Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
This report summarizes scanner evidence for TencentCloud/CubeSandbox, a Go project with 12,869 GitHub stars. SynthScan examined 924,371 lines of code across 3383 source files, recording 4118 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 7.7 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2231 finding(s).
Are imports declared and package/API names verified? 211 finding(s).
Are wrappers, guards, and repeated structures necessary? 2280 finding(s).
Which changes need focused human review? 4118 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4118 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 105 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 112 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 121 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 188 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 190 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 199 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 209 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 366 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 372 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 376 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 263 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 265 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 321 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 327 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 387 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 513 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 515 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 67 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 74 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 189 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 196 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 233 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 235 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 493 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 515 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 943 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 945 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 1027 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 1029 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 77 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 86 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 228 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 230 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 317 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 324 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 339 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 342 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 360 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 362 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 381 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 383 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 412 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 414 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 585 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 587 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 77 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 79 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 93 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 98 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 125 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 127 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 88 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 184 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 186 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 232 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 234 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 274 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 279 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/probe_esnap_clone.sh | 81 | # -------------------------------------------------------------------------- | COMMENT |
| 1212 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/cube-entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | CubeEgress/start.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 21 | # sub-chain so 'down' tears down our config without touching anything | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 21 | # | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 41 | # ├── VERSION | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 361 | done < "${AWS_COMPONENTS_FILE}" | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 381 | # tree, and without anything the build machine happens to have exported. | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 21 | # ./setup_dep.sh --print-configure-args | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 41 | # The build used to look for SPDK at ../spdk, which works only if whoever cloned | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 61 | # | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 101 | # What ./configure was given. Deliberately short: | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 501 | # | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 521 | # Debug by default, which is the same call as --enable-debug for SPDK above and | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 801 | git clone --quiet --depth 1 --branch "${tag}" "${repo}" "${src}" || return 1 | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 21 | # === Why serial, and why this order === | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 41 | # find out whether one thing broke or ten did. Failures are collected and | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 521 | # Snapshotting a volume whose decouple is *queued* must cancel that | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 541 | ./test/dataplane/run_agent_template_test.sh "${S3_ARGS[@]}" | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_bucket.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/check_binary_fresh.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/tools/check_layering.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/tools/check_layering.sh | 21 | # 3. module/ must not name aws_* identifiers at all. | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 21 | # | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 41 | # | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 61 | # mark for the snapshot. The mark is the *only* record that a delete was asked | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 181 | # for what was actually a segfault on the other end. | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_prefix_rm.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_prefix_rm.py | 21 | # | COMMENT |
| LOW | CubeS3lvol/test/tools/mmap_fault_bench.c | 1 | /* Copyright (c) 2026 Tencent Inc. | COMMENT |
| LOW | CubeS3lvol/test/integration/s3_wal_test.c | 41 | #include "spdk/stdinc.h" | COMMENT |
| LOW | CubeS3lvol/test/integration/s3_cache_test.c | 61 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/probe_lease_floor.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 21 | # §9 that "decouple finishes normally" still holds; it has to be checked. | COMMENT |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_clone.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 21 | # - an esnap clone depends on a distributed export lease. A local clone's parent | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 581 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 21 | # 2. writing the imported volume does not touch the source. It reads through to | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 721 | fail "bdev_aio_create (destination)"; exit 1; } | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1401 | fail "the refused release still deleted objects" | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1581 | # ========================================================================== | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1761 | # A release that consulted the imports registry would answer "nobody imports this" | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2081 | # [11d] default decouple, idempotent export, snapshot-bound lifetime | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2561 | fi | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2581 | # copying the whole volume. And this arrangement is not exotic: a filesystem | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2601 | # whole cluster this way makes blobstore release it too, so those clusters are | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2881 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2901 | # 1. two volumes can be imported from one export, and both read what the source | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3381 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3581 | # The bug that made this step necessary. spdk_blob_materialize_cluster() hands | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3721 | fi | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3881 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3901 | # 2. Repeated reads. Reading the same volume twice must give the same bytes. | COMMENT |
| 1191 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/lib/templateConfig.ts | 55 | export function extractTemplateRuntimeConfig(cr: unknown): TemplateRuntimeConfig | null { | CODE |
| LOW | web/src/lib/templateConfig.ts | 73 | export function extractTemplateNetworkPolicy(cr: unknown): TemplateNetworkPolicy { | CODE |
| LOW | web/src/pages/Versions.tsx | 63 | function stripPlatformVersionSuffix(version: string): string { | CODE |
| LOW | …ploy/kubernetes/chart/scripts/test-helm-test-guards.sh | 177 | def check_rendered_test_placements(require_control_taint_for_runtime=False): | CODE |
| LOW | …ploy/kubernetes/chart/scripts/test-helm-test-guards.sh | 190 | def check_concat_custom_taints(name): | CODE |
| LOW⚡ | tests/e2e/memory_reclaim/test_free_page_reporting.py | 51 | def test_default_runtime_state_roots_use_containerd_task_layout(self) -> None: | CODE |
| LOW⚡ | tests/e2e/memory_reclaim/test_free_page_reporting.py | 60 | def test_pidfile_requires_matching_sandbox_shim(self) -> None: | CODE |
| LOW⚡ | tests/e2e/memory_reclaim/test_free_page_reporting.py | 69 | def test_reclaim_cycle_waits_for_fully_touched_workload_before_release(self) -> None: | CODE |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 104 | def test_cleanup_sandbox_waits_for_all_node_local_state(self) -> None: | CODE |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 111 | def test_incomplete_template_build_response_still_cleans_template(self) -> None: | CODE |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 137 | def test_early_failure_emits_fail_status(self) -> None: | CODE |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 159 | def test_terminal_template_build_failure_is_not_retried(self) -> None: | CODE |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 183 | def test_cleanup_failure_turns_success_into_failure(self) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 212 | def pytest_collection_modifyitems(config: pytest.Config, items: list[pytest.Item]) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 243 | def pytest_runtest_makereport(item: pytest.Item, call: pytest.CallInfo): | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 380 | def _optional_template_exists(sdk_e2e_config: SdkE2EConfig): | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 398 | def skip_missing_optional_template(request: pytest.FixtureRequest) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 523 | def _scale_capacity_retries_for_xdist(cfg: SdkE2EConfig) -> SdkE2EConfig: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 632 | def _log_effective_environment(cfg: SdkE2EConfig) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/config.py | 22 | def volume_plugin_enabled_from_env() -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 37 | def backend_supports_host_mount(backend: str) -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 47 | def skip_if_host_mount_unavailable(backend: str, config) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 105 | def is_missing_hostpath_source_error(exc: BaseException | str) -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 124 | def warn_pass_missing_hostpath_source( | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume_hints.py | 18 | def volume_plugin_misconfigured_hint(detail: str = "") -> str: | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 50 | def wait_delete_volume_status( | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 82 | def wait_until_data_plane_ready( | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 139 | def wait_for_platform_destroy( | CODE |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 215 | def require_conclusive_flow_outcome(outcome: str, target: str) -> str: | STRING |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 233 | def wait_established_flow_outcome( | STRING |
| LOW | tests/e2e/sdk_compat/framework/create_retry.py | 90 | def create_with_capacity_retry( | CODE |
| LOW | tests/e2e/sdk_compat/framework/sandbox_logs.py | 111 | def parse_master_nodes_scanned(text: str) -> int | None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/sandbox_logs.py | 193 | def skip_unless_single_node_cubecli( | CODE |
| LOW | tests/e2e/sdk_compat/framework/sandbox_logs.py | 348 | def wait_for_host_log_contains( | CODE |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 113 | def _check_backend_dependencies(backends: tuple[str, ...], errors: list[str]) -> None: | CODE |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 116 | def _assert_ro_mount_rejects_write(sandbox, path: str, *, timeout: int) -> None: | CODE |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 129 | def _delete_snapshot_after_runtime_release( | CODE |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 151 | def test_snapshot_restore_reverts_guest_and_keeps_external_mounts_current( | CODE |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 254 | def test_snapshot_restore_chain_remaps_host_mounts_each_generation( | CODE |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 375 | def test_rollback_restores_guest_state_but_not_host_mount_data( | CODE |
| LOW⚡ | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 479 | def test_clone_isolates_guest_state_and_shares_rw_host_mount( | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 84 | def test_rw_and_ro_mounts_visible(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 98 | def test_rw_mount_accepts_writes(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 112 | def test_ro_mount_rejects_writes(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 127 | def test_disallowed_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 152 | def test_get_info_returns_volume_mounts(sdk_sandbox): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 175 | def test_list_returns_volume_mounts(sdk_sandbox, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 61 | def _require_host_mount_backend(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 108 | def test_illegal_hostpath_rejected(case, host_path, reason, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 129 | def test_illegal_mountpath_rejected(case, mount_path, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 141 | def test_mixed_valid_and_invalid_entries_rejected(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 169 | def test_malformed_annotation_rejected(case, raw, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 194 | def test_nonexistent_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 215 | def test_file_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 275 | def test_exact_allowed_prefix_dir_mounts(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 289 | def test_empty_mount_list_is_noop(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 302 | def test_rw_mount_shares_data_across_sandboxes(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 377 | def test_nested_ro_parent_rw_child_writable_when_child_listed_first( | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 535 | def test_symlink_escapes_allowed_prefix(sdk_backend, sdk_e2e_config): | CODE |
| LOW | …e2e/sdk_compat/cases/framework/test_l7_egress_retry.py | 79 | def test_http_command_retries_gateway_failure(gateway_status: int) -> None: | CODE |
| 539 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeS3lvol/test/run_all.sh | 453 | except Exception: | CODE |
| LOW | CubeS3lvol/test/tools/s3_get_manifest.py | 78 | except Exception as exc: | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 255 | except Exception: rows=[] | CODE |
| LOW⚡ | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 288 | except Exception: rows=[] | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 301 | except Exception: rows=[] | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_decouple.sh | 328 | except Exception: rows=[] | CODE |
| LOW⚡ | CubeS3lvol/test/dataplane/probe_esnap_clone.sh | 309 | except Exception: rows=[] | CODE |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 162 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 606 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 253 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 624 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3028 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3140 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3476 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3701 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3741 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4035 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4102 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4119 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4630 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4648 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4949 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_chain_depth.sh | 78 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_activation_test.sh | 76 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_hot_upgrade_test.sh | 623 | except Exception as exc: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 120 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 156 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 182 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 220 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 323 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 340 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 358 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 559 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 600 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 633 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 698 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 714 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 821 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 939 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1071 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1126 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1182 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1190 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1204 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1301 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1309 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1464 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1472 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_esnap_snapshot.sh | 254 | except Exception: rows=[] | CODE |
| LOW | CubeS3lvol/test/dataplane/run_fs_test.sh | 274 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_decouple_window.sh | 184 | except Exception: subs = [] | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_decouple_window.sh | 224 | except Exception: rows=[] | CODE |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 174 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 403 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/probe_mmap_restore_real.sh | 176 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_snapshot_cancel_test.sh | 541 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_decouple_queue_test.sh | 534 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_dataplane_test.sh | 1186 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 143 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 157 | except Exception: | CODE |
| 256 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CubeS3lvol/test/tools/s3_prefix_rm.py | 252 | except (RuntimeError, ET.ParseError, OSError): | CODE |
| HIGH | tests/e2e/memory_reclaim/free_page_reporting.py | 286 | except SandboxNotFoundError: | CODE |
| HIGH | tests/e2e/memory_reclaim/free_page_reporting.py | 293 | except SandboxNotFoundError: | CODE |
| HIGH | tests/e2e/sdk_compat/framework/parallel.py | 82 | except ValueError: | CODE |
| HIGH | …dk_compat/cases/network/test_template_network_merge.py | 93 | except Exception: | CODE |
| HIGH | …dk_compat/cases/network/test_template_network_merge.py | 193 | except Exception: | CODE |
| HIGH | …dk_compat/cases/network/test_template_network_merge.py | 185 | except Exception: | CODE |
| HIGH | …e2e/sdk_compat/cases/network/test_mask_request_host.py | 105 | except Exception: | CODE |
| HIGH | …e2e/sdk_compat/cases/network/test_mask_request_host.py | 171 | except Exception: | CODE |
| HIGH | …ts/e2e/sdk_compat/cases/network/test_l7_custom_port.py | 143 | except Exception: | CODE |
| HIGH | …e/sdk_compat/cases/lifecycle/test_sandbox_envd_logs.py | 367 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | …ts/e2e/sdk_compat/cases/lifecycle/test_pause_resume.py | 269 | except Exception: # noqa: BLE001 - fixture teardown still kills the sandbox | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 68 | except TemplateNotFoundError: | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 129 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 186 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 228 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 259 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 299 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 344 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | tests/e2e/sdk_compat/cases/templates/test_alias.py | 390 | except (ApiError, TemplateNotFoundError): | CODE |
| HIGH | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 211 | except Exception: # noqa: BLE001 - try another live runtime | CODE |
| HIGH | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 33 | except ImportError: | CODE |
| HIGH | tests/e2e/sdk_compat/adapters/base.py | 167 | except Exception: | CODE |
| HIGH | tests/e2e/sdk_compat/adapters/base.py | 160 | except Exception: | CODE |
| HIGH | CubeAPI/examples/benchmark.py | 159 | except ValueError: | CODE |
| HIGH | sdk/python/cubesandbox/_pty.py | 154 | except Exception: | CODE |
| HIGH | sdk/python/cubesandbox/_pty.py | 513 | except Exception: | CODE |
| HIGH | sdk/python/cubesandbox/_pty.py | 121 | except Exception: | CODE |
| HIGH | sdk/python/cubesandbox/_pty.py | 449 | except Exception: | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 714 | except CubeSandboxError: | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 725 | except Exception: | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 879 | except Exception: # noqa: BLE001 | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 870 | except Exception: # noqa: BLE001 — best-effort | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 985 | except Exception: # noqa: BLE001 — best-effort cleanup | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 975 | except Exception: # noqa: BLE001 — best-effort cleanup | CODE |
| HIGH | sdk/python/cubesandbox/sandbox.py | 398 | except Exception: # noqa: BLE001 — surface the gateway error | CODE |
| HIGH | sdk/python/cubesandbox/_policy.py | 530 | except ValueError: | CODE |
| HIGH | …env-inheritance/lightweight-code-interpreter/server.py | 418 | except asyncio.CancelledError: | CODE |
| HIGH | …env-inheritance/lightweight-code-interpreter/server.py | 436 | except Exception: | CODE |
| HIGH | …aining/mini-swe-agent-patch/run/benchmarks/swebench.py | 274 | except concurrent.futures.CancelledError: | CODE |
| HIGH | examples/mini-rl-training/scripts/run-concurrent.py | 524 | except (ImportError, AttributeError): | CODE |
| HIGH | examples/mini-rl-training/scripts/run-concurrent.py | 160 | except ImportError: | CODE |
| HIGH | examples/mini-rl-training/scripts/run-concurrent.py | 490 | except Exception: | CODE |
| HIGH | …ai-agents-code-interpreter/code_interpreter_demo_ci.py | 452 | except TypeError: | CODE |
| HIGH | …s/claude-code-integration/hooks/cubesandbox_rewrite.py | 97 | except Exception: | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 441 | except Exception: | CODE |
| HIGH | …pshot-rollback-clone/bench_pause_resume_concurrency.py | 82 | except Exception: | CODE |
| HIGH | …amples/snapshot-rollback-clone/bench_snapshot_dirty.py | 118 | except Exception: | CODE |
| HIGH | …amples/snapshot-rollback-clone/bench_snapshot_dirty.py | 123 | except Exception: | CODE |
| HIGH | …les/snapshot-rollback-clone/bench_clone_concurrency.py | 59 | except Exception: | CODE |
| HIGH | …les/snapshot-rollback-clone/bench_clone_concurrency.py | 64 | except Exception: | CODE |
| HIGH | examples/opencode-plugin-sandbox/exec_backend.py | 112 | except OSError: | CODE |
| HIGH | examples/opencode-plugin-sandbox/exec_backend.py | 248 | except OSError: | CODE |
| HIGH | examples/opencode-plugin-sandbox/exec_backend.py | 227 | except OSError: | CODE |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 377 | except Exception: # noqa: BLE001 | CODE |
| HIGH | examples/code-sandbox-quickstart/mask-request-host.py | 156 | except Exception: | CODE |
| HIGH | …code-sandbox-quickstart/network_l7_custom_port_echo.py | 121 | except Exception: | CODE |
| HIGH | examples/volume/cos/volume_complex_concurrent_test.py | 114 | except Exception: # noqa: BLE001 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cubecow/examples/go-test/main.go | 380 | // Step 1: Create volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 383 | // Step 2: Get volume info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 386 | // Step 3: Get volume block info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 389 | // Step 4: Resize volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 392 | // Step 5: Create snapshot | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 395 | // Step 6: List snapshots | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 398 | // Step 7: Derive a writable volume from the snapshot (auto-activated). | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 401 | // Step 8: List volumes | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 404 | // Step 9: Get metrics | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 407 | // Step 10: Cleanup - delete clone, snapshot, then volume (unless -no-cleanup) | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 551 | // Step 1: build the base projection under the read lock and | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 578 | // Step 2: if the entry is an exported snapshot, refresh | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2957 | # Step 1: terraform init | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2990 | # Step 2: terraform apply (with retry logic) | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3474 | # Step 6: Replace with the CubeSandbox kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3688 | # Step 7: Reboot the CVM and verify the new kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3843 | # Step 8: Initialize all compute nodes (purchased sequentially in step 3) | COMMENT |
| LOW⚡ | CubeTemplateCenter/pkg/image/native.go | 206 | // Step 1: Concurrently prefetch layers to disk to maximize network throughput. | COMMENT |
| LOW | CubeTemplateCenter/pkg/image/native.go | 359 | // Step 2: Sequentially apply and immediately delete layers as they finish downloading. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 214 | // Step 1: Create-restore from tpl-T sets BOTH bindings. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 220 | // Step 2: Commit A advances the runtime-snapshot binding only. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 226 | // Step 3: Commit B — same invariant. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 231 | // Step 4: Rollback to A: rollback restarts the VM, so it bumps BOTH. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 237 | // Step 5: Commit C after rollback — runtime-snapshot advances; the | COMMENT |
| LOW | docs/guide/dev-environment.md | 59 | ### Step 1: Create the VM (one-off) | COMMENT |
| LOW | docs/guide/dev-environment.md | 73 | ### Step 2: Boot the VM | COMMENT |
| LOW | docs/guide/dev-environment.md | 84 | ### Step 3: Log in (in a new terminal) | COMMENT |
| LOW | docs/guide/dev-environment.md | 93 | ### Step 4: Install what you need inside the VM | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 29 | ## Step 1: Install | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 73 | ## Step 2: Create a Template | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 102 | ## Step 3: Run Your First Agent Code | COMMENT |
| LOW | docs/guide/quickstart.md | 47 | ## Step 1: Provision a Cloud Server & Install the PVM Kernel | COMMENT |
| LOW | docs/guide/quickstart.md | 171 | ## Step 2: Install | COMMENT |
| LOW | docs/guide/quickstart.md | 199 | ## Step 3: Create a Template | COMMENT |
| LOW | docs/guide/quickstart.md | 232 | ## Step 4: Run Your First Agent Code | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 46 | ## Step 1: Prepare the Release Bundle | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 55 | ## Step 2: Configure Environment Variables | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 109 | ## Step 3: Install | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 43 | ## Step 0: Provision a Cloud Server | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 59 | ## Step 1: Install the PVM Host Kernel | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 159 | ## Step 2: Install Cube Sandbox with PVM Enabled | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 221 | ## Step 3: Verify the PVM Environment | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 235 | ## Step 4: Create a Template and Get Started | COMMENT |
| LOW | docs/guide/self-build-deploy.md | 54 | ## Step 1: Build the Release Bundle | COMMENT |
| LOW | docs/guide/self-build-deploy.md | 125 | ## Step 2: Deploy to the Target Machine | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 28 | ### Step 1: Write a Dockerfile | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 45 | ### Step 2: Build the image | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 51 | ### Step 3: Verify that envd is healthy | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 66 | ### Step 4: Create the template | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 86 | ### Step 5: Wait for the template to become ready | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 101 | ### Step 6: Verify the template | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 181 | ### Step 1: Write a Dockerfile | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 185 | ### Step 2: Build the image with a registry prefix | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 192 | ### Step 3: Verify that envd is healthy | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 196 | ### Step 4: Log in and push the image | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 206 | ### Step 5: Create the template | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 137 | # Step 1: take a base snapshot in the v0 state | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 144 | # Step 2: spin up a new sandbox from the base snapshot | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 148 | # Step 3: write v1 and drop a checkpoint | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 154 | # Step 4: write v2 and confirm it landed | COMMENT |
| 93 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeS3lvol/test/tools/s3_bucket.py | 24 | CODE | |
| LOW | CubeS3lvol/scripts/rpc.py | 32 | CODE | |
| LOW | tests/e2e/memory_reclaim/free_page_reporting.py | 4 | CODE | |
| LOW | tests/e2e/memory_reclaim/test_free_page_reporting.py | 3 | CODE | |
| LOW | tests/e2e/sdk_compat/conftest.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/auth.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/l7_egress.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/trace.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/platform_lifecycle.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/config.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/models.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 14 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume_hints.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/assertions.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/cleanup.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/capabilities.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/mcp_client.py | 10 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/exceptions.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/parallel.py | 11 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/build_throttle.py | 27 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/create_retry.py | 37 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/sandbox_logs.py | 17 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/reporting.py | 4 | CODE | |
| LOW | …ompat/cases/host-mount/test_snapshot_clone_rollback.py | 17 | CODE | |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 21 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 31 | CODE | |
| LOW | …e2e/sdk_compat/cases/framework/test_l7_egress_retry.py | 6 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_sandbox_logs.py | 6 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 10 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/framework/test_reporting.py | 12 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/framework/test_collection.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/framework/test_parallel.py | 10 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/auth/conftest.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/auth/test_api_key.py | 21 | CODE | |
| LOW | …dk_compat/cases/network/test_template_network_merge.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_dns_allow.py | 6 | CODE | |
| LOW | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_l7_egress.py | 6 | CODE | |
| LOW | …e2e/sdk_compat/cases/network/test_mask_request_host.py | 18 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_policy.py | 4 | CODE | |
| LOW | …_compat/cases/network/test_dns_concurrent_af_unspec.py | 26 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/network/test_l7_custom_port.py | 37 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/run_code/test_python.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/lifecycle/test_connect.py | 4 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_rollback_clone.py | 4 | CODE | |
| LOW | …dk_compat/cases/lifecycle/test_negative_and_timeout.py | 4 | CODE | |
| LOW | …/sdk_compat/cases/lifecycle/test_log_forward_cycles.py | 25 | CODE | |
| LOW | …e/sdk_compat/cases/lifecycle/test_sandbox_envd_logs.py | 13 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_auto_lifecycle.py | 4 | CODE | |
| LOW | …mpat/cases/lifecycle/test_snapshot_delete_reference.py | 6 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/lifecycle/test_pause_resume.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/lifecycle/test_kill.py | 4 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_resume_timeout.py | 4 | CODE | |
| 114 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/e2e/sdk_compat/framework/network_probe.py | 206 | f"test -f {ESTABLISHED_READY_PATH} && echo READY || echo WAIT", | STRING |
| HIGH | tests/e2e/sdk_compat/framework/network_probe.py | 242 | f"cat {ESTABLISHED_RESULT_PATH} 2>/dev/null || echo PENDING", | CODE |
| HIGH | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 101 | f"echo cube > {_RW_MOUNT}/sdk-compat-rw.txt && cat {_RW_MOUNT}/sdk-compat-rw.txt", | CODE |
| HIGH | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 278 | "test -d /mnt/exact && echo mounted", | CODE |
| HIGH | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 326 | f"echo {payload} > {mount}/note.txt && sync", | CODE |
| HIGH | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 194 | "getent hosts dns.google >/dev/null && echo RESOLVED || echo UNRESOLVED", | CODE |
| HIGH | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 194 | "getent hosts dns.google >/dev/null && echo RESOLVED || echo UNRESOLVED", | CODE |
| HIGH⚡ | …ts/e2e/sdk_compat/cases/lifecycle/test_pause_resume.py | 266 | f"kill $(cat {_BLOCK_IO_PID}) 2>/dev/null || true; fi", | STRING |
| HIGH | examples/network-policy/network_dynamic_update.py | 109 | f"&& echo REACHABLE || echo BLOCKED", | CODE |
| HIGH | examples/network-policy/network_dynamic_update.py | 162 | f"for i in $(seq 10); do grep -q . /tmp/hold.out && break; sleep 1; done; " | CODE |
| HIGH | examples/network-policy/network_dynamic_update.py | 172 | "for i in $(seq 15); do test $(wc -l </tmp/hold.out) -ge 2 && break; sleep 1; done; " | CODE |
| HIGH⚡ | examples/openai-agents-example/main.py | 381 | result = await session.exec("uname -a && cat /etc/os-release | head -3") | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 31 | "true && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 50 | "cwd": "cwd && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 66 | "--mount=cwd && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 279 | "true cubesandbox_exec.py && echo host-side", | CODE |
| HIGH | …les/claude-code-integration/tests/test_hook_install.py | 207 | stale_command = "/old/checkout/hooks/cubesandbox_rewrite.py || exit 2" | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 374 | f'cd -- {default_cwd} 2>/dev/null || cd -- "$HOME" || exit 1; ' | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 375 | f'else cd -- {default_cwd} 2>/dev/null || cd -- "$HOME" || exit 1; fi; ' | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 386 | f"then pwd > {cwd_file_q} 2>/dev/null; fi; " | CODE |
| HIGH | examples/opencode-plugin-sandbox/exec_backend.py | 302 | lines.append(f"cd {shlex.quote(cwd)} 2>/dev/null || cd {shlex.quote(DEFAULT_WORKDIR)}") | CODE |
| HIGH⚡ | examples/volume/cos/verify_volume.py | 445 | run_cmd(sb, "test -d %s && echo EXIST" % mp, "挂载点目录存在", tag) | CODE |
| HIGH⚡ | examples/volume/cos/verify_volume.py | 447 | run_cmd(sb, "df -hT %s 2>&1 || df -h %s" % (mp, mp), "df 挂载点文件系统/容量", tag) | CODE |
| HIGH | examples/volume/cos/volume_complex_concurrent_test.py | 325 | out = reader.commands.run(f"cat {path} 2>/dev/null || true") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cubecow/examples/go-test/main.go | 380 | // Step 1: Create volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 383 | // Step 2: Get volume info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 386 | // Step 3: Get volume block info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 389 | // Step 4: Resize volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 392 | // Step 5: Create snapshot | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 395 | // Step 6: List snapshots | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 398 | // Step 7: Derive a writable volume from the snapshot (auto-activated). | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 401 | // Step 8: List volumes | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 404 | // Step 9: Get metrics | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 407 | // Step 10: Cleanup - delete clone, snapshot, then volume (unless -no-cleanup) | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 551 | // Step 1: build the base projection under the read lock and | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 578 | // Step 2: if the entry is an exported snapshot, refresh | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2957 | # Step 1: terraform init | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2990 | # Step 2: terraform apply (with retry logic) | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3474 | # Step 6: Replace with the CubeSandbox kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3688 | # Step 7: Reboot the CVM and verify the new kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3843 | # Step 8: Initialize all compute nodes (purchased sequentially in step 3) | COMMENT |
| LOW⚡ | CubeTemplateCenter/pkg/image/native.go | 206 | // Step 1: Concurrently prefetch layers to disk to maximize network throughput. | COMMENT |
| LOW | CubeTemplateCenter/pkg/image/native.go | 359 | // Step 2: Sequentially apply and immediately delete layers as they finish downloading. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 214 | // Step 1: Create-restore from tpl-T sets BOTH bindings. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 220 | // Step 2: Commit A advances the runtime-snapshot binding only. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 226 | // Step 3: Commit B — same invariant. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 231 | // Step 4: Rollback to A: rollback restarts the VM, so it bumps BOTH. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 237 | // Step 5: Commit C after rollback — runtime-snapshot advances; the | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1093 | // Step 1: plain restart. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1109 | // Step 2: find latest healthy snapshot. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1122 | // Step 3: rollback to the healthy snapshot. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1152 | // Step 4: restart OpenClaw again after rollback. | COMMENT |
| LOW | pkgs/cubedb/migrate/migrate_alignment_test.go | 96 | // Step 1: table set — catches missing tables like runtime_active quickly. | COMMENT |
| LOW | examples/openai-agents-example/simple_demo.py | 216 | # Step 1: Create sandbox and write a marker file | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 236 | # Step 3: Pause (stop + shutdown with pause_on_exit=True) | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 244 | # Step 4: Resume | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 251 | # Step 5: Verify marker file persists | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 18 | # Step 1: create a base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 25 | # Step 2: spin up a sandbox from the base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 29 | # Step 3: write v1 to both disk and tmpfs, take a checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 35 | # Step 4: write v2, verify it stuck on both | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 42 | # Step 5: rollback to the v1 checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 46 | # Step 6: verify both disk and tmpfs restored to v1 | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 17 | # Step 1: create a base snapshot at v0 | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 24 | # Step 2: spin up a sandbox from the base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 28 | # Step 3: write v1, take a checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 34 | # Step 4: write v2, confirm it stuck | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 41 | # Step 5: rollback to the v1 checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 45 | # Step 6: verify state is v1 | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 274 | # Step 1: create volumes/<volume_id>/ in the COS bucket | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 277 | # Step 2: return success; private_data carries the COS key prefix for Attach | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 292 | # Step 1: delete volumes/<volume_id>/ from COS (irreversible) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 321 | # Step 1: serialize concurrent attach for the same volume | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 325 | # Step 2: mount COS folder with cosfs (skip if already mounted) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 374 | # Step 2: find mount path (prefer path saved at attach time) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 379 | # Step 3: last user gone — unmount FUSE (COS data stays until destroy) | COMMENT |
| LOW | examples/volume/cos/binary/cube-volume-cos.sh | 336 | # Step 3: return host_path so Cubelet can bind-mount into the sandbox | COMMENT |
| LOW | examples/volume/cos/binary/cube-volume-cos.sh | 362 | # Step 1: other sandboxes still mounted — leave cosfs running | COMMENT |
| LOW | hypervisor/vmm/src/soft_dirty.rs | 159 | // Step 1: allocate a page-aligned anonymous scratch region. The | COMMENT |
| LOW⚡ | hypervisor/vmm/src/soft_dirty.rs | 181 | // Step 2: write one byte. This is the **first** write to this page, | COMMENT |
| LOW⚡ | hypervisor/vmm/src/soft_dirty.rs | 190 | // Step 3: read the pagemap entry and check bit 55. | COMMENT |
| LOW | hypervisor/vmm/src/soft_dirty.rs | 206 | // Step 4: kernel really supports soft-dirty. Arm the tracker by | COMMENT |
| LOW⚡ | hypervisor/scripts/run_integration_tests_x86_64.sh | 242 | # Step 1: Priority 1 - Boot & Lifecycle (parallel) | COMMENT |
| LOW⚡ | hypervisor/scripts/run_integration_tests_x86_64.sh | 249 | # Step 2: Priority 2 - Core I/O Devices (parallel) | COMMENT |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/e2e/sdk_compat/framework/create_retry.py | 99 | Call ``create`` and retry it while the scheduler is out of capacity. Args: create: Zero-argument callable t | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 334 | POST /volumes — Create a new persistent volume. e2b-compatible by default: when ``driver`` is omitted (``None`` | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 380 | GET /volumes — List all volumes. The returned entries never carry a ``token`` (it is only surfaced on c | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 411 | GET /volumes/{volumeID} — Fetch a single volume, including its token. Args: volume_id: Volume ident | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 442 | GET /volumes/{volumeID} — Connect to an existing volume. e2b-compatible: fetches the volume via ``get_info`` (` | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 475 | DELETE /volumes/{volumeID} — Permanently delete a volume. e2b-compatible: returns ``True`` on success, ``False` | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 150 | GET /templates — List all templates. Args: config: SDK config. Uses default (env-based) config if | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 181 | GET /templates/:templateID — Get a template and its build history. Args: template_id: Template iden | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 240 | POST /templates - Build (create) a new template from an image. Submits CubeAPI's create-from-image request and | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 462 | PUT /templates/:templateID/alias — Set, reassign, or clear the alias of an existing template. Args: | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 253 | POST /sandboxes - Create a new sandbox. Args: template: Template ID or alias. Falls back to ``CUBE_ | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 411 | POST /sandboxes/:sandboxID/connect - Connect to an existing sandbox. Resumes the sandbox if it is currently pau | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 510 | POST /execute - Execute code inside the sandbox. Streams the ndjson response from the sandbox's envd process vi | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 733 | POST /sandboxes/:sandboxID/snapshots — Create a snapshot (1.1). The sandbox is temporarily paused during snapsh | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 822 | POST /sandboxes/:sandboxID/rollback — Roll back a sandbox to a snapshot (1.5). Reverts the sandbox's filesystem | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 884 | Clone this sandbox *n* times (1.6). Internally this executes three steps: 1. :meth:`create_snapshot` — | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/host-mount/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/route-aware-egress/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/pi-agent-integration/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/network-policy/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/grpc-ingress/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 24 | # Usage: | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 9 | # Usage: | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 13 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 44 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 35 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_cubecow_client_test.sh | 44 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_hot_upgrade_test.sh | 41 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 63 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_derived_test.sh | 71 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_guards_test.sh | 45 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_fs_test.sh | 98 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 54 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/probe_mmap_restore_real.sh | 28 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_snapshot_cancel_test.sh | 30 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_decouple_queue_test.sh | 34 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_dataplane_test.sh | 61 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 41 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/probe_mmap_restore_perf.sh | 24 | # Usage: | COMMENT |
| LOW | …S3lvol/test/dataplane/run_hot_upgrade_negative_test.sh | 45 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_recovery_test.sh | 47 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_snapshot_converge_test.sh | 22 | # Usage: | COMMENT |
| LOW | CubeS3lvol/patches/apply.sh | 11 | # Usage: | COMMENT |
| LOW | CubeS3lvol/scripts/rcow_start.sh | 43 | # Usage: | COMMENT |
| LOW | deploy/one-click/build-guest-image.sh | 5 | # Usage: | COMMENT |
| LOW | deploy/one-click/build-agent-ext4.sh | 7 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/collect-logs.sh | 20 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/cube-check.sh | 18 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/check-procs.sh | 17 | # Usage: | COMMENT |
| LOW | deploy/kubernetes/chart/scripts/cleanup-node-host.sh | 8 | # Usage: | COMMENT |
| LOW | tests/unittest/run_sdk_test.sh | 17 | # Usage: | COMMENT |
| LOW | tests/unittest/run.sh | 17 | # Usage: | COMMENT |
| LOW | tests/perf/cubebench.sh | 73 | # Usage: | COMMENT |
| LOW | dev-env/create_vm.sh | 18 | # Usage: | COMMENT |
| LOW | dev-env/run_vm.sh | 17 | # Usage: | COMMENT |
| LOW | dev-env/login.sh | 11 | # Usage: | COMMENT |
| LOW | CubeAPI/scripts/test-cube-api.sh | 4 | # Usage: | COMMENT |
| LOW | CubeMaster/scripts/redis_key_migrate.sh | 4 | # Usage: | COMMENT |
| LOW | examples/opencode-plugin-sandbox/plugin/install.sh | 13 | # Usage: | COMMENT |
| LOW | examples/volume/s3/install-deps.sh | 17 | # Usage: | COMMENT |
| LOW | examples/volume/cos/verify_volume.py | 63 | # Usage: | COMMENT |
| LOW | examples/volume/cos/install-deps.sh | 12 | # Usage: | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 110 | # Usage: | COMMENT |
| LOW | examples/volume/juicefs/install-deps.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/bump-image.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/new-migration.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/gh.sh | 7 | # Usage: | COMMENT |
| LOW | .github/workflows/publish-go-sdk.yml | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 363 | # Report a measured operation with the harness overhead taken out. | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 1193 | # add_ns, the host rescan, udev -- belongs to the test harness rather than to the | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_agent_template_test.sh | 202 | # a rescan; rescanning on every pass makes the wait robust on hosts where the | COMMENT |
| LOW | CubeS3lvol/scripts/rcow_common.sh | 357 | # Exported, not just set, because the target inherits them -- without that the | COMMENT |
| MEDIUM | cubecow/benches/reflink_ops.rs | 236 | // we name it explicitly so the recipe is robust to default | COMMENT |
| MEDIUM | deploy/pvm/pvm_setup.sh | 80 | # is more robust and is a no-op on RPM distributions. | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/validate.sh | 103 | # keep this robust across checkout layouts. Gate on errors so genuine bugs | COMMENT |
| MEDIUM⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 359 | # fall through to auto-detect / prompt so re-runs stay robust. | COMMENT |
| MEDIUM | CubeTemplateCenter/pkg/image/disk.go | 321 | // set explicitly to be robust); --numeric-owner avoids name lookups | COMMENT |
| MEDIUM⚡ | CubeTemplateCenter/pkg/image/native.go | 207 | // Temp directory is created in destDir's workspace to utilize the same fast disk. | COMMENT |
| MEDIUM | …_compat/cases/network/test_dns_concurrent_af_unspec.py | 62 | # ``RESULT:<json>`` line so the harness can parse it deterministically. | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 465 | # the section body runs) makes the reap robust: reading $! only after the block | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 501 | # block the whole harness forever. No section backgrounds anything today, | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 618 | # Prove the harness can actually operate BEFORE asking the operator to | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 621 | # operator has already typed "yes" to wipe a cluster the harness never runs | COMMENT |
| MEDIUM | Cubelet/api/services/cubehost/v1/hostimage.pb.go | 1069 | // sandbox, and the runtime should leverage this to ensure correct | COMMENT |
| MEDIUM | Cubelet/pkg/cubelet/versioninfo/hostfacts.go | 86 | // lifetime; re-collecting until a non-empty result lands makes it robust. | COMMENT |
| MEDIUM | agent/rustjail/src/mount.rs | 1396 | // the runtime, so checking the effective cap set is more robust than | COMMENT |
| MEDIUM | docs/package-lock.json | 4443 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | dev-env/internal/setup_selinux.sh | 53 | # most robust fix is to flip SELinux to permissive mode. We do it both | COMMENT |
| LOW | examples/openai-agents-example/main.py | 18 | python main.py --sandbox-only # just create & destroy sandbox | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeS3lvol/test/tools/s3_prefix_rm.py | 147 | CODE | |
| LOW | tests/e2e/sdk_compat/conftest.py | 109 | CODE | |
| LOW | tests/e2e/sdk_compat/conftest.py | 243 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/build_throttle.py | 186 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 50 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 377 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 535 | CODE | |
| LOW | …dk_compat/cases/network/test_template_network_merge.py | 127 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/network/test_l7_custom_port.py | 213 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/filesystem/test_extended.py | 40 | CODE | |
| LOW | …sdk_compat/cases/volume/test_snapshot_volume_mounts.py | 105 | CODE | |
| LOW | …sdk_compat/cases/volume/test_snapshot_volume_mounts.py | 178 | CODE | |
| LOW | …sdk_compat/cases/volume/test_snapshot_volume_mounts.py | 240 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/volume/test_read_only.py | 35 | CODE | |
| LOW | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 252 | CODE | |
| LOW | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 337 | CODE | |
| LOW | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 397 | CODE | |
| LOW | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 464 | CODE | |
| LOW | …e2e/sdk_compat/cases/volume/test_snapshot_reference.py | 656 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 85 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 348 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 497 | CODE | |
| LOW | tests/e2e/resource_metrics/lifecycle_metrics.py | 232 | CODE | |
| LOW | CubeAPI/examples/benchmark.py | 611 | CODE | |
| LOW | sdk/python/cubesandbox/_pty.py | 464 | CODE | |
| LOW | sdk/python/cubesandbox/_stream.py | 15 | CODE | |
| LOW | sdk/python/cubesandbox/sandbox.py | 883 | CODE | |
| LOW | sdk/python/cubesandbox/_models.py | 231 | CODE | |
| LOW | sdk/python/cubesandbox/_commands.py | 137 | CODE | |
| LOW | …env-inheritance/lightweight-code-interpreter/server.py | 354 | CODE | |
| LOW | examples/pi-agent-integration/_pi_common.py | 38 | CODE | |
| LOW | examples/pi-agent-integration/run_pi_warmup.py | 58 | CODE | |
| LOW | …raining/mini-swe-agent-patch/environments/extra/e2b.py | 195 | CODE | |
| LOW | …aining/mini-swe-agent-patch/run/benchmarks/swebench.py | 227 | CODE | |
| LOW | examples/mini-rl-training/scripts/run-concurrent.py | 669 | CODE | |
| LOW | examples/mini-rl-training/scripts/run-concurrent.py | 730 | CODE | |
| LOW | examples/openai-agents-example/main.py | 399 | CODE | |
| LOW | examples/openai-agents-example/main.py | 444 | CODE | |
| LOW | examples/e2b-dev-sidecar/dev_sidecar.py | 180 | CODE | |
| LOW | examples/e2b-dev-sidecar/dev_sidecar.py | 198 | CODE | |
| LOW | …ai-agents-code-interpreter/code_interpreter_demo_ci.py | 519 | CODE | |
| LOW | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 434 | CODE | |
| LOW | examples/ivshmem/ivshmem_benchmark.py | 155 | CODE | |
| LOW | examples/opencode-plugin-sandbox/exec_backend.py | 214 | CODE | |
| LOW | examples/volume/cos/volume_complex_concurrent_test.py | 126 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_guards_test.sh | 87 | # Create the lvstore directly, so the create path can be exercised without | COMMENT |
| MEDIUM | CubeS3lvol/scripts/rcow_common.sh | 1253 | # Create the whole grid in one pass. Existing subsystems are left alone so that | COMMENT |
| MEDIUM | deploy/pvm/common.sh | 3 | # This file is sourced by build-pvm-host-kernel-pkg.sh and | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/main.tf | 542 | # Create the database (via the jumpserver) | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/lib-phases.sh | 21 | # This file is sourced by create.sh (and by the test). It must not run anything | COMMENT |
| MEDIUM⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 5495 | # Create the MySQL instance (+ cube account/privilege + the application | COMMENT |
| MEDIUM | deploy/one-click/scripts/common/validation.sh | 5 | # This file is sourced by callers that already define die(). | COMMENT |
| MEDIUM | deploy/one-click/lib/guest-image.sh | 9 | # This file is a sourced library; do not set shell options here. | COMMENT |
| MEDIUM | deploy/one-click/lib/common.sh | 3 | # This file is a sourced library. Do not set shell options here: entrypoint | COMMENT |
| MEDIUM | sdk/python/cubesandbox/_volume.py | 235 | # Create a volume (name auto-generated when omitted) -> Volume instance | STRING |
| MEDIUM | scripts/new-migration.sh | 5 | # Create a new CubeMaster MySQL migration with a UTC timestamp version prefix. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/guide/integrations/langchain.md | 370 | + # export CUBE_API_KEY="<your-api-key>" # only for auth-enabled backends | CODE |
| HIGH | docs/zh/guide/integrations/langchain.md | 355 | + # export CUBE_API_KEY="<your-api-key>" # 仅用于启用了鉴权的后端 | CODE |
| HIGH | examples/mini-rl-training/README.md | 48 | E2B_API_KEY="<your-api-key>" | CODE |
| HIGH | examples/mini-rl-training/README_zh.md | 46 | E2B_API_KEY="<your-api-key>" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/sdk_compat/conftest.py | 677 | def _setup_log(message: str) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 20 | __all__ = [ | CODE |
| LOW | tests/e2e/sdk_compat/adapters/__init__.py | 145 | __all__ = [ | CODE |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 482 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/cubesandbox_adapter.py | 225 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/cubesandbox_adapter.py | 280 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/base.py | 106 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/base.py | 136 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/tracing_adapter.py | 231 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/tracing_adapter.py | 332 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | sdk/python/cubesandbox/_filesystem.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdk/python/cubesandbox/__init__.py | 14 | __all__ = [ | CODE |
| LOW | sdk/python/cubesandbox/_stream.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdk/python/cubesandbox/sandbox.py | 622 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | sdk/python/cubesandbox/sandbox.py | 640 | def update_network(self, network: Dict[str, Any] | None = None) -> None: | CODE |
| LOW⚡ | examples/mini-rl-training/scripts/run-concurrent.py | 499 | def _update_preds(path: Path, instance_id: str, model_name: str, patch: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/one-click/install.sh | 1014 | # Check if the user has explicitly opted to skip this check. | COMMENT |
| LOW | deploy/one-click/online-install.sh | 228 | # Check if the closest existing parent directory is writable by root (detects read-only mounts) | COMMENT |
| LOW | deploy/one-click/terraform/tencentcloud/create.sh | 2873 | # Set TENCENTCLOUD_COMPUTE_INSTANCE_TYPE to choose explicitly. | COMMENT |
| LOW | deploy/kubernetes/chart/values.yaml | 853 | # Set nameservers to an explicit list to override: that turns follow-node | COMMENT |
| LOW | agent/bootstrap.sh | 3 | # Check if the user is running this script as root | COMMENT |
| LOW | …visor/scripts/run_integration_tests_windows_aarch64.sh | 33 | # Check if the images are present | COMMENT |
| LOW | …rvisor/scripts/run_integration_tests_windows_x86_64.sh | 33 | # Check if the images are present | COMMENT |
| LOW | hypervisor/scripts/run_integration_tests_aarch64.sh | 220 | # Check if there is any error in the execution of `update_workloads`. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 4047 | # Expose all three, one RPC after another as an orchestration layer would. | COMMENT |
| MEDIUM | deploy/kubernetes/chart/values.yaml | 333 | # CubeMaster does NOT build locally; it only orchestrates (persists job rows, | COMMENT |
| MEDIUM | docs/guide/usecases/trpc-agent-go.md | 17 | [trpc-agent-go](https://github.com/trpc-group/trpc-agent-go) is Tencent's open-source Go framework for building producti | CODE |
| MEDIUM | docs/changelog/v0.4.0.md | 56 | - **Artifact management** (#506): A new job runner orchestrates the full pipeline (image export → rootfs artifact build | CODE |
| MEDIUM | docs/changelog/v0.3.0.md | 54 | - **Docker Compose container lifecycle** (#386): Container lifecycle management migrated to Docker Compose, simplifying | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | Cubelet/api/services/cubehost/v1/hostimage.pb.go | 1721 | "\x19ReverseStreamForwardImage\x124.cubelet.services.cubebox.hostimage.v1.ClientMessage\x1a4.cubelet.services.cubebox.h | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/locales/zh/command.json | 3 | "placeholder": "搜索或输入命令…", | CODE |
| LOW | web/src/locales/en/command.json | 3 | "placeholder": "Search or type a command…", | CODE |
| LOW | web/src/components/CommandPalette.tsx | 45 | placeholder={t('placeholder')} | CODE |
| LOW | web/src/i18n/index.ts | 35 | 'placeholder', | CODE |
| LOW | web/src/pages/Placeholder.tsx | 10 | type PlaceholderKey = ParseKeys<'placeholder'>; | CODE |
| LOW | web/src/pages/Placeholder.tsx | 21 | const { t } = useTranslation('placeholder'); | CODE |
| LOW | CubeAPI/src/services/sandboxes.rs | 2336 | "user@example.com", | CODE |
| LOW | CubeMaster/pkg/service/sandbox/util_test.go | 106 | "user@example.com", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | hypervisor/virtio-devices/src/vsock/csm/connection.rs | 57 | // receiving peer's behavior is undefined. In this implementation, we forcefully terminate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hypervisor/vmm/src/vm.rs | 1303 | // Don't forget to set the terminal in canonical mode | COMMENT |
| LOW | hypervisor/virtiofsd/src/passthrough/mod.rs | 1424 | // a new option here, don't forget to add it there, too, and handle it both in | COMMENT |
| LOW | hypervisor/src/lib.rs | 354 | // Don't forget to set the terminal in canonical mode | COMMENT |
| LOW | hypervisor/src/main.rs | 770 | // Don't forget to set the terminal in canonical mode | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cubelet/scripts/cubebox_appsnapshot.py | 106 | CODE | |
| LOW | sdk/python/cubesandbox/_template.py | 210 | CODE | |
| LOW | sdk/python/cubesandbox/sandbox.py | 236 | CODE | |
| LOW | sdk/python/cubesandbox/_models.py | 63 | CODE | |
| LOW | …aining/mini-swe-agent-patch/run/benchmarks/swebench.py | 227 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/public/mockServiceWorker.js | 124 | async function handleRequest(event, requestId, requestInterceptedAt) { | CODE |
| LOW | sdk/python/cubesandbox/_transport.py | 25 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |