The AWS Serverless Application Model (AWS SAM) transform is a AWS CloudFormation macro that transforms SAM templates into CloudFormation templates.
This report summarizes scanner evidence for aws/serverless-application-model, a Python project with 9,579 GitHub stars. SynthScan examined 522,042 lines of code across 3857 source files, recording 1728 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 3.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1627 finding(s).
Are imports declared and package/API names verified? 43 finding(s).
Are wrappers, guards, and repeated structures necessary? 1575 finding(s).
Which changes need focused human review? 1728 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1728 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bin/add_transform_test.py | 45 | def generate_transform_test_output_files(input_file_path: Path, file_basename: str) -> None: | CODE |
| LOW | bin/add_transform_test.py | 72 | def copy_input_file_to_transform_test_dir(input_file_path: Path, transform_test_input_path: Path) -> None: | CODE |
| LOW⚡ | bin/public_interface.py | 33 | def scan_interfaces_recursively(self, module_name: str) -> None: | CODE |
| LOW⚡ | bin/public_interface.py | 41 | def _scan_interfaces_in_module(self, module_name: str) -> None: | CODE |
| LOW⚡ | bin/public_interface.py | 46 | def _scan_functions_in_module(self, module_name: str) -> None: | CODE |
| LOW⚡ | bin/public_interface.py | 56 | def _scan_variables_in_module(self, module_name: str) -> None: | CODE |
| LOW | bin/public_interface.py | 159 | def _only_new_optional_arguments_or_existing_arguments_optionalized_or_var_arguments( | CODE |
| LOW | integration/conftest.py | 79 | def setup_companion_stack_once(tmpdir_factory, get_prefix): | CODE |
| LOW | integration/conftest.py | 94 | def _companion_stack_parameters(): | CODE |
| LOW | integration/conftest.py | 132 | def get_serverless_application_repository_app(): | CODE |
| LOW | integration/conftest.py | 213 | def delete_companion_stack_once(get_prefix): | CODE |
| LOW | integration/conftest.py | 249 | def get_companion_stack_outputs(get_prefix): | CODE |
| LOW | integration/metrics/test_metrics_integration.py | 24 | def test_publish_single_metric(self): | CODE |
| LOW | integration/combination/test_state_machine_with_cwe.py | 14 | def test_state_machine_with_cwe(self): | CODE |
| LOW | integration/combination/test_websocket_api_multiple.py | 14 | def test_websocket_multi_route(self): | CODE |
| LOW⚡ | integration/combination/test_function_with_msk.py | 17 | def test_function_with_msk_trigger(self): | CODE |
| LOW⚡ | integration/combination/test_function_with_msk.py | 21 | def test_function_with_msk_trigger_using_manage_policy(self): | CODE |
| LOW⚡ | integration/combination/test_function_with_msk.py | 31 | def test_function_with_msk_trigger_and_premium_features(self): | CODE |
| LOW | …est_websocket_api_with_disable_execute_api_endpoint.py | 13 | def test_disable_execute_api_endpoint_true(self, is_disable): | CODE |
| LOW | …tion/test_state_machine_with_schedule_dlq_generated.py | 11 | def test_state_machine_with_schedule(self): | CODE |
| LOW | …tion/test_state_machine_with_schedule_dlq_generated.py | 81 | def get_first_key_value_pair_in_dict(dictionary): | CODE |
| LOW | …ation/combination/test_custom_http_api_domains_test.py | 19 | def test_custom_http_api_domains_regional(self): | CODE |
| LOW | …ation/combination/test_custom_http_api_domains_test.py | 47 | def test_custom_http_api_domains_regional_ownership_verification(self): | CODE |
| LOW | …mbination/test_api_and_http_api_with_propagate_tags.py | 13 | def test_api_and_httpapi_with_propagate_tags(self): | CODE |
| LOW | …n/test_function_with_intrinsics_resource_attributes.py | 5 | def test_function_with_intrinsics_resource_attributes(self): | CODE |
| LOW | …egration/combination/test_api_with_fail_on_warnings.py | 18 | def test_end_point_configuration(self, file_name, disable_value): | CODE |
| LOW | …ation/combination/test_websocket_api_custom_domains.py | 21 | def test_websocket_custom_api_domains_regional(self): | CODE |
| LOW | …ion/combination/test_function_with_policy_templates.py | 6 | def test_with_policy_templates(self): | CODE |
| LOW | …ion/combination/test_function_with_policy_templates.py | 56 | def test_all_policy_templates(self): | CODE |
| LOW | integration/combination/test_function_with_http_api.py | 16 | def test_function_with_http_api(self): | CODE |
| LOW | integration/combination/test_function_with_http_api.py | 25 | def test_function_with_http_api_default_path(self): | CODE |
| LOW⚡ | …gration/combination/test_intrinsic_function_support.py | 17 | def test_serverless_function_property_support(self): | CODE |
| LOW⚡ | …gration/combination/test_intrinsic_function_support.py | 25 | def test_definition_uri_support(self): | CODE |
| LOW⚡ | …gration/combination/test_intrinsic_function_support.py | 31 | def test_severless_api_properties_support(self): | CODE |
| LOW | …ration/combination/test_state_machine_with_schedule.py | 23 | def test_state_machine_with_schedule(self, template_file_path): | CODE |
| LOW | …gration/combination/test_websocket_api_route_config.py | 11 | def test_websocket_api_route_config(self): | CODE |
| LOW | …tion/test_function_with_implicit_api_and_conditions.py | 10 | def test_function_with_implicit_api_and_conditions(self): | CODE |
| LOW | …tion/combination/test_function_with_user_pool_event.py | 10 | def test_function_with_user_pool_event(self): | CODE |
| LOW | integration/combination/test_websocket_api_basic.py | 33 | def test_websocket_api_basic_config(self): | CODE |
| LOW | …ion/test_http_api_with_disable_execute_api_endpoint.py | 18 | def test_disable_execute_api_endpoint_true(self, file_name, is_disable): | CODE |
| LOW | …n/combination/test_function_with_file_system_config.py | 16 | def test_function_with_efs_integration(self): | CODE |
| LOW | …mbination/test_function_with_schedule_dlq_generated.py | 11 | def test_function_with_schedule(self): | CODE |
| LOW | …mbination/test_function_with_schedule_dlq_generated.py | 86 | def get_first_key_value_pair_in_dict(dictionary): | CODE |
| LOW | integration/combination/test_http_api_with_auth.py | 10 | def test_function_with_user_pool_event(self): | CODE |
| LOW | …tion/combination/test_function_with_all_event_types.py | 13 | def test_function_with_all_event_types(self): | CODE |
| LOW | …tion/combination/test_function_with_all_event_types.py | 103 | def test_function_with_all_event_types_condition_false(self): | CODE |
| LOW | …tion/combination/test_function_with_all_event_types.py | 119 | def _get_actual_bucket_configuration_events(configurations): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 26 | def verify_capacity_provider_basic_config(self, cp_config, cp_name): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 34 | def verify_capacity_provider_vpc_config(self, cp_config, cp_name): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 49 | def verify_capacity_provider_permissions_config(self, cp_config, cp_name): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 57 | def verify_function_capacity_provider_config(self, function_capacity_provider_config): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 73 | def verify_capacity_provider_arn_match(self, function_capacity_provider_arn, capacity_provider_arn): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 81 | def test_function_with_capacity_provider_custom_role(self): | CODE |
| LOW | …on/combination/test_function_with_capacity_provider.py | 119 | def test_function_with_capacity_provider_default_role(self): | CODE |
| LOW⚡ | …on/combination/test_function_with_capacity_provider.py | 224 | def get_function_capacity_provider_config(self, function_name, alias_name=None): | CODE |
| LOW⚡ | …on/combination/test_function_with_capacity_provider.py | 239 | def get_lambda_capacity_provider_config(self, capacity_provider_logical_id): | CODE |
| LOW | …egration/combination/test_function_with_application.py | 16 | def test_function_referencing_outputs_from_application(self): | CODE |
| LOW | …on/test_function_with_schedule_dlq_and_retry_policy.py | 10 | def test_function_with_schedule(self): | CODE |
| LOW | …gration/combination/test_api_with_resource_policies.py | 11 | def test_api_resource_policies(self): | CODE |
| LOW | …gration/combination/test_api_with_resource_policies.py | 145 | def test_api_resource_policies_aws_account(self): | CODE |
| 1448 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | integration/single/test_basic_api.py | 44 | # Create an API with get and put | COMMENT |
| MEDIUM⚡ | tests/test_plugins.py | 113 | # Create a mock of LifeCycleEvents object with ONE event called "my_event" | COMMENT |
| MEDIUM⚡ | tests/test_plugins.py | 215 | # Create a plugin but setup hook method with wrong name | COMMENT |
| MEDIUM⚡ | tests/test_plugins.py | 226 | # Create a plugin but setup hook method with wrong name | COMMENT |
| MEDIUM | tests/test_plugins.py | 170 | # Create a parent mock and attach child mocks to help assert order of the calls | COMMENT |
| MEDIUM | tests/test_plugins.py | 250 | # Create a parent mock and attach child mocks to help assert order of the calls | COMMENT |
| MEDIUM⚡ | tests/translator/test_logical_id_generator.py | 78 | new = LogicalIdGenerator(self.prefix, data_obj=data.copy()).gen() # Create a copy of data obj | CODE |
| MEDIUM | …r/input/capacity_provider_with_mulitple_functions.yaml | 11 | # Define a capacity provider resource | COMMENT |
| MEDIUM | tests/model/eventsources/test_msk_event_source.py | 324 | # Create a mock function | COMMENT |
| MEDIUM | …l/eventsources/test_self_managed_kafka_event_source.py | 1048 | # Create a mock function | COMMENT |
| MEDIUM | tests/model/api/test_api_generator.py | 55 | # Create a simple swagger definition with paths that differ only by trailing slash | COMMENT |
| MEDIUM | samtranslator/plugins/sam_plugins.py | 33 | ### Defining a plugin | STRING |
| MEDIUM | samtranslator/model/__init__.py | 628 | # Create a map of {ResourceType: LogicalId} for quick access | COMMENT |
| MEDIUM | samtranslator/model/sam_resources.py | 4321 | # This function is only called if it is a pipeline resolver, in which case this property is checked to exist bef | COMMENT |
| MEDIUM | samtranslator/model/api/apiv2_generator.py | 151 | # Create the Route53 RecordSetGroup resource | COMMENT |
| MEDIUM | samtranslator/model/api/api_generator.py | 584 | # Create the Route53 RecordSetGroup resource | COMMENT |
| MEDIUM | samtranslator/model/api/api_generator.py | 687 | # Create the DomainNameAccessAssociation | COMMENT |
| MEDIUM | samtranslator/model/api/api_generator.py | 695 | # Create the Route53 RecordSetGroup resource | COMMENT |
| MEDIUM | samtranslator/model/capacity_provider/generators.py | 72 | # Create the Lambda CapacityProvider resource | COMMENT |
| MEDIUM | samtranslator/model/capacity_provider/generators.py | 207 | # Create the SAM tag using the helper method | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ation/combination/test_graphqlapi_pipeline_resolver.py | 0 | executes a query to an appsync graphqlapi. also checks that the response is 200 and does not contain errors before retur | STRING |
| HIGH | …gration/combination/test_graphqlapi_lambda_resolver.py | 0 | executes a query to an appsync graphqlapi. also checks that the response is 200 and does not contain errors before retur | STRING |
| HIGH | integration/single/test_graphqlapi_configuration.py | 0 | executes a query to an appsync graphqlapi. also checks that the response is 200 and does not contain errors before retur | STRING |
| HIGH | samtranslator/plugins/api/implicit_rest_api_plugin.py | 0 | this plugin provides implicit http api shorthand syntax in the sam spec. implicit api syntax is just a syntactic sugar, | STRING |
| HIGH | samtranslator/plugins/api/implicit_api_plugin.py | 0 | this plugin provides implicit http api shorthand syntax in the sam spec. implicit api syntax is just a syntactic sugar, | STRING |
| HIGH | samtranslator/plugins/api/implicit_http_api_plugin.py | 0 | this plugin provides implicit http api shorthand syntax in the sam spec. implicit api syntax is just a syntactic sugar, | STRING |
| HIGH | samtranslator/plugins/api/implicit_rest_api_plugin.py | 0 | actually process given api events. iteratively adds the apis to swagger json in the respective serverless::api resource | STRING |
| HIGH | samtranslator/plugins/api/implicit_http_api_plugin.py | 0 | actually process given api events. iteratively adds the apis to swagger json in the respective serverless::api resource | STRING |
| HIGH | samtranslator/plugins/api/implicit_api_plugin.py | 0 | actually process given api events. iteratively adds the apis to swagger json in the respective serverless::api resource | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | integration/helpers/base_test.py | 262 | CODE | |
| LOW | tests/test_types.py | 9 | CODE | |
| LOW | tests/translator/test_translator.py | 104 | CODE | |
| LOW | tests/translator/test_translator.py | 190 | CODE | |
| LOW | tests/model/eventsources/test_msk_event_source.py | 191 | CODE | |
| LOW | …l/eventsources/test_self_managed_kafka_event_source.py | 833 | CODE | |
| LOW | samtranslator/swagger/swagger.py | 253 | CODE | |
| LOW | samtranslator/swagger/swagger.py | 824 | CODE | |
| LOW | samtranslator/plugins/globals/globals.py | 285 | CODE | |
| LOW | …anslator/plugins/api/default_definition_body_plugin.py | 18 | CODE | |
| LOW | samtranslator/plugins/api/implicit_api_plugin.py | 345 | CODE | |
| LOW | samtranslator/plugins/api/implicit_api_plugin.py | 403 | CODE | |
| LOW | …ranslator/plugins/application/serverless_app_plugin.py | 109 | CODE | |
| LOW | …ranslator/plugins/application/serverless_app_plugin.py | 348 | CODE | |
| LOW | samtranslator/utils/actions.py | 27 | CODE | |
| LOW | samtranslator/utils/py27hash_fix.py | 23 | CODE | |
| LOW | samtranslator/utils/py27hash_fix.py | 606 | CODE | |
| LOW | samtranslator/utils/py27hash_fix.py | 629 | CODE | |
| LOW | samtranslator/translator/translator.py | 78 | CODE | |
| LOW | samtranslator/translator/translator.py | 109 | CODE | |
| LOW | samtranslator/translator/translator.py | 277 | CODE | |
| LOW | samtranslator/translator/translator.py | 344 | CODE | |
| LOW | samtranslator/model/apigatewayv2.py | 306 | CODE | |
| LOW | samtranslator/model/__init__.py | 720 | CODE | |
| LOW | samtranslator/model/__init__.py | 761 | CODE | |
| LOW | samtranslator/model/apigateway.py | 407 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 503 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 565 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 1142 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 2198 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 3188 | CODE | |
| LOW | samtranslator/model/sam_resources.py | 3623 | CODE | |
| LOW | samtranslator/model/eventsources/pull.py | 118 | CODE | |
| LOW | samtranslator/model/eventsources/pull.py | 257 | CODE | |
| LOW | samtranslator/model/eventsources/pull.py | 768 | CODE | |
| LOW | samtranslator/model/eventsources/push.py | 851 | CODE | |
| LOW | samtranslator/model/eventsources/push.py | 1077 | CODE | |
| LOW | samtranslator/model/role_utils/role_constructor.py | 92 | CODE | |
| LOW | samtranslator/model/api/apiv2_generator.py | 57 | CODE | |
| LOW | samtranslator/model/api/api_generator.py | 484 | CODE | |
| LOW | samtranslator/model/api/api_generator.py | 945 | CODE | |
| LOW | samtranslator/model/api/api_generator.py | 1349 | CODE | |
| LOW | samtranslator/model/api/http_api_generator.py | 168 | CODE | |
| LOW | samtranslator/model/stepfunctions/generators.py | 332 | CODE | |
| LOW | samtranslator/open_api/open_api.py | 171 | CODE | |
| LOW | samtranslator/open_api/open_api.py | 249 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bin/add_transform_test.py | 78 | except Exception as e: | CODE |
| LOW | bin/_file_formatter.py | 54 | except Exception as error: | CODE |
| LOW⚡ | …on/combination/test_function_with_capacity_provider.py | 234 | except Exception as e: | CODE |
| MEDIUM⚡ | …on/combination/test_function_with_capacity_provider.py | 236 | print(f"Error getting function capacity provider config: {e}") | CODE |
| LOW⚡ | …on/combination/test_function_with_capacity_provider.py | 248 | except Exception as e: | CODE |
| MEDIUM⚡ | …on/combination/test_function_with_capacity_provider.py | 250 | print(f"Error getting capacity provider config for {capacity_provider_logical_id}: {e}") | CODE |
| LOW | integration/setup/companion-stack.yaml | 403 | except Exception: pass | CODE |
| LOW | integration/setup/companion-stack.yaml | 405 | except Exception as e: print(f"api err: {e}") | CODE |
| LOW | integration/setup/companion-stack.yaml | 423 | except Exception: pass | CODE |
| LOW⚡ | integration/setup/companion-stack.yaml | 443 | except Exception: pass | CODE |
| LOW⚡ | integration/setup/companion-stack.yaml | 444 | except Exception as e: | CODE |
| LOW⚡ | integration/setup/companion-stack.yaml | 454 | except Exception: pass | CODE |
| LOW | integration/setup/companion-stack.yaml | 465 | except Exception: pass | CODE |
| LOW | integration/setup/companion-stack.yaml | 482 | except Exception: pass | CODE |
| MEDIUM | integration/setup/companion-stack.yaml | 392 | def _sweep_apis(apig, cutoff, ctx): | CODE |
| MEDIUM | integration/setup/companion-stack.yaml | 425 | def _fix_and_retry(cfn, iam, name): | CODE |
| MEDIUM | integration/setup/companion-stack.yaml | 447 | def _force_delete_role(iam, role): | CODE |
| MEDIUM | integration/setup/companion-stack.yaml | 456 | def _force_delete_policy(iam, arn): | CODE |
| LOW | integration/helpers/deployer/deployer.py | 179 | except Exception as ex: | CODE |
| LOW | integration/helpers/deployer/deployer.py | 382 | except Exception as ex: | CODE |
| MEDIUM | integration/helpers/deployer/deployer.py | 168 | def _create_change_set(self, stack_name, changeset_type, **kwargs): | CODE |
| LOW | samtranslator/metrics/metrics.py | 65 | except Exception: | CODE |
| LOW | samtranslator/metrics/method_decorator.py | 82 | except Exception as e: | CODE |
| LOW | samtranslator/plugins/sam_plugins.py | 134 | except Exception as ex: | CODE |
| LOW | samtranslator/feature_toggle/feature_toggle.py | 159 | except Exception: | CODE |
| LOW | samtranslator/model/__init__.py | 782 | except Exception: | CODE |
| LOW | samtranslator/model/sam_resources.py | 829 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/internal/schema_source/aws_serverless_microvmimage.py | 1 | CODE | |
| LOW | …or/internal/schema_source/aws_serverless_graphqlapi.py | 1 | CODE | |
| LOW | …ranslator/internal/schema_source/aws_serverless_api.py | 1 | CODE | |
| LOW | …ator/internal/schema_source/aws_serverless_function.py | 1 | CODE | |
| LOW | …ernal/schema_source/aws_serverless_networkconnector.py | 1 | CODE | |
| LOW | …rnal/schema_source/aws_serverless_capacity_provider.py | 1 | CODE | |
| LOW | …/internal/schema_source/aws_serverless_statemachine.py | 1 | CODE | |
| LOW | …r/internal/schema_source/aws_serverless_application.py | 1 | CODE | |
| LOW | …/internal/schema_source/aws_serverless_websocketapi.py | 1 | CODE | |
| LOW | …r/internal/schema_source/aws_serverless_webfunction.py | 1 | CODE | |
| LOW | …r/internal/schema_source/aws_serverless_simpletable.py | 1 | CODE | |
| LOW | …/internal/schema_source/aws_serverless_layerversion.py | 1 | CODE | |
| LOW | samtranslator/internal/schema_source/schema.py | 1 | CODE | |
| LOW | …lator/internal/schema_source/aws_serverless_httpapi.py | 1 | CODE | |
| LOW | samtranslator/public/plugins.py | 3 | CODE | |
| LOW | samtranslator/public/swagger.py | 3 | CODE | |
| LOW | samtranslator/public/models.py | 1 | CODE | |
| LOW | samtranslator/public/models.py | 1 | CODE | |
| LOW | samtranslator/public/open_api.py | 3 | CODE | |
| LOW | samtranslator/public/intrinsics.py | 3 | CODE | |
| LOW | samtranslator/public/intrinsics.py | 4 | CODE | |
| LOW | samtranslator/public/parser.py | 1 | CODE | |
| LOW | samtranslator/public/exceptions.py | 3 | CODE | |
| LOW | samtranslator/public/exceptions.py | 3 | CODE | |
| LOW | samtranslator/public/exceptions.py | 3 | CODE | |
| LOW | samtranslator/public/translator.py | 7 | CODE | |
| LOW | samtranslator/public/translator.py | 8 | CODE | |
| LOW | samtranslator/public/sdk/resource.py | 3 | CODE | |
| LOW | samtranslator/public/sdk/resource.py | 3 | CODE | |
| LOW | samtranslator/public/sdk/template.py | 3 | CODE | |
| LOW | samtranslator/public/sdk/parameter.py | 1 | CODE | |
| LOW | samtranslator/model/__init__.py | 18 | CODE | |
| LOW | samtranslator/model/role_utils/__init__.py | 3 | CODE | |
| LOW | samtranslator/model/stepfunctions/__init__.py | 9 | CODE | |
| LOW | samtranslator/model/stepfunctions/__init__.py | 10 | CODE | |
| LOW | samtranslator/model/stepfunctions/__init__.py | 11 | CODE | |
| LOW | samtranslator/model/stepfunctions/__init__.py | 11 | CODE | |
| LOW | samtranslator/model/stepfunctions/__init__.py | 11 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | integration/combination/test_function_with_alias.py | 204 | # Exclude $LATEST from the list and simply return all the version numbers. | COMMENT |
| MEDIUM | …tes/combination/function_with_deployment_disabled.yaml | 2 | # The test harness passes theses parameters even though they aren't used. So specify them here | COMMENT |
| LOW | integration/helpers/common_api.py | 33 | # Exclude $LATEST from the list and simply return all the version numbers. | COMMENT |
| LOW | …tor/input/explicit_api_with_invalid_events_config.yaml | 5 | # When a Function's Event contains a path that is "not" in the Swagger, the behavior would be just add Lambda::Permissio | COMMENT |
| MEDIUM | samtranslator/feature_toggle/feature_toggle.py | 121 | """Feature toggle config provider which uses a local file. This is to facilitate local testing.""" | STRING |
| LOW | samtranslator/model/resource_policies.py | 143 | # Nothing matches. Don't take opinions on how to handle it. Instead just set the appropriate type. | COMMENT |
| MEDIUM | samtranslator/model/apigateway.py | 141 | # Using int so tests are a little more robust; don't think the Python spec defines default precision | COMMENT |
| MEDIUM | samtranslator/model/sam_resources.py | 826 | # Validate CapacityProviderConfig using Pydantic model directly for comprehensive error collection | COMMENT |
| MEDIUM | samtranslator/model/sam_resources.py | 1599 | # Use enhanced validation method with comprehensive error collection | COMMENT |
| LOW | samtranslator/model/connector_profiles/profile.py | 72 | # s and pattern match exactly, simply return replacement string | COMMENT |
| LOW | samtranslator/intrinsics/actions.py | 533 | # Value must be an array with enough elements. If not, this is invalid GetAtt syntax. We just pass along | COMMENT |
| LOW | samtranslator/intrinsics/actions.py | 539 | # we just pass along the input to CFN for doing the validation | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bin/git_lfs_download.sh | 7 | # Check if a URL parameter is provided | COMMENT |
| LOW | integration/combination/test_state_machine_with_cwe.py | 23 | # Check if the CWE rule is created with the state machine as the target | COMMENT |
| LOW | …mbination/test_state_machine_with_cwe_dlq_generated.py | 26 | # Check if the CWE rule is created with the state machine as the target | COMMENT |
| LOW | integration/single/test_basic_function.py | 191 | # Check if the InvokePermission has InvokedViaFunctionUrl: True | COMMENT |
| LOW⚡ | tests/sdk/test_template.py | 107 | # Check if it exists | COMMENT |
| LOW | samtranslator/swagger/swagger.py | 99 | # Check if the OpenAPI version is 3.0, if it is then the extension needs to added to the Servers field, | COMMENT |
| LOW | samtranslator/swagger/swagger.py | 589 | # Check if Function/Path/Method specified 'NONE' for Authorizer | COMMENT |
| LOW | samtranslator/swagger/swagger.py | 661 | # Check if Function/Path/Method specified 'False' for ApiKeyRequired | COMMENT |
| LOW | samtranslator/utils/actions.py | 41 | # Check if DependsOn matches the original value of a changed_logical_id key | COMMENT |
| LOW | samtranslator/utils/py27hash_fix.py | 642 | # Check if there is explicit HttpApi resource | COMMENT |
| LOW | samtranslator/utils/py27hash_fix.py | 651 | # Check if there is any httpapi event for implicit api | COMMENT |
| LOW | samtranslator/model/__init__.py | 73 | # Check if validator has enum_values attribute (from IS_STR_ENUM) | COMMENT |
| LOW | samtranslator/model/__init__.py | 734 | # Check if more than one property exists | COMMENT |
| LOW | samtranslator/model/__init__.py | 741 | # Check if some but not all properties from the group are present | COMMENT |
| LOW | samtranslator/intrinsics/actions.py | 26 | # Check if the value is a CloudFormation internal placeholder | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | samtranslator/compat.py | 15 | __all__ = ["pydantic"] | CODE |
| LOW | samtranslator/metrics/method_decorator.py | 32 | def set_instance(metrics: Metrics) -> None: | CODE |
| LOW | samtranslator/swagger/swagger.py | 621 | def set_path_default_apikey_required(self, path: str, required_options_api_key: bool = True) -> None: | CODE |
| LOW | samtranslator/public/plugins.py | 1 | __all__ = ["BasePlugin"] | CODE |
| LOW | samtranslator/public/swagger.py | 1 | __all__ = ["SwaggerEditor"] | CODE |
| LOW | samtranslator/public/open_api.py | 1 | __all__ = ["OpenApiEditor"] | CODE |
| LOW | samtranslator/public/intrinsics.py | 1 | __all__ = ["IntrinsicsResolver", "is_intrinsics"] | CODE |
| LOW | samtranslator/public/exceptions.py | 1 | __all__ = ["InvalidDocumentException", "InvalidEventException", "InvalidResourceException"] | CODE |
| LOW | samtranslator/public/translator.py | 5 | __all__ = ["ManagedPolicyLoader", "Translator"] | CODE |
| LOW | samtranslator/public/sdk/resource.py | 1 | __all__ = ["SamResource", "SamResourceType"] | CODE |
| LOW | samtranslator/public/sdk/template.py | 1 | __all__ = ["SamTemplate"] | CODE |
| LOW | samtranslator/model/__init__.py | 467 | def set_resource_attribute(self, attr: str, value: Any) -> None: | CODE |
| LOW | samtranslator/model/apigateway.py | 77 | def update_deployment_ref(self, deployment_logical_id: str) -> None: | CODE |
| LOW | samtranslator/model/role_utils/__init__.py | 1 | __all__ = ["construct_role_for_resource"] | CODE |
| LOW | samtranslator/model/api/apiv2_generator.py | 257 | def _update_route53_routing_policy_properties(route53_config: dict[str, Any], recordset: dict[str, Any]) -> None: | CODE |
| LOW⚡ | samtranslator/model/api/api_generator.py | 1549 | def _set_default_apikey_required(self, swagger_editor: SwaggerEditor, required_options_api_key: bool) -> None: | CODE |
| LOW⚡ | samtranslator/model/api/api_generator.py | 1553 | def _set_endpoint_configuration(self, rest_api: ApiGatewayRestApi, value: Union[str, dict[str, Any]]) -> None: | CODE |
| LOW | samtranslator/model/api/api_generator.py | 742 | def _set_optional_domain_properties(self, domain: Union[ApiGatewayDomainName, ApiGatewayDomainNameV2]) -> None: | CODE |
| LOW | samtranslator/model/api/api_generator.py | 805 | def _update_route53_routing_policy_properties(route53_config: dict[str, Any], recordset: dict[str, Any]) -> None: | CODE |
| LOW | samtranslator/model/api/http_api_generator.py | 232 | def _update_default_path(self) -> None: | CODE |
| LOW | samtranslator/model/stepfunctions/__init__.py | 1 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | setup.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | integration/single/test_basic_function.py | 341 | function_configuration_result["TracingConfig"]["Mode"], | COMMENT |
| LOW | integration/helpers/deployer/deployer.py | 1 | """ | COMMENT |
| LOW | integration/helpers/deployer/utils/artifact_exporter.py | 1 | """ | COMMENT |
| LOW | tests/plugins/application/test_serverless_app_plugin.py | 361 | # itertools.product([ | COMMENT |
| LOW | samtranslator/public/__init__.py | 1 | # flake8: noqa | COMMENT |
| LOW | samtranslator/model/__init__.py | 141 | resource_type: str = None # type: ignore | COMMENT |
| LOW | samtranslator/model/__init__.py | 581 | # Property names support "Property.Path=Value" syntax for value-conditional presence checks | COMMENT |
| LOW | samtranslator/model/sam_resources.py | 1161 | raise ValueError("Lambda function code must be a valid non-empty dictionary") | COMMENT |
| LOW | samtranslator/model/sam_resources.py | 1181 | # to trigger creation of a new version every time code location changes. Since logicalId changes, CloudFormation | COMMENT |
| LOW | samtranslator/intrinsics/resolver.py | 121 | """ | COMMENT |
| LOW | .github/workflows/codeql.yml | 1 | # For most projects, this workflow file will not need changing; you simply need | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | integration/helpers/s3_uploader.py | 47 | CODE | |
| LOW | samtranslator/model/apigatewayv2.py | 187 | CODE | |
| LOW | samtranslator/model/apigateway.py | 331 | CODE | |
| LOW | samtranslator/model/api/apiv2_generator.py | 16 | CODE | |
| LOW | samtranslator/model/api/websocket_api_generator.py | 32 | CODE | |
| LOW | samtranslator/model/api/api_generator.py | 186 | CODE | |
| LOW | samtranslator/model/api/http_api_generator.py | 37 | CODE | |
| LOW | samtranslator/model/microvm_image/generators.py | 23 | CODE | |
| LOW | samtranslator/model/stepfunctions/generators.py | 31 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/model/preferences/deployment_preference_collection.py | 108 | # If there are any enabled deployment preferences without conditions, return false | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | samtranslator/internal/schema_source/sam-docs.json | 973 | "AutoDeploymentMode": "How the endpoint routes traffic across revisions. \n+ `LatestRevision`: sends 100% of traf | CODE |
| MEDIUM | schema_source/sam.schema.json | 11270 | "markdownDescription": "How the endpoint routes traffic across revisions. \n+ `LatestRevision`: sends 100% of | CODE |
| MEDIUM | schema_source/sam.schema.json | 11406 | "markdownDescription": "How the endpoint routes traffic across revisions. \n+ `LatestRevision`: sends 100% of | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/translator/input/websocket_api_description.yaml | 10 | Description: Lorem Ipsum | CODE |
| LOW | tests/translator/output/websocket_api_description.json | 58 | "Description": "Lorem Ipsum", | CODE |
| LOW | …ranslator/output/aws-cn/websocket_api_description.json | 58 | "Description": "Lorem Ipsum", | CODE |
| LOW | …lator/output/aws-us-gov/websocket_api_description.json | 58 | "Description": "Lorem Ipsum", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/plugins/globals/test_globals.py | 237 | # ─── Multi-level nested dot-path rules ────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/metrics/test_method_decorator.py | 15 | def my_method(self): | CODE |
| LOW⚡ | tests/metrics/test_method_decorator.py | 43 | def my_function(): | CODE |