Where data access meets operational intelligence
This report summarizes scanner evidence for clidey/whodb, a Go project with 5,048 GitHub stars. SynthScan examined 470,244 lines of code across 1534 source files, recording 776 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 2.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 611 finding(s).
Are imports declared and package/API names verified? 82 finding(s).
Are wrappers, guards, and repeated structures necessary? 370 finding(s).
Which changes need focused human review? 776 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 776 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/docs/ssl.md | 121 | ### Step 1: Declare SSL Modes on the Source Entry | COMMENT |
| LOW | .agents/docs/ssl.md | 137 | ### Step 2: Parse SSL Config | COMMENT |
| LOW | .agents/docs/ssl.md | 203 | ### Step 3: Build and Apply TLS Config | COMMENT |
| LOW | .agents/docs/ssl.md | 231 | ### Step 4: Implement GetSSLStatus | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 82 | ### Step 1: Find the design assets | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 94 | ### Step 2: Auto-extract what can be auto-extracted | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 116 | ### Step 3: Ask the user for qualitative language | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 128 | ### Step 4: Write DESIGN.md | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 342 | ### Step 5: Confirm and refine | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 354 | ### Step 1: Route through new-work's workshop | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 362 | ### Step 2: Write seed DESIGN.md | COMMENT |
| LOW | .agents/skills/impeccable/reference/document.md | 385 | ### Step 3: Confirm | COMMENT |
| LOW | .agents/skills/impeccable/reference/extract.md | 5 | ## Step 1: Discover the Design System | COMMENT |
| LOW | .agents/skills/impeccable/reference/extract.md | 11 | ## Step 2: Identify Patterns | COMMENT |
| LOW | .agents/skills/impeccable/reference/extract.md | 24 | ## Step 3: Plan Extraction | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/extract.md | 36 | ## Step 4: Extract & Enrich | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/extract.md | 44 | ## Step 5: Migrate | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/extract.md | 53 | ## Step 6: Document | COMMENT |
| LOW | .agents/skills/impeccable/reference/doctor.md | 13 | ## Step 1: Run the pass | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/doctor.md | 25 | ## Step 2: Act by severity | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/doctor.md | 35 | ## Step 3: Deprecated fields are binding | COMMENT |
| LOW⚡ | .agents/skills/impeccable/reference/doctor.md | 39 | ## Step 4: Do not overclaim on truth drift | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 5 | ## Step 1: Load current state | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 17 | ## Step 2: Explore the project | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 25 | ## Step 3: Interview for product truth | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 56 | ## Step 4: Write PRODUCT.md | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 110 | ## Step 5: Record workflow defaults | COMMENT |
| LOW | .agents/skills/impeccable/reference/init.md | 120 | ## Step 6: Wrap up or resume | COMMENT |
| LOW | .agents/skills/impeccable/reference/generate.md | 15 | ## Step 1: Parse the request | COMMENT |
| LOW | .agents/skills/impeccable/reference/generate.md | 39 | ## Step 2: Reuse the page, then start | COMMENT |
| LOW | .agents/skills/impeccable/reference/generate.md | 70 | ## Step 3: Generate | COMMENT |
| LOW | .agents/skills/impeccable/reference/generate.md | 86 | ## Step 4: Accept and close | COMMENT |
| LOW | .agents/skills/apollo-mcp-server/SKILL.md | 25 | ### Step 1: Install | COMMENT |
| LOW | .agents/skills/apollo-mcp-server/SKILL.md | 35 | ### Step 2: Configure | COMMENT |
| LOW | .agents/skills/apollo-mcp-server/SKILL.md | 70 | ### Step 3: Connect | COMMENT |
| LOW | .agents/skills/apollo-server/SKILL.md | 24 | ### Step 1: Install | COMMENT |
| LOW | .agents/skills/apollo-server/SKILL.md | 36 | ### Step 2: Define Schema | COMMENT |
| LOW | .agents/skills/apollo-server/SKILL.md | 51 | ### Step 3: Write Resolvers | COMMENT |
| LOW | .agents/skills/apollo-server/SKILL.md | 64 | ### Step 4: Start Server | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 27 | ## Step 1: Version Selection | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 56 | ## Step 2: Environment Selection | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 67 | ## Step 3: Feature Selection | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 84 | ## Step 4: Gather Parameters | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 186 | ## Step 5: Generate Config | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 193 | ## Step 6: Validate | COMMENT |
| LOW | .agents/skills/apollo-router/SKILL.md | 232 | ## Step 7: Conditional Next Steps Handoff | COMMENT |
| LOW | .agents/skills/apollo-router-plugin-creator/SKILL.md | 122 | ### Step 1: Create Plugin File | COMMENT |
| LOW | .agents/skills/apollo-router-plugin-creator/SKILL.md | 138 | ### Step 2: Define Configuration Struct | COMMENT |
| LOW | .agents/skills/apollo-router-plugin-creator/SKILL.md | 151 | ### Step 3: Define Plugin Struct | COMMENT |
| LOW | .agents/skills/apollo-router-plugin-creator/SKILL.md | 160 | ### Step 4: Implement Plugin Trait | COMMENT |
| LOW | .agents/skills/apollo-router-plugin-creator/SKILL.md | 177 | ### Step 5: Add Service Hooks | COMMENT |
| LOW⚡ | .agents/skills/apollo-router-plugin-creator/SKILL.md | 196 | ### Step 6: Register Plugin | COMMENT |
| LOW⚡ | .agents/skills/apollo-router-plugin-creator/SKILL.md | 204 | ### Step 7: Add Module to mod.rs | COMMENT |
| LOW⚡ | .agents/skills/apollo-router-plugin-creator/SKILL.md | 212 | ### Step 8: Configure in YAML | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 27 | ### Step 1: Create Apollo Client Configuration | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 54 | ### Step 2: Use in Server Components | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 88 | ### Step 1: Create Apollo Wrapper Component | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 127 | ### Step 2: Wrap Root Layout | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 151 | ### Step 3: Use Apollo Client Hooks in Client Components | COMMENT |
| LOW | …/skills/apollo-client/references/integration-nextjs.md | 173 | ### Step 1: Use PreloadQuery in Server Components | COMMENT |
| 70 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | frontend/src/config/sidebar-registry.ts | 40 | export function getRegisteredSidebarItems(): RegisteredSidebarItem[] { | CODE |
| LOW | frontend/src/config/ai-provider-catalog.ts | 42 | export function getAvailableAIProviderCatalog(): AIProviderCatalogEntry[] { | CODE |
| LOW | frontend/src/config/ai-provider-catalog.ts | 47 | export function findAIProviderCatalogEntry(id: string): AIProviderCatalogEntry | undefined { | CODE |
| LOW | frontend/src/config/ai-persistence.ts | 37 | export function registerAIPersistenceHandler(handler: AIPersistenceHandler): void { | CODE |
| LOW⚡ | frontend/src/config/route-registry.ts | 74 | export function getRegisteredScopedRoutes(): RegisteredRoute[] { | CODE |
| LOW⚡ | frontend/src/config/route-registry.ts | 78 | export function getRegisteredUnscopedRoutes(): RegisteredRoute[] { | CODE |
| LOW⚡ | frontend/src/config/route-registry.ts | 82 | export function getRegisteredPublicRoutes(): RegisteredRoute[] { | CODE |
| LOW | frontend/src/config/source-types.ts | 466 | export function sourceObjectSupportsAction( | CODE |
| LOW | frontend/src/config/source-types.ts | 512 | export function sourceDefaultObjectIsTabular( | CODE |
| LOW | frontend/src/config/source-types.ts | 620 | function withRegisteredSourceTypes( | CODE |
| LOW | frontend/src/config/source-types.ts | 733 | export function getDefaultSourceObjectType( | CODE |
| LOW | frontend/src/config/ai-provider-registry.ts | 31 | export function registerAIProviderOverrides(o: AIProviderOverrides): void { | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 100 | export function supportsDatabaseFieldOptions( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 115 | export function tryParseSourceConnectionString( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 269 | export function canSubmitStandardConnectionForm( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 302 | export function canSubmitCustomConnectionForm( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 328 | export function getPromotedConnectionFieldKeys( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 378 | export function buildSourceAdvancedSectionState( | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 416 | function looksLikeConnectionString(input: string): boolean { | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 425 | function normalizeConnectionFieldKey(key: string): string { | CODE |
| LOW | frontend/src/utils/source-connection-form.ts | 456 | function singleEndpointFromAddress(address: ConnparseAddress): { hostName: string; port: number | null } | null { | CODE |
| LOW | frontend/src/utils/source-column-types.ts | 26 | export function getSourceColumnTypeDefinitions(sourceType: string): TypeDefinition[] { | CODE |
| LOW | frontend/src/utils/source-column-types.ts | 58 | export function getSourceColumnTypeAliasMap(sourceType: string): Record<string, string> { | CODE |
| LOW | frontend/src/utils/source-refs.ts | 164 | export function buildSourceParentObjectRef( | CODE |
| LOW | frontend/src/utils/source-credentials.ts | 92 | export function createProfilePayloadFromSourceProfile( | CODE |
| LOW | frontend/src/utils/auth-headers.ts | 34 | function mapSourceCredentialValues(values: readonly SourceCredentialValueLike[] | undefined): Record<string, string> { | CODE |
| LOW | frontend/src/utils/source-session-metadata-cache.ts | 49 | function createInitialSourceSessionMetadataState(): SourceSessionMetadataState { | CODE |
| LOW⚡ | frontend/src/utils/source-session-metadata-cache.ts | 87 | export function getSourceSessionMetadataState(): SourceSessionMetadataState { | CODE |
| LOW⚡ | frontend/src/utils/source-session-metadata-cache.ts | 96 | export function useSourceSessionMetadataState(): SourceSessionMetadataState { | CODE |
| LOW⚡ | frontend/src/utils/source-session-metadata-cache.ts | 105 | export function setSourceSessionMetadataLoading(loading: boolean): void { | CODE |
| LOW | frontend/src/utils/source-session-metadata-cache.ts | 138 | export function clearSourceSessionMetadata(): void { | CODE |
| LOW | frontend/src/utils/source-session-metadata-cache.ts | 148 | export function shouldRefreshSourceSessionMetadata(currentSourceType: string): boolean { | CODE |
| LOW | frontend/src/utils/source-contract-flags.ts | 52 | export function resolveSourceContractFlags( | CODE |
| LOW | frontend/src/components/source-connection-fields.tsx | 356 | function PrimaryAdvancedValueField({ | CODE |
| LOW | frontend/src/components/source-connection-fields.tsx | 405 | export function buildDatabaseFieldOptions(values: readonly string[] | null | undefined): SourceConnectionFieldOption[] { | CODE |
| LOW | frontend/src/components/heroicons.tsx | 103 | export function registerHeroiconOverrides(overrides: Record<string, any>) { | CODE |
| LOW | frontend/src/components/table.tsx | 239 | export function getInputPropsForColumnType(rawType: string): { | CODE |
| LOW | frontend/src/hooks/useSourceCatalog.ts | 123 | export function useResolvedSourceConnector( | CODE |
| LOW | …ontend/src/pages/storage-unit/explore-storage-unit.tsx | 149 | function buildMongoScratchpadQuery(collectionName: string): string { | CODE |
| LOW | …ontend/src/pages/storage-unit/explore-storage-unit.tsx | 156 | function buildRedisScratchpadQuery(keyName: string): string { | CODE |
| LOW | …d/src/pages/storage-unit/create-source-object-card.tsx | 120 | function supportsCheckValuesForType(typeDef: CreationTypeDefinition | undefined): boolean { | CODE |
| LOW | …d/src/pages/storage-unit/create-source-object-card.tsx | 128 | function supportsCheckRangeForType(typeDef: CreationTypeDefinition | undefined): boolean { | CODE |
| LOW | frontend/src/pages/raw-execute/raw-execute.tsx | 111 | export function registerRawExecuteExtensions(ext: { | CODE |
| LOW | frontend/src/store/migrations.ts | 28 | export function migrateAIModelsFromDatabase(): void { | CODE |
| LOW | .agents/docs/documentation.md | 82 | export function migrateAIModelsFromDatabase(): void { | CODE |
| LOW | .agents/docs/documentation.md | 87 | export function migrateAIModelsFromDatabase(): void { // NO - exported without JSDoc | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 5066 | function isSvelteComponentManifestPath(filePath) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 5070 | function isFrameworkComponentPreviewMode(mode) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 5074 | function parseOriginalMarkupElement(originalMarkup) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 5080 | function normalizeElementClassName(el) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 7424 | function declineAgentTargetUnresolvable(msg) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 7431 | function reportAgentTargetUnresolvable(msg, error) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 7439 | function watchAgentTargetResolution(msg, lastError) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 9672 | function restoreFromActiveSessions(activeSessions, reason) { | CODE |
| LOW⚡ | .agents/skills/impeccable/scripts/live-browser.js | 9688 | function recoverMissedGenerationCompletion(activeSessions) { | CODE |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 384 | function shouldShowHighlightTagTooltip() { | CODE |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 929 | function buildAnnotationsForCapture(rect, snapshot) { | CODE |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 969 | function stripManualEditRuntimeState(root) { | CODE |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 1057 | function contextElementForManualEdit(selectedEl, rows, ops) { | CODE |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 1081 | function isUsefulManualEditContext(candidate, leafEl, editedTexts) { | CODE |
| 227 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/src/source/contract_test.go | 320 | // ─── ValidateExecutionContract ────────────────────────────────────────────── | COMMENT |
| MEDIUM | core/src/source/contract_test.go | 397 | // ─── ValidateScriptExecutionSupported ─────────────────────────────────────── | COMMENT |
| MEDIUM | core/src/source/contract_test.go | 459 | // ─── ValidateContract (integration) ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 82 | // ── Global ─────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 88 | // ── Navigation (platform-variant) ──────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 94 | // ── Table Navigation ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 104 | // ── Selection ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 110 | // ── Table Actions ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | frontend/src/utils/shortcuts.ts | 120 | // ── Editor ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v1/production.yaml | 1 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v1/production.yaml | 6 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v1/production.yaml | 31 | # ── CORS (v1 flat schema) ────────────────────────────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v1/production.yaml | 46 | # ── Authentication (v1: issuer is singular string) ───────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v1/production.yaml | 68 | # ── Traffic Shaping ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v1/production.yaml | 78 | # ── Header Propagation ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v1/production.yaml | 85 | # ── APQ ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v1/production.yaml | 93 | # ── Telemetry ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v1/development.yaml | 1 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v1/development.yaml | 5 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v1/development.yaml | 26 | # ── CORS (v1 flat schema — permissive for development) ───────── | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v1/development.yaml | 38 | # ── Header Propagation ───────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v1/development.yaml | 45 | # ── Telemetry (human-readable logs, no exporters) ────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 1 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 4 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 29 | # ── CORS (v2 policies schema) ────────────────────────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 45 | # ── Authentication (v2: issuers is plural, array) ────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 57 | # ── Operation Limits ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …ents/skills/apollo-router/templates/v2/production.yaml | 68 | # ── Traffic Shaping ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v2/production.yaml | 80 | # ── Header Propagation ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v2/production.yaml | 87 | # ── APQ ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ents/skills/apollo-router/templates/v2/production.yaml | 95 | # ── Telemetry ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v2/development.yaml | 1 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v2/development.yaml | 5 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v2/development.yaml | 26 | # ── CORS (v2 wildcard dev mode) ───────────────────────────────── | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v2/development.yaml | 38 | # ── Header Propagation ───────────────────────────────────────── | COMMENT |
| MEDIUM | …nts/skills/apollo-router/templates/v2/development.yaml | 45 | # ── Telemetry (human-readable logs, no exporters) ────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 135 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 137 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 164 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 166 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 216 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 218 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 252 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 254 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 283 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 285 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 297 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 299 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 332 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/pkg/analytics/analytics.go | 334 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/python/src/whodb/_transport_ipc.py | 112 | # ── Per-operation adapters ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | dev/run-e2e.sh | 49 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | dev/run-e2e.sh | 51 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | dev/run-e2e.sh | 53 | # ============================================================================ | COMMENT |
| MEDIUM | dev/certs/generate.sh | 119 | # ============================================ | COMMENT |
| MEDIUM | dev/certs/generate.sh | 121 | # ============================================ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tidy-go-mods.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | snapcraft.yaml | 1 | # Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/gqlgen.yml | 1 | # Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/gqlgen.yml | 41 | # omit_template_comment: false | COMMENT |
| LOW | core/gqlgen.yml | 61 | # Optional: turn off to make struct-type struct fields not use pointers | COMMENT |
| LOW | core/tools/tools.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/baml_client/functions_parse.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/functions.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/runtime.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/baml_source_map.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/functions_build_request_stream.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/functions_build_request.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/functions_parse_stream.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/functions_stream.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/type_map.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/stream_types/type_aliases.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/stream_types/utils.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/stream_types/unions.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/stream_types/classes.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/types/enums.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/types/type_aliases.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/types/utils.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/types/unions.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/types/classes.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/type_builder/enums.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/type_builder/type_builder.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/baml_client/type_builder/classes.go | 1 | // ---------------------------------------------------------------------------- | COMMENT |
| LOW | core/src/src_test.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/llm/llm_instance.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/plugins/common_test.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/plugins/gorm/plugin.go | 161 | COMMENT | |
| LOW | core/src/plugins/redis/delete.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/plugins/postgres/graph.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/plugins/sqlite3/graph.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/plugins/mysql/graph.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/providers/provider.go | 21 | // platforms like AWS. | COMMENT |
| LOW | core/src/providers/azure/provider.go | 21 | // that existing WhoDB plugins understand. | COMMENT |
| LOW | core/src/providers/gcp/provider.go | 21 | // The provider acts as a "credential factory" — it finds GCP databases and produces | COMMENT |
| LOW | core/src/providers/aws/provider.go | 21 | // The provider acts as a "credential factory" - it finds AWS databases and produces | COMMENT |
| LOW | core/src/common/context.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/sqlguard/classify.go | 61 | // Classification is the verdict for one statement or command. | COMMENT |
| LOW | core/src/aws/config.go | 21 | COMMENT | |
| LOW | core/src/engine/engine_test.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/router/playground.go | 1 | // Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | core/src/router/router.go | 401 | log.LogAccess(r.Method, r.URL.Path, sw.statusCode, time.Since(start), r.Host, r.RemoteAddr) | COMMENT |
| LOW | core/src/router/router.go | 441 | // - X-Content-Type-Options: stop MIME sniffing | COMMENT |
| LOW | frontend/codegen.yml | 1 | # Copyright 2025 Clidey, Inc. | COMMENT |
| LOW | frontend/pnpm-workspace.yaml | 21 | # @graphql-tools/executor-http 1.3.3 lost provenance attestation; published by | COMMENT |
| LOW | frontend/src/utils/shortcuts.ts | 161 | // remaining modifier keys that weren't explicitly required. | COMMENT |
| LOW | .agents/docs/aws-integration.md | 141 | registry.Register(provider) | COMMENT |
| LOW | .agents/skills/graphql-schema/references/pagination.md | 321 | # orderBy: { field: CREATED_AT, direction: DESC } | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 141 | // must never regress: a `browser_resumed`/behind checkpoint re-broadcasts an | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 441 | // Annotation overlay (comment pins + kinpaku strokes) | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 3101 | // | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 6681 | if (visual.length === 1) return visual[0]; | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 6981 | // | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 7261 | COMMENT | |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 7341 | function agentTargetOverlayGone() { | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 7381 | // lease), else the word it last gave. The server replays pending targets | COMMENT |
| LOW | .agents/skills/impeccable/scripts/live-browser.js | 7401 | } | COMMENT |
| 67 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cli/internal/sdkgen/testdata/python.golden.py | 0 | compute the current actor's readable fields and allowed actions. | STRING |
| HIGH | sdk/packages/python/src/whodb/ontology.py | 0 | compute the current actor's readable fields and allowed actions. | STRING |
| HIGH | sdk/packages/python/src/whodb/_async_ontology.py | 0 | compute the current actor's readable fields and allowed actions. | STRING |
| HIGH | cli/internal/sdkgen/testdata/python.golden.py | 0 | dry-run a named action without persisting records, effects, or events. | STRING |
| HIGH | sdk/packages/python/src/whodb/ontology.py | 0 | dry-run a named action without persisting records, effects, or events. | STRING |
| HIGH | sdk/packages/python/src/whodb/_async_ontology.py | 0 | dry-run a named action without persisting records, effects, or events. | STRING |
| HIGH | cli/internal/sdkgen/testdata/python.golden.py | 0 | execute a named action with full behavior enforcement. | STRING |
| HIGH | sdk/packages/python/src/whodb/ontology.py | 0 | execute a named action with full behavior enforcement. | STRING |
| HIGH | sdk/packages/python/src/whodb/_async_ontology.py | 0 | execute a named action with full behavior enforcement. | STRING |
| HIGH | cli/internal/sdkgen/testdata/python.golden.py | 0 | list recent named-action executions for one record. | STRING |
| HIGH | sdk/packages/python/src/whodb/ontology.py | 0 | list recent named-action executions for one record. | STRING |
| HIGH | sdk/packages/python/src/whodb/_async_ontology.py | 0 | list recent named-action executions for one record. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cli/pkg/mcp/server.go | 1863 | # Step 1: What databases are available? | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 1866 | # Step 2: Get all tables and their columns in one call | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 1872 | # Step 3: Query with full type awareness | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2037 | # Step 1: Check table structure | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2040 | # Step 2: Sample raw data | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2043 | # Step 3: Check for NULLs | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2046 | # Step 4: Verify JOIN data exists | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2065 | # Step 1: Get columns with FK info | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2069 | # Step 2: Verify the relationship | COMMENT |
| LOW⚡ | cli/pkg/mcp/server.go | 2073 | # Step 3: Check cardinality | COMMENT |
| LOW | .github/workflows/_build-apple.yml | 553 | # Step 1: Embed provisioning profile (per Wails docs) | COMMENT |
| LOW | .github/workflows/_build-apple.yml | 564 | # Step 2: Code sign with MAS certificate (per Wails docs) | COMMENT |
| LOW | .github/workflows/_build-apple.yml | 636 | # Step 3: Verify signature | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 662 | # Step 1: Get app ID | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 666 | # Step 2: Get or create version | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 670 | # Step 3: Wait for build to be processed | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 674 | # Step 4: Associate build with version | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 677 | # Step 5: Set release notes | COMMENT |
| LOW⚡ | .github/scripts/appstore-connect.sh | 680 | # Step 6: Submit for review (using new reviewSubmissions API) | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 512 | # Step 1: Create a review submission for the app | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 564 | # Step 2: Add the app store version to the review submission items | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 609 | # Step 3: Submit the review submission | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 82 | # Step 1: Build test binary | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 95 | # Step 2: Setup SQLite database | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 117 | # Step 3: Start Docker services | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 148 | # Step 4: Start backend server | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 183 | # Step 5: Start frontend dev server | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 214 | # Step 6: Run screenshot tests | COMMENT |
| LOW | dev/run-screenshot-tests.sh | 231 | # Step 7: Display results | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/internal/sdkgen/testdata/python.golden.py | 4 | CODE | |
| LOW | sdk/packages/python/scripts/conformance.py | 20 | CODE | |
| LOW | sdk/packages/python/src/whodb/service_accounts.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/functions.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/transforms.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/sharing.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/_errors.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/_manifest_check.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/client.py | 8 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 11 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 11 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 12 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 22 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 22 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 24 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 24 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 24 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 25 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 26 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 26 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 27 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 28 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 29 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 30 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 31 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 32 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 32 | CODE | |
| LOW | sdk/packages/python/src/whodb/__init__.py | 33 | CODE | |
| LOW | sdk/packages/python/src/whodb/_transport.py | 8 | CODE | |
| LOW | sdk/packages/python/src/whodb/_transport_ipc.py | 28 | CODE | |
| LOW | sdk/packages/python/src/whodb/_hydrate.py | 7 | CODE | |
| LOW | sdk/packages/python/src/whodb/dataset.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/_pagination.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/ontology.py | 19 | CODE | |
| LOW | sdk/packages/python/src/whodb/versions.py | 6 | CODE | |
| LOW | sdk/packages/python/src/whodb/_async_ontology.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/lineage.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/_polling.py | 17 | CODE | |
| LOW | sdk/packages/python/src/whodb/source.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/_auth.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/_generated/types.py | 3 | CODE | |
| LOW | sdk/packages/python/src/whodb/_generated/operations.py | 3 | CODE | |
| LOW | dev/translate/fix_placeholders.py | 11 | CODE | |
| LOW | dev/translate/check_placeholders.py | 8 | CODE | |
| LOW | dev/translate/detect.py | 16 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/src/plugins/sqlite3/whodb-sample.sql | 278 | ('admin_user', 'admin@example.com', 'adminpass1'); | CODE |
| LOW | frontend/src/pages/chat/chat.tsx | 1390 | placeholder={t('placeholder')} | CODE |
| LOW | cli/internal/database/audit_test.go | 54 | mgr.ExecuteQuery("INSERT INTO users VALUES (4, 'Diana', 'diana@test.com', '555-0100', 1)") | CODE |
| LOW | cli/internal/database/integration_test.go | 63 | _, err = mgr.ExecuteQuery("INSERT INTO test_users (name, email) VALUES ('John Doe', 'john@example.com')") | CODE |
| LOW | cli/internal/platform/generic_write_specs.go | 379 | Examples: []string{`{"orgId":"org_123","email":"user@example.com","relation":"member"}`}, | CODE |
| LOW | cli/internal/platform/generic_write_specs.go | 409 | Examples: []string{`{"emails":["user@example.com"],"role":"viewer","resourceType":"project","resourceId":"project_123" | CODE |
| LOW⚡ | cli/pkg/mcp/platform_usability_test.go | 105 | "email": "user@example.com", "relation": "member", | CODE |
| LOW⚡ | cli/pkg/mcp/platform_usability_test.go | 115 | "orgId": "org-1", "email": "user@example.com", "relation": "member", | CODE |
| LOW⚡ | cli/pkg/mcp/platform_usability_test.go | 120 | "emails": []any{"user@example.com"}, "role": "viewer", "resourceType": "project", | CODE |
| LOW⚡ | cli/pkg/mcp/platform_usability_test.go | 125 | "emails": []any{"user@example.com"}, "role": "viewer", "resourceType": "project", "resourceId": "project-1", | CODE |
| LOW | dev/translate/checksums.json | 111 | "placeholder": "a3ac86310516", | CODE |
| LOW | dev/translate/checksums.json | 664 | "placeholder": "5bf603412577", | CODE |
| LOW | dev/translate/checksums.json | 1298 | "placeholder": "517701ec493b", | CODE |
| LOW | dev/translate/checksums.json | 5643 | "placeholder": "0afd1f4a5a08", | CODE |
| LOW | dev/sample-data/clickhouse/data.sql | 107 | (3, 'admin_user', 'admin@example.com', 'adminpass', now()); | CODE |
| LOW | dev/sample-data/mariadb/data.sql | 157 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/yugabytedb/data.sql | 101 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/opensearch/upload.sh | 135 | curl -X POST $CURL_OPTS "$OPENSEARCH_URL/users/_doc/3" -H "Content-Type: application/json" -d '{"username": "admin_user" | CODE |
| LOW | dev/sample-data/postgres/data.sql | 108 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/tidb/data.sql | 90 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/sqlite3/data.sql | 139 | ('admin_user', 'admin@example.com', 'adminpass1'); | CODE |
| LOW | dev/sample-data/mysql/data.sql | 155 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/mysql/data842.sql | 155 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/duckdb/data.sql | 116 | ('admin_user', 'admin@example.com', 'adminpass1'); | CODE |
| LOW | dev/sample-data/mongo/data.js | 40 | { username: "admin_user", email: "admin@example.com", password: "adminpass", created_at: new Date() } | CODE |
| LOW | dev/sample-data/cockroachdb/data.sql | 97 | ('admin_user', 'admin@example.com', 'adminpass'); | CODE |
| LOW | dev/sample-data/questdb/data.sql | 36 | (3, 'admin_user', 'admin@example.com', 'adminpass1', '2024-01-03T12:00:00.000000Z'), | CODE |
| LOW | dev/sample-data/questdb/data.sql | 108 | (1, 1, '123 Main St', 'New York', 'NY', '10001', 'USA', '2024-01-01T12:00:00.000000Z'), | CODE |
| LOW | dev/sample-data/elasticsearch/upload.sh | 140 | curl -X POST $CURL_OPTS "$ELASTIC_URL/users/_doc/3" -H "Content-Type: application/json" -d '{"username": "admin_user", " | CODE |
| LOW | dev/sample-data/elasticsearch/upload922.sh | 122 | curl -X POST "$ELASTIC_URL/users/_doc/3" -H "Content-Type: application/json" -d '{"username": "admin_user", "email": "ad | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | core/baml_client/baml_source_map.go | 20 | "sql_chat.baml": "// SQL Query Generation for WhoDB\n// This BAML schema defines structured SQL generation using AI m | CODE |
| MEDIUM⚡ | .agents/skills/impeccable/scripts/live-browser.js | 9679 | // Self-heal on SSE (re)connect. The preflight scaffold write triggers a | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 6246 | // the fetched source still shows only the preflight scaffold, before the | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 6349 | // Mid-generation the source legitimately holds a scaffold wrapper | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 6358 | // Generation finished, yet the read shows only the scaffold: the | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 6423 | // scaffold with no variants after retries is a failed generation. | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 6986 | // scaffolded into. A plain first match can then pin an empty scaffold while | COMMENT |
| MEDIUM | .agents/skills/impeccable/scripts/live-browser.js | 9346 | // Vite can coalesce rapid scaffold/carbonize writes and leave the last | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/install/install.sh | 87 | # Check if a command exists | COMMENT |
| LOW | cli/install/install.sh | 168 | # Check if install directory is in PATH | COMMENT |
| LOW | .github/workflows/_deploy-apple.yml | 199 | # Check if we have the installer cert (don't fail if not found) | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 54 | # Check if current token is still valid (with 60s buffer) | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 303 | # Check if version is in an editable state | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 396 | # Check if build exists but is still processing | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 542 | # Check if there's already a review submission in progress | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 633 | # Check if the response indicates success despite no state | COMMENT |
| LOW | .github/actions/calculate-version/action.yml | 147 | # Check if explicit version was provided | COMMENT |
| LOW | dev/copy-screenshots.sh | 35 | # Check if source directory exists | COMMENT |
| LOW | dev/setup-e2e.sh | 24 | # Check if this is EE-only mode (passed from run-e2e.sh) | COMMENT |
| LOW | dev/setup-e2e.sh | 249 | # Check if SQLite database exists and has the expected tables | COMMENT |
| LOW | dev/setup-e2e.sh | 251 | # Check if database has expected structure (check for a key table) | COMMENT |
| LOW | dev/setup-e2e.sh | 581 | # Check if the server is ready to handle requests (not just listening) | COMMENT |
| LOW | dev/run-cli-tests.sh | 128 | # Check if Docker is available | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/hooks/changed-files.py | 23 | except Exception: | CODE |
| MEDIUM | .agents/hooks/changed-files.py | 20 | def main() -> int: | CODE |
| LOW | sdk/packages/python/scripts/conformance.py | 141 | except Exception as error: # noqa: BLE001 — fixture harness | CODE |
| LOW | sdk/packages/python/src/whodb/client.py | 129 | except Exception as error: # noqa: BLE001 — re-raise, possibly converted | CODE |
| LOW | sdk/packages/python/src/whodb/client.py | 280 | except Exception as error: # noqa: BLE001 | CODE |
| LOW | .github/workflows/security.yml | 104 | except Exception as e: | CODE |
| LOW | .github/workflows/security.yml | 148 | except Exception as e: | CODE |
| LOW | .github/workflows/security.yml | 176 | except Exception as e: | CODE |
| MEDIUM | .github/workflows/security.yml | 83 | def parse_gosec(filename): | CODE |
| MEDIUM | .github/workflows/security.yml | 107 | def parse_govulncheck(filename): | CODE |
| MEDIUM | .github/workflows/security.yml | 151 | def parse_pnpm_audit(filename): | CODE |
| LOW | .github/scripts/appstore-connect.sh | 85 | except Exception as e: | CODE |
| LOW | dev/aws-test-stack.yml | 303 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CONTRIBUTING.md | 26 | - Your PR description is written by you, not generated by AI | CODE |
| HIGH | .github/PULL_REQUEST_TEMPLATE.md | 49 | <!-- - [ ] The PR description above was written by me, not generated by AI --> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v1/development.yaml | 4 | # This file is for explicit dev configuration without --dev flag. | COMMENT |
| MEDIUM⚡ | …nts/skills/apollo-router/templates/v2/development.yaml | 4 | # This file is for explicit dev configuration without --dev flag. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | core/baml_client/baml_source_map.go | 20 | "sql_chat.baml": "// SQL Query Generation for WhoDB\n// This BAML schema defines structured SQL generation using AI m | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/install/install.sh | 5 | # Usage: | COMMENT |
| LOW | .github/scripts/appstore-connect.sh | 27 | # Usage: | COMMENT |
| LOW | dev/run-e2e.sh | 20 | # Usage: | COMMENT |
| LOW | dev/translate/run.sh | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | core/baml_client/baml_source_map.go | 18 | "clients.baml": "// Learn more about clients at https://docs.boundaryml.com/docs/snippets/clients/overview\n//\n// N | CODE |
| MEDIUM | sdk/packages/python/scripts/conformance.py | 141 | except Exception as error: # noqa: BLE001 — fixture harness | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/packages/python/scripts/conformance.py | 90 | CODE | |
| LOW | sdk/packages/python/src/whodb/ontology.py | 34 | CODE | |
| LOW | dev/translate/fix_placeholders.py | 48 | CODE | |
| LOW | dev/translate/detect.py | 76 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/packages/python/src/whodb/__init__.py | 37 | __all__ = [ | CODE |
| LOW | sdk/packages/python/src/whodb/_transport.py | 59 | def set_workspace(self, org_id: str | None, project_id: str | None) -> None: | CODE |