The official build framework for the Armbian Linux distribution. This repository contains the complete toolchain and scripts required to compile custom OS images from source, including kernel configuration, U-Boot handling, and board-specific tweaks for various ARM and ARM64 single-board computers.
This report summarizes scanner evidence for armbian/build, a Shell project with 5,462 GitHub stars. SynthScan examined 61,509 lines of code across 527 source files, recording 800 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 24.1 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 685 finding(s).
Are imports declared and package/API names verified? 8 finding(s).
Are wrappers, guards, and repeated structures necessary? 160 finding(s).
Which changes need focused human review? 800 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 800 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compile.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | config/sources/mainline-kernel.conf.sh | 4 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | …sources/vendors/mekotronics/mekotronics-rk3588.conf.sh | 4 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | …sources/vendors/mekotronics/mekotronics-rk3588.conf.sh | 6 | # This file is SOURCED by the Mekotronics board files, and thus has the same restrictions as board files. | COMMENT |
| MEDIUM | …ources/vendors/mekotronics/mekotronics-rk3588.hooks.sh | 4 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/lvm.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/lvm.sh | 55 | # Create the PV VG and VOL | COMMENT |
| MEDIUM | extensions/jethub-burn.sh | 7 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/uwe5622-allwinner.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/gateway-dk-ask.sh | 107 | # This function is not in artifact-kernel.sh's extension_hooks_to_hash, so its non-opts wiring | COMMENT |
| MEDIUM | extensions/kernel-debug-tiers.sh | 7 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/uboot-binman-fix-pkg-resources.sh | 9 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | extensions/uboot-fix-pylibfdt-swig.sh | 9 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | extensions/allwinner-kernel-bump.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/image-output-oowow.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/syterkit-allwinner.sh | 5 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/ccache.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/sophgo-sg200x-aic8800.sh | 9 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | extensions/mtkflash.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/rkdevflash.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/rkusbboot.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/xorg-lima-serverflags.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/image-output-vhd-azure.sh | 5 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/sysrq-serial-trigger.sh | 7 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/gen-sample-extension-docs.sh | 103 | # This file is auto-generated from and by the build system itself. | COMMENT |
| MEDIUM | extensions/interactive-shell.sh | 5 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/nicod-armbian-gaming.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/u-boot-menu.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/grub-with-dtb.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/uefi-edk2-rk3588.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/bluetooth-hciattach.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | …s/initramfs-usb-gadget-ums/initramfs-usb-gadget-ums.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | …itramfs-usb-gadget-ums/init-premount/usb-gadget-ums.sh | 5 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | extensions/image-output-sophgo-emmc-installer/mkcimg.py | 4 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | …o-emmc-installer/image-output-sophgo-emmc-installer.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | extensions/cloud-init/cloud-init.sh | 6 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | …ages/bsp/usb-gadget-network/setup-usbgadget-network.sh | 30 | # Create an usb gadet configuration | COMMENT |
| MEDIUM | …s/bsp/common/usr/lib/armbian/armbian-led-state-save.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | …sp/common/usr/lib/armbian/armbian-led-state-restore.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | …mmon/etc/profile.d/armbian-check-first-login-reboot.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | …/bsp/common/etc/profile.d/armbian-check-first-login.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | packages/bsp/common/etc/profile.d/armbian-ssh-title.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | …/etc/profile.d/armbian-activate-profile-sync-daemon.sh | 5 | # This file is licensed under the terms of the GNU General Public | COMMENT |
| MEDIUM | lib/library-functions.sh | 2 | # This file is/was autogenerated by lib/tools/gen-library.sh; don't modify manually | COMMENT |
| MEDIUM | lib/library-functions.sh | 1152 | # This file is/was autogenerated by lib/tools/gen-library.sh; don't modify manually | COMMENT |
| MEDIUM | lib/single.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/autopatch-devicetree-makefile.py | 4 | # This file is a part of the Armbian Build Framework https://github.com/armbian/build/ | COMMENT |
| MEDIUM | lib/tools/shellcheck.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/aggregation.py | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/git-to-patches.py | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/shellfmt.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/call-stack-analyze.py | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/patching.py | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/gen-library.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/gen-library.sh | 24 | # This file is/was autogenerated by ${0}; don't modify manually | COMMENT |
| MEDIUM | lib/tools/gen-library.sh | 50 | # This file is/was autogenerated by ${0}; don't modify manually | COMMENT |
| MEDIUM | lib/tools/index-opensearch.py | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| MEDIUM | lib/tools/index-opensearch.py | 32 | # Create the OpenSearch client. | COMMENT |
| MEDIUM | lib/tools/index-opensearch.py | 35 | # Create an index with non-default settings. | COMMENT |
| MEDIUM | lib/tools/oras.sh | 7 | # This file is a part of the Armbian Build Framework | COMMENT |
| 162 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | compile.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/repository/repo.sh | 121 | # Read aptly output line by line and parse properly | COMMENT |
| LOW | tools/repository/repo.sh | 621 | # Main command dispatcher | COMMENT |
| LOW | tools/repository/cleanup-debs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/repository/cleanup-debs.sh | 21 | # Usage: | COMMENT |
| LOW | config/bootenv/onecloud.txt | 1 | # console: | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 41 | # setenv videoconfig "video=HDMI-A-1:1280x800@60" | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 61 | # 1920x1080 50hz (1080P) without monitor data using generic information (1080p 50hz-noedid) | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 81 | # ----------------------------------------------- | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 101 | # setenv videoconfig "video=HDMI-A-1:1280x720@60" | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 121 | # 800x480 without monitor data using generic information (ODROID 7") | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 141 | # - DVI Mode (disables sound over HDMI as per DVI compat) | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 161 | # | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 181 | # not. | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 201 | setenv hdmi_tx_amp_lvl "31" | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 221 | # TMDS data pre-emphasis level control. | COMMENT |
| LOW | config/bootscripts/boot-odroid-xu4.ini | 241 | # Hardkernel default hdmi_clk_amp_lvl = 31 (1410 mVdiff) | COMMENT |
| LOW | config/bootscripts/boot-odroid-n2.ini | 21 | setenv display_autodetect "true" | COMMENT |
| LOW | config/bootscripts/boot-odroid-n2.ini | 41 | # "2160p25hz" | 3840x2160 Progressive 25Hz | COMMENT |
| LOW | config/bootscripts/boot-odroid-n2.ini | 81 | setenv max_freq_a53 "1908" | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 1 | ODROIDC2-UBOOT-CONFIG | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 21 | setenv display_autodetect "true" | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 41 | setenv m "1080p60hz" # Progressive 60Hz | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 61 | # setenv m "800x600p60hz" | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 81 | # HDMI BPP Mode | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 101 | COMMENT | |
| LOW | config/bootscripts/boot-odroid-c2.ini | 121 | # MicroSD Card Detection enable/disable | COMMENT |
| LOW | config/bootscripts/boot-odroid-c2.ini | 141 | # setenv maxcpus "3" | COMMENT |
| LOW | extensions/lvm.sh | 1 | # @description Places the root filesystem on an LVM logical volume. Creates a PV/VG/LV on the root partition (`lvm2`), s | COMMENT |
| LOW | extensions/r8125-dkms.sh | 1 | # @description Installs Realtek's official `r8125` (v9.016.01) 2.5GbE DKMS driver and blacklists the buggy in-kernel `r8 | COMMENT |
| LOW | extensions/wayland-sessions-mask.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/v4l2loopback-dkms.sh | 21 | fi | COMMENT |
| LOW | extensions/arm64-compat-vdso.sh | 1 | # @description Builds the arm64 kernel with `CONFIG_COMPAT` and `CONFIG_COMPAT_VDSO`, letting a host on this kernel run | COMMENT |
| LOW | extensions/uboot-mainline-mmc-env-storage.sh | 1 | # @description Gives SPI-less boards a persistent mainline U-Boot environment on the eMMC/SD card. A matching `/etc/fw_e | COMMENT |
| LOW | extensions/uboot-mainline-mmc-env-storage.sh | 21 | # u-boot.bin is written from LBA 1 and runs ~0.8-1 MiB contiguously. | COMMENT |
| LOW | extensions/gateway-dk-ask.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/gateway-dk-ask.sh | 21 | declare -g FMLIB_REPO="https://github.com/nxp-qoriq/fmlib.git" | COMMENT |
| LOW | extensions/gateway-dk-ask.sh | 101 | # Runs during custom_kernel_config — AFTER patching (which does git reset + git clean), | COMMENT |
| LOW | extensions/gateway-dk-ask.sh | 281 | # Synthesize the kernel-side overlay patches from pinned upstream sources ($1 = dest dir): | COMMENT |
| LOW | extensions/gateway-dk-ask.sh | 421 | declare manifest="${patch_dst}/.ask-staged" | COMMENT |
| LOW | extensions/kernel-debug-tiers.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/kernel-debug-tiers.sh | 21 | # | COMMENT |
| LOW | extensions/kernel-debug-tiers.sh | 41 | # (Armbian's default unless KERNEL_BTF=no). Without BTF, hung-task tracebacks | COMMENT |
| LOW | extensions/kernel-debug-tiers.sh | 121 | # Tier 2: pstore/ramoops — kernel writes its last printk before crash to a | COMMENT |
| LOW | extensions/uboot-binman-fix-pkg-resources.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/uboot-fix-pylibfdt-swig.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/ccache.sh | 1 | # @description Compile-cache backend that wraps kernel, U-Boot, ATF and Crust compiles in ccache. Enable only one compil | COMMENT |
| LOW | extensions/seeed-extension.sh | 1 | # Thin wrapper that enables Seeed Studio's external Armbian extension | COMMENT |
| LOW | extensions/seeed-extension.sh | 21 | # cuts a new release tag. | COMMENT |
| LOW | extensions/sophgo-sg200x-aic8800.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | extensions/sophgo-sg200x-aic8800.sh | 21 | # Shadowrom2020/aic8800-dkms, radxa-aic8800.sh from radxa-pkg/aic8800, the latter | COMMENT |
| LOW | extensions/sophgo-sg200x-aic8800.sh | 41 | declare -g AIC8800_REPO="https://github.com/queenkjuul/aic8800-milkv-duos" | COMMENT |
| LOW | extensions/image-output-iso.sh | 1 | # @description Builds a bootable live `.iso` from a UEFI image so it boots from a BMC/IPMI virtual CD-ROM. Packs the ker | COMMENT |
| LOW | extensions/image-output-iso.sh | 21 | # nothing to boot. This live layout is the only shape a virtual CD actually runs. | COMMENT |
| LOW | extensions/mtkflash.sh | 1 | # @description Clones and builds the Rust `mtk-flash` tool from `grinn-global/mtk-flash`, then flashes a MediaTek board | COMMENT |
| LOW | extensions/nvidia.sh | 21 | # BUILD_MINIMAL=yes, so we never reach this point without it. | COMMENT |
| LOW | extensions/nvidia.sh | 41 | # armbian-nvidia-autodetect helper removes this file (and modprobes | COMMENT |
| LOW | extensions/nvidia.sh | 141 | } | COMMENT |
| LOW | extensions/nvidia.sh | 161 | # - dpkg-query's the actually-installed nvidia-dkms-* / nvidia-driver-* / | COMMENT |
| LOW | extensions/nvidia.sh | 181 | # fires if the driver bound far enough to print that line, and | COMMENT |
| 236 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | action.yml | 294 | # ── Configuration ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | action.yml | 353 | # ── Loaders ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | action.yml | 399 | # ── Filename parser ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | action.yml | 435 | # ── URL composition ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | action.yml | 471 | # ── Walk image dir, build manifest ─────────────────────────────────── | COMMENT |
| MEDIUM | action.yml | 540 | # ── Main ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 36 | # --------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 39 | # --------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 42 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 45 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 48 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 51 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 54 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 57 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 60 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 63 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 66 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 69 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 72 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 75 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 78 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 81 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 84 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 87 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 90 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 93 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 96 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 99 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 102 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 105 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 108 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 111 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 114 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 117 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 120 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 123 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 126 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 129 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 132 | # ----------------------------------------------- | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 138 | # ------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 145 | # ------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 158 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 162 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 171 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 174 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 178 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 187 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 190 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 194 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 200 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 203 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 207 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 214 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 219 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 223 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 229 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 232 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 236 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 242 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | config/bootscripts/boot-odroid-xu4.ini | 245 | #------------------------------------------------------------------------------ | COMMENT |
| 14 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/repository/repo.sh | 111 | # Check if any .deb files exist in the directory | COMMENT |
| LOW | tools/repository/repo.sh | 173 | # Check if same name and arch but different version | COMMENT |
| LOW | tools/repository/repo.sh | 175 | # Check if this package should keep multiple versions | COMMENT |
| LOW | tools/repository/repo.sh | 292 | # Check if we have any packages to publish | COMMENT |
| LOW | tools/repository/repo.sh | 306 | # Check if this release was previously published for logging | COMMENT |
| LOW | tools/repository/extract-repo.sh | 147 | # Check if output is non-empty before feeding to mapfile | COMMENT |
| LOW | tools/repository/extract-repo.sh | 274 | # Check if file already exists and is identical | COMMENT |
| LOW | extensions/armbian-live-patch.sh | 76 | # Check if installed key is ours | COMMENT |
| LOW | extensions/armbian-live-patch.sh | 83 | # Check if file is signed with Armbian key | COMMENT |
| LOW | extensions/preset-firstrun.sh | 5 | # Set PRESET_NET_CHANGE_DEFAULTS to 1 to apply any network related settings below | COMMENT |
| LOW | extensions/rkusbboot.sh | 158 | # Check if the config file has been updated with CONFIG_ROCKCHIP_MASKROM_IMAGE=y | COMMENT |
| LOW | extensions/odin2-preset-firstrun.sh | 5 | # Set PRESET_NET_CHANGE_DEFAULTS to 1 to apply any network related settings below | COMMENT |
| LOW | extensions/ccache-remote/ccache-remote.sh | 81 | # Set CCACHE_REMOTE_DOMAIN to your domain, then create DNS records: | COMMENT |
| LOW | packages/bsp/easepi/bt-hciattach.sh | 18 | # Check if already initialized by serdev | COMMENT |
| LOW | …ages/bsp/usb-gadget-network/setup-usbgadget-network.sh | 63 | # Check if there's an USB Device Controller | COMMENT |
| LOW | packages/bsp/ayn-thor/LinuxLoader.cfg | 49 | # Set this to *true* if you are trying to boot a mainline kernel. | COMMENT |
| LOW | packages/bsp/ayn-odin2/LinuxLoader.cfg | 49 | # Set this to *true* if you are trying to boot a mainline kernel. | COMMENT |
| LOW | …sp/common/usr/lib/armbian/armbian-led-state-restore.sh | 61 | # Set it to default-on, then will be reset immediately to none to turn it off | COMMENT |
| LOW | packages/bsp/ayn-odin2portal/LinuxLoader.cfg | 49 | # Set this to *true* if you are trying to boot a mainline kernel. | COMMENT |
| LOW | packages/bsp/ayn-odin2mini/LinuxLoader.cfg | 49 | # Set this to *true* if you are trying to boot a mainline kernel. | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 720 | # Check if patch failed to apply | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 463 | # Check if the rejects exists: | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 493 | # Check if the exit code is not zero and bomb | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 512 | # Check if deleted, don't complain if so. | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 864 | # Check if the exit code is not zero and bomb | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 924 | content = f.read() # Read the file as bytes | CODE |
| LOW | lib/tools/common/patching_utils.py | 935 | return f.read() # Read the file as bytes | CODE |
| LOW | lib/functions/configuration/main-config.sh | 170 | # Check if the filesystem type is supported by the build host. | COMMENT |
| LOW | lib/functions/configuration/main-config.sh | 637 | # Check if the filesystem is listed in /proc/filesystems | COMMENT |
| LOW | lib/functions/configuration/main-config.sh | 666 | # Check if required configurations are set | COMMENT |
| LOW | lib/functions/rootfs/qemu-static.sh | 141 | # Check if binfmt_misc is loaded; if not, try to load it, but don't fail: it might be built in. | COMMENT |
| LOW | lib/functions/host/tmpfs-utils.sh | 95 | # Check if the tmpfs is still mounted after all that trying, log error, show debug, and give up with error | COMMENT |
| LOW | lib/functions/host/docker.sh | 443 | # Check if the base image is up to date. | COMMENT |
| LOW | lib/functions/host/docker.sh | 1042 | # Check if we need to update | COMMENT |
| LOW | lib/functions/host/docker.sh | 1090 | # Check if auto-pull cronjob is installed, and install if not or outdated | COMMENT |
| LOW | lib/functions/general/shellcheck.sh | 111 | # Check if we have a cached version in a Docker image, and copy it over before possibly updating it. | COMMENT |
| LOW | lib/functions/general/extensions.sh | 529 | # Check if "${newly_defined_function}" is already defined in the extension_function_info array, if not, add it | COMMENT |
| LOW | lib/functions/general/bat-cat.sh | 66 | # Check if we have a cached version in a Docker image, and copy it over before possibly updating it. | COMMENT |
| LOW | lib/functions/general/oci-oras.sh | 71 | # Check if we have a cached version in a Docker image, and copy it over before possibly updating it. | COMMENT |
| LOW | lib/functions/cli/cli-docker.sh | 114 | # Set globals to avoid: | COMMENT |
| LOW⚡ | lib/functions/image/partitioning.sh | 116 | # Check if we need UEFI partition | COMMENT |
| LOW⚡ | lib/functions/image/partitioning.sh | 118 | # Check if we need BIOS partition | COMMENT |
| LOW⚡ | lib/functions/image/partitioning.sh | 122 | # Check if we need boot partition | COMMENT |
| LOW | lib/functions/image/partitioning.sh | 137 | # Check if we need root partition | COMMENT |
| LOW | lib/functions/compilation/distcc.sh | 26 | # Check if host_port is not empty, otherwise continue. | COMMENT |
| LOW | lib/functions/compilation/distcc.sh | 31 | # Check if $cores is bigger than zero (0), otherwise continue. | COMMENT |
| LOW | lib/functions/logging/trap-logging.sh | 56 | # Check if we have `zstdmt` at this stage; if not, use standard gzip | COMMENT |
| LOW | lib/functions/logging/trap-logging.sh | 87 | # Check if fd 13 is still open; close it and wait for tee to die. This is done again in discard_logs_tmp_dir() | COMMENT |
| LOW | lib/functions/logging/export-logs.sh | 187 | # Check if the result_from_paste_server begin with https:// and the paste_server; if yes, it's a success, break the | COMMENT |
| LOW | lib/functions/logging/logging.sh | 201 | # Check if fd 13 is still open; close it and wait for tee to die. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | extensions/lvm.sh | 75 | # (findmnt is a single util-linux call, robust to spaces and to multiple | COMMENT |
| MEDIUM | extensions/gateway-dk-ask.sh | 195 | # hunks were stripped at stage time because Armbian's driver harness echo-appends to those | COMMENT |
| MEDIUM | extensions/gateway-dk-ask.sh | 384 | # drivers/staging/Makefile or drivers/staging/Kconfig. Armbian's driver harness | COMMENT |
| MEDIUM | extensions/gateway-dk-ask.sh | 436 | # Kconfig} hunks — Armbian's driver harness echo-appends out-of-tree drivers | COMMENT |
| MEDIUM | extensions/network/net-chrony.sh | 1 | # @description Adds the `chrony` package to the image for network time synchronization. Chrony is a full-featured NTP cl | COMMENT |
| MEDIUM | lib/library-functions.sh | 450 | ### lib/functions/compilation/patch/drivers-harness.sh | COMMENT |
| MEDIUM | lib/library-functions.sh | 451 | # shellcheck source=lib/functions/compilation/patch/drivers-harness.sh | COMMENT |
| LOW | lib/tools/patching.py | 204 | # If not, just use the whole file as a single patch. | COMMENT |
| LOW | lib/tools/info/mapper-oci-uptodate.py | 56 | # we're not really checking, so just return a positive hit | COMMENT |
| LOW | lib/tools/common/dt_makefile_patcher.py | 90 | # much simpler. just add individual -y lines for each dt file to add directly to the end of the Makefile and hope for | COMMENT |
| LOW | lib/tools/common/dt_makefile_patcher.py | 147 | # For incremental, we'll just use the parsed-from-Makefile list of .dts files... | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 759 | # For simplicity in parallel mode, we'll just add all files | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 501 | # if the patch failed to parse, this will be an empty list, so we'll just add all changes. | COMMENT |
| LOW | lib/tools/common/patching_utils.py | 680 | # if no files were touched, just return an ? | COMMENT |
| LOW | lib/functions/artifacts/artifacts-obtain.sh | 159 | # just use the single deb rel path | COMMENT |
| MEDIUM | lib/functions/artifacts/artifact-kernel.sh | 38 | # - Get the drivers patch hash (given LINUXFAMILY and the vX.Z.Y version) - the harness can do this by hashing patches | COMMENT |
| LOW | lib/functions/rootfs/distro-specific.sh | 182 | declare basedir="${3}" # @TODO: rpardini: this is SDCARD in all practical senses. Why not just use SDCARD? | CODE |
| LOW | lib/functions/host/host-utils.sh | 363 | # if not on Linux, just return; "ps" shenanigans we use are not supported | COMMENT |
| LOW | lib/functions/general/extensions.sh | 153 | # Extensions has its own work/tmp directory, defined by do_main_configuration, with build UUID. We just create it here, | COMMENT |
| LOW | lib/functions/general/countdown.sh | 50 | # If not interactive, just return 0. | COMMENT |
| LOW | lib/functions/general/git.sh | 296 | # when we work offline we simply return the sources to their original state | COMMENT |
| LOW | lib/functions/compilation/kernel-debs.sh | 471 | # Lets check and warn if it isn't. If warns don't popup over time we remove and just use ARCHITECTURE later. | COMMENT |
| MEDIUM | lib/functions/compilation/uboot.sh | 618 | [[ -n $atftempdir ]] && rm -rf "${atftempdir:?}" # @TODO: intricate cleanup; u-boot's pkg uses ATF's tempdir... | CODE |
| MEDIUM | lib/functions/compilation/armbian-kernel.sh | 17 | # To facilitate this, use the arrays opts_n/opts_y/opts_m and/or the opts_val dictionary. | COMMENT |
| MEDIUM | lib/functions/compilation/armbian-kernel.sh | 201 | # Enables comprehensive IPTABLES/NFTABLES support for advanced networking and firewall configurations. | COMMENT |
| MEDIUM | lib/functions/compilation/armbian-kernel.sh | 534 | # Enables Docker support by configuring a comprehensive set of kernel options required for Docker functionality. | COMMENT |
| LOW | lib/functions/compilation/distcc.sh | 56 | # If not using distcc, just add "$CTHREADS" to the DISTCC_MAKE_J_PARALLEL array. | COMMENT |
| LOW | lib/functions/logging/traps.sh | 108 | return 0 # No handlers set, just return. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/validate-board-config.py | 96 | def collect_inherited_assignments(path: Path, _visited: set[Path] | None = None) -> dict[str, str]: | CODE |
| LOW | lib/tools/git-to-patches.py | 73 | def remove_tags_from_description(self, desc: str) -> (str, dict[str, str]): | CODE |
| LOW | lib/tools/info/output-gha-matrix.py | 24 | def resolve_gha_runner_tags_via_pipeline_gha_config(input: dict, artifact_name: str, artifact_arch: str): | CODE |
| LOW | lib/tools/info/output-gha-matrix.py | 106 | def generate_matrix_artifacts(info): | CODE |
| LOW | lib/tools/info/mapper-oci-uptodate.py | 51 | def check_oci_up_to_date_cache(oci_target: str, really_check: bool = False): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 28 | def calculate_potential_paths(root_dirs, relative_dirs, sub_dirs, artifact_file, initial_paths=None): | CODE |
| LOW⚡ | lib/tools/common/aggregation_utils.py | 49 | def process_common_path_for_potentials(potential_paths): | CODE |
| LOW⚡ | lib/tools/common/aggregation_utils.py | 56 | def get_all_potential_paths_packages(): | CODE |
| LOW⚡ | lib/tools/common/aggregation_utils.py | 61 | def aggregate_packages_from_potential(potential_paths): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 91 | def aggregate_simple_contents_potential(potential_paths): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 141 | def remove_common_path_from_refs(merged): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 211 | def aggregate_all_debootstrap(artifact, aggregation_function=aggregate_packages_from_potential): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 228 | def join_refs_for_bash_single_string(refs): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 243 | def join_refs_for_markdown_single_string(refs): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 263 | def prepare_bash_output_array_for_list( | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 308 | def prepare_bash_output_single_string(output_array_name, merged_list): | CODE |
| LOW | lib/tools/common/aggregation_utils.py | 327 | def encode_source_base_path_extra(contents_dict): | CODE |
| LOW | lib/tools/common/md_asset_log.py | 68 | def get_gh_pages_workflow_script(): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 64 | def get_userpatches_path_params() -> list[str]: | CODE |
| LOW | lib/tools/common/armbian_utils.py | 77 | def show_incoming_environment(): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 138 | def strip_bash_trailing_comment(line: str) -> str: | CODE |
| LOW | lib/tools/common/armbian_utils.py | 153 | def armbian_parse_board_file_for_static_info(board_file, board_id, core_or_userpatched): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 217 | def armbian_get_all_boards_list(boards_path): | CODE |
| LOW⚡ | lib/tools/common/armbian_utils.py | 284 | def read_one_distro_config_file(filename): | CODE |
| LOW⚡ | lib/tools/common/armbian_utils.py | 291 | def split_commas_and_clean_into_list(string): | CODE |
| LOW⚡ | lib/tools/common/armbian_utils.py | 300 | def get_desktop_inventory_for_distro(distro, armbian_paths): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 361 | def armbian_get_all_userspace_inventory(): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 395 | def armbian_get_arch_for_family(family_name, armbian_src_path): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 427 | def armbian_get_all_boards_inventory(): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 489 | def armbian_run_command_and_parse_json_from_stdout(exec_cmd: list[str], params: dict): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 540 | def parse_log_lines_from_stderr(lines_stderr: str): | CODE |
| LOW | lib/tools/common/armbian_utils.py | 567 | def gather_json_output_from_armbian(command: str, targets: list[dict]): | CODE |
| LOW | lib/tools/common/dt_makefile_patcher.py | 307 | def auto_patch_all_dt_makefiles(autopatcher_params: AutoPatcherParams) -> list[AutomaticPatchDescription]: | CODE |
| LOW | lib/tools/common/gha.py | 105 | def add_job_output_from_input(self, name: str, input: WorkflowJobInput) -> WorkflowJobOutput: | CODE |
| LOW | lib/tools/common/gha.py | 111 | def add_job_input_from_needed_job_output(self, job_output: WorkflowJobOutput) -> WorkflowJobInput: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 356 | def calculate_optimal_workers() -> int: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 390 | def parse_patch_stdout_for_files(stdout_output: str) -> List[str]: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 431 | def apply_patch_date_to_files(patch_files: List[str], working_dir: str, patch_mtime: float, root_makefile_date: float) - | CODE |
| LOW | lib/tools/common/patching_parallel.py | 497 | def _process_worker_patches_sequential(worker_items: List[PatchWorkItem], progress_queue=None) -> List[ParallelPatchResu | CODE |
| LOW | lib/tools/common/patching_parallel.py | 555 | def process_single_patch_worker(item: PatchWorkItem) -> ParallelPatchResult: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 975 | def group_patches_by_implicit_dependencies(patches: List) -> List[List]: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 1353 | def update_patches_from_parallel_results( | CODE |
| LOW | lib/tools/common/bash_declare_parser.py | 65 | def armbian_value_parse_double_quoted(self, value: str): | CODE |
| LOW | lib/tools/common/bash_declare_parser.py | 72 | def armbian_value_parse_single_quoted(self, value: str): | CODE |
| LOW | lib/tools/common/patching_utils.py | 248 | def split_description_and_patch(full_message_text: str) -> tuple["str | None", str]: | CODE |
| LOW | lib/tools/common/patching_utils.py | 284 | def shorten_patched_file_name_for_stats(path): | CODE |
| LOW | lib/tools/common/patching_utils.py | 288 | def parse_patch_stdout_for_files(stdout_output: str): | CODE |
| LOW | lib/tools/common/patching_utils.py | 579 | def commit_changes_to_git_grouped(self, all_files_to_add: list[str], repo: git.Repo): | CODE |
| LOW | lib/tools/common/patching_utils.py | 768 | def apply_patch_date_to_files(self, working_dir, options): | CODE |
| LOW | lib/tools/common/patching_utils.py | 822 | def prepare_clean_git_tree_for_patching(repo: git.Repo, revision_sha: str, branch_name: str): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | lib/tools/info/repo-reprepro.py | 97 | 'reprepro -b "${REPO_LOCATION}" --delete clearvanished || echo "clearvanished failed"', | CODE |
| HIGH | lib/tools/info/repo-reprepro.py | 100 | 'reprepro -b "${REPO_LOCATION}" check || echo "initial check failed"' | CODE |
| HIGH⚡ | lib/tools/common/md_asset_log.py | 85 | BRANCH_NAME: ${{ github.head_ref || github.ref_name }} | CODE |
| HIGH⚡ | lib/tools/common/md_asset_log.py | 95 | - name: Run grip to gen ${{ github.head_ref || github.ref_name }} | CODE |
| HIGH⚡ | lib/tools/common/md_asset_log.py | 97 | BRANCH_NAME: ${{ github.head_ref || github.ref_name }} | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | action.yml | 363 | except Exception as e: | CODE |
| LOW | action.yml | 381 | except Exception as e: | CODE |
| MEDIUM | lib/tools/call-stack-analyze.py | 89 | eprint("Error: line_parts length is not 4") | CODE |
| MEDIUM | lib/tools/call-stack-analyze.py | 177 | eprint("Error: function not found in function_to_file: " + func) | CODE |
| LOW | lib/tools/patching.py | 214 | except Exception as e: | CODE |
| LOW | lib/tools/patching.py | 234 | except Exception as invalid_exception: | CODE |
| LOW | lib/tools/patching.py | 393 | except Exception as e: | CODE |
| LOW | lib/tools/patching.py | 452 | except Exception as e: | CODE |
| LOW | lib/tools/cli-oci-up2date.py | 33 | except Exception as e: | CODE |
| LOW | lib/tools/info/mapper-oci-uptodate.py | 108 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 202 | except Exception: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 210 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 219 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 227 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 296 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 298 | except Exception as e: | CODE |
| LOW⚡ | lib/tools/common/patching_parallel.py | 301 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 170 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 175 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 262 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 324 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 339 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 352 | except Exception: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 538 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 652 | except Exception as git_error: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 848 | except Exception as commit_error: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 868 | except Exception as export_error: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 890 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 1147 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 1303 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_parallel.py | 1347 | except Exception as e: | CODE |
| LOW | lib/tools/common/patching_utils.py | 369 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/bsp/clockworkpi-a06/temp_fan_daemon_a06.py | 43 | CODE | |
| LOW | packages/bsp/clockworkpi-a06/temp_fan_daemon_a06.py | 91 | CODE | |
| LOW | packages/bsp/clockworkpi-a06/temp_fan_daemon_a06.py | 107 | CODE | |
| LOW | lib/tools/info/targets-compositor.py | 70 | CODE | |
| LOW | lib/tools/info/mapper-oci-uptodate.py | 51 | CODE | |
| LOW | lib/tools/common/aggregation_utils.py | 61 | CODE | |
| LOW | lib/tools/common/armbian_utils.py | 138 | CODE | |
| LOW | lib/tools/common/armbian_utils.py | 427 | CODE | |
| LOW | lib/tools/common/armbian_utils.py | 567 | CODE | |
| LOW | lib/tools/common/dt_makefile_patcher.py | 217 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 244 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 344 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 555 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 1100 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 91 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 179 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | lib/tools/aggregation.py | 12 | # I wrote "prompt" comments and the whole thing was generated by Copilot. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | lib/tools/common/patching_parallel.py | 1063 | # Step 3: Group patches by their component root | COMMENT |
| LOW⚡ | lib/tools/common/patching_parallel.py | 1073 | # Step 4: Sort each group to preserve original order | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 997 | # Step 1: Build file -> patches mapping | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 1024 | # Step 2: Build dependency graph using union-find | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | lib/tools/common/patching_parallel.py | 1063 | # Step 3: Group patches by their component root | COMMENT |
| LOW⚡ | lib/tools/common/patching_parallel.py | 1073 | # Step 4: Sort each group to preserve original order | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 997 | # Step 1: Build file -> patches mapping | COMMENT |
| LOW | lib/tools/common/patching_parallel.py | 1024 | # Step 2: Build dependency graph using union-find | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lib/functions/rootfs/distro-agnostic.sh | 602 | return 0 # make sure to exit with success | CODE |
| LOW | lib/functions/general/chroot-helpers.sh | 61 | target="$(realpath "$1")/" # normalize, make sure to have slash as last element | CODE |
| LOW | lib/functions/main/rootfs-image.sh | 106 | # Run the cleanup handler. @TODO: this already does the above, so can be simpler. @TODO: don't forget to split MOUNT/SD | COMMENT |
| LOW | lib/functions/main/rootfs-image.sh | 106 | # Run the cleanup handler. @TODO: this already does the above, so can be simpler. @TODO: don't forget to split MOUNT/SD | COMMENT |
| LOW | lib/functions/logging/capture.sh | 11 | # make sure to local with a value, otherwise they will appear in the list... | COMMENT |
| LOW | lib/functions/logging/display-alert.sh | 233 | return 0 # make sure to exit with success, always | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/repository/cleanup-debs.sh | 21 | # Usage: | COMMENT |
| LOW | extensions/ccache-remote/ccache-remote.sh | 13 | # Usage: | COMMENT |
| LOW | packages/bsp/easepi/ir.sh | 5 | # Usage: | COMMENT |
| LOW | lib/functions/host/mktemp-utils.sh | 12 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | lib/tools/common/patching_parallel.py | 202 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/maintenance-label-wip-sweep.yml | 4 | # review conversation being resolved/unresolved, so the event-driven worker | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lib/tools/common/bash_declare_parser.py | 70 | CODE | |
| LOW | lib/tools/common/bash_declare_parser.py | 77 | CODE | |
| LOW | lib/tools/common/bash_declare_parser.py | 88 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/validate-board-config.py | 30 | CODE | |
| LOW | lib/tools/common/patching_parallel.py | 25 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lib/functions/configuration/main-config.sh | 58 | [[ -z $MAINTAINER ]] && MAINTAINER="John Doe" # deb signature | CODE |