| LOW | .golangci.yaml | 81 | - builtin$ | COMMENT |
| LOW | .bouncer.yaml | 21 | | COMMENT |
| LOW | cmd/syft/internal/options/writer.go | 81 | | COMMENT |
| LOW | …/internal/test/integration/encode_decode_cycle_test.go | 41 | // no redactions necessary | COMMENT |
| LOW | …/test/integration/package_cataloger_convention_test.go | 141 | // note: this is meant to apply to things in static space, not methods on structs or within interfaces. | COMMENT |
| LOW | test/install/test_harness.sh | 181 | # ../../snapshot/syft_0.36.0-SNAPSHOT-e5e847a_linux_arm64.deb | COMMENT |
| LOW | test/cli/scan_cmd_test.go | 81 | "-o", "json", coverageImage}, | COMMENT |
| LOW | test/cli/scan_cmd_test.go | 161 | assertPackageCount(14), | COMMENT |
| LOW | test/cli/scan_cmd_test.go | 181 | name: "all-layers-scope-flag", | COMMENT |
| LOW | test/cli/scan_cmd_test.go | 241 | assertJsonReport, | COMMENT |
| LOW | …st/cli/testdata/attestation/docker-compose-config.yaml | 1 | # | COMMENT |
| LOW | test/cli/testdata/attestation/config/logid.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …data/attestation/config/dex/docker-compose-config.yaml | 1 | # | COMMENT |
| LOW | internal/constants.go | 1 | package internal | COMMENT |
| LOW | internal/spillbuf/buffer.go | 1 | // Package spillbuf provides a sparse, offset-addressed byte buffer that keeps a bounded amount in memory | COMMENT |
| LOW | internal/spillbuf/buffer.go | 41 | // Storage is two tiers with a fixed boundary: bytes below memLimit live in mem, bytes at or past it live | COMMENT |
| LOW | internal/capabilities/model.go | 101 | // CapabilityField represents a single capability field with optional conditional values based on configuration. | COMMENT |
| LOW | …ternal/capabilities/internal/load_capabilities_test.go | 41 | | COMMENT |
| LOW | internal/file/reader_size.go | 1 | package file | COMMENT |
| LOW | internal/file/reader_size.go | 21 | // intermediate position. | COMMENT |
| LOW | internal/spdxlicense/generate/generate_license_list.go | 101 | // https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-short-name. | COMMENT |
| LOW | internal/os/feature_detection.go | 61 | | COMMENT |
| LOW | internal/testutils/alloc.go | 1 | package testutils | COMMENT |
| LOW | .github/scripts/labeler.py | 221 | | COMMENT |
| LOW | syft/archive_cataloger_test.go | 41 | // | COMMENT |
| LOW | syft/file/resolver.go | 21 | // MetadataResolver provides file metadata lookup by location. | COMMENT |
| LOW | syft/file/resolver.go | 41 | // The implementation for this may vary, however, generally the following considerations should be made: | COMMENT |
| LOW | syft/file/cataloger/executable/macho.go | 81 | } | COMMENT |
| LOW | syft/source/snapsource/snapcraft_api.go | 101 | // isEligibleChannel determines whether a candidate channel satisfies a requested | COMMENT |
| LOW | …ft/source/directorysource/directory_source_win_test.go | 1 | //go:build windows | COMMENT |
| LOW | syft/source/ocimodelsource/registry_client.go | 41 | // maxGGUFHeaderBytes is the leading slice we range-GET from a (multi-GB) | COMMENT |
| LOW | syft/internal/fileresolver/filetree_resolver_test.go | 21 | | COMMENT |
| LOW | syft/internal/fileresolver/container_image_model.go | 21 | | COMMENT |
| LOW | syft/internal/fileresolver/path_skipper.go | 41 | } | COMMENT |
| LOW | syft/internal/fileresolver/unindexed_directory_test.go | 41 | | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 41 | "math" | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 61 | // | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 121 | // the case this was written for, a 260KB ELF declaring a compressed .symtab drove 1.3GB of allocation. | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 181 | // File.DynamicSymbols pulls the symbol version tables in behind the caller's back, via | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 201 | // re-read against it. | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 241 | } | COMMENT |
| LOW | syft/internal/elfutil/elfutil.go | 261 | var hdr [legacyZlibHeaderSize]byte | COMMENT |
| LOW | syft/internal/elfutil/elfutil_test.go | 341 | require.Error(t, err) | COMMENT |
| LOW | syft/internal/elfutil/elfutil_test.go | 421 | // here is a size claim at all. A check that sniffed for the magic instead would decode the | COMMENT |
| LOW | syft/cpe/cpe.go | 201 | | COMMENT |
| LOW | syft/format/spdxjson/spdx3_decoder_test.go | 21 | | COMMENT |
| LOW | …format/internal/cyclonedxutil/helpers/licenses_test.go | 201 | }, | COMMENT |
| LOW | …format/internal/cyclonedxutil/helpers/licenses_test.go | 221 | // { | COMMENT |
| LOW | …/internal/cyclonedxutil/helpers/external_references.go | 101 | // not a fork, and CycloneDX components are deliberately agnostic to source vs binary form (see the comments from the | COMMENT |
| LOW | …ormat/internal/spdxutil/helpers/originator_supplier.go | 21 | // | COMMENT |
| LOW | …ormat/internal/spdxutil/helpers/originator_supplier.go | 161 | // or might not be different from the originating distribution source for the package. The name of the Package Supplier | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 101 | // 6.4: Document Name | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 461 | if filesAnalyzed && packageVerificationCode == nil { | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 501 | | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 521 | FilesAnalyzed: filesAnalyzed, | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 541 | // Cardinality: optional, one | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 561 | // Purpose: List the licenses that have been declared by the authors of the package. | COMMENT |
| LOW | syft/format/common/spdxhelpers/to_format_model.go | 581 | | COMMENT |
| LOW | syft/format/table/encoder.go | 81 | // Here’s a simplified diagram of a table with a header, rows, and footer: | COMMENT |
| LOW | syft/format/syftjson/schema_test.go | 41 | // we want to strictly follow https://google.github.io/styleguide/javaguide.html#s5.3-camel-case | COMMENT |
| 107 more matches not shown… |
Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).