My homeassistant addons
This report summarizes scanner evidence for alexbelgium/hassio-addons, a Shell project with 2,613 GitHub stars. SynthScan examined 109,959 lines of code across 1242 source files, recording 404 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 8.2 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 235 finding(s).
Are imports declared and package/API names verified? 3 finding(s).
Are wrappers, guards, and repeated structures necessary? 168 finding(s).
Which changes need focused human review? 404 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 404 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …_paperless_ngx/rootfs/etc/cont-init.d/00-deprecated.sh | 5 | # ============================================================================== | COMMENT |
| MEDIUM | …_paperless_ngx/rootfs/etc/cont-init.d/00-deprecated.sh | 7 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 21 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 23 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 37 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 75 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 109 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | nginx_webserver_proxy/run.sh | 111 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 37 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 57 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 90 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 118 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 131 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 151 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 220 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_solo/run.sh | 222 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 84 | # ------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 86 | # ------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 106 | # ------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 108 | # ------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 129 | # ------------------- | COMMENT |
| MEDIUM | joplin/rootfs/etc/cont-init.d/99-run.sh | 131 | # ------------------- | COMMENT |
| MEDIUM⚡ | cleanuparr/rootfs/ha_entrypoint.sh | 13 | # ─── Source standalone bashio if available ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | cleanuparr/rootfs/ha_entrypoint.sh | 19 | # ─── Run cont-init.d scripts (banner, custom_script, ...) ──────────────────── | COMMENT |
| MEDIUM⚡ | cleanuparr/rootfs/ha_entrypoint.sh | 29 | # ─── Setup persistent data directory ───────────────────────────────────────── | COMMENT |
| MEDIUM | cleanuparr/rootfs/ha_entrypoint.sh | 44 | # ─── Ingress proxy ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cleanuparr/rootfs/ha_entrypoint.sh | 49 | # ─── Add-on options as environment variables ───────────────────────────────── | COMMENT |
| MEDIUM | cleanuparr/rootfs/ha_entrypoint.sh | 66 | # ─── Start Cleanuparr directly (bypass original /entrypoint.sh) ────────────── | COMMENT |
| MEDIUM | portainer/rootfs/etc/cont-init.d/31-portainer.sh | 4 | # ============================================================================== | COMMENT |
| MEDIUM | portainer/rootfs/etc/cont-init.d/31-portainer.sh | 7 | # ============================================================================== | COMMENT |
| MEDIUM | maintainerr/rootfs/ha_entrypoint.sh | 10 | # ─── Run cont-init.d scripts ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | maintainerr/rootfs/ha_entrypoint.sh | 20 | # ─── Setup persistent data directory ───────────────────────────────────────── | COMMENT |
| MEDIUM | maintainerr/rootfs/ha_entrypoint.sh | 43 | # ─── Start Maintainerr as unprivileged node user ───────────────────────────── | COMMENT |
| MEDIUM | omni-tools/rootfs/etc/cont-init.d/99-run.sh | 3 | # ============================================================================== | COMMENT |
| MEDIUM | omni-tools/rootfs/etc/cont-init.d/99-run.sh | 6 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 44 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 62 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 89 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 95 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 172 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 178 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 187 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 189 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 204 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 209 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 278 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | obsidian_syncserver_npm/run.sh | 280 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | obsidian_syncserver_npm/run.sh | 117 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | obsidian_syncserver_npm/run.sh | 128 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | netbird-server/rootfs/etc/cont-init.d/00-config.sh | 5 | # ============================================================================== | COMMENT |
| 85 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | birdnet-go/rootfs/etc/cont-init.d/99-run.sh | 25 | # Check if alsa_card is provided | COMMENT |
| LOW | nextcloud/rootfs/etc/cont-init.d/30-ssl.sh | 14 | #Check if files exist | COMMENT |
| LOW | calibre_web/rootfs/etc/cont-init.d/00-data_location.sh | 18 | # Check if config is located in an acceptable location | COMMENT |
| LOW | calibre/rootfs/etc/cont-init.d/20-folders.sh | 19 | # Check if config is located in an acceptable location | COMMENT |
| LOW | monica/rootfs/etc/cont-init.d/99-run.sh | 112 | # Check if APP_KEY is not 32 characters long | COMMENT |
| LOW | jellyfin/rootfs/etc/cont-init.d/20-folders.sh | 41 | # Check if config is located in an acceptable location | COMMENT |
| LOW | browser_chromium/rootfs/etc/cont-init.d/90-ssl.sh | 11 | #Check if files exist | COMMENT |
| LOW | immich/rootfs/etc/cont-init.d/99-run.sh | 100 | # Check if the root user exists. | COMMENT |
| LOW | immich/rootfs/etc/cont-init.d/20-folders.sh | 81 | # Check if the existing library is a directory and not a symlink and has contents | COMMENT |
| LOW | birdnet-go-dev/rootfs/etc/cont-init.d/99-run.sh | 25 | # Check if alsa_card is provided | COMMENT |
| LOW⚡ | transmission_openvpn/rootfs/etc/cont-init.d/99-run.sh | 90 | # Check if the line contains a txt file | COMMENT |
| LOW⚡ | transmission_openvpn/rootfs/etc/cont-init.d/99-run.sh | 94 | # Check if the txt file exists | COMMENT |
| LOW⚡ | transmission_openvpn/rootfs/etc/cont-init.d/99-run.sh | 96 | # Check if the txt file exists in the /config/openvpn/ directory | COMMENT |
| LOW | webtrees/rootfs/etc/cont-init.d/99-run.sh | 22 | # Check if a migration is needed | COMMENT |
| LOW | …eta_manager/rootfs/etc/cont-init.d/20-configuration.sh | 26 | # Check if config file is there, or create one from template | COMMENT |
| LOW | photoprism/rootfs/run.sh | 47 | # Check if path exists | COMMENT |
| LOW | photoprism/rootfs/run.sh | 54 | # Check if path writable | COMMENT |
| LOW | photoprism/rootfs/etc/cont-init.d/32-nginx_ssl.sh | 24 | #Check if files exist | COMMENT |
| LOW | photoprism/rootfs/etc/cont-init.d/99-run.sh | 121 | # Check if path exists | COMMENT |
| LOW | photoprism/rootfs/etc/cont-init.d/99-run.sh | 128 | # Check if path writable | COMMENT |
| LOW | …ar2mqtt/rootfs/etc/cont-init.d/89-mqtt_autodiscover.sh | 11 | # Check if available | COMMENT |
| LOW | …net-pi-zach/rootfs/etc/cont-init.d/91-nginx_ingress.sh | 35 | # Check if the NGINX configuration file exists | COMMENT |
| LOW | birdnet-pi-zach/rootfs/etc/cont-init.d/33-mqtt.sh | 44 | # Check if MQTT service is available and not disabled | COMMENT |
| LOW | birdnet-pi-zach/rootfs/etc/cont-init.d/33-mqtt.sh | 65 | # Check if manual MQTT configuration is provided | COMMENT |
| LOW | …pi-zach/rootfs/etc/cont-init.d/02-restorestreamdata.sh | 22 | # Check if there are .wav files in /config/TemporaryFiles | COMMENT |
| LOW | birdnet-pi-zach/rootfs/etc/cont-init.d/98-oldcpu.sh | 20 | # Check if the CPU supports AVX2 | COMMENT |
| LOW | …net-pi-zach/rootfs/etc/cont-init.d/31-config_checks.sh | 34 | # Check if the variable is in configcurrent, if not, append it | COMMENT |
| LOW | …net-pi-zach/rootfs/etc/cont-init.d/81-modifications.sh | 36 | # Check if port 80 is correctly configured | COMMENT |
| LOW | …net-pi-zach/rootfs/etc/cont-finish.d/savestreamdata.sh | 10 | # Check if the file contains a valid WAV header | COMMENT |
| LOW | grampsweb/rootfs/etc/cont-init.d/32-nginx_ssl.sh | 24 | #Check if files exist | COMMENT |
| LOW | grampsweb/rootfs/etc/cont-init.d/99-run.sh | 30 | # Check if the secret key is defined in addon options | COMMENT |
| LOW | grampsweb/rootfs/etc/cont-init.d/99-run.sh | 36 | # Check if the secret file exists; if not, create a new one | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/91-nginx_ingress.sh | 39 | # Check if the NGINX configuration file exists | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/33-mqtt.sh | 44 | # Check if MQTT service is available and not disabled | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/33-mqtt.sh | 65 | # Check if manual MQTT configuration is provided | COMMENT |
| LOW | …dnet-pi/rootfs/etc/cont-init.d/02-restorestreamdata.sh | 22 | # Check if there are .wav files in /config/TemporaryFiles | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/98-oldcpu.sh | 20 | # Check if the CPU supports AVX2 | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/31-config_checks.sh | 34 | # Check if the variable is in configcurrent, if not, append it | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-init.d/81-modifications.sh | 36 | # Check if port 80 is correctly configured | COMMENT |
| LOW | birdnet-pi/rootfs/etc/cont-finish.d/savestreamdata.sh | 10 | # Check if the file contains a valid WAV header | COMMENT |
| LOW | .github/workflows/on_issues.yml | 34 | #Increment counter | COMMENT |
| LOW | .github/workflows/on_issues.yml | 40 | #Check if relevant to addon | COMMENT |
| LOW | …ay2mqtt/rootfs/etc/cont-init.d/91-mqtt_autodiscover.sh | 12 | # Check if available | COMMENT |
| LOW | enedisgateway2mqtt/rootfs/etc/cont-init.d/99-run.sh | 58 | # Check if database is here or create symlink | COMMENT |
| LOW | enedisgateway2mqtt/rootfs/etc/cont-init.d/99-run.sh | 75 | # Check if config file is there, or create one from template | COMMENT |
| LOW | enedisgateway2mqtt/rootfs/etc/cont-init.d/99-run.sh | 83 | # Check if yaml is valid | COMMENT |
| LOW | netalertx/rootfs/etc/cont-init.d/91-configure.sh | 85 | # Check if the interface is already configured | COMMENT |
| LOW | kometa/rootfs/etc/cont-init.d/20-configuration.sh | 26 | # Check if config file is there, or create one from template | COMMENT |
| LOW | transmission/rootfs/etc/cont-init.d/19-json_repair.sh | 13 | # Check if json file valid or not | COMMENT |
| LOW | transmission/rootfs/etc/cont-init.d/19-json_repair.sh | 25 | # Check if all keys are still there, or add them | COMMENT |
| LOW | transmission/rootfs/etc/cont-init.d/19-json_repair.sh | 28 | # Check if key exists | COMMENT |
| LOW | …qtt_dev/rootfs/etc/cont-init.d/91-mqtt_autodiscover.sh | 12 | # Check if available | COMMENT |
| LOW | enedisgateway2mqtt_dev/rootfs/etc/cont-init.d/99-run.sh | 58 | # Check if database is here or create symlink | COMMENT |
| LOW | enedisgateway2mqtt_dev/rootfs/etc/cont-init.d/99-run.sh | 75 | # Check if config file is there, or create one from template | COMMENT |
| LOW | enedisgateway2mqtt_dev/rootfs/etc/cont-init.d/99-run.sh | 83 | # Check if yaml is valid | COMMENT |
| LOW | .templates/01-custom_script.sh | 207 | # Check if there is actual commands | COMMENT |
| LOW | .templates/ha_entrypoint_modif.sh | 40 | # Check if shebang exists | COMMENT |
| LOW | .templates/91-universal_graphic_drivers.sh | 139 | # Check if we have allready applied this layer | COMMENT |
| LOW | .templates/01-config_yaml.sh | 43 | # Check if config is located in an acceptable location | COMMENT |
| LOW | .templates/01-config_yaml.sh | 96 | # Check if there are lines to read | COMMENT |
| 8 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .coderabbit.yaml | 1 | # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json | COMMENT |
| LOW | …rchived_paperless_ngx/rootfs/etc/cont-init.d/99-run.sh | 141 | fi | COMMENT |
| LOW | zzz_archived_paperless_ngx/rootfs/templates/config.yaml | 1 | #============================# | COMMENT |
| LOW | birdnet-go/rootfs/etc/cont-init.d/01-structure.sh | 141 | #################### | COMMENT |
| LOW | birdnet-go/rootfs/etc/cont-init.d/33-mqtt.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | birdnet-go/rootfs/etc/cont-init.d/99-run.sh | 1 | #!/command/with-contenv bashio | COMMENT |
| LOW | calibre_web/rootfs/etc/cont-init.d/32-nginx.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | calibre_web/rootfs/etc/cont-init.d/32-nginx.sh | 21 | # keyfile=$(bashio::config 'keyfile') | COMMENT |
| LOW | calibre_web/rootfs/etc/cont-init.d/80-configuration.sh | 21 | COMMENT | |
| LOW | ubooquity/rootfs/etc/32-nginx_ingress.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | free_games_claimer/rootfs/etc/cont-init.d/20-folders.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | nginx_webserver_proxy/apparmor.txt | 1 | #include <tunables/global> | COMMENT |
| LOW | binance-trading-bot/rootfs/etc/cont-init.d/99-run.sh | 1 | #!/usr/bin/env bashio | COMMENT |
| LOW | browser_chromium/rootfs/etc/cont-init.d/20-folders.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | cleanuparr/rootfs/ha_entrypoint.sh | 1 | #!/bin/bash | COMMENT |
| LOW | cleanuparr/rootfs/ha_entrypoint.sh | 41 | COMMENT | |
| LOW | birdnet-go-dev/merge-prs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | birdnet-go-dev/merge-prs.sh | 21 | # that does not merge onto main at all. | COMMENT |
| LOW | birdnet-go-dev/rootfs/etc/cont-init.d/01-structure.sh | 141 | fi | COMMENT |
| LOW | birdnet-go-dev/rootfs/etc/cont-init.d/33-mqtt.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | birdnet-go-dev/rootfs/etc/cont-init.d/33-mariadb.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | inadyn/rootfs/etc/cont-init.d/99-run.sh | 1 | #!/usr/bin/env bashio | COMMENT |
| LOW | addons_updater/rootfs/usr/bin/ha_version.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | portainer/rootfs/etc/cont-init.d/31-portainer.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | codex/rootfs/etc/cont-init.d/20-folders.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | …laude/skills/hassio-addon-workflow/scripts/validate.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …aude/skills/hassio-addon-workflow/scripts/env_trace.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .claude/skills/hassio-addon-workflow/scripts/measure.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .claude/skills/hassio-addon-workflow/scripts/traps.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …aude/skills/hassio-addon-workflow/scripts/pr_review.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …aude/skills/hassio-addon-workflow/scripts/pr_review.sh | 101 | # CI later counts as blocking until someone puts it here on purpose. | COMMENT |
| LOW | omni-tools/rootfs/etc/cont-init.d/99-run.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | obsidian_syncserver_npm/run.sh | 1 | #!/command/with-contenv bash | COMMENT |
| LOW | obsidian_syncserver_npm/run.sh | 121 | # database. This only replaces the "Congratulations" default page, so that a | COMMENT |
| LOW | portainer_be/rootfs/etc/cont-init.d/31-portainer.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | tandoor_recipes/rootfs/etc/cont-init.d/99-run.sh | 41 | sqlite) | COMMENT |
| LOW | tandoor_recipes/rootfs/etc/cont-init.d/99-run.sh | 61 | # pip install pymysql &>/dev/null | COMMENT |
| LOW | collabora/rootfs/usr/local/bin/collabora-run.sh | 1 | #!/bin/bash | COMMENT |
| LOW | comicarr/rootfs/etc/cont-init.d/20-config_location.sh | 1 | #!/usr/bin/with-contenv bashio | COMMENT |
| LOW | .github/generate_map.py | 41 | # It applies only to rows that carry a real last_checked date and have since | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 1 | --- | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 181 | # issue-open event is the outside reporter, who never has write. | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 201 | # actor". allowed_non_write_users does NOT cover this — it is only | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 241 | set confidence accordingly rather than searching for the code. | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 301 | gh issue edit "$ISSUE" --repo "$REPO" --add-label ai:needs-info >/dev/null 2>&1 || true | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 321 | # Hand the issue to a human and take it out of the retry rotation. | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 341 | # Did the run die on its turn budget rather than on a workflow fault? | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 381 | "$EXECUTION_FILE" >/dev/null 2>&1 | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 401 | COMMENT | |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 441 | fi | COMMENT |
| LOW | .github/workflows/on_issues_ai_triage.yaml | 501 | COMMENT=""; CONF="low" | COMMENT |
| LOW | .github/workflows/on_pr_coderabbit.yml | 1 | --- | COMMENT |
| LOW | .github/workflows/on_pr_coderabbit.yml | 81 | if: steps.claim.outputs.go == 'true' | COMMENT |
| LOW | .github/workflows/onpush_builder.yaml | 281 | run: | | COMMENT |
| LOW | .github/workflows/on_claude_mention.yml | 1 | --- | COMMENT |
| LOW | .github/workflows/daily_ai_fix.yaml | 1 | --- | COMMENT |
| LOW | .github/workflows/daily_ai_fix.yaml | 21 | # Tier 2 daily_ai_fix.yaml (this) Opus 5-xhigh daily fix/plan sweep | COMMENT |
| LOW | .github/workflows/helper_stats_graphs.yaml | 41 | for(i=2; i<=NR; i++){ | COMMENT |
| LOW | .github/workflows/on_issue_approved.yaml | 1 | --- | COMMENT |
| LOW | .github/scripts/ai_guard_paths.sh | 1 | #!/usr/bin/env bash | COMMENT |
| 39 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | nginx_webserver_proxy/run.sh | 22 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 36 | # Step 2: Validate static_site_root | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 72 | # Step 3: Write static-site server block into NPM's default_host dir | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 110 | # Step 4: Hand off to NPM's own s6-overlay boot | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 38 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 58 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 85 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 119 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 130 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 147 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 221 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 43 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 63 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 90 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 173 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 188 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 205 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 279 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 38 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 64 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 91 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 182 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 193 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 210 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 284 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | nginx_webserver_proxy/run.sh | 22 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 36 | # Step 2: Validate static_site_root | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 72 | # Step 3: Write static-site server block into NPM's default_host dir | COMMENT |
| LOW⚡ | nginx_webserver_proxy/run.sh | 110 | # Step 4: Hand off to NPM's own s6-overlay boot | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 38 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 58 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 85 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 119 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 130 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 147 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_solo/run.sh | 221 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 43 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 63 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 90 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 173 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 188 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 205 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_npm/run.sh | 279 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 38 | # Step 1: Read add-on options | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 64 | # Step 2: Resolve admin credentials | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 91 | # Step 3: Point CouchDB at persistent storage | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 182 | # Step 4: Start CouchDB in the background | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 193 | # Step 5: Wait for CouchDB to accept requests | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 210 | # Step 6: Provision for LiveSync | COMMENT |
| LOW⚡ | obsidian_syncserver_ssl/run.sh | 284 | # Step 7: Hand the container's lifetime back to CouchDB | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | immich/rootfs/etc/cont-init.d/99-run.sh | 116 | # Create the database if it does not exist | COMMENT |
| MEDIUM | birdnet-go-dev/rootfs/etc/cont-init.d/33-mariadb.sh | 80 | # Create the database — birdnet-go connects to an existing schema and does NOT | COMMENT |
| MEDIUM | addons_updater/rootfs/etc/cont-init.d/99-run.sh | 94 | #Define the folder addon | COMMENT |
| MEDIUM | …pi-zach/rootfs/etc/cont-init.d/02-restorestreamdata.sh | 27 | # Create the destination directory if it does not exist | COMMENT |
| MEDIUM | …net-pi-zach/rootfs/etc/cont-finish.d/savestreamdata.sh | 31 | # Create the destination directory | COMMENT |
| MEDIUM | …dnet-pi/rootfs/etc/cont-init.d/02-restorestreamdata.sh | 27 | # Create the destination directory if it does not exist | COMMENT |
| MEDIUM | birdnet-pi/rootfs/etc/cont-finish.d/savestreamdata.sh | 31 | # Create the destination directory | COMMENT |
| MEDIUM | .templates/ha_entrypoint.sh | 77 | # Create a tiny test executable to confirm "exec" works | COMMENT |
| MEDIUM | zzz_archived_omada/rootfs/etc/cont-init.d/99-run.sh | 45 | # Create a symbolic link in the current working directory | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …aude/skills/hassio-addon-workflow/scripts/env_trace.sh | 47 | except Exception as err: | CODE |
| LOW | .claude/skills/hassio-addon-workflow/scripts/measure.sh | 49 | except Exception: | CODE |
| LOW | birdnet-pi-zach/rootfs/helpers/birdnet_to_mqtt.py | 102 | except Exception as e: | CODE |
| LOW | birdnet-pi-zach/rootfs/helpers/birdnet_to_mqtt.py | 136 | except Exception as e: | CODE |
| LOW | birdnet-pi/rootfs/helpers/birdnet_to_mqtt.py | 102 | except Exception as e: | CODE |
| LOW | birdnet-pi/rootfs/helpers/birdnet_to_mqtt.py | 136 | except Exception as e: | CODE |
| LOW | .github/generate_map.py | 190 | except Exception: | CODE |
| LOW | …/rootfs/usr/local/bin/headroom-posttooluse-compress.py | 62 | except Exception: | CODE |
| LOW | …/rootfs/usr/local/bin/headroom-posttooluse-compress.py | 71 | except Exception: | CODE |
| LOW | …/rootfs/usr/local/bin/headroom-posttooluse-compress.py | 217 | except Exception: | CODE |
| LOW | …de_desktop/rootfs/usr/local/bin/claude-tools-doctor.sh | 58 | except Exception as exc: | CODE |
| LOW | …de_desktop/rootfs/usr/local/bin/claude-tools-doctor.sh | 86 | except Exception as exc: | CODE |
| LOW | …de_desktop/rootfs/usr/local/bin/claude-tools-doctor.sh | 118 | except Exception as exc: | CODE |
| LOW | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 79 | except Exception: | CODE |
| LOW | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 495 | except Exception: | CODE |
| LOW | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 504 | except Exception: | CODE |
| LOW | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 551 | except Exception: | CODE |
| LOW | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 651 | except Exception: | CODE |
| MEDIUM | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 491 | def load_state(): | CODE |
| MEDIUM | …aude_desktop/rootfs/etc/cont-init.d/82-claude_tools.sh | 499 | def save_state(state): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | free_games_claimer/rootfs/etc/cont-init.d/99-run.sh | 49 | # The Home Assistant port mapping is intentionally kept at 6080 for a seamless | COMMENT |
| MEDIUM | plex/rootfs/etc/cont-init.d/21-folders.sh | 41 | # Fallback (may be slower / less robust than rsync for huge libs) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …es_claimer/rootfs/usr/local/bin/migrate_vogler_data.py | 48 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …hived_paperless_ngx/rootfs/etc/cont-init.d/31-nginx.sh | 16 | bashio::log.warning "Ssl enabled, your site will be available at $(bashio::config "PAPERLESS_URL"). Don't forget | CODE |
| MEDIUM | zzz_archived_paperless_ngx/rootfs/templates/config.yaml | 7 | # This file must be filled according to the yaml format. If the format is invalid, the addon will note an error. To vali | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es_claimer/rootfs/usr/local/bin/migrate_vogler_data.py | 4 | CODE | |
| LOW | addons_updater/rootfs/usr/bin/ha_version.py | 22 | CODE | |
| LOW | …/rootfs/usr/local/bin/headroom-posttooluse-compress.py | 59 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ente/rootfs/etc/cont-init.d/99-run.sh | 279 | # Main orchestration | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/generate_map.py | 128 | def fetch_stargazer_usernames(): | CODE |
| LOW | …sktop/rootfs/usr/local/bin/claude-safestorage-patch.js | 150 | function skipWhitespaceAndComments(source, i) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | .templates/bashio-standalone.sh | 354 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es_claimer/rootfs/usr/local/bin/migrate_vogler_data.py | 124 | CODE |