Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
This report presents the forensic synthetic code analysis of cloud-custodian/cloud-custodian, a Python project with 6,040 GitHub stars. SynthScan v2.0 examined 1,183,813 lines of code across 13267 source files, recording 4444 pattern matches distributed across 21 syntactic categories. The overall adjusted score of 4.1 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 4444 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/test_sentry.py | 29 | def test_preserve_full_message(self): | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 173 | def converge_destination_policy(client, config): | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 141 | def create_admission_response( | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 26 | def test_delete_namespaced_resource(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 64 | def test_enhanced_patch_schema_validation(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 77 | def test_patch_resource_save_restore_logic(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 151 | def test_patch_resource_edge_cases(self): | CODE |
| LOW | tools/c7n_kube/tests/test_actions.py | 247 | def test_patch_resource_register_resources(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 11 | def test_custom_cluster_resource_query(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 33 | def test_custom_namespaced_resource_query(self): | CODE |
| LOW | tools/c7n_kube/tests/test_custom_resource.py | 55 | def test_custom_resource_validation(self): | CODE |
| LOW | tools/c7n_kube/tests/common_kube.py | 94 | def _get_cassette_library_dir(self, name="flights"): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 29 | def test_namespaced_label_action(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 55 | def test_event_label_no_labels(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 82 | def test_admission_event_auto_label_user(self): | CODE |
| LOW | tools/c7n_kube/tests/test_labels.py | 118 | def test_admission_event_label(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 131 | def test_server_handle_get_empty_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 138 | def test_server_handle_get_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 159 | def test_server_handle_post_no_policies(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 180 | def test_server_handle_post_policies_deny_on_match(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 202 | def test_server_handle_post_policies_allow_on_match(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 224 | def test_server_handle_post_policies_deny_on_match_multiple(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 333 | def test_server_response_with_patch(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 370 | def test_server_bad_policy_execution_warn(self): | CODE |
| LOW | tools/c7n_kube/tests/test_k8s_server.py | 413 | def test_server_bad_policy_execution_deny(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 9 | def test_kube_admission_policy(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 93 | def test_admission_warn_event(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 113 | def test_admission_warn_event_no_results(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 161 | def test_admission_action_validate(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 178 | def test_sub_resource_pod_exec(self): | CODE |
| LOW | tools/c7n_kube/tests/test_policy.py | 212 | def test_sub_resource_pod_attach_exec(self): | CODE |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 436 | def get_or_create_detector_id(client): | CODE |
| LOW | tools/c7n_policystream/tests/test_policystream.py | 145 | def test_diff_subdir_policies(self): | STRING |
| LOW | tools/c7n_openstack/tests/test_secret.py | 8 | def test_secret_without_expiration(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_user.py | 8 | def test_user_extended_info_filter(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_securitygroup.py | 17 | def test_securitygroup_filter_ports(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_securitygroup.py | 43 | def test_securitygroup_filter_ipaddress(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_storage_container.py | 8 | def test_storage_container_public(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 35 | def test_server_filter_flavor(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 79 | def test_server_filter_securitygroup_open_to_internet(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_server.py | 117 | def test_server_filter_securitygroup_stateful(self): | CODE |
| LOW | tools/c7n_openstack/tests/common_openstack.py | 76 | def _get_cassette_library_dir(self): | CODE |
| LOW | tools/c7n_openstack/tests/test_project.py | 17 | def test_project_filter_by_name(self): | CODE |
| LOW | tools/c7n_terraform/tests_terraform/test_parser.py | 67 | def test_variable_resolver_value_map(): | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 536 | def detect_partition_strategy(bid, delimiters=('/', '-'), prefix=''): | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 602 | def process_bucket_partitions( | CODE |
| LOW | tools/c7n_azure/c7n_azure/query.py | 337 | def register_actions_and_filters(registry, resource_class): | CODE |
| LOW | tools/c7n_azure/c7n_azure/functionapp_utils.py | 28 | def get_storage_account_connection_string(id): | CODE |
| LOW | tools/c7n_azure/c7n_azure/functionapp_utils.py | 99 | def publish_functions_package(cls, function_params, package): | CODE |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 75 | def get_required_permissions_for_endpoint(endpoint, method='GET'): | CODE |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 187 | def make_batched_graph_request(self, batch): | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 432 | def _validate_is_arm_resource(self): | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 438 | def _validate_event_matches_resource(self): | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 481 | def _create_event_subscription(self, storage_account, queue_name, session): | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 309 | def get_function_target_subscription_name(self): | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 316 | def get_function_target_subscription_ids(self): | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 356 | def get_functions_auth_string(self, target_subscription_id): | CODE |
| LOW | tools/c7n_azure/c7n_azure/function_package.py | 61 | def _add_functions_required_files( | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 122 | def custodian_azure_send_override(self, request, headers=None, content=None, **kwargs): | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 342 | def get_ports_set_from_string(ports): | CODE |
| 3208 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_kube/c7n_kube/server.py | 48 | resources = p.push(req) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 72 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 102 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_labels.py | 143 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 33 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 64 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 88 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 108 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 129 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 156 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 207 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_kube/tests/test_policy.py | 242 | resources = policy.push(event) | CODE |
| HIGH | tools/c7n_azure/c7n_azure/handler.py | 56 | p.push(event, context) | CODE |
| HIGH | tools/c7n_azure/c7n_azure/container_host/host.py | 403 | policy.push(event, context) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 561 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 587 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 609 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_azure/tests_azure/test_policy_mode.py | 627 | resources = p.push(None, None) | CODE |
| HIGH | …/tests_azure/tests_resources/test_storage_container.py | 94 | resources = p.push(event, None) | CODE |
| HIGH | tools/c7n_org/tests/test_org.py | 1136 | # Should fail - {environment} is undefined, but {event} should be OK | COMMENT |
| HIGH | tools/sandbox/zerodark/zerodark/metrics.py | 52 | and (end > ? or end is null) | STRING |
| HIGH | tools/sandbox/zerodark/zerodark/resolver.py | 69 | and (end > ? or end is null)''', | STRING |
| HIGH | tools/c7n_gcp/tests/test_gcp_storage.py | 292 | [bucket] = p.push( | CODE |
| HIGH | tools/c7n_gcp/c7n_gcp/handler.py | 44 | p.push(event, context) | CODE |
| HIGH | tools/c7n_left/c7n_left/core.py | 282 | return policy.push(event) | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 305 | "event": null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 360 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 411 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 463 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 514 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 567 | "event":null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 593 | "event": null, | CODE |
| HIGH | tools/c7n_mailer/tests/common.py | 653 | "event": null, | CODE |
| HIGH | c7n/handler.py | 170 | p.push(event, context) | CODE |
| HIGH⚡ | c7n/resources/s3.py | 464 | 'BucketLoggingConfiguration': u'{"destinationBucketName":null,"logFilePrefix":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 465 | 'BucketPolicy': u'{"policyText":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 466 | 'BucketVersioningConfiguration': u'{"status":"Off","isMfaDeleteEnabled":null}', | CODE |
| HIGH⚡ | c7n/resources/s3.py | 467 | 'BucketAccelerateConfiguration': u'{"status":null}', | CODE |
| HIGH | tests/test_cloudsearch.py | 74 | resources = p.push(event, {}) | CODE |
| HIGH | tests/test_vpc.py | 1494 | resources = p.push(event_data("event-transit-gateway-delete-vpc-attachment.json")) | CODE |
| HIGH | tests/test_iam.py | 477 | resources = p.push(event) | CODE |
| HIGH⚡ | tests/test_iam.py | 1799 | p.push(event) | STRING |
| HIGH⚡ | tests/test_iam.py | 1806 | resources = p.push(event) | STRING |
| HIGH | tests/test_iam.py | 867 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_iam.py | 904 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_iam.py | 1577 | resources = p.push({'detail': { | STRING |
| HIGH | tests/test_cloudfront.py | 109 | resources = policy.push(event_data("event-cloud-trail-create-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 133 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 156 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 187 | resources = policy.push(event_data("event-cloud-trail-update-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 219 | resources = policy.push(event_data("event-cloud-trail-tag-distribution.json")) | CODE |
| HIGH | tests/test_cloudfront.py | 246 | resources = policy.push(event_data("event-cloud-trail-tag-distribution.json")) | CODE |
| HIGH | tests/test_hsm.py | 100 | resources = policy.push(event) | CODE |
| HIGH | tests/test_efs.py | 102 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_efs.py | 124 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_appelb.py | 41 | result = p.push(event, {})[0] | CODE |
| HIGH | tests/test_appelb.py | 727 | resources = policy.push(event_data("event-cloud-trail-appelb-add-tags.json")) | CODE |
| HIGH | tests/test_autotag.py | 29 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_autotag.py | 55 | resources = policy.push(event, None) | CODE |
| HIGH | tests/test_autotag.py | 81 | resources = policy.push(event, None) | CODE |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 267 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 351 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 431 | CODE | |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 370 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 164 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 342 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 691 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 759 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 173 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/flowdeliver.py | 53 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/flowdeliver.py | 85 | CODE | |
| LOW | tools/c7n_logexporter/c7n_logexporter/stream.py | 29 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/utils.py | 1 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/actions/core.py | 190 | CODE | |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 141 | CODE | |
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 269 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 185 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 388 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 749 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 272 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 371 | CODE | |
| LOW | tools/c7n_policystream/policystream.py | 422 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 96 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 211 | CODE | |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 437 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 307 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 602 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 729 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 803 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 886 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/objectacl.py | 79 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 177 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 322 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 457 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 520 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 672 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/inventory.py | 21 | CODE | |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 53 | CODE | |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 117 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/query.py | 145 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 75 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 325 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/session.py | 36 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/session.py | 238 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/function_package.py | 61 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 122 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 614 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 167 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 395 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 700 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 768 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 856 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/output.py | 71 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 203 | CODE | |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 207 | CODE | |
| LOW | …ols/c7n_azure/c7n_azure/resources/network_interface.py | 85 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 386 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 431 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 497 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/app_gateway.py | 72 | CODE | |
| 282 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 215 | except Exception: | CODE |
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 517 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 96 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 120 | except Exception: | CODE |
| LOW | tools/c7n_logexporter/c7n_logexporter/exporter.py | 126 | except Exception: | CODE |
| MEDIUM | tools/c7n_logexporter/c7n_logexporter/exporter.py | 91 | def run(*args, **kw): | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 66 | except Exception as e: | CODE |
| LOW | tools/c7n_kube/c7n_kube/server.py | 116 | except Exception as e: | CODE |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 214 | except Exception: | STRING |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 776 | except Exception: | STRING |
| MEDIUM | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 359 | def flush(self): | CODE |
| LOW | tools/c7n_policystream/policystream.py | 353 | except Exception as e: | CODE |
| MEDIUM | tools/c7n_policystream/policystream.py | 347 | def _policy_file_rev(self, f, commit): | CODE |
| LOW | tools/c7n_terraform/c7n_terraform/parser.py | 463 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 208 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 328 | except Exception as e: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/worker.py | 356 | except Exception: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 140 | except Exception: | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 219 | except Exception: | CODE |
| MEDIUM | tools/c7n_salactus/c7n_salactus/cli.py | 135 | def _f(*args, **kw): | CODE |
| LOW | tools/c7n_salactus/c7n_salactus/rqworker.py | 58 | except Exception: | CODE |
| MEDIUM | tools/c7n_salactus/c7n_salactus/rqworker.py | 54 | def loads(s): | CODE |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 83 | except Exception: | CODE |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 262 | except Exception: | CODE |
| MEDIUM | tools/c7n_sphinxext/c7n_sphinxext/docgen.py | 259 | def main(provider, output_dir, group_by): | CODE |
| LOW | tools/c7n_azure/c7n_azure/query.py | 63 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/query.py | 169 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/graph_utils.py | 29 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 477 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/policy.py | 497 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 146 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/session.py | 210 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 180 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 496 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 394 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/storage_utils.py | 56 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/storage_utils.py | 64 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 238 | except Exception as exc: | CODE |
| LOW | tools/c7n_azure/c7n_azure/container_host/host.py | 404 | except Exception: | CODE |
| MEDIUM | tools/c7n_azure/c7n_azure/container_host/host.py | 401 | def run_policy(policy, event, context): | CODE |
| LOW | …azure/c7n_azure/resources/entraid_security_defaults.py | 69 | except Exception as e: | CODE |
| LOW⚡ | tools/c7n_azure/c7n_azure/resources/disk.py | 322 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 372 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 398 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 485 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 508 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/disk.py | 523 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/key_vault_keys.py | 159 | except Exception as error: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 95 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 110 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 203 | except Exception as e: | CODE |
| LOW | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 257 | except Exception as e: | CODE |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 104 | except Exception as e: | CODE |
| LOW | …ols/c7n_azure/c7n_azure/resources/network_interface.py | 106 | except Exception as error: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 103 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 121 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 138 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 163 | except Exception: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 586 | except Exception as e: | CODE |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 682 | except Exception as e: | CODE |
| 160 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | tools/c7n_azure/c7n_azure/handler.py | 11 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/filters.py | 19 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/storage_utils.py | 7 | from azure.core.exceptions import ResourceExistsError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/resources/disk.py | 11 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | …7n_azure/c7n_azure/resources/network_security_group.py | 6 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/resources/sqldatabase.py | 20 | from azure.core.exceptions import AzureError, ResourceNotFoundError | CODE |
| CRITICAL | …ls/c7n_azure/c7n_azure/provisioning/storage_account.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/c7n_azure/provisioning/app_insights.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | …ols/c7n_azure/c7n_azure/provisioning/resource_group.py | 3 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_deployment_units.py | 4 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 301 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 325 | from azure.core.exceptions import ClientAuthenticationError | CODE |
| CRITICAL | tools/c7n_azure/tests_azure/test_resolver.py | 351 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 10 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 454 | self.action.client.virtual_machines.begin_deallocate.assert_called_once_with( | CODE |
| CRITICAL | …ols/c7n_azure/tests_azure/tests_resources/test_disk.py | 473 | self.action.client.virtual_machines.begin_start.assert_called_once_with("rg", "vm-name") | CODE |
| CRITICAL | …c7n_azure/tests_azure/tests_resources/test_keyvault.py | 12 | from azure.core.exceptions import HttpResponseError | CODE |
| CRITICAL | tools/c7n_mailer/c7n_mailer/ldap_lookup.py | 15 | from ldap3.core.exceptions import LDAPSocketOpenError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tools/c7n_azure/c7n_azure/utils.py | 611 | # This function is a workaround for Azure KeyVault objects that lack | COMMENT |
| MEDIUM⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 239 | # Create a minimal context object | COMMENT |
| MEDIUM⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 1100 | # Create a batch with 25 requests (Graph API limit is typically 20) | COMMENT |
| MEDIUM | tools/c7n_azure/tests_azure/test_graph_utils.py | 137 | # Create a proper policy to get a real manager instance | COMMENT |
| MEDIUM⚡ | …/c7n_azure/tests_azure/tests_resources/test_storage.py | 933 | # Create a mock storage account resource | COMMENT |
| MEDIUM⚡ | …/c7n_azure/tests_azure/tests_resources/test_storage.py | 941 | # Create the filter | COMMENT |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 491 | # Create a bad yaml file | COMMENT |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 522 | # Create a bad yaml file | STRING |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 543 | # Create a bad yaml file (no name field) | STRING |
| MEDIUM | …ure/tests_azure/tests_resources/test_container_host.py | 581 | # Create a bad yaml file | STRING |
| MEDIUM | …s_azure/tests_resources/terraform/entraid_user/main.tf | 105 | # Create a security group for testing group membership filters | COMMENT |
| MEDIUM | tools/c7n_azure/tests_azure/templates/provision.sh | 374 | # Create a new modern agent version and then resolve stable agent details. | COMMENT |
| MEDIUM | tools/c7n_org/tests/test_org.py | 676 | # Create an invalid accounts file (missing required field) | COMMENT |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/armor.py | 68 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 61 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 555 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 606 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 656 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/network.py | 374 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/network.py | 427 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/resources/compute.py | 642 | """This method is used to refresh labelFingerprint when a label action fails because the | STRING |
| MEDIUM | …7n_mailer/c7n_mailer/azure_mailer/sendgrid_delivery.py | 112 | # Create a To object instead of an Email object | COMMENT |
| MEDIUM | tools/dev/data_updatearnref.py | 142 | # Create the docs directory | COMMENT |
| MEDIUM | tools/c7n_tencentcloud/tests/test_tc_client.py | 437 | # Create a temporary credentials file | COMMENT |
| MEDIUM | …s/c7n_tencentcloud/c7n_tencentcloud/filters/metrics.py | 152 | # Create a map from resource_id to resource for quick lookup | COMMENT |
| MEDIUM⚡ | c7n/policy.py | 1395 | """This method is no longer called within c7n, and despite being a private | STRING |
| MEDIUM | c7n/resources/firewall.py | 310 | # Create a new log destination object by adding a single LogDestinationConfig array element | COMMENT |
| MEDIUM | c7n/resources/eventbridge.py | 153 | # This function provides custom functionality to query event-rule-targets | COMMENT |
| MEDIUM | c7n/resources/eventbridge.py | 414 | # This function provides custom functionality to query event-rule-targets | COMMENT |
| MEDIUM | c7n/resources/elb.py | 269 | # Create a custom policy with epoch timestamp. | COMMENT |
| MEDIUM | c7n/resources/appmesh.py | 76 | # This method is called in event mode and not pull mode. | COMMENT |
| MEDIUM | c7n/resources/appmesh.py | 205 | # This method is called in event mode and not pull mode. | COMMENT |
| MEDIUM | c7n/resources/ebs.py | 1353 | # Create a current snapshot | COMMENT |
| MEDIUM | tests/test_kafka.py | 277 | # Create a test resource without policy annotation | COMMENT |
| MEDIUM | tests/test_vpc.py | 563 | # Create a mock filter instance | COMMENT |
| MEDIUM | tests/test_vpc.py | 2173 | # Create a mock filter instance | COMMENT |
| MEDIUM | tests/test_quotas.py | 215 | # Create a mock resource where quota equals hard_limit | COMMENT |
| MEDIUM | tests/test_quotas.py | 227 | # Create the action with multiplier that would normally increase | COMMENT |
| MEDIUM | tests/test_quotas.py | 248 | # Create a mock resource where calculated count would exceed hard_limit | COMMENT |
| MEDIUM | tests/test_quotas.py | 260 | # Create the action with multiplier that would exceed hard_limit | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 16 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 57 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 92 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 183 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 231 | # Create the PG | COMMENT |
| MEDIUM | tests/test_rdsparamgroup.py | 271 | # Create the PG | COMMENT |
| MEDIUM | tests/test_appelb.py | 756 | # Create a policy that deletes listeners on a specific port | COMMENT |
| MEDIUM | tests/test_mu.py | 1515 | # Create a module with both *.py and *.pyc. | COMMENT |
| MEDIUM | tests/test_bedrock.py | 62 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 109 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 164 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_bedrock.py | 243 | # Create the job using the helper method with Terraform resources (only in recording mode) | COMMENT |
| MEDIUM | tests/test_s3.py | 3204 | # Create an sns topic | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail_update/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | …erraform/bedrock_application_inference_profile/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | tests/terraform/bedrock_guardrail_tag_actions/main.tf | 9 | # Create an application inference profile | COMMENT |
| MEDIUM | …sts/terraform/bedrock_inference_profile_delete/main.tf | 6 | # Create an application inference profile for delete testing | COMMENT |
| MEDIUM | …rock_application_inference_profile_tag_actions/main.tf | 6 | # Create an application inference profile | COMMENT |
| MEDIUM | docs/source/conf.py | 6 | # This file is execfile()d with the current directory set to its | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_kube/c7n_kube/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_tencentcloud/c7n_tencentcloud/query.py | 0 | metaclass to have consistent action/filter registry for new resources. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/filters.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/filters/labels.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | c7n/tags.py | 0 | filter resources for tag specified future action filters resources by a 'maid_status' tag which specifies a future date | STRING |
| HIGH | …azure/c7n_azure/resources/entraid_security_defaults.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | …/c7n_azure/c7n_azure/resources/entraid_organization.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | …zure/c7n_azure/resources/entraid_conditional_access.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 0 | get resources from microsoft graph api for use with graphsource. | STRING |
| HIGH | tools/c7n_azure/c7n_azure/actions/tagging.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/actions/labels.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | c7n/tags.py | 0 | tag resources for future action. the optional 'tz' parameter can be used to adjust the clock to align with a given timez | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/object_storage.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/dns.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/identity.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_oci/c7n_oci/resources/compute.py | 0 | remove tag action :example: remove the specified tags from the resource. defined tag needs to be referred as 'namespace. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/armor.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/network.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/compute.py | 0 | takes resourcename (from a log) or selflink (from a resource) and parses from it the parameters needed to make a request | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/armor.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/loadbalancer.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/network.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/compute.py | 0 | this method is used to refresh labelfingerprint when a label action fails because the fingerprint was stale. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_kube/c7n_kube/entry.py | 6 | CODE | |
| LOW | tools/c7n_kube/c7n_kube/entry.py | 24 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 37 | CODE | |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/trailcreator.py | 39 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 29 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 5 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 11 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 12 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/entry.py | 13 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 13 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 14 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 15 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 16 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 17 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 18 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid.py | 19 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 18 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 29 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 56 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 93 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 137 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 175 | CODE | |
| LOW | …ols/c7n_azure/tests_azure/test_resolver_integration.py | 218 | CODE | |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 28 | CODE | |
| LOW | tools/c7n_awscc/c7n_awscc/entry.py | 3 | CODE | |
| LOW | tools/c7n_awscc/c7n_awscc/manager.py | 6 | CODE | |
| LOW | tools/c7n_oci/tests/test_multi_region.py | 9 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/query.py | 12 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 9 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 12 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 15 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/entry.py | 18 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 5 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 6 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 10 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/actions/__init__.py | 5 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 35 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 7 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 18 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 21 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/entry.py | 22 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 4 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 5 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 6 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 7 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/filters/__init__.py | 8 | CODE | |
| 73 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 221 | break | COMMENT |
| LOW | tools/c7n_sentry/c7n_sentry/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_logexporter/c7n_logexporter/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/core/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/resources/apps/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_kube/c7n_kube/actions/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_guardian/c7n_guardian/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_trailcreator/c7n_trailcreator/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_openstack/c7n_openstack/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_terraform/tests_terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_terraform/c7n_terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_salactus/c7n_salactus/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_sphinxext/c7n_sphinxext/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/query.py | 361 | # <subscription id> | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/container_host/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/sqldatabase.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/actions/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/test_lock_action.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_azure/tests_azure/tests_resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_awscc/tests/zpill.py | 21 | # Custodian Test Account. This is used only for testing. | COMMENT |
| LOW | tools/c7n_awscc/c7n_awscc/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_awscc/c7n_awscc/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_org/c7n_org/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/c7n_sphere11/c7n_sphere11/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/c7n_autodoc/example_config_file.yml | 1 | --- | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/metrics.py | 101 | dict(name='SurgeQueueLength', statistic='Maximum')] | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/flowrecord.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/sandbox/zerodark/zerodark/floweni.py | 221 | stats['Flows'] += 1 | COMMENT |
| LOW | tools/sandbox/c7n_index/c7n_index/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_oci/c7n_oci/filters/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_oci/c7n_oci/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/tests/test_sql.py | 361 | COMMENT | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_left/c7n_left/providers/terraform/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/utils_email.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/gcp_mailer/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/dev/vector.toml | 1 | # AWS Client Side Monitoring | COMMENT |
| LOW | tools/dev/data_updatearnref.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | tools/dev/data_updatearnref.py | 21 | # this software without specific prior written permission. | COMMENT |
| LOW | tools/ops/azure/container-host/chart/values.yaml | 61 | # SendGrid API key OR SMTP settings | COMMENT |
| LOW | tools/cask/main.go | 1 | // Copyright 2019 Microsoft Corporation | COMMENT |
| LOW | tools/cask/main_test.go | 1 | // Copyright 2019 Microsoft Corporation | COMMENT |
| LOW | tools/c7n_tencentcloud/c7n_tencentcloud/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_tencentcloud/c7n_tencentcloud/output.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | …7n_tencentcloud/c7n_tencentcloud/resources/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_traildb/c7n_traildb/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| LOW | tools/c7n_traildb/c7n_traildb/traildb.py | 121 | # STOP = 42 | COMMENT |
| LOW | c7n/handler.py | 21 | logging.getLogger('urllib3').setLevel(logging.WARNING) | COMMENT |
| LOW | c7n/__init__.py | 1 | # Copyright The Cloud Custodian Authors. | COMMENT |
| 38 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/c7n_azure/tests_azure/test_azure_utils.py | 194 | source = 'Lorem ipsum dolor sit amet' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_azure_utils.py | 194 | source = 'Lorem ipsum dolor sit amet' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 224 | def _setup_mock_session(self, token='fake-token'): | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 913 | self.assertEqual(headers['Authorization'], 'Bearer fake-token-123') | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 926 | mock_token.token = 'fake-token' | CODE |
| LOW⚡ | tools/c7n_azure/tests_azure/test_graph_utils.py | 1096 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 166 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 562 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 622 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 655 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 694 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 786 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 825 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 862 | mock_token.token = 'fake-token-123' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 954 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1011 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1067 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/test_graph_utils.py | 1143 | mock_token.token = 'fake-token' | CODE |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 55 | "displayName": "John Doe", | CODE |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 190 | if os.environ.get(constants.ENV_ACCESS_TOKEN) == "fake_token": | CODE |
| LOW | …tests_azure/cassettes/KeyVaultTest.test_whitelist.json | 356 | "displayName": "John Doe", | CODE |
| LOW | …settes/ApiManagementTest.test_certificates_filter.json | 41 | "publisherEmail": "admin@example.com", | CODE |
| LOW | tools/c7n_azure/tests_azure/templates/alert-logs.json | 15 | "defaultValue": "test@test.com" | CODE |
| LOW | tools/c7n_oci/tests/oci_common.py | 51 | return re.sub(r'"[^"]+@oracle\.com"', '"user@example.com"', data) | CODE |
| LOW | …tests/terraform/identity_compartment/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | …7n_oci/tests/terraform/identity_user/tf_resources.json | 45 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/ip_auth/tf_resources.json | 22 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/zone/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/zone/tf_resources.json | 28 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | …n_oci/tests/terraform/identity_group/tf_resources.json | 9 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/vcn/tf_resources.json | 18 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 17 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 66 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 83 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 164 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 184 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/compute/tf_resources.json | 223 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | …n_oci/tests/terraform/object_storage/tf_resources.json | 22 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/subnet/tf_resources.json | 17 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/subnet/tf_resources.json | 43 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/subnet/tf_resources.json | 63 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_oci/tests/terraform/subnet/tf_resources.json | 104 | "Oracle-Tags.CreatedBy": "user@example.com", | CODE |
| LOW | tools/c7n_mailer/tests/test_utils.py | 379 | ["test@test.com"], | CODE |
| LOW | tools/c7n_mailer/tests/test_email.py | 65 | self.assertTrue(is_email("foo@bar.com")) | CODE |
| LOW | …used_keypair/ec2.DescribeLaunchTemplateVersions_1.json | 32 | "KeyName": "dummy-key-pair", | CODE |
| LOW | …used_keypair/ec2.DescribeLaunchTemplateVersions_1.json | 86 | "KeyName": "dummy-key-pair-01", | CODE |
| LOW | …used_keypair/ec2.DescribeLaunchTemplateVersions_1.json | 140 | "KeyName": "dummy-key-pair-02", | CODE |
| LOW | …nch_template/ec2.DescribeLaunchTemplateVersions_1.json | 32 | "KeyName": "dummy-key-pair", | CODE |
| LOW | …/test_subscription_delete/sns.ListSubscriptions_1.json | 9 | "Endpoint": "test@test.com", | CODE |
| LOW | …/test_subscription_unused/sns.ListSubscriptions_1.json | 9 | "Endpoint": "test@test.com", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_guardian/c7n_guardian/cli.py | 222 | # No role, just use current session | COMMENT |
| MEDIUM | tools/c7n_salactus/c7n_salactus/cli.py | 615 | # unleash the monkies ;-) | COMMENT |
| MEDIUM | …/tests_resources/test_entraid_user_process_resource.py | 11 | """Test _process_resource methods in EntraID User actions with comprehensive coverage.""" | STRING |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 3387 | # Mock comprehensive response with mixed location types | COMMENT |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 3503 | # Define comprehensive policy | COMMENT |
| MEDIUM | …/c7n_azure/tests_azure/tests_resources/test_entraid.py | 4604 | """Test comprehensive named location policies combining multiple filters""" | STRING |
| MEDIUM | …ests_azure/tests_resources/test_resolver_functional.py | 314 | """Test that multiple filters using same blob leverage caching""" | STRING |
| MEDIUM | tools/c7n_gcp/c7n_gcp/output.py | 110 | # utilize. | COMMENT |
| MEDIUM | …ols/c7n_left/c7n_left/providers/terraform/variables.py | 94 | # things with default values to facilitate attribute interpolation. | COMMENT |
| LOW⚡ | tools/c7n_mailer/tests/test_ldap.py | 100 | # for that result, we should query the cache and just return {} | COMMENT |
| LOW | tools/c7n_mailer/c7n_mailer/splunk_delivery.py | 180 | return True # if no exception, just return | CODE |
| LOW | …ols/c7n_tencentcloud/c7n_tencentcloud/resources/clb.py | 185 | # for OPEN CLB, just use internet ip as key | COMMENT |
| LOW | c7n/deprecated.py | 124 | # otherwise we just use the replacement as is. | COMMENT |
| LOW | c7n/policy.py | 583 | # For cli usage by normal users, don't assume the role just use | COMMENT |
| MEDIUM | c7n/mu.py | 1013 | """for AWS Event Sources that want to utilize lazy client initialization. | STRING |
| LOW | c7n/filters/core.py | 318 | # Once 3.10 is no longer supported, just use enum.member | COMMENT |
| MEDIUM | c7n/filters/core.py | 455 | """Fallback for older unit tests that don't utilize a query manager""" | STRING |
| MEDIUM | c7n/filters/core.py | 505 | """Fallback for older unit tests that don't utilize a query manager""" | STRING |
| MEDIUM | c7n/resources/dynamodb.py | 678 | """Override in order to disable the augment for serverless policies. | STRING |
| MEDIUM | c7n/resources/waf.py | 208 | # Essentially a copy of DescribeSource.augment with the addition of Scope and Name parameters | COMMENT |
| MEDIUM | c7n/resources/aws.py | 871 | # We only utilize these regions if they are explicitly passed in on the cli. | COMMENT |
| MEDIUM | c7n/resources/ecr.py | 394 | # see this for a more comprehensive list | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 4 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 6 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 23 | # --------------- | COMMENT |
| MEDIUM | tools/sandbox/c7n_autodoc/example_config_file.yml | 25 | # --------------- | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 52 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 54 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 75 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 77 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 88 | # ========================== | COMMENT |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 90 | # ========================== | COMMENT |
| MEDIUM⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 542 | # ========================== | STRING |
| MEDIUM⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 544 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 285 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 287 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 397 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 399 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 426 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 428 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 477 | # ========================== | STRING |
| MEDIUM | …tch_prediction_job/model_artifact/create_test_model.py | 479 | # ========================== | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_azure/c7n_azure/query.py | 309 | # Check if we're out of a policies execution limits. | COMMENT |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 139 | # Check if policy applies to admin roles and requires MFA | COMMENT |
| LOW | …zure/c7n_azure/resources/entraid_conditional_access.py | 147 | # Check if admin roles are included and MFA is required | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_user.py | 632 | # Check if user has MFA methods configured using v1.0 API | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 213 | # Check if user is a guest | COMMENT |
| LOW | tools/c7n_azure/c7n_azure/resources/entraid_group.py | 217 | # Check if user is external (from different domain) | COMMENT |
| LOW | tools/c7n_org/c7n_org/cli.py | 615 | # Check if string contains variable placeholders | COMMENT |
| LOW | tools/c7n_org/c7n_org/cli.py | 865 | # Check if deprecations should fail in strict mode | COMMENT |
| LOW | …/tests/terraform/vertexai_batch_prediction_job/main.tf | 45 | # Output values for use in tests | COMMENT |
| LOW⚡ | …tch_prediction_job/model_artifact/create_test_model.py | 166 | # Check if docker is available | COMMENT |
| LOW | …/c7n_gcp/tests/scripts/cleanup_vertex_ai_batch_jobs.py | 123 | # Check if display name matches our test pattern | COMMENT |
| LOW | tools/c7n_gcp/c7n_gcp/resources/vertexai.py | 396 | # Check if URI is a GCS path | COMMENT |
| LOW | c7n/query.py | 553 | # Check if we're out of a policies execution limits. | COMMENT |
| LOW | c7n/cwe.py | 113 | # Check if we have a short cut / alias | COMMENT |
| LOW | c7n/filters/iamaccess.py | 221 | # Check if it's a wildcard or already whitelisted account | COMMENT |
| LOW | c7n/filters/iamrole.py | 225 | # Check if all non-None role values are in the allowed list | COMMENT |
| LOW | c7n/resources/vpc.py | 648 | # Check if list contains 'amazon' synthetic value | COMMENT |
| LOW | c7n/resources/elasticache.py | 243 | # Check if any available upgrades match this resource's engine | COMMENT |
| LOW | c7n/resources/kafka.py | 193 | # Check if it's a major version upgrade | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 120 | # Step 1: Add a tag | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 145 | # Step 2: Remove the tag | COMMENT |
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 175 | # Step 1: Add multiple test tags | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 202 | # Step 2: Trim tags with space=0, preserving only cctest_preserve | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 218 | # Step 3: Verify tags were trimmed | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 271 | # Step 1: Mark the subscription for action (using default 4 days) | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 295 | # Step 2: Filter for marked subscriptions | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 921 | # Step 1: Stop the running job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 946 | # Step 2: Wait for the stop action to take effect and verify cancellation | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 995 | # Step 3: Delete the cancelled job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1024 | # Step 4: Verify the job no longer exists | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 89 | ### Step 1: Create the Model Storage Bucket | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 105 | ### Step 2: Create and Upload the Test Model | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 191 | ### Step 3: Set Environment Variables (Optional) | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 209 | ### Step 4: Generate Test Data if needed | COMMENT |
| LOW | …erraform/vertexai_batch_prediction_job/vertex_batch.md | 232 | ### Step 5: Run the Functional Test | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/c7n_azure/c7n_azure/resolver.py | 15 | Resolve an azure:// URI to blob content. Args: uri: Azure blob URI in format azure://account.blob.core.wind | STRING |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 20 | Get full model resource name for testing. Uses the model ID from environment variable and constructs the full r | STRING |
| HIGH | tools/c7n_gcp/tests/test_vertexai.py | 61 | Poll a policy until resources reach expected state(s). Args: policy: Cloud Custodian policy to run | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/client.py | 442 | Executes query (ex. list) via a dedicated http object. Args: verb (str): Method to execute on the c | STRING |
| HIGH | tools/c7n_gcp/c7n_gcp/resources/vertexai.py | 382 | Validate that a schema URI points to a valid YAML file. Args: schema_uri: GCS URI to schema file (e | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 94 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/object_storage.py | 129 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 83 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/dns.py | 117 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 79 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 115 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 202 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 235 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 320 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/virtual_network.py | 353 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 77 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 112 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 198 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 231 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 316 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/identity.py | 349 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 69 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 112 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 149 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 185 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 235 | def perform_action(self, resource): | CODE |
| LOW | tools/c7n_oci/c7n_oci/actions/base.py | 58 | def perform_action(self, resource): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_kube/c7n_kube/server.py | 95 | CODE | |
| LOW | tools/c7n_salactus/c7n_salactus/cli.py | 457 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/query.py | 130 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/utils.py | 376 | CODE | |
| LOW | tools/c7n_azure/c7n_azure/filters.py | 979 | CODE | |
| LOW | tools/c7n_azure/tests_azure/azure_common.py | 261 | CODE | |
| LOW | tools/sandbox/zerodark/zerodark/floweni.py | 400 | CODE | |
| LOW | tools/c7n_oci/tests/test_output.py | 292 | CODE | |
| LOW | tools/c7n_oci/tests/test_output.py | 312 | CODE | |
| LOW | tools/c7n_oci/c7n_oci/resources/compute.py | 155 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/client.py | 283 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/dns.py | 155 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/spanner.py | 183 | CODE | |
| LOW | tools/c7n_gcp/c7n_gcp/resources/compute.py | 853 | CODE | |
| LOW | tools/c7n_left/c7n_left/cli.py | 211 | CODE | |
| LOW | tools/dev/data_updatearnref.py | 128 | CODE | |
| LOW | c7n/resolver.py | 86 | CODE | |
| LOW | c7n/output.py | 489 | CODE | |
| LOW | c7n/filters/offhours.py | 494 | CODE | |
| LOW | c7n/resources/elasticsearch.py | 937 | CODE | |
| LOW | c7n/resources/kinesis.py | 150 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 120 | # Step 1: Add a tag | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 145 | # Step 2: Remove the tag | COMMENT |
| LOW⚡ | …azure/tests_azure/tests_resources/test_subscription.py | 175 | # Step 1: Add multiple test tags | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 202 | # Step 2: Trim tags with space=0, preserving only cctest_preserve | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 218 | # Step 3: Verify tags were trimmed | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 271 | # Step 1: Mark the subscription for action (using default 4 days) | COMMENT |
| LOW | …azure/tests_azure/tests_resources/test_subscription.py | 295 | # Step 2: Filter for marked subscriptions | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 921 | # Step 1: Stop the running job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 946 | # Step 2: Wait for the stop action to take effect and verify cancellation | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 995 | # Step 3: Delete the cancelled job | COMMENT |
| LOW | tools/c7n_gcp/tests/test_vertexai.py | 1024 | # Step 4: Verify the job no longer exists | COMMENT |
| LOW | …ols/c7n_tencentcloud/c7n_tencentcloud/resources/cam.py | 298 | # we need to check if it satisfies the former filter | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | c7n/cwe.py | 9 | # **These are just shortcuts**, you can use the policy definition to | COMMENT |
| MEDIUM | …lient_certificate_filter/apigateway.GetRestApis_1.json | 9 | "description": "This is my API for demonstration purposes", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/c7n_sentry/c7n_sentry/c7nsentry.py | 421 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/c7n_mailer/c7n_mailer/replay.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | c7n/reports/__init__.py | 5 | __all__ = [report] | CODE |