — so a harness | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 396 | # The harness self-test fails if one that builds FROM public.ecr.aws is | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 438 | # attempt at once, with its own error last in the log. The harness | COMMENT |
| MEDIUM | .github/workflows/terraform-provider-e2e.yml | 485 | # terraform-plugin-testing: the harness HashiCorp asks the providers it | COMMENT |
| MEDIUM | HelmChart/Tests/suites/vapid-existing-secret.sh | 27 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/marketplace.sh | 36 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/unit.sh | 15 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/lint.sh | 5 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/extra-values.sh | 24 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/keda-bootstrap.sh | 34 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/keda-bootstrap.sh | 58 | # Runs a helm command that is expected to succeed and scores it. The harness runs | COMMENT |
| MEDIUM | HelmChart/Tests/suites/air-gapped.sh | 25 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/gitops-revert.sh | 37 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/suites/secrets-lifecycle.sh | 28 | # shellcheck source=../lib/harness.sh | COMMENT |
| MEDIUM | HelmChart/Tests/lib/harness.sh | 3 | # Shared harness for the Helm chart test suites in ../suites. | COMMENT |
| MEDIUM | …/kubernetes-agent/tests/external-metrics-url_test.yaml | 29 | # time. helm-unittest 0.5.1, the version the harness pins, does not enforce | COMMENT |
| MEDIUM | HelmChart/Public/oneuptime/tests/valkey-cache_test.yaml | 166 | # is applied. The alias is what makes the upgrade seamless instead. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | restore.sh | 11 | # Create a new db. | COMMENT |
| MEDIUM | Scripts/TerraformProvider/publish-terraform-provider.sh | 529 | # Create the local tag. It is only pushed after assets build successfully. | COMMENT |
| MEDIUM | Scripts/TerraformProvider/publish-terraform-provider.sh | 808 | # Create the release. The tag was already pushed, so the release attaches | COMMENT |
| MEDIUM⚡ | Scripts/TerraformProvider/GenerateProvider.ts | 172 | # This file is auto-generated from the root VERSION file. | COMMENT |
| MEDIUM | …pp/Tests/FeatureSet/Docs/DocsTranslationStatus.test.ts | 65 | "## Create the monitor", | CODE |
| MEDIUM | …ges/App/Tests/FeatureSet/Docs/DocsContentRules.test.ts | 130 | "## Create a monitor", | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 315 | const create: string = section(page, "## Create a template"); | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 352 | expect(section(page, "## Create a template")).toContain( | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 381 | const create: string = section(page, "## Create a template"); | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 421 | expect(section(page, "## Create a template")).toContain( | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 437 | expect(section(page, "## Create a template")).toContain( | CODE |
| MEDIUM | …ests/FeatureSet/Docs/MonitorTemplatesDocsFacts.test.ts | 454 | expect(section(page, "## Create a template")).toContain( | CODE |
| MEDIUM | …/App/Tests/FeatureSet/Docs/DashboardsDocsFacts.test.ts | 960 | const create: string = sectionOf(page, "## Create a dashboard"); | CODE |
| MEDIUM | …/App/Tests/FeatureSet/Docs/DashboardsDocsFacts.test.ts | 1020 | expect(sectionOf(page, "## Create a dashboard")).toContain(words); | CODE |
| MEDIUM | …/App/Tests/FeatureSet/Docs/DashboardsDocsFacts.test.ts | 3434 | const createSection: string = sectionOf(page, "## Create a playlist"); | CODE |
| MEDIUM | …App/Tests/FeatureSet/Docs/PlanGatedCreatesDocs.test.ts | 171 | "## Creating a status page", | CODE |
| MEDIUM | …s/App/Tests/FeatureSet/Docs/DocsCanonicalPages.test.ts | 161 | "## Create the monitor", | CODE |
| MEDIUM | …ckages/App/Tests/FeatureSet/Docs/DatabasesDocs.test.ts | 831 | section(readPage(), "### Create a monitoring user"), | CODE |
| MEDIUM | …ckages/App/Tests/FeatureSet/Docs/DatabasesDocs.test.ts | 834 | section(readAgentFile("README.md"), "## Create a monitoring user"), | CODE |
| MEDIUM | …ureSet/Docs/CriteriaGroupsPostmortemsDocsFacts.test.ts | 2173 | const creating: string = section(groupsPage, "## Create a monitor group"); | CODE |
| MEDIUM | …kages/App/Tests/FeatureSet/Docs/AlertDocsFacts.test.ts | 1155 | "## Create an alert by hand", | CODE |
| MEDIUM | …kages/App/Tests/FeatureSet/Docs/AlertDocsFacts.test.ts | 2029 | section(page, "## Create a grouping rule").split("Everything else")[1] || | CODE |
| MEDIUM | …kages/App/Tests/FeatureSet/Docs/AlertDocsFacts.test.ts | 2274 | const steps: string = section(page, "## Create an episode by hand"); | CODE |
| MEDIUM | …et/Docs/TelemetryMonitorAndStatusPageDocsFacts.test.ts | 547 | const step: string = sectionOf(PROFILES, "## Create a profiles monitor"); | CODE |
| MEDIUM | …et/Docs/TelemetryMonitorAndStatusPageDocsFacts.test.ts | 2272 | sectionOf(PROFILES, "## Create a profiles monitor"), | CODE |
| MEDIUM | …oard/src/Pages/Database/Utils/DocumentationMarkdown.ts | 1306 | ## Create a monitoring user | COMMENT |
| MEDIUM | …/Common/Tests/App/Dashboard/DatabaseSetupGuide.test.ts | 825 | document.indexOf("## Create a monitoring user"), | CODE |
| MEDIUM | …/Common/Tests/App/Dashboard/DatabaseSetupGuide.test.ts | 845 | .replace(/^## Create a monitoring user$/m, ""); | CODE |
| MEDIUM | …ts/App/Dashboard/DatabaseDocumentationMarkdown.test.ts | 809 | markdown.indexOf("## Create a monitoring user"), | CODE |
| MEDIUM | .github/workflows/release.yml | 3423 | # Create a temporary keychain | COMMENT |
| MEDIUM | HelmChart/Public/oneuptime/values.yaml | 75 | # Create the service account, named `name` (or "<release>-oneuptime"). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | Scripts/Perf/profile-summary.js | 171 | print("self time by package", byPackage, busy, top); | CODE |
| HIGH⚡ | Scripts/Perf/profile-summary.js | 172 | print("self time by function", byFunction, busy, top); | CODE |
| HIGH⚡ | Scripts/Perf/profile-summary.js | 173 | print("charged to the deepest OneUptime frame", byOwnFrame, busy, top); | CODE |
| HIGH⚡ | Scripts/Perf/profile-summary.js | 174 | print("inclusive time per OneUptime file", byOwnFile, busy, top); | CODE |
| HIGH⚡ | Scripts/Perf/profile-summary.js | 177 | print( | CODE |
| HIGH | …/FeatureSet/APIReference/Utils/CodeExampleGenerator.ts | 184 | print(response.json())`; | CODE |
| HIGH | packages/Common/Scripts/NpmPackage/BuildNpmPackage.js | 905 | print( | CODE |
| HIGH | packages/Common/Scripts/NpmPackage/BuildNpmPackage.js | 953 | print( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/Scripts/endpoint-status.sh | 26 | # Check if the HTTP status code is 200 (OK) | COMMENT |
| LOW | agents/InfrastructureAgent/build-msi.sh | 44 | # Check if wixl is installed | COMMENT |
| LOW | Scripts/Install/configure.sh | 32 | # Check if command exists | COMMENT |
| LOW | Scripts/NPM/PublishAllPackages.sh | 44 | # Check if this version is already published on npm, so a re-run of the | COMMENT |
| LOW | …erraformProvider/install-terraform-provider-locally.sh | 44 | # Check if the directory exists | COMMENT |
| LOW | Scripts/TerraformProvider/publish-terraform-provider.sh | 214 | # Check if we're in the correct directory | COMMENT |
| LOW | Scripts/TerraformProvider/publish-terraform-provider.sh | 299 | # Check if the provider framework directory exists | COMMENT |
| LOW | packages/Home/Tests/AirGappedFacts.test.ts | 738 | "# Set disabled to true to make no outbound call at all, or point url at an\n# internal mirror", | CODE |
| LOW | packages/Home/Tests/AirGappedFacts.test.ts | 768 | "# Set disabled to true to make no call at all.\ninstanceCheckIn:", | CODE |
| LOW | …et/Docs/Static/scripts/infrastructure-agent/install.sh | 123 | # Check if the binary is executable | COMMENT |
| LOW | …tests/19-on-call-duty-policy-server-defaults/verify.sh | 21 | # Check if response contains the resource | COMMENT |
| LOW | …kages/E2E/Terraform/e2e-tests/tests/08-probe/verify.sh | 24 | # Check if response contains the resource | COMMENT |
| LOW⚡ | …e2e-tests/tests/20-probe-version-idempotency/verify.sh | 40 | # Check if response contains the resource | COMMENT |
| LOW | …/Terraform/e2e-tests/tests/02-monitor-status/verify.sh | 29 | # Check if response contains the resource | COMMENT |
| LOW | …sts/18-scheduled-maintenance-server-defaults/verify.sh | 27 | # Check if response contains the resource | COMMENT |
| LOW | …m/e2e-tests/tests/15-monitor-server-defaults/verify.sh | 23 | # Check if response contains the resource | COMMENT |
| LOW | …E2E/Terraform/e2e-tests/tests/05-status-page/verify.sh | 31 | # Check if response contains the resource | COMMENT |
| LOW | …rm/e2e-tests/tests/11-incident-severity-crud/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | …aform/e2e-tests/tests/10-monitor-status-crud/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | …rraform/e2e-tests/tests/03-incident-severity/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | …/Terraform/e2e-tests/tests/06-alert-severity/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | …e-tests/tests/14-status-page-server-defaults/verify.sh | 27 | # Check if response contains the resource | COMMENT |
| LOW | …/Terraform/e2e-tests/tests/04-incident-state/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | …E2E/Terraform/e2e-tests/tests/07-alert-state/verify.sh | 28 | # Check if response contains the resource | COMMENT |
| LOW | .github/workflows/release.yml | 142 | # Check if this version is already released on GitHub | COMMENT |
| LOW | .github/workflows/terraform-provider-generation.yml | 90 | # Check if provider directory was created | COMMENT |
| LOW | .github/workflows/openapi-spec-generation.yml | 66 | # Check if the file is valid JSON | COMMENT |
| LOW | .github/workflows/openapi-spec-generation.yml | 74 | # Check if it has required OpenAPI fields | COMMENT |
| LOW | HelmChart/Public/kubernetes-agent/values.yaml | 1329 | # Set false to keep the hop instead: a proxy's server spans are then exempt | COMMENT |
| LOW | HelmChart/Public/oneuptime/values.yaml | 1317 | # Set disableIngestion to true to reject all incoming OpenTelemetry traces / | COMMENT |
| LOW | HelmChart/Public/oneuptime/values.yaml | 1367 | # Set disabled to true to make no outbound call at all, or point url at an | COMMENT |
| LOW | HelmChart/Public/oneuptime/values.yaml | 1380 | # Set disabled to true to make no call at all. | COMMENT |
| LOW | HelmChart/Public/oneuptime/values.yaml | 2422 | # Set enabled to false to turn it off: the server then removes it, and projects | COMMENT |
| LOW | HelmChart/Public/oneuptime/values.yaml | 299 | enabled: true # Set this to false if you're using an external postgresql database. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker-compose.yml | 1 | # Images are pushed to both Docker Hub and Github Container Registry. If you're using Github Container Registry, you can | COMMENT |
| MEDIUM | docker-compose.yml | 2 | # For example, if you want to use the image from Github Container Registry, you can change the image tag from oneuptime/ | COMMENT |
| LOW | Clickhouse/config.xml | 943 | Regexps are not aligned: don't forget to add ^ and $. Also don't forget to escape dot (.) metacharacter | CODE |
| MEDIUM | agents/InfrastructureAgent/main.go | 98 | // Note: This is a basic implementation. For production, consider using fsnotify or similar | COMMENT |
| LOW | …ashboard/src/Components/CustomSMTP/CustomSMTPTable.tsx | 306 | description={`Email sent successfully. It should take couple of minutes to arrive, please don't forget to chec | CODE |
| MEDIUM⚡ | packages/Common/Types/Telemetry/LlmAnswerIssue.ts | 168 | "i'm unable to help with that", | CODE |
| MEDIUM⚡ | packages/Common/Types/Telemetry/LlmAnswerIssue.ts | 170 | "i'm unable to assist with that", | CODE |
| MEDIUM⚡ | packages/Common/Types/Telemetry/LlmAnswerIssue.ts | 177 | "as an ai language model, i can't", | CODE |
| MEDIUM⚡ | packages/Common/Types/Telemetry/LlmAnswerIssue.ts | 178 | "as an ai language model, i cannot", | CODE |
| MEDIUM⚡ | …es/Common/Tests/Types/Telemetry/LlmAnswerIssue.test.ts | 178 | "I am sorry, but I cannot provide medical advice.", | CODE |
| MEDIUM⚡ | …es/Common/Tests/Types/Telemetry/LlmAnswerIssue.test.ts | 182 | "I'm unable to help with that.", | CODE |
| MEDIUM⚡ | …es/Common/Tests/Types/Telemetry/LlmAnswerIssue.test.ts | 184 | "As an AI language model, I cannot browse the internet.", | CODE |
| LOW | …mon/Tests/App/Dashboard/VerificationCodeModal.test.tsx | 26 | * code. Please don't forget to check your spam." - nothing had been sent - | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ee/Tests/Server/AdminHealth/HealthDashboards.test.ts | 203 | // The live dashboards, as requested: 402 unless the license covers instance health. | COMMENT |
| HIGH | …ckages/App/Tests/Dashboard/AIRootCauseFeedItem.test.ts | 333 | "## 🧠 AI — Automated Root Cause Analysis\n\nThe pool was exhausted [C1].\n\n**Evidence checked**\n- **[C1]** Logs | CODE |
| HIGH | …ils/Workspace/MicrosoftTeams/MicrosoftTeamsAiAnswer.ts | 123 | // The message entity that makes Teams show its "AI generated" label. | COMMENT |
| HIGH | packages/Common/Models/DatabaseModels/AIRun.ts | 1267 | "For investigation runs: a one or two sentence plain-text summary of the posted analysis, generated by AI.", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | agents/DatabaseAgent/troubleshoot.sh | 28 | # Usage: | COMMENT |
| LOW | agents/StorageArrayAgent/troubleshoot.sh | 37 | # Usage: | COMMENT |
| LOW | agents/DockerSwarmAgent/troubleshoot.sh | 23 | # Usage: | COMMENT |
| LOW | agents/CephAgent/troubleshoot.sh | 34 | # Usage: | COMMENT |
| LOW | agents/VMwareAgent/troubleshoot.sh | 34 | # Usage: | COMMENT |
| LOW | agents/ProxmoxAgent/troubleshoot.sh | 29 | # Usage: | COMMENT |
| LOW | Scripts/GHA/buildx_check.sh | 37 | # Usage: | COMMENT |
| LOW | Scripts/GHA/warm_base_images.sh | 47 | # Usage: | COMMENT |
| LOW | Scripts/GHA/docker_login.sh | 15 | # Usage: | COMMENT |
| LOW | Scripts/ClickhouseMigration/migrate.sh | 6 | # Usage: | COMMENT |
| LOW | Scripts/PackageManagers/BuildPackageRepository.sh | 16 | # Usage: | COMMENT |
| LOW | Scripts/Postgres/CheckSchemaDrift.sh | 16 | # Usage: | COMMENT |
| LOW | …ges/E2E/Terraform/e2e-tests/scripts/coverage-report.sh | 10 | # Usage: | COMMENT |
| LOW | HelmChart/Public/diagnose.sh | 8 | # Usage: | COMMENT |
| LOW | HelmChart/Public/kubernetes-agent/troubleshoot.sh | 35 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Scripts/Perf/cpu-sample.py | 61 | except OSError: | CODE |
| HIGH | Scripts/Perf/cpu-sample.py | 74 | except OSError: | CODE |
| HIGH | Scripts/Perf/memory-sample.py | 85 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/Ops/agent-ebpf-e2e/analyze.py | 122 | CODE | |
| LOW | Tests/Ops/agent-ebpf-e2e/analyze.py | 161 | CODE | |
| LOW | Tests/Ops/agent-ebpf-e2e/analyze.py | 215 | CODE | |
| LOW | Tests/Ops/agent-ebpf-e2e/analyze.py | 242 | CODE | |
| LOW | Tests/Ops/agent-ebpf-e2e/analyze.py | 284 | CODE | |
| LOW | Tests/Ops/agent-ebpf-e2e/tests/test_analyze.py | 652 | CODE | |
| LOW | Scripts/Perf/cpu-sample.py | 66 | CODE | |
| LOW | Scripts/Perf/cpu-sample.py | 167 | CODE | |
| LOW | Scripts/Perf/memory-sample.py | 74 | CODE | |
| LOW | Scripts/Perf/memory-sample.py | 90 | CODE | |
| LOW | HelmChart/Marketplace/build.py | 377 | CODE | |
| LOW | HelmChart/Marketplace/test_build.py | 594 | CODE | |
| LOW | HelmChart/Marketplace/automation/release_plan.py | 168 | CODE | |
| LOW | HelmChart/Marketplace/automation/aws_catalog.py | 561 | CODE | |
| LOW | HelmChart/Marketplace/automation/ci_setup.py | 440 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | HelmChart/Marketplace/automation/ci_setup.py | 265 | az ad sp show --id {AZURE_INGESTION_APP_ID} >/dev/null 2>&1 || az ad sp create --id {AZURE_INGESTION_APP_ID} >/dev/null | CODE |
| HIGH | HelmChart/Marketplace/automation/ci_setup.py | 308 | az ad sp show --id "$APP_ID" >/dev/null 2>&1 || az ad sp create --id "$APP_ID" >/dev/null | CODE |
| HIGH | HelmChart/Marketplace/automation/ci_setup.py | 420 | f"""gh api --method POST "repos/${{REPO}}/environments/{environment}/deployment-branch-policies" -f name=master | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …et/Docs/Content/en/monitor/incoming-request-monitor.md | 309 | ### Resolution is event-driven | COMMENT |
| MEDIUM | packages/Common/Types/Telemetry/LlmCallKind.ts | 36 | // Anything else an instrumentation reports (memory writes, guardrails...). | COMMENT |
| MEDIUM | packages/E2E/Terraform/e2e-tests/README.md | 12 | │ ├── index.sh # Main entry point - orchestrates the full test flow | CODE |
| MEDIUM | …E2E/Terraform/e2e-tests/tests/27-monitor-types/main.tf | 28 | # - Server (agent-based monitoring) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …gleSecOps/GoogleSecOpsConnectorHttpIntegration.test.ts | 149 | function handleRequest( | CODE |
| LOW | …oogleSecOps/GoogleSecOpsPollingHttpIntegration.test.ts | 168 | function handleRequest( | CODE |