Build your own AI SRE agents. The open source toolkit for the AI era.
This report summarizes scanner evidence for Tracer-Cloud/opensre, a Python project with 11,751 GitHub stars. SynthScan examined 650,920 lines of code across 3853 source files, recording 24746 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 43.5 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 15691 finding(s).
Are imports declared and package/API names verified? 5542 finding(s).
Are wrappers, guards, and repeated structures necessary? 18734 finding(s).
Which changes need focused human review? 24746 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 24746 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/registry.py | 46 | def register_external_tool_package(package: ModuleType) -> None: | CODE |
| LOW | tools/registry.py | 163 | def clear_tool_registry_cache() -> None: | CODE |
| LOW | tools/registry.py | 190 | def _integration_by_tool_name() -> dict[str, str]: | CODE |
| LOW | tools/registry.py | 271 | def resolve_tool_display_name(tool_name: str) -> str: | CODE |
| LOW | tools/registry.py | 290 | def resolve_tool_activity_labels(tool_name: str) -> tuple[str, str]: | CODE |
| LOW | tools/registry_discovery.py | 121 | def _qualify_tool_module_name(package: ModuleType, module_name: str) -> str: | CODE |
| LOW | tools/registry_discovery.py | 127 | def _iter_manifest_tool_module_names(module: ModuleType) -> tuple[str, ...]: | CODE |
| LOW⚡ | tools/registry_discovery.py | 163 | def _import_tool_module_or_none(package: ModuleType, module_name: str) -> ModuleType | None: | CODE |
| LOW⚡ | tools/registry_discovery.py | 180 | def iter_discovered_tool_modules(package: ModuleType) -> list[ModuleType]: | CODE |
| LOW | tools/registry_discovery.py | 196 | def _candidate_belongs_to_module(candidate: object, module_name: str) -> bool: | CODE |
| LOW | tools/registry_discovery.py | 204 | def _registered_tool_from_candidate(candidate: object) -> RegisteredTool | None: | CODE |
| LOW | tools/registry_discovery.py | 224 | def collect_registered_tools_from_module(module: ModuleType) -> list[RegisteredTool]: | CODE |
| LOW | tools/harness_adapters.py | 6 | def register_harness_adapters() -> None: | CODE |
| LOW | tools/registry_index.py | 421 | def clear_descriptor_index_cache() -> None: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 67 | def _runbook_sources_available(sources: dict[str, dict[str, Any]]) -> bool: | CODE |
| LOW | tools/system/work_items/reminders.py | 21 | def disable_existing_item_reminders(item_id: str) -> int: | CODE |
| LOW | tools/system/work_items/tool.py | 569 | def work_task_schedule_checkin( | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 64 | def process_has_open_codex_rollout(pid: int) -> bool: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 198 | def registered_and_discovered_agents( | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 238 | def classify_command_provider(command: str) -> FleetAgentProvider | None: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 331 | def _codex_duplicate_pids_to_drop(rows: Iterable[ProcessRow], codex_pids: set[int]) -> set[int]: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 358 | def _is_codex_wrapper_native_pair(parent: ProcessRow, child: ProcessRow) -> bool: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 394 | def _preferred_codex_pair_pid( | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 406 | def _discover_cursor_terminal_agents(cursor_projects_dir: Path) -> list[AgentRecord]: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 418 | def _record_from_cursor_terminal(path: Path) -> AgentRecord | None: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 480 | def _claude_code_cli_matches_cmdline(cmdline: list[str]) -> bool: | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 569 | def _matches_desktop_path_hints(cmdline: list[str], hints: tuple[str, ...]) -> bool: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/discovery.py | 584 | def _is_claude_desktop_artifact(cmdline: list[str]) -> bool: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/discovery.py | 588 | def _is_codex_desktop_artifact(cmdline: list[str]) -> bool: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/discovery.py | 592 | def _is_cursor_desktop_artifact(cmdline: list[str]) -> bool: | CODE |
| LOW | tools/system/fleet_monitoring/lifecycle.py | 46 | def _assert_target_pid_exists(pid: int) -> None: | CODE |
| LOW | tools/system/fleet_monitoring/probe.py | 89 | def process_has_open_codex_rollout(pid: int) -> bool: | CODE |
| LOW | tools/system/fleet_monitoring/pricing.py | 304 | def _local_family_alias_canonical(candidate: str) -> str | None: | CODE |
| LOW | tools/system/fleet_monitoring/pricing.py | 312 | def _local_family_fallback_canonical(candidate: str) -> str | None: | CODE |
| LOW | tools/system/fleet_monitoring/provider_ids.py | 45 | def provider_from_classified_name(name: str) -> FleetAgentProvider | None: | CODE |
| LOW | tools/system/local_repo_insights/tool.py | 226 | def analyze_local_repositories( | CODE |
| LOW | tools/interactive_shell/subprocess_presenter.py | 70 | def start_task_output_streams( | CODE |
| LOW | tools/interactive_shell/subprocess_presenter.py | 84 | def start_background_cli_task( | CODE |
| LOW | tools/interactive_shell/subprocess_presenter.py | 97 | def headless_subprocess_presenter_factory( | CODE |
| LOW | tools/interactive_shell/subprocess.py | 92 | def _process_group_leader_pid(proc: WatchedProcess) -> int | None: | CODE |
| LOW | tools/interactive_shell/subprocess.py | 215 | def subprocess_env_with_width( | CODE |
| LOW | tools/interactive_shell/subprocess.py | 272 | def watch_subprocess_until_exit( | CODE |
| LOW | tools/interactive_shell/subprocess.py | 363 | def start_task_output_streams( | CODE |
| LOW | tools/interactive_shell/subprocess.py | 376 | def start_background_cli_task( | CODE |
| LOW | tools/interactive_shell/subprocess.py | 388 | def require_subprocess_presenter(ctx: ActionToolScope) -> SubprocessPresenter: | CODE |
| LOW | tools/interactive_shell/cli.py | 111 | def _sys_executable_is_python() -> bool: | CODE |
| LOW | tools/interactive_shell/cli.py | 115 | def _current_opensre_entrypoint() -> str | None: | CODE |
| LOW | tools/interactive_shell/cli.py | 147 | def interactive_wizard_handoff_response_text(command_str: str) -> str: | CODE |
| LOW | tools/interactive_shell/cli.py | 162 | def _is_read_only_integrations(tokens: list[str]) -> bool: | CODE |
| LOW | tools/interactive_shell/cli.py | 182 | def opensre_confirmation_reason(tokens: list[str]) -> str: | CODE |
| LOW | tools/interactive_shell/cli.py | 190 | def build_opensre_execution_plan(tokens: list[str]) -> OpensreExecutionPlan: | CODE |
| LOW | tools/interactive_shell/cli.py | 334 | def _run_foreground_via_presenter( | CODE |
| LOW | tools/interactive_shell/cli.py | 371 | def _run_streaming_via_presenter( | CODE |
| LOW | tools/interactive_shell/cli.py | 398 | def run_opensre_cli_command_result( | CODE |
| LOW | tools/interactive_shell/shell/merge_guard.py | 77 | def pull_request_checkout_refusal(command: str, cwd: str | None = None) -> str | None: | CODE |
| LOW | tools/interactive_shell/shell/policy.py | 24 | def evaluate_shell_from_parsed(parsed: ParsedShellCommand) -> ExecutionPolicyResult: | CODE |
| LOW | tools/interactive_shell/shell/display.py | 32 | def format_shell_command_for_display(command: str) -> str: | CODE |
| LOW | tools/interactive_shell/shared/slash_catalog.py | 543 | def build_slash_command_specs( | CODE |
| LOW | tools/interactive_shell/shared/slash_catalog.py | 564 | def format_slash_catalog_text( | CODE |
| LOW | tools/interactive_shell/shared/slash_catalog.py | 588 | def slash_invoke_tool_description(specs: list[SlashCommandSpec] | None = None) -> str: | CODE |
| 15088 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | main.py | 52 | CODE | |
| LOW | tools/registry_skill_guidance.py | 8 | CODE | |
| LOW | tools/registry.py | 9 | CODE | |
| LOW | tools/registry_discovery.py | 10 | CODE | |
| LOW | tools/harness_adapters.py | 3 | CODE | |
| LOW | tools/registry_index.py | 14 | CODE | |
| LOW | tools/cross_vendor/__init__.py | 12 | CODE | |
| LOW | tools/cross_vendor/fix_sentry_issue/runner.py | 8 | CODE | |
| LOW | tools/cross_vendor/fix_sentry_issue/__init__.py | 29 | CODE | |
| LOW | tools/cross_vendor/fix_sentry_issue/context.py | 8 | CODE | |
| LOW | tools/cross_vendor/fix_sentry_issue/errors.py | 3 | CODE | |
| LOW | tools/cross_vendor/fix_sentry_issue/ship.py | 14 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/runner.py | 11 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/__init__.py | 18 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/__init__.py | 20 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/__init__.py | 20 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/errors.py | 3 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/tool.py | 7 | CODE | |
| LOW | tools/system/__init__.py | 12 | CODE | |
| LOW | tools/system/workspace_paths.py | 9 | CODE | |
| LOW | tools/system/agent_memory/results.py | 8 | CODE | |
| LOW | tools/system/agent_memory/__init__.py | 3 | CODE | |
| LOW | tools/system/agent_memory/__init__.py | 5 | CODE | |
| LOW | tools/system/agent_memory/__init__.py | 5 | CODE | |
| LOW | tools/system/agent_memory/__init__.py | 5 | CODE | |
| LOW | tools/system/agent_memory/_evidence.py | 3 | CODE | |
| LOW | tools/system/agent_memory/tool.py | 7 | CODE | |
| LOW | tools/system/agent_memory/validation.py | 3 | CODE | |
| LOW | tools/system/runbook_guidance_tool/__init__.py | 3 | CODE | |
| LOW | tools/system/runbook_guidance_tool/_evidence.py | 3 | CODE | |
| LOW | tools/system/runbook_guidance_tool/tool.py | 3 | CODE | |
| LOW | tools/system/structured_file/__init__.py | 3 | CODE | |
| LOW | tools/system/structured_file/__init__.py | 3 | CODE | |
| LOW | tools/system/structured_file/parse.py | 8 | CODE | |
| LOW | tools/system/structured_file/tool.py | 3 | CODE | |
| LOW | tools/system/structured_file/tool.py | 11 | CODE | |
| LOW | tools/system/sre_guidance_tool/__init__.py | 3 | CODE | |
| LOW | tools/system/sre_guidance_tool/__init__.py | 12 | CODE | |
| LOW | tools/system/sre_guidance_tool/_evidence.py | 3 | CODE | |
| LOW | tools/system/work_items/delivery.py | 3 | CODE | |
| LOW | tools/system/work_items/results.py | 3 | CODE | |
| LOW | tools/system/work_items/__init__.py | 3 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/__init__.py | 5 | CODE | |
| LOW | tools/system/work_items/reminders.py | 3 | CODE | |
| LOW | tools/system/work_items/_evidence.py | 3 | CODE | |
| LOW | tools/system/work_items/tool.py | 3 | CODE | |
| LOW | tools/system/work_items/validation.py | 3 | CODE | |
| LOW | tools/system/work_items/validation.py | 5 | CODE | |
| LOW | tools/system/workspace_git_scan/skips.py | 3 | CODE | |
| LOW | tools/system/workspace_git_scan/render.py | 3 | CODE | |
| LOW | tools/system/workspace_git_scan/__init__.py | 3 | CODE | |
| LOW | tools/system/workspace_git_scan/__init__.py | 4 | CODE | |
| LOW | tools/system/workspace_git_scan/__init__.py | 4 | CODE | |
| LOW | tools/system/workspace_git_scan/__init__.py | 4 | CODE | |
| LOW | tools/system/workspace_git_scan/__init__.py | 5 | CODE | |
| 5361 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | core/llm/factory.py | 101 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/llm/factory.py | 103 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/llm/client_builders.py | 33 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/llm/client_builders.py | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/llm/client_builders.py | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/llm/client_builders.py | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/agent_harness/session/integration_resolution.py | 44 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/agent_harness/session/integration_resolution.py | 46 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/agent_harness/session/integration_resolution.py | 137 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/agent_harness/session/integration_resolution.py | 139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/agent_harness/session/lifecycle.py | 95 | # ─── Core bootstrap ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/agent_harness/session/lifecycle.py | 122 | # ─── Lifecycle ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/domain/types/incident_anchors.py | 75 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | core/domain/types/incident_anchors.py | 77 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | config/repl_config.py | 53 | # ── Release notes ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 48 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 76 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 78 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 104 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 173 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 175 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 259 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_rocketchat_send_message_tool.py | 261 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 110 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 133 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 165 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 167 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 263 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_kafka_topic_health_tool.py | 265 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_kafka_topic_health_tool.py | 25 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_kafka_topic_health_tool.py | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_kafka_topic_health_tool.py | 91 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_kafka_topic_health_tool.py | 93 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/conftest.py | 14 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/conftest.py | 16 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/conftest.py | 248 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/conftest.py | 250 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 173 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 175 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 188 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_groundcover_tools.py | 190 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_groundcover_tools.py | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/tools/test_groundcover_tools.py | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 61 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 63 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 108 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 110 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 133 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 135 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 159 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 161 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 505 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| 934 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/registry_skill_guidance.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/registry.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/registry_discovery.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/registry_index.py | 425 | __all__ = [ | CODE |
| LOW | tools/cross_vendor/__init__.py | 16 | __all__ = ["TOOL_MODULES"] | CODE |
| LOW | tools/cross_vendor/resolve_merge_conflicts/runner.py | 935 | __all__ = ["SOURCE", "resolve_merge"] | CODE |
| LOW | tools/cross_vendor/resolve_merge_conflicts/__init__.py | 25 | __all__ = ["ResolveMergeConflictsTool", "resolve_merge_conflicts"] | CODE |
| LOW | tools/cross_vendor/resolve_merge_conflicts/tool.py | 381 | __all__ = ["ResolveMergeConflictsTool", "resolve_merge_conflicts"] | CODE |
| LOW | tools/system/__init__.py | 28 | __all__ = ["TOOL_MODULES"] | CODE |
| LOW | tools/system/workspace_paths.py | 46 | __all__ = ["WorkspacePathError", "resolve_within_workspace", "workspace_relative"] | CODE |
| LOW | tools/system/agent_memory/results.py | 95 | __all__ = [ | CODE |
| LOW | tools/system/agent_memory/__init__.py | 7 | __all__ = ["memory_forget", "memory_recall", "memory_remember"] | CODE |
| LOW | tools/system/agent_memory/tool.py | 248 | __all__ = ["memory_forget", "memory_recall", "memory_remember"] | CODE |
| LOW | tools/system/agent_memory/validation.py | 106 | __all__ = [ | CODE |
| LOW | tools/system/runbook_guidance_tool/__init__.py | 5 | __all__ = ["load_runbook_guidance"] | CODE |
| LOW | tools/system/runbook_guidance_tool/_evidence.py | 39 | __all__ = ["map_runbook_guidance"] | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 477 | __all__ = ["load_runbook_guidance"] | CODE |
| LOW | tools/system/structured_file/__init__.py | 5 | __all__ = ["TOOL_NAME", "read_structured_file"] | CODE |
| LOW | tools/system/structured_file/parse.py | 165 | __all__ = [ | CODE |
| LOW | tools/system/structured_file/tool.py | 113 | __all__ = ["FORMAT_BY_SUFFIX", "TOOL_NAME", "read_structured_file"] | CODE |
| LOW | tools/system/sre_guidance_tool/__init__.py | 62 | __all__ = ["get_sre_guidance", "get_topics_for_keywords"] | CODE |
| LOW | tools/system/work_items/delivery.py | 79 | __all__ = [ | CODE |
| LOW | tools/system/work_items/results.py | 102 | __all__ = [ | CODE |
| LOW | tools/system/work_items/__init__.py | 14 | __all__ = [ | CODE |
| LOW | tools/system/work_items/reminders.py | 82 | __all__ = [ | CODE |
| LOW | tools/system/work_items/tool.py | 628 | __all__ = [ | CODE |
| LOW | tools/system/work_items/validation.py | 81 | __all__ = [ | CODE |
| LOW | tools/system/workspace_git_scan/skips.py | 36 | __all__ = ["MACOS_PRIVACY_PROTECTED", "default_skip_paths", "skipped_note"] | CODE |
| LOW | tools/system/workspace_git_scan/render.py | 106 | __all__ = ["render_snapshot", "snapshot_renderable", "snapshot_text"] | CODE |
| LOW | tools/system/workspace_git_scan/__init__.py | 12 | __all__ = [ | CODE |
| LOW | tools/system/workspace_git_scan/git_files.py | 100 | __all__ = ["common_git_dir", "configured_origin"] | CODE |
| LOW | tools/system/workspace_git_scan/scan.py | 501 | __all__ = [ | CODE |
| LOW | tools/system/workspace_git_scan/prefetch.py | 52 | __all__ = ["ScanRequest", "claim_scan_prefetch", "reset_scan_prefetch", "start_scan_prefetch"] | CODE |
| LOW | tools/system/workspace_git_scan/tool.py | 288 | __all__ = ["prefetch_workspace_scan", "scan_local_git_workspace", "workspace_snapshot"] | CODE |
| LOW | tools/system/fleet_monitoring/tail.py | 448 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/config.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/config.py | 122 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/discovery.py | 627 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/registry.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/__init__.py | 25 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/providers.py | 41 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/bus.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/bus.py | 769 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/token_rate.py | 127 | __all__ = ["TOKEN_RATE_TRACKER", "TokenRateTracker"] | CODE |
| LOW | tools/system/fleet_monitoring/lifecycle.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/pricing.py | 65 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/pricing.py | 540 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/conflicts.py | 98 | __all__ = [ | CODE |
| LOW | tools/system/fleet_monitoring/sweep.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/sweep.py | 150 | __all__ = ["DEFAULT_LOCK_DIR", "SweepResult", "sweep"] | CODE |
| LOW | tools/system/fleet_monitoring/sampler.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/coordination.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/coordination.py | 151 | __all__ = ["BranchClaim", "BranchClaims"] | CODE |
| LOW | tools/system/fleet_monitoring/provider_ids.py | 64 | __all__ = ["FleetAgentProvider", "provider_from_classified_name"] | CODE |
| LOW | tools/system/fleet_monitoring/token_sources/codex.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/system/fleet_monitoring/token_sources/codex.py | 121 | __all__ = ["CodexRolloutSource"] | CODE |
| LOW | tools/system/fleet_monitoring/token_sources/registry.py | 36 | __all__ = ["TOKEN_SOURCE_REGISTRY", "get_token_source"] | CODE |
| LOW | tools/system/fleet_monitoring/token_sources/__init__.py | 199 | __all__ = [ | CODE |
| 1536 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/registry.py | 146 | except Exception as exc: | CODE |
| LOW | tools/registry.py | 250 | except Exception as exc: | CODE |
| LOW⚡ | tools/registry_discovery.py | 170 | except Exception as exc: | CODE |
| LOW | tools/cross_vendor/resolve_merge_conflicts/tool.py | 374 | except Exception: # noqa: BLE001 - not a repository or git missing: nothing to match | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 71 | except Exception as exc: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 105 | except Exception as exc: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 121 | except Exception as exc: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 168 | except Exception as exc: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 196 | except Exception as exc: | CODE |
| LOW | tools/system/runbook_guidance_tool/tool.py | 254 | except Exception as exc: | CODE |
| LOW | tools/system/fleet_monitoring/sampler.py | 85 | except Exception: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/sampler.py | 98 | except Exception: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/sampler.py | 102 | except Exception: | CODE |
| LOW⚡ | tools/system/fleet_monitoring/sampler.py | 111 | except Exception: | CODE |
| LOW | tools/system/local_repo_insights/analysis.py | 234 | except Exception as exc: # one unreadable checkout must not end the analysis | CODE |
| LOW | tools/interactive_shell/cli.py | 284 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | tools/interactive_shell/cli.py | 380 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | tools/interactive_shell/shell/runner.py | 104 | except Exception as exc: | CODE |
| LOW | tools/interactive_shell/skill_scripts/runner.py | 76 | except Exception as exc: | CODE |
| LOW | …teractive_shell/implementation/claude_code_executor.py | 272 | except Exception as exc: | CODE |
| LOW | …teractive_shell/implementation/claude_code_executor.py | 293 | except Exception as exc: | CODE |
| LOW | …teractive_shell/implementation/claude_code_executor.py | 342 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | …teractive_shell/implementation/claude_code_executor.py | 354 | except Exception: | CODE |
| MEDIUM | …teractive_shell/implementation/claude_code_executor.py | 304 | def _watch() -> None: | CODE |
| LOW | core/llm/image_description.py | 74 | except Exception as exc: # noqa: BLE001 - any provider/transport failure degrades to None | CODE |
| LOW | core/llm/providers/azure_openai.py | 129 | except Exception: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 346 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 405 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 534 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 635 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 793 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 911 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/llm_clients.py | 1025 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/agent_clients.py | 274 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/agent_clients.py | 473 | except Exception as err: | CODE |
| LOW | core/llm/transports/sdk/agent_clients.py | 803 | except Exception as err: | CODE |
| LOW | core/llm/shared/structured_output.py | 77 | except Exception as err: | CODE |
| LOW | core/llm/shared/llm_retry.py | 222 | except Exception as exc: | CODE |
| LOW | core/llm/shared/openai_chat_completions.py | 259 | except Exception as err: | CODE |
| LOW | core/llm/shared/openai_chat_completions.py | 314 | except Exception as err: | CODE |
| LOW | core/llm/shared/openai_chat_completions.py | 386 | except Exception as err: | CODE |
| LOW⚡ | core/agent_harness/closed_llm_verdict.py | 62 | except Exception: | CODE |
| LOW⚡ | core/agent_harness/closed_llm_verdict.py | 69 | except Exception: | CODE |
| LOW | core/agent_harness/accounting/turn_accounting.py | 67 | except Exception: | CODE |
| LOW⚡ | core/agent_harness/tools/action_tools.py | 65 | except Exception as exc: | CODE |
| LOW | core/agent_harness/session_goal/run_until.py | 136 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/run_until.py | 208 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/run_until.py | 261 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/validate.py | 105 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/validate.py | 112 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/judge.py | 204 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/judge.py | 277 | except Exception: | CODE |
| LOW⚡ | core/agent_harness/session_goal/judge.py | 321 | except Exception: | CODE |
| LOW⚡ | core/agent_harness/session_goal/judge.py | 328 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/evaluate.py | 182 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/evaluate.py | 242 | except Exception: | CODE |
| LOW | core/agent_harness/session_goal/evaluate.py | 584 | except Exception: | CODE |
| LOW | core/agent_harness/prompts/action/assemble.py | 68 | except Exception: # noqa: BLE001 - prompt assembly must not fail a turn | CODE |
| LOW | …gent_harness/prompts/skills/snapshot/active_catalog.py | 124 | except Exception: | CODE |
| LOW | …/b-scheduling-github-ci-repairs/scripts/_demo_state.py | 38 | except Exception: | CODE |
| 750 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/tools/test_rocketchat_send_message_tool.py | 0 | the flat/runtime ``sources`` shape passed to is_available(). | STRING |
| HIGH | tests/tools/test_slack_send_message_tool.py | 0 | the flat/runtime ``sources`` shape passed to is_available(). | STRING |
| HIGH | tests/tools/test_telegram_send_message_tool.py | 0 | the flat/runtime ``sources`` shape passed to is_available(). | STRING |
| HIGH | tests/tools/test_twilio_notify_tool.py | 0 | the flat/runtime ``sources`` shape passed to is_available(). | STRING |
| HIGH | tests/tools/test_rocketchat_send_message_tool.py | 0 | extract_params output is serialized into traces - it must hold no secrets. | STRING |
| HIGH | tests/tools/test_slack_send_message_tool.py | 0 | extract_params output is serialized into traces - it must hold no secrets. | STRING |
| HIGH | tests/tools/test_telegram_send_message_tool.py | 0 | extract_params output is serialized into traces - it must hold no secrets. | STRING |
| HIGH | tests/tools/test_railway_deployment_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_cloudtrail_events.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_incident_io_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_pagerduty_services_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_bitbucket_file_contents_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_bitbucket_search_code_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_openobserve_logs_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_opsgenie_alert_detail_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/tools/test_pagerduty_incident_detail_tool.py | 0 | regression: a title with bare \\r or \\r\\n line endings must not leave a literal carriage return in the report summary. | STRING |
| HIGH | tests/core/agent/test_prompt_envelope.py | 0 | these tests pin the text-history fallback (``opensre_structured_history=0``). | STRING |
| HIGH | tests/core/agent/orchestration/test_action_prompt.py | 0 | these tests pin the text-history fallback (``opensre_structured_history=0``). | STRING |
| HIGH | …s/core/agent/orchestration/test_conversation_window.py | 0 | these tests pin the text-history fallback (``opensre_structured_history=0``). | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/iam.py | 0 | get cluster details. args: name: cluster name. region: aws region. returns: cluster details or none if not found. | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/ecr.py | 0 | get cluster details. args: name: cluster name. region: aws region. returns: cluster details or none if not found. | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/ecs.py | 0 | get cluster details. args: name: cluster name. region: aws region. returns: cluster details or none if not found. | STRING |
| HIGH | tests/integrations/test_yc_compute.py | 0 | return an httpx.request stand-in that matches on a path fragment. | STRING |
| HIGH | tests/integrations/test_yc_db_tool.py | 0 | return an httpx.request stand-in that matches on a path fragment. | STRING |
| HIGH | tests/integrations/test_yc_network.py | 0 | return an httpx.request stand-in that matches on a path fragment. | STRING |
| HIGH | integrations/clickhouse/__init__.py | 0 | shared mysql integration helpers. provides configuration, connectivity validation, and read-only diagnostic queries for | STRING |
| HIGH | integrations/postgresql/__init__.py | 0 | shared mysql integration helpers. provides configuration, connectivity validation, and read-only diagnostic queries for | STRING |
| HIGH | integrations/mariadb/__init__.py | 0 | shared mysql integration helpers. provides configuration, connectivity validation, and read-only diagnostic queries for | STRING |
| HIGH | integrations/mongodb/__init__.py | 0 | shared mysql integration helpers. provides configuration, connectivity validation, and read-only diagnostic queries for | STRING |
| HIGH | integrations/mysql/__init__.py | 0 | shared mysql integration helpers. provides configuration, connectivity validation, and read-only diagnostic queries for | STRING |
| HIGH | integrations/clickhouse/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/postgresql/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/signoz/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/gitlab/client.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/mariadb/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/redis/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/rabbitmq/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/mongodb_atlas/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/dagster/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/mongodb/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/airflow/config.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/github/mcp.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/tempo/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/kafka/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/mysql/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/sentry_mcp/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/trello/config.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/bitbucket/config.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/jenkins/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/sentry/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/rds/__init__.py | 0 | build a normalized rds config object from env/store data. | STRING |
| HIGH | integrations/postgresql/setup.py | 0 | what azure sql needs before it is considered configured. ``encrypt`` used to be gathered via a cli select menu; every ot | STRING |
| HIGH | integrations/mariadb/setup.py | 0 | what azure sql needs before it is considered configured. ``encrypt`` used to be gathered via a cli select menu; every ot | STRING |
| HIGH | integrations/redis/setup.py | 0 | what azure sql needs before it is considered configured. ``encrypt`` used to be gathered via a cli select menu; every ot | STRING |
| HIGH | integrations/mongodb/setup.py | 0 | what azure sql needs before it is considered configured. ``encrypt`` used to be gathered via a cli select menu; every ot | STRING |
| HIGH | integrations/azure_sql/setup.py | 0 | what azure sql needs before it is considered configured. ``encrypt`` used to be gathered via a cli select menu; every ot | STRING |
| HIGH | integrations/signoz/availability.py | 0 | backend-aware availability check for datadog tools. the synthetic harnesses under ``tests/synthetic/`` inject a fixture | STRING |
| HIGH | integrations/groundcover/availability.py | 0 | backend-aware availability check for datadog tools. the synthetic harnesses under ``tests/synthetic/`` inject a fixture | STRING |
| HIGH | integrations/tempo/availability.py | 0 | backend-aware availability check for datadog tools. the synthetic harnesses under ``tests/synthetic/`` inject a fixture | STRING |
| HIGH | integrations/datadog/availability.py | 0 | backend-aware availability check for datadog tools. the synthetic harnesses under ``tests/synthetic/`` inject a fixture | STRING |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/registry.py | 71 | CODE | |
| LOW | tools/registry.py | 121 | CODE | |
| LOW | tools/registry_index.py | 266 | CODE | |
| LOW | tools/registry_index.py | 286 | CODE | |
| LOW | tools/system/workspace_git_scan/scan.py | 233 | CODE | |
| LOW | tools/system/workspace_git_scan/scan.py | 366 | CODE | |
| LOW | tools/system/workspace_git_scan/scan.py | 417 | CODE | |
| LOW | tools/system/fleet_monitoring/tail.py | 114 | CODE | |
| LOW | tools/system/fleet_monitoring/bus.py | 702 | CODE | |
| LOW | tools/system/fleet_monitoring/bus.py | 337 | CODE | |
| LOW | tools/system/fleet_monitoring/bus.py | 362 | CODE | |
| LOW | tools/system/fleet_monitoring/pricing.py | 394 | CODE | |
| LOW | tools/system/fleet_monitoring/sampler.py | 75 | CODE | |
| LOW | tools/system/fleet_monitoring/meters/codex.py | 70 | CODE | |
| LOW | tools/system/local_repo_insights/analysis.py | 185 | CODE | |
| LOW | tools/system/local_repo_insights/workflows.py | 78 | CODE | |
| LOW | tools/interactive_shell/cli.py | 190 | CODE | |
| LOW | tools/interactive_shell/shell/effects.py | 82 | CODE | |
| LOW | tools/interactive_shell/shell/merge_guard.py | 93 | CODE | |
| LOW | tools/interactive_shell/skill_scripts/runner.py | 29 | CODE | |
| LOW | tools/interactive_shell/actions/sentry_fix.py | 26 | CODE | |
| LOW | …nteractive_shell/actions/propose_scheduled_delivery.py | 104 | CODE | |
| LOW | core/context_budget.py | 157 | CODE | |
| LOW | core/context_budget.py | 226 | CODE | |
| LOW | core/context_budget.py | 370 | CODE | |
| LOW | core/context_budget.py | 393 | CODE | |
| LOW | core/messages/transcript.py | 8 | CODE | |
| LOW | core/llm/transports/sdk/llm_clients.py | 354 | CODE | |
| LOW | core/llm/transports/sdk/llm_clients.py | 555 | CODE | |
| LOW | core/llm/transports/sdk/llm_clients.py | 936 | CODE | |
| LOW | core/llm/transports/sdk/agent_clients.py | 933 | CODE | |
| LOW | core/llm/shared/structured_output.py | 64 | CODE | |
| LOW | core/llm/shared/openai_responses.py | 57 | CODE | |
| LOW | core/llm/shared/tool_schema_normalize.py | 48 | CODE | |
| LOW | core/llm/shared/tool_schema_normalize.py | 72 | CODE | |
| LOW | core/llm/shared/tool_schema_normalize.py | 117 | CODE | |
| LOW | core/llm/shared/tool_schema_normalize.py | 142 | CODE | |
| LOW | core/llm/shared/llm_retry.py | 127 | CODE | |
| LOW | core/llm/shared/openai_chat_completions.py | 247 | CODE | |
| LOW | core/llm/shared/openai_chat_completions.py | 296 | CODE | |
| LOW | core/llm/shared/openai_chat_completions.py | 362 | CODE | |
| LOW | core/agent_harness/session_goal/review_input.py | 48 | CODE | |
| LOW | core/agent_harness/prompts/skills/snapshot/sources.py | 70 | CODE | |
| LOW | core/agent_harness/turns/action_driver.py | 1031 | CODE | |
| LOW | core/agent_harness/turns/transcript_compaction.py | 378 | CODE | |
| LOW | core/agent_harness/turns/structured_history.py | 87 | CODE | |
| LOW | core/agent_harness/turns/structured_history.py | 250 | CODE | |
| LOW | core/agent_harness/task_plan/work_log.py | 70 | CODE | |
| LOW | core/agent_harness/session/pending_offer.py | 70 | CODE | |
| LOW | core/agent_harness/session/memory_digest.py | 151 | CODE | |
| LOW | core/agent_harness/session/memory_digest.py | 203 | CODE | |
| LOW | core/agent_harness/session/pending_choice.py | 222 | CODE | |
| LOW | core/agent_harness/session/persistence/jsonl_store.py | 656 | CODE | |
| LOW | core/agent_harness/session/persistence/jsonl_store.py | 807 | CODE | |
| LOW | core/agent_harness/session/persistence/paths.py | 30 | CODE | |
| LOW | core/agent_harness/session/persistence/jsonl_repo.py | 246 | CODE | |
| LOW | core/agent_harness/session/persistence/jsonl_repo.py | 365 | CODE | |
| LOW | core/agent_harness/session/persistence/jsonl_repo.py | 394 | CODE | |
| LOW | core/agent/react_loop.py | 271 | CODE | |
| LOW | core/tool_framework/skill_guidance.py | 180 | CODE | |
| 288 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/system/fleet_monitoring/tail.py | 109 | raise AttachUnsupportedError("stdout is /dev/null; nothing to tail") | CODE |
| HIGH | tools/system/fleet_monitoring/tail.py | 183 | raise AttachUnsupportedError("stdout is /dev/null; nothing to tail") | CODE |
| HIGH | tests/tools/test_github_actions_tool.py | 75 | "conclusion": null, | CODE |
| HIGH⚡ | tests/tools/interactive_shell/test_merge_guard.py | 48 | chained = git_refusal_during_merge("git status && git checkout main", str(work)) | CODE |
| HIGH⚡ | tests/tools/interactive_shell/test_merge_guard.py | 98 | "cd repo && gh pr checkout 12", | CODE |
| HIGH | tests/tools/interactive_shell/shell/test_risk.py | 39 | ("rm data.json && echo done", CommandRisk.MEDIUM), | CODE |
| HIGH | tests/github_ci/test_release_safety.py | 51 | == "${{ github.event.workflow_run.head_sha || github.sha }}" | CODE |
| HIGH | tests/github_ci/test_pr_pipeline_slo.py | 100 | assert "steps.shard.outputs.pytest_paths || matrix.pytest_paths" in run_step["run"] | CODE |
| HIGH⚡ | tests/core/agent_harness/test_session_bindable_ports.py | 57 | assert isinstance(null, SessionBindable) | CODE |
| HIGH⚡ | tests/core/agent_harness/test_session_bindable_ports.py | 58 | assert isinstance(null, ConsoleBindable) | CODE |
| HIGH⚡ | tests/scheduler/test_run_activity.py | 252 | ("shell_run", {"command": "cd /tmp/r && git -C r push -u origin ci-fix/ci"}, True), | CODE |
| HIGH⚡ | tests/scheduler/test_run_activity.py | 254 | ("shell_run", {"command": "bash -lc 'cd /tmp/r && git push origin main'"}, True), | CODE |
| HIGH⚡ | tests/scheduler/test_run_activity.py | 261 | ("shell_run", {"command": "command -v gh && gh pr view 42"}, False), | CODE |
| HIGH⚡ | tests/cli/test_install_sh_path.py | 166 | assert '"$binary_path" --record-install >/dev/null 2>&1 || true' in source | STRING |
| HIGH | tests/cli/test_install_matrix.py | 197 | elif [ "$mode" -gt 0 ] 2>/dev/null; then | CODE |
| HIGH⚡ | tests/cli/wizard/test_flow.py | 179 | "Install it first: sudo apt update && sudo apt install -y gnome-keyring dbus-user-session", | CODE |
| HIGH⚡ | tests/cli/wizard/test_flow.py | 189 | assert "Install it first: sudo apt update && sudo apt install -y gnome-keyring" in output | CODE |
| HIGH⚡ | tests/integrations/test_azure_sql.py | 264 | # A stored integration persisting {"port": null} must not crash | COMMENT |
| HIGH⚡ | tests/integrations/test_azure_sql.py | 281 | # A stored integration persisting {"server": null} must not yield the | COMMENT |
| HIGH⚡ | tests/integrations/test_yandex_cloud_catalog.py | 85 | """``integrations setup`` writes unset fields as null, not as absent. | STRING |
| HIGH | tests/integrations/coding_agent/test_claude_stream.py | 54 | "git status --short && grep -n marker file.py", | CODE |
| HIGH⚡ | tests/fleet_monitoring/token_sources/test_registry.py | 60 | # must have an explicit registry entry (real or null). Without | COMMENT |
| HIGH⚡ | tests/fleet_monitoring/meters/test_codex.py | 60 | '{"type":"token_count","info":null,"rate_limits":{"plan_type":"plus"}}}' | CODE |
| HIGH⚡ | tests/interactive_shell/runtime/test_repl_presenter.py | 136 | styled = _styled_spans('echo "a && b"') | CODE |
| HIGH⚡ | tests/interactive_shell/runtime/test_repl_presenter.py | 157 | command = 'echo "a && b" && echo done' | CODE |
| HIGH⚡ | tests/interactive_shell/runtime/test_repl_presenter.py | 172 | styled = _styled_spans("echo 'a && b --force'") | CODE |
| HIGH | …ts/interactive_shell/runtime/test_subprocess_runner.py | 1460 | text = _highlight_command("sleep 8 && echo done") | CODE |
| HIGH | infrastructure/filestorage/providers/vercel.py | 227 | An empty list is valid (nothing under the prefix). Missing, null, non-list, | STRING |
| HIGH | …/deployment/ec2/telegram_gateway/build_server_image.py | 111 | "id opensre &>/dev/null || useradd --system --create-home " | CODE |
| HIGH | …/deployment/ec2/telegram_gateway/build_server_image.py | 123 | "mkdir -p /etc/opensre && chmod 750 /etc/opensre && chown root:opensre /etc/opensre", | CODE |
| HIGH | …/deployment/ec2/telegram_gateway/build_server_image.py | 130 | "systemctl daemon-reload && systemctl enable opensre-gateway", | CODE |
| HIGH | …structure/deployment/ec2/telegram_gateway/provision.py | 108 | f"journalctl -u {service} -n {GATEWAY_LOG_TAIL_LINES} --no-pager 2>/dev/null || true", | CODE |
| HIGH | …ployment/ec2/telegram_gateway/install_on_new_server.py | 193 | + "--home-dir /var/lib/opensre-gateway --shell /usr/sbin/nologin opensre || true" | STRING |
| HIGH | …ployment/ec2/telegram_gateway/install_on_new_server.py | 199 | "mkdir -p /etc/opensre && chmod 750 /etc/opensre && chown root:opensre /etc/opensre", | STRING |
| HIGH | …ployment/ec2/telegram_gateway/install_on_new_server.py | 216 | "systemctl daemon-reload && systemctl enable opensre-gateway", | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/interactive_shell/shell/execution.py | 97 | except (OSError, ValueError): | CODE |
| HIGH | tools/interactive_shell/actions/slash.py | 183 | except ValueError: | CODE |
| HIGH | core/llm_invoke_errors.py | 52 | except ImportError: | CODE |
| HIGH | core/llm_invoke_errors.py | 60 | except ImportError: | CODE |
| HIGH | core/llm/shared/structured_output.py | 128 | except json.JSONDecodeError: | CODE |
| HIGH | core/llm/shared/llm_retry.py | 139 | except (ValueError, TypeError): | CODE |
| HIGH | core/agent_harness/turns/gather_observation.py | 63 | except json.JSONDecodeError: | CODE |
| HIGH | core/agent_harness/session/integration_resolution.py | 189 | except Exception: | CODE |
| HIGH | config/runtime_metadata/probes.py | 78 | except OSError: | CODE |
| HIGH | config/runtime_metadata/probes.py | 112 | except OSError: | CODE |
| HIGH | tests/interactive_shell/test_terminal_runtime.py | 1289 | except asyncio.CancelledError: | CODE |
| HIGH | tests/interactive_shell/test_terminal_runtime.py | 1329 | except asyncio.CancelledError: | CODE |
| HIGH | tests/interactive_shell/shell/test_execution_windows.py | 316 | except psutil.NoSuchProcess: | CODE |
| HIGH | integrations/llm_cli/codex.py | 78 | except (OSError, subprocess.TimeoutExpired): | CODE |
| HIGH | integrations/llm_cli/agent_exec.py | 204 | except (OSError, ValueError): | CODE |
| HIGH | integrations/posthog_mcp/metric_drafts.py | 93 | except json.JSONDecodeError: | CODE |
| HIGH | integrations/yandex_cloud/rest_client.py | 402 | except ValueError: | CODE |
| HIGH | surfaces/shared/terminal/output/environment.py | 35 | except BrokenPipeError: | CODE |
| HIGH | surfaces/shared/terminal/components/cpr_stdin.py | 42 | except OSError: | CODE |
| HIGH | surfaces/cli/commands/gateway.py | 122 | except (KeyboardInterrupt, OSError): | CODE |
| HIGH | …ces/interactive_shell/command_registry/agents/trace.py | 113 | except KeyboardInterrupt: | CODE |
| HIGH | infrastructure/filestorage/providers/azure.py | 180 | except (ValueError, binascii.Error): | CODE |
| HIGH | …structure/delivery/notifications/delivery_transport.py | 121 | except Exception: | CODE |
| HIGH | …structure/delivery/notifications/delivery_transport.py | 189 | except Exception: | CODE |
| HIGH | gateway/core/process/liveness.py | 21 | except PermissionError: | CODE |
| HIGH | gateway/tests/runtime/test_active_turns.py | 42 | except RuntimeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/tools/test_s3_get_object_tool.py | 38 | fake_data = { | CODE |
| LOW⚡ | tests/tools/test_s3_get_object_tool.py | 47 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW⚡ | tests/tools/test_lambda_errors_tool.py | 31 | fake_data = { | CODE |
| LOW⚡ | tests/tools/test_lambda_errors_tool.py | 38 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW | tests/tools/test_description_contract.py | 36 | r"^(TODO|TBD|FIXME|description here|placeholder|lorem ipsum)\b", | CODE |
| LOW⚡ | tests/tools/test_google_docs_create_report_tool.py | 85 | share_with=["user@example.com"], | CODE |
| LOW⚡ | tests/tools/test_google_docs_create_report_tool.py | 89 | mock_client.share_document.assert_called_once_with("doc-1", "user@example.com", role="writer") | CODE |
| LOW⚡ | tests/tools/test_agent_memory.py | 173 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | tests/tools/test_agent_memory.py | 178 | content=f"auth_token: {fake_token}", | CODE |
| LOW⚡ | tests/tools/test_lambda_invocation_logs_tool.py | 36 | fake_data = { | CODE |
| LOW⚡ | tests/tools/test_lambda_invocation_logs_tool.py | 43 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW⚡ | tests/tools/test_lambda_invocation_logs_tool.py | 61 | fake_data = { | CODE |
| LOW⚡ | tests/tools/test_lambda_invocation_logs_tool.py | 71 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW | tests/tools/test_tracer_failed_run_tool.py | 47 | mock_run.user_email = "user@example.com" | CODE |
| LOW⚡ | tests/tools/test_lambda_config_tool.py | 36 | fake_data = { | CODE |
| LOW | tests/tools/test_lambda_config_tool.py | 48 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW⚡ | tests/tools/test_jira_search_issues_tool.py | 25 | "email": "user@example.com", | CODE |
| LOW⚡ | tests/tools/test_jira_search_issues_tool.py | 32 | assert params["email"] == "user@example.com" | CODE |
| LOW⚡ | tests/tools/test_s3_list_tool.py | 37 | fake_data = { | CODE |
| LOW⚡ | tests/tools/test_s3_list_tool.py | 44 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW⚡ | tests/tools/test_s3_list_tool.py | 53 | fake_data = {"count": 0, "objects": [], "is_truncated": False} | CODE |
| LOW⚡ | tests/tools/test_s3_list_tool.py | 56 | return_value={"success": True, "data": fake_data}, | CODE |
| LOW | tests/tools/test_bitbucket_commits_tool.py | 101 | "author": "Jane Doe", | CODE |
| LOW⚡ | tests/core/agent_harness/session/test_memory_digest.py | 82 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | tests/core/agent_harness/session/test_memory_digest.py | 83 | _tool(log, "shell_run", {"command": "env"}, ("x" * 1_480) + f" GH_TOKEN={fake_token}") | CODE |
| LOW⚡ | …ore/agent_harness/session/test_memory_consolidation.py | 176 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | …ore/agent_harness/session/test_memory_consolidation.py | 181 | f"Deploys authenticate with {fake_token} from the vault.\n", | CODE |
| LOW⚡ | …ore/agent_harness/session/test_memory_consolidation.py | 191 | assert fake_token not in prompt | CODE |
| LOW⚡ | …s/core/agent_harness/session/test_memory_extraction.py | 313 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | …s/core/agent_harness/session/test_memory_extraction.py | 317 | _item("secret-token", memory_type="preference", content=f"auth_token: {fake_token}") | CODE |
| LOW⚡ | …s/core/agent_harness/session/test_memory_extraction.py | 391 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | …s/core/agent_harness/session/test_memory_extraction.py | 393 | [("user", f"auth_token: {fake_token}"), ("assistant", "I will not store that")] | CODE |
| LOW⚡ | …s/core/agent_harness/session/test_memory_extraction.py | 398 | assert fake_token not in prompt | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 266 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 274 | evidence=f"echo {fake_token}", | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 318 | fake_key = "sk-proj-" + ("a" * 32) | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 321 | f"OPENAI_API_KEY: {fake_key}", | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 335 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 341 | body=f"auth_token: {fake_token}", | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 348 | fake_token = "ghp_" + ("a" * 36) | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 350 | f"deploy used auth_token: {fake_token} and cluster eks-prod-1" | CODE |
| LOW⚡ | tests/core/domain/memory/test_memory_store.py | 352 | assert fake_token not in redacted | CODE |
| LOW | tests/integrations/test_jira_client.py | 15 | email="user@example.com", | CODE |
| LOW⚡ | tests/integrations/test_jira_client.py | 33 | email="user@example.com", | CODE |
| LOW | tests/integrations/test_verification_registry.py | 343 | out = verifier("local store", {"placeholder": True}) | CODE |
| LOW | …tegrations/test_catalog_silent_fallback_elimination.py | 159 | {"endpoint": "https://x", "api_key": "k", "bot_token": "fake-token"}, | CODE |
| LOW | tests/integrations/test_jira_search_and_factory.py | 19 | email="user@example.com", | CODE |
| LOW⚡ | tests/integrations/test_jira_search_and_factory.py | 105 | email="user@example.com", | CODE |
| LOW⚡ | tests/integrations/test_jira_search_and_factory.py | 114 | assert make_jira_client("", "user@example.com", "token") is None | CODE |
| LOW⚡ | tests/integrations/test_jira_search_and_factory.py | 122 | assert make_jira_client("https://x.atlassian.net", "user@example.com", "") is None | CODE |
| LOW⚡ | tests/integrations/test_jira_search_and_factory.py | 143 | result = make_jira_client("https://myteam.atlassian.net", "user@example.com", "token") | CODE |
| LOW | tests/integrations/test_jira_search_and_factory.py | 160 | JiraConfig(email="user@example.com", api_token=_SECRET_API_TOKEN) # type: ignore[call-arg] | CODE |
| LOW | tests/integrations/test_jira_search_and_factory.py | 176 | "https://myteam.atlassian.net", "user@example.com", _SECRET_API_TOKEN | CODE |
| LOW⚡ | tests/integrations/tracer/test_tracer_pipelines.py | 204 | user_email="user@example.com", | CODE |
| LOW | tests/integrations/tracer/test_tracer_pipelines.py | 182 | "user_email": "user@example.com", | CODE |
| LOW | tests/integrations/tracer/test_tracer_pipelines.py | 315 | "email": "user@example.com", | CODE |
| LOW | tests/integrations/tracer/test_tracer_pipelines.py | 338 | assert result.user_email == "user@example.com" | CODE |
| LOW⚡ | tests/integrations/llm_cli/test_claude_code_adapter.py | 147 | m.stdout = '{"loggedIn": true, "email": "user@example.com"}\n' | CODE |
| LOW⚡ | tests/integrations/llm_cli/test_claude_code_adapter.py | 153 | assert "user@example.com" in detail | CODE |
| LOW⚡ | tests/integrations/llm_cli/test_claude_code_adapter.py | 227 | '"apiKeySource": "ANTHROPIC_API_KEY", "email": "user@example.com"}\n' | CODE |
| 26 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pytest.ini | 11 | # The harness-providers plugin wires the tool/integration ports for every test | COMMENT |
| MEDIUM | core/agent_harness/harness.py | 85 | # a cross-process lease) without asking the harness to restore that ID. | COMMENT |
| MEDIUM | core/tool_framework/tags.py | 10 | # prose, not raw. Declarative only: no harness route branches on it. | COMMENT |
| MEDIUM⚡ | tests/tools/test_cloudtrail_events.py | 123 | # The synthetic harness injects the fixture backend as "ec2_backend" on the | COMMENT |
| MEDIUM⚡ | tests/tools/test_harness_api_border.py | 22 | #: Internal harness modules the tool tier still imports directly. Empty: every | COMMENT |
| MEDIUM⚡ | tests/tools/test_harness_api_border.py | 23 | #: harness name the tool tier uses comes through the API. | COMMENT |
| MEDIUM | tests/core/agent_harness/test_host_capability_ports.py | 26 | #: The one module allowed to declare the factory aliases (the harness API). | COMMENT |
| MEDIUM | tests/core/agent_harness/test_host_capability_ports.py | 85 | # Arrange — the gate belongs to the harness API; hosts implement it. | COMMENT |
| MEDIUM | tests/core/agent_harness/test_host_capability_ports.py | 139 | # Arrange — the aliases are part of the harness API; a second copy drifts. | COMMENT |
| MEDIUM | tests/core/agent/orchestration/test_action_prompt.py | 120 | # appended to the composed action prompt via the harness-ports fragment | COMMENT |
| MEDIUM | tests/core/agent/orchestration/test_action_prompt.py | 222 | # Fat body and template stay out of the thin harness index. | COMMENT |
| MEDIUM | tests/bootstrap/test_process.py | 187 | # Arrange: without adapter registration the harness starts but no tool | COMMENT |
| MEDIUM | tests/utils/conftest.py | 38 | # Default stream URLs for optional remote investigation harness tests. | COMMENT |
| MEDIUM | tests/shared/harness_api.py | 37 | #: Every module through which the harness may be imported. Listed by exact name | COMMENT |
| MEDIUM | tests/shared/harness_api.py | 50 | #: The harness tier: one package, a fixed set of API modules. | COMMENT |
| MEDIUM | tests/shared/terminal/test_output.py | 760 | # Verify _safe_print itself is robust; _finish delegates to it. | COMMENT |
| MEDIUM⚡ | tests/interactive_shell/test_harness_api_border.py | 19 | #: Internal harness modules surfaces/ still imports directly. Empty: every | COMMENT |
| MEDIUM⚡ | tests/interactive_shell/test_harness_api_border.py | 20 | #: harness name surfaces/ uses comes through the API. | COMMENT |
| MEDIUM | surfaces/interactive_shell/ui/streaming/loop.py | 218 | # harness, the non-TTY path above) never expose the attribute | COMMENT |
| MEDIUM | surfaces/interactive_shell/ui/input_prompt/rendering.py | 63 | # actually issued one (the harness sets this flag). Do not infer it from the | COMMENT |
| MEDIUM | surfaces/interactive_shell/runtime/turn_host.py | 385 | # module) does not pull the harness/turn-execution stack | COMMENT |
| MEDIUM | …ces/interactive_shell/runtime/startup/initial_input.py | 19 | # ``run_initial_input`` at top) does not pull the harness/turn-execution | COMMENT |
| MEDIUM | gateway/tests/test_transport_contract.py | 56 | # on the harness patching the attribute on — declared directly, or inherited | COMMENT |
| MEDIUM⚡ | gateway/tests/test_harness_api_border.py | 23 | #: Internal harness modules gateway/ still imports directly. Empty: every harness | COMMENT |
| MEDIUM | gateway/tests/test_harness_behaviour_border.py | 52 | #: Modules outside the host layer that still call harness behaviour, and why. | COMMENT |
| MEDIUM | gateway/tests/test_harness_behaviour_border.py | 56 | # Session lifecycle is the harness's; the resolver adds the gateway's | COMMENT |
| MEDIUM | gateway/tests/test_harness_behaviour_border.py | 105 | # Assert: no module outside the host layer calls harness behaviour… | COMMENT |
| MEDIUM | gateway/tests/test_harness_behaviour_border.py | 124 | # Arrange: every transport module that touches the harness at all. | COMMENT |
| MEDIUM | gateway/tests/test_harness_behaviour_border.py | 136 | # Assert: transports import harness names, and only contracts. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/cross_vendor/resolve_merge_conflicts/runner.py | 778 | CODE | |
| LOW | tools/cross_vendor/resolve_merge_conflicts/tool.py | 316 | CODE | |
| LOW | tools/system/work_items/tool.py | 137 | CODE | |
| LOW | tools/system/work_items/tool.py | 350 | CODE | |
| LOW | tools/system/workspace_git_scan/scan.py | 187 | CODE | |
| LOW | tools/interactive_shell/shell/runner.py | 24 | CODE | |
| LOW | …nteractive_shell/actions/propose_scheduled_delivery.py | 264 | CODE | |
| LOW | core/llm/transports/sdk/llm_clients.py | 689 | CODE | |
| LOW | core/llm/transports/litellm/clients.py | 55 | CODE | |
| LOW | core/llm/transports/litellm/clients.py | 162 | CODE | |
| LOW | core/agent_harness/harness.py | 140 | CODE | |
| LOW | core/agent_harness/harness.py | 216 | CODE | |
| LOW | core/agent_harness/harness.py | 362 | CODE | |
| LOW | core/agent_harness/tools/tool_provider.py | 61 | CODE | |
| LOW | core/agent_harness/turns/goal_review.py | 379 | CODE | |
| LOW | core/agent/agent.py | 41 | CODE | |
| LOW | core/tool_framework/tool_decorator.py | 23 | CODE | |
| LOW | core/tool_framework/tool_decorator.py | 60 | CODE | |
| LOW | core/tool_framework/tool_decorator.py | 97 | CODE | |
| LOW | core/tool_framework/tool_decorator.py | 133 | CODE | |
| LOW | core/domain/work_items/store.py | 116 | CODE | |
| LOW | core/domain/work_items/models.py | 188 | CODE | |
| LOW | core/tool/contracts.py | 624 | CODE | |
| LOW | core/tool/contracts.py | 709 | CODE | |
| LOW | tests/tools/test_github_ci_analytics.py | 51 | CODE | |
| LOW | tests/utils/alert_factory/factory.py | 8 | CODE | |
| LOW | tests/utils/alert_factory/factory.py | 41 | CODE | |
| LOW | tests/shared/infrastructure_sdk/resources/ecs.py | 408 | CODE | |
| LOW | tests/cli/test_update.py | 228 | CODE | |
| LOW | integrations/tracer/tracer_tools.py | 64 | CODE | |
| LOW | integrations/tracer/tracer_pipelines.py | 130 | CODE | |
| LOW | integrations/tracer/tracer_pipelines.py | 135 | CODE | |
| LOW | integrations/tracer/tracer_pipelines.py | 141 | CODE | |
| LOW | integrations/tracer/tracer_logs.py | 32 | CODE | |
| LOW | …rations/posthog_mcp/tools/posthog_mcp_tool/__init__.py | 354 | CODE | |
| LOW | …rations/posthog_mcp/tools/posthog_mcp_tool/__init__.py | 470 | CODE | |
| LOW | integrations/alertmanager/tools/__init__.py | 138 | CODE | |
| LOW | …opensearch/tools/opensearch_analytics_tool/__init__.py | 99 | CODE | |
| LOW | …grations/grafana/tools/grafana_traces_tool/__init__.py | 87 | CODE | |
| LOW | …ons/grafana/tools/grafana_annotations_tool/__init__.py | 85 | CODE | |
| LOW | …tegrations/grafana/tools/grafana_logs_tool/__init__.py | 89 | CODE | |
| LOW | …rations/grafana/tools/grafana_metrics_tool/__init__.py | 105 | CODE | |
| LOW | …ons/grafana/tools/grafana_alert_rules_tool/__init__.py | 95 | CODE | |
| LOW | …owflake/tools/snowflake_query_history_tool/__init__.py | 140 | CODE | |
| LOW | …ns/cloudtrail/tools/cloudtrail_events_tool/__init__.py | 236 | CODE | |
| LOW | integrations/github/tools/commits.py | 103 | CODE | |
| LOW | integrations/github/tools/actions.py | 785 | CODE | |
| LOW | integrations/github/tools/actions.py | 1229 | CODE | |
| LOW | integrations/github/tools/repository_tree.py | 89 | CODE | |
| LOW | integrations/github/tools/ci_fix/runner.py | 436 | CODE | |
| LOW | integrations/github/tools/ci_fix/context.py | 145 | CODE | |
| LOW | integrations/github/tools/ci_fix/tool.py | 139 | CODE | |
| LOW | …tions/github/tools/work_status_report_tool/__init__.py | 74 | CODE | |
| LOW | …ions/github/tools/git_deploy_timeline_tool/__init__.py | 234 | CODE | |
| LOW | integrations/github/tools/security_fix/runner.py | 217 | CODE | |
| LOW | integrations/github/tools/security_fix/context.py | 185 | CODE | |
| LOW | integrations/github/tools/security_fix/tool.py | 141 | CODE | |
| LOW | …ns/openobserve/tools/openobserve_logs_tool/__init__.py | 153 | CODE | |
| LOW | integrations/tempo/tools/__init__.py | 134 | CODE | |
| LOW | integrations/incident_io/tools/__init__.py | 189 | CODE | |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/shared/infrastructure_sdk/config.py | 35 | Load stack outputs from JSON file. Args: stack_name: Name of the stack. Returns: Dictionary of | STRING |
| HIGH | tests/shared/infrastructure_sdk/config.py | 57 | Get single output value. Args: stack_name: Name of the stack. key: Output key to retrieve. Ret | STRING |
| HIGH | tests/shared/infrastructure_sdk/deployer.py | 97 | Wait for a condition to be true. Args: check_func: Function that returns True when condition is met. | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/vpc.py | 18 | Get default VPC. Args: region: AWS region. Returns: Dictionary with VPC info: vpc_id, cidr. | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/secrets.py | 12 | Get secret value as dict (JSON parsed). Args: secret_name: Secret name or ARN. region: AWS region. | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/secrets.py | 45 | Get secret value as raw string. Args: secret_name: Secret name or ARN. region: AWS region. Ret | STRING |
| HIGH | tests/shared/infrastructure_sdk/resources/secrets.py | 74 | Get secret ARN. Args: secret_name: Secret name. region: AWS region. Returns: Secret AR | STRING |
| HIGH | integrations/aws/aws_sdk_client.py | 135 | Execute a read-only AWS SDK operation with safety validations. Args: service_name: AWS service name (e | STRING |
| HIGH | infrastructure/safety/auth/jwt_auth.py | 219 | Verify JWT signature and claims asynchronously. This is the primary verification function - fully async and non-blo | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pytest.ini | 1 | [pytest] | COMMENT |
| LOW | mypy.ini | 1 | [mypy] | COMMENT |
| LOW | tools/system/fleet_monitoring/tail.py | 321 | self._publish(chunk) | COMMENT |
| LOW | tools/system/fleet_monitoring/tail.py | 341 | # post is also single-producer (the loop above has exited | COMMENT |
| LOW | tools/system/fleet_monitoring/pricing.py | 141 | # after a direct litellm lookup misses. | COMMENT |
| LOW | core/agent_harness/ports.py | 281 | COMMENT | |
| LOW | core/agent_harness/session_goal/goal.py | 181 | last_reason: str = "" | COMMENT |
| LOW | core/agent_harness/session_goal/goal.py | 201 | host_owned: bool = False | COMMENT |
| LOW | core/agent_harness/turns/goal_review.py | 241 | # gather loop has no user to ask mid-pass, so its reviewer keeps going. | COMMENT |
| LOW | config/constants/gateway.py | 41 | #: ``Retry-After`` on a ``too_many_prompts`` refusal. A slot frees only when a turn ends, | COMMENT |
| LOW | config/constants/filestorage.py | 21 | REMOTE_SYNC_BUCKET_ENV = "OPENSRE_REMOTE_SYNC_BUCKET" | COMMENT |
| LOW | config/constants/scheduler.py | 21 | COMMENT | |
| LOW | config/constants/slack.py | 21 | # ``xoxe.xoxp-``, which is why this is a tuple and not a single prefix. | COMMENT |
| LOW | tests/tools/test_telemetry.py | 1221 | COMMENT | |
| LOW | tests/tools/test_telemetry.py | 1301 | } | COMMENT |
| LOW | tests/tools/test_telemetry.py | 1321 | # read_structured_file catches only StructureError (unreadable file, | COMMENT |
| LOW | tests/core/test_layering.py | 21 | Path("infrastructure/observability"), | COMMENT |
| LOW | tests/quality/umbrella_names_allowlist.txt | 1 | # Shrink-only allowlist for tests/quality/test_no_umbrella_names.py. | COMMENT |
| LOW | tests/filestorage/test_community_provider_template.py | 281 | # Act | COMMENT |
| LOW | tests/integrations/test_vendor_first_layout.py | 61 | # Cross-cutting scheduled-agent runner for pinned recurring skills | COMMENT |
| LOW | tests/fleet_monitoring/test_pricing.py | 381 | # litellm only keys this under "groq/llama-3.3-70b-versatile"; the | COMMENT |
| LOW | tests/fleet_monitoring/test_bus.py | 681 | def test_concurrent_cold_start_election_does_not_orphan_a_broker(self, sock_path: Path) -> None: | COMMENT |
| LOW | tests/interactive_shell/test_terminal_runtime.py | 1421 | These tests pin both paths so a stuck event can never leave a worker | COMMENT |
| LOW | …ts/interactive_shell/runtime/test_subprocess_runner.py | 1061 | assert len(captured_errors) == 1 | COMMENT |
| LOW | integrations/llm_cli/subprocess_env.py | 61 | # ``ANTIGRAVITY_API_KEY``), revisit this — a blanket prefix would | COMMENT |
| LOW | integrations/llm_cli/env_overrides.py | 41 | ) | COMMENT |
| LOW | integrations/grafana/client.py | 41 | done: threading.Event = field(default_factory=threading.Event) | COMMENT |
| LOW | integrations/github/client.py | 21 | JsonPayload = dict[str, Any] | list[Any] | COMMENT |
| LOW | integrations/eks/eks_k8s_client.py | 101 | # is configured with IAM user creds (access_key_id + secret_access_key), | COMMENT |
| LOW | integrations/new_relic/client.py | 321 | clauses.append(f"entity.name = {_nrql_string_literal(entity_name)}") | COMMENT |
| LOW | .github/workflows/release.yml | 781 | # continue-on-error keeps the release green on a dispatch hiccup; | COMMENT |
| LOW | .github/workflows/release.yml | 801 | # steps: | COMMENT |
| LOW | .github/workflows/release.yml | 821 | - build-binaries | COMMENT |
| LOW | surfaces/shared/llm_setup/catalog.py | 101 | endpoint_env: str = "" | COMMENT |
| LOW | surfaces/shared/terminal/tables/tables.py | 261 | lines = preview.split("\n") | COMMENT |
| LOW | surfaces/shared/terminal/output/environment.py | 61 | COMMENT | |
| LOW | surfaces/interactive_shell/main.py | 101 | # The sign-in gate runs once, in the synchronous ``run_repl`` entrypoint, | COMMENT |
| LOW | surfaces/interactive_shell/command_registry/types.py | 21 | usage: tuple[str, ...] = () | COMMENT |
| LOW | surfaces/interactive_shell/runtime/core/state.py | 301 | _SPINNER_FRAMES: tuple[str, ...] = BRAILLE_SPINNER_FRAMES | COMMENT |
| LOW | infrastructure/observability/errors/boundary.py | 41 | # `ValidationError.__str__` renders the rejected input inline via | COMMENT |
| LOW | infrastructure/turn_host/session_agents.py | 121 | apply_capability_policy=ensure_gateway_capability_policy, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/agent_harness/turns/action_driver.py | 1417 | # over the context window) still shows which block grew. | COMMENT |
| MEDIUM | config/constants/account.py | 15 | # the context window. Paired effort, when unset, is extra high (``xhigh``). | COMMENT |
| MEDIUM⚡ | tests/fleet_monitoring/test_pricing.py | 189 | # 200 tokens/min on Sonnet-4.5 (typical light agentic | COMMENT |
| MEDIUM | docs/guardrails/README.md | 83 | ### `opensre guardrails init` | COMMENT |
| MEDIUM | docs/guardrails/README.md | 89 | ### `opensre guardrails test "text"` | COMMENT |
| MEDIUM | docs/guardrails/README.md | 101 | ### `opensre guardrails rules` | COMMENT |
| MEDIUM | docs/guardrails/README.md | 105 | ### `opensre guardrails audit` | COMMENT |
| MEDIUM | integrations/pi/client.py | 3 | Runs the Pi CLI (https://pi.dev) in headless agentic mode inside a target | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/integrations/llm_cli/test_claude_code_adapter.py | 91 | # Create a fake ~/.claude/.credentials.json under tmp_path. | COMMENT |
| MEDIUM | tests/integrations/aws/test_lambda_client.py | 90 | # Create a mock zip file | COMMENT |
| MEDIUM | integrations/google_docs/client.py | 344 | # Create the document | COMMENT |
| MEDIUM | integrations/google_docs/tools/__init__.py | 170 | # Create the incident report | COMMENT |
| MEDIUM | surfaces/interactive_shell/ui/alerts/__init__.py | 84 | # Create a panel with the distinct accent | COMMENT |
| MEDIUM⚡ | infrastructure/terminal/theme.py | 659 | # This module is the only place in the codebase where raw ANSI escapes are | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/tools/test_registry.py | 264 | def perform_action(value: str) -> dict[str, str]: | CODE |
| LOW | tests/filestorage/test_vercel_provider.py | 57 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW⚡ | tests/filestorage/test_vercel_provider.py | 173 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/filestorage/test_vercel_provider.py | 198 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/filestorage/test_vercel_provider.py | 223 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/filestorage/test_vercel_provider.py | 263 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/filestorage/test_azure_provider.py | 30 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/filestorage/test_azure_provider.py | 168 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/shared/infrastructure_sdk/resources/ecs.py | 217 | def run_task( | CODE |
| LOW | infrastructure/scheduling/scheduler/executor.py | 59 | def execute_task( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 54 | ## Step 1: Install and start opensre | COMMENT |
| LOW⚡ | tests/cli/test_install_matrix.py | 333 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 343 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 353 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 363 | "## Step 1: Install and start opensre", | STRING |
| LOW | docs/agents.md | 16 | ## Step 1: Install or upgrade the CLI | COMMENT |
| LOW | docs/agents.md | 53 | ## Step 2: Get started | COMMENT |
| LOW | docs/agents.md | 75 | ## Step 3: Verify | COMMENT |
| LOW | docs/agents.md | 89 | ## Step 4: Suggest a first run | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/core/tool/test_execution.py | 593 | # Results stay in provider order: one per tool-call id, as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/core/runtime/llm/test_llm_client.py | 691 | CODE | |
| MEDIUM | tests/integrations/test_github_mcp_validation.py | 861 | CODE | |
| MEDIUM | tests/integrations/test_github_mcp_validation.py | 888 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/shared/infrastructure_sdk/resources/vpc.py | 67 | # Check if subnet has route to internet gateway | COMMENT |
| LOW | tests/shared/infrastructure_sdk/resources/vpc.py | 141 | # Check if exists | COMMENT |
| LOW | integrations/mariadb/__init__.py | 343 | # Check if performance_schema is enabled | COMMENT |
| LOW | integrations/mysql/__init__.py | 436 | # Check if performance_schema is enabled | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/cli/test_install_matrix.py | 333 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 343 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 353 | "## Step 1: Install and start opensre", | STRING |
| LOW⚡ | tests/cli/test_install_matrix.py | 363 | "## Step 1: Install and start opensre", | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/agent_harness/prompts/rules.py | 49 | "generic 'let me know if you need anything'). After integration status " | CODE |