Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
This report summarizes scanner evidence for authzed/spicedb, a Go project with 7,183 GitHub stars. SynthScan examined 342,917 lines of code across 1489 source files, recording 318 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 293 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 39 finding(s).
Which changes need focused human review? 318 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 318 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …memoryprotection/memory_protection_integration_test.go | 41 | // to be off for the server to start at all here. AvailableMemory() is | COMMENT |
| LOW | internal/middleware/perfinsights/doc.go | 1 | // Package perfinsights defines middleware that reports the latency of API calls to Prometheus. | COMMENT |
| LOW | internal/middleware/perfinsights/perfinsights.go | 41 | string(FilterLabel), | COMMENT |
| LOW | internal/testserver/datastore/datastore.go | 21 | // never succeeded. | COMMENT |
| LOW | internal/testserver/datastore/datastore.go | 41 | // database/service, expressly for testing. | COMMENT |
| LOW | internal/dispatch/executor.go | 461 | }, nil | COMMENT |
| LOW | internal/dispatch/graph/graph.go | 561 | } | COMMENT |
| LOW | internal/dispatch/keys/computed.go | 141 | COMMENT | |
| LOW | internal/datasets/basesubjectset.go | 21 | // to the base implementation. | COMMENT |
| LOW | internal/datasets/basesubjectset.go | 381 | // sets. | COMMENT |
| LOW | internal/datasets/basesubjectset.go | 541 | // the resulting concrete subjects are {user:tom, user:amy} because the first set contains | COMMENT |
| LOW | internal/datasets/basesubjectset.go | 561 | ), | COMMENT |
| LOW | internal/datasets/basesubjectset.go | 661 | COMMENT | |
| LOW | internal/graph/check.go | 81 | // For example, a check of resources `user:{tom,sarah,fred}` and subject `user:sarah` will | COMMENT |
| LOW | internal/graph/lookupsubjects.go | 641 | // For example, given relationships which formed the dispatch: | COMMENT |
| LOW | internal/graph/lookupresources3.go | 101 | COMMENT | |
| LOW | internal/graph/lookupresources3.go | 121 | // | COMMENT |
| LOW | internal/graph/lookupresources3.go | 141 | // │ │ │ │ │ #1 │ │ #2 │ │ #N │ │ │ │ | COMMENT |
| LOW | internal/graph/lookupresources3.go | 161 | // For each entrypoint, implements a producer-mapper pattern: | COMMENT |
| LOW | internal/graph/lookupresources3.go | 181 | // │ └──────────────────┘ │ │ Dispatch to │ │ │ | COMMENT |
| LOW | internal/graph/lookupresources3.go | 201 | // - Example: document#read = viewer + parent->read | COMMENT |
| LOW | internal/graph/lookupresources3.go | 221 | // # Cursor Management | COMMENT |
| LOW | internal/graph/lookupresources3.go | 801 | skipCaveats := !possibleTraits.AllowsCaveats | COMMENT |
| LOW | internal/graph/computed/computecheck.go | 21 | // NoDebugging indicates that debug information should be retained | COMMENT |
| LOW | internal/namespace/canonicalization.go | 21 | // it into a Binary Decision Diagram (BDD) via the `rudd` library. | COMMENT |
| LOW | internal/namespace/canonicalization.go | 41 | // relation second: ... | COMMENT |
| LOW | internal/cursorediterator/doc.go | 1 | // Package cursorediterator provides a series of specialized iterator builders that support | COMMENT |
| LOW | internal/cursorediterator/blocks.go | 21 | var cursorsDisabledKey = ctxkey.NewBoxedWithDefault(false) | COMMENT |
| LOW | internal/cursorediterator/blocks.go | 141 | // Otherwise, we call the `header` iterator with the nextStartingIndex, and then return | COMMENT |
| LOW | …rnal/datastore/benchmark/postgres_delete_bench_test.go | 21 | "github.com/authzed/spicedb/pkg/datastore" | COMMENT |
| LOW | internal/datastore/proxy/optimized_revision.go | 21 | // singleflighted computation of the optimized revision. | COMMENT |
| LOW | internal/datastore/proxy/optimized_revision.go | 41 | // after a failed shared attempt. The retry runs on the caller's own context, so | COMMENT |
| LOW | internal/datastore/proxy/checkingreplicated.go | 41 | // NewCheckingReplicatedDatastore creates a new datastore that writes to the provided primary and reads | COMMENT |
| LOW | internal/datastore/proxy/poolsim/poolsim.go | 1 | // Package poolsim provides a datastore proxy that models a fixed-size database | COMMENT |
| LOW | internal/datastore/proxy/indexcheck/indexcheck.go | 21 | return &indexcheckingProxy{delegate: delegate, explainable: explainable} | COMMENT |
| LOW | internal/datastore/proxy/schemacaching/hitrate_test.go | 81 | // | COMMENT |
| LOW | internal/datastore/crdb/partitioner.go | 21 | // have columns in a different order than the PK, producing partition bounds | COMMENT |
| LOW | internal/datastore/crdb/partitioner.go | 141 | COMMENT | |
| LOW | internal/datastore/crdb/schema_chunker.go | 21 | // executing, so that bytea parameters and results use the binary format. | COMMENT |
| LOW | internal/datastore/crdb/schema_chunker.go | 41 | // which in effect halves the largest schema SpiceDB can store on CRDB. Note that | COMMENT |
| LOW | internal/datastore/crdb/crdb.go | 101 | // | COMMENT |
| LOW | internal/datastore/crdb/options.go | 121 | computed.writePoolOpts.ConnMaxLifetimeJitter = ptr.To(30 * time.Minute) | COMMENT |
| LOW | internal/datastore/crdb/options.go | 141 | // held by the application very frequently. | COMMENT |
| LOW | internal/datastore/crdb/options.go | 161 | // The health-check may not be able to clean up those connections if they are | COMMENT |
| LOW | internal/datastore/crdb/options.go | 181 | // idle connection) before considering that connection unhealthy and discarding | COMMENT |
| LOW | internal/datastore/crdb/options.go | 221 | // WriteConnMaxLifetime is the duration since creation after which a write | COMMENT |
| LOW | internal/datastore/crdb/options.go | 241 | // | COMMENT |
| LOW | internal/datastore/crdb/ttl_changefeed.go | 21 | // supportsTTLChangefeedReplicationParam returns whether the connected CockroachDB | COMMENT |
| LOW | internal/datastore/crdb/pool/pgx.go | 21 | // distribute, sublicense, and/or sell copies of the Software, and to | COMMENT |
| LOW | internal/datastore/crdb/pool/node_id.go | 1 | package pool | COMMENT |
| LOW | internal/datastore/crdb/pool/node_id.go | 21 | // standalone (non-multitenant) CockroachDB nodes. | COMMENT |
| LOW | internal/datastore/crdb/pool/node_id.go | 41 | // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | COMMENT |
| LOW | internal/datastore/postgres/replica_lag_test.go | 21 | pgmigrations "github.com/authzed/spicedb/internal/datastore/postgres/migrations" | COMMENT |
| LOW | internal/datastore/postgres/options.go | 141 | func ReadStrictMode(readStrictMode bool) Option { | COMMENT |
| LOW | internal/datastore/postgres/options.go | 161 | // This value defaults to 30s. | COMMENT |
| LOW | internal/datastore/postgres/options.go | 181 | // | COMMENT |
| LOW | internal/datastore/postgres/options.go | 241 | // | COMMENT |
| LOW | internal/datastore/postgres/revisions_test.go | 221 | } | COMMENT |
| LOW | internal/datastore/postgres/postgres_shared_test.go | 41 | // constructors in this package. See test.DisableBackgroundGC for what it means. | COMMENT |
| LOW | internal/datastore/postgres/postgres_shared_test.go | 1021 | } | COMMENT |
| 107 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | internal/graph/lookupresources3.go | 129 | // ┌──────────────────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 131 | // ├──────────────────────────────────────────────────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 133 | // │ ┌─────────────────┐ ┌──────────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 136 | // │ │ │ │ ┌─────────────────────────────────────────────┐ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 139 | // │ │ │ │ │ │ ┌──────────┐ ┌──────────┐ ┌──────────┐ │ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 140 | // │ └─────────────────┘ │ │ │ │Entrypoint│ │Entrypoint│ │Entrypoint│ │ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 142 | // │ │ │ │ └──────────┘ └──────────┘ └──────────┘ │ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 144 | // │ │ │ └─────────────────────────────────────────────┘ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 146 | // │ │ │ ┌─────────────────────────────────────────────┐ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 149 | // │ │ │ └─────────────────────────────────────────────┘ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 150 | // │ │ └──────────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 152 | // │ └──────────────────┬────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 154 | // │ ┌─────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 158 | // │ └─────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 159 | // └──────────────────────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 165 | // ┌─────────────────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 167 | // ├─────────────────────────────────────────────────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 169 | // │ ┌─────────────────┐ ┌──────────────────┐ ┌──────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 173 | // │ │ • Relation EP │ │ │ │ ┌──────────────────┐ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 177 | // │ └─────────────────┘ │ │ │ └──────────────────┘ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 180 | // │ │ │ │ ┌──────────────────┐ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 181 | // │ └──────────────────┘ │ │ Dispatch to │ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 184 | // │ │ └──────────────────┘ │ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 185 | // │ └──────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | internal/graph/lookupresources3.go | 186 | // └─────────────────────────────────────────────────────────────────────────────┘ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/relationships/validation.go | 61 | // NOTE: This method *cannot* be used for relationships that will be deleted. | COMMENT |
| LOW | pkg/schemadsl/compiler/translator.go | 313 | // NOTE: This function behaves differently based on an errorOnMissingReference flag. | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 628 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 635 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 640 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 645 | // Step 4: Clone the resolved schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 646 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 653 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 658 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 686 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 693 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 698 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 703 | // Step 4: Convert back to namespace definition | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 325 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 332 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 337 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 342 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 347 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 352 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 668 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 675 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 680 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 685 | // Step 4: Flatten the schema with FlattenArrows enabled | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 694 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 699 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1110 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1117 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1122 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1127 | // Step 4: Flatten the schema with specified options | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1136 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1141 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1473 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1480 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1485 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1490 | // Step 4: Flatten the schema with specified options | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1565 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1572 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1577 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1582 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1587 | // Step 5: Verify all ResolvedRelationReferences point to valid permissions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 366 | // Step 1: Compile original schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 373 | // Step 2: Convert to v2 schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 377 | // Step 3: Convert back to v1 | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 381 | // Step 4: Create a type system from the converted definitions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 389 | // Step 5: Run tester functions for each definition | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 601 | // Step 1: Compile original schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 608 | // Step 2: Convert to v2 schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 612 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 616 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 620 | // Step 5: Convert flattened schema back to v1 | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 624 | // Step 6: Create a type system from the converted flattened definitions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 632 | // Step 7: Run tester functions for each definition | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/services/v1/relationships.go | 588 | // If a limit was specified but partial deletion is not allowed, we need to check if the | COMMENT |
| LOW | internal/services/v1/watch.go | 200 | // If there are filters, we need to check if the update matches any of them. | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 628 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 635 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 640 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/clone_test.go | 645 | // Step 4: Clone the resolved schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 646 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 653 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 658 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 686 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 693 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 698 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/resolved_test.go | 703 | // Step 4: Convert back to namespace definition | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 325 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 332 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 337 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 342 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 347 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 352 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 668 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 675 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 680 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 685 | // Step 4: Flatten the schema with FlattenArrows enabled | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 694 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 699 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1110 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1117 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1122 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1127 | // Step 4: Flatten the schema with specified options | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1136 | // Step 5: Convert back to corev1 | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1141 | // Step 6: Generate schema string | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1473 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1480 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1485 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1490 | // Step 4: Flatten the schema with specified options | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1565 | // Step 1: Compile the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1572 | // Step 2: Convert to *Schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1577 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1582 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/flatten_test.go | 1587 | // Step 5: Verify all ResolvedRelationReferences point to valid permissions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 366 | // Step 1: Compile original schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 373 | // Step 2: Convert to v2 schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 377 | // Step 3: Convert back to v1 | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 381 | // Step 4: Create a type system from the converted definitions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 389 | // Step 5: Run tester functions for each definition | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 601 | // Step 1: Compile original schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 608 | // Step 2: Convert to v2 schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 612 | // Step 3: Resolve the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 616 | // Step 4: Flatten the schema | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 620 | // Step 5: Convert flattened schema back to v1 | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 624 | // Step 6: Create a type system from the converted flattened definitions | COMMENT |
| LOW⚡ | pkg/schema/v2/todefinitions_typesystem_test.go | 632 | // Step 7: Run tester functions for each definition | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/checkbaseline/report/test_report.py | 6 | def test_bands_are_sample_quartiles(): | CODE |
| LOW | internal/checkbaseline/report/test_report.py | 14 | def test_script_data_escapes_html(): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 80 | def test_archive_is_immutable_and_checksums_detect_tampering(tmp_path): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 94 | def test_comparison_identity_covers_input_request_policy_and_machine(): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 118 | def test_merge_rejects_duplicate_cases_and_conflicting_source(): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 130 | def test_invalid_or_partial_measurements_cannot_publish(change): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 141 | def test_unknown_cpu_or_runtime_settings_withhold_comparison_keys(field): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 147 | def test_exclusive_run_lock_rejects_second_owner(tmp_path): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 157 | def test_interrupted_log_is_not_overwritten(tmp_path): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 165 | def test_concurrent_index_rebuilds_are_serialized(tmp_path): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 174 | def test_incomplete_postgres_configuration_cannot_publish_or_compare(settings): | CODE |
| LOW⚡ | internal/checkbaseline/report/test_history.py | 182 | def test_schema_loads_are_separate_and_unrecorded_history_is_unknown(): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 193 | def test_sql_metadata_and_combined_chart_preserve_size_dimensions(tmp_path): | CODE |
| LOW | internal/checkbaseline/report/test_history.py | 245 | def test_run_ids_cannot_escape_history_directory(tmp_path): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/graph/limits.go | 37 | // Example usage: | COMMENT |
| LOW | pkg/schema/v2/builder.go | 27 | // Example usage: | COMMENT |
| LOW | pkg/schema/v2/schema.go | 28 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/dispatch/graph/graph.go | 600 | // TODO: implement caching for LookupResources results | COMMENT |
| LOW | internal/dispatch/graph/graph.go | 618 | // TODO: implement caching for LookupSubjects results | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | internal/datastore/crdb/ttl_changefeed.go | 35 | // origin marker, so suppression at the source is the only robust mechanism. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/checkbaseline/report/history.py | 143 | CODE | |
| LOW | internal/checkbaseline/report/history.py | 244 | CODE |