0.5

Adjusted Signal

0.5

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

24.5K

Stars

Language

949.4K

Lines of Code

5.3K

Files

335

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 311 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 22 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 55 finding(s).

PR Review Velocity Impact 2.3/100 · LOW

Which changes need focused human review? 335 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 3MEDIUM 32LOW 296

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 335 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block201 hits · 200 pts

Severity	File	Line	Snippet	Context
LOW	test/manifests/cmp/app/subdir/sidecar.yaml	1	# This yaml is used mainly to trigger the CMP plugin	COMMENT
LOW	test/e2e/aggregated_apiservice_test.go	21		COMMENT
LOW	test/e2e/testdata/slow-manifest/values.yaml	1	# Number of bcrypt calls performed at render time.	COMMENT
LOW	util/webhook/webhook.go	421	// 1. Optional: protocol (`http`, `https`, or `ssh`) followed by `://`	COMMENT
LOW	util/webhook/registry.go	21	// content digest. This structure is produced by registry-specific parsers	COMMENT
LOW	util/webhook/registry.go	41	func (e *RegistryEvent) OCIRepoURL() string {	COMMENT
LOW	util/webhook/dockerhub.go	21	//	COMMENT
LOW	util/webhook/dockerhub.go	141	// validateSecret verifies the shared secret carried by the request.	COMMENT
LOW	util/webhook/scm.go	21	)	COMMENT
LOW	util/metrics/kubectl/kubectl_metrics.go	21	LabelCallStatus = "call_status"	COMMENT
LOW	util/settings/resources_filter.go	41	}	COMMENT
LOW	util/settings/resources_filter.go	61	// \| Present \| Not Present \| Allowed \|	COMMENT
LOW	util/settings/settings.go	161	// ExecShells restricts which shells are allowed for `exec` and in which order they are tried	COMMENT
LOW	util/trace/meter.go	21	// metrics API, and a global would make otelgrpc/otelhttp emit rpc./http. series	COMMENT
LOW	util/trace/trace.go	141	// InitTracer initializes the trace provider and the otel grpc exporter.	COMMENT
LOW	util/test/testutil.go	361	// The new behavior is purposed to discourage relying on the returned	COMMENT
LOW	util/askpass/server.go	21	AskPassServiceServer	COMMENT
LOW	util/io/path/resolved.go	81	return ResolvedFileOrDirectoryPath(path), nil	COMMENT
LOW	util/io/path/resolved.go	101	//	COMMENT
LOW	util/io/files/tar.go	221	if strings.Contains(filepath.ToSlash(pattern), "/") {	COMMENT
LOW	util/io/files/util.go	21	//	COMMENT
LOW	util/lua/lua.go	41	var errScriptDoesNotExist = errors.New("built-in script does not exist")	COMMENT
LOW	util/db/certificate.go	41	// Pattern to match the hostname with	COMMENT
LOW	util/localconfig/localconfig.go	41	// Server is the Argo CD server address	COMMENT
LOW	util/kustomize/kustomize_test.go	661	require.NoError(t, err)	COMMENT
LOW	util/kustomize/helmwrapper.go	21	// api/internal/builtins/HelmChartInflationGenerator.go), where configHome defaults to a	COMMENT
LOW	util/kustomize/gitwrapper.go	21	// positional argument WITHOUT a `--`/`--end-of-options` separator and without rejecting refs that	COMMENT
LOW	util/helm/testdata/redis/values.yaml	1	## Bitnami Redis image version	COMMENT
LOW	util/helm/testdata/redis/values.yaml	41	## Optionally specify an array of imagePullSecrets.	COMMENT
LOW	util/helm/testdata/redis/values.yaml	61	## client label will have network access to the port Redis is listening	COMMENT
LOW	util/helm/testdata/redis/values.yaml	81	# - apiGroups:	COMMENT
LOW	util/helm/testdata/redis/values.yaml	101	persistence: {}	COMMENT
LOW	util/helm/testdata/redis/values.yaml	121	## Redis additional command line flags	COMMENT
LOW	util/helm/testdata/redis/values.yaml	141	## Redis Master resource requests and limits	COMMENT
LOW	util/helm/testdata/redis/values.yaml	201	enabled: true	COMMENT
LOW	util/helm/testdata/redis/values.yaml	221		COMMENT
LOW	util/helm/testdata/redis/values.yaml	241	## Specify the nodePort value for the LoadBalancer and NodePort service types.	COMMENT
LOW	util/helm/testdata/redis/values.yaml	261		COMMENT
LOW	util/helm/testdata/redis/values.yaml	281		COMMENT
LOW	util/helm/testdata/redis/values.yaml	301		COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	41	# pullSecrets:	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	61	## Redis password (both master and slave)	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	81	## - "redis-server"	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	161	path: /bitnami/redis/data	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	181	updateStrategy: OnDelete	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	201	## Provide any additional annotations which may be required. This can be used to	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	221	## Redis slave Liveness Probe	COMMENT
LOW	util/helm/testdata/redis/values-production.yaml	241	# requests:	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	1	## Bitnami WordPress image version	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	21	## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	41	## Last name	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	61	## ref: https://github.com/bitnami/bitnami-docker-wordpress/#smtp-configuration	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	101	##	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	121	## mariadb data Persistent Volume Storage Class	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	181	## A side effect of this will be that the backend wordpress service will be connected at port 443	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	201	## key and certificate should start with -----BEGIN CERTIFICATE----- or	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	221	## If undefined (the default) or set to null, no storageClassName spec is	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	241	## Node labels for pod assignment	COMMENT
LOW	util/helm/testdata/minio/values.yaml	41		COMMENT
LOW	util/git/client.go	81	var BuiltinGitConfigEnv []string	COMMENT
141 more matches not shown…

Self-Referential Comments22 hits · 78 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/argocd/commands/applicationset.go	39	# Create an ApplicationSet from a YAML stored in a file or at given URL	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	130	Example: ` # Create a directory app	CODE
MEDIUM⚡	cmd/argocd/commands/app.go	133	# Create a Jsonnet app	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	136	# Create a Helm app	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	139	# Create a Helm app from a Helm repo	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	142	# Create a Kustomize app	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	145	# Create a multi-source app from a manifest file	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	148	# Create a multi-source app from stdin (e.g. templated manifests in CI); metadata.name in the manifest is used	COMMENT
MEDIUM⚡	cmd/argocd/commands/app.go	151	# Create a app using a custom tool:	COMMENT
MEDIUM	cmd/argocd/commands/project.go	51	# Create a new project with name PROJECT	COMMENT
MEDIUM	cmd/argocd/commands/project.go	116	# Create a new project with name PROJECT	COMMENT
MEDIUM	cmd/argocd/commands/project.go	119	# Create a new project with name PROJECT from a file or URL to a Kubernetes manifest	COMMENT
MEDIUM	cmd/argocd/commands/project_role.go	229	# Create a project role in the "my-project" project with the name "my-role".	COMMENT
MEDIUM	cmd/argocd/commands/project_role.go	455	# Create a role associated with test-project	COMMENT
MEDIUM	util/helm/testdata/dependency/values.yaml	99	## Create a database and a database user	COMMENT
MEDIUM	util/helm/testdata/minio/values.yaml	108	## Create a bucket after minio install	COMMENT
MEDIUM	hack/generate-proto.sh	122	# This file is generated but should not be checked in.	COMMENT
MEDIUM⚡	hack/admonitions-to-alerts.sh	26	# Create a temporary file to store the converted content.	COMMENT
MEDIUM	hack/tool-versions.sh	3	# This file defines the versions of the tools that are installed in the CI	COMMENT
MEDIUM	hack/migrate-gitops-engine/replace-vendor.sh	20	# Create a backup and replace	COMMENT
MEDIUM	docs/operator-manual/argocd-cm.yaml	333	# The following methods are available:	COMMENT
MEDIUM	.github/workflows/release.yaml	347	# Create a path-prefixed tag for gitops-engine	COMMENT

Hyper-Verbose Identifiers53 hits · 53 pts

Severity	File	Line	Snippet	Context
LOW	ui/src/app/settings/components/utils.ts	1	export function convertExpiresInToSeconds(expiresIn: string): number {	CODE
LOW	…gs/components/project-details/resource-lists-panel.tsx	121	function viewSourceNamespacesInfoList(type: field, proj: Project) {	CODE
LOW	…gs/components/project-details/resource-lists-panel.tsx	186	function viewDestinationServiceAccountsInfoList(type: field, proj: Project) {	CODE
LOW	ui/src/app/resources/components/utils.ts	20	export function getManagingApplicationUrl(appName: string, appNamespace: string): string {	CODE
LOW	ui/src/app/resources/components/utils.ts	52	export function openResourceDetailsInApplication(ctx: ContextApis, resource: models.Resource, e?: React.MouseEvent) {	CODE
LOW	ui/src/app/resources/components/utils.ts	62	export function navigateToManagingApplication(ctx: ContextApis, resource: models.Resource, e?: React.MouseEvent) {	CODE
LOW	ui/src/app/shared/utils.ts	153	export function trimClusterServerProtocol(server: string): string {	CODE
LOW	…/app/shared/components/yaml-editor/resource-version.ts	17	export function hasReachedResourceVersion(live: unknown, target: string): boolean {	CODE
LOW	ui/src/app/shared/services/extensions-service.ts	41	function registerResourceExtension(component: ExtensionComponent, group: string, kind: string, tabTitle: string, opts?:	CODE
LOW	ui/src/app/shared/services/extensions-service.ts	47	function registerSystemLevelExtension(component: ExtensionComponent, title: string, path: string, icon: string) {	CODE
LOW	ui/src/app/shared/services/extensions-service.ts	59	function registerStatusPanelExtension(component: StatusPanelExtensionComponent, title: string, id: string, flyout?: Exte	CODE
LOW	ui/src/app/shared/services/extensions-service.ts	65	function registerTopBarActionMenuExt(	CODE
LOW	ui/src/app/applications/components/utils.tsx	58	export function resourceStatusToResourceNode(res: appModels.ResourceStatus): appModels.ResourceNode {	CODE
LOW	ui/src/app/applications/components/utils.tsx	108	export function getApplicationDetailsContainerClass(appName: string): string {	CODE
LOW	ui/src/app/applications/components/utils.tsx	581	export async function getResourceActionsMenuItems(resource: ResourceTreeNode, metadata: models.ObjectMeta, apis: Context	CODE
LOW	ui/src/app/applications/components/utils.tsx	883	export function getSyncRevisionLabelSuffix(repoUrl: string, targetRevision: string, revision: string, chart?: string) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1130	function isPodInitializedConditionTrue(status: any): boolean {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1304	export function getAppSetConditionCategory(condition: appModels.ApplicationSetCondition): 'error' \| 'warning' \| 'info' {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1332	export function getApplicationSetOwnerRef(application: appModels.Application) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1437	export function getHydratorSyncSourceRepoURL(sourceHydrator?: appModels.SourceHydrator): string {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1482	export function getAppDefaultSyncRevision(app?: appModels.Application) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1491	export function getAppDefaultOperationSyncRevision(app?: appModels.Application) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1510	export function getAppDefaultSyncRevisionExtra(app?: appModels.Application) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1524	export function getAppDefaultOperationSyncRevisionExtra(app?: appModels.Application) {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1869	export function formatApplicationSetProgressiveSyncStep(step: string \| undefined): string {	CODE
LOW	ui/src/app/applications/components/utils.tsx	1959	export function getApplicationLinkURLFromNode(node: any, baseHref: string): {url: string; isExternal: boolean} {	CODE
LOW	…ents/application-parameters/application-parameters.tsx	293	function getEditablePanelForSources(index: number, appSource: models.ApplicationSource): React.ReactElement {	CODE
LOW	…ents/application-parameters/application-parameters.tsx	438	function getEditablePanelForOneSource(repoAppDetails: models.RepoAppDetails, ind: number, src: models.ApplicationSou	CODE
LOW	…ts/application-details/application-resource-filter.tsx	27	export function getEffectiveResourceFilter(isApplicationSet: boolean, resourceFilter?: string[]): string[] {	CODE
LOW	…nents/application-details/application-resource-sort.ts	12	export function compareApplicationResource(a: models.ResourceStatus, b: models.ResourceStatus, key: ApplicationResourceS	CODE
LOW	…/app/applications/components/shared/app-source-edit.ts	16	export function normalizeTypeFieldsForSource(formApi: FormApi, type: models.AppSourceType, sourceIndex?: number): void {	CODE
LOW	…tion-create-panel/collapsible-multi-source-section.tsx	7	export function CollapsibleMultiSourceSection(props: {	CODE
LOW	…s/components/applications-list/applications-filter.tsx	74	function getOperationStateTitleForFilter(app: Application): OperationStateTitle {	CODE
LOW	…components/applications-list/application-sets-list.tsx	534	function onAppSetFilterPrefChanged(ctx: ContextApis, newPref: AppSetsListPreferences) {	CODE
LOW	…cations/components/applications-list/virtual-scroll.ts	10	export function useWindowScrollerPosition(scrollerRef: React.RefObject<WindowScrollerHandle \| null>, enabled: boolean, l	CODE
LOW	…cations/components/applications-list/virtual-scroll.ts	105	export function bidirectionalOverscanIndicesGetter({cellCount, overscanCellsCount, startIndex, stopIndex}: OverscanIndic	CODE
LOW	…cations/components/applications-list/virtual-scroll.ts	121	export function computeColumnWidthForIndex(containerWidth: number, columnsPerRow: number, columnIndex: number, gap: numb	CODE
LOW	docs/assets/versions.js	33	function getStableDocsUrlForCurrentPage() {	CODE
LOW	docs/assets/versions.js	51	function initializeVersionDropdown() {	CODE
LOW	…omizations/promoter.argoproj.io/PullRequest/health.lua	4	local function formatDeletingWithFinalizers(base, finalizers, catalog)	CODE
LOW	…s/promoter.argoproj.io/ChangeTransferPolicy/health.lua	4	local function formatDeletingWithFinalizers(base, finalizers, catalog)	CODE
LOW	…izations/promoter.argoproj.io/GitRepository/health.lua	4	local function formatDeletingWithFinalizers(base, finalizers, catalog)	CODE
LOW	…omizations/promoter.argoproj.io/ScmProvider/health.lua	4	local function formatDeletingWithFinalizers(base, finalizers, catalog)	CODE
LOW	…ons/promoter.argoproj.io/ClusterScmProvider/health.lua	4	local function formatDeletingWithFinalizers(base, finalizers, catalog)	CODE
LOW	resource_customizations/argoproj.io/Rollout/health.lua	71	function isWorkloadGenerationObserved(obj)	CODE
LOW	…zations/gateway.networking.k8s.io/GRPCRoute/health.lua	14	function isParentGenerationObserved(obj, parent)	CODE
LOW	…zations/gateway.networking.k8s.io/HTTPRoute/health.lua	14	function isParentGenerationObserved(obj, parent)	CODE
LOW	…izations/gateway.networking.k8s.io/TLSRoute/health.lua	67	function isParentGenerationObserved(obj, parent)	CODE
LOW	…s/gateway.envoyproxy.io/ClientTrafficPolicy/health.lua	4	function isAncestorGenerationObserved(obj, ancestor)	CODE
LOW	…/gateway.envoyproxy.io/EnvoyExtensionPolicy/health.lua	4	function isAncestorGenerationObserved(obj, ancestor)	CODE
LOW	…/gateway.envoyproxy.io/BackendTrafficPolicy/health.lua	4	function isAncestorGenerationObserved(obj, ancestor)	CODE
LOW	…ations/gateway.envoyproxy.io/SecurityPolicy/health.lua	4	function isAncestorGenerationObserved(obj, ancestor)	CODE
LOW	…ions/gateway.envoyproxy.io/EnvoyPatchPolicy/health.lua	4	function isAncestorGenerationObserved(obj, ancestor)	CODE

Hallucination Indicators4 hits · 40 pts

Severity	File	Line	Snippet	Context
CRITICAL	…ettings/components/project-details/project-details.tsx	806	formApi.values.spec.orphanedResources.ignore.map((_: Project, i: number) => (	CODE
CRITICAL	cmd/argocd/commands/app.go	2353	app.Status.SourceHydrator.CurrentOperation.SourceHydrator.DeepEquals(app.Status.SourceHydrator.LastSuccessfulOperation	CODE
CRITICAL	docs/operator-manual/user-management/zitadel.md	122	ctx.v1.user.grants.grants.forEach((claim) => {	CODE
CRITICAL	controller/appcontroller.go	1687	retryAt, err := app.Status.OperationState.Operation.Retry.NextRetryAt(state.FinishedAt.Time, state.RetryCount)	CODE

Fake / Example Data18 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	cmd/argocd/commands/admin/settings_rbac_test.go	347	assert.False(t, isGroupSubject("user@example.com"))	CODE
LOW	util/webhook/testdata/gitlab-event.json	41	"email": "user@example.com"	CODE
LOW⚡	util/clusterauth/clusterauth_test.go	227	"token": []byte("fake-token"),	CODE
LOW⚡	util/clusterauth/clusterauth_test.go	237	assert.Equal(t, "fake-token", string(created.Data["token"]))	CODE
LOW⚡	util/clusterauth/clusterauth_test.go	245	"token": []byte("fake-token"),	CODE
LOW	util/test/testutil.go	280	"name": "John Doe",	CODE
LOW	util/git/creds_test.go	724	actualId, err := DiscoverGitHubAppInstallationID(ctx, appId, "fake-key", "", org)	CODE
LOW	util/git/client_test.go	2990	Name: "John Doe",	CODE
LOW	applicationset/webhook/testdata/gitlab-event.json	41	"email": "user@example.com"	CODE
LOW	…/webhook/testdata/gitlab-merge-request-open-event.json	9	"email": "admin@example.com"	CODE
LOW	…hook/testdata/gitlab-merge-request-approval-event.json	9	"email": "admin@example.com"	CODE
LOW	applicationset/services/pull_request/github_test.go	220	{"Token, no URL", "dummy-token", "", "api.github.com"},	CODE
LOW	applicationset/services/pull_request/github_test.go	222	{"Token and URL", "dummy-token", "https://github.example.com", "github.example.com"},	CODE
LOW	server/server_test.go	164	nonExistentToken := "fake-token"	CODE
LOW	docs/bug_triage.md	52	the "placeholder" classification discussed above), changes to the classification	CODE
LOW	.github/workflows/ci-build.yaml	345	git config --global user.name "John Doe"	CODE
LOW	.github/workflows/ci-build.yaml	423	git config --global user.name "John Doe"	CODE
LOW	.github/workflows/ci-build.yaml	804	git config --global user.name "John Doe"	CODE

AI Slop Vocabulary7 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/operator-manual/argocd-cmd-params-cm.yaml	476	# Enable self-service notifications config. Used in conjunction with apps-in-any-namespace. (default "false")	COMMENT
MEDIUM	…ublic.ecr.aws_docker_library_haproxy_3.0.8-alpine.html	2985	a 'no_proxy' environment variable set. For the aforementioned reasons the	CODE
MEDIUM	…ublic.ecr.aws_docker_library_haproxy_3.0.8-alpine.html	2985	a 'no_proxy' environment variable set. For the aforementioned reasons the	CODE
MEDIUM	…ublic.ecr.aws_docker_library_haproxy_3.0.8-alpine.html	2985	a 'no_proxy' environment variable set. For the aforementioned reasons the	CODE
MEDIUM	…ublic.ecr.aws_docker_library_haproxy_3.0.8-alpine.html	2985	a 'no_proxy' environment variable set. For the aforementioned reasons the	CODE
MEDIUM	…ublic.ecr.aws_docker_library_haproxy_3.0.8-alpine.html	2985	a 'no_proxy' environment variable set. For the aforementioned reasons the	CODE
MEDIUM	.github/workflows/release.yaml	407	# confirm holistic accuracy"), and automating them would assert a review	COMMENT

AI Response Leakage2 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	…xamples/design-doc/git-files-literal-fasttemplate.yaml	18	# In this example, the `clusters.json` file is json list of structured data:	COMMENT
HIGH	…licationset/examples/design-doc/git-files-literal.yaml	18	# In this example, the `clusters.json` file is json list of structured data:	COMMENT

Structural Annotation Overuse9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW⚡	util/tls/tls_test.go	844	// Step 1: get config from the new flag helper (Layer 1).	COMMENT
LOW⚡	util/tls/tls_test.go	848	// Step 2: simulate the component's RunE override using OR semantics (the fix).	COMMENT
LOW	util/git/client.go	2163	// Step 1: Is it UNTRACKED? (file is new to git)	COMMENT
LOW	docs/operator-manual/managed-by-url.md	25	### Step 1: Create Parent Application	COMMENT
LOW	docs/operator-manual/managed-by-url.md	50	### Step 2: Create Child Application in Git Repository	COMMENT
LOW	…cs/operator-manual/applicationset/Progressive-Syncs.md	143	- env-dev # Step 1: Created first, deleted last	CODE
LOW	…cs/operator-manual/applicationset/Progressive-Syncs.md	148	- env-prod # Step 2: Created second, deleted first	CODE
LOW	docs/developer-guide/releasing.md	43	### Step 1 - Update Version and Manifest	COMMENT
LOW	docs/developer-guide/releasing.md	57	### Step 2 - Tag Release Branch	COMMENT

Redundant / Tautological Comments7 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	test/remote/run-e2e-remote.sh	18	# Set ARGOCD_E2E_NAMESPACE to the namespace the Argo CD we're testing against is	COMMENT
LOW	util/helm/testdata/dependency/values.yaml	180	## Set this to true in order to enable TLS on the ingress record	COMMENT
LOW⚡	hack/admonitions-to-alerts.sh	29	# Read the file line by line.	COMMENT
LOW⚡	hack/admonitions-to-alerts.sh	32	# Check if the line starts with an admonition (!!!).	COMMENT
LOW	hack/migrate-gitops-engine/update-dockerfile.sh	8	# Check if Dockerfile exists	COMMENT
LOW	.github/workflows/release.yaml	73	# Check if latest tag is a pre-release	COMMENT
LOW	.github/workflows/cherry-pick-single.yml	82	# Check if target branch exists	COMMENT

Verbosity Indicators5 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW⚡	util/tls/tls_test.go	844	// Step 1: get config from the new flag helper (Layer 1).	COMMENT
LOW⚡	util/tls/tls_test.go	848	// Step 2: simulate the component's RunE override using OR semantics (the fix).	COMMENT
LOW	util/git/client.go	2163	// Step 1: Is it UNTRACKED? (file is new to git)	COMMENT
LOW	applicationset/services/scm_provider/gitlab_test.go	1829	// We need to check if the request is for listing branches (returns array) or getting one (returns object)	COMMENT
LOW	gitops-engine/pkg/utils/kube/resource_ops.go	278	// not want. We need to check if the namespace exists, before know if it is safe to run this	COMMENT

Decorative Section Separators2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/remote/run-e2e-remote.sh	40	## ====================================================	COMMENT
MEDIUM	test/remote/run-e2e-remote.sh	42	## ====================================================	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	docs/developer-guide/development-cycle.md	66	> There are a few non-obvious assets that are auto-generated. You should not change the autogenerated assets, as they wi	CODE

Slop Phrases2 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	util/session/sessionmanager.go	270	// Don't forget to validate the alg is what you expect:	COMMENT
MEDIUM	docs/operator-manual/application.yaml	11	# Alternatively, you can use background cascading deletion	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	util/cert/cert.go	155	// TODO: Implement error heuristics	COMMENT
LOW	util/git/creds.go	977	// TODO: implement getting email instead of just username.	COMMENT

argoproj/argo-cd

Open-Source Code Quality, Security and Technical Debt Review