Open source MCP Servers for AWS
This report summarizes scanner evidence for awslabs/mcp, a Python project with 9,764 GitHub stars. SynthScan examined 1,041,620 lines of code across 3268 source files, recording 30503 pattern matches distributed across 26 syntactic categories. The legacy adjusted pattern signal is 36.8 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 26001 finding(s).
Are imports declared and package/API names verified? 557 finding(s).
Are wrappers, guards, and repeated structures necessary? 23881 finding(s).
Which changes need focused human review? 30503 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 30503 distinct pattern matches across 26 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | DESIGN_GUIDELINES.md | 281 | def validate_aspect_ratio_and_total_pixels(self): | CODE |
| LOW | DESIGN_GUIDELINES.md | 305 | async def query_knowledge_bases_tool( | CODE |
| LOW | DESIGN_GUIDELINES.md | 556 | async def perform_parallel_operations(ctx: Context, query: str = Field(...)) -> str: | CODE |
| LOW | DESIGN_GUIDELINES.md | 672 | def check_dangerous_functions(code: str) -> List[Dict[str, Any]]: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 104 | async def improve_prompt_with_nova_text(prompt: str) -> str: | CODE |
| LOW | testing/pytest_utils.py | 194 | def create_resource_test_config( | CODE |
| LOW | testing/pytest_utils.py | 211 | def create_prompt_test_config( | CODE |
| LOW | scripts/verify_tool_names.py | 79 | def convert_package_name_to_server_format(package_name: str) -> str: | CODE |
| LOW | scripts/verify_tool_names.py | 94 | def calculate_fully_qualified_name(server_name: str, tool_name: str) -> str: | CODE |
| LOW | scripts/verify_tool_names.py | 196 | def find_all_tools_in_package(package_dir: Path) -> List[Tuple[str, Path, int]]: | CODE |
| LOW | scripts/migrate-mcp-v2.py | 460 | def drop_unused_errordata_import(text: str) -> str: | CODE |
| LOW | scripts/verify_package_name.py | 133 | def find_package_references_in_readme( | CODE |
| LOW | scripts/verify_package_name.py | 230 | def verify_package_name_consistency( | CODE |
| LOW | .github/workflows/typescript.yml | 116 | def extract_copyright_from_metadata(package_name): | CODE |
| LOW | .github/workflows/python.yml | 244 | def extract_copyright_from_metadata(package_name): | CODE |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 909 | def extract_workspace_id_from_url(url: str) -> Optional[str]: | STRING |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 932 | async def configure_workspace_for_request( | STRING |
| LOW | …prometheus-mcp-server/tests/test_security_validator.py | 23 | def test_validate_string_safe(self): | CODE |
| LOW | …prometheus-mcp-server/tests/test_security_validator.py | 36 | def test_validate_string_unsafe(self): | CODE |
| LOW | …prometheus-mcp-server/tests/test_security_validator.py | 43 | def test_validate_params_safe(self): | CODE |
| LOW | …prometheus-mcp-server/tests/test_security_validator.py | 67 | def test_validate_params_unsafe(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_final_coverage.py | 12 | async def test_make_request_max_retries_reached(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 32 | def test_validate_params_empty(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 37 | def test_validate_params_non_string(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 46 | def test_validate_params_dangerous(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 56 | async def test_make_request_invalid_endpoint(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_server_coverage.py | 77 | async def test_make_request_invalid_params(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 95 | async def test_make_request_max_retries_exceeded(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 100 | def test_validate_query_dangerous(self): | CODE |
| LOW⚡ | src/prometheus-mcp-server/tests/test_server_coverage.py | 107 | async def test_execute_query_validation_failure(self, mock_context): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_server_coverage.py | 135 | async def test_execute_range_query_validation_failure(self, mock_context): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_server_coverage.py | 168 | async def test_get_available_workspaces_use_default_region(self, mock_context): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_server_coverage.py | 187 | async def test_execute_query_with_time_parameter(self, mock_context): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 25 | def test_validate_success_with_profile(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 48 | def test_validate_success_without_profile(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 71 | def test_validate_no_credentials(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 85 | def test_validate_no_credentials_error(self): | CODE |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 99 | def test_validate_client_error(self): | CODE |
| LOW | …/prometheus-mcp-server/tests/test_prometheus_client.py | 26 | async def test_make_request_success(self): | CODE |
| LOW | …/prometheus-mcp-server/tests/test_prometheus_client.py | 40 | async def test_make_request_invalid_endpoint_type(self): | CODE |
| LOW | …/prometheus-mcp-server/tests/test_prometheus_client.py | 52 | async def test_make_request_dangerous_endpoint(self): | CODE |
| LOW | …/prometheus-mcp-server/tests/test_prometheus_client.py | 64 | async def test_make_request_dangerous_params(self): | CODE |
| LOW⚡ | …/prometheus-mcp-server/tests/test_prometheus_client.py | 80 | async def test_make_request_api_url_construction(self): | CODE |
| LOW⚡ | …/prometheus-mcp-server/tests/test_prometheus_client.py | 86 | async def test_make_request_api_error(self): | CODE |
| LOW⚡ | …/prometheus-mcp-server/tests/test_prometheus_client.py | 92 | async def test_make_request_network_error_with_retry(self): | CODE |
| LOW⚡ | …/prometheus-mcp-server/tests/test_prometheus_client.py | 98 | async def test_make_request_max_retries_exceeded(self): | CODE |
| LOW⚡ | …/prometheus-mcp-server/tests/test_prometheus_client.py | 104 | async def test_make_request_no_credentials(self): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 30 | def test_get_prometheus_client(self): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 61 | async def test_get_workspace_details_success(self): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 94 | async def test_get_workspace_details_no_endpoint(self): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 121 | async def test_get_workspace_details_api_error(self): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 139 | async def test_configure_workspace_for_request_with_env_url(self, mock_context): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 178 | async def test_configure_workspace_for_request_with_env_url_connection_failure( | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 209 | async def test_configure_workspace_for_request_no_env_url_no_workspace_id(self, mock_context): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 224 | async def test_configure_workspace_for_request_with_workspace_id(self, mock_context): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 273 | async def test_configure_workspace_for_request_with_workspace_id_connection_failure( | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 314 | async def test_configure_workspace_for_request_unusual_workspace_id(self, mock_context): | CODE |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 361 | async def test_configure_workspace_for_request_with_url_containing_workspace_id( | CODE |
| LOW | …metheus-mcp-server/tests/test_prometheus_connection.py | 28 | async def test_test_connection_success(self): | CODE |
| LOW | …metheus-mcp-server/tests/test_prometheus_connection.py | 48 | async def test_test_connection_access_denied(self): | CODE |
| 19675 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …-mcp-server/awslabs/aws_transform_mcp_server/server.py | 57 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …-mcp-server/awslabs/aws_transform_mcp_server/server.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/config_store.py | 177 | # ── FES config ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/config_store.py | 205 | # ── Persistence ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 21 | # ── FES (Front End Service) targets ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 25 | # ── TCP (Transform Control Plane) ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 29 | # ── Client identity ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 33 | # ── FES SigV4 ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 36 | # ── HTTP retry / timeout ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 43 | # ── Artifact transfer timeout ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 59 | # ── Token refresh ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 62 | # ── Persisted config path ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 65 | # ── OAuth scope ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 68 | # ── FES deployed regions (for profile discovery fan-out) ───────────────── | COMMENT |
| MEDIUM | …-mcp-server/awslabs/aws_transform_mcp_server/consts.py | 81 | # ── Fan-out timeout for profile discovery (seconds per region) ────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 31 | # ── Result type ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 46 | # ── AutoForm metadata helper ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 62 | # ── Artifact-diff merge helpers ────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 81 | # ── Per-component customization type ───────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 112 | # ── Preprocess functions ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 307 | # ── CUSTOMIZATIONS dict ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 360 | # ── Dotnet components ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 455 | # ── Mainframe display components ───────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 528 | # ── Mainframe S3 path input components ───────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 585 | # ── Mainframe selection components ───────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 611 | # ── Mainframe complex components ─────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 658 | # ── Other components ───────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 672 | # ── DynamicHITLRenderEngine field extraction ───────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 746 | # ── AutoForm field extraction from agent artifacts ─────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 791 | # ── Dynamic output schema builder ──────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 885 | # ── Task enrichment ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 966 | # ── Validate + normalize + auto-fill ───────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tool_utils.py | 24 | # ── MCP tool annotations ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tool_utils.py | 69 | # ── Job response trimming ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tool_utils.py | 150 | # ── Result builders ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tool_utils.py | 244 | # ── S3 download helper ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_client.py | 76 | # ── boto3 client helpers ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_client.py | 243 | # ── Pagination helper ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_client.py | 310 | # ── Main entry point ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_models.py | 39 | # ── Base class ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_models.py | 55 | # ── Shared nested models ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …slabs/aws_transform_mcp_server/transform_api_models.py | 333 | # ── Request models ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tcp_client.py | 36 | # ── TCP operations ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 225 | # ── Cookie mode parameters ───────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 244 | # ── SSO mode parameters ──────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 287 | # ── Reset ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 328 | # ── Cookie auth ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 378 | # ── SSO / Bearer auth ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 642 | # ── FES status ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 742 | # ── SigV4 status (auto-detect + STS validation) ──────────────── | COMMENT |
| MEDIUM | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 792 | # ── AWS credential API status ────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 228 | # ── Step 1: Fetch the task ────────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 241 | # ── Step 1b: Validate action against severity/category ────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 269 | # ── TOOL_APPROVAL fast path ───────────────────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 291 | # ── Step 2: Upload file if provided ───────────────────── | COMMENT |
| MEDIUM | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 307 | # ── Step 3: Download agent artifact for validation ────── | COMMENT |
| MEDIUM⚡ | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 318 | # ── Step 4: Build response content ────────────────────── | COMMENT |
| MEDIUM⚡ | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 321 | # ── Step 5: Validate and format ───────────────────────── | COMMENT |
| MEDIUM⚡ | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 330 | # ── Step 6: Upload response artifact ──────────────────── | COMMENT |
| MEDIUM⚡ | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 339 | # ── Step 7: Route to correct API based on action ──────── | COMMENT |
| 1181 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …mples/mcp-integration-with-kb/clients/client_server.py | 127 | # Create a Bedrock LLM | COMMENT |
| MEDIUM | …mples/mcp-integration-with-kb/clients/client_server.py | 145 | # Create a ChatBedrock instance with tools | COMMENT |
| MEDIUM | …mples/mcp-integration-with-kb/clients/client_server.py | 206 | # Create a new conversation with the tool response - use the original query | COMMENT |
| MEDIUM | scripts/verify_package_name.py | 16 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | scripts/verify_awslabs_init.py | 43 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | .github/workflows/typescript.yml | 87 | # Define the namespace | COMMENT |
| MEDIUM | …zon-qbusiness-anonymous-mcp-server/awslabs/__init__.py | 15 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | src/prometheus-mcp-server/awslabs/__init__.py | 15 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 280 | # Create a fresh session and client for each attempt | COMMENT |
| MEDIUM | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 427 | # Create a new session to force credentials to reload | COMMENT |
| MEDIUM | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 862 | # Create a basic entry for the configured workspace | STRING |
| MEDIUM | …ometheus-mcp-server/tests/test_coverage_improvement.py | 121 | # The following code is kept for reference but not executed | COMMENT |
| MEDIUM | src/aws-transform-mcp-server/awslabs/__init__.py | 15 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | src/aws-transform-mcp-server/tests/test_artifact.py | 60 | # Create a temp file | COMMENT |
| MEDIUM | …c/aws-transform-mcp-server/tests/test_upload_helper.py | 189 | # Create a real temp file | COMMENT |
| MEDIUM | src/ecs-mcp-server/awslabs/__init__.py | 15 | # This file is part of the awslabs namespace. | COMMENT |
| MEDIUM | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 265 | # Create a mock ECR result for later use | COMMENT |
| MEDIUM | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/status.py | 367 | "# Create a hosted zone for your domain", | CODE |
| MEDIUM | …rver/awslabs/ecs_mcp_server/modules/troubleshooting.py | 45 | # Create a valid function name from the pattern | COMMENT |
| MEDIUM⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 25 | # Create a mock function that returns a response with PII | COMMENT |
| MEDIUM⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 67 | # Create a mock function that returns a response with nested PII | COMMENT |
| MEDIUM⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 125 | # Create a mock AWS client response with PII | COMMENT |
| MEDIUM⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 144 | # Create a mock function that returns the AWS response | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_delete.py | 321 | # Create a mock CF client with the right behavior | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_delete.py | 415 | # Create a mock CF client with the right behavior | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_delete.py | 653 | # Create a mock CF client with the right behavior | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_delete.py | 706 | # Create a mock CF client with the right behavior | COMMENT |
| MEDIUM⚡ | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 166 | # Create a mock boto3 | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 85 | # Create a mock to be used within AwsClientFactory | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 129 | # Create a test class to simulate ClientContextManager | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 204 | # Create a mock boto3 | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 232 | # Import the necessary modules | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 260 | # Create a mock boto3 | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 305 | # Create a mock that can be used as an awaitable client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 361 | # Create a mock STS client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 395 | # Create a mock STS client that raises an exception | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 501 | # Create a mock EC2 client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 540 | # Create a mock EC2 client that returns no VPCs | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 571 | # Create a mock EC2 client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 611 | # Create a mock EC2 client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 629 | # Create a mock EC2 client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 656 | # Create a mock ECR client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 689 | # Create a mock ECR client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 735 | # Create a mock ECR client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 893 | # Create a mock EC2 client | COMMENT |
| MEDIUM | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 928 | # Create a mock EC2 client | COMMENT |
| MEDIUM⚡ | src/ecs-mcp-server/tests/unit/utils/test_security.py | 189 | # Create a JSON array instead of a JSON object | COMMENT |
| MEDIUM | …-mcp-server/tests/unit/utils/test_security_extended.py | 70 | # Create a mock async function | COMMENT |
| MEDIUM | …-mcp-server/tests/unit/utils/test_security_extended.py | 73 | # Create a config that allows the permission | COMMENT |
| MEDIUM | …-mcp-server/tests/unit/utils/test_security_extended.py | 91 | # Create a mock async function | COMMENT |
| MEDIUM | …-mcp-server/tests/unit/utils/test_security_extended.py | 94 | # Create a config that denies the permission | COMMENT |
| MEDIUM⚡ | …-mcp-server/tests/unit/utils/test_security_extended.py | 116 | # Create a mock async function | COMMENT |
| MEDIUM⚡ | …-mcp-server/tests/unit/utils/test_security_extended.py | 119 | # Create a config that denies the permission | COMMENT |
| MEDIUM⚡ | …nit/troubleshooting_tools/test_fetch_service_events.py | 28 | # Create a test service with events | COMMENT |
| MEDIUM | …nit/troubleshooting_tools/test_fetch_service_events.py | 261 | # Define a service with a load balancer configuration | COMMENT |
| MEDIUM | …nit/troubleshooting_tools/test_fetch_service_events.py | 292 | # Define a service with load balancer but no targetGroupArn | COMMENT |
| MEDIUM | …nit/troubleshooting_tools/test_fetch_service_events.py | 326 | # Define a service with load balancer but no containerPort | COMMENT |
| MEDIUM | …oubleshooting_tools/test_detect_image_pull_failures.py | 666 | # Define a function that will be called inside detect_image_pull_failures | COMMENT |
| MEDIUM | …-mcp-server/tests/unit/api/test_ecs_troubleshooting.py | 336 | # Create a copy of ACTIONS to avoid modifying the global dictionary | COMMENT |
| MEDIUM | …/tests/unit/modules/test_resource_management_module.py | 12 | # Create a mock MCP server | COMMENT |
| 1287 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | trivy.yaml | 1 | --- | COMMENT |
| LOW | DESIGN_GUIDELINES.md | 161 | update_changelog_on_bump = true | COMMENT |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …with-nova-canvas/user_interfaces/image_generator_st.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …cp-server/sample_state_machines/customer-create/app.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …ver/sample_state_machines/customer-info-from-id/app.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …er/sample_state_machines/customer-id-from-email/app.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …integration-with-kb/user_interfaces/chat_bedrock_st.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | testing/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | testing/types.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | testing/pytest_utils.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | testing/mcp_test_client.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | testing/mcp_test_runner.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | scripts/verify_tool_names.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/verify-mcp-v2-locks.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/migrate-mcp-v2.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/migrate-mcp-v2.py | 101 | COMMENT | |
| LOW | scripts/migrate-mcp-v2.py | 141 | COMMENT | |
| LOW | scripts/migrate-mcp-v2.py | 161 | # "horizontal whitespace" (`[ \t]`) and not `\s`: `\s` matches newlines, so under re.MULTILINE | COMMENT |
| LOW | scripts/migrate-mcp-v2.py | 181 | # renamed too — rewriting only the module half yields `mcp.server.mcpserver.FastMCP`, | COMMENT |
| LOW | scripts/verify_package_name.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/verify_awslabs_init.py | 1 | #!/usr/bin/env uv run --script | COMMENT |
| LOW | scripts/verify_awslabs_init.py | 21 | # limitations under the License. | COMMENT |
| LOW | .github/workflows/bandit.yml | 41 | # Report only issues of a given severity level or higher. Can be LOW, MEDIUM or HIGH. Default is UNDEFINED (ev | COMMENT |
| LOW | .github/workflows/release.py | 1 | #!/usr/bin/env uv run --script | COMMENT |
| LOW | .github/workflows/check-license-header-hash.txt | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | .github/workflows/codeql.yml | 1 | # For most projects, this workflow file will not need changing; you simply need | COMMENT |
| LOW | .github/workflows/semgrep-requirements.txt | 1 | # This file was autogenerated by uv via the following command: | COMMENT |
| LOW | .github/workflows/check-license-header-slash.txt | 1 | // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …thub/actions/build-and-push-container-image/action.yml | 1 | --- | COMMENT |
| LOW | …n-qbusiness-anonymous-mcp-server/docker-healthcheck.sh | 1 | #!/bin/sh | COMMENT |
| LOW | …zon-qbusiness-anonymous-mcp-server/awslabs/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …wslabs/amazon_qbusiness_anonymous_mcp_server/server.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …labs/amazon_qbusiness_anonymous_mcp_server/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …slabs/amazon_qbusiness_anonymous_mcp_server/clients.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …mazon-qbusiness-anonymous-mcp-server/tests/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …on-qbusiness-anonymous-mcp-server/tests/test_server.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …azon-qbusiness-anonymous-mcp-server/tests/test_main.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …azon-qbusiness-anonymous-mcp-server/tests/test_init.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/docker-healthcheck.sh | 1 | #!/bin/sh | COMMENT |
| LOW | src/prometheus-mcp-server/awslabs/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/models.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …s-mcp-server/awslabs/prometheus_mcp_server/__init__.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/consts.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …prometheus-mcp-server/tests/test_security_validator.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/conftest.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_server_coverage.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_aws_credentials.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …/prometheus-mcp-server/tests/test_prometheus_client.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …c/prometheus-mcp-server/tests/test_workspace_config.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_models.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …metheus-mcp-server/tests/test_prometheus_connection.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_tools.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_main.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_init.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | …ometheus-mcp-server/tests/test_coverage_improvement.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_consts.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| LOW | src/prometheus-mcp-server/tests/test_config_manager.py | 1 | # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | COMMENT |
| 2236 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/release.py | 49 | Validate path for security issues including path traversal. Args: path: Path to validate allowed_ba | STRING |
| HIGH | .github/workflows/release.py | 83 | Validate and sanitize package name. Args: name: Package name to validate Returns: Validated pa | STRING |
| HIGH | .github/workflows/release.py | 151 | Securely read file with validation. Args: file_path: Path to file encoding: File encoding Retu | STRING |
| HIGH | …wslabs/amazon_qbusiness_anonymous_mcp_server/server.py | 52 | MCP tool to query Amazon Q Business and return a formatted response. This tool provides a Model Context Protocol in | STRING |
| HIGH | …slabs/amazon_qbusiness_anonymous_mcp_server/clients.py | 60 | Execute a synchronous chat query against Amazon Q Business. Args: client (boto3.client): Configured Q Busin | STRING |
| HIGH | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 231 | Make a request to the Prometheus HTTP API with AWS SigV4 authentication. Args: prometheus_url: The | STRING |
| HIGH | …-server/awslabs/aws_transform_mcp_server/http_utils.py | 76 | Make an HTTP request with exponential-backoff retry on transient errors. Retries on status codes in RETRYABLE_STATU | STRING |
| HIGH | …rver/awslabs/aws_transform_mcp_server/upload_helper.py | 63 | Upload a JSON string as an artifact and return the artifactId. 3-step flow: 1. SHA256 of content bytes -> bas | STRING |
| HIGH | …rver/awslabs/aws_transform_mcp_server/upload_helper.py | 135 | Upload a binary file to the artifact store. Returns the artifact ID. Args: workspace_id: The workspace iden | STRING |
| HIGH | …-server/awslabs/aws_transform_mcp_server/tcp_client.py | 84 | Call a TCP (Transform Control Plane) operation with SigV4 signing and retries. Credentials are resolved from boto3' | STRING |
| HIGH | …cs-mcp-server/awslabs/ecs_mcp_server/utils/security.py | 56 | Validates application name to ensure it complies with AWS ECS/ECR naming requirements. Requirements: - Len | STRING |
| HIGH | …cs-mcp-server/awslabs/ecs_mcp_server/utils/security.py | 107 | Validates a CloudFormation template against basic schema requirements. Args: template_path: Path to th | STRING |
| HIGH | …cs-mcp-server/awslabs/ecs_mcp_server/utils/security.py | 160 | Checks if the specified permission is allowed based on configuration settings. Args: config: The MCP s | STRING |
| HIGH | …/ecs-mcp-server/awslabs/ecs_mcp_server/utils/docker.py | 75 | Builds and pushes a Docker image to ECR. Args: app_path: Path to the application directory containing | STRING |
| HIGH | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 215 | Gets ECR login password for Docker authentication. Args: role_arn: ARN of the ECR push/pull role to us | STRING |
| HIGH | …server/awslabs/ecs_mcp_server/utils/path_validation.py | 138 | Validates a user-supplied filesystem path. Relative paths are accepted and resolved against the current workin | STRING |
| HIGH | …rver/awslabs/ecs_mcp_server/api/ecs_troubleshooting.py | 375 | ECS troubleshooting tool. This tool provides access to all ECS troubleshooting operations through a single | STRING |
| HIGH | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 42 | Prepares CloudFormation template files for ECR and ECS infrastructure. Creates the cloudformation-templates dir | STRING |
| HIGH | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 116 | Creates complete ECS infrastructure using CloudFormation. This method combines the creation of ECR and ECS infr | STRING |
| HIGH | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 432 | Gets the latest image tag from ECR for the given repository. Args: app_name: Name of the application | STRING |
| HIGH | …rver/awslabs/ecs_mcp_server/api/resource_management.py | 128 | Convert CamelCase to snake_case. This function is used to convert AWS API operation names from their CamelCase | STRING |
| HIGH | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 46 | Creates ECR infrastructure and build & pushes an image to ECR. This function: 1. Creates ECR repository an | STRING |
| HIGH | …rver/awslabs/ecs_mcp_server/modules/troubleshooting.py | 71 | ECS troubleshooting tool with multiple diagnostic actions. This tool provides access to all ECS troubl | STRING |
| HIGH | …s-mcp-server/awslabs/ecs_mcp_server/modules/express.py | 58 | Creates ECR infrastructure and builds/pushes a Docker image to ECR. This tool automates the complete E | STRING |
| HIGH | …s-mcp-server/awslabs/ecs_mcp_server/modules/express.py | 137 | Validates prerequisites for ECS Express Mode deployment. This tool checks that all required resources | STRING |
| HIGH | …s-mcp-server/awslabs/ecs_mcp_server/modules/express.py | 254 | Deletes a complete Express Mode deployment including service and ECR infrastructure. This tool perform | STRING |
| HIGH | …s-mcp-server/awslabs/ecs_mcp_server/modules/express.py | 339 | Waits for ECS tasks in a service to reach RUNNING status. This tool polls the service every 10 seconds | STRING |
| HIGH | …ql-mcp-server/awslabs/aurora_dsql_mcp_server/server.py | 731 | Proxy a request to the remote knowledge MCP server. Args: method: The MCP tool method name to call | STRING |
| HIGH | …server/awslabs/valkey_mcp_server/tools/valkey_write.py | 146 | Execute a mutating Valkey command. Write tier — allowlisted mutations only. Destructive commands (FLUSHALL, SHU | STRING |
| HIGH | …-server/awslabs/valkey_mcp_server/tools/valkey_read.py | 114 | Execute a read-only Valkey command. Safe tier — always available, even in readonly mode. Only allowlisted read- | STRING |
| HIGH | …server/awslabs/valkey_mcp_server/tools/valkey_admin.py | 76 | Execute a destructive Valkey command. Admin tier — disabled by default. Requires both: 1. Server config: VALKEY | STRING |
| HIGH | …cp-server/awslabs/valkey_mcp_server/embeddings/base.py | 31 | Generate an embedding vector from text. Args: text: Input text to embed Returns: | STRING |
| HIGH | …cp-server/awslabs/aws_documentation_mcp_server/util.py | 77 | Extract and convert HTML content to Markdown format. Args: html: Raw HTML content to process Returns: | STRING |
| HIGH | …ver/awslabs/aws_documentation_mcp_server/server_aws.py | 207 | Extract specific sections from AWS documentation pages by title. Retrieves a page, converts to markdown, and return | STRING |
| HIGH | …agentcore_mcp_server/tools/browser/snapshot_manager.py | 400 | Resolve a ref to a Playwright Locator. Args: page: Playwright Page to locate elements on. | STRING |
| HIGH | …entcore_mcp_server/tools/browser/connection_manager.py | 90 | Get the Browser instance for a session. Args: session_id: AgentCore browser session identifier. | STRING |
| HIGH | …entcore_mcp_server/tools/browser/connection_manager.py | 109 | Get the first browser context for a session. Args: session_id: AgentCore browser session identifier | STRING |
| HIGH | …entcore_mcp_server/tools/browser/connection_manager.py | 127 | Get the active page for a session. Returns the explicitly set active page if one exists and is still open, | STRING |
| HIGH | …_agentcore_mcp_server/tools/code_interpreter/client.py | 109 | Get the client for an active session. Args: session_id: The session ID to look up. Returns: Th | STRING |
| HIGH | …azon_bedrock_agentcore_mcp_server/utils/doc_fetcher.py | 48 | Fetch content from a URL with proper headers and timeout. Args: url: The URL to fetch Returns: | STRING |
| HIGH | …azon_bedrock_agentcore_mcp_server/utils/doc_fetcher.py | 65 | Parse an llms.txt file and extract document links. Args: url: URL of the llms.txt file to parse Return | STRING |
| HIGH | …azon_bedrock_agentcore_mcp_server/utils/doc_fetcher.py | 137 | Fetch a web page and return cleaned content. Args: page_url: URL of the page to fetch Returns: | STRING |
| HIGH | …on_bedrock_agentcore_mcp_server/utils/url_validator.py | 113 | Validate URLs based on allowed domains. Args: urls: Single URL string or list of URLs to validate a | STRING |
| HIGH | …mcp-server/tests/browser/test_integ_browser_session.py | 170 | Extract the element ref for a given role and name from snapshot text. Args: snapshot_text: Accessibility tr | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/server.py | 410 | Select and build the JWT :class:`RoleResolver` from the resolved config. The resolver is chosen by which single rol | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/server.py | 460 | Build inbound identity mechanism instances from the resolved config. Maps each enabled mechanism name (already vali | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 119 | Normalize a raw transport value to a supported transport mode. Surrounding whitespace is trimmed and the result is | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 204 | Resolve and validate a network bind host, applying the default when absent. Args: raw: The raw host value f | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 227 | Convert a raw port value to an integer in ``1..65535``, applying the default. An absent or whitespace-only value yi | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 258 | Convert a raw JWT session-duration value to a validated integer of seconds. An absent or whitespace-only value yiel | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 303 | Select the single active JWT role-resolution source, rejecting conflicts. The two sources ``MCP_JWT_ROLE_ARN`` (sta | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 354 | Parse a raw multi-tenant configuration value into a boolean. The value is matched case-insensitively after trimming | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 387 | Parse a raw inbound-auth value into an ordered tuple of mechanisms. The value is a comma-separated list selecting a | STRING |
| HIGH | …cp-server/awslabs/aws_healthomics_mcp_server/config.py | 534 | Parse and resolve server configuration from CLI flags and environment. Each value is resolved with CLI-over-environ | STRING |
| HIGH | …server/awslabs/aws_healthomics_mcp_server/transport.py | 71 | Return a supported transport mode for the given configuration. The configured transport is normalized (trimmed; | STRING |
| HIGH | …erver/awslabs/aws_healthomics_mcp_server/middleware.py | 84 | Derive a :class:`CredentialContext` from the request. Args: scope: The ASGI HTTP connection scope. | STRING |
| HIGH | …erver/awslabs/aws_healthomics_mcp_server/middleware.py | 197 | Select a mechanism and derive the credential context for the request. Iterates the enabled mechanisms in the de | STRING |
| HIGH | …labs/aws_healthomics_mcp_server/mechanisms/explicit.py | 110 | Build a :class:`CredentialContext` from the explicit-credential headers. Reads the access key id, secret access | STRING |
| HIGH | …aws_healthomics_mcp_server/mechanisms/role_resolver.py | 131 | Resolve the :class:`RoleTarget` for the given decoded token claims. Args: claims: The decoded (alre | STRING |
| HIGH | …aws_healthomics_mcp_server/mechanisms/role_resolver.py | 212 | Return the raw Registry_Record for ``identity``, or ``None`` if absent. Args: identity: The Authent | STRING |
| 368 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | DESIGN_GUIDELINES.md | 888 | except Exception as e: | CODE |
| LOW | DESIGN_GUIDELINES.md | 949 | except Exception as e: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 47 | except Exception as e: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 171 | except Exception as e: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 294 | except Exception as e: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 321 | except Exception as e: | CODE |
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 336 | except Exception as e: | CODE |
| LOW | …with-nova-canvas/user_interfaces/image_generator_st.py | 281 | except Exception as e: | CODE |
| LOW | …cp-server/sample_state_machines/customer-create/app.py | 74 | except Exception as e: | CODE |
| LOW | …ver/sample_state_machines/customer-info-from-id/app.py | 72 | except Exception as e: | CODE |
| LOW | …er/sample_state_machines/customer-id-from-email/app.py | 45 | except Exception as e: | CODE |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 52 | except Exception as e: | CODE |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 227 | except Exception as e: | CODE |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 242 | except Exception as e: | CODE |
| LOW | …integration-with-kb/user_interfaces/chat_bedrock_st.py | 148 | except Exception as e: | CODE |
| LOW | testing/pytest_utils.py | 139 | except Exception as e: | CODE |
| LOW | testing/mcp_test_client.py | 56 | except Exception as e: | CODE |
| LOW | testing/mcp_test_client.py | 70 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 83 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 93 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 103 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 113 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 123 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 133 | except Exception as e: | CODE |
| LOW⚡ | testing/mcp_test_client.py | 143 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 72 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 147 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 186 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 225 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 248 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 281 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 312 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 344 | except Exception as e: | CODE |
| LOW | testing/mcp_test_runner.py | 395 | except Exception as e: | CODE |
| MEDIUM | scripts/verify_tool_names.py | 48 | print('Error: tomllib (Python 3.11+) or tomli package is required', file=sys.stderr) | CODE |
| LOW | scripts/verify_tool_names.py | 72 | except Exception as e: | CODE |
| MEDIUM | scripts/verify_tool_names.py | 318 | print(f"Error: Package directory '{package_dir}' does not exist", file=sys.stderr) | CODE |
| MEDIUM | scripts/verify_tool_names.py | 322 | print(f"Error: pyproject.toml not found in '{package_dir}'", file=sys.stderr) | CODE |
| MEDIUM | scripts/verify_tool_names.py | 366 | print(f'Error: {e}', file=sys.stderr) | CODE |
| LOW | scripts/verify_tool_names.py | 368 | except Exception as e: | CODE |
| MEDIUM | scripts/verify_package_name.py | 40 | print('Error: tomllib (Python 3.11+) or tomli package is required', file=sys.stderr) | CODE |
| LOW | scripts/verify_package_name.py | 53 | except Exception as e: | CODE |
| LOW | scripts/verify_package_name.py | 77 | except Exception: | CODE |
| MEDIUM | scripts/verify_package_name.py | 268 | print(f"Error: Package directory '{package_dir}' does not exist", file=sys.stderr) | CODE |
| MEDIUM | scripts/verify_package_name.py | 272 | print(f"Error: pyproject.toml not found in '{package_dir}'", file=sys.stderr) | CODE |
| MEDIUM | scripts/verify_package_name.py | 313 | print(f'Error: {e}', file=sys.stderr) | CODE |
| LOW | scripts/verify_package_name.py | 315 | except Exception as e: | CODE |
| LOW | scripts/verify_awslabs_init.py | 84 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 77 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 172 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 199 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 242 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 258 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 295 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 324 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 344 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 411 | except Exception as e: | CODE |
| LOW | .github/workflows/release.py | 442 | except Exception as e: | CODE |
| LOW⚡ | .github/workflows/release.py | 454 | except Exception as e: | CODE |
| LOW⚡ | .github/workflows/release.py | 464 | except Exception as e: | CODE |
| 1986 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …azon-qbusiness-anonymous-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/prometheus-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/aurora-dsql-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | …amazon-bedrock-agentcore-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/aws-healthomics-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/s3-tables-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/aws-dataprocessing-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/amazon-keyspaces-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/eks-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/sagemaker-ai-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/memcached-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | …/timestream-for-influxdb-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | …c/aws-for-sap-management-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/cloudtrail-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/openapi-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/elasticache-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | …rock-custom-model-import-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/documentdb-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/redshift-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/aws-iot-sitewise-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/amazon-qindex-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/amazon-neptune-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/amazon-kendra-index-mcp-server/tests/test_init.py | 0 | test that __version__ is defined and follows semantic versioning. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_hitl.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_job.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_artifact.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_workspace.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_chat.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | src/aws-transform-mcp-server/tests/test_job_status.py | 0 | extract the parsed json payload from an mcp result envelope. | STRING |
| HIGH | …/ecs-mcp-server/tests/unit/test_resource_management.py | 0 | test ecs_api_operation function with describeclusters operation. | STRING |
| HIGH | …r/tests/unit/test_resource_management_api_operation.py | 0 | test ecs_api_operation function with describeclusters operation. | STRING |
| HIGH | …-server/tests/unit/api/test_resource_management_api.py | 0 | test ecs_api_operation function with describeclusters operation. | STRING |
| HIGH | …/ecs-mcp-server/tests/unit/test_resource_management.py | 0 | test ecs_api_operation function with an unsupported operation. | STRING |
| HIGH | …r/tests/unit/test_resource_management_api_operation.py | 0 | test ecs_api_operation function with an unsupported operation. | STRING |
| HIGH | …-server/tests/unit/api/test_resource_management_api.py | 0 | test ecs_api_operation function with an unsupported operation. | STRING |
| HIGH | …/ecs-mcp-server/tests/unit/test_resource_management.py | 0 | test ecs_api_operation function with listtasks operation. | STRING |
| HIGH | …r/tests/unit/test_resource_management_api_operation.py | 0 | test ecs_api_operation function with listtasks operation. | STRING |
| HIGH | …-server/tests/unit/api/test_resource_management_api.py | 0 | test ecs_api_operation function with listtasks operation. | STRING |
| HIGH | …/ecs-mcp-server/tests/unit/test_resource_management.py | 0 | test ecs_api_operation function with createservice operation. | STRING |
| HIGH | …r/tests/unit/test_resource_management_api_operation.py | 0 | test ecs_api_operation function with createservice operation. | STRING |
| HIGH | …-server/tests/unit/api/test_resource_management_api.py | 0 | test ecs_api_operation function with createservice operation. | STRING |
| HIGH | …/ecs-mcp-server/tests/unit/test_resource_management.py | 0 | test ecs_api_operation function with an error from the aws api. | STRING |
| HIGH | …r/tests/unit/test_resource_management_api_operation.py | 0 | test ecs_api_operation function with an error from the aws api. | STRING |
| HIGH | …-server/tests/unit/api/test_resource_management_api.py | 0 | test ecs_api_operation function with an error from the aws api. | STRING |
| HIGH | src/ecs-mcp-server/tests/unit/conftest.py | 0 | create an instance of the default event loop for each test case. | STRING |
| HIGH | …cp-server/tests/unit/troubleshooting_tools/conftest.py | 0 | create an instance of the default event loop for each test case. | STRING |
| HIGH | src/ecs-mcp-server/tests/unit/api/conftest.py | 0 | create an instance of the default event loop for each test case. | STRING |
| HIGH | …-server/tests/unit/troubleshooting_tools/test_utils.py | 0 | clear aws client cache before each test to ensure isolation. | STRING |
| HIGH | …hooting_tools/test_get_ecs_troubleshooting_guidance.py | 0 | clear aws client cache before each test to ensure isolation. | STRING |
| HIGH | …ubleshooting_tools/test_fetch_cloudformation_status.py | 0 | clear aws client cache before each test to ensure isolation. | STRING |
| HIGH | …unit/troubleshooting_tools/test_fetch_task_failures.py | 0 | create a mock for boto3.client that returns specified clients. | STRING |
| HIGH | …sts/unit/troubleshooting_tools/test_fetch_task_logs.py | 0 | create a mock for boto3.client that returns specified clients. | STRING |
| HIGH | …ubleshooting_tools/test_fetch_network_configuration.py | 0 | create a mock for boto3.client that returns specified clients. | STRING |
| HIGH | …/aurora-dsql-mcp-server/tests/test_graceful_startup.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …erver/tests/test_aws_cn_get_available_services_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …n-mcp-server/tests/test_aws_read_documentation_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …tation-mcp-server/tests/test_aws_read_sections_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …ntation-mcp-server/tests/test_aws_search_table_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …documentation-mcp-server/tests/test_aws_search_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| HIGH | …cp-server/tests/test_aws_cn_read_documentation_live.py | 0 | initialize with no request context; nothing here needs one. | STRING |
| 304 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 190 | # Check if use_improved_prompt is True | COMMENT |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 173 | # Check if Bedrock requested a tool | COMMENT |
| LOW | …integration-with-kb/user_interfaces/chat_bedrock_st.py | 117 | # Check if KB ID is set before processing | COMMENT |
| LOW | …integration-with-kb/user_interfaces/chat_bedrock_st.py | 130 | # Check if content is JSON and extract relevant parts | COMMENT |
| LOW | scripts/verify_tool_names.py | 140 | # Check if decorator is *.tool(...) | COMMENT |
| LOW | scripts/verify_tool_names.py | 161 | # Check if this is a chained call like app.tool('name')(func) | COMMENT |
| LOW | scripts/verify_tool_names.py | 232 | # Check if name is empty | COMMENT |
| LOW | scripts/verify_tool_names.py | 244 | # Check if name matches the valid pattern | COMMENT |
| LOW | scripts/verify_tool_names.py | 353 | # Print result | COMMENT |
| LOW | .github/workflows/release.yml | 105 | # Check if release already exists | COMMENT |
| LOW | .github/workflows/release.yml | 161 | # Check if directory exists | COMMENT |
| LOW | .github/workflows/release.yml | 204 | # Check if DO_NOT_RELEASE file exists | COMMENT |
| LOW | .github/workflows/release.yml | 326 | # Check if directory exists | COMMENT |
| LOW | .github/workflows/release-initiate-branch.yml | 58 | # Check if directory exists | COMMENT |
| LOW | .github/workflows/release-initiate-branch.yml | 143 | # Check if branch already exists | COMMENT |
| LOW | .github/workflows/release-initiate-branch.yml | 236 | # Check if there are changes to commit | COMMENT |
| LOW | .github/workflows/trivy.yml | 69 | # Check if trivy-results.sarif is in the PR changes | COMMENT |
| LOW | .github/workflows/release-merge-tag.yml | 97 | # Check if tag already exists | COMMENT |
| LOW | .github/workflows/aws-api-mcp-upgrade-version.yml | 93 | # Check if branch already exists | COMMENT |
| LOW | …n-qbusiness-anonymous-mcp-server/docker-healthcheck.sh | 18 | # Check if the server process is running | COMMENT |
| LOW | …wslabs/amazon_qbusiness_anonymous_mcp_server/server.py | 83 | # Check if response has the expected structure | COMMENT |
| LOW | src/prometheus-mcp-server/docker-healthcheck.sh | 18 | # Check if the server process is running | COMMENT |
| LOW⚡ | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 1033 | # Check if URL is configured in environment | COMMENT |
| LOW⚡ | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 1038 | # Check if the URL contains a workspace ID | COMMENT |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 1076 | # Check if the URL contains a workspace ID | COMMENT |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 806 | # Check if we already have a URL configured and if it contains a workspace ID | STRING |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 958 | # Check if we have a URL from environment | STRING |
| LOW | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 716 | # Check if this node is an input component with a fieldId | COMMENT |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 149 | # Check if repository exists | COMMENT |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 153 | # Check if the error is RepositoryNotFoundException | COMMENT |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 393 | # Check if image exists in ECR | COMMENT |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/delete.py | 210 | # Check if stack is in a deletable state | COMMENT |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/delete.py | 236 | # Check if stack is in a deletable state | COMMENT |
| LOW | …rver/awslabs/ecs_mcp_server/api/ecs_troubleshooting.py | 411 | # Check if sensitive data access is allowed | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 508 | # Check if stack already exists | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 529 | # Check if the error is "No updates are to be performed" | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 652 | # Check if stack already exists | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 693 | # Check if the error is "No updates are to be performed" | COMMENT |
| LOW | …rver/awslabs/ecs_mcp_server/api/resource_management.py | 179 | # Check if this is a write operation (not starting with "Describe" or "List") | COMMENT |
| LOW | …rver/awslabs/ecs_mcp_server/api/resource_management.py | 181 | # Check if write operations are allowed | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 188 | # Check if image exists in ECR | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 259 | # Check if stack exists | COMMENT |
| LOW | …ubleshooting_tools/get_ecs_troubleshooting_guidance.py | 154 | # Check if repository exists | COMMENT |
| LOW | …ubleshooting_tools/get_ecs_troubleshooting_guidance.py | 159 | # Check if image with tag exists | COMMENT |
| LOW | …pi/troubleshooting_tools/detect_image_pull_failures.py | 178 | # Check if task definition has execution role for ECR image pulling | COMMENT |
| LOW | …erver/api/troubleshooting_tools/fetch_task_failures.py | 224 | # Check if cluster exists | COMMENT |
| LOW | …i/troubleshooting_tools/fetch_cloudformation_status.py | 59 | # Check if stack exists | COMMENT |
| LOW | …rver/api/troubleshooting_tools/fetch_service_events.py | 201 | # Check if service exists | COMMENT |
| LOW | src/ecs-mcp-server/tests/llm_testing/run_tests.sh | 58 | # Check if the scenario directory exists | COMMENT |
| LOW | src/ecs-mcp-server/tests/llm_testing/run_tests.sh | 64 | # Check if all required scripts exist | COMMENT |
| LOW | …/ecs-mcp-server/tests/llm_testing/utils/aws_helpers.sh | 118 | # Check if a task has failed | COMMENT |
| LOW | …/ecs-mcp-server/tests/llm_testing/utils/aws_helpers.sh | 215 | # Check if CloudWatch logs contain error patterns | COMMENT |
| LOW | …lm_testing/scenarios/02_service_failure/02_validate.sh | 85 | # Check if there are any failures - with retries | COMMENT |
| LOW | …ing/scenarios/01_cloudformation_failure/02_validate.sh | 39 | # Check if stack has failed | COMMENT |
| LOW | …_testing/scenarios/03_task_exit_failure/02_validate.sh | 92 | # Check if task has stopped | COMMENT |
| LOW | …narios/04_network_configuration_failure/02_validate.sh | 113 | # Check if there are any failures in the service events | COMMENT |
| LOW | …cenarios/05_resource_constraint_failure/02_validate.sh | 143 | # Check if failure reason contains resource-related keywords | COMMENT |
| LOW | …/ecs-mcp-server/tests/integ/mcp-inspector/run-tests.sh | 59 | # Check if the scenario directory exists | COMMENT |
| LOW | …/ecs-mcp-server/tests/integ/mcp-inspector/run-tests.sh | 65 | # Check if all required scripts exist | COMMENT |
| LOW | …scenarios/02_test_knowledge_proxy_tools/02_validate.sh | 208 | # Check if results mention blue-green deployments | COMMENT |
| 463 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …integration-with-kb/user_interfaces/chat_bedrock_st.py | 135 | except (json.JSONDecodeError, TypeError): | CODE |
| HIGH | scripts/verify_package_name.py | 88 | except (ValueError, UnicodeDecodeError): | CODE |
| HIGH | …erver/awslabs/aws_transform_mcp_server/config_store.py | 202 | except FileNotFoundError: | CODE |
| HIGH | …slabs/aws_transform_mcp_server/transform_api_client.py | 369 | except Exception: | CODE |
| HIGH | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 137 | except ImportError: | CODE |
| HIGH | …slabs/aws_transform_mcp_server/tools/list_resources.py | 454 | except ImportError: | CODE |
| HIGH | …awslabs/aws_transform_mcp_server/tools/get_resource.py | 364 | except ImportError: | CODE |
| HIGH | …c/aws-transform-mcp-server/tests/test_client_app_id.py | 35 | except Exception: | CODE |
| HIGH | src/aws-transform-mcp-server/tests/test_oauth.py | 233 | except Exception: | CODE |
| HIGH | src/aws-transform-mcp-server/tests/test_oauth.py | 438 | except Exception: | CODE |
| HIGH | …server/awslabs/ecs_mcp_server/utils/path_validation.py | 58 | except (ImportError, AttributeError, KeyError, OSError): | CODE |
| HIGH | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 153 | except Exception: | CODE |
| HIGH | src/ecs-mcp-server/tests/unit/test_aws_utils.py | 244 | except Exception: | CODE |
| HIGH | …ql-mcp-server/awslabs/aurora_dsql_mcp_server/server.py | 876 | except Exception: | CODE |
| HIGH | …rora-dsql-mcp-server/kiro_power/steering/safe_query.py | 269 | except UnsafeSQLError: | CODE |
| HIGH | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 131 | except Exception: # nosec B110 — best-effort cleanup during shutdown | CODE |
| HIGH | …-mcp-server/tests/integration/test_error_cases_live.py | 110 | except Exception: | CODE |
| HIGH | …/transit_gateway/test_get_transit_gateway_flow_logs.py | 238 | except ToolError: | CODE |
| HIGH | …/bedrock-kb-retrieval-mcp-server/tests/test_clients.py | 75 | except Exception: | CODE |
| HIGH | …/awslabs/amazon_bedrock_agentcore_mcp_server/server.py | 118 | except asyncio.CancelledError: | CODE |
| HIGH | …mazon-bedrock-agentcore-mcp-server/tests/test_tools.py | 46 | except (ImportError, ModuleNotFoundError): | CODE |
| HIGH | …mazon-bedrock-agentcore-mcp-server/tests/test_tools.py | 53 | except (ImportError, ModuleNotFoundError, AttributeError): | CODE |
| HIGH | …mazon-bedrock-agentcore-mcp-server/tests/test_tools.py | 60 | except (ImportError, ModuleNotFoundError): | CODE |
| HIGH | …p-server/tests/browser/test_unit_server_integration.py | 287 | except RuntimeError: | CODE |
| HIGH | …mcp-server/tests/browser/test_integ_browser_session.py | 223 | except Exception: | CODE |
| HIGH | …mcp-server/tests/browser/test_integ_browser_session.py | 258 | except Exception: | CODE |
| HIGH | …mcp-server/tests/browser/test_integ_browser_session.py | 293 | except Exception: | CODE |
| HIGH | …re-mcp-server/tests/browser/test_integ_mcp_protocol.py | 237 | except ImportError: | CODE |
| HIGH | …re-mcp-server/tests/browser/test_integ_mcp_protocol.py | 249 | except (ImportError, AttributeError): | CODE |
| HIGH | …re-mcp-server/tests/browser/test_integ_mcp_protocol.py | 261 | except ImportError: | CODE |
| HIGH | …/awslabs/aws_healthomics_mcp_server/tools/ecr_tools.py | 1277 | except Exception: | CODE |
| HIGH | …gration/harness_tests/test_artifact_writer_property.py | 105 | except AssertionError: | CODE |
| HIGH | …egration/harness_tests/test_default_selection_smoke.py | 85 | except ModuleNotFoundError: | CODE |
| HIGH | …healthomics-mcp-server/integration/deploy/agentcore.py | 936 | except ecr.exceptions.RepositoryAlreadyExistsException: | CODE |
| HIGH | …mics-mcp-server/integration/harness/credential_scan.py | 165 | except FileNotFoundError: | CODE |
| HIGH | …althomics-mcp-server/tests/test_run_timeline_output.py | 268 | except ValueError: | CODE |
| HIGH | …althomics-mcp-server/tests/test_run_timeline_output.py | 376 | except FileExistsError: | CODE |
| HIGH | …althomics-mcp-server/tests/test_workflow_management.py | 3601 | except json.JSONDecodeError: | CODE |
| HIGH | …-healthomics-mcp-server/tests/test_content_resolver.py | 255 | except ValueError: | CODE |
| HIGH | …mcp-server/tests/test_registry_fail_closed_property.py | 227 | except CredentialDerivationError: | CODE |
| HIGH | …mcp-server/tests/test_registry_fail_closed_property.py | 260 | except CredentialDerivationError: | CODE |
| HIGH | …erver/awslabs/aws_api_mcp_server/core/common/config.py | 108 | except RuntimeError: | CODE |
| HIGH | …ement_mcp_server/tools/recommendation_details_tools.py | 432 | except Exception: | CODE |
| HIGH | …gement_mcp_server/tools/cost_optimization_hub_tools.py | 159 | except ValueError: | CODE |
| HIGH | …ing_cost_management_mcp_server/utilities/time_utils.py | 115 | except (OverflowError, OSError, ValueError): | CODE |
| HIGH | …ing_cost_management_mcp_server/utilities/time_utils.py | 129 | except ValueError: | CODE |
| HIGH | src/postgres-mcp-server/hatch_build.py | 262 | except OSError: | CODE |
| HIGH | src/postgres-mcp-server/tests/test_psycopg_connector.py | 376 | except TimeoutError: | CODE |
| HIGH | src/postgres-mcp-server/tests/test_sql_guard.py | 321 | except SqlPolicyError: | CODE |
| HIGH | …/postgres-mcp-server/tests/e2e/e2e_integration_test.py | 3165 | except OSError: | CODE |
| HIGH | …/postgres-mcp-server/tests/e2e/e2e_integration_test.py | 3158 | except OSError: | CODE |
| HIGH | …g-mcp-server/awslabs/aws_pricing_mcp_server/helpers.py | 292 | except (ValueError, TypeError): | CODE |
| HIGH | …g-mcp-server/awslabs/aws_pricing_mcp_server/helpers.py | 503 | except ValueError: | CODE |
| HIGH | …g-mcp-server/awslabs/aws_pricing_mcp_server/helpers.py | 530 | except ValueError: | CODE |
| HIGH | …/cloudwatch_applicationsignals_mcp_server/rum_tools.py | 818 | except (ValueError, TypeError): | CODE |
| HIGH | …tionsignals_mcp_server/canary_recommendation_engine.py | 239 | except ValueError: | CODE |
| HIGH | …applicationsignals-mcp-server/evals/core/mcp_client.py | 121 | except OSError: | CODE |
| HIGH | …mcp-server/tests/test_dynamic_instrumentation_tools.py | 81 | except Exception: # pragma: no cover - defensive teardown | CODE |
| HIGH | …r/awslabs/s3_tables_mcp_server/file_processor/utils.py | 97 | except pa.ArrowInvalid: | CODE |
| HIGH | src/s3-tables-mcp-server/tests/test_main.py | 54 | except Exception: | CODE |
| 94 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 178 | CODE | |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 97 | CODE | |
| LOW | testing/pytest_utils.py | 109 | CODE | |
| LOW | testing/mcp_test_runner.py | 229 | CODE | |
| LOW | testing/mcp_test_runner.py | 347 | CODE | |
| LOW | scripts/verify_tool_names.py | 106 | CODE | |
| LOW | scripts/verify_tool_names.py | 221 | CODE | |
| LOW | scripts/verify_package_name.py | 82 | CODE | |
| LOW | .github/workflows/release.py | 262 | CODE | |
| LOW | .github/workflows/release.py | 348 | CODE | |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 758 | CODE | |
| LOW | …eus-mcp-server/awslabs/prometheus_mcp_server/server.py | 221 | CODE | |
| LOW | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 794 | CODE | |
| LOW | …erver/awslabs/aws_transform_mcp_server/hitl_schemas.py | 888 | CODE | |
| LOW | …slabs/aws_transform_mcp_server/transform_api_client.py | 248 | CODE | |
| LOW | …slabs/aws_transform_mcp_server/transform_api_client.py | 313 | CODE | |
| LOW | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 92 | CODE | |
| LOW | …ver/awslabs/aws_transform_mcp_server/tools/artifact.py | 67 | CODE | |
| LOW | …-server/awslabs/aws_transform_mcp_server/tools/hitl.py | 160 | CODE | |
| LOW | …slabs/aws_transform_mcp_server/tools/list_resources.py | 242 | CODE | |
| LOW | …bs/aws_transform_mcp_server/tools/load_instructions.py | 84 | CODE | |
| LOW | …awslabs/aws_transform_mcp_server/tools/get_resource.py | 139 | CODE | |
| LOW | …cs-mcp-server/awslabs/ecs_mcp_server/utils/security.py | 206 | CODE | |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 287 | CODE | |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/delete.py | 29 | CODE | |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 102 | CODE | |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 388 | CODE | |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/status.py | 27 | CODE | |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/status.py | 303 | CODE | |
| LOW | …ubleshooting_tools/get_ecs_troubleshooting_guidance.py | 123 | CODE | |
| LOW | …pi/troubleshooting_tools/detect_image_pull_failures.py | 35 | CODE | |
| LOW | …i/troubleshooting_tools/fetch_cloudformation_status.py | 33 | CODE | |
| LOW | …cp_server/api/troubleshooting_tools/fetch_task_logs.py | 33 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 223 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 302 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 371 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 421 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 469 | CODE | |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 518 | CODE | |
| LOW | …i/troubleshooting_tools/fetch_network_configuration.py | 79 | CODE | |
| LOW | …i/troubleshooting_tools/fetch_network_configuration.py | 172 | CODE | |
| LOW | …i/troubleshooting_tools/fetch_network_configuration.py | 261 | CODE | |
| LOW | …rver/api/troubleshooting_tools/fetch_service_events.py | 120 | CODE | |
| LOW | …rver/api/troubleshooting_tools/fetch_service_events.py | 154 | CODE | |
| LOW | src/ecs-mcp-server/tests/unit/test_main.py | 339 | CODE | |
| LOW | …erver/tests/integ/mcp-inspector/utils/mcp_call_tool.py | 21 | CODE | |
| LOW | …erver/tests/integ/mcp-inspector/utils/mcp_call_tool.py | 50 | CODE | |
| LOW | …awslabs/aurora_dsql_mcp_server/mutable_sql_detector.py | 502 | CODE | |
| LOW | …mcp-server/awslabs/aurora_dsql_mcp_server/sql_guard.py | 278 | CODE | |
| LOW | …mcp-server/awslabs/aurora_dsql_mcp_server/sql_guard.py | 355 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/tools/search_query.py | 39 | CODE | |
| LOW | …wslabs/valkey_mcp_server/tools/search_add_documents.py | 91 | CODE | |
| LOW | …er/awslabs/valkey_mcp_server/tools/search_aggregate.py | 111 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/embeddings/factory.py | 24 | CODE | |
| LOW | …ols/network_firewall/get_network_firewall_flow_logs.py | 23 | CODE | |
| LOW | …cp_server/tools/network_firewall/get_firewall_rules.py | 26 | CODE | |
| LOW | …ws_network_mcp_server/tools/general/find_ip_address.py | 22 | CODE | |
| LOW | …p_server/tools/cloud_wan/detect_cloudwan_inspection.py | 23 | CODE | |
| LOW | …server/tools/cloud_wan/get_cloudwan_peering_details.py | 21 | CODE | |
| LOW | …k_mcp_server/tools/cloud_wan/list_cloudwan_peerings.py | 21 | CODE | |
| 688 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …aker-unified-studio-spark-upgrade-mcp-server/README.md | 120 | ### Step 1: Configure AWS CLI Profile | COMMENT |
| LOW | …aker-unified-studio-spark-upgrade-mcp-server/README.md | 126 | ### Step 2: if you are using Kiro CLI, use the following command to add the MCP configuration | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 9 | ## Step 1: Detect Environment | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 16 | ## Step 2: Verify Prerequisites | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 34 | ## Step 3: Check MCP Config | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 141 | ## Step 4: Check VS Code MCP Settings (VS Code only) | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 165 | ## Step 5: Test Server Startup | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 179 | ## Step 6: Report Findings & Offer to Fix | COMMENT |
| LOW | src/aws-transform-mcp-server/TROUBLESHOOTING.md | 204 | ## Step 7: Post-Fix Verification | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 187 | # Step 1: PKCE | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 191 | # Step 2: Register client | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 210 | # Step 3: Start callback server | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 218 | # Step 4: Build authorize URL and open browser | COMMENT |
| LOW | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 238 | # Step 5: Wait for callback | COMMENT |
| LOW | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 250 | # Step 6: Exchange code for tokens | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 393 | # Step 1: Run full OAuth flow | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 397 | # Step 2: Fan out ListAvailableProfiles across all regions | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 407 | # Step 3: Select profile (elicitation or fallback) | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 417 | # Step 4: Verify session with selected profile | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 423 | # Step 5: Build and save config | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 154 | # Step 1: Prepare template files | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 202 | # Step 1: Create CFN files and deploy ECR to CFN | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 285 | # Step 2: Build and deploy Docker image | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 354 | # Step 3: Deploy ECS infrastructure | COMMENT |
| LOW⚡ | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 342 | # Step 1: Delete Express Gateway Service | COMMENT |
| LOW⚡ | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 348 | # Step 2: Delete ECR Infrastructure | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 76 | # Step 1: Create ECR repository infrastructure via CloudFormation | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 94 | # Step 2: Build and push Docker image | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1349 | # Step 1: Mock list_task_definition_families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1354 | # Step 2: Mock list_task_definitions responses for each family | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1626 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1631 | # Step 2: Mock empty task definitions response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1682 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1687 | # Step 2: Mock ClientError for list_task_definitions | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1717 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1722 | # Step 2: Mock list_task_definitions response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1731 | # Step 3: Mock ClientError for describe_task_definition | COMMENT |
| LOW | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1368 | # Step 3: Mock describe_task_definition responses | COMMENT |
| LOW | …_testing/scenarios/02_service_failure/04_evaluation.md | 36 | # Step 1: Update the task definition with a valid image | COMMENT |
| LOW | …_testing/scenarios/02_service_failure/04_evaluation.md | 53 | # Step 2: Update the service to use the new task definition revision | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 74 | # Step 1: Delete the service | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 80 | # Step 2: Deregister task definition | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 90 | # Step 3: Delete the cluster | COMMENT |
| LOW⚡ | …/llm_testing/scenarios/02_service_failure/01_create.sh | 19 | # Step 1: Create cluster if it doesn't exist | COMMENT |
| LOW⚡ | …/llm_testing/scenarios/02_service_failure/01_create.sh | 23 | # Step 2: Register a task definition with non-existent image | COMMENT |
| LOW | …/llm_testing/scenarios/02_service_failure/01_create.sh | 41 | # Step 3: Create a service that will fail due to the non-existent image | COMMENT |
| LOW | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 59 | # Step 1: Find and deregister task definitions | COMMENT |
| LOW⚡ | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 74 | # Step 2: Delete the cluster | COMMENT |
| LOW⚡ | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 78 | # Step 3: Delete the associated CloudWatch log group | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 19 | # Step 1: Create cluster if it doesn't exist | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 23 | # Step 2: Create CloudWatch log group | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 27 | # Step 3: Register a task definition with a container that will exit | COMMENT |
| LOW | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 57 | # Step 4: Run the task that will fail | COMMENT |
| LOW | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 54 | # Step 1: Find the load balancer and target group | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 107 | # Step 2: Update service to 0 tasks if it exists | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 115 | # Step 3: Delete service if it exists | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 123 | # Step 4: Find and deregister task definition | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 131 | # Step 5: Delete listeners if load balancer found | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 143 | # Step 6: Delete target group if found | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 149 | # Step 7: Delete load balancer if found | COMMENT |
| 253 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …slabs/aws_transform_mcp_server/transform_api_client.py | 47 | CODE | |
| LOW | …/ecs-mcp-server/awslabs/ecs_mcp_server/api/__init__.py | 21 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 21 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 22 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 23 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 24 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 25 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 26 | CODE | |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 27 | CODE | |
| LOW | …valkey-mcp-server/awslabs/valkey_mcp_server/version.py | 15 | CODE | |
| LOW | …alkey-mcp-server/awslabs/valkey_mcp_server/__init__.py | 17 | CODE | |
| LOW | …valkey-mcp-server/awslabs/valkey_mcp_server/context.py | 17 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 17 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 28 | CODE | |
| LOW | src/valkey-mcp-server/awslabs/valkey_mcp_server/main.py | 39 | CODE | |
| LOW | …awslabs/valkey_mcp_server/tools/search_manage_index.py | 17 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/tools/search_query.py | 17 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/tools/valkey_write.py | 17 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 17 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …mcp-server/awslabs/valkey_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …wslabs/valkey_mcp_server/tools/search_add_documents.py | 17 | CODE | |
| LOW | …er/awslabs/valkey_mcp_server/tools/search_aggregate.py | 17 | CODE | |
| LOW | …-server/awslabs/valkey_mcp_server/tools/valkey_read.py | 17 | CODE | |
| LOW | …key-mcp-server/awslabs/valkey_mcp_server/tools/json.py | 17 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/tools/valkey_admin.py | 17 | CODE | |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 17 | CODE | |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 23 | CODE | |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 23 | CODE | |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 23 | CODE | |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 23 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/embeddings/factory.py | 17 | CODE | |
| LOW | …rver/awslabs/valkey_mcp_server/embeddings/providers.py | 17 | CODE | |
| LOW | …cp-server/awslabs/valkey_mcp_server/embeddings/base.py | 17 | CODE | |
| LOW | …-mcp-server/awslabs/valkey_mcp_server/common/server.py | 15 | CODE | |
| LOW | …-mcp-server/awslabs/valkey_mcp_server/common/config.py | 15 | CODE | |
| LOW | …cp-server/awslabs/valkey_mcp_server/common/__init__.py | 17 | CODE | |
| LOW | …cp-server/awslabs/valkey_mcp_server/common/__init__.py | 19 | CODE | |
| LOW | …cp-server/awslabs/valkey_mcp_server/common/__init__.py | 19 | CODE | |
| LOW | …cp-server/awslabs/valkey_mcp_server/common/__init__.py | 19 | CODE | |
| LOW | …-server/awslabs/valkey_mcp_server/common/connection.py | 17 | CODE | |
| LOW | …y-mcp-server/awslabs/valkey_mcp_server/common/utils.py | 15 | CODE | |
| LOW | src/valkey-mcp-server/tests/conftest.py | 17 | CODE | |
| LOW | src/valkey-mcp-server/tests/integration/conftest.py | 17 | CODE | |
| LOW | …c/valkey-mcp-server/tests/integration/test_tls_live.py | 27 | CODE | |
| LOW | …_network_mcp_server/tools/network_firewall/__init__.py | 15 | CODE | |
| LOW | …_network_mcp_server/tools/network_firewall/__init__.py | 16 | CODE | |
| 373 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …with-nova-canvas/user_interfaces/image_generator_st.py | 284 | # Display prompt best practices | COMMENT |
| MEDIUM | src/prometheus-mcp-server/tests/test_models.py | 69 | # Use a more robust check that handles the URL being at any position in the JSON | COMMENT |
| MEDIUM | …hooting_tools/test_get_ecs_troubleshooting_guidance.py | 868 | """Test robust handling of malformed task definition ARNs.""" | STRING |
| MEDIUM | …cenarios/01_comprehensive_troubleshooting/01_create.sh | 110 | # Register task definition with multiple containers for comprehensive testing | COMMENT |
| MEDIUM | …ws_network_mcp_server/tools/general/get_eni_details.py | 34 | """Get comprehensive AWS Elastic Network Interface (ENI) details for network troubleshooting. | STRING |
| MEDIUM | …ork_mcp_server/tools/cloud_wan/get_cloudwan_details.py | 42 | """Get comprehensive AWS Cloud WAN Core Network configuration and state. | STRING |
| MEDIUM | …server/tools/cloud_wan/get_cloudwan_peering_details.py | 34 | """Get comprehensive peering details from both Cloud WAN and Transit Gateway perspectives. | STRING |
| MEDIUM | …_mcp_server/tools/cloud_wan/get_all_cloudwan_routes.py | 34 | """Get comprehensive Cloud WAN routing tables across all segments and regions. | STRING |
| MEDIUM | …etwork_mcp_server/tools/vpc/get_vpc_network_details.py | 45 | """Get comprehensive VPC network configuration including routing, subnets, security, and connectivity. | STRING |
| MEDIUM | …ver/awslabs/aws_documentation_mcp_server/server_aws.py | 239 | # Available sections: ['Example Python Lambda function code', 'Handler naming conventions', 'Using the Lambda event | COMMENT |
| MEDIUM | …tation-mcp-server/tests/test_aws_read_sections_live.py | 64 | """Test extracting multiple sections from a comprehensive AWS documentation page.""" | STRING |
| MEDIUM | …zon_bedrock_agentcore_mcp_server/tools/memory/guide.py | 375 | """Get the comprehensive AgentCore Memory guide. | STRING |
| MEDIUM | …n_bedrock_agentcore_mcp_server/tools/identity/guide.py | 554 | """Get the comprehensive AgentCore Identity guide. | STRING |
| MEDIUM | …on_bedrock_agentcore_mcp_server/tools/runtime/guide.py | 256 | """Get a comprehensive reference guide for AgentCore Runtime. | STRING |
| MEDIUM | …zon_bedrock_agentcore_mcp_server/tools/policy/guide.py | 461 | """Get the comprehensive AgentCore Policy guide. | STRING |
| MEDIUM | …on_bedrock_agentcore_mcp_server/tools/gateway/guide.py | 492 | """Get the comprehensive AgentCore Gateway guide. | STRING |
| MEDIUM | …slabs/aws_healthomics_mcp_server/tools/run_timeline.py | 198 | limit=2999, # Get comprehensive manifest data | CODE |
| MEDIUM⚡ | …slabs/aws_healthomics_mcp_server/tools/run_analysis.py | 216 | """Generate a comprehensive analysis report from the structured data. | STRING |
| MEDIUM | …slabs/aws_healthomics_mcp_server/tools/run_analysis.py | 188 | # Generate the comprehensive analysis report | STRING |
| MEDIUM | …slabs/aws_healthomics_mcp_server/tools/run_analysis.py | 910 | limit=2999, # Get comprehensive manifest data | STRING |
| MEDIUM | …bs/aws_healthomics_mcp_server/tools/troubleshooting.py | 103 | """Provides comprehensive diagnostic information for a failed workflow run. | STRING |
| MEDIUM | …bs/aws_healthomics_mcp_server/tools/troubleshooting.py | 382 | # Compile comprehensive diagnostic information | COMMENT |
| MEDIUM | …mics_mcp_server/search/genomics_search_orchestrator.py | 241 | # Build comprehensive JSON response | COMMENT |
| MEDIUM | …mics_mcp_server/search/genomics_search_orchestrator.py | 423 | # Build comprehensive JSON response | COMMENT |
| MEDIUM | …bs/aws_healthomics_mcp_server/search/scoring_engine.py | 90 | """Calculate comprehensive relevance score for a genomics file. | STRING |
| MEDIUM | …healthomics_mcp_server/search/json_response_builder.py | 59 | """Build a comprehensive JSON response for genomics file search. | STRING |
| MEDIUM | src/aws-healthomics-mcp-server/integration/conftest.py | 53 | # this directory (e.g. the harness's own offline unit/property tests) are never | COMMENT |
| MEDIUM⚡ | …cp-server/integration/harness_tests/test_entrypoint.py | 97 | # The harness entrypoint is where the tool is defined. | COMMENT |
| MEDIUM | …s-healthomics-mcp-server/integration/deploy/cognito.py | 57 | # Default names for the harness identity provider. | COMMENT |
| MEDIUM | …s-healthomics-mcp-server/integration/deploy/cognito.py | 61 | # The explicit auth flows the app client enables so the harness can mint tokens | COMMENT |
| MEDIUM | …c/aws-healthomics-mcp-server/integration/deploy/iam.py | 63 | # Default naming for the harness IAM roles. | COMMENT |
| MEDIUM | …c/aws-healthomics-mcp-server/integration/deploy/iam.py | 309 | # Default RoleSessionName used when the harness assumes a Tenant_Role for the explicit-mechanism | COMMENT |
| MEDIUM | …ealthomics-mcp-server/integration/deploy/apigateway.py | 89 | # harness and server share one source of truth (consts.DEFAULT_HTTP_HOST == '127.0.0.1'). | COMMENT |
| MEDIUM | …ealthomics-mcp-server/integration/deploy/apigateway.py | 104 | # header -- the shape the harness's JWT test callers present. | COMMENT |
| MEDIUM | …ealthomics-mcp-server/integration/deploy/apigateway.py | 120 | # fronts, and the authorizer Lambda's invoke ARN, cannot be fabricated by the harness; | COMMENT |
| MEDIUM | …ealthomics-mcp-server/integration/deploy/apigateway.py | 657 | # deployment definition; there is no harness-created cloud resource to delete. | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 128 | # so the harness forwards the bearer token in the non-reserved ``TENANT_TOKEN_HEADER`` instead; | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 133 | # The container CLI used to build/push the harness image. Configurable via this env var so | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 139 | # AgentCore Runtime requires linux/arm64 container images, so the harness image is always built | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 147 | # Default resource names for the harness AgentCore deployment. | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 154 | # The two tenant labels the harness auto-provisions to demonstrate isolation. | COMMENT |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 157 | # The build context for the harness image. The Dockerfile lives beside this module under | COMMENT |
| MEDIUM | …healthomics-mcp-server/integration/deploy/agentcore.py | 114 | # directly (no AssumeRole, no tagging), which the harness obtains by assuming each Tenant_Role | COMMENT |
| MEDIUM | …healthomics-mcp-server/integration/deploy/agentcore.py | 405 | # Populated only in the ``explicit`` inbound mode: the short-lived credentials the harness | COMMENT |
| MEDIUM | …healthomics-mcp-server/integration/deploy/agentcore.py | 920 | # The harness image builds FROM public.ecr.aws base images, so authenticate to public ECR | COMMENT |
| MEDIUM | …c/aws-healthomics-mcp-server/integration/deploy/cli.py | 77 | # ``OPT_IN_ENV`` (the Opt_In_Signal) is imported from ``integration.harness.opt_in`` as the | COMMENT |
| MEDIUM | …erver/integration/tests/test_cross_tenant_isolation.py | 70 | # The identity-revealing tool registered by the harness deployment entrypoint. | COMMENT |
| MEDIUM | …ver/integration/tests/test_unauthenticated_rejected.py | 196 | # Known STS Credential_Material the harness may observe. Registering these with the scanner | COMMENT |
| MEDIUM | …mcp-server/integration/tests/test_credential_safety.py | 45 | # Directory the harness wrote artifacts into (captured-output files, logs, reports, and the | COMMENT |
| MEDIUM | …mcp-server/integration/tests/test_credential_safety.py | 49 | # The concrete secret values the harness observed, grouped by material type. Each maps to | COMMENT |
| MEDIUM | …s-healthomics-mcp-server/integration/harness/opt_in.py | 37 | # trimmed) so the harness and the server share one mental model. Unlike the | COMMENT |
| MEDIUM | …-healthomics-mcp-server/integration/harness/headers.py | 37 | # works in accounts whose SCPs deny ``sts:TagSession``. The harness assumes each tenant role | COMMENT |
| MEDIUM⚡ | …ws-healthomics-mcp-server/tests/test_scoring_engine.py | 467 | """Test a comprehensive scoring scenario with all components.""" | STRING |
| MEDIUM | …ment-mcp-server/tests/tools/test_cost_anomaly_tools.py | 772 | # Setup - create comprehensive anomaly data | COMMENT |
| MEDIUM | …ment-mcp-server/tests/tools/test_cost_anomaly_tools.py | 824 | # Assert comprehensive formatting | COMMENT |
| MEDIUM⚡ | …nt-mcp-server/tests/utilities/test_aws_service_base.py | 345 | # Assert with comprehensive validation | COMMENT |
| MEDIUM⚡ | …nt-mcp-server/tests/utilities/test_aws_service_base.py | 360 | # Assert with comprehensive validation | COMMENT |
| MEDIUM⚡ | …nt-mcp-server/tests/utilities/test_aws_service_base.py | 375 | # Assert with comprehensive validatio | COMMENT |
| MEDIUM⚡ | …ostgres-mcp-server/tests/test_e2e_harness_contracts.py | 227 | # Teardown runs in a child process that outlives the harness, so the mechanics | COMMENT |
| MEDIUM⚡ | …ostgres-mcp-server/tests/test_e2e_harness_contracts.py | 231 | # harness's own exit, which is why it is pinned here. | COMMENT |
| 129 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 187 | # Step 1: PKCE | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 191 | # Step 2: Register client | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 210 | # Step 3: Start callback server | COMMENT |
| LOW⚡ | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 218 | # Step 4: Build authorize URL and open browser | COMMENT |
| LOW | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 238 | # Step 5: Wait for callback | COMMENT |
| LOW | …m-mcp-server/awslabs/aws_transform_mcp_server/oauth.py | 250 | # Step 6: Exchange code for tokens | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 393 | # Step 1: Run full OAuth flow | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 397 | # Step 2: Fan out ListAvailableProfiles across all regions | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 407 | # Step 3: Select profile (elicitation or fallback) | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 417 | # Step 4: Verify session with selected profile | COMMENT |
| LOW⚡ | …er/awslabs/aws_transform_mcp_server/tools/configure.py | 423 | # Step 5: Build and save config | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 154 | # Step 1: Prepare template files | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 202 | # Step 1: Create CFN files and deploy ECR to CFN | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 285 | # Step 2: Build and deploy Docker image | COMMENT |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 354 | # Step 3: Deploy ECS infrastructure | COMMENT |
| LOW⚡ | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 342 | # Step 1: Delete Express Gateway Service | COMMENT |
| LOW⚡ | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 348 | # Step 2: Delete ECR Infrastructure | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 76 | # Step 1: Create ECR repository infrastructure via CloudFormation | COMMENT |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 94 | # Step 2: Build and push Docker image | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1349 | # Step 1: Mock list_task_definition_families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1354 | # Step 2: Mock list_task_definitions responses for each family | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1626 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1631 | # Step 2: Mock empty task definitions response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1682 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1687 | # Step 2: Mock ClientError for list_task_definitions | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1717 | # Step 1: Mock families response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1722 | # Step 2: Mock list_task_definitions response | COMMENT |
| LOW⚡ | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1731 | # Step 3: Mock ClientError for describe_task_definition | COMMENT |
| LOW | …-server/tests/unit/troubleshooting_tools/test_utils.py | 1368 | # Step 3: Mock describe_task_definition responses | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 74 | # Step 1: Delete the service | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 80 | # Step 2: Deregister task definition | COMMENT |
| LOW⚡ | …llm_testing/scenarios/02_service_failure/05_cleanup.sh | 90 | # Step 3: Delete the cluster | COMMENT |
| LOW⚡ | …/llm_testing/scenarios/02_service_failure/01_create.sh | 19 | # Step 1: Create cluster if it doesn't exist | COMMENT |
| LOW⚡ | …/llm_testing/scenarios/02_service_failure/01_create.sh | 23 | # Step 2: Register a task definition with non-existent image | COMMENT |
| LOW | …/llm_testing/scenarios/02_service_failure/01_create.sh | 41 | # Step 3: Create a service that will fail due to the non-existent image | COMMENT |
| LOW | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 59 | # Step 1: Find and deregister task definitions | COMMENT |
| LOW⚡ | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 74 | # Step 2: Delete the cluster | COMMENT |
| LOW⚡ | …m_testing/scenarios/03_task_exit_failure/05_cleanup.sh | 78 | # Step 3: Delete the associated CloudWatch log group | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 19 | # Step 1: Create cluster if it doesn't exist | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 23 | # Step 2: Create CloudWatch log group | COMMENT |
| LOW⚡ | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 27 | # Step 3: Register a task definition with a container that will exit | COMMENT |
| LOW | …lm_testing/scenarios/03_task_exit_failure/01_create.sh | 57 | # Step 4: Run the task that will fail | COMMENT |
| LOW | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 54 | # Step 1: Find the load balancer and target group | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 107 | # Step 2: Update service to 0 tasks if it exists | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 115 | # Step 3: Delete service if it exists | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 123 | # Step 4: Find and deregister task definition | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 131 | # Step 5: Delete listeners if load balancer found | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 143 | # Step 6: Delete target group if found | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 149 | # Step 7: Delete load balancer if found | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 157 | # Step 8: Find and delete security group | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 186 | # Step 9: Delete the cluster | COMMENT |
| LOW⚡ | …sting/scenarios/06_load_balancer_failure/05_cleanup.sh | 190 | # Step 10: Delete CloudWatch log group | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 22 | # Step 1: Create cluster | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 26 | # Step 2: Create CloudWatch log group | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 30 | # Step 3: Get default VPC | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 35 | # Step 4: Get subnets from this VPC (at least two for ALB) | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 42 | # Step 5: Create security group for ALB | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 48 | # Step 6: Allow inbound HTTP on the security group | COMMENT |
| LOW⚡ | …esting/scenarios/06_load_balancer_failure/01_create.sh | 52 | # Step 7: Create the Application Load Balancer | COMMENT |
| LOW | …esting/scenarios/06_load_balancer_failure/01_create.sh | 66 | # Step 8: Create a target group with incorrectly configured health check | COMMENT |
| 119 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/migrate-mcp-v2.py | 91 | cd src/<server> && uv lock && uv run pytest | STRING |
| HIGH | scripts/migrate-mcp-v2.py | 901 | print('Next per server: cd src/<server> && uv lock && uv run pytest') | CODE |
| HIGH | src/ecs-mcp-server/tests/conftest.py | 69 | const port = process.env.PORT || 3000; | STRING |
| HIGH | …key-mcp-server/awslabs/valkey_mcp_server/tools/json.py | 119 | value: Value to set (string, number, boolean, array, object, or null) | STRING |
| HIGH | …rock_agentcore_mcp_server/tools/browser/observation.py | 222 | errors.push(el.textContent.trim().substring(0, 200)); | CODE |
| HIGH | …rock_agentcore_mcp_server/tools/browser/observation.py | 271 | size: e.transferSize || 0, | CODE |
| HIGH | …rock_agentcore_mcp_server/tools/browser/observation.py | 326 | return 'Expression evaluated successfully (returned undefined/null).' | STRING |
| HIGH | …n_bedrock_agentcore_mcp_server/tools/policy/engines.py | 164 | 'description, or {"optionalValue": null} to clear it. ' | CODE |
| HIGH | …_bedrock_agentcore_mcp_server/tools/policy/policies.py | 206 | '{"optionalValue": null} to clear. Omit to leave ' | CODE |
| HIGH | src/aws-healthomics-mcp-server/tests/test_run_batch.py | 1450 | scratchStorageMode equal to the effective mode -- the caller-provided value when non-null, | STRING |
| HIGH⚡ | …althomics-mcp-server/tests/test_workflow_management.py | 3625 | booleans, null) and verify parse_tags raises ValueError. | STRING |
| HIGH | …althomics-mcp-server/tests/test_workflow_management.py | 3577 | strings, booleans, null). | STRING |
| HIGH | …ealthomics-mcp-server/tests/test_workflow_execution.py | 2151 | mode - the caller-provided value when non-null, or LOCAL when the caller value is None. | STRING |
| HIGH | …ealthomics-mcp-server/tests/test_workflow_execution.py | 2218 | start_run API (the caller value when non-null, otherwise LOCAL). | STRING |
| HIGH⚡ | src/aws-api-mcp-server/tests/parser/test_lexer.py | 30 | ('aws s3 && rm -rf', ProhibitedOperatorsError, ['&&']), | CODE |
| HIGH⚡ | src/aws-api-mcp-server/tests/parser/test_lexer.py | 31 | ('aws s3 || rm -rf', ProhibitedOperatorsError, ['||']), | CODE |
| HIGH | …nagement_mcp_server/tools/billing_preferences_tools.py | 75 | "next_token": null} | CODE |
| HIGH | …ement-mcp-server/tests/tools/test_aws_pricing_tools.py | 1307 | '{"instanceType": "t3.micro", "location": null, "storageClass": "Standard"}' | CODE |
| HIGH | …es-mcp-server/tests/test_sql_guard_read_only_corpus.py | 860 | ('placeholder in array constructor', 'SELECT * FROM fp.dept WHERE tags && ARRAY[:tag]'), | CODE |
| HIGH | src/postgres-mcp-server/tests/test_named_params.py | 53 | ('SELECT * FROM t WHERE tags && ARRAY[:tag]::text[]', ['tag']), | CODE |
| HIGH | …ws-iac-mcp-server/awslabs/aws_iac_mcp_server/server.py | 342 | Use rank to prioritize results. Check error field first - if not null, the search failed. | CODE |
| HIGH | …ws-iac-mcp-server/awslabs/aws_iac_mcp_server/server.py | 399 | Use rank to prioritize results. Check error field first - if not null, the search failed. | CODE |
| HIGH | …ws-iac-mcp-server/awslabs/aws_iac_mcp_server/server.py | 467 | Use rank to prioritize results. Check error field first - if not null, the search failed. | CODE |
| HIGH | …p_server/tools/cloudformation_pre_deploy_validation.py | 82 | 'example': 'aws cloudformation create-change-set --stack-name my-stack --template-body file://template.yaml --ch | CODE |
| HIGH | …awslabs/aws_iac_mcp_server/tools/cdk_best_practices.py | 40 | mkdir my-cdk-app && cd my-cdk-app | CODE |
| HIGH | …ws_iac_mcp_server/data/cloudformation_failure_cases.py | 206 | If the ECS services were defined in the same CloudFormation template as the cluster, then this error should not arise if | CODE |
| HIGH | …cationsignals/get_enablement_guide/enablement_tasks.py | 86 | build_command: Optional build command (e.g., 'npm install && npm run build') | STRING |
| HIGH | …er/awslabs/aws_for_sap_management_mcp_server/server.py | 80 | - If a metric value is null, say "Not available" or omit it — never display "null". | CODE |
| HIGH | …er/awslabs/aws_for_sap_management_mcp_server/server.py | 89 | - If log_backup_status is null, say "No log backup check history" rather than omitting it. | CODE |
| HIGH | …_for_sap_management_mcp_server/ssm_sap_health/tools.py | 2335 | df_command = 'df -h / /usr/sap /hana/data /hana/log /hana/shared /backup 2>/dev/null || df -h / /usr/sap 2>/dev/null | CODE |
| HIGH | …labs/elasticache_mcp_server/tools/serverless/create.py | 53 | 2. Dictionary: {"key": "value", "key2": null} | STRING |
| HIGH | …labs/elasticache_mcp_server/tools/serverless/create.py | 54 | 3. JSON array: [{"Key": "string", "Value": "string"}, {"Key": "string2", "Value": null}] | STRING |
| HIGH⚡ | …sql-mcp-server/tests/test_injection_false_positives.py | 60 | sql = "SELECT * FROM products WHERE id = '1' UNION SELECT null, table_name FROM information_schema.tables" | CODE |
| HIGH | …rver/awslabs/redshift_mcp_server/review/definitions.py | 881 | min(case when scc.service_class >= 100 then 'auto' else 'manual' end) over (partition by null) wlm_mode, | CODE |
| HIGH | …rver/awslabs/redshift_mcp_server/review/definitions.py | 900 | SUM(case when scc.service_class BETWEEN 6 AND 13 then num_query_tasks*query_working_mem else NULL end) over (part | CODE |
| HIGH | …rver/awslabs/redshift_mcp_server/review/definitions.py | 918 | LISTAGG(rule_name || ':' || '[' || action || '] ' || metric_name || metric_operator || metric_value::VARCHAR(25 | CODE |
| HIGH | …rver/awslabs/redshift_mcp_server/review/definitions.py | 1031 | ((total_workload*1.0 / sum(total_workload) over (partition by null))*100)::int perc_of_total_workload, | CODE |
| HIGH⚡ | …c/aws-iot-sitewise-mcp-server/tests/test_validation.py | 396 | validate_string_for_injection('test && ls') | CODE |
| HIGH | …rver/awslabs/dynamodb_mcp_server/db_analyzer/oracle.py | 126 | c.DATA_TYPE || CASE | CODE |
| HIGH⚡ | src/amazon-qindex-mcp-server/tests/test_clients.py | 146 | 'text && echo hack', | CODE |
| HIGH⚡ | src/amazon-qindex-mcp-server/tests/test_clients.py | 147 | 'text || true', | CODE |
| HIGH⚡ | src/amazon-qindex-mcp-server/tests/test_clients.py | 207 | client._validate_required_params('app-id', 'query && echo hack') | CODE |
| HIGH | src/amazon-qindex-mcp-server/tests/test_clients.py | 317 | application_id='app-id', query_text='query && echo hack' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …with-nova-canvas/user_interfaces/image_generator_st.py | 65 | CODE | |
| LOW | …slabs/aws_transform_mcp_server/tools/list_resources.py | 242 | CODE | |
| LOW | …awslabs/aws_transform_mcp_server/tools/get_resource.py | 139 | CODE | |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 102 | CODE | |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 584 | CODE | |
| LOW | …erver/awslabs/ecs_mcp_server/modules/infrastructure.py | 32 | CODE | |
| LOW | src/ecs-mcp-server/tests/unit/utils/async_test_utils.py | 67 | CODE | |
| LOW | …server/awslabs/valkey_mcp_server/tools/search_query.py | 67 | CODE | |
| LOW | …rver/awslabs/valkey_mcp_server/embeddings/providers.py | 83 | CODE | |
| LOW | …ols/network_firewall/get_network_firewall_flow_logs.py | 23 | CODE | |
| LOW | …/aws_network_mcp_server/tools/vpc/get_vpc_flow_logs.py | 23 | CODE | |
| LOW | …tools/transit_gateway/get_transit_gateway_flow_logs.py | 23 | CODE | |
| LOW | …qs-mcp-server/awslabs/amazon_sns_sqs_mcp_server/sqs.py | 57 | CODE | |
| LOW | …qs-mcp-server/awslabs/amazon_sns_sqs_mcp_server/sns.py | 56 | CODE | |
| LOW | …rver/awslabs/bedrock_kb_retrieval_mcp_server/server.py | 205 | CODE | |
| LOW | …rock_kb_retrieval_mcp_server/knowledgebases/agentic.py | 130 | CODE | |
| LOW | …edrock_agentcore_mcp_server/tools/runtime/lifecycle.py | 54 | CODE | |
| LOW | …edrock_agentcore_mcp_server/tools/runtime/lifecycle.py | 263 | CODE | |
| LOW | …_bedrock_agentcore_mcp_server/tools/browser/session.py | 75 | CODE | |
| LOW | …bedrock_agentcore_mcp_server/tools/gateway/gateways.py | 48 | CODE | |
| LOW | …wslabs/aws_healthomics_mcp_server/tools/run_metrics.py | 324 | CODE | |
| LOW | …slabs/aws_healthomics_mcp_server/tools/run_timeline.py | 51 | CODE | |
| LOW | …/aws_healthomics_mcp_server/tools/workflow_analysis.py | 96 | CODE | |
| LOW | …/aws_healthomics_mcp_server/tools/workflow_analysis.py | 245 | CODE | |
| LOW | …/aws_healthomics_mcp_server/tools/workflow_analysis.py | 327 | CODE | |
| LOW | …/aws_healthomics_mcp_server/tools/workflow_analysis.py | 405 | CODE | |
| LOW | …aws_healthomics_mcp_server/tools/workflow_execution.py | 128 | CODE | |
| LOW | …aws_healthomics_mcp_server/tools/workflow_execution.py | 426 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/run_group.py | 33 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/run_group.py | 233 | CODE | |
| LOW | …s_healthomics_mcp_server/tools/genomics_file_search.py | 31 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/ecr_tools.py | 1767 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/run_cache.py | 41 | CODE | |
| LOW | …s_healthomics_mcp_server/tools/sequence_store_tools.py | 304 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/run_batch.py | 63 | CODE | |
| LOW | …/awslabs/aws_healthomics_mcp_server/tools/run_batch.py | 392 | CODE | |
| LOW | …ws_healthomics_mcp_server/tools/workflow_management.py | 141 | CODE | |
| LOW | …ws_healthomics_mcp_server/tools/workflow_management.py | 595 | CODE | |
| LOW | …healthomics-mcp-server/integration/deploy/agentcore.py | 493 | CODE | |
| LOW | …ics-mcp-server/tests/test_server_multitenant_wiring.py | 36 | CODE | |
| LOW | …cost_management_mcp_server/tools/credits_operations.py | 779 | CODE | |
| LOW | …/billing_cost_management_mcp_server/tools/bvs_tools.py | 137 | CODE | |
| LOW | …anagement_mcp_server/tools/cost_explorer_operations.py | 34 | CODE | |
| LOW | …anagement_mcp_server/tools/cost_explorer_operations.py | 147 | CODE | |
| LOW | …anagement_mcp_server/tools/cost_explorer_operations.py | 258 | CODE | |
| LOW | …ost_management_mcp_server/tools/invoice_units_tools.py | 43 | CODE | |
| LOW | …ost_management_mcp_server/tools/invoice_units_tools.py | 157 | CODE | |
| LOW | …anagement_mcp_server/tools/invoice_units_operations.py | 50 | CODE | |
| LOW | …management_mcp_server/tools/compute_optimizer_tools.py | 136 | CODE | |
| LOW | …st_management_mcp_server/tools/invoicing_operations.py | 170 | CODE | |
| LOW | …agement_mcp_server/tools/sp_purchase_analyzer_tools.py | 78 | CODE | |
| LOW | …_cost_management_mcp_server/tools/sp_explorer_tools.py | 70 | CODE | |
| LOW | …ost_management_mcp_server/tools/cost_explorer_tools.py | 155 | CODE | |
| LOW | …ng_cost_management_mcp_server/tools/invoicing_tools.py | 36 | CODE | |
| LOW | …ng_cost_management_mcp_server/tools/invoicing_tools.py | 134 | CODE | |
| LOW | …management_mcp_server/tools/sp_recommendation_tools.py | 82 | CODE | |
| LOW | …ling_cost_management_mcp_server/tools/credits_tools.py | 37 | CODE | |
| LOW | …ling_cost_management_mcp_server/tools/credits_tools.py | 163 | CODE | |
| LOW | …mcp_server/tools/compute_optimizer_automation_tools.py | 276 | CODE | |
| LOW | …mcp_server/tools/compute_optimizer_automation_tools.py | 422 | CODE | |
| 141 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-integration-with-nova-canvas/clients/client_server.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …mples/mcp-integration-with-kb/clients/client_server.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | testing/pytest_utils.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | testing/mcp_test_client.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | testing/mcp_test_runner.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erver/awslabs/aws_transform_mcp_server/config_store.py | 352 | def set_sigv4_fes_available(available: bool) -> None: | CODE |
| LOW | …erver/awslabs/aws_transform_mcp_server/config_store.py | 363 | def set_sigv4_region(region: str | None) -> None: | CODE |
| LOW | …erver/awslabs/aws_transform_mcp_server/config_store.py | 374 | def set_sigv4_regions(regions: list[str]) -> None: | CODE |
| LOW | …erver/awslabs/aws_transform_mcp_server/config_store.py | 390 | def set_config(config: ConnectionConfig) -> None: | CODE |
| LOW | src/aws-transform-mcp-server/tests/test_integ_basic.py | 67 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/ecs-mcp-server/awslabs/ecs_mcp_server/utils/config.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | …cs-mcp-server/awslabs/ecs_mcp_server/utils/security.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/ecs-mcp-server/awslabs/ecs_mcp_server/utils/docker.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/utils/aws.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …s-mcp-server/awslabs/ecs_mcp_server/utils/templates.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/delete.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rver/awslabs/ecs_mcp_server/api/ecs_troubleshooting.py | 48 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-mcp-server/awslabs/ecs_mcp_server/api/containerize.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | …cp-server/awslabs/ecs_mcp_server/api/infrastructure.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rver/awslabs/ecs_mcp_server/api/resource_management.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/ecs-mcp-server/awslabs/ecs_mcp_server/api/__init__.py | 24 | __all__ = [ | CODE |
| LOW | …c/ecs-mcp-server/awslabs/ecs_mcp_server/api/express.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ecs-mcp-server/awslabs/ecs_mcp_server/api/status.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ubleshooting_tools/get_ecs_troubleshooting_guidance.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ubleshooting_tools/get_ecs_troubleshooting_guidance.py | 40 | __all__ = [ | CODE |
| LOW | …pi/troubleshooting_tools/detect_image_pull_failures.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …s/ecs_mcp_server/api/troubleshooting_tools/__init__.py | 29 | __all__ = [ | CODE |
| LOW | …erver/api/troubleshooting_tools/fetch_task_failures.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …i/troubleshooting_tools/fetch_cloudformation_status.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …cp_server/api/troubleshooting_tools/fetch_task_logs.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …labs/ecs_mcp_server/api/troubleshooting_tools/utils.py | 34 | __all__ = [ | CODE |
| LOW | …i/troubleshooting_tools/fetch_network_configuration.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rver/api/troubleshooting_tools/fetch_service_events.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/awslabs/ecs_mcp_server/modules/aws_knowledge_proxy.py | 47 | logger = logging.getLogger(__name__) | STRING |
| LOW | …awslabs/valkey_mcp_server/tools/search_manage_index.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | …server/awslabs/valkey_mcp_server/tools/search_query.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …server/awslabs/valkey_mcp_server/tools/valkey_write.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …wslabs/valkey_mcp_server/tools/search_add_documents.py | 44 | logger = logging.getLogger(__name__) | CODE |
| LOW | …er/awslabs/valkey_mcp_server/tools/search_aggregate.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-server/awslabs/valkey_mcp_server/tools/valkey_read.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | …key-mcp-server/awslabs/valkey_mcp_server/tools/json.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …server/awslabs/valkey_mcp_server/tools/valkey_admin.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | …erver/awslabs/valkey_mcp_server/embeddings/__init__.py | 55 | __all__ = [ | CODE |
| LOW | …-server/awslabs/valkey_mcp_server/common/connection.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rk-mcp-server/awslabs/aws_network_mcp_server/server.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_network_mcp_server/tools/network_firewall/__init__.py | 19 | __all__ = ['get_firewall_rules', 'get_firewall_flow_logs', 'list_firewalls'] | CODE |
| LOW | …slabs/aws_network_mcp_server/tools/general/__init__.py | 19 | __all__ = ['get_path_trace_methodology', 'find_ip_address', 'get_eni_details'] | CODE |
| LOW | …r/awslabs/aws_network_mcp_server/tools/vpn/__init__.py | 17 | __all__ = ['list_vpn_connections'] | CODE |
| LOW | …abs/aws_network_mcp_server/tools/cloud_wan/__init__.py | 26 | __all__ = [ | CODE |
| LOW | …r/awslabs/aws_network_mcp_server/tools/vpc/__init__.py | 19 | __all__ = ['get_vpc_flow_logs', 'get_vpc_network', 'list_vpcs'] | CODE |
| LOW | …s_network_mcp_server/tools/transit_gateway/__init__.py | 23 | __all__ = [ | CODE |
| LOW | …ol-mcp-server/awslabs/lambda_tool_mcp_server/server.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | …aws-documentation-mcp-server/tests/test_integ_basic.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | …entcore_mcp_server/tools/browser/connection_manager.py | 155 | def set_active_page(self, session_id: str, page: Page) -> None: | CODE |
| LOW | …server/awslabs/security_agent_mcp_server/aws_client.py | 60 | def set_mcp_client_info(self, mcp_client_name: str, mcp_client_version: str = '') -> None: | CODE |
| LOW | …-mcp-server/awslabs/security_agent_mcp_server/state.py | 103 | def update_config(self, **kwargs) -> None: | CODE |
| LOW | …-mcp-server/awslabs/security_agent_mcp_server/state.py | 171 | def set_code_review_id(self, workspace_path: str, code_review_id: str) -> None: | CODE |
| LOW | …s/aws_healthomics_mcp_server/visualization/__init__.py | 21 | __all__ = [ | CODE |
| LOW | …r/awslabs/aws_healthomics_mcp_server/metrics/client.py | 373 | __all__ = [ | CODE |
| 80 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …cp-server/sample_state_machines/customer-create/app.py | 20 | "name": "John Doe", | STRING |
| LOW⚡ | …cp-server/sample_state_machines/customer-create/app.py | 24 | "street": "123 Main St", | STRING |
| LOW⚡ | …cp-server/sample_state_machines/customer-create/app.py | 34 | Success format: {"customerId": "123", "name": "John Doe", ...} | STRING |
| LOW | …ver/sample_state_machines/customer-info-from-id/app.py | 26 | Success format: {"customerId": "123", "name": "John Doe", "email": "john@example.com", ...} | STRING |
| LOW | …ver/sample_state_machines/customer-info-from-id/app.py | 44 | 'name': 'John Doe', | CODE |
| LOW | …ver/sample_state_machines/customer-info-from-id/app.py | 48 | 'street': '123 Main St', | CODE |
| LOW | …in-content-docs/current/servers/dynamodb-mcp-server.md | 452 | user = User(user_id="123", username="username", name="John Doe") | CODE |
| LOW | …in-content-docs/current/servers/dynamodb-mcp-server.md | 459 | user.name = "Jane Doe" | CODE |
| LOW⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 31 | "email": "user@example.com", | CODE |
| LOW | …ecs-mcp-server/tests/unit/test_security_integration.py | 50 | assert "user@example.com" not in json.dumps(result) | CODE |
| LOW⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 75 | "owner": "user@example.com", | CODE |
| LOW | …ecs-mcp-server/tests/unit/test_security_integration.py | 103 | assert "user@example.com" not in result_json | CODE |
| LOW⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 131 | "Email": "admin@example.com", | CODE |
| LOW⚡ | …ecs-mcp-server/tests/unit/test_security_integration.py | 137 | "Email": "user@example.com", | CODE |
| LOW | …ecs-mcp-server/tests/unit/test_security_integration.py | 160 | assert "admin@example.com" not in result_json | CODE |
| LOW | …ecs-mcp-server/tests/unit/test_security_integration.py | 161 | assert "user@example.com" not in result_json | CODE |
| LOW⚡ | src/aurora-dsql-mcp-server/tests/test_sql_guard.py | 127 | with pytest.raises(SqlPolicyError, match='placeholder'): | CODE |
| LOW | …server/kiro_power/steering/examples-data-operations.md | 15 | ('John Doe', 'New York'), | CODE |
| LOW | …server/kiro_power/steering/examples-data-operations.md | 26 | UPDATE owner SET city = 'Boston' WHERE name = 'John Doe'; | CODE |
| LOW⚡ | …erver/examples/sample_functions/customer-create/app.py | 22 | "name": "John Doe", | STRING |
| LOW⚡ | …erver/examples/sample_functions/customer-create/app.py | 26 | "street": "123 Main St", | STRING |
| LOW⚡ | …erver/examples/sample_functions/customer-create/app.py | 36 | Success format: {"customerId": "123", "name": "John Doe", ...} | STRING |
| LOW | …examples/sample_functions/customer-info-from-id/app.py | 26 | Success format: {"customerId": "123", "name": "John Doe", "email": "john@example.com", ...} | STRING |
| LOW | …examples/sample_functions/customer-info-from-id/app.py | 44 | 'name': 'John Doe', | CODE |
| LOW | …examples/sample_functions/customer-info-from-id/app.py | 48 | 'street': '123 Main St', | CODE |
| LOW⚡ | …/bedrock-kb-retrieval-mcp-server/tests/test_agentic.py | 338 | user_id='user@example.com', | CODE |
| LOW⚡ | …/bedrock-kb-retrieval-mcp-server/tests/test_agentic.py | 341 | assert request['userContext'] == {'userId': 'user@example.com'} | CODE |
| LOW⚡ | …drock-kb-retrieval-mcp-server/tests/test_managed_kb.py | 255 | user_id='user@example.com', | CODE |
| LOW⚡ | …drock-kb-retrieval-mcp-server/tests/test_managed_kb.py | 257 | assert kb_client.retrieve.call_args[1]['userContext'] == {'userId': 'user@example.com'} | CODE |
| LOW | …drock-kb-retrieval-mcp-server/tests/test_managed_kb.py | 291 | user_id='user@example.com', | CODE |
| LOW | …drock-kb-retrieval-mcp-server/tests/test_managed_kb.py | 295 | assert call[1]['userContext'] == {'userId': 'user@example.com'} | CODE |
| LOW | …rock_agentcore_mcp_server/tools/browser/interaction.py | 206 | 'and "value" (text to enter). Example: [{"ref": "e2", "value": "user@example.com"}]' | CODE |
| LOW | …ver/integration/harness_tests/test_iam_provisioning.py | 154 | 'user@example.com', | CODE |
| LOW | …/postgres-mcp-server/tests/e2e/e2e_integration_test.py | 1366 | # sentinel is harmless because no cluster has resource id 'placeholder'. | COMMENT |
| LOW | …ts/core/glue_data_catalog/test_data_catalog_handler.py | 2472 | {'Id': '001', 'Name': 'Acme Corp'}, | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 108 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 124 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 131 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 178 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 190 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 203 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 209 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 1348 | ['user@example.com'], | CODE |
| LOW⚡ | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 1358 | ['user@example.com', 'another@example.com'], # Multiple valid emails | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 79 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 86 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 155 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 166 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 399 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 406 | 'submittedBy': 'user@example.com', | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 1389 | ['user@example.com', 'invalid@'], # One valid, one invalid | CODE |
| LOW | …upport-mcp-server/tests/test_aws_support_mcp_server.py | 2404 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 60 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 76 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 83 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 130 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 142 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 155 | 'submittedBy': 'user@example.com', | CODE |
| LOW⚡ | src/aws-support-mcp-server/tests/conftests.py | 161 | 'submittedBy': 'user@example.com', | CODE |
| LOW | src/aws-support-mcp-server/tests/conftests.py | 31 | 'submittedBy': 'user@example.com', | CODE |
| 16 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | testing/README.md | 23 | ├── mcp_test_runner.py # Test orchestration and execution | CODE |
| MEDIUM | …on_bedrock_agentcore_mcp_server/tools/runtime/guide.py | 37 | agentcore create --name MyAgent --defaults # scaffold project | CODE |
| MEDIUM⚡ | …healthomics-mcp-server/integration/deploy/agentcore.py | 797 | # Live-AWS seams (boto3-backed). Built lazily by the orchestration functions above; never | COMMENT |
| MEDIUM | …cs-mcp-server/tests/test_no_secret_leakage_property.py | 60 | # log scaffolding. ``source`` is sampled from the valid mechanism identifiers so | COMMENT |
| MEDIUM | …-mcp-server/tests/test_pagination_hints_real_shapes.py | 51 | # mock scaffolding; if their signatures change, this file's ECR-idiom tests | COMMENT |
| MEDIUM | …/postgres-mcp-server/tests/e2e/e2e_integration_test.py | 4114 | # Surface the orchestration failure as a recorded TestResult so | COMMENT |
| MEDIUM | …/postgres-mcp-server/tests/e2e/e2e_integration_test.py | 4437 | # reads so the rest of the orchestration needs no change. | COMMENT |
| MEDIUM | …ss-mcp-server/tests/test_deploy_serverless_app_help.py | 30 | # Call the function with event-driven application type | COMMENT |
| MEDIUM | …ss-mcp-server/tests/test_deploy_serverless_app_help.py | 54 | # Check that event-driven specific content is included | COMMENT |
| MEDIUM | …ss-mcp-server/tests/test_deploy_serverless_app_help.py | 204 | # Test with event-driven application type | COMMENT |
| MEDIUM | …ss-mcp-server/tests/test_deploy_serverless_app_help.py | 276 | # Test with event-driven application type | COMMENT |
| MEDIUM | …shift-mcp-server/awslabs/redshift_mcp_server/consts.py | 35 | # SQL guardrails | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | VIBE_CODING_TIPS_TRICKS.md | 37 | > Never blindly trust code generated by AI assistants. Always: | CODE |
| HIGH | src/aws-transform-mcp-server/awslabs/RFC.md | 158 | 2. **HITL task schema complexity** — HITL tasks have runtime-defined schemas that vary by component type. The server dyn | CODE |
| HIGH | …wslabs/aws_transform_mcp_server/hitl_output_schemas.py | 4451 | 'description': 'Whether this domain was generated by AI.', | CODE |
| HIGH | …chitected_security_mcp_server/util/storage_security.py | 59 | # Check each service as requested | COMMENT |
| HIGH | …chitected_security_mcp_server/util/network_security.py | 68 | # Check each service as requested | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ubleshooting_tools/test_fetch_network_configuration.py | 95 | def test_function(arg1, arg2): | CODE |
| LOW⚡ | …ubleshooting_tools/test_fetch_network_configuration.py | 108 | def test_function(arg1, arg2): | CODE |
| LOW⚡ | …ubleshooting_tools/test_fetch_network_configuration.py | 121 | def test_function(*args, **kwargs): | CODE |
| LOW | …ubleshooting_tools/test_fetch_network_configuration.py | 142 | def test_function(*args, **kwargs): | CODE |
| LOW | …st-management-mcp-server/tests/prompts/test_prompts.py | 33 | def test_function(): | CODE |
| LOW | …st-management-mcp-server/tests/prompts/test_prompts.py | 52 | def test_function(): | CODE |
| LOW⚡ | …st-management-mcp-server/tests/prompts/test_prompts.py | 69 | def test_function(a, b): | CODE |
| LOW | …pplicationsignals-mcp-server/evals/core/eval_runner.py | 62 | async def run_task( | CODE |
| LOW⚡ | …server/tests/test_all_create_tools_write_protection.py | 230 | async def test_function(): | CODE |
| LOW⚡ | …c/aws-appsync-mcp-server/tests/test_write_operation.py | 32 | async def test_function(): | CODE |
| LOW⚡ | …c/aws-appsync-mcp-server/tests/test_write_operation.py | 46 | async def test_function(): | CODE |
| LOW⚡ | …c/aws-appsync-mcp-server/tests/test_write_operation.py | 74 | async def test_function(): | CODE |
| LOW⚡ | …/openapi-mcp-server/tests/utils/test_cache_provider.py | 120 | def test_function(arg1, arg2=None): | CODE |
| LOW⚡ | …/openapi-mcp-server/tests/utils/test_cache_provider.py | 147 | def test_function(arg1, arg2=None, **kwargs): | CODE |
| LOW | …mcp-server/tests/test_edge_cases_and_error_handling.py | 230 | def test_function(should_fail=False): | CODE |
| LOW⚡ | …azon-translate-mcp-server/tests/test_logging_config.py | 327 | def test_function(): | CODE |
| LOW⚡ | …azon-translate-mcp-server/tests/test_logging_config.py | 338 | def test_function(): | CODE |
| LOW | …ndler/awslabs/mcp_lambda_handler/mcp_lambda_handler.py | 401 | def handle_request(self, event: Dict, context: Any) -> Dict: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …gin-content-docs/current/servers/openapi-mcp-server.md | 165 | awslabs.openapi-mcp-server --api-url https://api.example.com --spec-url https://api.example.com/openapi.json --auth-type | CODE |
| HIGH | …rver/awslabs/valkey_mcp_server/embeddings/providers.py | 251 | api_key="<your-api-key>", # pragma: allowlist secret | STRING |
| HIGH | src/openapi-mcp-server/README.md | 163 | awslabs.openapi-mcp-server --api-url https://api.example.com --spec-url https://api.example.com/openapi.json --auth-type | CODE |
| HIGH | src/openapi-mcp-server/DEPLOYMENT.md | 67 | -e AUTH_API_KEY="YOUR_API_KEY" \ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | …i-mcp-server/tests/common/test_file_system_controls.py | 194 | awscli.customizations.ecs.deploy.ECSDeploy._get_file_contents(instance, '$MY_SECRET') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/codeql.yml | 60 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| LOW⚡ | src/aws-healthomics-mcp-server/tests/test_consts.py | 304 | # This test ensures we don't forget to add new statuses to the list | COMMENT |
| LOW⚡ | src/aws-healthomics-mcp-server/tests/test_consts.py | 304 | # This test ensures we don't forget to add new statuses to the list | COMMENT |
| MEDIUM | …server/awslabs/amazon_keyspaces_mcp_server/services.py | 46 | # This is a basic implementation and might not handle all CQL syntax variations | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rver/awslabs/ecs_mcp_server/api/ecs_troubleshooting.py | 273 | # Example usage | COMMENT |
| LOW | src/postgres-mcp-server/tests/e2e/run_e2e.sh | 18 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …dwatch-applicationsignals-mcp-server/evals/__main__.py | 43 | # TODO: Fix logging gap between module import and main() execution. | COMMENT |