2.4

Adjusted Signal

2.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

11.2K

Stars

Python

Language

2.0M

Lines of Code

6.2K

Files

3.9K

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3013 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 415 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 766 finding(s).

PR Review Velocity Impact 11.3/100 · LOW

Which changes need focused human review? 3863 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 91MEDIUM 222LOW 3546

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3863 distinct pattern matches across 26 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block2029 hits · 1914 pts

Severity	File	Line	Snippet	Context
LOW	misc/install-bunkerweb.sh	281	_BW_RECORDED_COMPOSE_SHA256="" # checksum of docker-compose.yml as this script last wrote it	COMMENT
LOW	misc/install-bunkerweb.sh	801	}	COMMENT
LOW	misc/install-bunkerweb.sh	3401	# Default is restricted to loopback for security.	COMMENT
LOW	misc/install-bunkerweb.sh	3421	# API_PASSWORD=	COMMENT
LOW	misc/install-bunkerweb.sh	3441	# --- TLS/SSL ---	COMMENT
LOW	misc/install-bunkerweb.sh	3461	# --- Rate limiting ---	COMMENT
LOW	misc/install-bunkerweb.sh	8961	fi	COMMENT
LOW	misc/install-bunkerweb.sh	9401	# Same slot check_existing_installation occupies on the Linux side:	COMMENT
LOW	misc/update-openstreetmap-tiles.sh	61	echo "All tiles downloaded under $OUT_DIR."	COMMENT
LOW	misc/nginx2bw.sh	1	#!/bin/bash	COMMENT
LOW	misc/nginx2bw.sh	561	SERVE_FILES: "no"	COMMENT
LOW	misc/integrations/k8s.mariadb.ui.yml	81	ports:	COMMENT
LOW	misc/integrations/k8s.mysql.ui.yml	81	ports:	COMMENT
LOW	misc/integrations/k8s.oracle.ui.yml	81	ports:	COMMENT
LOW	misc/integrations/k8s.postgres.ui.yml	81	ports:	COMMENT
LOW	misc/dev/ticket-3755-le-dns-env-stale/setup.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/Upgrade.py	1961	else:	COMMENT
LOW	tests/Upgrade.py	1981	# "docker",	COMMENT
LOW	tests/Upgrade.py	2001	# "-c",	COMMENT
LOW	tests/Upgrade.py	2021	# "systemd-rhel",	COMMENT
LOW	tests/Upgrade.py	2041	# [	COMMENT
LOW	tests/Upgrade.py	2061	# "bash",	COMMENT
LOW	tests/Upgrade.py	2081	# "-it",	COMMENT
LOW	tests/ui/services_page.py	601	# log_info("Start checking steps buttons and default SERVER_NAME state ...")	COMMENT
LOW	tests/ui/services_page.py	621	# log_error("Next button should be disabled, exiting ...")	COMMENT
LOW	tests/ui/services_page.py	641	# # Select antibot plugin and click on javascript value	COMMENT
LOW	tests/ui/services_page.py	661	# # Check if data-step is 1 looking for hidden	COMMENT
LOW	tests/ui/services_page.py	681		COMMENT
LOW	tests/ui/services_page.py	701	# access_page(DRIVER, "//form[@data-services-modal-form and @data-simple]//button[@data-services-modal-submit='']",	COMMENT
LOW	tests/ui/requirements.txt	1	#	COMMENT
LOW	tests/core/bunkernet/api/requirements.txt	1	#	COMMENT
LOW	tests/core/whitelist/api/requirements.txt	1	#	COMMENT
LOW	tests/core/limit/requirements.txt	1	#	COMMENT
LOW	tests/core/antibot/requirements.txt	1	#	COMMENT
LOW	tests/core/redis/requirements.txt	1	#	COMMENT
LOW	tests/core/redis/requirements.txt	21	--hash=sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f \	COMMENT
LOW	tests/core/redis/requirements.txt	421	--hash=sha256:04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d \	COMMENT
LOW	tests/core/redis/main.py	341	# key_value = redis_client.get(f"plugin_country_www.example.com{ip_to_check}")	COMMENT
LOW	tests/core/redis/main.py	361		COMMENT
LOW	tests/core/redis/main.py	381	# )	COMMENT
LOW	tests/core/redis/main.py	401	# print(	COMMENT
LOW	tests/core/redis/main.py	421	# flush=True,	COMMENT
LOW	tests/core/greylist/api/requirements.txt	1	#	COMMENT
LOW	tests/core/authbasic/requirements.txt	1	#	COMMENT
LOW	tests/core/reverseproxy/requirements.txt	1	#	COMMENT
LOW	tests/core/reverseproxy/api/requirements.txt	1	#	COMMENT
LOW	tests/core/reversescan/requirements.txt	1	#	COMMENT
LOW	tests/core/sessions/requirements.txt	1	#	COMMENT
LOW	tests/core/blacklist/api/requirements.txt	1	#	COMMENT
LOW	tests/core/cors/requirements.txt	1	#	COMMENT
LOW	tests/core/redirect/requirements.txt	1	#	COMMENT
LOW	tests/core/dnsbl/init/requirements.txt	1	#	COMMENT
LOW	tests/core/errors/requirements.txt	1	#	COMMENT
LOW	tests/core/customcert/requirements.txt	1	#	COMMENT
LOW	docs/integrations.md	3941	```yaml	COMMENT
LOW	docs/zh/integrations.md	3821	misc:	COMMENT
LOW	docs/de/integrations.md	3821		COMMENT
LOW	docs/de/integrations.md	3881	name: ui-bunkerweb	COMMENT
LOW	docs/fr/integrations.md	3821	# Here we will setup the values needed to setup BunkerWeb behind an existing ingress controller	COMMENT
LOW	docs/es/integrations.md	3821	# Flujo de tráfico sin BW: LB => Controlador de Ingress existente => Servicio	COMMENT
1969 more matches not shown…

Decorative Section Separators106 hits · 324 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	misc/install-bunkerweb.sh	1370	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	misc/install-bunkerweb.sh	1373	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	217	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	225	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	269	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	273	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	285	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	289	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	340	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	344	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	387	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	389	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	637	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	640	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	1326	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	3315	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	3320	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	3390	# ==============================	COMMENT
MEDIUM	misc/install-bunkerweb.sh	3394	# ==============================	COMMENT
MEDIUM	misc/install-bunkerweb.sh	5352	# Render a section divider: "── Section ──────────────────────"	COMMENT
MEDIUM	misc/install-bunkerweb.sh	8668	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	misc/install-bunkerweb.sh	8672	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	examples/community/photoprism/photoprism-compose.yml	3	# ----------------------------------------------------------------------------------	COMMENT
MEDIUM	examples/community/photoprism/photoprism-compose.yml	6	# ----------------------------------------------------------------------------------	COMMENT
MEDIUM	src/common/utils/common_utils.py	277	# -----------------------	COMMENT
MEDIUM	src/common/utils/common_utils.py	279	# -----------------------	COMMENT
MEDIUM	src/common/helpers/utils.sh	293	# ============================================================================	COMMENT
MEDIUM	src/common/helpers/utils.sh	296	# ============================================================================	COMMENT
MEDIUM⚡	src/autoconf/controllers/KubernetesController.py	145	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/autoconf/controllers/KubernetesController.py	147	# ------------------------------------------------------------------	COMMENT
MEDIUM	src/api/app/models/api_database.py	127	# --------------------	COMMENT
MEDIUM	src/api/app/models/api_database.py	129	# --------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	25	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	33	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	42	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	49	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	64	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	73	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	83	#-------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/deps/src/brotli/csharp/transpile.sh	90	#-------------------------------------------------------------------------------	COMMENT
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/all-helpers.sh	21	# -------------------------	COMMENT
MEDIUM	…rc/mbedtls/tf-psa-crypto/framework/scripts/all-core.sh	16	# ---------------	COMMENT
MEDIUM	…rc/mbedtls/tf-psa-crypto/framework/scripts/all-core.sh	34	# ---------------	COMMENT
MEDIUM	…rc/mbedtls/tf-psa-crypto/framework/scripts/all-core.sh	82	# ---------------------	COMMENT
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/demo_common.sh	4	## ==========================	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	47	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	88	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	182	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	238	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	323	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	364	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	404	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	438	# -------------	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	464	# -------------	COMMENT
MEDIUM⚡	src/deps/src/zlib/CMakeLists.txt	10	# ============================================================================	COMMENT
MEDIUM⚡	src/deps/src/zlib/CMakeLists.txt	12	# ============================================================================	COMMENT
MEDIUM⚡	src/deps/src/zlib/CMakeLists.txt	18	# ============================================================================	COMMENT
MEDIUM⚡	src/deps/src/zlib/CMakeLists.txt	20	# ============================================================================	COMMENT
MEDIUM	src/deps/src/zlib/CMakeLists.txt	118	# ============================================================================	COMMENT
MEDIUM	src/deps/src/zlib/CMakeLists.txt	120	# ============================================================================	COMMENT
46 more matches not shown…

Hyper-Verbose Identifiers324 hits · 312 pts

Severity	File	Line	Snippet	Context
LOW	docs/json2md.py	344	def get_global_readme_content(lang: str = "en"):	CODE
LOW	docs/assets/preserve-version-on-language-switch.js	59	function getCurrentContentPathSegments() {	CODE
LOW	docs/assets/toc-dropdown.js	91	function expandFirstDropdownIfNeeded() {	CODE
LOW	.github/scripts/release_artifacts.py	152	def require_publishable_layers(repository, platforms):	CODE
LOW	.github/scripts/test_release_artifacts.py	44	def test_inventory_requires_every_platform_and_package_variant(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	67	def test_checksums_detect_changed_package_bytes(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	82	def test_index_preserves_platform_mapping_and_rejects_duplicates(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	93	def test_publication_gate_rejects_failure_skipped_cancelled_and_missing(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	101	def test_copy_has_no_build_and_preserves_full_index(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	113	def test_manifest_hash_is_checked_before_parsing_or_consuming(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	132	def test_assemble_binds_all_build_receipts_and_rejects_mixed_attempts(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	164	def test_smoke_uses_only_pushed_staging_images_without_source_mounts_or_builds(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	176	def test_smoke_seeds_shared_volume_before_starting_services(self, mocked_run):	CODE
LOW	.github/scripts/test_release_artifacts.py	189	def test_workflow_graph_has_no_publication_bypass(self):	CODE
LOW	.github/scripts/test_release_artifacts.py	228	def test_signed_tag_and_existing_release_guards_execute_fail_closed(self):	CODE
LOW⚡	.github/scripts/test_release_artifacts.py	334	def test_release_lookup_jobs_keep_push_access(self):	STRING
LOW⚡	.github/scripts/test_release_artifacts.py	341	def test_integration_cleanup_runs_even_when_init_child_exits(self):	STRING
LOW⚡	.github/scripts/test_release_artifacts.py	348	def test_integration_platform_filter_selects_one_platform_and_refuses_an_empty_selection(self):	STRING
LOW	.github/scripts/test_release_artifacts.py	359	def test_integration_cleanup_failure_does_not_hide_the_suite_failure(self):	STRING
LOW	.github/scripts/test_release_artifacts.py	366	def test_integration_cleanup_is_scoped_to_selected_manifests_and_named_container(self):	STRING
LOW	.github/scripts/test_release_claim.py	17	def test_create_only_claim_and_failed_job_retry_preserve_assets(self):	CODE
LOW	.github/scripts/test_release_claim.py	90	def test_unrelated_or_published_draft_never_mutated(self):	CODE
LOW	.github/scripts/test_release_claim.py	101	def test_create_conflict_or_lookup_failure_has_no_update_fallback(self):	CODE
LOW	.github/scripts/test_release_claim.py	123	def test_existing_asset_digest_or_download_must_match_original_bytes(self):	CODE
LOW⚡	src/ui/main.py	1208	def _enforce_session_lifetime() -> bool:	CODE
LOW	src/ui/main.py	280	def create_global_jinja_loader(self):	CODE
LOW	src/ui/main.py	388	def register_plugin_blueprints(app, blueprint_registry):	CODE
LOW	src/ui/main.py	416	def fail_closed_before_request():	CODE
LOW	src/ui/main.py	836	def _throttled_should_set_storage(flask_app, flask_session) -> bool:	CODE
LOW	src/ui/main.py	1046	def update_latest_stable_release():	CODE
LOW	src/ui/main.py	1103	def schedule_database_state_check(request_method: str, request_path: str):	CODE
LOW	src/ui/main.py	1172	def _delete_session_store_entry(sid: str) -> None:	CODE
LOW	src/ui/app/utils.py	69	def custom_config_data_matches(value: bytes, stored_value: bytes) -> bool:	CODE
LOW	src/ui/app/utils.py	73	def custom_config_needs_upsert(config: Dict[str, Any], original: Optional[Dict[str, Any]]) -> bool:	CODE
LOW	src/ui/app/utils.py	335	def password_exceeds_bcrypt_limit(password: str) -> bool:	CODE
LOW	src/ui/app/utils.py	379	def get_latest_stable_release():	CODE
LOW	src/ui/app/utils.py	503	def _revoked_session_ttl_seconds():	CODE
LOW	src/ui/app/utils.py	539	def _session_store_redis_available() -> bool:	CODE
LOW	src/ui/app/models/resilient_session.py	125	def _discard_stale_redis_copy(self, store_id: str) -> None:	CODE
LOW⚡	src/ui/app/models/instance.py	1122	def _iter_instance_api_requests(self):	CODE
LOW⚡	src/ui/app/models/instance.py	1235	def _get_shared_home_aggregates(self, redis_client, cache_key: tuple) -> Optional[dict]:	CODE
LOW⚡	src/ui/app/models/instance.py	1257	def _set_shared_home_aggregates(self, redis_client, cache_key: tuple, result: dict) -> None:	CODE
LOW	src/ui/app/models/instance.py	297	def _get_max_blocked_requests_redis(self) -> int:	CODE
LOW	src/ui/app/models/instance.py	396	def _get_redis_pane_counts_from_facets(	CODE
LOW	src/ui/app/models/instance.py	450	def _get_redis_pane_counts_streaming_fallback(	CODE
LOW	src/ui/app/models/instance.py	477	def _get_redis_requests_fast_page(	CODE
LOW	src/ui/app/models/instance.py	1088	def _iter_redis_requests_reverse(self, redis_client, chunk_size: int = 2000, start_index: int = 0, total: Optional[i	CODE
LOW	src/ui/app/models/ui_database.py	363	def refresh_ui_user_recovery_codes(self, username: str, codes: List[str]) -> str:	CODE
LOW	src/ui/app/models/ui_database.py	388	def delete_ui_user_recovery_codes(self, username: str) -> str:	CODE
LOW	src/ui/app/models/ui_database.py	416	def get_ui_user_recovery_codes(self, username: str) -> List[str]:	CODE
LOW⚡	src/ui/app/models/ui_database.py	431	def use_ui_user_recovery_code(self, username: str, hashed_code: str) -> str:	CODE
LOW⚡	src/ui/app/models/ui_database.py	446	def delete_ui_user_old_sessions(self, username: str, keep_session_id: Optional[int] = None) -> str:	CODE
LOW	src/ui/app/models/ui_database.py	474	def update_ui_user_columns_preferences(self, username: str, table_name: str, columns: Dict[str, bool]) -> str:	CODE
LOW	src/ui/app/models/ui_database.py	497	def get_ui_user_columns_preferences(self, username: str, table_name: str) -> Dict[str, bool]:	CODE
LOW	src/ui/app/models/biscuit.py	269	def _apply_core_role_permissions(self, builder: BiscuitBuilder, role: str) -> None:	CODE
LOW	src/ui/app/static/js/dataTableInit.js	3	function collectDataTableSearchPaneEntries(requestData) {	CODE
LOW	src/ui/app/static/js/dataTableInit.js	62	function appendDataTableParamsInputs(form, params, inputClass = "") {	CODE
LOW	src/ui/app/static/js/dataTableInit.js	75	function appendDataTableStateInputs(form, dataTable) {	CODE
LOW	src/ui/app/static/js/dataTableInit.js	108	(function patchDataTablesButtonsForFormulaInjection() {	CODE
LOW	src/ui/app/static/js/i18n.js	217	function updateTableLanguageAndTranslations(table) {	CODE
264 more matches not shown…

Excessive Try-Catch Wrapping274 hits · 306 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/plugins.md	778	print("Error encountered:", error, flush=True)	CODE
MEDIUM	docs/zh/plugins.md	774	print("Error encountered:", error, flush=True)	CODE
MEDIUM	docs/de/plugins.md	773	print("Error encountered:", error, flush=True)	CODE
MEDIUM	docs/fr/plugins.md	775	print("Error encountered:", error, flush=True)	CODE
MEDIUM	docs/es/plugins.md	772	print("Error encontrado:", error, flush=True)	CODE
LOW	.github/scripts/release_integration.py	46	except Exception:	CODE
LOW⚡	src/ui/main.py	1194	except Exception:	CODE
LOW⚡	src/ui/main.py	1202	except Exception:	CODE
LOW	src/ui/main.py	499	except Exception as exec_err:	CODE
LOW	src/ui/main.py	526	except Exception as exc:	CODE
LOW	src/ui/main.py	624	except Exception as exc:	CODE
LOW	src/ui/main.py	913	except Exception:	CODE
LOW	src/ui/main.py	941	except Exception:	CODE
LOW	src/ui/main.py	969	except Exception:	CODE
LOW	src/ui/main.py	1181	except Exception:	CODE
LOW	src/ui/main.py	1478	except Exception:	CODE
LOW	src/ui/main.py	1565	except Exception:	CODE
LOW	src/ui/main.py	1592	except Exception:	CODE
LOW	src/ui/app/support_bundle.py	253	except Exception:	CODE
MEDIUM	src/ui/app/support_bundle.py	240	def emit(self, record) -> None:	CODE
LOW	src/ui/app/utils.py	568	except Exception:	CODE
LOW	src/ui/app/utils.py	608	except Exception:	CODE
LOW	src/ui/app/models/resilient_session.py	102	except Exception as e:	CODE
LOW	src/ui/app/models/resilient_session.py	152	except Exception as e:	CODE
MEDIUM	src/ui/app/models/instance.py	151	def reload(self) -> str:	CODE
MEDIUM	src/ui/app/models/instance.py	382	def _decode_redis_report(raw) -> Optional[dict]:	CODE
LOW⚡	src/ui/app/models/instance.py	1112	except Exception:	CODE
LOW⚡	src/ui/app/models/instance.py	1131	except Exception:	CODE
LOW⚡	src/ui/app/models/instance.py	1245	except Exception:	CODE
LOW⚡	src/ui/app/models/instance.py	1254	except Exception:	CODE
LOW	src/ui/app/models/instance.py	92	except Exception:	CODE
LOW	src/ui/app/models/instance.py	305	except Exception:	CODE
LOW	src/ui/app/models/instance.py	318	except Exception:	CODE
LOW	src/ui/app/models/instance.py	346	except Exception:	CODE
LOW	src/ui/app/models/instance.py	428	except Exception:	CODE
LOW	src/ui/app/models/instance.py	701	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	722	except Exception:	CODE
LOW	src/ui/app/models/instance.py	774	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	947	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	1051	except Exception:	CODE
LOW	src/ui/app/models/instance.py	1101	except Exception:	CODE
LOW	src/ui/app/models/instance.py	1512	except Exception:	CODE
LOW	src/ui/app/models/instance.py	1559	except Exception:	CODE
LOW	src/ui/app/models/instance.py	1566	except Exception:	CODE
LOW	src/ui/app/models/instance.py	1635	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	1640	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	1651	except Exception as e:	CODE
LOW	src/ui/app/models/instance.py	1721	except Exception:	CODE
LOW	src/ui/app/models/config.py	56	except Exception:	CODE
LOW	src/ui/app/models/ui_database.py	241	except Exception as e:	CODE
LOW⚡	src/ui/app/models/ui_database.py	441	except Exception as e:	CODE
LOW	src/ui/app/models/biscuit.py	170	except Exception as e:	CODE
LOW	src/ui/app/models/biscuit.py	205	except Exception as e:	CODE
LOW	src/ui/app/models/biscuit.py	250	except Exception as e:	CODE
LOW	src/ui/app/routes/plugins.py	378	except Exception as e:	CODE
LOW	src/ui/app/routes/support.py	30	except Exception:	CODE
MEDIUM	src/ui/app/routes/support.py	25	def alembic_revision():	CODE
LOW	src/ui/app/routes/home.py	61	except Exception:	CODE
LOW	src/ui/app/routes/crowdsec.py	21	except Exception:	CODE
LOW	src/ui/app/routes/crowdsec.py	158	except Exception:	CODE
214 more matches not shown…

Deep Nesting278 hits · 253 pts

Severity	File	Line	Context
LOW	misc/fix_readme_indentation.py	29	CODE
LOW	tests/Test.py	130	CODE
LOW	tests/KubernetesTest.py	19	CODE
LOW	tests/SwarmTest.py	131	CODE
LOW	tests/LinuxTest.py	29	CODE
LOW	tests/ui/utils.py	14	CODE
LOW	tests/ui/utils.py	53	CODE
LOW	docs/json2md.py	177	CODE
LOW	docs/hooks/llmstxt.py	130	CODE
LOW	.github/scripts/release_artifacts.py	268	CODE
LOW	.github/scripts/test_release_artifacts.py	113	CODE
LOW	.github/scripts/test_release_artifacts.py	132	CODE
LOW	.github/scripts/test_release_claim.py	17	CODE
LOW	.github/scripts/release_integration.py	16	CODE
LOW	src/ui/main.py	425	CODE
LOW	src/ui/main.py	906	CODE
LOW	src/ui/main.py	1052	CODE
LOW	src/ui/main.py	1103	CODE
LOW	src/ui/main.py	1264	CODE
LOW	src/ui/app/support_bundle.py	100	CODE
LOW	src/ui/app/support_bundle.py	141	CODE
LOW	src/ui/app/support_bundle.py	331	CODE
LOW	src/ui/app/utils.py	219	CODE
LOW	src/ui/app/dependencies.py	82	CODE
LOW	src/ui/app/models/instance.py	396	CODE
LOW	src/ui/app/models/instance.py	477	CODE
LOW	src/ui/app/models/instance.py	673	CODE
LOW	src/ui/app/models/instance.py	781	CODE
LOW	src/ui/app/models/instance.py	1032	CODE
LOW	src/ui/app/models/instance.py	1265	CODE
LOW	src/ui/app/models/instance.py	1384	CODE
LOW	src/ui/app/models/instance.py	1417	CODE
LOW	src/ui/app/models/instance.py	1455	CODE
LOW	src/ui/app/models/config.py	432	CODE
LOW	src/ui/app/models/ui_database.py	27	CODE
LOW	src/ui/app/models/ui_database.py	337	CODE
LOW	src/ui/app/models/ui_data.py	20	CODE
LOW	src/ui/app/models/template.py	8	CODE
LOW	src/ui/app/models/biscuit.py	140	CODE
LOW	src/ui/app/models/biscuit.py	269	CODE
LOW	src/ui/app/routes/plugins.py	115	CODE
LOW	src/ui/app/routes/plugins.py	222	CODE
LOW	src/ui/app/routes/plugins.py	414	CODE
LOW	src/ui/app/routes/plugins.py	484	CODE
LOW	src/ui/app/routes/logout.py	10	CODE
LOW	src/ui/app/routes/services.py	178	CODE
LOW	src/ui/app/routes/services.py	301	CODE
LOW	src/ui/app/routes/services.py	965	CODE
LOW	src/ui/app/routes/services.py	193	CODE
LOW	src/ui/app/routes/services.py	368	CODE
LOW	src/ui/app/routes/support.py	45	CODE
LOW	src/ui/app/routes/support.py	109	CODE
LOW	src/ui/app/routes/configs.py	134	CODE
LOW	src/ui/app/routes/configs.py	705	CODE
LOW	src/ui/app/routes/home.py	15	CODE
LOW	src/ui/app/routes/instances.py	110	CODE
LOW	src/ui/app/routes/profile.py	210	CODE
LOW	src/ui/app/routes/bans.py	151	CODE
LOW	src/ui/app/routes/bans.py	263	CODE
LOW	src/ui/app/routes/bans.py	421	CODE
218 more matches not shown…

Redundant / Tautological Comments129 hits · 190 pts

Severity	File	Line	Snippet	Context
LOW	misc/dev/docker-compose.autoconf.ui.api.yml	194	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.ui.misc.yml	130	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.autoconf.ui.yml	161	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.ui.api.yml	156	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.wizard.yml	120	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.autoconf.ui.misc.yml	167	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.ui.yml	125	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/dev/docker-compose.autoconf.wizard.yml	155	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	misc/migration/create.sh	159	# Check if the target tag already has a migration	COMMENT
LOW	tests/ui/services_page.py	633	# # Check if data-step is 2 looking for hidden	COMMENT
LOW	tests/ui/services_page.py	661	# # Check if data-step is 1 looking for hidden	COMMENT
LOW	tests/ui/services_page.py	685	# # Check if data-step is 2 looking for hidden	COMMENT
LOW	tests/core/bunkernet/test.sh	122	# Check if stack is healthy	COMMENT
LOW	tests/core/misc/test.sh	188	# Check if stack is healthy	COMMENT
LOW	tests/core/letsencrypt/test.sh	109	# Check if stack is healthy	COMMENT
LOW	tests/core/whitelist/test.sh	320	# Check if stack is healthy	COMMENT
LOW	tests/core/limit/test.sh	180	# Check if stack is healthy	COMMENT
LOW	tests/core/clientcache/test.sh	149	# Check if stack is healthy	COMMENT
LOW	tests/core/inject/test.sh	77	# Check if stack is healthy	COMMENT
LOW	tests/core/antibot/test.sh	124	# Check if stack is healthy	COMMENT
LOW	tests/core/redis/test.sh	366	# Check if stack is healthy	COMMENT
LOW	tests/core/brotli/test.sh	112	# Check if stack is healthy	COMMENT
LOW	tests/core/greylist/test.sh	316	# Check if stack is healthy	COMMENT
LOW	tests/core/authbasic/test.sh	151	# Check if stack is healthy	COMMENT
LOW	tests/core/gzip/test.sh	112	# Check if stack is healthy	COMMENT
LOW	tests/core/reverseproxy/test.sh	213	# Check if stack is healthy	COMMENT
LOW	tests/core/reversescan/test.sh	120	# Check if stack is healthy	COMMENT
LOW	tests/core/bwcli/test.sh	96	# Check if stack is healthy	COMMENT
LOW	tests/core/sessions/test.sh	123	# Check if stack is healthy	COMMENT
LOW	tests/core/blacklist/test.sh	476	# Check if stack is healthy	COMMENT
LOW	tests/core/headers/test.sh	303	# Check if stack is healthy	COMMENT
LOW	tests/core/badbehavior/test.sh	168	# Check if stack is healthy	COMMENT
LOW	tests/core/cors/test.sh	193	# Check if stack is healthy	COMMENT
LOW	tests/core/redirect/test.sh	116	# Check if stack is healthy	COMMENT
LOW	tests/core/db/test.sh	228	# Check if stack is healthy	COMMENT
LOW	tests/core/modsecurity/test.sh	146	# Check if stack is healthy	COMMENT
LOW	tests/core/dnsbl/test.sh	175	# Check if stack is healthy	COMMENT
LOW	tests/core/errors/test.sh	123	# Check if stack is healthy	COMMENT
LOW	tests/core/customcert/test.sh	160	# Check if stack is healthy	COMMENT
LOW	tests/core/backup/test.sh	159	# Check if stack is healthy	COMMENT
LOW	tests/core/country/test.sh	126	# Check if stack is healthy	COMMENT
LOW	tests/core/selfsigned/test.sh	126	# Check if stack is healthy	COMMENT
LOW	tests/linux/Linux.sh	4	# Check if the package already exists in /tmp/$DISTRO/bunkerweb.deb or /tmp/$DISTRO/bunkerweb.rpm	COMMENT
LOW	docs/json2md.py	194	# Check if README.md exists for global settings and use its content instead	COMMENT
LOW	docs/json2md.py	272	# Check if README.md exists and use its content instead	COMMENT
LOW	examples/syslog/docker-compose.yml	58	- DAC_READ_SEARCH # Read files bypassing permissions	CODE
LOW	.github/workflows/push-github.yml	94	# Check if this is a stable release (no -rc/-beta or ~rc/~beta suffix)	COMMENT
LOW	src/ui/main.py	357	# Check if a blueprint with this name is already registered.	COMMENT
LOW	src/ui/main.py	391	# Check if we should replace existing blueprint (DynamicFlask.register_blueprint removes the old one)	COMMENT
LOW	src/ui/entrypoint.sh	14	# Check if the temporary web UI process exists and stop it gracefully.	COMMENT
LOW	src/ui/app/models/instance.py	1324	# Check if blocked (403, 429, 444)	COMMENT
LOW	src/ui/app/models/instance.py	1482	# Check if METRICS_SAVE_TO_REDIS is enabled for errors	COMMENT
LOW	src/ui/app/models/config.py	253	# Check if the variable is not editable because it is managed externally.	COMMENT
LOW	src/ui/app/models/ui_database.py	44	# Check if admin role exists, create it if not	COMMENT
LOW	src/ui/app/routes/plugins.py	535	# Check if at least one service is using metrics and/or the plugin	COMMENT
LOW	src/ui/utils/gunicorn.conf.py	635	# Check if Redis is enabled via environment variable or database before closing DB	COMMENT
LOW	src/scheduler/JobScheduler.py	294	# Check if module is already cached	COMMENT
LOW	src/scheduler/main.py	1316	# Check if any external or pro plugin has been added by the user	COMMENT
LOW	src/scheduler/entrypoint.sh	71	# Check if the table exists first	COMMENT
LOW	src/common/core/bunkernet/jobs/bunkernet-register.py	23	# Check if at least a server has BunkerNet activated	COMMENT
69 more matches not shown…

Unused Imports185 hits · 185 pts

Severity	File	Line	Context
LOW	misc/fix_readme_indentation.py	16	CODE
LOW	src/common/core/letsencrypt/jobs/letsencrypt_utils.py	672	CODE
LOW	src/common/core/letsencrypt/jobs/letsencrypt_utils.py	672	CODE
LOW	src/common/core/letsencrypt/jobs/letsencrypt_utils.py	672	CODE
LOW	…les/coreruleset-v4/util/crs-rules-check/rules-check.py	4	CODE
LOW	…les/coreruleset-v4/util/crs-rules-check/rules-check.py	5	CODE
LOW	…/coreruleset-v3/util/regexp-assemble/regexp-cmdline.py	13	CODE
LOW	…y/files/coreruleset-v3/util/crs2-renumbering/update.py	5	CODE
LOW	src/common/core/backup/backup.py	25	CODE
LOW	src/common/core/backup/backup.py	25	CODE
LOW	…sql_versions/a48eacc5e5b6_upgrade_to_version_1_6_11.py	12	CODE
LOW	…sql_versions/12ffcd2b9d63_upgrade_to_version_1_5_11.py	13	CODE
LOW	…ysql_versions/b45f98a50b5c_upgrade_to_version_1_5_8.py	13	CODE
LOW	…ysql_versions/c2ea0c19c08f_upgrade_to_version_1_6_1.py	13	CODE
LOW	…_versions/53accecd001e_upgrade_to_version_1_6_0_rc3.py	12	CODE
LOW	…_versions/53accecd001e_upgrade_to_version_1_6_0_rc3.py	13	CODE
LOW	…ysql_versions/ae3e1b23457d_upgrade_to_version_1_6_4.py	12	CODE
LOW	…ysql_versions/9f917f5e76b3_upgrade_to_version_1_6_0.py	12	CODE
LOW	…ysql_versions/9f917f5e76b3_upgrade_to_version_1_6_0.py	13	CODE
LOW	…ysql_versions/c6fcd4f6971d_upgrade_to_version_1_5_9.py	12	CODE
LOW	…ysql_versions/c6fcd4f6971d_upgrade_to_version_1_5_9.py	13	CODE
LOW	…sql_versions/c6673c17e477_upgrade_to_version_1_6_10.py	12	CODE
LOW	…sql_versions/3d6af0bf1bec_upgrade_to_version_1_5_12.py	12	CODE
LOW	…sql_versions/3d6af0bf1bec_upgrade_to_version_1_5_12.py	13	CODE
LOW	…_versions/bd24b496a4e3_upgrade_to_version_1_6_3_rc2.py	12	CODE
LOW	…_versions/aaa57bd5828f_upgrade_to_version_1_6_3_rc3.py	12	CODE
LOW	…_versions/2c8a1caf53fa_upgrade_to_version_1_6_5_rc3.py	12	CODE
LOW	…_versions/2c8a1caf53fa_upgrade_to_version_1_6_5_rc3.py	13	CODE
LOW	…ysql_versions/3f152772560d_upgrade_to_version_1_5_4.py	13	CODE
LOW	…_versions/62334353ef44_upgrade_to_version_1_6_0_rc4.py	12	CODE
LOW	…_versions/62334353ef44_upgrade_to_version_1_6_0_rc4.py	13	CODE
LOW	…ysql_versions/edcde398c829_upgrade_to_version_1_5_1.py	13	CODE
LOW	…ysql_versions/e65b18370d91_upgrade_to_version_1_5_3.py	12	CODE
LOW	…ysql_versions/e65b18370d91_upgrade_to_version_1_5_3.py	13	CODE
LOW	…_versions/0e74389d938f_upgrade_to_version_1_6_5_rc2.py	12	CODE
LOW	…_versions/c56f10a148e9_upgrade_to_version_1_6_3_rc1.py	12	CODE
LOW	…ysql_versions/4f46305855fd_upgrade_to_version_1_6_3.py	12	CODE
LOW	…sql_versions/b03a64d4d34a_upgrade_to_version_1_5_10.py	12	CODE
LOW	…sql_versions/b03a64d4d34a_upgrade_to_version_1_5_10.py	13	CODE
LOW	…ysql_versions/e4ccc523fea5_upgrade_to_version_1_5_2.py	12	CODE
LOW	…ysql_versions/e4ccc523fea5_upgrade_to_version_1_5_2.py	13	CODE
LOW	…_versions/927114675a7d_upgrade_to_version_1_6_0_rc4.py	12	CODE
LOW	…ite_versions/20966abcdf3e_upgrade_to_version_1_6_11.py	12	CODE
LOW	…lite_versions/7be1a99223e6_upgrade_to_version_1_6_4.py	12	CODE
LOW	…versions/9c5dcacc541a_upgrade_to_version_1_6_10_rc5.py	12	CODE
LOW	…ite_versions/f5ad08b01f62_upgrade_to_version_1_6_10.py	12	CODE
LOW	…ite_versions/760f95e8bee7_upgrade_to_version_1_5_10.py	12	CODE
LOW	…lite_versions/4f7bdc32c662_upgrade_to_version_1_5_9.py	12	CODE
LOW	…_versions/7a8df0c89512_upgrade_to_version_1_6_5_rc2.py	12	CODE
LOW	…_versions/fd214d08928f_upgrade_to_version_1_6_5_rc3.py	12	CODE
LOW	…ite_versions/75a5d34f9a7d_upgrade_to_version_1_5_12.py	12	CODE
LOW	…_versions/76ce66b69597_upgrade_to_version_1_6_0_rc3.py	12	CODE
LOW	…_versions/10d5e9b3e39e_upgrade_to_version_1_6_3_rc3.py	12	CODE
LOW	…_versions/cc59051c313d_upgrade_to_version_1_6_3_rc1.py	12	CODE
LOW	…lite_versions/b3717dab5cdf_upgrade_to_version_1_6_3.py	12	CODE
LOW	…_versions/940d4e056335_upgrade_to_version_1_6_3_rc2.py	12	CODE
LOW	…_versions/166ec9cfef46_upgrade_to_version_1_6_5_rc3.py	12	CODE
LOW	…_versions/166ec9cfef46_upgrade_to_version_1_6_5_rc3.py	13	CODE
LOW	…_versions/28d521ac2009_upgrade_to_version_1_6_0_rc3.py	12	CODE
LOW	…_versions/28d521ac2009_upgrade_to_version_1_6_0_rc3.py	13	CODE
125 more matches not shown…

Magic Placeholder Names37 hits · 185 pts

Severity	File	Line	Snippet	Context
HIGH	docs/features.md	2242	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/features.md	2253	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/features.md	2281	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/features.md	3365	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	docs/zh/features.md	2238	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/zh/features.md	2249	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/zh/features.md	2277	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/zh/features.md	3358	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	docs/de/features.md	2203	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/de/features.md	2214	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/de/features.md	2242	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/de/features.md	3295	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	docs/fr/features.md	2165	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/fr/features.md	2176	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/fr/features.md	2204	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/fr/features.md	3250	INJECT_BODY: '<script src="https://cdn.example.com/js/widget.js"></script><script>initializeWidget(''your-api-key'')	CODE
HIGH	docs/es/features.md	2267	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	docs/es/features.md	3348	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	examples/dns-dnsmadeeasy/docker-compose.yml	40	LETS_ENCRYPT_DNS_CREDENTIAL_ITEM: "dns_dnsmadeeasy_api_key <your-api-key>" # replace with your DNS Made Easy API k	CODE
HIGH	src/common/core/inject/README.zh.md	65	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	src/common/core/inject/README.fr.md	57	INJECT_BODY: '<script src="https://cdn.example.com/js/widget.js"></script><script>initializeWidget(''your-api-key'')	CODE
HIGH	src/common/core/inject/README.es.md	65	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	src/common/core/inject/README.de.md	65	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	src/common/core/inject/README.md	65	INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key')	CODE
HIGH	src/common/core/crowdsec/README.zh.md	410	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.zh.md	421	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.zh.md	449	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.fr.md	410	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.fr.md	421	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.fr.md	449	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.es.md	445	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.de.md	408	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.de.md	419	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.de.md	447	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.md	414	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.md	425	CROWDSEC_API_KEY: "your-api-key-here"	CODE
HIGH	src/common/core/crowdsec/README.md	453	app1.example.com_CROWDSEC_API_KEY: "your-api-key-here"	CODE

Fake / Example Data177 hits · 178 pts

Severity	File	Line	Snippet	Context
LOW	misc/dummy-plugin/plugin.json	13	"id": "dummy-id",	CODE
LOW	docs/integrations.md	4170	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/integrations.md	4272	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/integrations.md	4434	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/integrations.md	4496	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/advanced.md	4601	OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com"	CODE
LOW	docs/advanced.md	4877	app.example.com_SAML_ACL_VALUE_2: "admin@example.com"	CODE
LOW	docs/advanced.md	5484	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/plugins.md	329	"id": "dummy-id",	CODE
LOW	docs/plugins.md	796	"current_user": "John Doe",	CODE
LOW	docs/features.md	3504	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3613	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3623	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3636	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3649	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3661	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/features.md	3674	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/integrations.md	4044	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/integrations.md	4146	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/integrations.md	4308	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/integrations.md	4370	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/advanced.md	4597	OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com"	CODE
LOW	docs/zh/advanced.md	4873	app.example.com_SAML_ACL_VALUE_2: "admin@example.com"	CODE
LOW	docs/zh/advanced.md	5480	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/plugins.md	326	"id": "dummy-id",	CODE
LOW	docs/zh/plugins.md	792	"current_user": "John Doe",	CODE
LOW	docs/zh/features.md	3497	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3605	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3615	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3628	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3641	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3653	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/zh/features.md	3666	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/integrations.md	4047	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/integrations.md	4149	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/integrations.md	4311	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/integrations.md	4373	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/advanced.md	4600	OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com"	CODE
LOW	docs/de/advanced.md	4876	app.example.com_SAML_ACL_VALUE_2: "admin@example.com"	CODE
LOW	docs/de/advanced.md	5483	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/plugins.md	325	"id": "dummy-id",	CODE
LOW	docs/de/plugins.md	791	"current_user": "John Doe",	CODE
LOW	docs/de/features.md	3434	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3542	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3552	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3565	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3578	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3590	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/de/features.md	3603	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/integrations.md	4049	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/integrations.md	4151	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/integrations.md	4313	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/integrations.md	4375	bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/advanced.md	4599	OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com"	CODE
LOW	docs/fr/advanced.md	4875	app.example.com_SAML_ACL_VALUE_2: "admin@example.com"	CODE
LOW	docs/fr/advanced.md	5482	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/plugins.md	326	"id": "dummy-id",	CODE
LOW	docs/fr/plugins.md	793	"current_user": "John Doe",	CODE
LOW	docs/fr/features.md	3387	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
LOW	docs/fr/features.md	3495	EMAIL_LETS_ENCRYPT: "admin@example.com"	CODE
117 more matches not shown…

Self-Referential Comments56 hits · 164 pts

Severity	File	Line	Snippet	Context
MEDIUM	misc/install-bunkerweb.sh	20	# Create a registered 0600 tempfile and echo its path; returns 1 if mktemp fails.	COMMENT
MEDIUM	tests/linux/Linux.sh	55	# Create the container and copy the package to the host	COMMENT
MEDIUM	examples/authentik/setup-kubernetes.sh	4	# Create the Authentik blueprint ConfigMap first so the Helm chart can mount it	COMMENT
MEDIUM	src/ui/entrypoint.sh	7	# Define a function to handle SIGTERM and SIGINT signals.	COMMENT
MEDIUM	src/ui/app/models/instance.py	646	# Create a unique key that combines IP, ban scope, service and kind, so a CrowdSec lease and an explicit ban	COMMENT
MEDIUM	src/scheduler/JobScheduler.py	281	# Create a unique module name based on path	COMMENT
MEDIUM	src/common/core/misc/jobs/default-server-cert.py	63	# Create a temporary OpenSSL config file with enhanced security settings	COMMENT
MEDIUM	src/common/core/authbasic/ui/actions.py	158	# Create a unique key for deduplication	COMMENT
MEDIUM	src/common/core/jobs/jobs/api-server-cert.py	34	# Create a temporary OpenSSL config file with enhanced security settings	COMMENT
MEDIUM	src/common/db/Database.py	3375	# Define the join operation	COMMENT
MEDIUM	src/common/db/Database.py	3378	# Define the select statement	COMMENT
MEDIUM	src/common/db/Database.py	3481	# Define the join operation	COMMENT
MEDIUM	src/common/db/Database.py	3485	# Define the select statement	COMMENT
MEDIUM⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	38	# Create the new 'bw_cli_commands' table	COMMENT
MEDIUM	…versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py	153	# Create a new table with the updated custom_configs schema	COMMENT
MEDIUM	…versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py	205	# Create a new bw_settings table with updated schema (only 'id' as PK and 'name' as unique)	STRING
MEDIUM	…versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py	272	# Create a temporary new table	STRING
MEDIUM	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	31	# Create the new bw_services table with updated schema	COMMENT
MEDIUM	src/linux/scripts/bunkerweb-ui.sh	43	# Create the ui.env file if it doesn't exist	COMMENT
MEDIUM	src/linux/scripts/bunkerweb-scheduler.sh	38	# Create the scheduler.env file if it doesn't exist	COMMENT
MEDIUM	src/api/entrypoint.sh	7	# Define a function to handle SIGTERM and SIGINT signals.	COMMENT
MEDIUM	…a-native/proofs/hol_light/x86_64/proofs/build-proof.sh	12	# This file is derived from s2n-bignum's tools/build-proof.sh	COMMENT
MEDIUM	…/mbedtls/tf-psa-crypto/framework/scripts/code_style.py	95	# Create an environment without these variables for running commands on the	COMMENT
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/all-helpers.sh	6	# This file contains helpers for test components that are executed by all.sh.	COMMENT
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/all-helpers.sh	9	# This file is the right place for helpers:	COMMENT
MEDIUM	…/tf-psa-crypto/framework/scripts/generate_test_code.py	1114	# Create a placeholder pattern with the correct named capture groups	STRING
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/demo_common.sh	125	# This function is commonly called in an if condition, where "set -e"	COMMENT
MEDIUM	…mbedtls/tf-psa-crypto/framework/scripts/demo_common.sh	176	# Create a seedfile that's sufficiently long in all library configurations.	COMMENT
MEDIUM	…pto/framework/scripts/mbedtls_framework/test_driver.py	164	# Create the test driver tree	COMMENT
MEDIUM	…framework/scripts/mbedtls_framework/generated_files.py	126	# This file is optional and didn't exist before, so	COMMENT
MEDIUM	…ework/scripts/mbedtls_framework/c_wrapper_generator.py	60	# This class is designed to have many methods potentially overloaded.	COMMENT
MEDIUM	…s/src/mbedtls/tf-psa-crypto/include/psa/crypto_extra.h	1507	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	958	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	1225	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	1510	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	1570	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	1919	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	1982	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	2437	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h	2507	* -# Initialize the operation object with one of the methods described in the	COMMENT
MEDIUM	…tf-psa-crypto/tests/scripts/components-basic-checks.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…pto/tests/scripts/components-configuration-platform.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…tf-psa-crypto/tests/scripts/components-build-system.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…s/tf-psa-crypto/tests/scripts/components-sanitizers.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…tls/tf-psa-crypto/tests/scripts/components-platform.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…ls/tf-psa-crypto/tests/scripts/generate_test_driver.py	111	#Create the test driver tree from `drivers/builtin`	COMMENT
MEDIUM	…s/tf-psa-crypto/tests/scripts/components-compliance.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-tuning.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…f-psa-crypto/tests/scripts/components-configuration.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…rypto/tests/scripts/components-configuration-crypto.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	…tls/tf-psa-crypto/tests/scripts/components-compiler.sh	6	# This file contains test components that are executed by all.sh	COMMENT
MEDIUM	src/deps/src/mbedtls/tf-psa-crypto/tests/scripts/all.sh	8	# This file is executable; it is the entry point for users and the CI.	COMMENT
MEDIUM	src/deps/src/zlib/os400/make.sh	164	# Create the OS/400 library if it does not exist.	COMMENT
MEDIUM	src/deps/src/zlib/os400/make.sh	172	# Create the DOCS source file if it does not exist.	COMMENT
MEDIUM	src/deps/src/zlib/os400/make.sh	195	# Create the OS/400 source program file for the C header files.	COMMENT
MEDIUM	src/deps/src/zlib/os400/make.sh	206	# Create the IFS directory for the C header files.	COMMENT

Cross-File Repetition27 hits · 135 pts

Severity	File	Snippet	Context
HIGH	…versions/839424d81cf7_upgrade_to_version_1_6_0_beta.py	update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null	STRING
HIGH	…versions/bfa7869e34c3_upgrade_to_version_1_6_0_beta.py	update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null	STRING
HIGH	…versions/0b08c406d820_upgrade_to_version_1_6_0_beta.py	update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null	STRING
HIGH	…ysql_versions/021e3123e517_upgrade_to_version_1_5_6.py	update bw_plugins set external = true where type = 'external'	STRING
HIGH	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	update bw_plugins set external = true where type = 'external'	STRING
HIGH	…iadb_versions/18e9d2191dcc_upgrade_to_version_1_5_6.py	update bw_plugins set external = true where type = 'external'	STRING
HIGH	…esql_versions/b4abd1acf9f1_upgrade_to_version_1_5_6.py	update bw_plugins set external = true where type = 'external'	STRING
HIGH	…ysql_versions/021e3123e517_upgrade_to_version_1_5_6.py	update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha	STRING
HIGH	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha	STRING
HIGH	…iadb_versions/18e9d2191dcc_upgrade_to_version_1_5_6.py	update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha	STRING
HIGH	…esql_versions/b4abd1acf9f1_upgrade_to_version_1_5_6.py	update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha	STRING
HIGH	…ysql_versions/edcde398c829_upgrade_to_version_1_5_1.py	update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false,	STRING
HIGH	…lite_versions/6599b34870d1_upgrade_to_version_1_5_1.py	update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false,	STRING
HIGH	…iadb_versions/cc61497f1976_upgrade_to_version_1_5_1.py	update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false,	STRING
HIGH	…esql_versions/3133d7320b63_upgrade_to_version_1_5_1.py	update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false,	STRING
HIGH	…versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py	insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name	STRING
HIGH	…_versions/5b0ea031ccfc_upgrade_to_version_1_6_0_rc1.py	insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name	STRING
HIGH	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name	STRING
HIGH	…ramework/scripts/mbedtls_framework/min_requirements.py	install all the required python packages, with the minimum python version.	STRING
HIGH	…/src/mbedtls/tf-psa-crypto/scripts/min_requirements.py	install all the required python packages, with the minimum python version.	STRING
HIGH	src/deps/src/mbedtls/scripts/min_requirements.py	install all the required python packages, with the minimum python version.	STRING
HIGH	src/deps/src/lua-resty-openssl/scripts/type_x509_req.py	-- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi	STRING
HIGH	src/deps/src/lua-resty-openssl/scripts/type_x509.py	-- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi	STRING
HIGH	src/deps/src/lua-resty-openssl/scripts/type_x509_crl.py	-- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi	STRING
HIGH	src/deps/src/libinjection/misc/sqliserver.py	returns the value of token, handling opening and closing quote characters	STRING
HIGH	src/deps/src/libinjection/python/test_driver.py	returns the value of token, handling opening and closing quote characters	STRING
HIGH	src/deps/src/libinjection/python/apitest.py	returns the value of token, handling opening and closing quote characters	STRING

Slop Phrases68 hits · 124 pts

Severity	File	Line	Snippet	Context
LOW	examples/php-singlesite/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-singlesite/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-singlesite/docker-compose.yml	48	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-singlesite/docker-compose.yml	48	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/autoconf.yml	6	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/autoconf.yml	6	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/autoconf.yml	9	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/autoconf.yml	9	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/autoconf.yml	23	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/autoconf.yml	23	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/autoconf.yml	26	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/autoconf.yml	26	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	16	- ./www:/var/www/html # contains web files (PHP, assets, ...), don't forget to rename the subfolders	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	16	- ./www:/var/www/html # contains web files (PHP, assets, ...), don't forget to rename the subfolders	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	53	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	53	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	56	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	56	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	64	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	64	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/php-multisite/docker-compose.yml	67	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/php-multisite/docker-compose.yml	67	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
MEDIUM	examples/bigbluebutton/docker-compose.yml	9	# after generating your bigbluebutton docker-compose.yml file, you can modify the following to add bunkerweb to it	COMMENT
MEDIUM	examples/passbolt/docker-compose.yml	49	#Alternatively you can use rootless:	COMMENT
LOW⚡	examples/cors/autoconf.yml	10	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	10	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	13	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/cors/autoconf.yml	13	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/cors/autoconf.yml	29	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	29	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	32	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/cors/autoconf.yml	32	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/cors/autoconf.yml	46	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	46	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/autoconf.yml	49	- ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it)	CODE
LOW⚡	examples/cors/autoconf.yml	49	- ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it)	CODE
LOW	examples/cors/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/cors/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	57	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	57	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	60	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/cors/docker-compose.yml	60	- ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it)	CODE
LOW⚡	examples/cors/docker-compose.yml	68	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	68	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	71	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/cors/docker-compose.yml	71	- ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it)	CODE
LOW⚡	examples/cors/docker-compose.yml	79	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	79	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW⚡	examples/cors/docker-compose.yml	82	- ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it)	CODE
LOW⚡	examples/cors/docker-compose.yml	82	- ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it)	CODE
LOW	examples/php-cookie-flags/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-cookie-flags/docker-compose.yml	11	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-cookie-flags/docker-compose.yml	50	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	examples/php-cookie-flags/docker-compose.yml	50	# don't forget to edit the permissions of the files and folders accordingly	COMMENT
LOW	.github/ISSUE_TEMPLATE/bug_report.yml	56	⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️	CODE
LOW	.github/ISSUE_TEMPLATE/bug_report.yml	65	⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️	CODE
LOW	src/ui/app/static/libs/apexcharts/apexcharts.min.js	5	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define	CODE
LOW	…n/core/modsecurity/files/coreruleset-v3/util/verify.rb	64	# then make sure to split the quoting out of the quoted strings	COMMENT
8 more matches not shown…

Structural Annotation Overuse60 hits · 92 pts

Severity	File	Line	Snippet	Context
LOW	docs/integrations.md	3297	##### Step 1: Scheduler Configuration	COMMENT
LOW	docs/integrations.md	3322	##### Step 2: Creating the Deployment with Sidecar	COMMENT
LOW	docs/integrations.md	3435	##### Step 3: Creating Services	COMMENT
LOW	docs/integrations.md	3483	##### Step 4: Reverse Proxy Configuration	COMMENT
LOW	docs/integrations.md	3519	##### Step 5: Deployment	COMMENT
LOW	docs/integrations.md	5315	#### Step 1: build builder image	COMMENT
LOW	docs/integrations.md	5323	#### Step 2: build package	COMMENT
LOW	docs/zh/integrations.md	3170	##### Step 1: Scheduler Configuration	COMMENT
LOW	docs/zh/integrations.md	3195	##### Step 2: Creating the Deployment with Sidecar	COMMENT
LOW	docs/zh/integrations.md	3309	##### Step 3: Creating Services	COMMENT
LOW	docs/zh/integrations.md	3357	##### Step 4: Reverse Proxy Configuration	COMMENT
LOW	docs/zh/integrations.md	3393	##### Step 5: Deployment	COMMENT
LOW	docs/de/integrations.md	3173	##### Step 1: Scheduler Configuration	COMMENT
LOW	docs/de/integrations.md	3198	##### Step 2: Creating the Deployment with Sidecar	COMMENT
LOW	docs/de/integrations.md	3312	##### Step 3: Creating Services	COMMENT
LOW	docs/de/integrations.md	3360	##### Step 4: Reverse Proxy Configuration	COMMENT
LOW	docs/de/integrations.md	3396	##### Step 5: Deployment	COMMENT
LOW	docs/es/integrations.md	3174	##### Step 1: Scheduler Configuration	COMMENT
LOW	docs/es/integrations.md	3199	##### Step 2: Creating the Deployment with Sidecar	COMMENT
LOW	docs/es/integrations.md	3313	##### Step 3: Creating Services	COMMENT
LOW	docs/es/integrations.md	3361	##### Step 4: Reverse Proxy Configuration	COMMENT
LOW	docs/es/integrations.md	3397	##### Step 5: Deployment	COMMENT
LOW⚡	src/common/core/letsencrypt/ui/hooks.py	57	# Step 1: metadata-only fetch to check if we can short-circuit via checksum.	COMMENT
LOW⚡	src/common/core/letsencrypt/ui/hooks.py	71	# Step 2: tar blob fetch + in-memory walk.	COMMENT
LOW	…QUEST-932-APPLICATION-ATTACK-RCE/unix-shell-fps-pl1.sh	3	# WARNING: This script is too overzealous in disabling commands and disables commands that are highly unlike to cause fa	COMMENT
LOW	…oreruleset-v3/util/regexp-tricks/negative-lookahead.py	3	# WARNING: This script is EXPERIMENTAL. Use with caution.	COMMENT
LOW	…ysql_versions/41d395e48cfd_upgrade_to_version_1_5_0.py	23	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	22	# Step 1: Add 'order' column as nullable with a default	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	26	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	29	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	45	# Step 1: Add the new 'type' column with default 'external'	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	48	# Step 2: Migrate data: Set 'type' to 'external' where 'external' was true	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	55	# Step 3: Drop the 'external' column and alter the 'stream' column to STREAM_TYPES_ENUM	STRING
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	22	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	31	# Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint)	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	35	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	38	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW	…iadb_versions/b46c7ecfba26_upgrade_to_version_1_5_0.py	23	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	29	# Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint)	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	33	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	36	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	159	# Step 1: Add column as nullable	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	162	# Step 2: Populate default values	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	173	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	176	# Step 4: Add unique constraint	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	180	# Step 1: Add column as nullable	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	183	# Step 2: Populate default values	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	194	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	197	# Step 4: Add unique constraint	STRING
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	23	# Step 1: Add column as nullable	COMMENT
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	26	# Step 2: Populate default values	COMMENT
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	37	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	40	# Step 4: Add unique constraint	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	55	# Step 1: Add column as nullable	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	58	# Step 2: Populate default values	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	61	# Step 3: Alter column to NOT NULL	STRING
LOW	…/src/brotli/scripts/dictionary/step-01-download-rfc.py	1	# Step 01 - download RFC7932.	COMMENT
LOW	…i/scripts/dictionary/step-04-generate-java-literals.py	1	# Step 04 - generate Java literals.	COMMENT
LOW	…ps/src/brotli/scripts/dictionary/step-02-rfc-to-bin.py	1	# Step 02 - parse RFC.	COMMENT
LOW	…/src/brotli/scripts/dictionary/step-03-validate-bin.py	1	# Step 03 - validate raw dictionary file.	COMMENT

Cross-Language Confusion12 hits · 60 pts

Severity	File	Line	Snippet	Context
HIGH	tests/Upgrade.py	61	apt update && apt install -y sudo && \	CODE
HIGH	tests/Upgrade.py	423	apt update && apt install -y sudo && \	CODE
HIGH	tests/Upgrade.py	430	sudo apt update && sudo apt install -y nginx=1.30.6-1~jammy	CODE
HIGH	tests/Upgrade.py	592	apt update && apt install -y sudo && \	CODE
HIGH	tests/Upgrade.py	943	apt update && apt install -y sudo && \	CODE
HIGH	tests/Upgrade.py	950	sudo apt update && sudo apt install -y nginx=1.30.6-1~bookworm	CODE
HIGH	tests/LinuxTest.py	133	f"cd /opt/{self._name} && ./setup-linux.sh && chown -R nginx:nginx /etc/bunkerweb/configs",	CODE
HIGH	…-psa-crypto/framework/scripts/generate_bignum_tests.py	107	return "0 (null)"	CODE
HIGH	…-psa-crypto/framework/scripts/generate_bignum_tests.py	109	return "negative 0 (null)"	CODE
HIGH	…deps/src/lua-resty-openssl/scripts/find_unused_cdef.py	96	def display(unused, undefined):	CODE
HIGH	src/deps/src/libinjection/python/speedtest.py	25	"1 \|\| COS(+0X04) --FOOBAR",	CODE
HIGH	src/deps/src/libinjection/php/json2php.py	19	if ($keyword == $fingerprints && libinjection.sqli_not_whitelist($state)) {	CODE

Verbosity Indicators33 hits · 51 pts

Severity	File	Line	Snippet	Context
LOW⚡	src/common/core/letsencrypt/ui/hooks.py	57	# Step 1: metadata-only fetch to check if we can short-circuit via checksum.	COMMENT
LOW⚡	src/common/core/letsencrypt/ui/hooks.py	71	# Step 2: tar blob fetch + in-memory walk.	COMMENT
LOW	…ysql_versions/41d395e48cfd_upgrade_to_version_1_5_0.py	23	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	22	# Step 1: Add 'order' column as nullable with a default	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	26	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py	29	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	45	# Step 1: Add the new 'type' column with default 'external'	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	48	# Step 2: Migrate data: Set 'type' to 'external' where 'external' was true	COMMENT
LOW⚡	…lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py	55	# Step 3: Drop the 'external' column and alter the 'stream' column to STREAM_TYPES_ENUM	STRING
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	22	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	31	# Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint)	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	35	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py	38	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW	…iadb_versions/b46c7ecfba26_upgrade_to_version_1_5_0.py	23	# Step 1: Drop 'order' column from 'bw_plugins'	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	29	# Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint)	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	33	# Step 2: Set default value for existing rows	COMMENT
LOW⚡	…esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py	36	# Step 3: Alter 'order' column to NOT NULL	COMMENT
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	159	# Step 1: Add column as nullable	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	162	# Step 2: Populate default values	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	173	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	176	# Step 4: Add unique constraint	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	180	# Step 1: Add column as nullable	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	183	# Step 2: Populate default values	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	194	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py	197	# Step 4: Add unique constraint	STRING
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	23	# Step 1: Add column as nullable	COMMENT
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	26	# Step 2: Populate default values	COMMENT
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	37	# Step 3: Alter column to NOT NULL	STRING
LOW⚡	…_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py	40	# Step 4: Add unique constraint	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	55	# Step 1: Add column as nullable	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	58	# Step 2: Populate default values	STRING
LOW⚡	…esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py	61	# Step 3: Alter column to NOT NULL	STRING
LOW	…crypto/framework/tests/include/test/psa_exercise_key.h	177	* The result is discarded. The purpose of this function is to smoke-test a key.	COMMENT

Hallucination Indicators4 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	src/ui/app/static/libs/datatables/datatables.min.js	121	!function(e){var n,s;"function"==typeof define&&define.amd?define(["jquery","datatables.net"],function(t){return e(t,win	CODE
CRITICAL⚡	src/ui/app/static/libs/datatables/datatables.min.js	131	!function(e){var a,i;"function"==typeof define&&define.amd?define(["jquery","datatables.net"],function(t){return e(t,win	CODE
CRITICAL	src/ui/app/static/libs/apexcharts/apexcharts.min.js	5	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define	CODE
CRITICAL	src/deps/src/brotli/csharp/org/brotli/dec/Dictionary.cs	61	string[] chunks = new string[] { Org.Brotli.Dec.Dictionary.DataHolder0.GetData(), Org.Brotli.Dec.Dictionary.DataHold	CODE

Empty Error Handlers9 hits · 45 pts

Severity	File	Line	Snippet	Context
HIGH	src/deps/src/brotli/research/brotlidump.py	2365	except ImportError: pass	CODE
HIGH	src/deps/src/brotli/python/tests/_test_utils.py	141	except OSError:	CODE
HIGH	src/deps/src/brotli/python/tests/_test_utils.py	145	except OSError:	CODE
HIGH	…ls/tf-psa-crypto/framework/psasim/tools/psa_autogen.py	143	except UnicodeDecodeError:	CODE
HIGH	…mbedtls/tf-psa-crypto/framework/scripts/check_files.py	23	except ImportError:	CODE
HIGH	…/framework/scripts/mbedtls_framework/psa_compliance.py	73	except FileNotFoundError:	CODE
HIGH	…/framework/scripts/mbedtls_framework/c_build_helper.py	28	except OSError:	CODE
HIGH	…pto/framework/scripts/mbedtls_framework/bignum_data.py	13	except ImportError:	CODE
HIGH	src/deps/src/libinjection/misc/nullserver.py	41	except ValueError:	CODE

AI Slop Vocabulary14 hits · 36 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/scripts/release_integration.py	95	# Each harness adds distribution dependencies around an already-built package.	COMMENT
MEDIUM	src/ui/app/static/js/pages/bans.js	1746	// Use ipaddr.js for robust IP validation	COMMENT
MEDIUM	src/api/app/routers/global_settings.py	43	# Be robust to unexpected values	COMMENT
MEDIUM	…bedtls/tf-psa-crypto/drivers/pqcp/mldsa-native/META.sh	24	# More robust extraction using yq	COMMENT
MEDIUM	…o/drivers/pqcp/mldsa-native/proofs/cbmc/list_proofs.sh	6	# which are those containing a *harness.c file.	COMMENT
LOW	…f-psa-crypto/framework/scripts/generate_pkcs7_tests.py	99	# off the bat just add bytes to start and end of the buffer	COMMENT
LOW	…s/tf-psa-crypto/framework/scripts/project_detection.sh	21	# - 0: simply return an error	COMMENT
MEDIUM	…o/framework/scripts/mbedtls_framework/psa_test_case.py	196	# the output robust with respect to refactoring of the scripts.	COMMENT
MEDIUM	…framework/scripts/mbedtls_framework/macro_collector.py	258	# something more robust.	COMMENT
MEDIUM	…o/framework/scripts/mbedtls_framework/bignum_common.py	143	# provides earlier/more robust input validation.	COMMENT
MEDIUM	…o/framework/scripts/mbedtls_framework/bignum_common.py	308	# provides earlier/more robust input validation.	COMMENT
MEDIUM	src/deps/src/libmaxminddb/lychee.toml	48	# Vendored submodules and test harness/fixtures	COMMENT
MEDIUM	src/deps/src/modsecurity/doc/doxygen.cfg	1136	# it is more robust and this tag (HTML_STYLESHEET) will in the future become	COMMENT
MEDIUM	src/deps/src/modsecurity/doc/doxygen.cfg	1146	# standard style sheet and is therefor more robust against future updates.	COMMENT

AI Response Leakage4 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	…mbedtls/tf-psa-crypto/framework/scripts/quiet/quiet.sh	22	# be silenced, e.g. " --version \| test ". In this example, "make lib test" will	COMMENT
HIGH	src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs	263	/// <remarks>In this implementation, this method does nothing. This is because excessive	COMMENT
HIGH	src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs	273	/// <remarks>In this implementation this property is not supported</remarks>	COMMENT
HIGH	src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs	290	/// <remarks>In this implementation this property is not supported</remarks>	COMMENT

Modern Structural Boilerplate16 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW⚡	src/ui/app/models/instance.py	1257	def _set_shared_home_aggregates(self, redis_client, cache_key: tuple, result: dict) -> None:	CODE
LOW	src/common/core/misc/jobs/download-plugins.py	45	def _set_plugin_permissions(plugin_path: Path) -> None:	CODE
LOW	src/common/core/pro/jobs/download-pro-plugins.py	44	def _set_plugin_permissions(plugin_path: Path) -> None:	CODE
LOW	…o/framework/scripts/mbedtls_framework/config_macros.py	128	def update_shadow_file(self, always_update: bool) -> None:	CODE
LOW	…/framework/scripts/mbedtls_framework/bignum_mod_raw.py	132	def set_representation(self, r: bignum_common.ModulusRepresentation) -> None:	CODE
LOW	…pto/framework/scripts/mbedtls_framework/psa_storage.py	41	def update_cache(self) -> None:	CODE
LOW⚡	…rypto/framework/scripts/mbedtls_framework/test_case.py	65	def set_description(self, description: str) -> None:	CODE
LOW⚡	…rypto/framework/scripts/mbedtls_framework/test_case.py	71	def set_dependencies(self, dependencies: List[str]) -> None:	CODE
LOW⚡	…rypto/framework/scripts/mbedtls_framework/test_case.py	74	def set_function(self, function: str) -> None:	CODE
LOW⚡	…rypto/framework/scripts/mbedtls_framework/test_case.py	77	def set_arguments(self, arguments: List[str]) -> None:	CODE
LOW	…o/framework/scripts/mbedtls_framework/psa_test_case.py	90	def set_key_bits(self, key_bits: Optional[int]) -> None:	CODE
LOW	…o/framework/scripts/mbedtls_framework/psa_test_case.py	100	def set_key_pair_usage(self, key_pair_usage: Optional[List[str]]) -> None:	CODE
LOW	…o/framework/scripts/mbedtls_framework/psa_test_case.py	170	def set_arguments(self, arguments: List[str]) -> None:	CODE
LOW	…o/framework/scripts/mbedtls_framework/psa_test_case.py	180	def set_dependencies(self, dependencies: List[str]) -> None:	CODE
LOW	…ework/scripts/mbedtls_framework/c_wrapper_generator.py	403	def set_stream(self, stream: str) -> None:	STRING
LOW	src/deps/src/mbedtls/scripts/code_size_compare.py	512	def _set_size_record(self, git_rev: str, mod: str, size_text: str) -> None:	CODE

Modern AI Meta-Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	misc/install-bunkerweb.sh	1371	# Docker install mode — compose/.env rendering, stack lifecycle, orchestration.	COMMENT
MEDIUM	misc/install-bunkerweb.sh	8803	# Non-interactive guardrails — silent installs must not end up unusable.	COMMENT
MEDIUM	misc/nginx2bw.sh	8	# Semi-automated Nginx -> BunkerWeb migration scaffold.	COMMENT
MEDIUM	src/common/db/Database.py	2183	# so they can be re-published when the orchestration object returns.	COMMENT
MEDIUM	src/common/db/Database.py	2312	# survive and the service can be republished by bringing the orchestration object	COMMENT

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	misc/update-dockerfile-digests.sh	11	# Usage:	COMMENT
LOW	…files/coreruleset-v3/util/join-multiline-rules/join.py	10	# Usage:	COMMENT
LOW	…rypto/tests/scripts/components-configuration-tuning.sh	12	## Usage:	COMMENT
LOW	src/deps/src/zlib/contrib/minizip/skipset.h	20	// Example usage:	COMMENT

Dead Code3 hits · 6 pts

Severity	File	Line	Context
MEDIUM	src/ui/app/models/instance.py	163	CODE
MEDIUM	src/ui/app/models/instance.py	168	CODE
MEDIUM	src/ui/app/models/instance.py	170	CODE

AI Structural Patterns7 hits · 6 pts

Severity	File	Line	Context
LOW	src/ui/app/models/instance.py	781	CODE
LOW	src/ui/app/models/ui_database.py	86	CODE
LOW	…les/coreruleset-v4/util/crs-rules-check/rules-check.py	846	CODE
LOW	src/common/utils/common_utils.py	804	CODE
LOW	src/common/db/Database.py	1892	CODE
LOW	src/common/db/Database.py	3350	CODE
LOW	…/tf-psa-crypto/framework/scripts/generate_test_code.py	767	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	src/ui/app/static/locales/README.md	3	This directory contains translation files for the BunkerWeb UI. Below is a summary of which files were created manually	CODE

Docstring Block Structure1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	src/deps/src/brotli/python/brotli.py	26	Compress a byte string. Args: string (bytes): The input data. mode (int, optional): The compression mod	STRING

bunkerity/bunkerweb

Open-Source Code Quality, Security and Technical Debt Review