2.5

Adjusted Signal

2.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

4.3K

Stars

Java

Language

3.6M

Lines of Code

24.7K

Files

3.0K

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2125 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.7/100 · LOW

Are imports declared and package/API names verified? 485 finding(s).

Agent Over-Engineering Ratio 3.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1253 finding(s).

PR Review Velocity Impact 11.2/100 · LOW

Which changes need focused human review? 3041 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 298HIGH 180MEDIUM 899LOW 1664

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3041 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators298 hits · 3220 pts

Severity	File	Line	Snippet	Context
CRITICAL	…va/io/camunda/client/OAuthCredentialsProviderTest.java	1384	java.time.format.DateTimeFormatter.RFC_1123_DATE_TIME.format(	CODE
CRITICAL	…va/io/camunda/client/OAuthCredentialsProviderTest.java	1487	io.camunda.client.impl.util.Environment.system();	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	62	io.camunda.client.protocol.rest.OwnerTypeEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	89	io.camunda.client.protocol.rest.PermissionTypeEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	118	io.camunda.client.protocol.rest.ProcessInstanceStateEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	147	io.camunda.client.protocol.rest.ResourceTypeEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	178	io.camunda.client.protocol.rest.ElementInstanceResult.TypeEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	210	io.camunda.client.protocol.rest.ElementInstanceFilter.TypeEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	240	io.camunda.client.protocol.rest.ElementInstanceStateEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	318	io.camunda.client.protocol.rest.IncidentStateEnum.values()) {	CODE
CRITICAL	…est/java/io/camunda/client/impl/util/EnumUtilTest.java	347	io.camunda.client.protocol.rest.IncidentErrorTypeEnum.values()) {	CODE
CRITICAL	…/java/io/camunda/client/impl/http/ApiCallbackTest.java	224	org.assertj.core.api.Assertions.catchThrowable(response::get).getCause();	CODE
CRITICAL	…a/io/camunda/client/impl/worker/JobPollerImplTest.java	68	new org.apache.logging.log4j.core.config.LoggerConfig(	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	169	new io.camunda.client.protocol.rest.JobWaitStateDetails();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	178	new io.camunda.client.protocol.rest.ElementInstanceWaitStateResult();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	219	new io.camunda.client.protocol.rest.JobWaitStateDetails();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	228	new io.camunda.client.protocol.rest.ElementInstanceWaitStateResult();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	258	new io.camunda.client.protocol.rest.MessageWaitStateDetails();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	264	new io.camunda.client.protocol.rest.ElementInstanceWaitStateResult();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	294	new io.camunda.client.protocol.rest.UserTaskWaitStateDetails();	CODE
CRITICAL	…ancewaitstate/SearchElementInstanceWaitStatesTest.java	299	new io.camunda.client.protocol.rest.ElementInstanceWaitStateResult();	CODE
CRITICAL	…ava/io/camunda/client/job/GlobalJobStatisticsTest.java	140	return java.net.URLEncoder.encode(value, java.nio.charset.StandardCharsets.UTF_8.name());	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	408	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	448	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	489	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	530	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	572	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL	…va/io/camunda/client/job/rest/CompleteJobRestTest.java	605	new io.camunda.client.protocol.rest.JobResultCorrections()	CODE
CRITICAL⚡	…ient/agentinstance/CreateAgentInstanceCommandTest.java	329	new io.camunda.client.protocol.rest.AgentInstanceCreatedHistoryItem()	CODE
CRITICAL⚡	…ient/agentinstance/CreateAgentInstanceCommandTest.java	333	new io.camunda.client.protocol.rest.AgentInstanceCreatedHistoryItem()	CODE
CRITICAL	…munda/client/resource/rest/DeleteResourceRestTest.java	35	new io.camunda.client.protocol.rest.DeleteResourceResponse().resourceKey("123");	CODE
CRITICAL	…munda/client/resource/rest/DeleteResourceRestTest.java	39	new io.camunda.client.protocol.rest.DeleteResourceResponse()	CODE
CRITICAL	…munda/client/process/rest/ResolveIncidentRestTest.java	63	org.assertj.core.api.Assertions.assertThat(r.getOperationReference())	CODE
CRITICAL	…/statistics/request/JobErrorStatisticsRequestImpl.java	64	new io.camunda.client.protocol.rest.JobErrorStatisticsFilter()	CODE
CRITICAL	…l/statistics/request/JobTypeStatisticsRequestImpl.java	64	request.setFilter(new io.camunda.client.protocol.rest.JobTypeStatisticsFilter());	CODE
CRITICAL	…tics/filter/ProcessDefinitionStatisticsFilterImpl.java	52	filter = new io.camunda.client.protocol.rest.ProcessDefinitionStatisticsFilter();	CODE
CRITICAL	…ntProcessInstanceStatisticsByDefinitionFilterImpl.java	32	new io.camunda.client.protocol.rest.IncidentProcessInstanceStatisticsByDefinitionFilter();	CODE
CRITICAL	…pl/statistics/filter/JobErrorStatisticsFilterImpl.java	32	filter = new io.camunda.client.protocol.rest.JobErrorStatisticsFilter();	CODE
CRITICAL	…cessDefinitionInstanceVersionStatisticsFilterImpl.java	31	filter = new io.camunda.client.protocol.rest.ProcessDefinitionInstanceVersionStatisticsFilter();	CODE
CRITICAL	…mpl/statistics/filter/JobTypeStatisticsFilterImpl.java	32	filter = new io.camunda.client.protocol.rest.JobTypeStatisticsFilter();	CODE
CRITICAL	…earch/request/BatchOperationItemSearchRequestImpl.java	52	request = new io.camunda.client.protocol.rest.BatchOperationItemSearchQuery();	CODE
CRITICAL	…/search/request/DecisionInstanceSearchRequestImpl.java	52	request = new io.camunda.client.protocol.rest.DecisionInstanceSearchQuery();	CODE
CRITICAL	…earch/request/DecisionDefinitionSearchRequestImpl.java	52	request = new io.camunda.client.protocol.rest.DecisionDefinitionSearchQuery();	CODE
CRITICAL	…pl/search/request/BatchOperationSearchRequestImpl.java	51	request = new io.camunda.client.protocol.rest.BatchOperationSearchQuery();	CODE
CRITICAL	…camunda/client/impl/search/filter/GroupFilterImpl.java	35	filter = new io.camunda.client.protocol.rest.GroupFilter();	CODE
CRITICAL	…amunda/client/impl/search/filter/TenantFilterImpl.java	28	filter = new io.camunda.client.protocol.rest.TenantFilter();	CODE
CRITICAL	…/camunda/client/impl/search/filter/UserFilterImpl.java	35	filter = new io.camunda.client.protocol.rest.UserFilter();	CODE
CRITICAL	…ch/filter/CorrelatedMessageSubscriptionFilterImpl.java	39	filter = new io.camunda.client.protocol.rest.CorrelatedMessageSubscriptionFilter();	CODE
CRITICAL	…/impl/search/filter/MessageSubscriptionFilterImpl.java	45	filter = new io.camunda.client.protocol.rest.MessageSubscriptionFilter();	CODE
CRITICAL	…a/client/impl/search/filter/MappingRuleFilterImpl.java	35	filter = new io.camunda.client.protocol.rest.MappingRuleFilter();	CODE
CRITICAL	…unda/client/impl/search/filter/AuditLogFilterImpl.java	54	filter = new io.camunda.client.protocol.rest.AuditLogFilter();	CODE
CRITICAL	…ent/impl/search/filter/DecisionInstanceFilterImpl.java	45	filter = new io.camunda.client.protocol.rest.DecisionInstanceFilter();	CODE
CRITICAL	…ent/impl/search/filter/UserTaskAuditLogFilterImpl.java	44	filter = new io.camunda.client.protocol.rest.UserTaskAuditLogFilter();	CODE
CRITICAL	…unda/client/impl/search/filter/UserTaskFilterImpl.java	51	filter = new io.camunda.client.protocol.rest.UserTaskFilter();	CODE
CRITICAL	…impl/search/filter/DecisionRequirementsFilterImpl.java	30	filter = new io.camunda.client.protocol.rest.DecisionRequirementsFilter();	CODE
CRITICAL	…unda/client/impl/search/filter/VariableFilterImpl.java	33	filter = new io.camunda.client.protocol.rest.VariableFilter();	CODE
CRITICAL	…ent/impl/search/filter/UserTaskVariableFilterImpl.java	32	filter = new io.camunda.client.protocol.rest.UserTaskVariableFilter();	CODE
CRITICAL	…ient/impl/search/filter/ProcessInstanceFilterImpl.java	55	filter = new io.camunda.client.protocol.rest.ProcessInstanceFilter();	CODE
CRITICAL	…/camunda/client/impl/search/filter/RoleFilterImpl.java	35	filter = new io.camunda.client.protocol.rest.RoleFilter();	CODE
CRITICAL	…o/camunda/client/impl/search/filter/JobFilterImpl.java	47	filter = new io.camunda.client.protocol.rest.JobFilter();	CODE
238 more matches not shown…

Modern AI Meta-Vocabulary605 hits · 1882 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	1	# Camunda 8 orchestrates complex business processes that span people, systems, and devices	COMMENT
MEDIUM	…ptimize-commons/src/main/resources/service-config.yaml	595	# Matches the orchestration cluster's equivalent limit for name fields. Note that a name well below	COMMENT
MEDIUM	…vice/dashboard/AgenticControlDashboardServiceTest.java	411	// flagged as agentic control report	COMMENT
MEDIUM	…e/db/report/plan/process/ProcessExecutionPlanTest.java	23	// then the agentic top consumers plan opts into server-side top-N limiting	COMMENT
MEDIUM	…unda/optimize/rest/mapper/DashboardRestMapperTest.java	34	// given an agentic control dashboard whose name is a localization code	COMMENT
MEDIUM	…unda/optimize/rest/mapper/DashboardRestMapperTest.java	47	// then the name is resolved via the agentic control category, not the management one	COMMENT
MEDIUM	…imize/service/dashboard/AgenticDurationKpiTilesIT.java	62	// given the agentic reports were seeded by the reconcile above	COMMENT
MEDIUM	…imize/service/dashboard/AgenticDurationKpiTilesIT.java	338	// given — one matching agentic+completed instance, plus one without agent instances	COMMENT
MEDIUM	…imize/service/dashboard/AgenticDurationKpiTilesIT.java	350	// then — only 1 data point in each measure (the agentic instance)	COMMENT
MEDIUM	…mize/service/dashboard/AgenticExecutionKpiTilesIT.java	54	// given the agentic reports were seeded by the reconcile above	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	80	// 1 instance with resolved incident / 2 completed agentic instances = 50%	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	101	// 1 instance with resolved incident / 1 completed agentic instance in window = 100%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	118	// only procKeyA selected → 1 instance with incident / 1 completed agentic instance = 100%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	128	// given: 1 completed agentic with incident, 1 completed agentic without,	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	129	// plus 5 running agentic instances (no incidents) — running must not count	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	149	// denominator = 2 completed agentic instances (not 7); numerator = 1 → 50%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	156	// given: 1 completed agentic with incident, 1 completed agentic without,	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	157	// plus 8 completed non-agentic instances — non-agentic must not count	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	171	// denominator = 2 completed agentic instances (not 10); numerator = 1 → 50%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	178	// given: within window — 1 agentic with incident, 1 agentic without	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	179	// outside window — 10 agentic with incidents (must not affect either side)	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	205	// denominator = 2 (in-window completed agentic); numerator = 1 → 50%	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	243	// given version 1: 2 completed agentic instances, 1 with a resolved incident → 50%	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	247	// version 2: 4 completed agentic instances, 1 with a resolved incident → 25%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	268	// given version 1: 1 completed agentic with incident, 1 completed agentic clean → 50%	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	272	// running agentic instances on the same version — must be excluded from the denominator	COMMENT
MEDIUM⚡	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	282	// completed non-agentic instances on the same version — must be excluded from the denominator	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	295	// then denominator = 2 completed agentic instances (not 15); numerator = 1 → 50%	COMMENT
MEDIUM	…ze/service/dashboard/AgenticReliabilityKpiTilesIT.java	403	// given only running agentic and completed non-agentic instances — nothing to group	COMMENT
MEDIUM	…vice/dashboard/BusinessValueAgenticPresenceTileIT.java	42	// given two agentic processes with different token totals, and one plain non-agentic process	COMMENT
MEDIUM	…vice/dashboard/BusinessValueAgenticPresenceTileIT.java	56	// then only the two agentic processes appear — the tile's hasAgentInstances filter drops the	COMMENT
MEDIUM	…mize/service/dashboard/AgenticToolCallsKpiTilesIT.java	48	// given the agentic reports were seeded by the reconcile above	COMMENT
MEDIUM⚡	…mize/service/dashboard/AgenticToolCallsKpiTilesIT.java	59	// given completed agentic instances with known tool-call totals across two processes	COMMENT
MEDIUM⚡	…mize/service/dashboard/AgenticToolCallsKpiTilesIT.java	63	// running agentic — excluded by completedInstancesOnly	COMMENT
MEDIUM⚡	…mize/service/dashboard/AgenticToolCallsKpiTilesIT.java	70	// completed non-agentic — excluded by hasAgentInstances	COMMENT
MEDIUM	…ize/service/dashboard/AgenticTokenUsageKpiTilesIT.java	377	// given agentic instances of a process whose (BPMN) key is not human-readable	COMMENT
MEDIUM	…ze/service/report/AgenticControlReportEditGuardIT.java	35	// seeds the agentic control dashboard and its system-generated reports	COMMENT
MEDIUM	…ze/service/report/AgenticControlReportEditGuardIT.java	43	// given an agentic control report was seeded by the reconcile above	COMMENT
MEDIUM⚡	…vice/report/AgenticControlReportPickerExclusionIT.java	63	// seeds the agentic control dashboard and its system-generated reports	COMMENT
MEDIUM⚡	…vice/report/AgenticControlReportPickerExclusionIT.java	70	// given the agentic reports were actually persisted by the reconcile above	COMMENT
MEDIUM⚡	…vice/report/AgenticControlReportPickerExclusionIT.java	76	// then none of the agentic control reports leak into the picker	COMMENT
MEDIUM	…io/camunda/optimize/service/util/ValidationHelper.java	151	// system-generated reports (management, instant preview, agentic control) have their	COMMENT
MEDIUM	…/service/dashboard/AgenticControlDashboardService.java	783	// which step of an agentic process is slowest. Like the tool-calls heat map it is only visible	COMMENT
MEDIUM	…ptimize/service/db/report/ReportEvaluationHandler.java	197	// XML in the report configuration. Unlike normal reports, agentic reports are stored with	COMMENT
MEDIUM	…ptimize/service/db/report/ReportEvaluationHandler.java	271	// any all-null list) as "no scope" so unscoped/agentic reports keep all available tenants.	COMMENT
MEDIUM	…eter/plan/process/ProcessExecutionPlanInterpreter.java	40	// For agentic reports the baseline must also be scoped to completed agentic instances so that the	COMMENT
MEDIUM	…ize/service/db/report/plan/process/ProcessGroupBy.java	38	// interpreter that supports server-side top-N limiting (used by the agentic top token consumers	COMMENT
MEDIUM	…s/AgenticProcessDefinitionKeyGroupByInterpreterOS.java	121	// Every report on this path is one Optimize generates for an agentic dashboard, whether or	COMMENT
MEDIUM	…s/AgenticProcessDefinitionKeyGroupByInterpreterES.java	123	// Every report on this path is one Optimize generates for an agentic dashboard, whether or	COMMENT
MEDIUM	…/io/camunda/optimize/service/report/ReportService.java	1132	// Management, instant-preview and agentic control reports are all generated by Optimize and	COMMENT
MEDIUM	optimize/client/src/components/Reports/ReportView.js	94	// System-generated reports (instant preview and agentic control) are read-only: their	COMMENT
MEDIUM	…omponents/ReportRenderer/visualizations/Number.test.js	308	// the third positional argument (shortNotation) is true only for agentic tiles	COMMENT
MEDIUM	identity/README.md	13	See [Running within the Orchestration Cluster](#running-within-the-orchestration-cluster)	CODE
MEDIUM	.ci/preview-environments/charts/c8sm/values.yaml	328	# (orchestration indices are covered by orchestration.index.replicas above).	COMMENT
MEDIUM	…w-environments/charts/c8sm/templates/elasticsearch.yml	11	# `orchestration.data.secondaryStorage.elasticsearch.url` at that name.	COMMENT
MEDIUM	c8run/cmd/c8run/main.go	101	https://docs.camunda.io/docs/next/guides/getting-started-agentic-orchestration/	CODE
MEDIUM	c8run/internal/health/camunda.go	33	agentGuideURL = "https://docs.camunda.io/docs/next/guides/getting-started-agentic-orchestration/"	CODE
MEDIUM	…rocessinstance/migration/MigrateAgentInstanceTest.java	953	// complete the agentic job so "A" completes and the process moves on to "B", orphaning the	COMMENT
MEDIUM	…ne/processing/agenthistory/AgentHistoryCommitTest.java	63	// agentic prefix	COMMENT
MEDIUM	…ne/processing/agenthistory/AgentHistoryCommitTest.java	124	// agentic prefix	COMMENT
545 more matches not shown…

Cross-File Repetition176 hits · 880 pts

Severity	File	Line	Snippet	Context
HIGH	…camunda/optimize/rest/security/csl/JwksTestServer.java	0	{ "issuer": "%s", "authorization_endpoint": "%s/auth", "token_endpoint": "%s/token", "jwks_uri": "%s/jwks", "response_ty	STRING
HIGH	…auth/PhysicalTenantRestOidcUserInfoAugmentationIT.java	0	{ "issuer": "%s", "authorization_endpoint": "%s/auth", "token_endpoint": "%s/token", "jwks_uri": "%s/jwks", "response_ty	STRING
HIGH	…auth/PhysicalTenantGrpcOidcUserInfoAugmentationIT.java	0	{ "issuer": "%s", "authorization_endpoint": "%s/auth", "token_endpoint": "%s/token", "jwks_uri": "%s/jwks", "response_ty	STRING
HIGH	…/java/io/camunda/authentication/pt/JwksTestServer.java	0	{ "issuer": "%s", "authorization_endpoint": "%s/auth", "token_endpoint": "%s/token", "jwks_uri": "%s/jwks", "response_ty	STRING
HIGH	…va/io/camunda/zeebe/dmn/DmnEvaluatedDecisionsTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…nancy/TenantAwareStandaloneDecisionEvaluationTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…sing/multitenancy/TenantAwareBusinessRuleTaskTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…/processing/incident/BusinessRuleTaskIncidentTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…e/processing/dmn/StandaloneDecisionEvaluationTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…ine/processing/bpmn/activity/BusinessRuleTaskTest.java	0	expected to evaluate decision 'force_user', \ but assertion failure on evaluate the expression \ 'assert(lightsabercolor	STRING
HIGH	…teway/rest/controller/JobControllerRoundRobinTest.java	0	{ "type": "test-round-robin", "maxjobstoactivate": 2, "requesttimeout": 100, "timeout": 100, "tenantids": [], "worker":	STRING
HIGH	…a/zeebe/gateway/rest/controller/JobControllerTest.java	0	{ "type": "test-round-robin", "maxjobstoactivate": 2, "requesttimeout": 100, "timeout": 100, "tenantids": [], "worker":	STRING
HIGH	…eway/rest/controller/JobControllerLongPollingTest.java	0	{ "type": "test-round-robin", "maxjobstoactivate": 2, "requesttimeout": 100, "timeout": 100, "tenantids": [], "worker":	STRING
HIGH	…/rest/controller/GlobalTaskListenerControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…ebe/gateway/rest/controller/MessageControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…a/zeebe/gateway/rest/controller/JobControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…way/rest/controller/ClusterVariableControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…teway/rest/controller/IncidentQueryControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…t/controller/ProcessDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…teway/rest/controller/tenant/TenantControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…rest/controller/usermanagement/RoleControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…est/controller/usermanagement/GroupControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…ntroller/usermanagement/MappingRuleControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…rest/controller/usermanagement/UserControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…gateway/rest/controller/setup/SetupControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "no claimvalue provided.", "instance": "%	STRING
HIGH	…est/controller/AgentDefinitionQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…est/controller/ProcessInstanceQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…/controller/DecisionDefinitionQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…ontroller/DecisionRequirementsQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…teway/rest/controller/UserTaskQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…/rest/controller/tenant/TenantQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…controller/usermanagement/UserQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…r/usermanagement/AuthorizationQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…ontroller/usermanagement/GroupQueryControllerTest.java	0	{ "sort": [ { "field": "unknownfield", "order": "asc" } ] }	STRING
HIGH	…est/controller/AgentDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "title": "not_found", "status": 404, "detail": "decision with key 1 was not found.", "instance"	STRING
HIGH	…/zeebe/gateway/rest/controller/FormControllerTest.java	0	{ "type": "about:blank", "title": "not_found", "status": 404, "detail": "decision with key 1 was not found.", "instance"	STRING
HIGH	…/controller/DecisionDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "title": "not_found", "status": 404, "detail": "decision with key 1 was not found.", "instance"	STRING
HIGH	…ontroller/DecisionRequirementsQueryControllerTest.java	0	{ "type": "about:blank", "title": "not_found", "status": 404, "detail": "decision with key 1 was not found.", "instance"	STRING
HIGH	…est/controller/AgentDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "status": 403, "title": "forbidden", "detail": "unauthorized to perform operation 'read' on res	STRING
HIGH	…/controller/DecisionDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "status": 403, "title": "forbidden", "detail": "unauthorized to perform operation 'read' on res	STRING
HIGH	…ay/rest/controller/DecisionInstanceControllerTest.java	0	{ "type": "about:blank", "status": 403, "title": "forbidden", "detail": "unauthorized to perform operation 'read' on res	STRING
HIGH	…t/controller/ProcessDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "status": 403, "title": "forbidden", "detail": "unauthorized to perform operation 'read' on res	STRING
HIGH	…ontroller/DecisionRequirementsQueryControllerTest.java	0	{ "type": "about:blank", "status": 403, "title": "forbidden", "detail": "unauthorized to perform operation 'read' on res	STRING
HIGH	…a/zeebe/gateway/rest/controller/JobControllerTest.java	0	{ "type": "about:blank", "title": "bad request", "status": 400, "detail": "required request body is missing", "instance"	STRING
HIGH	…teway/rest/controller/IncidentQueryControllerTest.java	0	{ "type": "about:blank", "title": "bad request", "status": 400, "detail": "required request body is missing", "instance"	STRING
HIGH	…t/controller/ProcessDefinitionQueryControllerTest.java	0	{ "type": "about:blank", "title": "bad request", "status": 400, "detail": "required request body is missing", "instance"	STRING
HIGH	…way/rest/controller/ClusterVariableControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…teway/rest/controller/tenant/TenantControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…rest/controller/usermanagement/RoleControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…est/controller/usermanagement/GroupControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…ntroller/usermanagement/MappingRuleControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…rest/controller/usermanagement/UserControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…gateway/rest/controller/setup/SetupControllerTest.java	0	{ "type": "about:blank", "status": 400, "title": "invalid_argument", "detail": "the provided groupid contains illegal ch	STRING
HIGH	…way/rest/controller/ProcessInstanceControllerTest.java	0	{ "type":"about:blank", "title":"invalid_argument", "status":400, "detail":"the value for operationreference is '-123' b	STRING
HIGH	…be/gateway/rest/controller/ResourceControllerTest.java	0	{ "type":"about:blank", "title":"invalid_argument", "status":400, "detail":"the value for operationreference is '-123' b	STRING
HIGH	…way/rest/controller/ElementInstanceControllerTest.java	0	{ "type":"about:blank", "title":"invalid_argument", "status":400, "detail":"the value for operationreference is '-123' b	STRING
HIGH	…eway/rest/controller/VariablesQueryControllerTest.java	0	{ "sort": [ { "field": "name", "order": "dsc" } ] }	STRING
HIGH	…/rest/controller/tenant/TenantQueryControllerTest.java	0	{ "sort": [ { "field": "name", "order": "dsc" } ] }	STRING
HIGH	…controller/usermanagement/UserQueryControllerTest.java	0	{ "sort": [ { "field": "name", "order": "dsc" } ] }	STRING
HIGH	…eway/rest/controller/VariablesQueryControllerTest.java	0	{ "type": "about:blank", "title": "bad request", "status": 400, "detail": "unexpected value 'dsc' for enum field 'order'	STRING
116 more matches not shown…

Hyper-Verbose Identifiers822 hits · 844 pts

Severity	File	Line	Snippet	Context
LOW	optimize/client/scripts/start-backend.js	242	function waitForDockerDependencies() {	CODE
LOW	optimize/client/src/components/Home/service.js	56	export async function checkDeleteSourceConflicts(collection, scopeId) {	CODE
LOW	…ize/client/src/components/Home/modals/SourcesModal.tsx	299	function definitionHasSelectedTenant(def: DefinitionWithTenants, selectedTenant?: string \| null) {	CODE
LOW	optimize/client/src/components/Home/modals/service.ts	20	export async function getDefinitionsWithTenants(): Promise<DefinitionWithTenants[]> {	CODE
LOW	optimize/client/src/components/Home/modals/service.ts	26	export async function getTenantsWithDefinitions(): Promise<TenantWithDefinitions[]> {	CODE
LOW	…client/src/components/Analysis/TaskAnalysis/service.ts	48	export async function loadCommonOutliersVariables(	CODE
LOW	…client/src/components/Analysis/TaskAnalysis/service.ts	69	export function shouldUseLogharitmicScale(	CODE
LOW	…ient/src/components/Analysis/BranchAnalysis/service.js	32	function createFlowNodeFrequencyReport(key, versions, tenantIds, identifier, filter) {	CODE
LOW	…mize/client/src/components/Dashboards/DashboardView.js	116	async function handleInstantPreviewDashboardCopying(dashboardState) {	CODE
LOW	optimize/client/src/components/Dashboards/service.js	36	export async function isAuthorizedToShareDashboard(dashboardId) {	CODE
LOW	optimize/client/src/components/Dashboards/service.js	47	export function convertFilterToDefaultValues(availableFilter, filters) {	CODE
LOW	…client/src/components/Reports/controlPanels/service.js	22	export function isProcessInstanceDuration({view}) {	CODE
LOW	…client/src/components/Reports/controlPanels/GroupBy.js	139	function convertDistributionToGroup(distributedBy) {	CODE
LOW	…alizations/subComponents/RelativeAbsoluteSelection.tsx	20	export default function RelativeAbsoluteSelection({	CODE
LOW	…Reports/controlPanels/DefinitionList/DefinitionList.js	63	function getTenantInfoForDefinition(definition) {	CODE
LOW	…tes/dashboard/operationsMonitoringDashboardTemplate.ts	13	export function operationsMonitoringDashboardTemplate() {	CODE
LOW	…l/templates/dashboard/productivityDashboardTemplate.ts	15	export function productivityDashboardTemplate(generateDocsLink: (path: string) => string) {	CODE
LOW	…dal/templates/dashboard/efficiencyDashboardTemplate.ts	15	export function efficiencyDashboardTemplate(generateDocsLink: (path: string) => string) {	CODE
LOW	…tes/dashboard/portfolioPerformanceDashboardTemplate.ts	13	export function portfolioPerformanceDashboardTemplate() {	CODE
LOW	…l/templates/dashboard/accelerationDashboardTemplate.ts	15	export function accelerationDashboardTemplate(generateDocsLink: (path: string) => string) {	CODE
LOW	…Modal/templates/report/listIncidentsAsTableTemplate.ts	11	export function listIncidentsAsTableTemplate() {	CODE
LOW	…al/templates/report/analyzeSharesAsPieChartTemplate.ts	11	export function analyzeSharesAsPieChartTemplate() {	CODE
LOW	…/templates/report/locateBottlenecsOnAHitmapTemplate.ts	11	export function locateBottlenecsOnAHitmapTemplate() {	CODE
LOW	…tes/report/localeIncidentHotspotsOnAHeatmapTemplate.ts	11	export function localeIncidentHotspotsOnAHeatmapTemplate() {	CODE
LOW	…/report/correlateDurationAndCountInPieChartTemplate.ts	11	export function correlateDurationAndCountInPieChartTemplate() {	CODE
LOW	…tes/report/analyzeOrExportRawDataFromATableTemplate.ts	11	export function analyzeOrExportRawDataFromATableTemplate() {	CODE
LOW	…port/compareProcessesAndVersionsInABarChartTemplate.ts	13	export function compareProcessesAndVersionsInABarChartTemplate() {	CODE
LOW	…odal/templates/report/monitorTargetAsMetricTemplate.ts	11	export function monitorTargetAsMetricTemplate() {	CODE
LOW	…teModal/templates/report/monitorTargetAsKpiTemplate.ts	11	export function monitorTargetAsKpiTemplate() {	CODE
LOW	…dal/templates/report/monitorTargetsOverTimeTemplate.ts	13	export function monitorTargetsOverTimeTemplate() {	CODE
LOW	…lates/report/correlateMetricsInLineBarChartTemplate.ts	13	export function correlateMetricsInLineBarChartTemplate() {	CODE
LOW	…ponents/ReportRenderer/visualizations/Chart/service.js	140	export function hasReportPersistedTooltips(report) {	CODE
LOW	…izations/Chart/targetLineChart/createTargetLineData.js	25	function createSingleTargetLineData(props) {	CODE
LOW	…izations/Chart/targetLineChart/createTargetLineData.js	39	function createCombinedTargetLineData(props) {	CODE
LOW	…izations/Chart/targetLineChart/createTargetLineData.js	69	function createSingleTargetLineDataset({targetValue, data, color, reportName, isHyper, isDark}) {	CODE
LOW	…alizations/Chart/hyperChart/createHyperChartOptions.js	114	function findMaxDurationAcrossReports(result, durationKey = 'value') {	CODE
LOW	…isualizations/Chart/hyperChart/createHyperChartData.js	47	function createMultiMeasureChartData(props) {	CODE
LOW	…ations/Chart/defaultChart/createDefaultChartOptions.js	27	export default function createDefaultChartOptions({report, targetValue, theme, formatter}) {	CODE
LOW	…ponents/ReportRenderer/visualizations/Table/service.js	180	function valueForNewColumnPosition(head, sortedHead) {	CODE
LOW	…ze/client/src/modules/components/TextEditor/Editor.tsx	67	function trimChildrenEmptyParagraphs(children: SerializedNode[] = []) {	CODE
LOW	optimize/client/src/modules/components/Table/service.ts	77	export function convertHeaderNameToAccessor(name: string) {	CODE
LOW	…odules/components/ReportDetails/SingleReportDetails.js	83	function getTenantInfoForDefinition(definition) {	CODE
LOW	…lient/src/modules/components/UserTypeahead/service.tsx	99	function filterOutSelectedIdentity(	CODE
LOW	optimize/client/src/modules/filter/service.js	36	export function filterSameTypeExistingFilters(filters, newFilter) {	CODE
LOW	optimize/client/src/modules/filter/FilterList.js	408	function getStateFilterParameterName({type, filterLevel}) {	CODE
LOW	…rc/modules/filter/modals/FilterDefinitionSelection.tsx	26	export default function FilterDefinitionSelection({	CODE
LOW	…ules/filter/modals/FilterSingleDefinitionSelection.tsx	22	export default function FilterSingleDefinitionSelection({	CODE
LOW	…dules/filter/modals/variable/MultipleVariableFilter.js	88	function getInputComponentForVariable(type) {	CODE
LOW	optimize/client/src/modules/services/diagramServices.js	9	export function getDiagramElementsBetween(start, end, viewer) {	CODE
LOW	optimize/client/src/modules/services/diagramServices.js	110	function constructReachabilityGraphFrom(start, end, viewer) {	CODE
LOW	optimize/client/src/modules/services/formatters.tsx	423	export function createDurationFormattingOptions(	CODE
LOW	optimize/client/src/modules/services/reportService.js	62	export function applyMissingVariableLabel(entries) {	CODE
LOW	…ient/src/modules/services/reportConfig/reportConfig.js	180	function isProcessInstanceDuration({view}) {	CODE
LOW	identity/client/src/configuration/urlConfig.ts	27	export function getSessionHeartbeatApiUrl() {	CODE
LOW	.ci/scripts/renovate-assignments.py	158	def dismiss_renovate_approval(pr_number):	CODE
LOW	.ci/scripts/renovate-assignments.py	188	def pr_has_reviewers_or_teams_and_assignee(pr_number):	CODE
LOW	.ci/scripts/renovate-assignments.py	214	def check_dri_assignment_status(pr_number):	CODE
LOW	.ci/scripts/renovate-assignments.py	317	def update_project_item_status(pr_number, project_item_id):	STRING
LOW⚡	.ci/scripts/renovate-assignments.py	359	def update_project_status_to_delayed(pr_number):	STRING
LOW	…test/broker/protocol/brokerapi/StubRequestHandler.java	23	public final class StubRequestHandler implements RequestHandler {	CODE
762 more matches not shown…

Decorative Section Separators231 hits · 738 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ient/agentinstance/CreateAgentInstanceCommandTest.java	50	// ── Happy-path: request body ──────────────────────────────────────────────	COMMENT
MEDIUM	…ient/agentinstance/CreateAgentInstanceCommandTest.java	121	// ── Argument validation: elementInstanceKey ───────────────────────────────	COMMENT
MEDIUM	…ient/agentinstance/CreateAgentInstanceCommandTest.java	153	// ── Argument validation: jobKey ───────────────────────────────────────────	COMMENT
MEDIUM	…ient/agentinstance/CreateAgentInstanceCommandTest.java	168	// ── Argument validation: jobLeaseToken ─────────────────────────────────────────	COMMENT
MEDIUM	…ient/agentinstance/CreateAgentInstanceCommandTest.java	197	// ── History batch mapping ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…ient/agentinstance/CreateAgentInstanceCommandTest.java	319	// ── Response parsing: createdHistory ──────────────────────────────────────	COMMENT
MEDIUM	…r/src/test/java/io/camunda/cluster/ZoneLayoutTest.java	22	// ── effectiveSlot ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…r/src/test/java/io/camunda/cluster/ZoneLayoutTest.java	63	// ── zoneRankForBareNodeIdx ─────────────────────────────────────────────────	COMMENT
MEDIUM	…r/src/test/java/io/camunda/cluster/ZoneLayoutTest.java	84	// ── localNodeIdxForBareNodeIdx ─────────────────────────────────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	20	// ── history/limits deserialization (regression for #62414) ────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	20	// ── history/limits deserialization (regression for #62414) ────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	66	// ── changedAttributes deserialization ─────────────────────────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	93	// ── getTools() null-safety ────────────────────────────────────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	150	// ── equals() / hashCode() ─────────────────────────────────────────────────	COMMENT
MEDIUM	…zeebe/agentinstance/ZeebeAgentInstanceDataDtoTest.java	230	// ── helpers ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.ci/db-versions.yml	8	# ── Renovate coverage ────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.ci/db-versions.yml	15	# ── How to use this file in CI workflows ────────────────────────────────────────	COMMENT
MEDIUM⚡	.ci/db-versions.yml	19	# ── SaaS version ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.ci/db-versions.yml	23	# ────────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.ci/db-versions.yml	48	# ── RDBMS databases ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	zeebe/broker/src/test/resources/system/default.yaml	10	# ----------------------------------------------------	COMMENT
MEDIUM	zeebe/broker/src/test/resources/system/default.yaml	26	# ----------------------------------------------------	COMMENT
MEDIUM	…ort/backupapi/ReadOnlyBackupApiRequestHandlerTest.java	99	// ── read operations: allowed ─────────────────────────────────────────────	COMMENT
MEDIUM	…ort/backupapi/ReadOnlyBackupApiRequestHandlerTest.java	149	// ── write operations: rejected ───────────────────────────────────────────	COMMENT
MEDIUM	…ort/backupapi/ReadOnlyBackupApiRequestHandlerTest.java	222	// ── helpers ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…t/java/io/camunda/zeebe/test/JobPriorityUpgradeIT.java	92	// ── OLD BROKER ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…t/java/io/camunda/zeebe/test/JobPriorityUpgradeIT.java	109	// ── UPGRADE ────────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…t/java/io/camunda/zeebe/test/JobPriorityUpgradeIT.java	114	// ── NEW BROKER ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…t/java/io/camunda/zeebe/test/JobPriorityUpgradeIT.java	157	// ── Test cases ───────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…t/java/io/camunda/zeebe/test/JobPriorityUpgradeIT.java	248	// ── Helpers ──────────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…tral-tests/verifyNoAmbiguousIdentifierProperty.test.js	24	// ── Valid cases (should produce zero violations) ─────────────	COMMENT
MEDIUM	…tral-tests/verifyNoAmbiguousIdentifierProperty.test.js	40	// ── Invalid cases ────────────────────────────────────────────	COMMENT
MEDIUM	…y-protocol/spectral-tests/verifyAddedInVersion.test.js	21	// ── Valid cases (should produce zero violations) ─────────────────	COMMENT
MEDIUM	…y-protocol/spectral-tests/verifyAddedInVersion.test.js	39	// ── Invalid cases ────────────────────────────────────────────────	COMMENT
MEDIUM	…y-protocol/spectral-tests/verifyAddedInVersion.test.js	77	// ── Valid cases (should produce zero violations) ─────────────────	COMMENT
MEDIUM	…y-protocol/spectral-tests/verifyAddedInVersion.test.js	102	// ── Invalid cases ────────────────────────────────────────────────	COMMENT
MEDIUM	…protocol/spectral-tests/verifySecurityDeclared.test.js	21	// ── Valid cases (should produce zero violations) ─────────────────	COMMENT
MEDIUM	…protocol/spectral-tests/verifySecurityDeclared.test.js	41	// ── Invalid cases ────────────────────────────────────────────────	COMMENT
MEDIUM	…pectral-tests/verifyResponsePropertiesRequired.test.js	29	// ── Valid cases (should produce zero violations) ─────────────────	COMMENT
MEDIUM	…pectral-tests/verifyResponsePropertiesRequired.test.js	66	// ── Invalid cases ────────────────────────────────────────────────	COMMENT
MEDIUM	…pectral-tests/verifyResponsePropertiesRequired.test.js	134	// ── Total count ──────────────────────────────────────────────────	COMMENT
MEDIUM	…tocol/spectral-tests/verifyRequiredPermissions.test.js	27	// ── Valid cases (no violations from either rule) ─────────────────	COMMENT
MEDIUM	…tocol/spectral-tests/verifyRequiredPermissions.test.js	67	// ── Completeness / registry-validity (verify rule) ───────────────	COMMENT
MEDIUM	…tocol/spectral-tests/verifyRequiredPermissions.test.js	107	// ── Schema shape (shape rule) ────────────────────────────────────	COMMENT
MEDIUM	…tocol/spectral-tests/verifyRequiredPermissions.test.js	127	// ── Enforcement marker shape (permission-enforcement-shape) ──────	COMMENT
MEDIUM	…teway-protocol/spectral-tests/presentWhenShape.test.js	26	// ── Valid markers (no shape violations) ──────────────────────────	COMMENT
MEDIUM	…teway-protocol/spectral-tests/presentWhenShape.test.js	42	// ── Invalid markers (exactly one shape violation each) ───────────	COMMENT
MEDIUM	…l/spectral-tests/verifyArrayPropertiesRequired.test.js	18	// ── Valid cases (should produce zero violations) ─────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifyArrayPropertiesRequired.test.js	54	// ── Invalid cases ────────────────────────────────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifyArrayPropertiesRequired.test.js	121	// ── Total count ──────────────────────────────────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	25	// ── Valid cases ──────────────────────────────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	73	// ── Shape lint: x-semantic-establishes ───────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	109	// ── Shape lint: x-semantic-requires ──────────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	120	// ── Registry / cross-reference ───────────────────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	201	// ── Edge endpoint resolution + derived requires ──────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	238	// ── External entities (camunda/camunda#52320) ────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	238	// ── External entities (camunda/camunda#52320) ────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	310	// ── Binding existence (camunda/camunda#52413) ────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	310	// ── Binding existence (camunda/camunda#52413) ────────────────	COMMENT
MEDIUM	…l/spectral-tests/verifySemanticKindsRegistered.test.js	437	// ── Shape consistency vs registry ─────────────────────────────	COMMENT
171 more matches not shown…

Over-Commented Block480 hits · 479 pts

Severity	File	Line	Snippet	Context
LOW	…nts/PhysicalTenantOverridablePropertiesGoldenTest.java	81	# Every camunda.* property in the Camunda configuration tree that MAY be overridden	COMMENT
LOW	…/camunda/configuration/UnifiedConfigurationHelper.java	541	// New config...: not present	COMMENT
LOW	…caltenants/PhysicalTenantOverridePolicyValidation.java	101	// override of whether it runs at all, or of its bind address/port/SSL/long-polling	COMMENT
LOW	optimize/docker-compose.ccsm-without-optimize.yml	1	# You can add the following environment variables to your CCSM config to have Optimize running in your IDE	COMMENT
LOW	optimize/docker-compose.ccsm-without-optimize.yml	21	#SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWK_SET_URI=http://localhost:18080/auth/realms/camunda-platform/protocol/open	COMMENT
LOW	optimize/docker/test/verify.sh	1	#!/bin/bash -eu	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	41	maxSize: ${CAMUNDA_OPTIMIZE_SECURITY_AUTH_COOKIE_MAX_SIZE:3968}	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	61	HSTS:	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	81	# A Content Security Policy (CSP) has significant impact on the way browsers render pages.	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	101	audience: ${CAMUNDA_OPTIMIZE_API_AUDIENCE:optimize}	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	241	# should be imported.	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	261	maxEntryLimit: 100000	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	281	#States how often the import index should be stored to Elasticsearch.	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	301		COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	341	password: null	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	361	# used to enable or disable TLS/SSL for the HTTP connection	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	381	# this property to take effect again, you need to delete all indexes (with it all data)	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	421	es:	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	461	skipHostnameVerification: ${CAMUNDA_OPTIMIZE_ELASTICSEARCH_CONNECTION_SKIP_HOSTNAME_VERIFICATION:false}	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	501	# NOTE: this property only applies the first time Optimize is started and	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	601	# How often the business-value overview index is refreshed, for every range preset (7d, 30d, 3m,	COMMENT
LOW	…ptimize-commons/src/main/resources/service-config.yaml	641	ttl: ${CAMUNDA_OPTIMIZE_HISTORY_CLEANUP_TTL:P2Y}	COMMENT
LOW	…cripts/scripts/convert_index_content_to_bulk_format.sh	1	#!/bin/bash	COMMENT
LOW	…businessvalue/BusinessValueOverviewComputeService.java	221	// then stamp it fresh, so the backstop would not treat it as stale either. The user would see	COMMENT
LOW	…munda/optimize/service/db/report/ExecutionContext.java	41	private MinMaxStatDto combinedRangeMinMaxStats;	COMMENT
LOW	…st/security/cloud/CCSaaSSecurityConfigurerAdapter.java	361	authCookieService	COMMENT
LOW	…/OptimizeSecurityConfigCompatibilityPostProcessor.java	161	derived.putIfAbsent(OIDC_PREFIX + "redirect-uri", "{baseUrl}/api/authentication/callback");	COMMENT
LOW	…/OptimizeSecurityConfigCompatibilityPostProcessor.java	301	final Map<String, Object> derived,	COMMENT
LOW	…/OptimizeSecurityConfigCompatibilityPostProcessor.java	521	}	COMMENT
LOW	…/OptimizeSecurityConfigCompatibilityPostProcessor.java	561	jwkSetUris.add(value.trim());	COMMENT
LOW	…/OptimizeSecurityConfigCompatibilityPostProcessor.java	581	addAudience(env, audiences, "CAMUNDA_OPTIMIZE_CLIENT_AUDIENCE");	COMMENT
LOW	optimize/client/src/components/Logout.js	21	// CSL mode (ADR-0038): log out via the CSL server-side logout endpoint (aligned with OC),	COMMENT
LOW	.ci/db-versions.yml	1	# Database versions	COMMENT
LOW	.ci/docker/test/verify.sh	1	#!/bin/bash -eu	COMMENT
LOW	…ripts/stale-backport-scripts/notify-stale-backports.sh	1	#!/bin/bash	COMMENT
LOW	…/scripts/stale-backport-scripts/format-slack-report.sh	1	#!/bin/bash	COMMENT
LOW	…/scripts/stale-backport-scripts/resolve-slack-users.sh	1	#!/bin/bash	COMMENT
LOW	…ipts/stale-backport-scripts/collect-stale-backports.sh	1	#!/bin/bash	COMMENT
LOW	.ci/scripts/ci/wait-for-downstream-saas-e2e.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.ci/scripts/ci/wait-for-downstream-saas-e2e.sh	21	# between 2026-09-07 and 2026-09-22). At 50min, 9 of the 381 (2.4%) were still	COMMENT
LOW	.ci/scripts/ci/wait-for-downstream-saas-e2e.sh	61	# serves the primary limit as 403 and the secondary limit as 403	COMMENT
LOW	.ci/scripts/ci/setup-general-ut.sh	1	#!/bin/bash	COMMENT
LOW	…/ci/observe-build-status/resolve-failing-test-owner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.ci/preview-environments/charts/c8sm/values.yaml	21	preview:	COMMENT
LOW	…eview-environments/charts/c8sm/templates/httproute.yml	1	# Gateway API HTTPRoutes for the C8 Self-Managed Camunda preview environment.	COMMENT
LOW	…review-environments/charts/c8sm/templates/keycloak.yml	1	---	COMMENT
LOW	…charts/c8sm/templates/internal-bypass-ingressroute.yml	1	# Internal auth bypass for CI/testing: requests from the internal source ranges	COMMENT
LOW	…w-environments/charts/c8sm/templates/elasticsearch.yml	1	---	COMMENT
LOW	…/broker/src/test/resources/system/elasticexporter.yaml	1	zeebe:	COMMENT
LOW	…/broker/src/test/resources/system/elasticexporter.yaml	21	username: elastic	COMMENT
LOW	…/broker/src/test/resources/system/elasticexporter.yaml	41	# message: false	COMMENT
LOW	zeebe/broker/src/test/resources/system/default.yaml	1	# Zeebe Standalone Broker configuration file (with embedded gateway)	COMMENT
LOW	zeebe/broker/src/test/resources/system/default.yaml	41	# Enables TLS authentication between clients and the gateway	COMMENT
LOW	zeebe/broker/src/test/resources/system/default.yaml	61		COMMENT
LOW	…/protocol/impl/record/value/RecordGoldenFilesTest.java	41		COMMENT
LOW	…camunda/zeebe/db/impl/rocksdb/ZeebeRocksDbFactory.java	341	// default is binary search, but all of our scans are prefix based which is a good use	COMMENT
LOW	…/java/io/camunda/exporter/rdbms/RdbmsExporterTest.java	621	// and only afterwards schedules the flush task; make that scheduling fail so open() throws	COMMENT
LOW	…be/exporter/ElasticsearchExporterConfigMergerTest.java	61	@Test	COMMENT
LOW	…tasks/incident/OpenSearchIncidentUpdateRepository.java	121	public CompletionStage<PendingIncidentUpdateBatch> getPendingIncidentsBatch(	COMMENT
LOW	…ks/incident/ElasticsearchIncidentUpdateRepository.java	121	// of its shards expose their acknowledged writes. New entries are written with routing by	COMMENT
420 more matches not shown…

Fake / Example Data184 hits · 195 pts

Severity	File	Line	Snippet	Context
LOW	…da/optimize/service/security/CCSMTokenServiceTest.java	62	private static final String EMAIL = "user@example.com";	CODE
LOW	…timize/backend/src/main/resources/localization/de.json	28	"placeholder": "Alle Prozesse"	CODE
LOW	…timize/backend/src/main/resources/localization/en.json	28	"placeholder": "All processes"	CODE
LOW	optimize/client/src/components/Home/Home.test.js	40	user: {name: 'John Doe', authorizations: ['entity_editor']},	CODE
LOW	optimize/client/src/components/Home/Home.test.js	89	user={{name: 'John Doe', authorizations: []}}	CODE
LOW	optimize/client/src/components/Home/Home.test.js	106	const node = shallow(<Home {...props} user={{name: 'John Doe', authorizations: []}} />);	CODE
LOW	optimize/client/src/components/Home/Home.test.js	152	const node = shallow(<Home {...props} user={{name: 'John Doe', authorizations: []}} />);	CODE
LOW	optimize/client/src/components/Home/Home.test.js	167	node.setProps({user: {name: 'John Doe', authorizations: []}});	CODE
LOW	…t/src/components/Analysis/BranchAnalysis/Statistics.js	54	<div className="placeholder">{t('analysis.noInstances')}</div>	CODE
LOW	…t/src/components/Analysis/BranchAnalysis/Statistics.js	101	<div className="placeholder">{t('analysis.instructionMessage')}</div>	CODE
LOW	…mize/client/src/components/Processes/Processes.test.js	54	user: {name: 'John Doe', authorizations: ['entity_editor']},	CODE
LOW	…omponents/Header/HeaderV2/LogoutAwareUserMenu.test.tsx	15	userEmail: 'user@example.com',	CODE
LOW	…/src/modules/components/AlertModal/MultiEmailInput.tsx	17	'titleText' \| 'placeholder' \| 'helperText' \| 'invalid' \| 'invalidText'	CODE
LOW	…modules/components/AlertModal/MultiEmailInput.test.tsx	35	target: {value: 'test@test.com'},	CODE
LOW	…modules/components/AlertModal/MultiEmailInput.test.tsx	42	expect(props.onChange).toHaveBeenCalledWith([...props.emails, 'test@test.com'], true);	CODE
LOW	…dules/components/UserTypeahead/MultiUserInput.test.tsx	104	email: 'test@test.com',	CODE
LOW	…dules/components/UserTypeahead/MultiUserInput.test.tsx	128	email: 'test@test.com',	CODE
LOW	…dules/components/UserTypeahead/MultiUserInput.test.tsx	176	{id: '1', label: 'John Doe', subText: 'john@example.com'},	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	26	json: jest.fn().mockResolvedValue({total: 1, result: [{id: '1', name: 'John Doe'}]}),	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	36	expect(result).toEqual({total: 1, result: [{id: '1', name: 'John Doe'}]});	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	42	const mockResponse = {json: jest.fn().mockResolvedValue({id: '1', name: 'John Doe'})};	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	48	expect(result).toEqual({id: '1', name: 'John Doe'});	CODE
LOW	…/src/modules/components/UserTypeahead/service.test.tsx	70	itemToElement({id: '1', label: 'John Doe', subText: 'john@example.com'}, 'John')	CODE
LOW	…/src/modules/components/UserTypeahead/service.test.tsx	85	{id: '1', name: 'John Doe', email: 'john@example.com'},	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	99	const identity = {id: '1', name: 'John Doe', email: 'john@example.com'};	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	103	label: 'John Doe',	CODE
LOW⚡	…/src/modules/components/UserTypeahead/service.test.tsx	112	{id: '1', name: 'John Doe', email: 'john@example.com'},	CODE
LOW	…ules/components/UserTypeahead/SingleUserInput.test.tsx	108	{id: '1', label: 'John Doe', subText: 'john@example.com'},	CODE
LOW	…ules/components/UserTypeahead/SingleUserInput.test.tsx	115	expect(node.find(ComboBox).prop('itemToString')?.(items[0])).toBe('John Doe');	CODE
LOW	…client/src/components/form/EntitySearchMultiSelect.tsx	46	"search" \| "getId" \| "itemSubTitle" \| "placeholder" \| "errorTitle"	CODE
LOW	…client/src/components/form/EntitySearchMultiSelect.tsx	48	Partial<Pick<AbstractEntitySearchMultiSelectProps<Entity>, "placeholder">>;	CODE
LOW	…ient/src/components/formV2/EntitySearchMultiSelect.tsx	42	"search" \| "getId" \| "itemLabel" \| "placeholder" \| "errorTitle"	CODE
LOW	…ient/src/components/formV2/EntitySearchMultiSelect.tsx	44	Partial<Pick<AbstractEntitySearchMultiSelectProps<Entity>, "placeholder">>;	CODE
LOW	…ytics/handler/ProcessDefinitionCreatedHandlerTest.java	49	.withResourceName("Jane Doe's order process.bpmn")	CODE
LOW	…ytics/handler/ProcessDefinitionCreatedHandlerTest.java	88	.doesNotContain("Jane Doe's order process.bpmn")	CODE
LOW	…nalytics/handler/FormDefinitionCreatedHandlerTest.java	48	.withResourceName("Jane Doe's onboarding form.form")	CODE
LOW	…nalytics/handler/FormDefinitionCreatedHandlerTest.java	84	.doesNotContain("Jane Doe's onboarding form.form")	CODE
LOW	…nalytics/handler/FormDefinitionDeletedHandlerTest.java	48	.withResourceName("Jane Doe's onboarding form.form")	CODE
LOW	…nalytics/handler/FormDefinitionDeletedHandlerTest.java	84	.doesNotContain("Jane Doe's onboarding form.form")	CODE
LOW	…ytics/handler/ProcessDefinitionDeletedHandlerTest.java	49	.withResourceName("Jane Doe's order process.bpmn")	CODE
LOW	…ytics/handler/ProcessDefinitionDeletedHandlerTest.java	87	.doesNotContain("Jane Doe's order process.bpmn")	CODE
LOW	…t/java/io/camunda/zeebe/el/ExpressionLanguageTest.java	149	final StaticExpression sutStaticExpression = new StaticExpression("lorem ipsum");	CODE
LOW	…t/java/io/camunda/zeebe/el/ExpressionLanguageTest.java	154	assertThat(sutStaticExpression.getString()).isEqualTo("lorem ipsum");	CODE
LOW⚡	…eduler/health/CriticalComponentsHealthMonitorTest.java	186	monitor.monitorComponent("placeholder");	CODE
LOW⚡	…eduler/health/CriticalComponentsHealthMonitorTest.java	189	assertThat(monitor.getHealthReport().children()).containsOnlyKeys("placeholder", "registered");	CODE
LOW⚡	…eduler/health/CriticalComponentsHealthMonitorTest.java	193	monitor.removeComponent("placeholder");	CODE
LOW	…/java/io/camunda/zeebe/it/util/AuthorizationsUtil.java	80	.email("foo@bar.com")	CODE
LOW	…eebe/engine/processing/tenant/AddEntityTenantTest.java	338	.withEmail("foo@bar.com")	CODE
LOW	…g/distribution/CommandRedistributionSchedulerTest.java	78	.setEmail("test@test.com")	CODE
LOW	…gine/processing/user/DeleteUserMultiPartitionTest.java	48	.withEmail("foo@bar.com")	CODE
LOW	…gine/processing/user/DeleteUserMultiPartitionTest.java	119	.withEmail("foo@bar.com")	CODE
LOW	…gine/processing/user/DeleteUserMultiPartitionTest.java	152	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/CreateUserTest.java	46	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/CreateUserTest.java	56	.hasFieldOrPropertyWithValue("email", "foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/CreateUserTest.java	69	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/CreateUserTest.java	108	.withEmail("foo@bar.com")	CODE
LOW	…gine/processing/user/CreateUserMultiPartitionTest.java	45	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/UpdateUserTest.java	40	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/UpdateUserTest.java	95	.withEmail("foo@bar.com")	CODE
LOW	…munda/zeebe/engine/processing/user/DeleteUserTest.java	42	.withEmail("foo@bar.com")	CODE
124 more matches not shown…

Self-Referential Comments40 hits · 119 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ava/io/camunda/configuration/GenerateDefaultsTest.java	40	assertThat(content).contains("# This file is AUTO-GENERATED");	CODE
MEDIUM	…cripts/scripts/convert_index_content_to_bulk_format.sh	15	# Define the output file, this is where the bulk will be written to	COMMENT
MEDIUM	zeebe/broker/src/test/resources/system/default.yaml	3	# This file is based on broker.standalone.yaml.template but stripped down to contain only a limited	COMMENT
MEDIUM	…/src/test/resources/configuration/gateway.default.yaml	11	# This file contains a complete list of available configuration options.	COMMENT
MEDIUM	…hestration-cluster-smoke-tests/config/application.yaml	3	# This file is based on broker.standalone.yaml.template but stripped down to contain only a limited	COMMENT
MEDIUM	…tration-cluster-e2e-test-suite/config/application.yaml	3	# This file is based on broker.standalone.yaml.template but stripped down to contain only a limited	COMMENT
MEDIUM	…ub/workflows/camunda-platform-release-main-dry-run.yml	50	# Create a temporary unprotected branch for dry-run push testing.	COMMENT
MEDIUM	.github/workflows/preview-env-build-and-deploy.yml	269	# Create a preview environment	COMMENT
MEDIUM	…kflows/c8-orchestration-cluster-e2e-nightly-triage.yml	1031	# Create the branch if it doesn't exist yet (first run).	COMMENT
MEDIUM	.github/workflows/docker-build-helm-integration.yml	555	# Create a unique identifier based on run ID and short SHA	COMMENT
MEDIUM	.github/workflows/camunda8-getting-started-bundle.yaml	259	# Create a batch file launcher with proper variable substitution	COMMENT
MEDIUM	.github/workflows/camunda8-getting-started-bundle.yaml	284	# Create a symlink to the Camunda Modeler executable	COMMENT
MEDIUM	.github/workflows/camunda8-getting-started-bundle.yaml	489	# Create a fake browser/open command to capture URL that c8run tries to open	COMMENT
MEDIUM	.github/actions/build-platform-docker/action.yml	77	# Creating a context is required when installing buildx on self-hosted runners	COMMENT
MEDIUM	…stable-89/values/camunda-platform-values-defaults.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…stable-89/values/camunda-platform-values-defaults.yaml	229	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…tup/stable-89/values/camunda-platform-values-none.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…tup/stable-89/values/camunda-platform-values-none.yaml	56	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…up/stable-89/values/camunda-platform-values-rdbms.yaml	47	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…stable-89/values/camunda-platform-override-values.yaml	2	# This file is injected as application-override.yml (loaded after and overrides application.yml)	COMMENT
MEDIUM	…stable-87/values/camunda-platform-values-defaults.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…stable-87/values/camunda-platform-values-defaults.yaml	249	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…stable-87/values/camunda-platform-override-values.yaml	2	# This file is injected as application-override.yml (loaded after and overrides application.yml)	COMMENT
MEDIUM	…table-810/values/camunda-platform-values-defaults.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…table-810/values/camunda-platform-values-defaults.yaml	255	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…up/stable-810/values/camunda-platform-values-none.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…up/stable-810/values/camunda-platform-values-none.yaml	55	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…p/stable-810/values/camunda-platform-values-rdbms.yaml	50	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…table-810/values/camunda-platform-override-values.yaml	2	# This file is injected as application-override.yml (loaded after and overrides application.yml)	COMMENT
MEDIUM	…stable-88/values/camunda-platform-values-defaults.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…stable-88/values/camunda-platform-values-defaults.yaml	241	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…tup/stable-88/values/camunda-platform-values-none.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…tup/stable-88/values/camunda-platform-values-none.yaml	55	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…stable-88/values/camunda-platform-override-values.yaml	2	# This file is injected as application-override.yml (loaded after and overrides application.yml)	COMMENT
MEDIUM	…etup/main/values/camunda-platform-values-defaults.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…etup/main/values/camunda-platform-values-defaults.yaml	257	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…ts/setup/main/values/camunda-platform-values-none.yaml	4	# This file is used to override the default values of the chart.	COMMENT
MEDIUM	…ts/setup/main/values/camunda-platform-values-none.yaml	57	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…s/setup/main/values/camunda-platform-values-rdbms.yaml	52	# This file is loaded after application.yml (higher priority). It is empty by default,	COMMENT
MEDIUM	…etup/main/values/camunda-platform-override-values.yaml	2	# This file is injected as application-override.yml (loaded after and overrides application.yml)	COMMENT

Structural Annotation Overuse55 hits · 102 pts

Severity	File	Line	Snippet	Context
LOW⚡	…amunda/client/impl/oauth/OAuthCredentialsProvider.java	238	// Step 1: Fetch the token WITHOUT any lock — this is the slow part	COMMENT
LOW⚡	…amunda/client/impl/oauth/OAuthCredentialsProvider.java	242	// Step 2: Briefly acquire the cache monitor to atomically put + write.	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	468	// Step 1: Validate headers of the first listener (initial user task state)	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	491	// Step 2: Apply corrections to the user task and validate the headers in the second listener	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	529	// Step 3: Clear user task properties using corrections and validate third listener headers	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	560	// Step 4: Validate the complete sequence of user task lifecycle intents	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	99	// Step 1: Instantiate all elements in the process	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	109	// Step 2: Transform all attributes, cross-link elements, etc.	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	131	// Step 3: Modify elements based on the context	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	139	// Step 4: Modify elements based on containing elements	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	144	// Step 5: Modify elements based on containing container elements	COMMENT
LOW	.agents/skills/ci-runner-utilization/SKILL.md	49	### Step 1: Identify underutilized self-hosted jobs	COMMENT
LOW	.agents/skills/ci-runner-utilization/SKILL.md	74	### Step 2: Get full utilization picture (all self-hosted jobs)	COMMENT
LOW	.agents/skills/ci-runner-utilization/SKILL.md	98	### Step 3: Check runner type distribution	COMMENT
LOW	.agents/skills/ci-runner-utilization/SKILL.md	118	### Step 4: Deep-dive a specific job (time series)	COMMENT
LOW	.agents/skills/gradle-best-practices/SKILL.md	40	## Step 1: Discover the project's Gradle files	COMMENT
LOW	.agents/skills/gradle-best-practices/SKILL.md	59	## Step 2: Read only the category files this project can violate	COMMENT
LOW⚡	.agents/skills/gradle-best-practices/SKILL.md	77	## Step 3: Take each entry's detection approach from the catalog	COMMENT
LOW⚡	.agents/skills/gradle-best-practices/SKILL.md	85	## Step 4: Check the project	COMMENT
LOW⚡	.agents/skills/gradle-best-practices/SKILL.md	91	## Step 5: Present the report	COMMENT
LOW	.agents/skills/gradle-best-practices/SKILL.md	126	## Step 6: Apply fixes	COMMENT
LOW	docs/zeebe/batch-operation.md	96	#### Step 1: Initialization	COMMENT
LOW	docs/zeebe/batch-operation.md	160	#### Step 2: Execution	COMMENT
LOW	…cs/frontend/development-process/creating-a-new-page.md	44	## Step 1: Build the feature in your pod's area	COMMENT
LOW	…cs/frontend/development-process/creating-a-new-page.md	85	## Step 2: Plug into the router	COMMENT
LOW	…ug-cli/scripts/reset-incident-position/reset-script.sh	126	# Step 1: Determine snapshot to use	COMMENT
LOW⚡	…ug-cli/scripts/reset-incident-position/reset-script.sh	161	# Step 2: Backup the snapshots of this partition (on the PVC, not in /tmp)	COMMENT
LOW⚡	…ug-cli/scripts/reset-incident-position/reset-script.sh	168	# Step 3: Run cdbg to reset the incident position. Build the command as an	COMMENT
LOW	…ug-cli/scripts/reset-incident-position/reset-script.sh	186	# Step 4: Delete the original snapshot since cdbg created a new one	COMMENT
LOW	…ug-cli/scripts/overwrite-key/analyze-partition-keys.sh	243	# Step 2: Analyze the keys to find jumps	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	62	# Step 2: Determine snapshot to use	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	114	# Step 3: Create backups of all broker partition data to temporary location	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	165	# Step 4: Run cdbg to update key values on leader	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	200	# Step 5: Copy updated partition data to replicas	COMMENT
LOW	.github/workflows/backport.yml	67	# WARNING: The stale backport tracker depends on two things:	COMMENT
LOW⚡	.github/actions/flaky-tests-summary-comment/action.yml	60	// Step 1: Process and structure the flaky test data	COMMENT
LOW⚡	.github/actions/flaky-tests-summary-comment/action.yml	65	// Step 2: Generate and post the PR comment	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	9	// Step 1: Fetch any existing flaky test comment	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	12	// Step 2: Parse existing comment to extract historical data (including URLs)	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	16	// Step 3: Merge current and historical data, or generate first run data	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	20	// Step 4: Generate comment content (URLs from historical data will be reused)	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	23	// Step 5: Create or update comment	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	254	// Step 1: Node1 upgrades to 1.1.0	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	255	// Step 2: Node2 upgrades to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	287	// Step 1: Both nodes upgrade simultaneously to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	317	// Step 2: Node2 starts upgrade (should upgrade while Node1 is paused)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	354	// Step 1: Node1 upgrades to 1.1.0	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	355	// Step 2: Node2 restarts (still 1.0.0) - should skip (version downgrade)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	385	// Step 1: Node1 starts upgrade to 1.1.0 (but pauses before storing version)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	386	// Step 2: Node2 restarts (still 1.0.0) - should skip (same version)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	387	// Step 3: Node1 completes upgrade to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	414	// Step 2: Node2 restarts with old version 1.0.0 (should skip - same version as schema)	COMMENT
LOW	monorepo-docs-site/README.md	62	### Step 1: Create Your Markdown File	COMMENT
LOW	monorepo-docs-site/README.md	66	### Step 2: Add to Navigation	COMMENT
LOW	monorepo-docs-site/README.md	83	### Step 3: Test Your Changes	COMMENT

Verbosity Indicators37 hits · 73 pts

Severity	File	Line	Snippet	Context
LOW⚡	…amunda/client/impl/oauth/OAuthCredentialsProvider.java	238	// Step 1: Fetch the token WITHOUT any lock — this is the slow part	COMMENT
LOW⚡	…amunda/client/impl/oauth/OAuthCredentialsProvider.java	242	// Step 2: Briefly acquire the cache monitor to atomically put + write.	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	468	// Step 1: Validate headers of the first listener (initial user task state)	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	491	// Step 2: Apply corrections to the user task and validate the headers in the second listener	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	529	// Step 3: Clear user task properties using corrections and validate third listener headers	COMMENT
LOW	…tivity/listeners/task/TaskListenerCorrectionsTest.java	560	// Step 4: Validate the complete sequence of user task lifecycle intents	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	99	// Step 1: Instantiate all elements in the process	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	109	// Step 2: Transform all attributes, cross-link elements, etc.	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	131	// Step 3: Modify elements based on the context	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	139	// Step 4: Modify elements based on containing elements	COMMENT
LOW⚡	…g/deployment/model/transformation/BpmnTransformer.java	144	// Step 5: Modify elements based on containing container elements	COMMENT
LOW	…ug-cli/scripts/reset-incident-position/reset-script.sh	126	# Step 1: Determine snapshot to use	COMMENT
LOW⚡	…ug-cli/scripts/reset-incident-position/reset-script.sh	161	# Step 2: Backup the snapshots of this partition (on the PVC, not in /tmp)	COMMENT
LOW⚡	…ug-cli/scripts/reset-incident-position/reset-script.sh	168	# Step 3: Run cdbg to reset the incident position. Build the command as an	COMMENT
LOW	…ug-cli/scripts/reset-incident-position/reset-script.sh	186	# Step 4: Delete the original snapshot since cdbg created a new one	COMMENT
LOW	…ug-cli/scripts/overwrite-key/analyze-partition-keys.sh	243	# Step 2: Analyze the keys to find jumps	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	62	# Step 2: Determine snapshot to use	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	114	# Step 3: Create backups of all broker partition data to temporary location	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	165	# Step 4: Run cdbg to update key values on leader	COMMENT
LOW	debug-cli/scripts/overwrite-key/recovery-script.sh	200	# Step 5: Copy updated partition data to replicas	COMMENT
LOW⚡	.github/actions/flaky-tests-summary-comment/action.yml	60	// Step 1: Process and structure the flaky test data	COMMENT
LOW⚡	.github/actions/flaky-tests-summary-comment/action.yml	65	// Step 2: Generate and post the PR comment	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	9	// Step 1: Fetch any existing flaky test comment	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	12	// Step 2: Parse existing comment to extract historical data (including URLs)	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	16	// Step 3: Merge current and historical data, or generate first run data	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	20	// Step 4: Generate comment content (URLs from historical data will be reused)	COMMENT
LOW⚡	…s-summary-comment/src/flaky-tests-comment-generator.js	23	// Step 5: Create or update comment	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	254	// Step 1: Node1 upgrades to 1.1.0	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	255	// Step 2: Node2 upgrades to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	287	// Step 1: Both nodes upgrade simultaneously to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	317	// Step 2: Node2 starts upgrade (should upgrade while Node1 is paused)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	354	// Step 1: Node1 upgrades to 1.1.0	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	355	// Step 2: Node2 restarts (still 1.0.0) - should skip (version downgrade)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	385	// Step 1: Node1 starts upgrade to 1.1.0 (but pauses before storing version)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	386	// Step 2: Node2 restarts (still 1.0.0) - should skip (same version)	COMMENT
LOW⚡	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	387	// Step 3: Node1 completes upgrade to 1.1.0	COMMENT
LOW	…/camunda/search/schema/SchemaManagerConcurrencyIT.java	414	// Step 2: Node2 restarts with old version 1.0.0 (should skip - same version as schema)	COMMENT

AI Slop Vocabulary19 hits · 50 pts

Severity	File	Line	Snippet	Context
MEDIUM	…a/io/camunda/configuration/cluster/NodeIdProvider.java	159	* href="https://github.com/aws/aws-sdk-java-v2/blob/master/docs/BestPractices.md#utilize-timeout-configurations">..	COMMENT
MEDIUM	…a/io/camunda/configuration/cluster/NodeIdProvider.java	159	* href="https://github.com/aws/aws-sdk-java-v2/blob/master/docs/BestPractices.md#utilize-timeout-configurations">..	COMMENT
MEDIUM	…munda/configuration/data/primarystorage/backup/S3.java	127	* href="https://github.com/aws/aws-sdk-java-v2/blob/master/docs/BestPractices.md#utilize-timeout-configurations">...<	COMMENT
MEDIUM	…munda/configuration/data/primarystorage/backup/S3.java	127	* href="https://github.com/aws/aws-sdk-java-v2/blob/master/docs/BestPractices.md#utilize-timeout-configurations">...<	COMMENT
MEDIUM	…er/DashboardTile/OptimizeReportTile/comparison.test.ts	24	// [year, month, day] in UTC – timezone/DST-robust way to assert the calendar	COMMENT
LOW	…/scripts/stale-backport-scripts/resolve-slack-users.sh	62	exit 0 # Don't fail the pipeline, just return empty mapping	CODE
MEDIUM	…l/bpmn/impl/instance/zeebe/ZeebeCalledElementImpl.java	67	// Check both so presence detection is robust regardless of how it was written.	COMMENT
MEDIUM	…da/zeebe/exporter/ElasticsearchExporterClientTest.java	341	// cumulative size keeps the test robust against per-record size variation.	COMMENT
MEDIUM	…amunda/exporter/tasks/incident/IncidentUpdateTask.java	417	// so hopefully we can make sending notifications more robust then.	COMMENT
MEDIUM	zeebe/gateway-protocol/.spectral.yaml	2	# Replaces Vacuum for comprehensive OpenAPI linting and validation	COMMENT
LOW	.github/workflows/c8run-build.yaml	297	break # just use the first matching file	CODE
MEDIUM	.github/workflows/ci-build-distball-reusable.yml	70	# tree rather than filtering to io/camunda -- robust if the group id ever changes.	COMMENT
MEDIUM	.github/workflows/optimize-ci-build-reusable.yml	10	# This workflow is designed to provide a comprehensive, automated CI process that ensures code quality, handles secrets	COMMENT
MEDIUM	.github/workflows/ci.yml	2841	# Spectral provides comprehensive OpenAPI validation including:	COMMENT
LOW	.github/scripts/rc-delta-slack-summary.sh	129	# not signal, and just add noise to the digest.	COMMENT
MEDIUM	monorepo-docs-site/package-lock.json	17491	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz",	CODE
MEDIUM	load-tests/setup/newLoadTest.sh	12	# Internal plumbing hook for the golden-file test harness: lets callers enumerate versions without	COMMENT
MEDIUM	load-tests/setup/newLoadTest.sh	128	# Internal plumbing hook for the golden-file test harness's chart	COMMENT
MEDIUM	load-tests/setup/newLoadTest.sh	401	# callers (the golden-file test harness) that already primed the repo index	COMMENT

Redundant / Tautological Comments25 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	.ci/scripts/renovate-assignments.py	420	# Check if PR needs a reminder for assigned user	COMMENT
LOW	.ci/scripts/ci/setup-general-ut.sh	62	# Print the result	COMMENT
LOW	.ci/scripts/outdated-pr-scripts/process-pr.sh	16	# Check if running in dry-run mode	COMMENT
LOW	c8run/e2e_tests/physical_tenants_tests.sh	7	# Set TENANT_SECRET_VALUE to the value of C8RUN_E2E_SECRET stored with	COMMENT
LOW	debug-cli/scripts/identify-partition-brokers.sh	135	# Output results (for backward compatibility and piping)	COMMENT
LOW	debug-cli/scripts/detect-config.sh	10	# Check if namespace argument is provided	COMMENT
LOW	debug-cli/scripts/detect-config.sh	33	# Check if namespace exists	COMMENT
LOW	…ug-cli/scripts/overwrite-key/analyze-partition-keys.sh	261	# Check if this is a real overflow or just a gap in time	COMMENT
LOW	scripts/vscode-config-sync/sync-settings.sh	44	# Check if changes are needed	COMMENT
LOW	scripts/vscode-config-sync/sync-mcp.sh	47	# Check if changes are needed	COMMENT
LOW	.github/workflows/stale-backport-tracker.yml	360	# Check if the existing message is already pinned	COMMENT
LOW	.github/workflows/release-branch-notifications.yml	150	# Check if this is a merge commit (typically has "Merge pull request" in commit message)	COMMENT
LOW	.github/workflows/docs-preview-cleanup.yml	58	# Check if pr-preview directory exists	COMMENT
LOW	.github/workflows/docs-preview-cleanup.yml	78	# Check if this PR number exists in the open PRs list	COMMENT
LOW	.github/workflows/assign-urgency-to-issue.yml	405	# Check if urgency would change	COMMENT
LOW	.github/workflows/reject-updates-using-merge-commit.yml	46	# Check if any parent commit exists in the base branch	COMMENT
LOW	.github/workflows/docs-preview.yml	56	# Check if preview exists for cleanup on PR close	COMMENT
LOW	.github/workflows/check-licenses-active-issues.yml	104	# Add project to the list if it has issues	COMMENT
LOW	.github/scripts/add-release-comments.sh	177	# Check if release comment already exists	COMMENT
LOW	.github/actions/build-platform-docker/action.yml	141	# Check if current workflow run is related to a fork PR	COMMENT
LOW	.github/actions/setup-build/action.yml	130	# Check if current workflow run is related to a fork PR	COMMENT
LOW	.github/actions/setup-build/action.yml	136	# Check if DockerHub and DockerHub-readonly are both enabled	COMMENT
LOW	.github/actions/setup-maven-cache/action.yaml	89	# Check if PR contains a label to disable the cache	COMMENT
LOW	.github/actions/setup-npm-cache/action.yaml	36	# Check if PR contains a label to disable the cache	COMMENT
LOW	monorepo-docs-site/scripts/compare-wiki-content.sh	45	# Check if local file exists	COMMENT

Excessive Try-Catch Wrapping21 hits · 29 pts

Severity	File	Line	Snippet	Context
LOW	.ci/scripts/renovate-assignments.py	176	except Exception as e:	CODE
MEDIUM	.ci/scripts/renovate-assignments.py	177	print(f"Error dismissing {RENOVATE_APPROVE_BOT} approval on PR #{pr_number}: {e}")	CODE
LOW⚡	.ci/scripts/renovate-assignments.py	367	except Exception as e:	CODE
MEDIUM⚡	.ci/scripts/renovate-assignments.py	368	print(f"Error updating project status for PR #{pr_number}: {e}")	CODE
MEDIUM	.ci/scripts/renovate-assignments.py	158	def dismiss_renovate_approval(pr_number):	CODE
LOW	…ci/observe-build-status/junit-test-results-to-jsonl.py	44	except Exception as e:	CODE
MEDIUM	…ci/observe-build-status/junit-test-results-to-jsonl.py	45	print(f"Error processing {file_path}: {e}", file=sys.stderr)	CODE
LOW	…/ci-push-workflow-health/scripts/main_branch_health.py	52	except Exception:	CODE
LOW	.github/scripts/check-aws-opensearch-version.py	44	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	72	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	108	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	149	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	157	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	190	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	224	except Exception as exc:	CODE
LOW	.github/scripts/clean-up-aws-opensearch-indices.py	227	except Exception as exc:	CODE
LOW	…just-pom-for-license-analysis/strip-analysis-scopes.py	175	except Exception as exc: # keep going; a single bad POM must not abort the sweep	CODE
LOW	load-tests/loadtestctl/src/loadtestctl/verify/cli.py	156	except Exception as error: # noqa: BLE001	STRING
MEDIUM	load-tests/loadtestctl/src/loadtestctl/report/cli.py	320	print(f"Error: query document is invalid: {error}", file=sys.stderr)	CODE
MEDIUM	load-tests/loadtestctl/src/loadtestctl/report/cli.py	323	print(f"Error: {error}", file=sys.stderr)	CODE
MEDIUM	…ad-tests/loadtestctl/src/loadtestctl/prometheus/cli.py	42	print("Error: kubectl was not found on the PATH.", file=sys.stderr)	CODE

Example Usage Blocks16 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	optimize/docker/test/verify.sh	5	# Example usage:	COMMENT
LOW	.ci/docker/test/verify.sh	5	# Example usage:	COMMENT
LOW	…st-suite/config/docker-compose.waitstates-isolated.yml	9	# Usage:	COMMENT
LOW	…est-suite/config/docker-compose.analytics-isolated.yml	19	# Usage:	COMMENT
LOW	…ion-cluster-e2e-test-suite/scripts/start-verify-env.sh	12	# Usage:	COMMENT
LOW	debug-cli/scripts/identify-partition-brokers.sh	29	# Usage:	COMMENT
LOW	…/scripts/reset-incident-position/generate-reset-job.sh	40	# Usage:	COMMENT
LOW	…bug-cli/scripts/overwrite-key/generate-recovery-job.sh	30	# Usage:	COMMENT
LOW	…ug-cli/scripts/overwrite-key/analyze-partition-keys.sh	24	# Usage:	COMMENT
LOW	.github/terraform/aurora-replication-it/cleanup.sh	21	# Usage:	COMMENT
LOW	.github/workflows/add-release-comments-to-issues.yml	7	# Usage:	COMMENT
LOW	.github/workflows/create-urgent-hotfix-img.yml	11	# Usage:	COMMENT
LOW	.github/scripts/mergeback/triage-mergeback.sh	28	# Usage:	COMMENT
LOW	.github/scripts/ci-relevance/check.sh	9	# Usage:	COMMENT
LOW	.github/actions/sign-and-notarize/sign_and_notarize.sh	16	# Usage:	COMMENT
LOW	load-tests/docs/scripts/executeProfiling.sh	2	# Usage:	COMMENT

Slop Phrases9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	optimize/docker/test/verify.sh	88	# Extract the actual labels from the info - make sure to sort keys so we always have the same	COMMENT
LOW	.ci/docker/test/verify.sh	127	# Extract the actual labels from the info - make sure to sort keys so we always have the same	COMMENT
LOW	…amunda/zeebe/gateway/interceptors/InterceptorUtil.java	34	* {@link Thread#getContextClassLoader()} to load classes, you will need to make sure to set	COMMENT
LOW	.github/workflows/profile-load-test.yml	109	# If the job timeout is increased, make sure to also increase the Teleport	COMMENT
LOW	…e-89/values/camunda-platform-values-elasticsearch.yaml	10	# "camunda-platform-values-optimize-elasticsearch.yaml" file, make sure to keep	COMMENT
LOW	…e-87/values/camunda-platform-values-elasticsearch.yaml	10	# "camunda-platform-values-optimize-elasticsearch.yaml" file, make sure to keep	COMMENT
LOW	…-810/values/camunda-platform-values-elasticsearch.yaml	10	# "camunda-platform-values-optimize-elasticsearch.yaml" file, make sure to keep	COMMENT
LOW	…e-88/values/camunda-platform-values-elasticsearch.yaml	10	# "camunda-platform-values-optimize-elasticsearch.yaml" file, make sure to keep	COMMENT
LOW	…main/values/camunda-platform-values-elasticsearch.yaml	10	# "camunda-platform-values-optimize-elasticsearch.yaml" file, make sure to keep	COMMENT

Deep Nesting13 hits · 12 pts

Severity	File	Line	Context
LOW	.ci/scripts/renovate-assignments.py	370	CODE
LOW	…ci/observe-build-status/junit-test-results-to-jsonl.py	29	CODE
LOW	.github/scripts/gradle/compare-module-deps.py	112	CODE
LOW	.github/scripts/gradle/compare-module-deps.py	564	CODE
LOW	.github/scripts/gradle/compare-module-deps.py	637	CODE
LOW	.github/scripts/gradle/compare-dist.py	151	CODE
LOW	.github/scripts/oas-breaking-change-check/check.py	134	CODE
LOW	.github/scripts/oas-breaking-change-check/check.py	262	CODE
LOW	…tions/detect-new-flaky-tests/detect_new_flaky_tests.py	89	CODE
LOW	…tions/detect-new-flaky-tests/detect_new_flaky_tests.py	343	CODE
LOW	…tions/detect-new-flaky-tests/detect_new_flaky_tests.py	686	CODE
LOW	…just-pom-for-license-analysis/strip-analysis-scopes.py	109	CODE
LOW	…just-pom-for-license-analysis/strip-analysis-scopes.py	138	CODE

Empty Error Handlers2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	.github/scripts/unskip-plan-cell.py	63	except ValueError:	CODE
HIGH	.github/scripts/clean-up-aws-opensearch-indices.py	147	except NotFoundError:	CODE

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…g/cli/state/StateResetIncidentPositionCommandTest.java	116	// then - the value is written as requested, but a warning is logged	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	load-tests/README.md	214	echo "<YOUR_TOKEN>" > ~/.grafana-sa-token	CODE

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…c/modules/components/DownloadButton/DownloadButton.tsx	133	async function getData(url: string) {	CODE
LOW	…chestration-cluster-webapp/public/mockServiceWorker.js	144	async function handleRequest(event, requestId) {	CODE
LOW	operate/client/public/mockServiceWorker.js	124	async function handleRequest(event, requestId, requestInterceptedAt) {	CODE

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…/ci-push-workflow-health/scripts/main_branch_health.py	2		CODE
LOW	.github/scripts/gradle/compare-module-deps.py	45		CODE

Modern Structural Boilerplate1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW⚡	…tions/detect-new-flaky-tests/detect_new_flaky_tests.py	675	def set_output(name: str, value: str) -> None:	CODE

camunda/camunda

Open-Source Code Quality, Security and Technical Debt Review