Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
This report presents the forensic synthetic code analysis of TencentCloud/CubeSandbox, a Go project with 11,378 GitHub stars. SynthScan v2.0 examined 830,101 lines of code across 3068 source files, recording 3381 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 6.9 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3381 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 103 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 110 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 119 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 186 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 188 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 197 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 207 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 363 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 369 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CubeS3lvol/make_release.sh | 373 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 261 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 263 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 318 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 324 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 384 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 510 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/make_release.sh | 512 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 67 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 74 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 189 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 196 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 233 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 235 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 493 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 515 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 943 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 945 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 1027 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/setup_dep.sh | 1029 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 75 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 84 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 184 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 186 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 265 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 272 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 287 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 290 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 308 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 310 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 325 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 327 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 356 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 358 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 485 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/run_all.sh | 487 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 77 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 79 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 93 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 98 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 125 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/tools/check_layering.sh | 127 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 243 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 261 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 292 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 352 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 404 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 488 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 528 | # ========================================================================== | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 607 | # ========================================================================== | COMMENT |
| 1023 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/cube-entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | CubeEgress/start.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 21 | # sub-chain so 'down' tears down our config without touching anything | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 21 | # | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 41 | # | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 361 | } > "${PKG_DIR}/VERSION" | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 381 | # target comes up, DPDK initialises, the RPC server listens, and it exits. That | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 21 | # ./setup_dep.sh --print-configure-args | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 41 | # The build used to look for SPDK at ../spdk, which works only if whoever cloned | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 61 | # | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 101 | # What ./configure was given. Deliberately short: | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 501 | # | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 521 | # Debug by default, which is the same call as --enable-debug for SPDK above and | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 801 | git clone --quiet --depth 1 --branch "${tag}" "${repo}" "${src}" || return 1 | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 21 | # === Why serial, and why this order === | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 41 | # find out whether one thing broke or ten did. Failures are collected and | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 381 | # a previous run that did not clean up. The control test refuses in this | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_bucket.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/check_binary_fresh.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/tools/check_layering.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/tools/check_layering.sh | 21 | # 3. module/ must not name aws_* identifiers at all. | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 21 | # | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 41 | # | COMMENT |
| LOW | CubeS3lvol/test/tools/s3lvol_rpc.py | 61 | # mark for the snapshot. The mark is the *only* record that a delete was asked | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_prefix_rm.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | CubeS3lvol/test/tools/s3_prefix_rm.py | 21 | # | COMMENT |
| LOW | CubeS3lvol/test/integration/s3_wal_test.c | 41 | #include "spdk/stdinc.h" | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 21 | # - an esnap clone's parent is pinned by the export, which can be released or can | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 541 | # be worth looking at on its own, but it is a different question from this one and | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 21 | # 2. writing the imported volume does not touch the source. It reads through to | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 621 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1121 | >/dev/null 2>"${WORKDIR}/rm_ns.err"; then | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1241 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1421 | # unable to handle at all until the walk learned to follow the chain, and because | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1581 | # ========================================================================== | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 1781 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2221 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2241 | # 1. the export stays zero-copy -- the zeroed clusters are recognised as holes | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2541 | # a corner. It used to be refused outright: the imports registry is keyed by | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2841 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3041 | COMMENT | |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3061 | # and a filesystem that would not mount. | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3361 | # imports submitted at the same time, all decoupling from the same export, and | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3381 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3701 | # snapshot and writes its own manifest -- but that is exactly why this has to | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3941 | echo | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3961 | # under the read, or the object is still missing after | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 4001 | else | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_activation_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 21 | # | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_guards_test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_guards_test.sh | 21 | # The lvstore name is its key prefix in the bucket (s3_bs_dev_create does | COMMENT |
| 963 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/lib/templateConfig.ts | 55 | export function extractTemplateRuntimeConfig(cr: unknown): TemplateRuntimeConfig | null { | CODE |
| LOW | web/src/lib/templateConfig.ts | 73 | export function extractTemplateNetworkPolicy(cr: unknown): TemplateNetworkPolicy { | CODE |
| LOW | web/src/pages/Versions.tsx | 63 | function stripPlatformVersionSuffix(version: string): string { | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 198 | def pytest_collection_modifyitems(config: pytest.Config, items: list[pytest.Item]) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 229 | def pytest_runtest_makereport(item: pytest.Item, call: pytest.CallInfo): | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 477 | def _scale_capacity_retries_for_xdist(cfg: SdkE2EConfig) -> SdkE2EConfig: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 580 | def _log_effective_environment(cfg: SdkE2EConfig) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/config.py | 22 | def volume_plugin_enabled_from_env() -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 37 | def backend_supports_host_mount(backend: str) -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 47 | def skip_if_host_mount_unavailable(backend: str, config) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 105 | def is_missing_hostpath_source_error(exc: BaseException | str) -> bool: | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 124 | def warn_pass_missing_hostpath_source( | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume_hints.py | 18 | def volume_plugin_misconfigured_hint(detail: str = "") -> str: | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 50 | def wait_delete_volume_status( | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 82 | def wait_until_data_plane_ready( | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 139 | def wait_for_platform_destroy( | CODE |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 215 | def require_conclusive_flow_outcome(outcome: str, target: str) -> str: | STRING |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 233 | def wait_established_flow_outcome( | STRING |
| LOW | tests/e2e/sdk_compat/framework/create_retry.py | 90 | def create_with_capacity_retry( | CODE |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 113 | def _check_backend_dependencies(backends: tuple[str, ...], errors: list[str]) -> None: | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 84 | def test_rw_and_ro_mounts_visible(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 98 | def test_rw_mount_accepts_writes(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 112 | def test_ro_mount_rejects_writes(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 127 | def test_disallowed_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 152 | def test_get_info_returns_volume_mounts(sdk_sandbox): | CODE |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 175 | def test_list_returns_volume_mounts(sdk_sandbox, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 61 | def _require_host_mount_backend(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 108 | def test_illegal_hostpath_rejected(case, host_path, reason, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 129 | def test_illegal_mountpath_rejected(case, mount_path, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 141 | def test_mixed_valid_and_invalid_entries_rejected(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 169 | def test_malformed_annotation_rejected(case, raw, sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 194 | def test_nonexistent_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 215 | def test_file_hostpath_rejected_at_create(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 275 | def test_exact_allowed_prefix_dir_mounts(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 289 | def test_empty_mount_list_is_noop(sdk_sandbox, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 302 | def test_rw_mount_shares_data_across_sandboxes(sdk_backend, sdk_e2e_config): | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 377 | def test_nested_ro_parent_rw_child_writable_when_child_listed_first( | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 535 | def test_symlink_escapes_allowed_prefix(sdk_backend, sdk_e2e_config): | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 73 | def test_is_capacity_error_ignores_other_errors(message: str) -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 77 | def test_is_capacity_error_matches_numeric_code_attribute() -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 82 | def test_is_capacity_error_ignores_unrelated_code() -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 86 | def test_is_capacity_error_matches_real_apierror_shape() -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 117 | def test_is_capacity_error_requires_code_word_boundary() -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 123 | def test_backoff_delay_grows_and_is_capped(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 132 | def test_backoff_delay_uncapped_when_max_non_positive(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 137 | def test_backoff_delay_stays_within_ceiling() -> None: | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 143 | def test_backoff_delay_uncapped_overflow_clamps_to_finite_ceiling( | CODE |
| LOW⚡ | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 153 | def test_backoff_delay_uncapped_grows_within_finite_ceiling() -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 59 | def test_is_capacity_error_matches_transient(message: str) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 103 | def test_is_capacity_error_matches_real_wire_message() -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 165 | def test_returns_on_first_success(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 179 | def test_retries_capacity_error_then_succeeds(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 201 | def test_non_capacity_error_raises_immediately(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 214 | def test_raises_last_capacity_error_when_exhausted(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 227 | def test_retries_zero_is_single_attempt(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 240 | def test_negative_retries_treated_as_zero(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 261 | def test_total_budget_stops_before_exceeding(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 279 | def test_total_budget_disabled_when_non_positive(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/cases/framework/test_reporting.py | 21 | def test_serial_run_uses_plain_events_file(tmp_path, monkeypatch): | CODE |
| LOW | tests/e2e/sdk_compat/cases/framework/test_reporting.py | 30 | def test_xdist_worker_gets_own_file(tmp_path, monkeypatch): | CODE |
| 409 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cubecow/examples/go-test/main.go | 380 | // Step 1: Create volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 383 | // Step 2: Get volume info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 386 | // Step 3: Get volume block info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 389 | // Step 4: Resize volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 392 | // Step 5: Create snapshot | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 395 | // Step 6: List snapshots | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 398 | // Step 7: Derive a writable volume from the snapshot (auto-activated). | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 401 | // Step 8: List volumes | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 404 | // Step 9: Get metrics | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 407 | // Step 10: Cleanup - delete clone, snapshot, then volume (unless -no-cleanup) | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 550 | // Step 1: build the base projection under the read lock and | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 577 | // Step 2: if the entry is an exported snapshot, refresh | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2944 | # Step 1: terraform init | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2977 | # Step 2: terraform apply (with retry logic) | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3461 | # Step 6: Replace with the CubeSandbox kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3675 | # Step 7: Reboot the CVM and verify the new kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3830 | # Step 8: Initialize all compute nodes (purchased sequentially in step 3) | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 210 | // Step 1: Create-restore from tpl-T sets BOTH bindings. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 216 | // Step 2: Commit A advances the runtime-snapshot binding only. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 222 | // Step 3: Commit B — same invariant. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 227 | // Step 4: Rollback to A: rollback restarts the VM, so it bumps BOTH. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 233 | // Step 5: Commit C after rollback — runtime-snapshot advances; the | COMMENT |
| LOW | docs/guide/dev-environment.md | 45 | ### Step 1: Prepare the image (one-off) | COMMENT |
| LOW | docs/guide/dev-environment.md | 57 | ### Step 2: Boot the VM | COMMENT |
| LOW | docs/guide/dev-environment.md | 68 | ### Step 3: Log in (in a new terminal) | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 29 | ## Step 1: Install | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 73 | ## Step 2: Create a Template | COMMENT |
| LOW | docs/guide/bare-metal-deploy.md | 102 | ## Step 3: Run Your First Agent Code | COMMENT |
| LOW | docs/guide/quickstart.md | 47 | ## Step 1: Provision a Cloud Server & Install the PVM Kernel | COMMENT |
| LOW | docs/guide/quickstart.md | 171 | ## Step 2: Install | COMMENT |
| LOW | docs/guide/quickstart.md | 199 | ## Step 3: Create a Template | COMMENT |
| LOW | docs/guide/quickstart.md | 232 | ## Step 4: Run Your First Agent Code | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 46 | ## Step 1: Prepare the Release Bundle | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 55 | ## Step 2: Configure Environment Variables | COMMENT |
| LOW | docs/guide/multi-node-deploy.md | 109 | ## Step 3: Install | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 43 | ## Step 0: Provision a Cloud Server | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 59 | ## Step 1: Install the PVM Host Kernel | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 159 | ## Step 2: Install Cube Sandbox with PVM Enabled | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 221 | ## Step 3: Verify the PVM Environment | COMMENT |
| LOW | docs/guide/pvm-deploy.md | 235 | ## Step 4: Create a Template and Get Started | COMMENT |
| LOW | docs/guide/self-build-deploy.md | 54 | ## Step 1: Build the Release Bundle | COMMENT |
| LOW | docs/guide/self-build-deploy.md | 125 | ## Step 2: Deploy to the Target Machine | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 28 | ### Step 1: Write a Dockerfile | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 45 | ### Step 2: Build the image | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 51 | ### Step 3: Verify that envd is healthy | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 66 | ### Step 4: Create the template | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 86 | ### Step 5: Wait for the template to become ready | COMMENT |
| LOW | docs/guide/tutorials/template-build-practice.md | 101 | ### Step 6: Verify the template | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 181 | ### Step 1: Write a Dockerfile | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 185 | ### Step 2: Build the image with a registry prefix | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 192 | ### Step 3: Verify that envd is healthy | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 196 | ### Step 4: Log in and push the image | COMMENT |
| LOW⚡ | docs/guide/tutorials/template-build-practice.md | 206 | ### Step 5: Create the template | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 137 | # Step 1: take a base snapshot in the v0 state | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 144 | # Step 2: spin up a new sandbox from the base snapshot | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 148 | # Step 3: write v1 and drop a checkpoint | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 154 | # Step 4: write v2 and confirm it landed | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 161 | # Step 5: roll back to the v1 checkpoint | COMMENT |
| LOW⚡ | …s/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md | 165 | # Step 6: verify state is restored to v1 (sandbox_id unchanged) | COMMENT |
| LOW | docs/blog/posts/2026-07-08-cubesandbox-arm-support.md | 94 | ### Step 1: Download and install | COMMENT |
| 89 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeS3lvol/test/run_all.sh | 397 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 125 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 571 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2645 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2760 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 2948 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3173 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3213 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3508 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3573 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_export_test.sh | 3590 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_activation_test.sh | 75 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 102 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 136 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 229 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 387 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 418 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_fs_test.sh | 274 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 174 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 385 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_dataplane_test.sh | 1012 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 136 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 177 | except Exception: | CODE |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 583 | except Exception: | CODE |
| LOW⚡ | CubeS3lvol/scripts/rcow_common.sh | 1035 | except Exception: | CODE |
| LOW | CubeS3lvol/scripts/rcow_common.sh | 850 | except Exception: | CODE |
| LOW | CubeS3lvol/scripts/rcow_common.sh | 1058 | except Exception as e: | CODE |
| LOW | CubeS3lvol/scripts/rcow_common.sh | 1101 | except Exception: | CODE |
| LOW | CubeS3lvol/scripts/rcow_purge.sh | 148 | except Exception: | CODE |
| LOW | CubeS3lvol/scripts/rcow_purge.sh | 227 | except Exception: | CODE |
| LOW | CubeS3lvol/scripts/rcow_purge.sh | 294 | except Exception as e: | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 267 | except Exception as exc: # noqa: BLE001 - diagnostics must not hide the failure | CODE |
| LOW | tests/e2e/sdk_compat/conftest.py | 544 | except Exception as exc: # noqa: BLE001 - keep remote sandbox, close local handles best-effort | CODE |
| LOW | tests/e2e/sdk_compat/framework/trace.py | 164 | except Exception as exc: | CODE |
| LOW | tests/e2e/sdk_compat/framework/platform_lifecycle.py | 44 | except Exception as exc: # noqa: BLE001 - probe should stay best-effort | CODE |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 79 | except Exception as exc: # noqa: BLE001 - the rejection is the assertion | CODE |
| LOW | tests/e2e/sdk_compat/framework/cleanup.py | 25 | except Exception as exc: # noqa: BLE001 - cleanup must continue | CODE |
| LOW | tests/e2e/sdk_compat/framework/cleanup.py | 35 | except Exception as exc: # noqa: BLE001 - fallback delete handles this | CODE |
| LOW⚡ | tests/e2e/sdk_compat/framework/cleanup.py | 48 | except Exception as exc: # noqa: BLE001 - teardown must be best-effort | CODE |
| LOW⚡ | tests/e2e/sdk_compat/framework/cleanup.py | 57 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW⚡ | tests/e2e/sdk_compat/framework/cleanup.py | 63 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | tests/e2e/sdk_compat/framework/cleanup.py | 75 | except Exception as api_exc: # noqa: BLE001 | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 88 | except Exception as exc: # noqa: BLE001 - cleanup must continue | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 106 | except Exception as exc: # noqa: BLE001 - probe until ready or timeout | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 163 | except Exception: | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 181 | except Exception as exc: | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 192 | except Exception as exc: | CODE |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 197 | except Exception as exc: | CODE |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 128 | except Exception as exc: | CODE |
| LOW | tests/e2e/sdk_compat/framework/create_retry.py | 138 | except Exception as exc: # noqa: BLE001 - decide per-exception whether to retry | CODE |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 42 | except Exception as exc: # noqa: BLE001 - preflight aggregates diagnostics | CODE |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 77 | except Exception as exc: # noqa: BLE001 - preflight should aggregate diagnostics | CODE |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 91 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 502 | except Exception as exc: # noqa: BLE001 - missing source => pass | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 517 | except Exception as exc: # noqa: BLE001 - missing source => pass | CODE |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 619 | except Exception as exc: # noqa: BLE001 - a rejected create is the secure outcome | CODE |
| LOW | …dk_compat/cases/network/test_template_network_merge.py | 93 | except Exception: | CODE |
| LOW⚡ | …dk_compat/cases/network/test_template_network_merge.py | 180 | except Exception as exc: # noqa: BLE001 - defer to cubesandbox test body | CODE |
| LOW⚡ | …dk_compat/cases/network/test_template_network_merge.py | 185 | except Exception: | CODE |
| LOW⚡ | …dk_compat/cases/network/test_template_network_merge.py | 193 | except Exception: | CODE |
| 168 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeS3lvol/test/tools/s3_bucket.py | 24 | CODE | |
| LOW | CubeS3lvol/scripts/rpc.py | 32 | CODE | |
| LOW | tests/e2e/sdk_compat/conftest.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/auth.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/trace.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/platform_lifecycle.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/config.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/models.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/host_mount.py | 14 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume_hints.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/assertions.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/cleanup.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/capabilities.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/lifecycle.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/exceptions.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/network_probe.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/parallel.py | 11 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/build_throttle.py | 27 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/create_retry.py | 37 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/reporting.py | 4 | CODE | |
| LOW | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 21 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 31 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/framework/test_create_retry.py | 10 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/framework/test_reporting.py | 12 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/framework/test_parallel.py | 10 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/auth/conftest.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/auth/test_api_key.py | 21 | CODE | |
| LOW | …dk_compat/cases/network/test_template_network_merge.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_dns_allow.py | 6 | CODE | |
| LOW | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_l7_egress.py | 6 | CODE | |
| LOW | …e2e/sdk_compat/cases/network/test_mask_request_host.py | 18 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/network/test_policy.py | 4 | CODE | |
| LOW | …_compat/cases/network/test_dns_concurrent_af_unspec.py | 26 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/network/test_l7_custom_port.py | 37 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/run_code/test_python.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/lifecycle/test_connect.py | 4 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_rollback_clone.py | 4 | CODE | |
| LOW | …dk_compat/cases/lifecycle/test_negative_and_timeout.py | 4 | CODE | |
| LOW | …/sdk_compat/cases/lifecycle/test_log_forward_cycles.py | 25 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_auto_lifecycle.py | 4 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/lifecycle/test_pause_resume.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/lifecycle/test_kill.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/lifecycle/test_create.py | 4 | CODE | |
| LOW | …/e2e/sdk_compat/cases/lifecycle/test_create_options.py | 4 | CODE | |
| LOW | …dk_compat/cases/lifecycle/test_pause_resume_network.py | 6 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/filesystem/test_extended.py | 4 | CODE | |
| LOW | …2e/sdk_compat/cases/filesystem/test_batch_and_watch.py | 4 | CODE | |
| LOW | …sts/e2e/sdk_compat/cases/filesystem/test_read_write.py | 4 | CODE | |
| LOW | …sts/e2e/sdk_compat/cases/concurrency/test_isolation.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/commands/test_run.py | 4 | CODE | |
| LOW | …s/e2e/sdk_compat/cases/commands/test_connect_stream.py | 17 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/volume/conftest.py | 4 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/volume/test_bind_unbind.py | 13 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/volume/test_read_only.py | 11 | CODE | |
| 96 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cubecow/examples/go-test/main.go | 380 | // Step 1: Create volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 383 | // Step 2: Get volume info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 386 | // Step 3: Get volume block info | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 389 | // Step 4: Resize volume | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 392 | // Step 5: Create snapshot | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 395 | // Step 6: List snapshots | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 398 | // Step 7: Derive a writable volume from the snapshot (auto-activated). | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 401 | // Step 8: List volumes | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 404 | // Step 9: Get metrics | COMMENT |
| LOW⚡ | cubecow/examples/go-test/main.go | 407 | // Step 10: Cleanup - delete clone, snapshot, then volume (unless -no-cleanup) | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 550 | // Step 1: build the base projection under the read lock and | COMMENT |
| LOW | cubecow/src/engine/s3.rs | 577 | // Step 2: if the entry is an exported snapshot, refresh | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2944 | # Step 1: terraform init | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 2977 | # Step 2: terraform apply (with retry logic) | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3461 | # Step 6: Replace with the CubeSandbox kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3675 | # Step 7: Reboot the CVM and verify the new kernel | COMMENT |
| LOW⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 3830 | # Step 8: Initialize all compute nodes (purchased sequentially in step 3) | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 210 | // Step 1: Create-restore from tpl-T sets BOTH bindings. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 216 | // Step 2: Commit A advances the runtime-snapshot binding only. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 222 | // Step 3: Commit B — same invariant. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 227 | // Step 4: Rollback to A: rollback restarts the VM, so it bumps BOTH. | COMMENT |
| LOW⚡ | …services/cubebox/snapshot_base_memory_fallback_test.go | 233 | // Step 5: Commit C after rollback — runtime-snapshot advances; the | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1093 | // Step 1: plain restart. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1109 | // Step 2: find latest healthy snapshot. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1122 | // Step 3: rollback to the healthy snapshot. | COMMENT |
| LOW | CubeOps/internal/service/agenthub.go | 1152 | // Step 4: restart OpenClaw again after rollback. | COMMENT |
| LOW⚡ | CubeMaster/pkg/templatecenter/image/native.go | 146 | // Step 1: Concurrently prefetch layers to disk to maximize network throughput. | COMMENT |
| LOW | CubeMaster/pkg/templatecenter/image/native.go | 245 | // Step 2: Sequentially apply and immediately delete layers as they finish downloading. | COMMENT |
| LOW | examples/openai-agents-example/simple_demo.py | 216 | # Step 1: Create sandbox and write a marker file | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 236 | # Step 3: Pause (stop + shutdown with pause_on_exit=True) | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 244 | # Step 4: Resume | COMMENT |
| LOW⚡ | examples/openai-agents-example/simple_demo.py | 251 | # Step 5: Verify marker file persists | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 18 | # Step 1: create a base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 25 | # Step 2: spin up a sandbox from the base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 29 | # Step 3: write v1 to both disk and tmpfs, take a checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 35 | # Step 4: write v2, verify it stuck on both | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 42 | # Step 5: rollback to the v1 checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/rollback_demo.py | 46 | # Step 6: verify both disk and tmpfs restored to v1 | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 17 | # Step 1: create a base snapshot at v0 | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 24 | # Step 2: spin up a sandbox from the base snapshot | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 28 | # Step 3: write v1, take a checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 34 | # Step 4: write v2, confirm it stuck | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 41 | # Step 5: rollback to the v1 checkpoint | COMMENT |
| LOW⚡ | examples/snapshot-rollback-clone/09_rollback.py | 45 | # Step 6: verify state is v1 | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 274 | # Step 1: create volumes/<volume_id>/ in the COS bucket | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 277 | # Step 2: return success; private_data carries the COS key prefix for Attach | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 292 | # Step 1: delete volumes/<volume_id>/ from COS (irreversible) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 321 | # Step 1: serialize concurrent attach for the same volume | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 325 | # Step 2: mount COS folder with cosfs (skip if already mounted) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 374 | # Step 2: find mount path (prefer path saved at attach time) | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 379 | # Step 3: last user gone — unmount FUSE (COS data stays until destroy) | COMMENT |
| LOW | examples/volume/cos/binary/cube-volume-cos.sh | 336 | # Step 3: return host_path so Cubelet can bind-mount into the sandbox | COMMENT |
| LOW | examples/volume/cos/binary/cube-volume-cos.sh | 362 | # Step 1: other sandboxes still mounted — leave cosfs running | COMMENT |
| LOW | hypervisor/vmm/src/soft_dirty.rs | 159 | // Step 1: allocate a page-aligned anonymous scratch region. The | COMMENT |
| LOW⚡ | hypervisor/vmm/src/soft_dirty.rs | 181 | // Step 2: write one byte. This is the **first** write to this page, | COMMENT |
| LOW⚡ | hypervisor/vmm/src/soft_dirty.rs | 190 | // Step 3: read the pagemap entry and check bit 55. | COMMENT |
| LOW | hypervisor/vmm/src/soft_dirty.rs | 206 | // Step 4: kernel really supports soft-dirty. Arm the tracker by | COMMENT |
| LOW⚡ | hypervisor/scripts/run_integration_tests_x86_64.sh | 242 | # Step 1: Priority 1 - Boot & Lifecycle (parallel) | COMMENT |
| LOW⚡ | hypervisor/scripts/run_integration_tests_x86_64.sh | 249 | # Step 2: Priority 2 - Core I/O Devices (parallel) | COMMENT |
| LOW⚡ | hypervisor/scripts/run_integration_tests_x86_64.sh | 258 | # Step 3: Priority 3 - Hotplug (parallel) | COMMENT |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/e2e/sdk_compat/framework/network_probe.py | 206 | f"test -f {ESTABLISHED_READY_PATH} && echo READY || echo WAIT", | STRING |
| HIGH | tests/e2e/sdk_compat/framework/network_probe.py | 242 | f"cat {ESTABLISHED_RESULT_PATH} 2>/dev/null || echo PENDING", | CODE |
| HIGH | …/sdk_compat/cases/host-mount/test_create_with_mount.py | 101 | f"echo cube > {_RW_MOUNT}/sdk-compat-rw.txt && cat {_RW_MOUNT}/sdk-compat-rw.txt", | CODE |
| HIGH | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 278 | "test -d /mnt/exact && echo mounted", | CODE |
| HIGH | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 326 | f"echo {payload} > {mount}/note.txt && sync", | CODE |
| HIGH | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 194 | "getent hosts dns.google >/dev/null && echo RESOLVED || echo UNRESOLVED", | CODE |
| HIGH | …sts/e2e/sdk_compat/cases/network/test_policy_update.py | 194 | "getent hosts dns.google >/dev/null && echo RESOLVED || echo UNRESOLVED", | CODE |
| HIGH | examples/network-policy/network_dynamic_update.py | 109 | f"&& echo REACHABLE || echo BLOCKED", | CODE |
| HIGH | examples/network-policy/network_dynamic_update.py | 162 | f"for i in $(seq 10); do grep -q . /tmp/hold.out && break; sleep 1; done; " | CODE |
| HIGH | examples/network-policy/network_dynamic_update.py | 172 | "for i in $(seq 15); do test $(wc -l </tmp/hold.out) -ge 2 && break; sleep 1; done; " | CODE |
| HIGH⚡ | examples/openai-agents-example/main.py | 381 | result = await session.exec("uname -a && cat /etc/os-release | head -3") | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 31 | "true && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 50 | "cwd": "cwd && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 66 | "--mount=cwd && touch host-sentinel", | CODE |
| HIGH | …ude-code-integration/tests/test_cubesandbox_rewrite.py | 279 | "true cubesandbox_exec.py && echo host-side", | CODE |
| HIGH | …les/claude-code-integration/tests/test_hook_install.py | 207 | stale_command = "/old/checkout/hooks/cubesandbox_rewrite.py || exit 2" | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 374 | f'cd -- {default_cwd} 2>/dev/null || cd -- "$HOME" || exit 1; ' | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 375 | f'else cd -- {default_cwd} 2>/dev/null || cd -- "$HOME" || exit 1; fi; ' | CODE |
| HIGH | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 386 | f"then pwd > {cwd_file_q} 2>/dev/null; fi; " | CODE |
| HIGH⚡ | examples/volume/cos/verify_volume.py | 445 | run_cmd(sb, "test -d %s && echo EXIST" % mp, "挂载点目录存在", tag) | CODE |
| HIGH⚡ | examples/volume/cos/verify_volume.py | 447 | run_cmd(sb, "df -hT %s 2>&1 || df -h %s" % (mp, mp), "df 挂载点文件系统/容量", tag) | CODE |
| HIGH | examples/volume/cos/volume_complex_concurrent_test.py | 325 | out = reader.commands.run(f"cat {path} 2>/dev/null || true") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/e2e/sdk_compat/framework/create_retry.py | 99 | Call ``create`` and retry it while the scheduler is out of capacity. Args: create: Zero-argument callable t | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 334 | POST /volumes — Create a new persistent volume. e2b-compatible by default: when ``driver`` is omitted (``None`` | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 380 | GET /volumes — List all volumes. The returned entries never carry a ``token`` (it is only surfaced on c | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 411 | GET /volumes/{volumeID} — Fetch a single volume, including its token. Args: volume_id: Volume ident | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 442 | GET /volumes/{volumeID} — Connect to an existing volume. e2b-compatible: fetches the volume via ``get_info`` (` | STRING |
| HIGH | sdk/python/cubesandbox/_volume.py | 475 | DELETE /volumes/{volumeID} — Permanently delete a volume. e2b-compatible: returns ``True`` on success, ``False` | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 150 | GET /templates — List all templates. Args: config: SDK config. Uses default (env-based) config if | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 181 | GET /templates/:templateID — Get a template and its build history. Args: template_id: Template iden | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 240 | POST /templates - Build (create) a new template from an image. Submits CubeAPI's create-from-image request and | STRING |
| HIGH | sdk/python/cubesandbox/_template.py | 462 | PUT /templates/:templateID/alias — Set, reassign, or clear the alias of an existing template. Args: | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 200 | POST /sandboxes - Create a new sandbox. Args: template: Template ID. Falls back to ``CUBE_TEMPLATE_ | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 309 | POST /sandboxes/:sandboxID/connect - Connect to an existing sandbox. Resumes the sandbox if it is currently pau | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 399 | POST /execute - Execute code inside the sandbox. Streams the ndjson response from the sandbox's envd process vi | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 622 | POST /sandboxes/:sandboxID/snapshots — Create a snapshot (1.1). The sandbox is temporarily paused during snapsh | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 711 | POST /sandboxes/:sandboxID/rollback — Roll back a sandbox to a snapshot (1.5). Reverts the sandbox's filesystem | STRING |
| HIGH | sdk/python/cubesandbox/sandbox.py | 773 | Clone this sandbox *n* times (1.6). Internally this executes three steps: 1. :meth:`create_snapshot` — | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/host-mount/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/route-aware-egress/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/pi-agent-integration/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/network-policy/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/grpc-ingress/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/code-sandbox-quickstart/env_utils.py | 0 | best-effort load of a nearby .env file without overriding real env vars. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | \ import hashlib data = "cube sandbox pause/resume demo" hash_val = hashlib.sha256(data.encode()).hexdigest()[:16] pi_ap | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | on_stdout may deliver multi-line blobs; normalize to individual lines. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-kill.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| HIGH | examples/code-sandbox-quickstart/auto-resume.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| HIGH | examples/code-sandbox-quickstart/pause.py | 0 | extract value from 'key = value' formatted output line. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 293 | # Report a measured operation with the harness overhead taken out. | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 1022 | # add_ns, the host rescan, udev -- belongs to the test harness rather than to the | COMMENT |
| MEDIUM | CubeS3lvol/test/dataplane/run_agent_template_test.sh | 200 | # a rescan; rescanning on every pass makes the wait robust on hosts where the | COMMENT |
| LOW | CubeS3lvol/scripts/rcow_common.sh | 306 | # Exported, not just set, because the target inherits them -- without that the | COMMENT |
| MEDIUM | cubecow/benches/reflink_ops.rs | 236 | // we name it explicitly so the recipe is robust to default | COMMENT |
| MEDIUM | deploy/pvm/pvm_setup.sh | 80 | # is more robust and is a no-op on RPM distributions. | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/validate.sh | 103 | # keep this robust across checkout layouts. Gate on errors so genuine bugs | COMMENT |
| MEDIUM⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 359 | # fall through to auto-detect / prompt so re-runs stay robust. | COMMENT |
| MEDIUM | …_compat/cases/network/test_dns_concurrent_af_unspec.py | 62 | # ``RESULT:<json>`` line so the harness can parse it deterministically. | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 465 | # the section body runs) makes the reap robust: reading $! only after the block | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 501 | # block the whole harness forever. No section backgrounds anything today, | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 618 | # Prove the harness can actually operate BEFORE asking the operator to | COMMENT |
| MEDIUM | tests/perf/cubebench.sh | 621 | # operator has already typed "yes" to wipe a cluster the harness never runs | COMMENT |
| MEDIUM | Cubelet/pkg/cubelet/versioninfo/hostfacts.go | 86 | // lifetime; re-collecting until a non-empty result lands makes it robust. | COMMENT |
| MEDIUM | agent/rustjail/src/mount.rs | 1396 | // the runtime, so checking the effective cap set is more robust than | COMMENT |
| MEDIUM | docs/package-lock.json | 3401 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | dev-env/internal/setup_selinux.sh | 53 | # most robust fix is to flip SELinux to permissive mode. We do it both | COMMENT |
| MEDIUM | CubeMaster/pkg/templatecenter/image/disk.go | 321 | // set explicitly to be robust); --numeric-owner avoids name lookups | COMMENT |
| MEDIUM⚡ | CubeMaster/pkg/templatecenter/image/native.go | 147 | // Temp directory is created in destDir's workspace to utilize the same fast disk. | COMMENT |
| LOW | examples/openai-agents-example/main.py | 18 | python main.py --sandbox-only # just create & destroy sandbox | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CubeEgress/scripts/cube-proxy-iptables-init.sh | 24 | # Usage: | COMMENT |
| LOW | CubeS3lvol/make_release.sh | 9 | # Usage: | COMMENT |
| LOW | CubeS3lvol/setup_dep.sh | 13 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/run_all.sh | 44 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_selfimport_test.sh | 47 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_pending_delete_test.sh | 45 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_guards_test.sh | 45 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_fs_test.sh | 98 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_snapdelete_test.sh | 54 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_decouple_queue_test.sh | 27 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_dataplane_test.sh | 55 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_control_test.sh | 41 | # Usage: | COMMENT |
| LOW | CubeS3lvol/test/dataplane/run_recovery_test.sh | 47 | # Usage: | COMMENT |
| LOW | CubeS3lvol/patches/apply.sh | 11 | # Usage: | COMMENT |
| LOW | CubeS3lvol/scripts/rcow_start.sh | 43 | # Usage: | COMMENT |
| LOW | deploy/one-click/build-guest-image.sh | 5 | # Usage: | COMMENT |
| LOW | deploy/one-click/build-agent-ext4.sh | 7 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/collect-logs.sh | 20 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/cube-check.sh | 18 | # Usage: | COMMENT |
| LOW | deploy/one-click/scripts/cube-diag/check-procs.sh | 17 | # Usage: | COMMENT |
| LOW | deploy/kubernetes/chart/scripts/cleanup-node-host.sh | 8 | # Usage: | COMMENT |
| LOW | tests/unittest/run_sdk_test.sh | 17 | # Usage: | COMMENT |
| LOW | tests/unittest/run.sh | 17 | # Usage: | COMMENT |
| LOW | tests/perf/cubebench.sh | 73 | # Usage: | COMMENT |
| LOW | dev-env/run_vm.sh | 18 | # Usage: | COMMENT |
| LOW | dev-env/prepare_image.sh | 19 | # Usage: | COMMENT |
| LOW | dev-env/cube-autostart.sh | 18 | # Usage: | COMMENT |
| LOW | dev-env/login.sh | 11 | # Usage: | COMMENT |
| LOW | dev-env/copy_logs.sh | 12 | # Usage: | COMMENT |
| LOW | CubeAPI/scripts/test-cube-api.sh | 4 | # Usage: | COMMENT |
| LOW | CubeMaster/scripts/redis_key_migrate.sh | 4 | # Usage: | COMMENT |
| LOW | examples/volume/s3/install-deps.sh | 17 | # Usage: | COMMENT |
| LOW | examples/volume/cos/verify_volume.py | 63 | # Usage: | COMMENT |
| LOW | examples/volume/cos/install-deps.sh | 12 | # Usage: | COMMENT |
| LOW⚡ | examples/volume/cos/binary/cube-volume-cos.sh | 110 | # Usage: | COMMENT |
| LOW | scripts/bump-image.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/new-migration.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/gh.sh | 7 | # Usage: | COMMENT |
| LOW | .github/workflows/publish-go-sdk.yml | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/sdk_compat/conftest.py | 97 | CODE | |
| LOW | tests/e2e/sdk_compat/conftest.py | 229 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/build_throttle.py | 186 | CODE | |
| LOW | tests/e2e/sdk_compat/framework/preflight.py | 50 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 377 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/host-mount/test_boundary.py | 535 | CODE | |
| LOW | …dk_compat/cases/network/test_template_network_merge.py | 127 | CODE | |
| LOW | …ts/e2e/sdk_compat/cases/network/test_l7_custom_port.py | 213 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/filesystem/test_extended.py | 29 | CODE | |
| LOW | tests/e2e/sdk_compat/cases/volume/test_read_only.py | 35 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 85 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 333 | CODE | |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 453 | CODE | |
| LOW | tests/e2e/resource_metrics/lifecycle_metrics.py | 232 | CODE | |
| LOW | CubeAPI/examples/benchmark.py | 611 | CODE | |
| LOW | sdk/python/cubesandbox/_pty.py | 464 | CODE | |
| LOW | sdk/python/cubesandbox/_stream.py | 15 | CODE | |
| LOW | sdk/python/cubesandbox/sandbox.py | 772 | CODE | |
| LOW | sdk/python/cubesandbox/_models.py | 231 | CODE | |
| LOW | sdk/python/cubesandbox/_commands.py | 209 | CODE | |
| LOW | sdk/python/cubesandbox/_commands.py | 235 | CODE | |
| LOW | examples/pi-agent-integration/_pi_common.py | 38 | CODE | |
| LOW | examples/pi-agent-integration/run_pi_warmup.py | 58 | CODE | |
| LOW | …raining/mini-swe-agent-patch/environments/extra/e2b.py | 195 | CODE | |
| LOW | …aining/mini-swe-agent-patch/run/benchmarks/swebench.py | 227 | CODE | |
| LOW | examples/mini-rl-training/scripts/run-concurrent.py | 669 | CODE | |
| LOW | examples/mini-rl-training/scripts/run-concurrent.py | 730 | CODE | |
| LOW | examples/openai-agents-example/main.py | 399 | CODE | |
| LOW | examples/openai-agents-example/main.py | 444 | CODE | |
| LOW | examples/e2b-dev-sidecar/dev_sidecar.py | 180 | CODE | |
| LOW | examples/e2b-dev-sidecar/dev_sidecar.py | 198 | CODE | |
| LOW | …ai-agents-code-interpreter/code_interpreter_demo_ci.py | 519 | CODE | |
| LOW | …ples/claude-code-integration/hooks/cubesandbox_exec.py | 434 | CODE | |
| LOW | examples/ivshmem/ivshmem_benchmark.py | 155 | CODE | |
| LOW | examples/volume/cos/volume_complex_concurrent_test.py | 126 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_guards_test.sh | 87 | # Create the lvstore directly, so the create path can be exercised without | COMMENT |
| MEDIUM | CubeS3lvol/scripts/rcow_common.sh | 795 | # Create the whole grid in one pass. Existing subsystems are left alone so that | COMMENT |
| MEDIUM | deploy/pvm/common.sh | 3 | # This file is sourced by build-pvm-host-kernel-pkg.sh and | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/main.tf | 537 | # Create the database (via the jumpserver) | COMMENT |
| MEDIUM | deploy/one-click/terraform/tencentcloud/lib-phases.sh | 21 | # This file is sourced by create.sh (and by the test). It must not run anything | COMMENT |
| MEDIUM⚡ | deploy/one-click/terraform/tencentcloud/create.sh | 5453 | # Create the MySQL instance (+ cube account/privilege + the application | COMMENT |
| MEDIUM | deploy/one-click/scripts/common/validation.sh | 5 | # This file is sourced by callers that already define die(). | COMMENT |
| MEDIUM | deploy/one-click/lib/guest-image.sh | 9 | # This file is a sourced library; do not set shell options here. | COMMENT |
| MEDIUM | deploy/one-click/lib/common.sh | 3 | # This file is a sourced library. Do not set shell options here: entrypoint | COMMENT |
| MEDIUM | sdk/python/cubesandbox/_volume.py | 235 | # Create a volume (name auto-generated when omitted) -> Volume instance | STRING |
| MEDIUM | scripts/new-migration.sh | 5 | # Create a new CubeMaster MySQL migration with a UTC timestamp version prefix. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/guide/integrations/langchain.md | 370 | + # export CUBE_API_KEY="<your-api-key>" # only for auth-enabled backends | CODE |
| HIGH | docs/zh/guide/integrations/langchain.md | 355 | + # export CUBE_API_KEY="<your-api-key>" # 仅用于启用了鉴权的后端 | CODE |
| HIGH | examples/mini-rl-training/README.md | 48 | E2B_API_KEY="<your-api-key>" | CODE |
| HIGH | examples/mini-rl-training/README_zh.md | 46 | E2B_API_KEY="<your-api-key>" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/sdk_compat/conftest.py | 622 | def _setup_log(message: str) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/framework/volume.py | 20 | __all__ = [ | CODE |
| LOW | tests/e2e/sdk_compat/adapters/__init__.py | 139 | __all__ = [ | CODE |
| LOW | tests/e2e/sdk_compat/adapters/e2b_adapter.py | 438 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/cubesandbox_adapter.py | 204 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/cubesandbox_adapter.py | 253 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/base.py | 91 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/base.py | 115 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/tracing_adapter.py | 207 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | tests/e2e/sdk_compat/adapters/tracing_adapter.py | 293 | def update_network(self, network: dict | None = None) -> None: | CODE |
| LOW | sdk/python/cubesandbox/_filesystem.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdk/python/cubesandbox/__init__.py | 14 | __all__ = [ | CODE |
| LOW | sdk/python/cubesandbox/_stream.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdk/python/cubesandbox/sandbox.py | 511 | def set_timeout(self, timeout: int) -> None: | CODE |
| LOW | sdk/python/cubesandbox/sandbox.py | 529 | def update_network(self, network: Dict[str, Any] | None = None) -> None: | CODE |
| LOW⚡ | examples/mini-rl-training/scripts/run-concurrent.py | 499 | def _update_preds(path: Path, instance_id: str, model_name: str, patch: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/one-click/install.sh | 915 | # Check if the user has explicitly opted to skip this check. | COMMENT |
| LOW | deploy/one-click/online-install.sh | 215 | # Check if the closest existing parent directory is writable by root (detects read-only mounts) | COMMENT |
| LOW | deploy/one-click/terraform/tencentcloud/create.sh | 2860 | # Set TENCENTCLOUD_COMPUTE_INSTANCE_TYPE to choose explicitly. | COMMENT |
| LOW | deploy/kubernetes/chart/values.yaml | 594 | # Set nameservers to an explicit list to override: that turns follow-node | COMMENT |
| LOW | agent/bootstrap.sh | 3 | # Check if the user is running this script as root | COMMENT |
| LOW | …visor/scripts/run_integration_tests_windows_aarch64.sh | 33 | # Check if the images are present | COMMENT |
| LOW | …rvisor/scripts/run_integration_tests_windows_x86_64.sh | 33 | # Check if the images are present | COMMENT |
| LOW | hypervisor/scripts/run_integration_tests_aarch64.sh | 220 | # Check if there is any error in the execution of `update_workloads`. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/locales/zh/command.json | 3 | "placeholder": "搜索或输入命令…", | CODE |
| LOW | web/src/locales/en/command.json | 3 | "placeholder": "Search or type a command…", | CODE |
| LOW | web/src/components/CommandPalette.tsx | 36 | placeholder={t('placeholder')} | CODE |
| LOW | web/src/i18n/index.ts | 35 | 'placeholder', | CODE |
| LOW | web/src/pages/Placeholder.tsx | 10 | type PlaceholderKey = ParseKeys<'placeholder'>; | CODE |
| LOW | web/src/pages/Placeholder.tsx | 21 | const { t } = useTranslation('placeholder'); | CODE |
| LOW | CubeAPI/src/services/sandboxes.rs | 1503 | "user@example.com", | CODE |
| LOW | CubeMaster/pkg/service/sandbox/util_test.go | 104 | "user@example.com", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CubeS3lvol/test/dataplane/run_export_test.sh | 3518 | # Expose all three, one RPC after another as an orchestration layer would. | COMMENT |
| MEDIUM | docs/guide/usecases/trpc-agent-go.md | 17 | [trpc-agent-go](https://github.com/trpc-group/trpc-agent-go) is Tencent's open-source Go framework for building producti | CODE |
| MEDIUM | docs/changelog/v0.4.0.md | 56 | - **Artifact management** (#506): A new job runner orchestrates the full pipeline (image export → rootfs artifact build | CODE |
| MEDIUM | docs/changelog/v0.3.0.md | 54 | - **Docker Compose container lifecycle** (#386): Container lifecycle management migrated to Docker Compose, simplifying | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | hypervisor/virtio-devices/src/vsock/csm/connection.rs | 57 | // receiving peer's behavior is undefined. In this implementation, we forcefully terminate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hypervisor/vmm/src/vm.rs | 1303 | // Don't forget to set the terminal in canonical mode | COMMENT |
| LOW | hypervisor/virtiofsd/src/passthrough/mod.rs | 1372 | // a new option here, don't forget to add it there, too, and handle it both in | COMMENT |
| LOW | hypervisor/src/lib.rs | 354 | // Don't forget to set the terminal in canonical mode | COMMENT |
| LOW | hypervisor/src/main.rs | 770 | // Don't forget to set the terminal in canonical mode | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cubelet/scripts/cubebox_appsnapshot.py | 106 | CODE | |
| LOW | sdk/python/cubesandbox/_template.py | 210 | CODE | |
| LOW | sdk/python/cubesandbox/sandbox.py | 184 | CODE | |
| LOW | sdk/python/cubesandbox/_models.py | 63 | CODE | |
| LOW | …aining/mini-swe-agent-patch/run/benchmarks/swebench.py | 227 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/public/mockServiceWorker.js | 124 | async function handleRequest(event, requestId, requestInterceptedAt) { | CODE |
| LOW | sdk/python/cubesandbox/_transport.py | 25 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |