Home / cloudquery / cloudquery
AI Slop Code RIsk Monitor

cloudquery/cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

5.7 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for cloudquery/cloudquery, a Go project with 6,542 GitHub stars. SynthScan examined 158,252 lines of code across 1368 source files, recording 384 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 5.7 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

5.7
Adjusted Signal
5.7
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
6.5K
Stars
Go
Language
158.3K
Lines of Code
1.4K
Files
384
Pattern Hits
2026-10-12
Scan Date
0.02
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 19.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 319 finding(s).

Hallucinated Dependency & Supply Chain Risk 6.4/100 · LOW

Are imports declared and package/API names verified? 62 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 9 finding(s).

PR Review Velocity Impact 28.2/100 · MEDIUM

Which changes need focused human review? 384 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 26MEDIUM 267LOW 91

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 384 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Modern AI Meta-Vocabulary265 hits · 633 pts
SeverityFileLineSnippetContext
MEDIUM⚡cli/cmd/init.go377 // CQ_PLATFORM_TOKEN), scaffold a source-only spec that targets the platformCOMMENT
MEDIUM⚡cli/cmd/init.go385 // versions to scaffold, and a session reused for the recommended-tablesCOMMENT
MEDIUM⚡cli/cmd/init.go387 // so fail rather than scaffold a spec that would break later.COMMENT
MEDIUMcli/cmd/init.go490 // Platform tenant + no explicit destination → scaffold a source-only spec;COMMENT
MEDIUMcli/internal/platform/inject.go95// to report, the pinned source versions to scaffold, and a session for furtherCOMMENT
MEDIUMcli/internal/platform/inject.go119// so init should fail now rather than scaffold a spec that breaks at sync time.COMMENT
MEDIUMcli/internal/platform/inject.go133 // so fail now rather than scaffold a spec that 401s at sync time. OtherCOMMENT
MEDIUMcli/internal/platform/inject.go174// extra mint). A platform scaffold is required for platform init — any failure,COMMENT
MEDIUMcli/internal/platform/inject_test.go287 // so init must fail rather than scaffold a source-only spec that would break.COMMENT
MEDIUMcli/internal/platform/inject_test.go329 // silently scaffold a spec that 401s at sync time.COMMENT
MEDIUMcli/internal/platform/inject_test.go437 // No session and empty path are errors — a platform scaffold is required.COMMENT
MEDIUM.github/workflows/release_scaffold.yml29 # Tag format is scaffold-<version>COMMENT
MEDIUM⚡scaffold/CHANGELOG.md3## [3.4.48](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.47...scaffold-v3.4.48) (2026-07-09)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md3## [3.4.48](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.47...scaffold-v3.4.48) (2026-07-09)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md12## [3.4.47](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.46...scaffold-v3.4.47) (2026-06-02)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md12## [3.4.47](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.46...scaffold-v3.4.47) (2026-06-02)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md20## [3.4.46](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.45...scaffold-v3.4.46) (2026-05-12)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md20## [3.4.46](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.45...scaffold-v3.4.46) (2026-05-12)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md32## [3.4.45](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.44...scaffold-v3.4.45) (2026-04-03)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md32## [3.4.45](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.44...scaffold-v3.4.45) (2026-04-03)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md41## [3.4.44](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.43...scaffold-v3.4.44) (2026-03-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md41## [3.4.44](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.43...scaffold-v3.4.44) (2026-03-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md54## [3.4.43](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.42...scaffold-v3.4.43) (2026-03-16)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md54## [3.4.43](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.42...scaffold-v3.4.43) (2026-03-16)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md64## [3.4.42](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.41...scaffold-v3.4.42) (2026-02-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md64## [3.4.42](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.41...scaffold-v3.4.42) (2026-02-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md72## [3.4.41](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.40...scaffold-v3.4.41) (2026-02-14)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md72## [3.4.41](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.40...scaffold-v3.4.41) (2026-02-14)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md84## [3.4.40](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.39...scaffold-v3.4.40) (2026-01-15)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md84## [3.4.40](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.39...scaffold-v3.4.40) (2026-01-15)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md91## [3.4.39](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.38...scaffold-v3.4.39) (2026-01-08)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md91## [3.4.39](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.38...scaffold-v3.4.39) (2026-01-08)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md100## [3.4.38](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.37...scaffold-v3.4.38) (2025-12-22)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md100## [3.4.38](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.37...scaffold-v3.4.38) (2025-12-22)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md107## [3.4.37](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.36...scaffold-v3.4.37) (2025-12-19)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md107## [3.4.37](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.36...scaffold-v3.4.37) (2025-12-19)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md120## [3.4.36](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.35...scaffold-v3.4.36) (2025-11-14)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md120## [3.4.36](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.35...scaffold-v3.4.36) (2025-11-14)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md127## [3.4.35](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.34...scaffold-v3.4.35) (2025-11-06)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md127## [3.4.35](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.34...scaffold-v3.4.35) (2025-11-06)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md135## [3.4.34](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.33...scaffold-v3.4.34) (2025-10-30)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md135## [3.4.34](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.33...scaffold-v3.4.34) (2025-10-30)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md142## [3.4.33](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.32...scaffold-v3.4.33) (2025-09-04)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md142## [3.4.33](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.32...scaffold-v3.4.33) (2025-09-04)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md149## [3.4.32](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.31...scaffold-v3.4.32) (2025-08-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md149## [3.4.32](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.31...scaffold-v3.4.32) (2025-08-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md162## [3.4.31](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.30...scaffold-v3.4.31) (2025-08-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md162## [3.4.31](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.30...scaffold-v3.4.31) (2025-08-27)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md169## [3.4.30](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.29...scaffold-v3.4.30) (2025-07-31)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md169## [3.4.30](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.29...scaffold-v3.4.30) (2025-07-31)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md179## [3.4.29](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.28...scaffold-v3.4.29) (2025-07-24)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md179## [3.4.29](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.28...scaffold-v3.4.29) (2025-07-24)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md187## [3.4.28](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.27...scaffold-v3.4.28) (2025-07-15)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md187## [3.4.28](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.27...scaffold-v3.4.28) (2025-07-15)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md194## [3.4.27](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.26...scaffold-v3.4.27) (2025-07-11)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md194## [3.4.27](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.26...scaffold-v3.4.27) (2025-07-11)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md202## [3.4.26](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.25...scaffold-v3.4.26) (2025-07-02)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md202## [3.4.26](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.25...scaffold-v3.4.26) (2025-07-02)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md213## [3.4.25](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.24...scaffold-v3.4.25) (2025-05-28)COMMENT
MEDIUM⚡scaffold/CHANGELOG.md213## [3.4.25](https://github.com/cloudquery/cloudquery/compare/scaffold-v3.4.24...scaffold-v3.4.25) (2025-05-28)COMMENT
205 more matches not shown…
Cross-Language Confusion26 hits · 172 pts
SeverityFileLineSnippetContext
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py24 if t.equals(binary()) or t.equals(large_binary()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py26 elif t.equals(string()) or t.equals(large_string()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py29 t.equals(int8())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py30 or t.equals(int16())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py31 or t.equals(int32())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py32 or t.equals(int64())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py33 or t.equals(uint8())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py34 or t.equals(uint16())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py35 or t.equals(uint32())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py36 or t.equals(uint64())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py39 elif t.equals(float16()) or t.equals(float32()) or t.equals(float64()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py41 elif t.equals(bool_()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py43 elif t.equals(timestamp("us")):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py50 if t.equals(binary()) or t.equals(large_binary()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py52 elif t.equals(string()) or t.equals(large_string()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py55 t.equals(int8())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py56 or t.equals(int16())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py57 or t.equals(int32())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py58 or t.equals(int64())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py59 or t.equals(uint8())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py60 or t.equals(uint16())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py61 or t.equals(uint32())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py62 or t.equals(uint64())CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py65 elif t.equals(float16()) or t.equals(float32()) or t.equals(float64()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py67 elif t.equals(bool_()):CODE
HIGH⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py69 elif t.equals(timestamp("us")):CODE
Over-Commented Block37 hits · 37 pts
SeverityFileLineSnippetContext
LOW…rce/hackernews/resources/services/items/items_fetch.go21// Because this is an incremental table, we must first load the cursor from the state backend, and then updateCOMMENT
LOW…tination/clickhouse/typeconv/arrow/types/clickhouse.go1package typesCOMMENT
LOW…ugins/destination/clickhouse/typeconv/ch/values/doc.go1// Package values allows conversion from Apache Arrow array to the type accepted by ClickHouse SDKCOMMENT
LOWplugins/destination/clickhouse/client/spec/spec.go21 // - `"clickhouse://username:password@host1:9000,host2:9000/database?dial_timeout=200ms&max_execution_time=60"`COMMENT
LOWplugins/destination/clickhouse/client/spec/spec.go61 // If unset, the partitioning will apply to all tables.COMMENT
LOWplugins/destination/clickhouse/client/spec/spec.go81 //COMMENT
LOWplugins/destination/clickhouse/client/spec/spec.go101 //COMMENT
LOWplugins/destination/clickhouse/client/spec/spec.go121 //COMMENT
LOWplugins/destination/postgresql/client/spec/spec.go41 BatchTimeout configtype.Duration `json:"batch_timeout,omitempty"`COMMENT
LOWplugins/destination/postgresql/client/spec/spec.go81// LakebaseSpec enables connecting to Databricks Lakebase, a PostgreSQL-compatibleCOMMENT
LOWplugins/destination/s3/docs/_configuration.md21 # CSV specific parameters:COMMENT
LOWplugins/destination/s3/client/client.go201 }COMMENT
LOWplugins/destination/s3/client/spec/credentials.go1package specCOMMENT
LOWplugins/destination/s3/client/spec/spec.go41 // Should be set to the name of the profile.COMMENT
LOWplugins/destination/s3/client/spec/spec.go61 // The path supports the following placeholder variables:COMMENT
LOWplugins/destination/file/docs/_configuration.md21 # Parquet specific parameters:COMMENT
LOWplugins/destination/file/client/spec/spec.go21 varDay = "{{DAY}}"COMMENT
LOWplugins/destination/file/client/spec/spec.go41 // **Note** that timestamps are in `UTC` and will be the current time at the time the file is written, not when the syCOMMENT
LOWplugins/destination/azblob/docs/_configuration.md21 # root_repetition: "repeated"COMMENT
LOWplugins/destination/azblob/client/spec/spec.go21 Path string `json:"path,omitempty" jsonschema:"required,minLength=1"`COMMENT
LOWplugins/destination/mongodb/docs/_configuration.md21 # max_backoff: "10s"COMMENT
LOW…on/mongodb/client/spec/workload_identity_federation.go1package specCOMMENT
LOW…ins/destination/mongodb/client/spec/aws_credentials.go1package specCOMMENT
LOWplugins/destination/meilisearch/client/spec.go21 //COMMENT
LOWplugins/destination/kafka/docs/_configuration.md21 format_spec:COMMENT
LOWplugins/destination/mssql/client/spec.go21COMMENT
LOW…ugins/destination/elasticsearch/docs/_configuration.md21 # service_token: ""COMMENT
LOWplugins/destination/gcs/docs/_configuration.md21 # version: "v2Latest"COMMENT
LOWplugins/destination/gcs/client/spec/spec.go41 // - `{{DAY}}` will be replaced with the current day in `DD` formatCOMMENT
LOWcli/cmd/testdata/init/aws_example.md21 # max_retries: 10COMMENT
LOWcli/cmd/testdata/addon-v1/changelog.md1# Test Addon ChangelogCOMMENT
LOWcli/cmd/testdata/addon-v1/readme.md1# Test Addon READMECOMMENT
LOWcli/internal/platform/inject.go101 // empty if a directly supplied CQ_PLATFORM_TOKEN predates url-carrying tokens.COMMENT
LOWcli/internal/platform/inject.go281 })COMMENT
LOW.github/workflows/codeql.yml1# For most projects, this workflow file will not need changing; you simply needCOMMENT
LOW.github/workflows/validate_pr_title.yml41 mainCOMMENT
LOW.github/workflows/validate_pr_title.yml61 # When using "Squash and merge" on a PR with only one commit, GitHubCOMMENT
Unused Imports27 hits · 27 pts
SeverityFileLineSnippetContext
LOWplugins/source/square/plugin/__init__.py1CODE
LOWplugins/source/square/plugin/tables/__init__.py1CODE
LOWplugins/source/square/plugin/tables/__init__.py2CODE
LOWplugins/source/square/plugin/tables/__init__.py3CODE
LOWplugins/source/square/plugin/tables/__init__.py4CODE
LOWplugins/source/square/plugin/tables/__init__.py5CODE
LOWplugins/source/square/plugin/tables/__init__.py6CODE
LOWplugins/source/square/plugin/tables/__init__.py7CODE
LOWplugins/source/square/plugin/oapi/__init__.py1CODE
LOWplugins/source/square/plugin/client/__init__.py1CODE
LOWplugins/source/square/plugin/client/__init__.py1CODE
LOWplugins/source/typeform/plugin/__init__.py1CODE
LOWplugins/source/typeform/plugin/tables/form_responses.py9CODE
LOWplugins/source/typeform/plugin/tables/__init__.py1CODE
LOWplugins/source/typeform/plugin/client/__init__.py1CODE
LOWplugins/source/typeform/plugin/client/__init__.py1CODE
LOWplugins/destination/sqlite-python/plugin/__init__.py1CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py1CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py3CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py4CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py7CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py11CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py12CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py12CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py13CODE
LOW…ns/destination/sqlite-python/plugin/client/__init__.py1CODE
LOW…ns/destination/sqlite-python/plugin/client/__init__.py1CODE
Fake / Example Data9 hits · 10 pts
SeverityFileLineSnippetContext
LOWplugins/destination/postgresql/client/lakebase_test.go46 ClientID: "dummy-id",CODE
LOWplugins/destination/postgresql/client/lakebase_test.go89 ClientID: "dummy-id",CODE
LOWplugins/destination/postgresql/client/lakebase_test.go126 ClientID: "dummy-id",CODE
LOW…testdata/upgrade-check/okta-overwrite-delete-stale.yml11 token: "placeholder"CODE
LOW⚡cli/cmd/testdata/upgrade-check/datadog.yml11 - name: "placeholder"CODE
LOW⚡cli/cmd/testdata/upgrade-check/datadog.yml12 api_key: "placeholder"CODE
LOW⚡cli/cmd/testdata/upgrade-check/datadog.yml13 app_key: "placeholder"CODE
LOWcli/cmd/testdata/upgrade-check/okta-append.yml11 token: "placeholder"CODE
LOWcli/cmd/testdata/upgrade-check/gcp-selected-tables.yml12 project_ids: ["placeholder"]CODE
Deep Nesting8 hits · 6 pts
SeverityFileLineSnippetContext
LOWplugins/destination/sqlite-python/plugin/plugin.py46CODE
LOW…ins/destination/sqlite-python/plugin/sqlite/migrate.py118CODE
LOW…ins/destination/sqlite-python/plugin/sqlite/migrate.py130CODE
LOW…nation/sqlite-python/plugin/sqlite/type_conversions.py23CODE
LOW…nation/sqlite-python/plugin/sqlite/type_conversions.py49CODE
LOW…nation/sqlite-python/plugin/sqlite/type_conversions.py75CODE
LOW…gins/destination/sqlite-python/plugin/client/client.py93CODE
LOW…nation/sqlite-python/plugin/client/type_conversions.py4CODE
Slop Phrases2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/codeql.yml62 # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize howCOMMENT
MEDIUM.github/workflows/validate_pr_title.yml47 # If `subjectPattern` is configured, you can use this property to overrideCOMMENT
Hyper-Verbose Identifiers6 hits · 6 pts
SeverityFileLineSnippetContext
LOWplugins/source/typeform/tests/typeform/test_client.py13class MockServerRequestHandler(BaseHTTPRequestHandler):CODE
LOWplugins/source/typeform/tests/typeform/test_client.py114 def test_list_forms_responses(self):CODE
LOW…ins/destination/sqlite-python/plugin/sqlite/migrate.py89 def non_auto_migratable_tables(CODE
LOW…ins/destination/sqlite-python/plugin/sqlite/migrate.py187 def create_table_if_not_exist(self, table: Table) -> Optional[Exception]:CODE
LOW⚡…nation/sqlite-python/plugin/sqlite/type_conversions.py75def sqlite_type_to_arrow_type(t: str) -> DataType:CODE
LOW…n/sqlite-python/plugin/client/test_type_conversions.py5def test_arrow_type_to_sqlite_str():CODE
Modern Structural Boilerplate3 hits · 3 pts
SeverityFileLineSnippetContext
LOWplugins/source/square/plugin/plugin.py25 def set_logger(self, logger) -> None:CODE
LOWplugins/source/typeform/plugin/plugin.py33 def set_logger(self, logger) -> None:CODE
LOWplugins/destination/sqlite-python/plugin/plugin.py35 def set_logger(self, logger) -> None:CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOW.github/workflows/delete_vercel_deployments.yml36 # Check if the comment contains "Unique Vercel deployment URL"COMMENT