Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
This report summarizes scanner evidence for cloud-custodian/cloud-custodian, a Python project with 6,082 GitHub stars. SynthScan examined 1,259,024 lines of code across 14267 source files, recording 4967 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 4.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 4251 finding(s).
Are imports declared and package/API names verified? 338 finding(s).
Are wrappers, guards, and repeated structures necessary? 4013 finding(s).
Which changes need focused human review? 4967 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4967 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/test_sentry.py | 29 | def test_preserve_full_message(self): | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 173 | def converge_destination_policy(client, config): | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 141 | def create_admission_response( | CODE |
| LOW | tools/c7n_kube/c7n_kube/resources/custom_resource.py | 14 | def tag_custom_resource_instance(raw_instance, *, group, version, plural, scope): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 26 | def test_delete_namespaced_resource(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 64 | def test_enhanced_patch_schema_validation(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 77 | def test_patch_resource_save_restore_logic(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 151 | def test_patch_resource_edge_cases(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 247 | def test_patch_resource_register_resources(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 11 | def test_custom_cluster_resource_query(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 33 | def test_custom_namespaced_resource_query(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 55 | def test_custom_resource_validation(self): | CODE |
| LOW | tools/c7n_kube/tests/common_kube.py | 94 | def _get_cassette_library_dir(self, name="flights"): | CODE |
| LOW | tools/c7n_kube/tests/test_kube.py | 38 | def test_kube_cache_keyed_by_resource_type(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 13 | def test_injects_crd_identity_without_touching_wire_content(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 33 | def test_does_not_mutate_the_input_dict(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 42 | def test_resources_discovers_and_tags_real_crd_instances(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 73 | def test_filters_block_excludes_matching_instance(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 104 | def _build_manager_with_filter(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 149 | def test_selects_storage_version_among_multiple_served_versions(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 167 | def test_skips_crd_whose_storage_version_is_not_served(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 191 | def test_namespaced_crd_uses_correct_enum_op_and_preserves_kind(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 218 | def test_service_is_not_mislabeled_as_core(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource_discovery.py | 223 | def test_one_crd_listing_failure_does_not_abort_others(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 29 | def test_namespaced_label_action(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 55 | def test_event_label_no_labels(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 82 | def test_admission_event_auto_label_user(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 118 | def test_admission_event_label(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 131 | def test_server_handle_get_empty_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 138 | def test_server_handle_get_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 159 | def test_server_handle_post_no_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 180 | def test_server_handle_post_policies_deny_on_match(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 202 | def test_server_handle_post_policies_allow_on_match(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 224 | def test_server_handle_post_policies_deny_on_match_multiple(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 333 | def test_server_response_with_patch(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 370 | def test_server_bad_policy_execution_warn(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 413 | def test_server_bad_policy_execution_deny(self): | CODE |
| LOW | tools/c7n_kube/tests/test_query_pagination.py | 12 | def test_pagination_multi_page(self): | CODE |
| LOW | tools/c7n_kube/tests/test_query_pagination.py | 25 | def test_pagination_raw_dict_uses_wire_format_continue_key(self): | CODE |
| LOW | tools/c7n_kube/tests/test_query_pagination.py | 47 | def test_pagination_shape_change_raises(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 9 | def test_kube_admission_policy(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 93 | def test_admission_warn_event(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 113 | def test_admission_warn_event_no_results(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 161 | def test_admission_action_validate(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 178 | def test_sub_resource_pod_exec(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 212 | def test_sub_resource_pod_attach_exec(self): | CODE |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 436 | def get_or_create_detector_id(client): | CODE |
| LOW | tools/c7n_policystream/tests/test_policystream.py | 145 | def test_diff_subdir_policies(self): | STRING |
| LOW | tools/c7n_openstack/tests/test_secret.py | 8 | def test_secret_without_expiration(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_user.py | 8 | def test_user_extended_info_filter(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_securitygroup.py | 17 | def test_securitygroup_filter_ports(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_securitygroup.py | 43 | def test_securitygroup_filter_ipaddress(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_storage_container.py | 8 | def test_storage_container_public(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 35 | def test_server_filter_flavor(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 79 | def test_server_filter_securitygroup_open_to_internet(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 117 | def test_server_filter_securitygroup_stateful(self): | CODE |
| LOW | tools/c7n_openstack/tests/common_openstack.py | 76 | def _get_cassette_library_dir(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_project.py | 17 | def test_project_filter_by_name(self): | CODE |
| LOW | tools/c7n_terraform/tests_terraform/test_parser.py | 67 | def test_variable_resolver_value_map(): | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 536 | def detect_partition_strategy(bid, delimiters=('/', '-'), prefix=''): | CODE |
| 3554 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_salactus/c7n_salactus/worker.py | 77 | except AttributeError: | CODE |
| HIGH | tools/c7n_azure/c7n_azure/policy.py | 363 | except (TypeError, OverflowError): | CODE |
| HIGH | tools/c7n_azure/c7n_azure/storage_utils.py | 53 | except ResourceExistsError: | CODE |
| HIGH | tools/c7n_azure/c7n_azure/storage_utils.py | 113 | except ResourceExistsError: | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_azure_utils.py | 23 | except Exception: | CODE |
| HIGH | …/c7n_azure/tests_azure/test_functional_actions_tags.py | 31 | except Exception: | CODE |
| HIGH | …/c7n_azure/tests_azure/test_functional_actions_tags.py | 40 | except Exception: | CODE |
| HIGH | …/c7n_azure/tests_azure/test_functional_filters_tags.py | 28 | except Exception: | CODE |
| HIGH | …/c7n_azure/tests_azure/test_functional_filters_tags.py | 37 | except Exception: | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_function.py | 8 | except ImportError: | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_deployment_units.py | 36 | except AzureError: | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_deployment_units.py | 45 | except AzureError: | CODE |
| HIGH | tools/c7n_awscc/build.py | 37 | except ImportError: | CODE |
| HIGH | tools/c7n_awscc/tests/zpill.py | 84 | except AttributeError: | CODE |
| HIGH | tools/sandbox/c7n_sphere11/c7n_sphere11/db.py | 36 | except TypeError: | CODE |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 95 | except HttpError: | CODE |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 165 | except HttpError: | CODE |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 307 | except HttpError: | CODE |
| HIGH | tools/c7n_gcp/tests/test_gcp_common.py | 152 | except AssertionError: | CODE |
| HIGH | tools/c7n_mailer/c7n_mailer/sqs_queue_processor.py | 132 | except ValueError: | CODE |
| HIGH | tools/c7n_mailer/c7n_mailer/splunk_delivery.py | 126 | except JsonPointerException: | CODE |
| HIGH | tools/c7n_mailer/c7n_mailer/smtp_delivery.py | 30 | except smtplib.SMTPServerDisconnected: | CODE |
| HIGH | tools/c7n_mailer/c7n_mailer/utils.py | 19 | except ImportError: # pragma: no cover | CODE |
| HIGH | c7n/utils.py | 142 | except (AttributeError, TypeError, ValueError, OverflowError): | CODE |
| HIGH | c7n/utils.py | 152 | except exceptions: | CODE |
| HIGH | c7n/utils.py | 160 | except exceptions: | CODE |
| HIGH | c7n/mu.py | 91 | except AttributeError: | CODE |
| HIGH | c7n/mu.py | 426 | except self.client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/mu.py | 1226 | except client.exceptions.ResourceConflictException: | CODE |
| HIGH | c7n/mu.py | 1255 | except ClientError: | CODE |
| HIGH | c7n/mu.py | 1261 | except ClientError: | CODE |
| HIGH | c7n/mu.py | 1371 | except ClientError: # pragma: no cover | CODE |
| HIGH | c7n/mu.py | 1379 | except ClientError: # pragma: no cover | CODE |
| HIGH | c7n/mu.py | 1532 | except lambda_client.exceptions.ResourceConflictException: | CODE |
| HIGH | c7n/mu.py | 1933 | except client.exceptions.ResourceConflictException: | CODE |
| HIGH | c7n/mu.py | 1947 | except self.client.exceptions.NoSuchConfigRuleException: | CODE |
| HIGH | c7n/mu.py | 1554 | except lambda_client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/mu.py | 1594 | except lambda_client.exceptions.ResourceConflictException: | CODE |
| HIGH | c7n/mu.py | 1624 | except lambda_client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/mu.py | 1726 | except lambda_client.exceptions.ResourceConflictException: | CODE |
| HIGH | c7n/mu.py | 1771 | except Done: | CODE |
| HIGH | c7n/mu.py | 1615 | except lambda_client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/mu.py | 1768 | except sns_client.exceptions.NotFoundException: | CODE |
| HIGH | c7n/output.py | 228 | except NotImplementedError: | CODE |
| HIGH | c7n/filters/core.py | 376 | except (AttributeError, SyntaxError, KeyError): | CODE |
| HIGH | c7n/filters/core.py | 389 | except (AttributeError, SyntaxError): | CODE |
| HIGH | c7n/resources/appelb.py | 644 | except client.exceptions.LoadBalancerNotFoundException: | CODE |
| HIGH | c7n/resources/vpc.py | 3322 | except client.exceptions.ResourceAlreadyExistsException: | CODE |
| HIGH | c7n/resources/elasticsearch.py | 971 | except client.exceptions.ResourceAlreadyExistsException: | CODE |
| HIGH | c7n/resources/artifact.py | 138 | except client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/resources/opensearch.py | 375 | except client.exceptions.ResourceNotFound: | CODE |
| HIGH | c7n/resources/waf.py | 182 | except client.exceptions.WAFNonexistentItemException: | CODE |
| HIGH | c7n/resources/rdscluster.py | 312 | except ignore: | CODE |
| HIGH | c7n/resources/iam.py | 3063 | except (client.exceptions.NoSuchEntityException, | CODE |
| HIGH | c7n/resources/sqs.py | 340 | except (client.exceptions.QueueDoesNotExist, | CODE |
| HIGH | c7n/resources/apigw.py | 454 | except client.exceptions.NotFoundException: | CODE |
| HIGH | c7n/resources/aws.py | 124 | except IndexError: | CODE |
| HIGH | c7n/resources/glue.py | 124 | except client.exceptions.AlreadyExistsException: | CODE |
| HIGH | c7n/resources/transfer.py | 193 | except client.exceptions.ResourceNotFoundException: | CODE |
| HIGH | c7n/resources/transfer.py | 272 | except client.exceptions.ResourceNotFoundException: | CODE |
| 44 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_kube/c7n_kube/server.py | 48 | resources = p.push(req) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 72 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 102 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 143 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 33 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 64 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 88 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 108 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 129 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 156 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 207 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 242 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_azure/c7n_azure/handler.py | 56 | p.push(event, context) | CODE |
| HIGH | tools/c7n_azure/c7n_azure/container_host/host.py | 403 | policy.push(event, context) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 561 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 587 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 609 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 627 | resources = p.push(None, None) | CODE |
| HIGH | …/tests_azure/tests_resources/test_storage_container.py | 94 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_org/tests/test_org.py | 1136 | # Should fail - {environment} is undefined, but {event} should be OK | COMMENT |
| HIGH | tools/sandbox/zerodark/zerodark/metrics.py | 52 | and (end > ? or end is null) | STRING |
| HIGH | tools/sandbox/zerodark/zerodark/resolver.py | 69 | and (end > ? or end is null)''', | STRING |
| HIGH | tools/c7n_gcp/tests/test_gcp_storage.py | 341 | [bucket] = p.push( | CODE |
| HIGH | tools/c7n_gcp/c7n_gcp/handler.py | 44 | p.push(event, context) | CODE |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/resourcemanager.py | 586 | key: "targets[?bigQueryTarget && bigQueryTarget.disabled == `null`]" | STRING |
| HIGH | tools/c7n_left/c7n_left/core.py | 282 | return policy.push(event) | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 305 | "event": null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 360 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 411 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 463 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 514 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 567 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 593 | "event": null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 653 | "event": null, | CODE |
| HIGH | c7n/handler.py | 170 | p.push(event, context) | CODE |
| HIGH⚡ | c7n/resources/s3.py | 465 | 'BucketLoggingConfiguration': u'{"destinationBucketName":null,"logFilePrefix":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 466 | 'BucketPolicy': u'{"policyText":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 467 | 'BucketVersioningConfiguration': u'{"status":"Off","isMfaDeleteEnabled":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 468 | 'BucketAccelerateConfiguration': u'{"status":null}', | CODE |
| HIGH | tests/test_cloudsearch.py | 74 | resources = p.push(event, {}) | CODE |
| HIGH | tests/test_vpc.py | 1495 | resources = p.push(event_data("event-transit-gateway-delete-vpc-attachment.json")) | CODE |
| HIGH | tests/test_iam.py | 582 | resources = p.push(event) | CODE |
| HIGH⚡ | tests/test_iam.py | 1924 | p.push(event) | STRING |
| HIGH⚡ | tests/test_iam.py | 1931 | resources = p.push(event) | STRING |
| HIGH | tests/test_iam.py | 972 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_iam.py | 1009 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_iam.py | 1702 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_cloudfront.py | 111 | resources = policy.push(event_data("event-cloud-trail-create-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 135 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 158 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 189 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 221 | resources = policy.push(event_data("event-cloud-trail-tag-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 248 | resources = policy.push(event_data("event-cloud-trail-tag-distribution.json")) | CODE |
| HIGH | tests/test_hsm.py | 100 | resources = policy.push(event) | CODE |
| HIGH | tests/test_efs.py | 102 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_efs.py | 124 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_appelb.py | 41 | result = p.push(event, {})[0] | CODE |
| HIGH | tests/test_appelb.py | 727 | resources = policy.push(event_data("event-cloud-trail-appelb-add-tags.json")) | CODE |
| HIGH | tests/test_autotag.py | 29 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_autotag.py | 55 | resources = policy.push(event, None) | CODE |
| 25 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 267 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 351 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 431 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 370 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 164 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 342 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 691 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 759 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 173 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/flowdeliver.py | 53 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/flowdeliver.py | 85 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/stream.py | 29 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/utils.py | 1 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/actions/core.py | 190 | CODE | |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 141 | CODE | |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 269 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 185 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 388 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 749 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 272 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 371 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 422 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 102 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 217 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 444 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 307 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 602 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 729 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 803 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 886 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/objectacl.py | 79 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 177 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 322 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 457 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 520 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 672 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/inventory.py | 21 | CODE | |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 53 | CODE | |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 117 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/query.py | 145 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 75 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 325 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/session.py | 36 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/session.py | 238 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/function_package.py | 61 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 122 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 614 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 167 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 395 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 773 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 841 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 929 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/output.py | 71 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 203 | CODE | |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 207 | CODE | |
| LOW | …ols/c7n_azure/c7n_azure/resources/network_interface.py | 85 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 386 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 431 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 497 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/app_gateway.py | 72 | CODE | |
| 289 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 215 | except Exception: | CODE |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 517 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 96 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 120 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 126 | except Exception: | CODE |
| MEDIUM | tools/c7n_logexporter/c7n_logexporter/exporter.py | 91 | def run(*args, **kw): | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 66 | except Exception as e: | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 116 | except Exception as e: | CODE |
| LOW | tools/c7n_kube/c7n_kube/resources/custom_resource.py | 56 | except Exception: | CODE |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 214 | except Exception: | STRING |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 776 | except Exception: | STRING |
| MEDIUM | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 359 | def flush(self): | CODE |
| LOW | tools/c7n_policystream/policystream.py | 353 | except Exception as e: | CODE |
| MEDIUM | tools/c7n_policystream/policystream.py | 347 | def _policy_file_rev(self, f, commit): | CODE |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 470 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 208 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 328 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 356 | except Exception: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 140 | except Exception: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 219 | except Exception: | CODE |
| MEDIUM | tools/c7n_salactus/c7n_salactus/cli.py | 135 | def _f(*args, **kw): | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/rqworker.py | 58 | except Exception: | CODE |
| MEDIUM | tools/c7n_salactus/c7n_salactus/rqworker.py | 54 | def loads(s): | CODE |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 83 | except Exception: | CODE |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 262 | except Exception: | CODE |
| MEDIUM | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 259 | def main(provider, output_dir, group_by): | CODE |
| LOW | tools/c7n_azure/c7n_azure/query.py | 63 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/query.py | 169 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 29 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 477 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 498 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 146 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 210 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 180 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 496 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 467 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/storage_utils.py | 56 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/storage_utils.py | 64 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 238 | except Exception as exc: | CODE |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 404 | except Exception: | CODE |
| MEDIUM | tools/c7n_azure/c7n_azure/container_host/host.py | 401 | def run_policy(policy, event, context): | CODE |
| LOW | …azure/c7n_azure/resources/entraid_security_defaults.py | 69 | except Exception as e: | CODE |
| LOW⚡ | tools/c7n_azure/c7n_azure/resources/disk.py | 323 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 373 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 399 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 486 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 509 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 524 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 587 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/key_vault_keys.py | 159 | except Exception as error: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 95 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 110 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 203 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 257 | except Exception as e: | CODE |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 104 | except Exception as e: | CODE |
| LOW | …ols/c7n_azure/c7n_azure/resources/network_interface.py | 106 | except Exception as error: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 103 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 121 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 138 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 163 | except Exception: | CODE |
| 162 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | tools/c7n_azure/c7n_azure/handler.py | 11 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/filters.py | 19 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/storage_utils.py | 7 | from azure.core.exceptions import ResourceExistsError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/resources/disk.py | 12 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | …7n_azure/c7n_azure/resources/network_security_group.py | 6 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/resources/sqldatabase.py | 20 | from azure.core.exceptions import AzureError, ResourceNotFoundError | CODE |
| CRITICAL | …ls/c7n_azure/c7n_azure/provisioning/storage_account.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/provisioning/app_insights.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | …ols/c7n_azure/c7n_azure/provisioning/resource_group.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_deployment_units.py | 4 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 301 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 325 | from azure.core.exceptions import ClientAuthenticationError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 351 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 15 | from azure.core.exceptions import AzureError, HttpResponseError | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 459 | self.action.client.virtual_machines.begin_deallocate.assert_called_once_with( | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 478 | self.action.client.virtual_machines.begin_start.assert_called_once_with("rg", "vm-name") | CODE |
| CRITICAL | …c7n_azure/tests_azure/tests_resources/test_keyvault.py | 12 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | tools/c7n_mailer/c7n_mailer/ldap_lookup.py | 15 | from ldap3.core.exceptions import LDAPSocketOpenError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tools/c7n_azure/c7n_azure/utils.py | 611 | # This function is a workaround for Azure KeyVault objects that lack | COMMENT |
| MEDIUM⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 239 | # Create a minimal context object | COMMENT |
| MEDIUM⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 1100 | # Create a batch with 25 requests (Graph API limit is typically 20) | COMMENT |
| MEDIUM | tools/c7n_azure/tests_azure/test_graph_utils.py | 137 | # Create a proper policy to get a real manager instance | COMMENT |
| MEDIUM⚡ | …/c7n_azure/tests_azure/tests_resources/test_storage.py | 933 | # Create a mock storage account resource | COMMENT |
| MEDIUM⚡ | …/c7n_azure/tests_azure/tests_resources/test_storage.py | 941 | # Create the filter | COMMENT |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 491 | # Create a bad yaml file | COMMENT |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 522 | # Create a bad yaml file | STRING |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 543 | # Create a bad yaml file (no name field) | STRING |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 581 | # Create a bad yaml file | STRING |
| MEDIUM | …s_azure/tests_resources/terraform/entraid_user/main.tf | 105 | # Create a security group for testing group membership filters | COMMENT |
| MEDIUM | tools/c7n_azure/tests_azure/templates/provision.sh | 382 | # Create a new modern agent version and then resolve stable agent details. | COMMENT |
| MEDIUM | tools/c7n_org/tests/test_org.py | 676 | # Create an invalid accounts file (missing required field) | COMMENT |
| MEDIUM | tools/c7n_gcp/tests/test_vertexai.py | 208 | # Create an evaluation item: | COMMENT |
| MEDIUM | tools/c7n_gcp/tests/test_vertexai.py | 228 | # Create a run over it | COMMENT |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/armor.py | 68 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 61 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 555 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 606 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 656 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/network.py | 374 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/network.py | 427 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/compute.py | 688 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | …7n_mailer/c7n_mailer/azure_mailer/sendgrid_delivery.py | 112 | # Create a To object instead of an Email object | COMMENT |
| MEDIUM | tools/dev/data_updatearnref.py | 142 | # Create the docs directory | COMMENT |
| MEDIUM | tools/c7n_tencentcloud/tests/test_tc_client.py | 437 | # Create a temporary credentials file | COMMENT |
| MEDIUM | …s/c7n_tencentcloud/c7n_tencentcloud/filters/metrics.py | 152 | # Create a map from resource_id to resource for quick lookup | COMMENT |
| MEDIUM⚡ | c7n/policy.py | 1395 | """This method is no longer called within c7n, and despite being a private | STRING |
| MEDIUM | c7n/resources/firewall.py | 310 | # Create a new log destination object by adding a single LogDestinationConfig array element | COMMENT |
| MEDIUM | c7n/resources/eventbridge.py | 184 | # This function provides custom functionality to query event-rule-targets | COMMENT |
| MEDIUM | c7n/resources/eventbridge.py | 445 | # This function provides custom functionality to query event-rule-targets | COMMENT |
| MEDIUM | c7n/resources/elb.py | 269 | # Create a custom policy with epoch timestamp. | COMMENT |
| MEDIUM | c7n/resources/appmesh.py | 76 | # This method is called in event mode and not pull mode. | COMMENT |
| MEDIUM | c7n/resources/appmesh.py | 205 | # This method is called in event mode and not pull mode. | COMMENT |
| MEDIUM | c7n/resources/ebs.py | 1297 | # Create a current snapshot | COMMENT |
| MEDIUM | tests/test_kafka.py | 277 | # Create a test resource without policy annotation | COMMENT |
| MEDIUM | tests/test_vpc.py | 564 | # Create a mock filter instance | COMMENT |
| MEDIUM | tests/test_vpc.py | 2174 | # Create a mock filter instance | COMMENT |
| MEDIUM | tests/test_quotas.py | 215 | # Create a mock resource where quota equals hard_limit | COMMENT |
| MEDIUM | tests/test_quotas.py | 227 | # Create the action with multiplier that would normally increase | COMMENT |
| MEDIUM | tests/test_quotas.py | 248 | # Create a mock resource where calculated count would exceed hard_limit | COMMENT |
| MEDIUM | tests/test_quotas.py | 260 | # Create the action with multiplier that would exceed hard_limit | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 16 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 57 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 92 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 183 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 231 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 271 | # Create the PG | COMMENT |
| MEDIUM | tests/test_appelb.py | 756 | # Create a policy that deletes listeners on a specific port | COMMENT |
| MEDIUM | tests/test_mu.py | 1577 | # Create a module with both *.py and *.pyc. | COMMENT |
| MEDIUM | tests/test_bedrock.py | 68 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 115 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 170 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 249 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_s3.py | 3246 | # Create an sns topic | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail_update/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | …erraform/bedrock_application_inference_profile/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail_tag_actions/main.tf | 9 | # Create an application inference profile | COMMENT |
| MEDIUM | …sts/terraform/bedrock_inference_profile_delete/main.tf | 6 | # Create an application inference profile for delete testing | COMMENT |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_kube/c7n_kube/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_tencentcloud/c7n_tencentcloud/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/filters.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/filters/labels.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | c7n/tags.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | …azure/c7n_azure/resources/entraid_security_defaults.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | …zure/c7n_azure/resources/entraid_conditional_access.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/actions/tagging.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/actions/labels.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | c7n/tags.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/object_storage.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/dns.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/identity.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/compute.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/armor.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/network.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/compute.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/armor.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/network.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/compute.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_kube/c7n_kube/entry.py | 6 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/entry.py | 24 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 37 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 39 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 29 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 5 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 11 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 12 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 13 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 13 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 14 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 15 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 16 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 17 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 18 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 19 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 18 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 29 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 56 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 93 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 137 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 175 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 218 | CODE | |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 28 | CODE | |
| LOW | tools/c7n_awscc/c7n_awscc/entry.py | 3 | CODE | |
| LOW | tools/c7n_awscc/c7n_awscc/manager.py | 6 | CODE | |
| LOW | tools/c7n_oci/tests/test_multi_region.py | 9 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/query.py | 12 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 9 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 12 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 15 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 18 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/actions/__init__.py | 5 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 35 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 7 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 18 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 21 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 22 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 4 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 5 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 6 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 7 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 8 | CODE | |
| 75 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/c7n_azure/tests_azure/test_azure_utils.py | 194 | source = 'Lorem ipsum dolor sit amet' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_azure_utils.py | 194 | source = 'Lorem ipsum dolor sit amet' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 224 | def _setup_mock_session(self, token='fake-token'): | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 913 | self.assertEqual(headers['Authorization'], 'Bearer fake-token-123') | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 926 | mock_token.token = 'fake-token' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 1096 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 166 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 562 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 622 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 655 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 694 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 786 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 825 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 862 | mock_token.token = 'fake-token-123' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 954 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1011 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1067 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1143 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 55 | "displayName": "John Doe", | CODE |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 211 | if os.environ.get(constants.ENV_ACCESS_TOKEN) == "fake_token": | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 106 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 109 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 170 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 173 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 234 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 237 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 298 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 301 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 362 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 365 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2292 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2295 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2356 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2359 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2420 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2423 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2484 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2487 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2548 | "createdBy": "user@example.com", | CODE |
| LOW | …ttes/MachineLearningJobTest.machine-learning-jobs.json | 2551 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …tests_azure/cassettes/KeyVaultTest.test_whitelist.json | 356 | "displayName": "John Doe", | CODE |
| LOW | …settes/ApiManagementTest.test_certificates_filter.json | 41 | "publisherEmail": "admin@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 106 | "createdBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 109 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 170 | "createdBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 173 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 234 | "createdBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 237 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 298 | "createdBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 301 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 362 | "createdBy": "user@example.com", | CODE |
| LOW | …chineLearningJobTest.machine-learning-job-archive.json | 365 | "lastModifiedBy": "user@example.com", | CODE |
| LOW | tools/c7n_azure/tests_azure/templates/alert-logs.json | 15 | "defaultValue": "test@test.com" | CODE |
| LOW | tools/c7n_oci/tests/oci_common.py | 51 | return re.sub(r'"[^"]+@oracle\.com"', '"user@example.com"', data) | CODE |
| LOW | …tests/terraform/identity_compartment/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | …7n_oci/tests/terraform/identity_user/tf_resources.json | 45 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/ip_auth/tf_resources.json | 22 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/zone/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/zone/tf_resources.json | 28 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | …n_oci/tests/terraform/identity_group/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| 40 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 221 | break | COMMENT |
| LOW | tools/c7n_sentry/c7n_sentry/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_logexporter/c7n_logexporter/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/core/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/apps/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/actions/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_guardian/c7n_guardian/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_terraform/tests_terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_terraform/c7n_terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_salactus/c7n_salactus/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/query.py | 361 | # <subscription id> | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/container_host/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/sqldatabase.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/actions/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/test_lock_action.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/tests_resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_awscc/tests/zpill.py | 21 | from c7n.utils import get_account_id_from_sts | COMMENT |
| LOW | tools/c7n_awscc/c7n_awscc/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_awscc/c7n_awscc/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_org/c7n_org/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/c7n_sphere11/c7n_sphere11/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/c7n_autodoc/example_config_file.yml | 1 | --- | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/metrics.py | 101 | dict(name='SurgeQueueLength', statistic='Maximum')] | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/flowrecord.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/floweni.py | 221 | stats['Flows'] += 1 | COMMENT |
| LOW | tools/sandbox/c7n_index/c7n_index/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_oci/c7n_oci/filters/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_oci/c7n_oci/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/tests/test_sql.py | 361 | COMMENT | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_left/c7n_left/providers/terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/utils_email.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/gcp_mailer/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/dev/vector.toml | 1 | # AWS Client Side Monitoring | COMMENT |
| LOW | tools/dev/data_updatearnref.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | tools/dev/data_updatearnref.py | 21 | # this software without specific prior written permission. | COMMENT |
| LOW | tools/ops/azure/container-host/chart/values.yaml | 61 | # SendGrid API key OR SMTP settings | COMMENT |
| LOW | tools/cask/main.go | 1 | // Copyright 2019 Microsoft Corporation | COMMENT |
| LOW | tools/cask/main_test.go | 1 | // Copyright 2019 Microsoft Corporation | COMMENT |
| LOW | tools/c7n_tencentcloud/c7n_tencentcloud/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_tencentcloud/c7n_tencentcloud/output.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | …7n_tencentcloud/c7n_tencentcloud/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_traildb/c7n_traildb/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_traildb/c7n_traildb/traildb.py | 121 | # STOP = 42 | COMMENT |
| LOW | c7n/handler.py | 21 | logging.getLogger('urllib3').setLevel(logging.WARNING) | COMMENT |
| LOW | c7n/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| 43 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 222 | # No role, just use current session | COMMENT |
| MEDIUM | tools/c7n_salactus/c7n_salactus/cli.py | 615 | # unleash the monkies ;-) | COMMENT |
| MEDIUM | tools/c7n_azure/c7n_azure/resources/disk.py | 600 | # Imported here so the test harness's patch of utcnow takes effect. | COMMENT |
| MEDIUM | …/tests_resources/test_entraid_user_process_resource.py | 11 | """Test _process_resource methods in EntraID User actions with comprehensive coverage.""" | STRING |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 3387 | # Mock comprehensive response with mixed location types | COMMENT |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 3503 | # Define comprehensive policy | COMMENT |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 4604 | """Test comprehensive named location policies combining multiple filters""" | STRING |
| MEDIUM | …ests_azure/tests_resources/test_resolver_functional.py | 314 | """Test that multiple filters using same blob leverage caching""" | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/output.py | 110 | # utilize. | COMMENT |
| MEDIUM | …ols/c7n_left/c7n_left/providers/terraform/variables.py | 101 | # things with default values to facilitate attribute interpolation. | COMMENT |
| LOW⚡ | tools/c7n_mailer/tests/test_ldap.py | 100 | # for that result, we should query the cache and just return {} | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/splunk_delivery.py | 180 | return True # if no exception, just return | CODE |
| LOW | …ols/c7n_tencentcloud/c7n_tencentcloud/resources/clb.py | 185 | # for OPEN CLB, just use internet ip as key | COMMENT |
| LOW | c7n/deprecated.py | 124 | # otherwise we just use the replacement as is. | COMMENT |
| LOW | c7n/policy.py | 583 | # For cli usage by normal users, don't assume the role just use | COMMENT |
| MEDIUM | c7n/mu.py | 1013 | """for AWS Event Sources that want to utilize lazy client initialization. | STRING |
| LOW | c7n/filters/core.py | 318 | # Once 3.10 is no longer supported, just use enum.member | COMMENT |
| MEDIUM | c7n/filters/core.py | 455 | """Fallback for older unit tests that don't utilize a query manager""" | STRING |
| MEDIUM | c7n/filters/core.py | 505 | """Fallback for older unit tests that don't utilize a query manager""" | STRING |
| MEDIUM | c7n/resources/dynamodb.py | 678 | """Override in order to disable the augment for serverless policies. | STRING |
| MEDIUM | c7n/resources/waf.py | 208 | # Essentially a copy of DescribeSource.augment with the addition of Scope and Name parameters | COMMENT |
| MEDIUM | c7n/resources/aws.py | 885 | # We only utilize these regions if they are explicitly passed in on the cli. | COMMENT |
| MEDIUM | c7n/resources/ecr.py | 394 | # see this for a more comprehensive list | COMMENT |
| LOW | tests/test_cw_dashboard.py | 41 | # filtering on the tag we just set exercises the read path - these | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 4 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 6 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 23 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 25 | # --------------- | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 52 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 54 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 75 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 77 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 88 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 90 | # ========================== | COMMENT |
| MEDIUM⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 542 | # ========================== | STRING |
| MEDIUM⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 544 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 285 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 287 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 397 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 399 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 426 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 428 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 477 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 479 | # ========================== | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_azure/c7n_azure/query.py | 309 | # Check if we're out of a policies execution limits. | COMMENT |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 139 | # Check if policy applies to admin roles and requires MFA | COMMENT |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 147 | # Check if admin roles are included and MFA is required | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 632 | # Check if user has MFA methods configured using v1.0 API | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 213 | # Check if user is a guest | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 217 | # Check if user is external (from different domain) | COMMENT |
| LOW | tools/c7n_org/c7n_org/cli.py | 615 | # Check if string contains variable placeholders | COMMENT |
| LOW | tools/c7n_org/c7n_org/cli.py | 865 | # Check if deprecations should fail in strict mode | COMMENT |
| LOW | …/tests/terraform/vertexai_batch_prediction_job/main.tf | 45 | # Output values for use in tests | COMMENT |
| LOW⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 166 | # Check if docker is available | COMMENT |
| LOW | …/c7n_gcp/tests/scripts/cleanup_vertex_ai_batch_jobs.py | 123 | # Check if display name matches our test pattern | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/resources/vertexai.py | 397 | # Check if URI is a GCS path | COMMENT |
| LOW | c7n/query.py | 554 | # Check if we're out of a policies execution limits. | COMMENT |
| LOW | c7n/cwe.py | 113 | # Check if we have a short cut / alias | COMMENT |
| LOW | c7n/filters/iamaccess.py | 221 | # Check if it's a wildcard or already whitelisted account | COMMENT |
| LOW | c7n/filters/iamrole.py | 225 | # Check if all non-None role values are in the allowed list | COMMENT |
| LOW | c7n/resources/vpc.py | 648 | # Check if list contains 'amazon' synthetic value | COMMENT |
| LOW | c7n/resources/elasticsearch.py | 831 | # Set it to something arbitrary here so the missing value doesn't fail validation. | COMMENT |
| LOW | c7n/resources/elasticache.py | 243 | # Check if any available upgrades match this resource's engine | COMMENT |
| LOW | c7n/resources/kafka.py | 193 | # Check if it's a major version upgrade | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 120 | # Step 1: Add a tag | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 145 | # Step 2: Remove the tag | COMMENT |
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 175 | # Step 1: Add multiple test tags | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 202 | # Step 2: Trim tags with space=0, preserving only cctest_preserve | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 218 | # Step 3: Verify tags were trimmed | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 271 | # Step 1: Mark the subscription for action (using default 4 days) | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 295 | # Step 2: Filter for marked subscriptions | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1536 | # Step 1: Stop the running job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1561 | # Step 2: Wait for the stop action to take effect and verify cancellation | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1610 | # Step 3: Delete the cancelled job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1639 | # Step 4: Verify the job no longer exists | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 89 | ### Step 1: Create the Model Storage Bucket | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 105 | ### Step 2: Create and Upload the Test Model | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 191 | ### Step 3: Set Environment Variables (Optional) | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 209 | ### Step 4: Generate Test Data if needed | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 232 | ### Step 5: Run the Functional Test | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_azure/c7n_azure/resolver.py | 15 | Resolve an azure:// URI to blob content. Args: uri: Azure blob URI in format azure://account.blob.core.wind | STRING |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 312 | Get full model resource name for testing. Uses the model ID from environment variable and constructs the full r | STRING |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 353 | Poll a policy until resources reach expected state(s). Args: policy: Cloud Custodian policy to run | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/client.py | 489 | Executes query (ex. list) via a dedicated http object. Args: verb (str): Method to execute on the c | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/vertexai.py | 383 | Validate that a schema URI points to a valid YAML file. Args: schema_uri: GCS URI to schema file (e | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 94 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 129 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 83 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 117 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 79 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 115 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 202 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 235 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 320 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 353 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 77 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 112 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 198 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 231 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 316 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 349 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 69 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 112 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 149 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 185 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 235 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/actions/base.py | 58 | def perform_action(self, resource): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_kube/c7n_kube/server.py | 95 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 457 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/query.py | 130 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 376 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 1052 | CODE | |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 293 | CODE | |
| LOW | tools/sandbox/zerodark/zerodark/floweni.py | 400 | CODE | |
| LOW | tools/c7n_oci/tests/test_output.py | 292 | CODE | |
| LOW | tools/c7n_oci/tests/test_output.py | 312 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 155 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 330 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/dns.py | 155 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/spanner.py | 183 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/compute.py | 899 | CODE | |
| LOW | tools/c7n_left/c7n_left/cli.py | 211 | CODE | |
| LOW | tools/dev/data_updatearnref.py | 128 | CODE | |
| LOW | c7n/resolver.py | 107 | CODE | |
| LOW | c7n/output.py | 489 | CODE | |
| LOW | c7n/filters/offhours.py | 494 | CODE | |
| LOW | c7n/resources/elasticsearch.py | 987 | CODE | |
| LOW | c7n/resources/kinesis.py | 150 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 120 | # Step 1: Add a tag | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 145 | # Step 2: Remove the tag | COMMENT |
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 175 | # Step 1: Add multiple test tags | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 202 | # Step 2: Trim tags with space=0, preserving only cctest_preserve | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 218 | # Step 3: Verify tags were trimmed | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 271 | # Step 1: Mark the subscription for action (using default 4 days) | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 295 | # Step 2: Filter for marked subscriptions | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1536 | # Step 1: Stop the running job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1561 | # Step 2: Wait for the stop action to take effect and verify cancellation | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1610 | # Step 3: Delete the cancelled job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1639 | # Step 4: Verify the job no longer exists | COMMENT |
| LOW | …ols/c7n_tencentcloud/c7n_tencentcloud/resources/cam.py | 298 | # we need to check if it satisfies the former filter | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | c7n/cwe.py | 9 | # **These are just shortcuts**, you can use the policy definition to | COMMENT |
| MEDIUM | …lient_certificate_filter/apigateway.GetRestApis_1.json | 9 | "description": "This is my API for demonstration purposes", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/compute.py | 531 | # client, which can't reach regional disks (used by event-driven | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 421 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_mailer/c7n_mailer/replay.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | c7n/reports/__init__.py | 5 | __all__ = [report] | CODE |