1.8

Adjusted Signal

1.8

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

14.5K

Stars

Java

Language

445.3K

Lines of Code

4.3K

Files

453

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 408 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.2/100 · LOW

Are imports declared and package/API names verified? 45 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 54 finding(s).

PR Review Velocity Impact 8.3/100 · LOW

Which changes need focused human review? 453 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 34HIGH 0MEDIUM 7LOW 412

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 453 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators34 hits · 370 pts

Severity	File	Line	Snippet	Context
CRITICAL	…eduler/plugin/registry/etcd/EtcdRegistryEventTest.java	43	KeyValue deletedKeyValue = new KeyValue(io.etcd.jetcd.api.KeyValue.newBuilder()	CODE
CRITICAL	…eduler/plugin/registry/etcd/EtcdRegistryEventTest.java	54	new KeyValue(io.etcd.jetcd.api.KeyValue.getDefaultInstance(), ByteSequence.EMPTY),	CODE
CRITICAL	…eduler/plugin/registry/etcd/EtcdRegistryEventTest.java	68	new KeyValue(io.etcd.jetcd.api.KeyValue.getDefaultInstance(), ByteSequence.EMPTY),	CODE
CRITICAL	…eduler/plugin/registry/etcd/EtcdRegistryEventTest.java	82	return new KeyValue(io.etcd.jetcd.api.KeyValue.newBuilder()	CODE
CRITICAL	…dolphinscheduler/plugin/alert/feishu/FeiShuSender.java	89	if (org.apache.commons.lang3.StringUtils.isBlank(result)) {	CODE
CRITICAL	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	177	org.apache.commons.lang3.StringUtils.isBlank(secret) ? url : generateSignedUrl(), msg);	CODE
CRITICAL	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	213	if (org.apache.commons.lang3.StringUtils.isBlank(msgType)) {	CODE
CRITICAL	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	243	if (org.apache.commons.lang3.StringUtils.isNotBlank(keyword)) {	CODE
CRITICAL⚡	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	261	if (org.apache.commons.lang3.StringUtils.isNotBlank(keyword)) {	CODE
CRITICAL⚡	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	266	if (org.apache.commons.lang3.StringUtils.isNotBlank(atMobiles)) {	CODE
CRITICAL⚡	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	273	if (org.apache.commons.lang3.StringUtils.isNotBlank(atDingtalkIds)) {	CODE
CRITICAL	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	296	org.apache.commons.lang3.StringUtils.isNotBlank(atMobiles) ? atMobiles.split(",")	CODE
CRITICAL	…hinscheduler/plugin/alert/dingtalk/DingTalkSender.java	299	org.apache.commons.lang3.StringUtils.isNotBlank(atDingtalkIds) ? atDingtalkIds.split(",")	CODE
CRITICAL	…source/api/datasource/AbstractDataSourceProcessor.java	72	if (com.google.common.net.InetAddresses.isInetAddress(host)) {	CODE
CRITICAL	…inscheduler/plugin/task/api/TaskPluginManagerTest.java	45	IllegalArgumentException exception = org.junit.jupiter.api.Assertions.assertThrows(	CODE
CRITICAL	…/plugin/task/api/utils/PropertySensitiveUtilsTest.java	141	String json = org.apache.dolphinscheduler.common.utils.JSONUtils.toJsonString(	CODE
CRITICAL	…/plugin/task/api/utils/PropertySensitiveUtilsTest.java	143	List<Property> parsed = org.apache.dolphinscheduler.common.utils.JSONUtils.toList(json, Property.class);	CODE
CRITICAL	…heduler/plugin/task/api/am/YarnApplicationManager.java	89	runCmd = org.apache.dolphinscheduler.common.utils.OSUtils.getSudoCmd(tenantCode, runCmd);	CODE
CRITICAL	…heduler/plugin/task/api/am/YarnApplicationManager.java	91	org.apache.dolphinscheduler.common.utils.OSUtils.exeCmd(runCmd);	CODE
CRITICAL	…inscheduler/plugin/storage/cos/CosStorageOperator.java	327	String fileExtension = com.google.common.io.Files.getFileExtension(resourceMetaData.getResourceAbsolutePath());	CODE
CRITICAL	…inscheduler/plugin/storage/obs/ObsStorageOperator.java	262	String fileExtension = com.google.common.io.Files.getFileExtension(resourceMetaData.getResourceAbsolutePath());	CODE
CRITICAL	…api/service/ProjectWorkerGroupRelationServiceTest.java	186	Mockito.doThrow(new org.apache.dolphinscheduler.api.exceptions.ServiceException(	CODE
CRITICAL	…heduler/api/service/WorkflowDefinitionServiceTest.java	838	new org.apache.dolphinscheduler.service.exceptions.ServiceException(	CODE
CRITICAL	…phinscheduler/api/controller/DataSourceController.java	215	public Result<Boolean> connectDataSource(@io.swagger.v3.oas.annotations.parameters.RequestBody(description = "dataSo	CODE
CRITICAL	…olphinscheduler/api/controller/ExecutorController.java	355	if (org.apache.commons.collections4.CollectionUtils.isNotEmpty(errorMessage)) {	CODE
CRITICAL	…uler/api/service/impl/WorkflowInstanceServiceImpl.java	813	if (org.apache.commons.collections4.CollectionUtils.isEmpty(subWorkflowInstanceIds)) {	CODE
CRITICAL	…cheduler/api/service/impl/TaskInstanceServiceImpl.java	284	if (org.apache.commons.collections4.CollectionUtils.isEmpty(needToDeleteTaskInstances)) {	CODE
CRITICAL⚡	…g/apache/dolphinscheduler/poc/YarnClientAspectMoc.java	35	@AfterReturning(pointcut = "execution(ApplicationId org.apache.dolphinscheduler.poc.YarnClientMoc.submitApplication(	CODE
CRITICAL⚡	…g/apache/dolphinscheduler/poc/YarnClientAspectMoc.java	41	@AfterReturning(pointcut = "cflow(execution(ApplicationId org.apache.dolphinscheduler.poc.YarnClientMoc.submitApplic	CODE
CRITICAL⚡	…g/apache/dolphinscheduler/poc/YarnClientAspectMoc.java	43	"&& !within(YarnClientAspect) && execution(ApplicationId org.apache.dolphinscheduler.poc.YarnClientMoc.creat	CODE
CRITICAL	…/org/apache/dolphinscheduler/aop/YarnClientAspect.java	83	@AfterReturning(pointcut = "cflow(execution(ApplicationId org.apache.hadoop.yarn.client.api.impl.YarnClientImpl.subm	CODE
CRITICAL	…/org/apache/dolphinscheduler/aop/YarnClientAspect.java	85	"&& !within(YarnClientAspect) && execution(ApplicationReport org.apache.hadoop.yarn.client.api.impl.YarnClie	CODE
CRITICAL	…rg/apache/dolphinscheduler/common/utils/FileUtils.java	160	org.apache.commons.io.FileUtils.deleteQuietly(new File(filename));	CODE
CRITICAL	…rg/apache/dolphinscheduler/common/utils/FileUtils.java	324	org.apache.commons.io.FileUtils.copyInputStreamToFile(inputStream, new File(destFilename));	CODE

Over-Commented Block333 hits · 333 pts

Severity	File	Line	Snippet	Context
LOW	.asf.yaml	1	#	COMMENT
LOW	.pre-commit-config.yaml	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	.licenserc.yaml	1	# Licensed to Apache Software Foundation (ASF) under one or more contributor	COMMENT
LOW	…registry-zookeeper/src/test/resources/application.yaml	1	#	COMMENT
LOW	…ry-jdbc/src/test/resources/application-postgresql.yaml	1	#	COMMENT
LOW	…egistry-jdbc/src/test/resources/application-mysql.yaml	1	#	COMMENT
LOW	…uler-registry-etcd/src/test/resources/application.yaml	1	#	COMMENT
LOW	…duler-alert-server/src/test/resources/application.yaml	1	#	COMMENT
LOW	…hinscheduler-alert-server/src/main/bin/jvm_args_env.sh	1	#	COMMENT
LOW	…rt/dolphinscheduler-alert-server/src/main/bin/start.sh	1	#!/bin/bash	COMMENT
LOW	…duler-alert-server/src/main/resources/application.yaml	1	#	COMMENT
LOW	…er-alert-script/src/test/script/shell/scriptExample.sh	1	#!/bin/bash	COMMENT
LOW	…inscheduler-alert-script/src/test/script/shell/test.sh	1	#	COMMENT
LOW	tools/dependencies/check-LICENSE.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/dependencies/check-LICENSE.sh	41	# and add the dependency to known-dependencies.txt.	COMMENT
LOW	tools/release/release.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/requirements.txt	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/user.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/git.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/pull_request.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/__init__.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/changelog.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	tools/release/github/resp_get.py	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	…sources/docker/task-emr-serverless/docker-compose.yaml	1	#	COMMENT
LOW	…t/resources/docker/datasource-hive/docker-compose.yaml	1	#	COMMENT
LOW	…/resources/docker/datasource-mysql/docker-compose.yaml	1	#	COMMENT
LOW	…st/resources/docker/datasource-mysql/download-mysql.sh	1	#	COMMENT
LOW	…ources/docker/datasource-sqlserver/docker-compose.yaml	1	#	COMMENT
LOW	…se/src/test/resources/docker/basic/docker-compose.yaml	1	#	COMMENT
LOW	…urces/docker/datasource-clickhouse/docker-compose.yaml	1	#	COMMENT
LOW	…urces/docker/datasource-postgresql/docker-compose.yaml	1	#	COMMENT
LOW	…c/test/resources/docker/ldap-login/docker-compose.yaml	1	#	COMMENT
LOW	…/src/test/resources/docker/ldap-login/application.yaml	1	#	COMMENT
LOW	…/src/test/resources/docker/ldap-login/application.yaml	221	# Traffic control, if you turn on this config, the maximum number of request/s will be limited.	COMMENT
LOW	…/test/resources/docker/oidc-login/wait-and-start-ds.sh	1	#!/bin/bash	COMMENT
LOW	…c/test/resources/docker/oidc-login/docker-compose.yaml	1	#	COMMENT
LOW	…/src/test/resources/docker/oidc-login/application.yaml	1	#	COMMENT
LOW	…/test/resources/docker/file-manage/docker-compose.yaml	1	#	COMMENT
LOW	…rc/test/resources/docker/task-grpc/docker-compose.yaml	1	#	COMMENT
LOW	deploy/terraform/aws/s3-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/key-pair-main.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/provider-main.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/s3-outputs.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-standalone.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-api.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/network-main.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/zookeeper-output.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/rds-main.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/network-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/zookeeper-main.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/rds-output.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-worker.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/os-versions.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-output.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/zookeeper-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/rds-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-alert.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/provider-variables.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
LOW	deploy/terraform/aws/dolphinscheduler-master.tf	1	# Licensed to the Apache Software Foundation (ASF) under one	COMMENT
273 more matches not shown…

Hyper-Verbose Identifiers54 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	…ugin/registry/jdbc/server/JdbcRegistryDataManager.java	49	public class JdbcRegistryDataManager	CODE
LOW	tools/release/github/pull_request.py	50	def get_merged_detail_by_milestone(self, milestone: str) -> List[Dict]:	CODE
LOW	tools/release/github/pull_request.py	66	def search_merged_by_milestone(self, milestone: str) -> List[Dict]:	CODE
LOW	…nscheduler-ui/src/service/modules/alert-group/index.ts	21	export function queryAlertGroupListPaging(params: ListReq): any {	CODE
LOW	…er-ui/src/service/modules/workflow-definition/index.ts	50	export function queryWorkflowDefinitionList(projectCode: number): any {	CODE
LOW	…er-ui/src/service/modules/workflow-definition/index.ts	87	export function getTaskListByDefinitionCodes(	CODE
LOW	…er-ui/src/service/modules/workflow-definition/index.ts	105	export function queryWorkflowDefinitionByName(	CODE
LOW	…er-ui/src/service/modules/workflow-definition/index.ts	134	export function queryWorkflowDefinitionByCode(	CODE
LOW	…er-ui/src/service/modules/workflow-definition/index.ts	237	export function viewWorkflowDefinitionVariables(	CODE
LOW⚡	dolphinscheduler-ui/src/service/modules/azure/index.ts	21	export function queryDataFactoryFactories(): any {	CODE
LOW⚡	dolphinscheduler-ui/src/service/modules/azure/index.ts	28	export function queryDataFactoryResourceGroups(): any {	CODE
LOW⚡	dolphinscheduler-ui/src/service/modules/azure/index.ts	35	export function queryDataFactoryPipelines(params: DataFactoryReq): any {	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	29	export function queryWorkflowInstanceListPaging(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	40	export function batchDeleteWorkflowInstanceByIds(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	51	export function queryParentInstanceBySubId(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	62	export function querySubWorkflowInstanceByTaskCode(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	73	export function queryTopNLongestRunningWorkflowInstance(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	84	export function queryWorkflowInstanceById(	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	106	export function deleteWorkflowInstanceById(id: number, code: number): any {	CODE
LOW	…ler-ui/src/service/modules/workflow-instances/index.ts	113	export function queryTaskListByWorkflowId(id: number, code: number): any {	CODE
LOW	…phinscheduler-ui/src/service/modules/projects/index.ts	29	export function queryProjectWithAuthorizedLevelListPaging(	CODE
LOW	…phinscheduler-ui/src/service/modules/projects/index.ts	55	export function queryProjectCreatedAndAuthorizedByUser(): any {	CODE
LOW	…phinscheduler-ui/src/service/modules/projects/index.ts	77	export function queryProjectWithAuthorizedLevel(params: UserIdReq): any {	CODE
LOW	…phinscheduler-ui/src/service/modules/projects/index.ts	107	export function queryAllProjectListForDependent(): any {	CODE
LOW	…hinscheduler-ui/src/service/modules/resources/index.ts	93	export function queryResourceByProgramType(	CODE
LOW	…er-ui/src/service/modules/projects-preference/index.ts	25	export function queryProjectPreferenceByProjectCode(projectCode: number): any {	CODE
LOW	…er-ui/src/service/modules/projects-preference/index.ts	43	export function updateProjectPreferenceState(	CODE
LOW	…nscheduler-ui/src/service/modules/dynamic-dag/index.ts	20	export function queryDynamicTaskCategories(): any {	CODE
LOW	…nscheduler-ui/src/service/modules/dynamic-dag/index.ts	27	export function queryDynamicTaskResourceList(categories: string): any {	CODE
LOW	…hinscheduler-ui/src/service/modules/schedules/index.ts	66	export function updateScheduleByWorkflowDefinitionCode(	CODE
LOW	…-ui/src/service/modules/projects-worker-group/index.ts	21	export function queryWorkerGroupsByProjectCode(projectCode: number): any {	CODE
LOW	…nscheduler-ui/src/service/modules/data-source/index.ts	28	export function queryDataSourceListPaging(params: ListReq): any {	CODE
LOW	…nscheduler-ui/src/service/modules/data-source/index.ts	132	export function getDatasourceDatabasesById(datasourceId: number): any {	CODE
LOW	…nscheduler-ui/src/service/modules/data-source/index.ts	155	export function getDatasourceTableColumnsById(	CODE
LOW	dolphinscheduler-ui/src/service/modules/audit/index.ts	36	export function queryAuditLogOperationType(): any {	CODE
LOW	…uler-ui/src/service/modules/projects-analysis/index.ts	36	export function countWorkflowInstanceState(params: StateReq): any {	CODE
LOW	…uler-ui/src/service/modules/projects-analysis/index.ts	67	export function queryListErrorCommandPaging(params: ListReq): any {	CODE
LOW	…cheduler-ui/src/service/modules/worker-groups/index.ts	21	export function queryAllWorkerGroupsPaging(params: ListReq): any {	CODE
LOW	…nscheduler-ui/src/service/modules/environment/index.ts	43	export function queryEnvironmentListPaging(params: ListReq): any {	CODE
LOW	…inscheduler-ui/src/service/modules/task-group/index.ts	36	export function queryTaskGroupListPagingByProjectCode(params: ListReq): any {	CODE
LOW	…inscheduler-ui/src/service/modules/task-group/index.ts	76	export function queryTaskListInTaskGroupQueueById(params: ListReq): any {	CODE
LOW	…inscheduler-ui/src/service/modules/task-group/index.ts	84	export function modifyTaskGroupQueuePriority(	CODE
LOW	…phinscheduler-ui/src/service/modules/lineages/index.ts	28	export function queryLineageByWorkFlowName(projectCode: ProjectCodeReq): any {	CODE
LOW	…phinscheduler-ui/src/service/modules/lineages/index.ts	35	export function queryLineageByWorkFlowCode(	CODE
LOW	…ler-ui/src/service/modules/projects-parameter/index.ts	26	export function queryProjectParameterListPaging(	CODE
LOW	…ler-ui/src/service/modules/projects-parameter/index.ts	37	export function queryProjectParameterByCode(	CODE
LOW	…ler-ui/src/service/modules/projects-parameter/index.ts	69	export function deleteProjectParameterByCode(	CODE
LOW	…ler-ui/src/service/modules/projects-parameter/index.ts	80	export function deleteProjectParameterByCodes(	CODE
LOW	…scheduler-ui/src/service/modules/alert-plugin/index.ts	28	export function queryAlertPluginInstanceListPaging(params: ListReq): any {	CODE
LOW	…scheduler-ui/src/service/modules/alert-plugin/index.ts	36	export function createAlertPluginInstance(data: PluginInstanceReq): any {	CODE
LOW	…scheduler-ui/src/service/modules/alert-plugin/index.ts	60	export function queryAlertPluginInstanceList(): any {	CODE
LOW	…scheduler-ui/src/service/modules/alert-plugin/index.ts	74	export function updateAlertPluginInstance(	CODE
LOW	…scheduler-ui/src/service/modules/alert-plugin/index.ts	85	export function deleteAlertPluginInstance(id: IdReq): any {	CODE
LOW	…/views/security/user-manage/components/use-password.ts	46	function validatePasswordStartWith(	CODE

Structural Annotation Overuse10 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	dolphinscheduler-api-test/README.md	77	### Step 1: Build the Local Docker Image	COMMENT
LOW	dolphinscheduler-api-test/README.md	90	### Step 2: Run the Test Environment with Docker Compose	COMMENT
LOW	dolphinscheduler-api-test/README.md	105	### Step 3: Run the API Test from your IDE	COMMENT
LOW	…docs/en/guide/security/oidc-local-environment-setup.md	10	## Step 1: Start Keycloak with a Pre-configured Realm	COMMENT
LOW	…docs/en/guide/security/oidc-local-environment-setup.md	29	## Step 2: Access and Verify Keycloak	COMMENT
LOW	…docs/en/guide/security/oidc-local-environment-setup.md	36	## Step 3: Configure DolphinScheduler API Server	COMMENT
LOW	…docs/en/guide/security/oidc-local-environment-setup.md	71	## Step 4: Start DolphinScheduler Services	COMMENT
LOW	…docs/en/guide/security/oidc-local-environment-setup.md	81	## Step 5: Start Frontend Server	COMMENT
LOW⚡	…apache/dolphinscheduler/plugin/task/java/JavaTask.java	85	// Step 1: judge if is java or jar run type.	COMMENT
LOW⚡	…apache/dolphinscheduler/plugin/task/java/JavaTask.java	92	// Step 3: to run the command	COMMENT

Fake / Example Data11 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	…src/test/resources/docker/oidc-login/realm-export.json	150	"email": "admin@example.com",	CODE
LOW	…src/test/resources/docker/oidc-login/realm-export.json	167	"email": "user@example.com",	CODE
LOW	…-tools/src/test/resources/3.0.0_schema/mysql_3.0.0.sql	1269	VALUES(15, 'mapping_columns', 'group', '$t(mapping_columns)', NULL, '[{"field":"src_field","props":{"placeholder":"Pleas	CODE
LOW	…s/src/test/resources/3.0.0_schema/postgresql_3.0.0.sql	1237	VALUES(15, 'mapping_columns', 'group', '$t(mapping_columns)', NULL, '[{"field":"src_field","props":{"placeholder":"Pleas	CODE
LOW	…grade/3.0.0_schema/postgresql/dolphinscheduler_dml.sql	69	INSERT INTO t_ds_dq_rule_input_entry (id, field, "type", title, "value", "options", placeholder, option_source_type, val	CODE
LOW	…ql/upgrade/3.0.0_schema/mysql/dolphinscheduler_dml.sql	170	VALUES(15, 'mapping_columns', 'group', '$t(mapping_columns)', NULL, '[{"field":"src_field","props":{"placeholder":"Pleas	CODE
LOW	…r/api/security/impl/pwd/PasswordAuthenticatorTest.java	70	mockUser.setEmail("test@test.com");	CODE
LOW	…/dolphinscheduler/api/service/UiPluginServiceTest.java	92	String placeholder = arrayNode.path(0).path("props").path("placeholder").asText();	CODE
LOW	…heduler-api/src/main/resources/static/shell/shell.json	46	"placeholder": "task_components.node_name_tips",	CODE
LOW	…ache/dolphinscheduler/spi/params/base/ParamsProps.java	48	@JsonProperty("placeholder")	CODE
LOW	dolphinscheduler-ui/public/lodash.min.js	75	i.delete(t),p}function gi(n){return Ls(Vi(n,X,_o),n+"")}function yi(n){return de(n,Pc,Is)}function di(n){return de(n,q	CODE

Self-Referential Comments4 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/terraform/aws/key-pair-main.tf	24	# Create the Key Pair	COMMENT
MEDIUM	deploy/terraform/aws/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	…lphinscheduler-api/src/main/resources/application.yaml	251	auto-create: false # Create a DS user if not found? Default: false	CODE
MEDIUM	…-standalone-server/src/main/resources/application.yaml	165	auto-create: false # Create a DS user if not found? Default: false	CODE

Slop Phrases3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/src/test/resources/docker/ldap-login/application.yaml	142	# The certificate may be multi-line, you can use `\|-` for ease	COMMENT
MEDIUM	…lphinscheduler-api/src/main/resources/application.yaml	261	# The certificate may be multi-line, you can use `\|-` for ease	COMMENT
MEDIUM	…-standalone-server/src/main/resources/application.yaml	176	# The certificate may be multi-line, you can use `\|-` for ease	COMMENT

Verbosity Indicators2 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW⚡	…apache/dolphinscheduler/plugin/task/java/JavaTask.java	85	// Step 1: judge if is java or jar run type.	COMMENT
LOW⚡	…apache/dolphinscheduler/plugin/task/java/JavaTask.java	92	// Step 3: to run the command	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/actions/auto-assign/auto-assign.yml	18	# Set addAssignees to 'author' to set the PR creator as the assignee.	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	tools/release/github/changelog.py	98		CODE

apache/dolphinscheduler

Open-Source Code Quality, Security and Technical Debt Review