Agent Substrate: the core system
This report summarizes scanner evidence for agent-substrate/substrate, a Go project with 4,847 GitHub stars. SynthScan examined 341,570 lines of code across 1480 source files, recording 1955 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 6.2 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1813 finding(s).
Are imports declared and package/API names verified? 24 finding(s).
Are wrappers, guards, and repeated structures necessary? 183 finding(s).
Which changes need focused human review? 1955 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1955 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .golangci.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .ko.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .golangci-kal.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/ateom-microvm/actorpath.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/sandboxnet.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/checkpoint.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/checkpoint.go | 41 | // | COMMENT |
| LOW | cmd/ateom-microvm/fidelity_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/hosted_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/durable.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/durable.go | 21 | // A durable-dir volume is a directory whose contents outlive the actor's process | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 61 | // ateom owns this CH process (booted at Run or relaunched at Restore). | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 81 | // snapshotIsSelfContained is set when this actor was restored eagerly, which | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 101 | workloadIDs []string | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 121 | assetVirtiofsd = "virtiofsd" | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 141 | // size — this one is halved rather than cut to the ~32MiB the steady state would justify. | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 221 | // | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 341 | COMMENT | |
| LOW | cmd/ateom-microvm/run.go | 801 | // that it is PID 1 and does the init work itself: it mounts /proc, /sys, devtmpfs /dev, | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 941 | return fmt.Errorf("while starting rootfs container %q: %w", c.name, err) | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 961 | go s.actorLogger.WrapContainerLogs(kata.NewStdioReader(context.Background(), ac, streamID, streamID, false), a, contain | COMMENT |
| LOW | cmd/ateom-microvm/run.go | 981 | ) | COMMENT |
| LOW | cmd/ateom-microvm/hosted.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/systeminfo.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/systeminfo.go | 21 | // so its contents always describe the actor actually being started, whatever | COMMENT |
| LOW | cmd/ateom-microvm/spec.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/spec.go | 21 | "math" | COMMENT |
| LOW | cmd/ateom-microvm/spec.go | 61 | // vCPU count (see guestEnvelope). | COMMENT |
| LOW | cmd/ateom-microvm/shutdown.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/shutdown.go | 41 | // own termination grace period — 3600s, set by | COMMENT |
| LOW | cmd/ateom-microvm/shutdown.go | 61 | // grace period is raised. | COMMENT |
| LOW | cmd/ateom-microvm/shutdown.go | 261 | return nil | COMMENT |
| LOW | cmd/ateom-microvm/net.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/csi.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/durable_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/phaselog.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/restore_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/fidelity.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/fidelity.go | 21 | // The fidelity ladder, lowest to highest, each level including the ones | COMMENT |
| LOW | cmd/ateom-microvm/run_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/stats.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/stats.go | 61 | StatsContainer(ctx context.Context, containerID string) (*agentpb.CgroupStats, error) | COMMENT |
| LOW | cmd/ateom-microvm/stats.go | 81 | // workloadIDs are the guest containers to sum, one per actor container. | COMMENT |
| LOW | cmd/ateom-microvm/stats.go | 321 | // sampleGuest returns is routine. | COMMENT |
| LOW | cmd/ateom-microvm/stats.go | 381 | // sumContainerStats reads every container of the actor and adds them up. It | COMMENT |
| LOW | cmd/ateom-microvm/shutdown_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/rootfsupper.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/rootfsupper.go | 21 | // Each container's rootfs is assembled ON THE HOST — the stock kata | COMMENT |
| LOW | cmd/ateom-microvm/rootfsupper_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/net_linux_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/usage_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/csi_test.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/restore.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/restore.go | 41 | "github.com/agent-substrate/substrate/internal/sizing" | COMMENT |
| LOW | cmd/ateom-microvm/restore.go | 221 | } | COMMENT |
| LOW | cmd/ateom-microvm/restore.go | 421 | COMMENT | |
| LOW | cmd/ateom-microvm/main_unsupported.go | 1 | //go:build !linux | COMMENT |
| LOW | cmd/ateom-microvm/main.go | 1 | //go:build linux | COMMENT |
| LOW | cmd/ateom-microvm/main.go | 181 | // Clean up the ateom directory during graceful shutdown (#1677). | COMMENT |
| 1650 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | hack/metrics/ci-failure-analysis.py | 61 | # ── GitHub helpers ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hack/metrics/ci-failure-analysis.py | 85 | # ── failure classification ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hack/metrics/ci-failure-analysis.py | 130 | # ── main analysis ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hack/metrics/ci-failure-analysis.py | 196 | # ── output ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hack/metrics/ci-failure-analysis.py | 236 | # ── CLI ─────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | docs/metrics/substrate.yaml | 34 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/substrate.yaml | 53 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/substrate.yaml | 124 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/substrate.yaml | 130 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docs/metrics/substrate.yaml | 183 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docs/metrics/substrate.yaml | 187 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docs/metrics/substrate.yaml | 197 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docs/metrics/substrate.yaml | 201 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 30 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 32 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 694 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 696 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 859 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 861 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1089 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1091 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1237 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1239 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1291 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 1304 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | manifests/ate-install/atenet-egress.yaml | 259 | # --------------------------------------------------------------------- | COMMENT |
| MEDIUM | manifests/ate-install/atenet-egress.yaml | 292 | # --------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ls/security-status-report/scripts/template_dispatch.py | 24 | def generate_dispatch_payload(output_path): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 128 | def test_parses_both_layers_of_the_same_msg(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 136 | def test_nanosecond_timestamps_parse(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 143 | def test_ateom_checkpoint_parses(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 148 | def test_cloud_logging_entry_parses_with_the_entry_timestamp(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 156 | def test_cloud_logging_export_file_is_a_json_array(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 165 | def test_ateom_records_default_to_the_microvm_class(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 170 | def test_non_numeric_duration_is_skipped_not_fatal(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 178 | def test_malformed_export_warns_instead_of_vanishing(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 215 | def test_atelet_checkpoint_residual_is_total_minus_sequential_phases(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 219 | def test_ateom_checkpoint_counts_the_concurrent_captures_once(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 225 | def test_restore_layers_get_no_residual(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 230 | def test_negative_residual_is_not_clamped(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 237 | def test_failed_records_are_flagged_and_excluded_from_percentiles(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 245 | def test_percentiles_split_by_sandbox_class_and_kind(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 255 | def test_paired_ateom_record_inherits_the_atelet_kind(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 263 | def test_checkpoint_pairing_window_ends_where_persist_starts(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 273 | def test_an_ateom_record_pairs_with_at_most_one_operation(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 281 | def test_waterfall_ignores_an_ateom_record_from_another_cycle(self): | CODE |
| LOW⚡ | benchmarking/analysis/test_phase_report.py | 288 | def test_waterfall_nests_ateom_and_gap_under_atelet(self): | CODE |
| LOW | benchmarking/analysis/test_phase_report.py | 190 | def test_bracket_prefixed_dump_is_read_line_by_line(self): | CODE |
| LOW | benchmarking/analysis/test_phase_report.py | 204 | def test_prefixed_kubectl_lines_still_parse(self): | CODE |
| LOW | benchmarking/locust/cluster_facts.py | 104 | def get_cluster_hardware_facts(logs: TextIO | None = None) -> dict[str, Any]: | CODE |
| LOW | benchmarking/locust/server_telemetry.py | 508 | def extract_and_record_server_telemetry( | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 142 | def test_capacity_is_scoped_to_nodes_running_worker_pods(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 153 | def test_zero_worker_pods_is_a_reading(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 163 | def test_unreadable_facts_are_none(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 181 | def test_no_cluster_facts_skips_the_api(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 228 | def test_actors_per_user_scales_every_key(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 246 | def test_actors_per_pod_percentiles(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_cluster_facts.py | 282 | def test_per_rpc_failure_ratios(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 197 | def test_range_query_window_guard(self, mock_urlopen): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 219 | def test_malformed_instant_response(self): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 225 | def test_packing_and_checkpoint_math(self, mock_instant, mock_range): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 310 | def test_packing_total_follows_pool_size(self, mock_instant, mock_range): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 326 | def test_packing_ignores_exited_ateapi(self, mock_instant, mock_range): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 346 | def test_missing_denominator_is_null(self, mock_instant, mock_range): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 366 | def test_snapshot_fields_are_null_not_zero(self, mock_instant): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 435 | def test_steady_window_bounds_packing_and_psi(self, mock_instant, mock_range): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 457 | def test_failed_delta_read_is_unknown(self, mock_instant): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 467 | def test_checkpoint_throughput_from_counter_sums(self, mock_instant): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 485 | def test_snapshot_selector_covers_both_runtimes(self, mock_instant): | CODE |
| LOW | benchmarking/locust/unit_tests/test_server_telemetry.py | 518 | def test_telemetry_survives_a_missing_stats_csv(self, _run, _up, telemetry): | CODE |
| LOW | benchmarking/locust/common/lifecycle_mode.py | 22 | def add_lifecycle_mode_arguments(parser: LocustArgumentParser) -> None: | CODE |
| LOW | benchmarking/locust/common/agentsession_config.py | 22 | def add_agentsession_arguments(parser: LocustArgumentParser) -> None: | CODE |
| LOW | benchmarking/locust/common/resume_mode.py | 22 | def add_resume_mode_arguments(parser: LocustArgumentParser) -> None: | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 52 | def test_traffic_template_shape(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 69 | def test_actor_reference_rotation_covers_all_actors(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 90 | def test_initial_rps_is_per_worker(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 97 | def test_thresholds_and_durations(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 113 | def test_tail_latency_slo_threshold(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_spec.py | 126 | def test_spec_round_trips_through_real_protos(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_output.py | 141 | def test_capacity_summary_converged(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_output.py | 162 | def test_failed_thresholds_and_binding(): | CODE |
| LOW | benchmarking/nighthawk-ingress/tests/test_output.py | 189 | def test_capacity_summary_no_testing_stage(): | CODE |
| LOW | benchmarking/automation/test_orchestrator.py | 29 | def test_defaults_omit_optional_flags(self, run): | CODE |
| LOW⚡ | benchmarking/automation/test_orchestrator.py | 90 | def test_runner_cpu_and_memory(self): | CODE |
| LOW⚡ | benchmarking/automation/test_orchestrator.py | 97 | def test_no_placeholder_survives(self): | CODE |
| LOW⚡ | benchmarking/automation/test_orchestrator.py | 106 | def test_short_name_keeps_full_test_name(self): | CODE |
| LOW⚡ | benchmarking/automation/test_orchestrator.py | 110 | def test_long_name_fits_a_label_and_keeps_suffix(self): | CODE |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | benchmarking/locust/cluster_facts.py | 64 | except config.ConfigException: | CODE |
| HIGH | benchmarking/locust/server_telemetry.py | 170 | except (IndexError, TypeError, ValueError): | CODE |
| HIGH | benchmarking/locust/server_telemetry.py | 272 | except (ValueError, IndexError): | CODE |
| HIGH | benchmarking/locust/tests/counter_demo.py | 131 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/counter_demo.py | 176 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/ate_api.py | 98 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/ate_api.py | 107 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/ate_api.py | 116 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/usermem.py | 109 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/usermem.py | 121 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/sleep.py | 109 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/sleep.py | 121 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/kernelmem.py | 109 | except Exception: | CODE |
| HIGH | benchmarking/locust/tests/kernelmem.py | 121 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/skills/security-status-report/scripts/render_chart.py | 24 | print("Error: 'matplotlib' is required to render the chart. Please install it using 'pip install matplotlib'.", file | CODE |
| LOW | …kills/security-status-report/scripts/compile_report.py | 73 | except Exception as e: | CODE |
| MEDIUM | hack/export-threats.py | 97 | print(f"Error: {args.md} not found.", file=sys.stderr) | CODE |
| LOW | hack/util/verify-boilerplate.py | 61 | except Exception as e: | CODE |
| MEDIUM | hack/util/verify-boilerplate.py | 62 | print(f"Error reading {filepath}: {e}") | CODE |
| MEDIUM | hack/util/verify-boilerplate.py | 96 | print(f"Error running git ls-files: {e}") | CODE |
| MEDIUM | hack/util/verify-boilerplate.py | 57 | def verify_file(filepath): | CODE |
| LOW | benchmarking/locust/cluster_facts.py | 95 | except Exception as e: | CODE |
| LOW | benchmarking/locust/cluster_facts.py | 160 | except Exception as e: | CODE |
| LOW | benchmarking/locust/cluster_facts.py | 191 | except Exception as e: | CODE |
| LOW | benchmarking/locust/cluster_facts.py | 246 | except Exception as e: | CODE |
| LOW | benchmarking/locust/runner.py | 532 | except Exception as e: | CODE |
| LOW | benchmarking/locust/runner.py | 548 | except Exception as e: | CODE |
| LOW | benchmarking/locust/runner.py | 563 | except Exception as e: | CODE |
| LOW | benchmarking/locust/runner.py | 583 | except Exception as e: | CODE |
| LOW | benchmarking/locust/server_telemetry.py | 52 | except Exception as e: | CODE |
| LOW | benchmarking/locust/server_telemetry.py | 85 | except Exception as e: | CODE |
| LOW | benchmarking/locust/server_telemetry.py | 148 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 75 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 97 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 112 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 117 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 131 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 155 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/counter_demo.py | 176 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/ate_api.py | 57 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/ate_api.py | 77 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/ate_api.py | 86 | except Exception as e: | CODE |
| LOW⚡ | benchmarking/locust/tests/ate_api.py | 98 | except Exception: | CODE |
| LOW⚡ | benchmarking/locust/tests/ate_api.py | 107 | except Exception: | CODE |
| LOW⚡ | benchmarking/locust/tests/ate_api.py | 116 | except Exception: | CODE |
| MEDIUM | benchmarking/locust/tests/ate_api.py | 91 | def invoke_target(self) -> None: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 51 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 73 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 85 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 93 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 109 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 121 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 51 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 73 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 85 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 93 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 109 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 121 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 51 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 73 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 85 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 93 | except Exception as e: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 109 | except Exception: | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 121 | except Exception: | CODE |
| LOW | benchmarking/locust/common/metrics.py | 39 | except Exception as e: | CODE |
| LOW | benchmarking/locust/common/grpc_tracing.py | 57 | except Exception: | CODE |
| LOW | benchmarking/locust/common/grpc_tracing.py | 93 | except Exception as e: | CODE |
| LOW | benchmarking/nighthawk-ingress/runner.py | 332 | except Exception as e: | CODE |
| LOW | benchmarking/nighthawk-ingress/runner.py | 379 | except Exception as e: | CODE |
| LOW | benchmarking/nighthawk-ingress/actors.py | 181 | except Exception as e: | CODE |
| LOW | benchmarking/nighthawk-ingress/actors.py | 198 | except Exception as e: | CODE |
| LOW | benchmarking/automation/orchestrator.py | 504 | except Exception as e: | CODE |
| LOW | benchmarking/automation/orchestrator.py | 560 | except Exception as e: | CODE |
| LOW | benchmarking/automation/orchestrator.py | 563 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/metrics/ci-failure-analysis.py | 50 | CODE | |
| LOW | benchmarking/analysis/phase_report.py | 44 | CODE | |
| LOW | benchmarking/locust/runner.py | 41 | CODE | |
| LOW | benchmarking/locust/tests/counter_demo.py | 24 | CODE | |
| LOW | benchmarking/locust/tests/ate_api.py | 16 | CODE | |
| LOW | benchmarking/locust/tests/ate_api.py | 17 | CODE | |
| LOW | benchmarking/locust/tests/ate_api.py | 19 | CODE | |
| LOW | benchmarking/locust/tests/usermem.py | 19 | CODE | |
| LOW | benchmarking/locust/tests/sleep.py | 19 | CODE | |
| LOW | benchmarking/locust/tests/kernelmem.py | 19 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 154 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 155 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 156 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 157 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 158 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 159 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 160 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 161 | CODE | |
| LOW | benchmarking/locust/common/boomer_config.py | 162 | CODE | |
| LOW | benchmarking/nighthawk-ingress/actors.py | 33 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/security-status-report/scripts/compile_report.py | 19 | CODE | |
| LOW | hack/export-threats.py | 27 | CODE | |
| LOW | benchmarking/analysis/phase_report.py | 181 | CODE | |
| LOW | benchmarking/analysis/phase_report.py | 224 | CODE | |
| LOW | benchmarking/analysis/phase_report.py | 373 | CODE | |
| LOW | benchmarking/locust/cluster_facts.py | 167 | CODE | |
| LOW | benchmarking/locust/runner.py | 421 | CODE | |
| LOW | benchmarking/locust/runner.py | 483 | CODE | |
| LOW | benchmarking/locust/server_telemetry.py | 115 | CODE | |
| LOW | benchmarking/locust/server_telemetry.py | 261 | CODE | |
| LOW | benchmarking/locust/server_telemetry.py | 285 | CODE | |
| LOW | benchmarking/nighthawk-ingress/runner.py | 229 | CODE | |
| LOW | benchmarking/nighthawk-ingress/actors.py | 142 | CODE | |
| LOW | benchmarking/nighthawk-ingress/output.py | 114 | CODE | |
| LOW | benchmarking/automation/orchestrator.py | 457 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | benchmarking/locust/tests/counter_demo.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/tests/ate_api.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/tests/usermem.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/tests/sleep.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/tests/kernelmem.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/shapes/ladder_shape.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/shapes/ladder_shape.py | 132 | def _set_trace_probability(environment, probability: float) -> None: | CODE |
| LOW | benchmarking/locust/shapes/spawn_shape.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/common/metrics.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/common/metrics.py | 97 | def update_user_count(delta: int, user_class: str) -> None: | CODE |
| LOW | benchmarking/locust/common/trace.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/common/trace.py | 40 | def update_probability(self, probability: float) -> None: | CODE |
| LOW | benchmarking/locust/common/trace.py | 117 | def set_trace_probability(probability: float) -> None: | CODE |
| LOW | benchmarking/locust/common/grpc_tracing.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | benchmarking/locust/common/boomer_config.py | 48 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/ateapi/internal/controlapi/tag.go | 63 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/tag.go | 83 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/tag.go | 99 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/tag.go | 196 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/actor_template.go | 99 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/actor_template.go | 119 | // TODO: implement this | COMMENT |
| LOW | cmd/ateapi/internal/controlapi/actor_template.go | 131 | // TODO: implement this | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | benchmarking/locust/shapes/spawn_shape.py | 33 | entry = self.runner.environment.stats.entries.get( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | hack/update/licenses.sh | 56 | # Create a temporary output folder for each target | COMMENT |
| MEDIUM | docs/metrics/registry/metrics.yaml | 15 | # This file is an OpenTelemetry Weaver semantic convention registry. It defines | COMMENT |
| MEDIUM | .github/workflows/release.yaml | 28 | # Creating a release needs contents: write. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | internal/imagecache/imagecache.go | 286 | // multi-arch ref, the index digest as requested, not the per-platform | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …credential-provider/kubernetes-secrets/kubeprovider.go | 172 | // Step 3: the Secret is in hand, so a grant narrowed by label can finally | COMMENT |
| LOW | docs/csi-volumes.md | 106 | ### Step 1: Create the StorageClass | COMMENT |
| LOW | docs/csi-volumes.md | 123 | ### Step 2: Register the CSIDriverConfig | COMMENT |
| LOW | docs/csi-volumes.md | 140 | ### Step 3: Define WorkerPool and ActorTemplate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/setup-csi-nfs-kind.sh | 19 | # Check if NFS server module is loaded on the host | COMMENT |
| LOW | hack/third_party/kubernetes/verify-shellcheck.sh | 80 | # Set this to "always" to force color output. | COMMENT |
| LOW | hack/third_party/kubernetes/verify-shellcheck.sh | 81 | # Set this to "never" to disable color output (which can confuse parsers like | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/atecontroller/main.go | 233 | //+kubebuilder:scaffold:builder | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/atenet/internal/router/egress/credentials_test.go | 167 | md.Headers["x-api-key"] = "placeholder" | CODE |
| LOW | cmd/atenet/internal/router/egress/credentials_test.go | 365 | md.Headers[header] = "placeholder" | CODE |
| LOW | cmd/benchmarking/isolate/fake-workersync/main.go | 61 | nodeLabel = pflag.String("node-label", "ate.dev/fake-data-plane=true", "Label selector for the benchmark nodes that | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | benchmarking/automation/testtypes/nighthawk_ingress.py | 39 | # Client sizing decoupled from envoyCpu so the harness never binds. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | demos/egress/test-egress.sh | 29 | # Usage: | COMMENT |
| LOW | demos/parking/load.sh | 31 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …credential-provider/kubernetes-secrets/kubeprovider.go | 172 | // Step 3: the Secret is in hand, so a grant narrowed by label can finally | COMMENT |