3.1

Adjusted Signal

3.1

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

2.4K

Stars

Language

1.2M

Lines of Code

4.8K

Files

3.3K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 12.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3054 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 114 finding(s).

Agent Over-Engineering Ratio 2.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 203 finding(s).

PR Review Velocity Impact 15.4/100 · LOW

Which changes need focused human review? 3330 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 9MEDIUM 296LOW 3025

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3330 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block2676 hits · 2368 pts

Severity	File	Line	Snippet	Context
LOW	.clomonitor.yml	1	# CLOMonitor metadata file, read when CLOMonitor lints this repository:	COMMENT
LOW	cmd/cozypkg/cmd/tap.go	541	// A tap-managed registration Package (left by an older Cozystack that	COMMENT
LOW	cmd/cozypkg/cmd/init.go	41	Path string	COMMENT
LOW	cmd/backport-audit/main.go	81	`(?:\s+to\s+\x60?release-\d+\.\d+\x60?,?\s+together with\s+(` + prRefList + `))?`)	COMMENT
LOW	cmd/backport-audit/main.go	101	// them: at the time of writing, 290 labelled PRs, 217 releases, and at most 54	COMMENT
LOW	cmd/backport-audit/main.go	121	return limit, "re-run with a higher --limit"	COMMENT
LOW	cmd/backupstrategy-controller/main.go	181	},	COMMENT
LOW	cmd/cozystack-controller/main.go	201	LeaderElectionID: "19a0338c.cozystack.io",	COMMENT
LOW	cmd/cozystack-controller/main.go	221	// LeaderElectionReleaseOnCancel defines if the leader should step down voluntarily	COMMENT
LOW	cmd/cozystack-controller/main.go	301	Scheme: mgr.GetScheme(),	COMMENT
LOW	cmd/backup-controller/main.go	101	// Metrics endpoint is enabled in 'config/default/kustomization.yaml'. The Metrics options configure the server.	COMMENT
LOW	cmd/cozystack-operator/main.go	481		COMMENT
LOW	tools/openapi-gen/main.go	1	// Copyright 2024 The Cozystack Authors.	COMMENT
LOW	test/check-readiness/main_test.go	1	// Package checkreadiness_test is a black-box test suite for the check-readiness	COMMENT
LOW	internal/apigate/parse_test.go	481	// BenchmarkLoadSnapshotRealTree tracks LoadSnapshot's wall-clock cost against	COMMENT
LOW	internal/apigate/schemadiff.go	321	// asymmetry is deliberate:	COMMENT
LOW	internal/apigate/model.go	21	// deterministic — it parses the checked-in, codegen-kept-in-sync artifacts	COMMENT
LOW	internal/apigate/model.go	41	// from head. Deleting a group withdraws its whole API surface.	COMMENT
LOW	internal/apigate/model.go	61	// from the apiserver storage registrations. These carry no checked-in	COMMENT
LOW	internal/apigate/snapshot.go	21	"io/fs"	COMMENT
LOW	internal/apigate/snapshot.go	181	if len(snap) == 0 {	COMMENT
LOW	internal/apigate/parse.go	161	// pkg/apiserver/apiserver.go to their API group. The apps map is intentionally	COMMENT
LOW	internal/apigate/parse.go	181	// in storageVarGroups. Rather than silently dropping them — which would let a	COMMENT
LOW	internal/apigate/parse.go	221	// apiServicePlural is the sentinel Plural used for SourceAPIService	COMMENT
LOW	internal/apigate/parse.go	281	// helmDirectiveLine matches a line that is entirely Go-template/Helm markup	COMMENT
LOW	internal/apigate/parse.go	301	return yaml.Unmarshal(helmDirectiveLine.ReplaceAll(doc, nil), out)	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	1	// Package fluxcontract holds contract tests for upstream Flux types this	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	61	// this has to say occurrence or it claims more than the pattern saw.	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	81	//	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	101	//	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	121	// A form this pattern does not cover reddens rather than passing: the caller	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	141	// The trailing `\b` ends the name. Without it a read left pointing at a retired	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	161	// start of a line. An anchor here would have to enumerate the ways an	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	181	}	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	201		COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	541	// the guard call m starts before that call. m holds the call's offsets as	COMMENT
LOW	internal/fluxcontract/snapshot_shape_test.go	721	testing.TB	COMMENT
LOW	internal/marketplace/tapconst/tapconst.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	internal/marketplace/tapconst/tapconst.go	21	// source name, so the source's finalizer can clean them up and a re-tap can	COMMENT
LOW	internal/marketplace/naming/naming.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	internal/marketplace/collision/collision.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	internal/marketplace/collision/collision.go	41		COMMENT
LOW	internal/securitygroupcontroller/reconciler.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	internal/securitygroupcontroller/reconciler.go	201	}	COMMENT
LOW	internal/securitygroupcontroller/cilium.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	internal/shared/appdefowner/appdefowner.go	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	…nal/controller/applicationdefinition_helmreconciler.go	221	// Check and update the readiness wait. cozystack-api reads	COMMENT
LOW	internal/controller/workloadmonitor_controller.go	81	// stack that scrapes it run outside this cluster.	COMMENT
LOW	internal/controller/workloadmonitor_controller.go	141	var dataVolumeGVK = schema.GroupVersionKind{Group: "cdi.kubevirt.io", Version: "v1beta1", Kind: "DataVolume"}	COMMENT
LOW	internal/controller/workloadmonitor_controller.go	181	switch phase {	COMMENT
LOW	internal/controller/workloadmonitor_controller.go	361	// +kubebuilder:rbac:groups=cozystack.io,resources=workloadmonitors,verbs=get;list;watch;create;update;patch;delete	COMMENT
LOW	internal/controller/tenantquota/reconciler.go	41	)	COMMENT
LOW	internal/controller/tenantquota/reconciler.go	141	// tenant HelmReleases), each tenant's declared budget, current usage per	COMMENT
LOW	internal/controller/tenantquota/pool.go	21	// parent's remaining pool.	COMMENT
LOW	internal/controller/tenantquota/pool.go	141	}	COMMENT
LOW	internal/controller/cacert/reconciler.go	21	// holds ca.crt almost always holds a private key next to it: the cert-manager	COMMENT
LOW	internal/controller/cacert/reconciler.go	41	// The lineage admission webhook decides whether the tenant may read the	COMMENT
LOW	internal/controller/cacert/reconciler.go	121	// be overwritten is isOurProjection's call, and it does not look at this	COMMENT
LOW	internal/controller/cacert/reconciler.go	141	//	COMMENT
LOW	internal/controller/cacert/reconciler.go	161	// a trust anchor the platform withdrew.	COMMENT
2616 more matches not shown…

Decorative Section Separators151 hits · 420 pts

Severity	File	Line	Snippet	Context
MEDIUM	hack/e2e-container-up.sh	151	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	160	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	176	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	182	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	194	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	204	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	290	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-container-up.sh	292	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	hack/check-host-runtime.sh	2	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	hack/check-host-runtime.sh	29	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-chainsaw/_lib/run-kubernetes.sh	6292	# ----------------------------------------------------------------------	COMMENT
MEDIUM	hack/e2e-chainsaw/_lib/run-kubernetes.sh	6298	# ----------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/velero/charts/velero/values.yaml	465	# --------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	162	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	165	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	297	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	303	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	398	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	408	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	465	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/system/seaweedfs/tests/naming_guard_test.yaml	474	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	36	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	38	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	107	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	110	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	341	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	343	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	377	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	379	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	445	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	447	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	519	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	527	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	588	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	590	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	612	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	615	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	640	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	642	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	655	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	659	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	687	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	691	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	704	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	711	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	734	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	743	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	774	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	778	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	791	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	797	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	808	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	813	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	873	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	877	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	932	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	937	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	1049	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	1158	# -------------------------------------------------------------------	COMMENT
MEDIUM	packages/apps/mariadb/tests/tls_test.yaml	1163	# -------------------------------------------------------------------	COMMENT
91 more matches not shown…

AI Slop Vocabulary74 hits · 238 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	hack/select-e2e.sh	460	# examples/backups/<app>/ as its harness, so an edit there must run that	COMMENT
MEDIUM⚡	hack/select-e2e.sh	464	# to the harness selects a suite that cannot exercise it. A dir with no	COMMENT
MEDIUM⚡	hack/select-e2e.sh	467	# full-suite safety net). The redis walkthrough is the one harness shared	COMMENT
MEDIUM	hack/select-e2e.sh	81	# - the e2e harness itself: hack/.sh, hack/e2e-.bats and hack/e2e-*.yaml.	COMMENT
MEDIUM	hack/select-e2e.sh	119	# examples/backups/ are handled above as real test harness	COMMENT
MEDIUM	hack/select-e2e.sh	205	# not selected, and an edit to a backup harness that should run its suite	COMMENT
MEDIUM	hack/select-install.sh	346	# reverse test selection, while these dependencies belong to the install harness.	COMMENT
MEDIUM	hack/select-install.sh	459	# harness's known undeclared requirements; only a fresh live run can establish	COMMENT
MEDIUM	hack/e2e-talos-image-cache.yaml	25	# single tightly-scoped hole for that path. The e2e harness only points tenants	COMMENT
MEDIUM	hack/e2e-talos-image-cache.yaml	75	# succeeds, so "Available" is the e2e harness's signal that the mirror is	COMMENT
MEDIUM	hack/e2e-capture-dataplane.sh	191	# still announcing (last event = announce) qualifies. This is robust to the	COMMENT
MEDIUM	hack/e2e-chainsaw/clickhouse/chainsaw-test.yaml	228	# harness so the test and the documented flow can never drift — the same reason	COMMENT
MEDIUM	hack/e2e-chainsaw/clickhouse/chainsaw-test.yaml	273	# couple, and the names are the harness's to choose.	COMMENT
MEDIUM	hack/e2e-chainsaw/clickhouse/chainsaw-test.yaml	318	# from a prior run would satisfy the harness's Succeeded wait instantly and	COMMENT
MEDIUM	hack/e2e-chainsaw/clickhouse/chainsaw-test.yaml	368	# Removes every resource the harness created (chainsaw did not apply them,	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mariadb/chainsaw-test.yaml	415	# validated example scripts (examples/backups/mariadb) as the harness so the	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mariadb/chainsaw-test.yaml	422	# the same harness-driving shape as etcd-2-backup-roundtrip	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mariadb/chainsaw-test.yaml	430	# while a tenant-root Pod reaches it over same-tenant egress. The harness	COMMENT
MEDIUM	hack/e2e-chainsaw/mariadb/chainsaw-test.yaml	510	# Removes every resource the harness created (chainsaw did not apply them,	COMMENT
MEDIUM	hack/e2e-chainsaw/_lib/run-kubernetes.sh	724	# generic name if sourced outside the Chainsaw harness.	COMMENT
MEDIUM	hack/e2e-chainsaw/_lib/run-kubernetes.sh	4990	# the cluster for a broken harness.	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	348	# example scripts (examples/backups/mongodb) as the harness so the test and the	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	356	# generated credentials stop authenticating and the harness cannot read the	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	363	# Same harness-driving shape as mariadb-2-backup-roundtrip	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	371	# while a tenant-root Pod reaches it over same-tenant egress. The harness	COMMENT
MEDIUM	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	448	# fails the step if SKIP_RESTORE stops reaching the harness. run-all.sh	COMMENT
MEDIUM	hack/e2e-chainsaw/mongodb/chainsaw-test.yaml	453	# Removes every resource the harness created (chainsaw did not apply them,	COMMENT
MEDIUM	hack/e2e-chainsaw/postgres/chainsaw-test.yaml	256	# example scripts (examples/backups/postgres) as the harness so the test and	COMMENT
MEDIUM	hack/e2e-chainsaw/postgres/chainsaw-test.yaml	274	# tenant-root Pod reaches it over same-tenant egress. The harness targets the	COMMENT
MEDIUM	hack/e2e-chainsaw/postgres/chainsaw-test.yaml	340	# so the apps are not stranded, then removes every resource the harness	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/kafka/chainsaw-test.yaml	187	# driving the validated example scripts (examples/backups/kafka) as the harness	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/kafka/chainsaw-test.yaml	196	# harness-driving shape as mariadb-2-backup-roundtrip	COMMENT
MEDIUM⚡	hack/e2e-chainsaw/kafka/chainsaw-test.yaml	205	# while a tenant-root Pod reaches it over same-tenant egress. The harness	COMMENT
MEDIUM	hack/e2e-chainsaw/kafka/chainsaw-test.yaml	310	# Removes every resource the harness created (chainsaw did not apply them,	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	409	# S3 target: like vmdisk-2-backup-roundtrip, the harness stands up a throwaway	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	418	# harness deletes the throwaway BSL.	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	536	# Prune everything the harness created — the example cleanup (cluster-scoped	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	546	# Always tear down the harness-owned BSL, but keep a cleanup.sh failure	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	586	# postgres round-trip targets the in-cluster endpoint). So the harness stands up	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	598	# BackupClass/strategy and the cozy-velero Velero Backup/Restore, and the harness	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	711	# Prune the harness-created resources: the example cleanup (cluster-scoped	COMMENT
MEDIUM	hack/e2e-chainsaw/vminstance/chainsaw-test.yaml	722	# Always tear down the harness-owned BSL, but keep a cleanup.sh failure	COMMENT
MEDIUM	hack/e2e-chainsaw/etcd/chainsaw-test.yaml	248	# (examples/backups/etcd) as the harness so the test and the documented flow	COMMENT
MEDIUM	hack/e2e-chainsaw/kafka-metadata/chainsaw-test.yaml	2	# the validated example scripts (examples/backups/kafka-metadata) as the harness	COMMENT
MEDIUM	hack/e2e-chainsaw/kafka-metadata/chainsaw-test.yaml	16	# Same harness-driving shape as mongodb-2-backup-roundtrip: a single run step	COMMENT
MEDIUM	examples/backups/clickhouse/01-create-strategy.sh	19	# backup — and this same script is the e2e round-trip's harness, where that	COMMENT
MEDIUM	examples/backups/mariadb/05-mariadb-src.yaml	10	# The "app" user is created so a smoke harness (or a human running the	COMMENT
MEDIUM	examples/backups/mariadb/run-all.sh	2	# Convenience runner + e2e harness for the MariaDB backup/restore demo.	COMMENT
MEDIUM	examples/backups/mongodb/05-mongodb-src.yaml	20	# The "app" user + "demo" database let a smoke harness (or a human) write a	COMMENT
MEDIUM	examples/backups/mongodb/run-all.sh	2	# Convenience runner + e2e harness for the MongoDB backup/restore demo.	COMMENT
MEDIUM	examples/backups/postgres/05-postgres-src.yaml	13	# Coupling: the e2e harness substitutes REPLACE_WITH_COSI_BUCKET_NAME and	COMMENT
MEDIUM	examples/backups/postgres/run-all.sh	2	# Convenience runner + e2e harness for the PostgreSQL barman-cloud backup demo.	COMMENT
MEDIUM	examples/backups/kafka/03-create-bucket.sh	59	# harness points this at the in-cluster seaweedfs Service instead.	COMMENT
MEDIUM	examples/backups/kafka/01-create-strategy.sh	146	# e2e harness points S3_ENDPOINT at the :8333 in-cluster Service).	COMMENT
MEDIUM	examples/backups/kafka-metadata/run-all.sh	2	# Convenience runner + e2e harness for the Kafka topic-metadata backup/restore	COMMENT
MEDIUM	examples/backups/vmdisk/04-create-backupjob.sh	31	# Overridable (BACKUP_WAIT) so the CI harness can bound it under the Chainsaw op	COMMENT
MEDIUM	examples/backups/vmdisk/cleanup.sh	3	# the e2e harness's finally block, and idempotent (a no-op when a gated-out run	COMMENT
MEDIUM	examples/backups/vmdisk/run-all.sh	2	# Convenience runner + e2e harness for the standalone VMDisk backup/restore demo.	COMMENT
MEDIUM	examples/backups/vmi/05-create-backupjob.sh	34	# far heavier than a database dump. Overridable (BACKUP_WAIT) so the CI harness	COMMENT
MEDIUM	examples/backups/vmi/cleanup.sh	3	# the e2e harness's finally block, and idempotent (a no-op when a gated-out run	COMMENT
14 more matches not shown…

Modern AI Meta-Vocabulary38 hits · 112 pts

Severity	File	Line	Snippet	Context
MEDIUM	ROADMAP.md	171	\| 2026 Q3 \| Get the E2E pipeline green — the gating item for everything else in this quarter. While it is red, relea	CODE
MEDIUM	cmd/cozypkg/cmd/init_push_test.go	28	// scaffold and the validator ever disagree on the repository format, this	COMMENT
MEDIUM	cmd/cozypkg/cmd/init_push_test.go	172	// A tapped repository keeps its declared name, so the scaffold references the	COMMENT
MEDIUM	cmd/cozypkg/cmd/init.go	171	// writeScaffold writes each scaffold file under dir, refusing to overwrite any	COMMENT
MEDIUM	cmd/backupstrategy-controller/main.go	58	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/backupstrategy-controller/main.go	84	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/backupstrategy-controller/main.go	188	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/backupstrategy-controller/main.go	283	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/cozystack-controller/main.go	60	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/cozystack-controller/main.go	80	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/cozystack-controller/main.go	227	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/cozystack-controller/main.go	340	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/kubeovn-plunger/main.go	41	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/kubeovn-plunger/main.go	52	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/kubeovn-plunger/main.go	146	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/kubeovn-plunger/main.go	166	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/flux-plunger/main.go	39	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/flux-plunger/main.go	51	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/flux-plunger/main.go	139	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/backup-controller/main.go	42	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/backup-controller/main.go	54	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/backup-controller/main.go	146	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/backup-controller/main.go	165	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/cozystack-operator/main.go	61	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/cozystack-operator/main.go	76	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/cozystack-operator/main.go	238	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/cozystack-operator/main.go	369	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	cmd/lineage-controller-webhook/main.go	41	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	cmd/lineage-controller-webhook/main.go	53	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	cmd/lineage-controller-webhook/main.go	140	// In the default scaffold provided, the program ends immediately after	COMMENT
MEDIUM	cmd/lineage-controller-webhook/main.go	167	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	internal/controller/suite_test.go	37	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	internal/controller/suite_test.go	83	// +kubebuilder:scaffold:scheme	COMMENT
MEDIUM	packages/core/platform/values.yaml	247	# re-applies the block. The reconcile loop is ALSO event-driven on	COMMENT
MEDIUM	packages/system/postgres-rd/cozyrds/postgres.yaml	33	{"title":"Chart Values","type":"object","properties":{"replicas":{"description":"Number of Postgres replicas. Unde	CODE
MEDIUM	packages/apps/clickhouse/README.md	6	## Backup orchestration	COMMENT
MEDIUM	packages/apps/clickhouse/values.yaml	134	## @field {string} [schedule] - Legacy. Cron schedule for the chart-emitted CronJob that runs the dump+restic backup. Em	COMMENT
MEDIUM	packages/apps/postgres/values.yaml	324	## @field {string} [schedule] - Legacy. Cron schedule (CNPG 6-field format) for the chart-emitted ScheduledBackup. Empty	COMMENT

Structural Annotation Overuse71 hits · 110 pts

Severity	File	Line	Snippet	Context
LOW	internal/backupcontroller/velerostrategy_controller.go	239	// Step 1: On first reconcile, set startedAt (but not phase yet - phase will be set after backup creation)	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	255	// Step 2: Resolve inputs - Read Strategy from resolved config	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	267	// Step 3: Execute backup logic	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	339	// Step 4: On success - Create Backup resource and update status	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	361	// Step 5: On failure	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	663	// Step 1: On first reconcile, set startedAt and phase = Running	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	676	// Step 2: Resolve inputs - Read Strategy, Storage, target Application	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	694	// Step 3: Execute restore logic	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	798	// Step 4: On success	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	823	// Step 5: On failure. FailedValidation is terminal too; left to the polling	COMMENT
LOW⚡	internal/backupcontroller/restorejob_controller.go	127	// Step 1: Fetch the referenced Backup	COMMENT
LOW⚡	internal/backupcontroller/restorejob_controller.go	134	// Step 2: Determine effective strategy from backup.spec.strategyRef.	COMMENT
LOW	internal/backupcontroller/restorejob_controller.go	173	// Step 3: Project the platform-managed S3 credentials into the tenant	COMMENT
LOW	internal/operator/packagesource_reconciler.go	968	// Step 1: patch AG.status.conditions[Ready]=False. This is the signal	COMMENT
LOW	internal/operator/packagesource_reconciler.go	984	// Step 2: bump `reconcile.fluxcd.io/requestedAt` alongside the tracking	COMMENT
LOW⚡	hack/migrate-to-version-1.0.sh	35	# Step 0: Annotate critical resources to prevent Helm from deleting them	COMMENT
LOW	hack/migrate-to-version-1.0.sh	59	# Step 1: Check for cozy-proxy HelmRelease with conflicting releaseName	COMMENT
LOW	docs/agents/changelog.md	465	# Step 1: Extract PR number from commit message	COMMENT
LOW	docs/agents/changelog.md	468	# Step 2: Get PR author (the person who wrote the code)	COMMENT
LOW	examples/backups/clickhouse/06-restore-in-place.sh	2	# Step 06: In-place restore. Drop the sentinel table on the source instance,	COMMENT
LOW	examples/backups/clickhouse/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and stash its S3 coordinates so step	COMMENT
LOW	examples/backups/clickhouse/02-create-backupclass.sh	2	# Step 02: Map the ClickHouse application kind to the Altinity strategy from	COMMENT
LOW	examples/backups/clickhouse/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second ClickHouse application and	COMMENT
LOW	examples/backups/clickhouse/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed.	COMMENT
LOW	examples/backups/clickhouse/04-create-clickhouse.sh	2	# Step 04: Provision a ClickHouse instance and write a sentinel row used to	COMMENT
LOW	examples/backups/clickhouse/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped Altinity backup strategy. The strategy	COMMENT
LOW	examples/backups/redis/01-create-redis.sh	2	# Step 01: Provision a Redis (RedisFailover) instance and seed a sentinel marker	COMMENT
LOW	examples/backups/redis/03-restore-in-place.sh	2	# Step 03: In-place restore. Overwrite the marker on the source to simulate data	COMMENT
LOW	examples/backups/redis/02-create-backupjob.sh	2	# Step 02: Create a BackupJob against the platform cozy-default BackupClass. The	COMMENT
LOW	examples/backups/redis/04-restore-to-copy.sh	2	# Step 04: To-copy restore. Provision a second, differently-named Redis and	COMMENT
LOW	examples/backups/nats/04-create-nats.sh	2	# Step 04: Provision a NATS instance with JetStream, create the S3 Secret the	COMMENT
LOW	examples/backups/nats/06-restore-in-place.sh	2	# Step 06: In-place restore. Delete the stream on the source instance to	COMMENT
LOW	examples/backups/nats/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and cache its S3 coordinates. Unlike	COMMENT
LOW	examples/backups/nats/02-create-backupclass.sh	2	# Step 02: Map the NATS application kind to the Job strategy from step 01. The	COMMENT
LOW	examples/backups/nats/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second NATS application and restore the	COMMENT
LOW	examples/backups/nats/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed. The controller	COMMENT
LOW	examples/backups/nats/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped generic Job backup strategy for NATS	COMMENT
LOW	examples/backups/kafka/06-restore-in-place.sh	2	# Step 06: In-place restore. Delete the topic on the source instance to	COMMENT
LOW	examples/backups/kafka/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and cache its S3 coordinates. The	COMMENT
LOW	examples/backups/kafka/02-create-backupclass.sh	2	# Step 02: Map the Kafka application kind to the Job strategy from step 01. The	COMMENT
LOW	examples/backups/kafka/04-create-kafka.sh	2	# Step 04: Provision a Kafka instance with KAFKA_REPLICAS brokers, create the	COMMENT
LOW	examples/backups/kafka/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second Kafka application and restore the	COMMENT
LOW	examples/backups/kafka/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed. The controller	COMMENT
LOW	examples/backups/kafka/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped generic Job backup strategy for Kafka	COMMENT
LOW	examples/backups/etcd/02-create-bucket.sh	2	# Step 02: Provision an in-cluster Bucket, mint the per-app credentials	COMMENT
LOW	examples/backups/etcd/05-restore-in-place.sh	2	# Step 05: Demonstrate destructive in-place restore. Overwrites the	COMMENT
LOW	examples/backups/etcd/04-create-backupjob.sh	2	# Step 04: Submit an ad-hoc BackupJob, wait for it to land a snapshot in	COMMENT
LOW	examples/backups/etcd/03-create-etcd-src.sh	2	# Step 03: Apply the source Etcd application, wait for the operator-side	COMMENT
LOW	examples/backups/etcd/01-create-strategy.sh	2	# Step 01: Apply the cluster-scoped Etcd strategy. Admin operation -	COMMENT
LOW	examples/backups/foundationdb/02-create-bucket.sh	2	# Step 02: Provision an in-cluster Bucket, mint the FoundationDB	COMMENT
LOW	examples/backups/foundationdb/06-restore-to-copy.sh	2	# Step 06: To-copy restore. Provision a second FoundationDB cluster and	COMMENT
LOW	examples/backups/foundationdb/05-restore-in-place.sh	2	# Step 05: In-place restore. Clear the sentinel key on the source instance	COMMENT
LOW	examples/backups/foundationdb/04-create-backupjob.sh	2	# Step 04: Submit a BackupJob and wait for it to land a restorable	COMMENT
LOW	…les/backups/foundationdb/03-create-foundationdb-src.sh	2	# Step 03: Provision the source FoundationDB cluster, wait for it to	COMMENT
LOW	examples/backups/foundationdb/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped FoundationDB backup strategy. The	COMMENT
LOW	examples/backups/vmdisk/03-create-vmdisk.sh	2	# Step 03: Create a standalone VMDisk and wait for it to be ready to back up.	COMMENT
LOW	examples/backups/vmdisk/05-restore-in-place.sh	2	# Step 05: Restore the standalone VMDisk in-place from its backup.	COMMENT
LOW	examples/backups/vmdisk/02-create-backupclass.sh	2	# Step 02: Create a BackupClass binding VMDisk to the Velero strategy.	COMMENT
LOW	examples/backups/vmdisk/04-create-backupjob.sh	2	# Step 04: Back up the standalone VMDisk via a BackupJob.	COMMENT
LOW	examples/backups/vmdisk/01-create-strategy.sh	2	# Step 01: Create the Velero backup/restore strategy for a standalone VMDisk.	COMMENT
11 more matches not shown…

Verbosity Indicators68 hits · 106 pts

Severity	File	Line	Snippet	Context
LOW	internal/backupcontroller/velerostrategy_controller.go	239	// Step 1: On first reconcile, set startedAt (but not phase yet - phase will be set after backup creation)	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	255	// Step 2: Resolve inputs - Read Strategy from resolved config	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	267	// Step 3: Execute backup logic	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	339	// Step 4: On success - Create Backup resource and update status	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	361	// Step 5: On failure	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	663	// Step 1: On first reconcile, set startedAt and phase = Running	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	676	// Step 2: Resolve inputs - Read Strategy, Storage, target Application	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	694	// Step 3: Execute restore logic	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	798	// Step 4: On success	COMMENT
LOW	internal/backupcontroller/velerostrategy_controller.go	823	// Step 5: On failure. FailedValidation is terminal too; left to the polling	COMMENT
LOW⚡	internal/backupcontroller/restorejob_controller.go	127	// Step 1: Fetch the referenced Backup	COMMENT
LOW⚡	internal/backupcontroller/restorejob_controller.go	134	// Step 2: Determine effective strategy from backup.spec.strategyRef.	COMMENT
LOW	internal/backupcontroller/restorejob_controller.go	173	// Step 3: Project the platform-managed S3 credentials into the tenant	COMMENT
LOW	internal/operator/packagesource_reconciler.go	968	// Step 1: patch AG.status.conditions[Ready]=False. This is the signal	COMMENT
LOW	internal/operator/packagesource_reconciler.go	984	// Step 2: bump `reconcile.fluxcd.io/requestedAt` alongside the tracking	COMMENT
LOW⚡	hack/migrate-to-version-1.0.sh	35	# Step 0: Annotate critical resources to prevent Helm from deleting them	COMMENT
LOW	hack/migrate-to-version-1.0.sh	59	# Step 1: Check for cozy-proxy HelmRelease with conflicting releaseName	COMMENT
LOW	examples/backups/clickhouse/06-restore-in-place.sh	2	# Step 06: In-place restore. Drop the sentinel table on the source instance,	COMMENT
LOW	examples/backups/clickhouse/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and stash its S3 coordinates so step	COMMENT
LOW	examples/backups/clickhouse/02-create-backupclass.sh	2	# Step 02: Map the ClickHouse application kind to the Altinity strategy from	COMMENT
LOW	examples/backups/clickhouse/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second ClickHouse application and	COMMENT
LOW	examples/backups/clickhouse/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed.	COMMENT
LOW	examples/backups/clickhouse/04-create-clickhouse.sh	2	# Step 04: Provision a ClickHouse instance and write a sentinel row used to	COMMENT
LOW	examples/backups/clickhouse/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped Altinity backup strategy. The strategy	COMMENT
LOW	examples/backups/redis/01-create-redis.sh	2	# Step 01: Provision a Redis (RedisFailover) instance and seed a sentinel marker	COMMENT
LOW	examples/backups/redis/03-restore-in-place.sh	2	# Step 03: In-place restore. Overwrite the marker on the source to simulate data	COMMENT
LOW	examples/backups/redis/02-create-backupjob.sh	2	# Step 02: Create a BackupJob against the platform cozy-default BackupClass. The	COMMENT
LOW	examples/backups/redis/04-restore-to-copy.sh	2	# Step 04: To-copy restore. Provision a second, differently-named Redis and	COMMENT
LOW	examples/backups/nats/04-create-nats.sh	2	# Step 04: Provision a NATS instance with JetStream, create the S3 Secret the	COMMENT
LOW	examples/backups/nats/06-restore-in-place.sh	2	# Step 06: In-place restore. Delete the stream on the source instance to	COMMENT
LOW	examples/backups/nats/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and cache its S3 coordinates. Unlike	COMMENT
LOW	examples/backups/nats/02-create-backupclass.sh	2	# Step 02: Map the NATS application kind to the Job strategy from step 01. The	COMMENT
LOW	examples/backups/nats/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second NATS application and restore the	COMMENT
LOW	examples/backups/nats/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed. The controller	COMMENT
LOW	examples/backups/nats/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped generic Job backup strategy for NATS	COMMENT
LOW	examples/backups/kafka/06-restore-in-place.sh	2	# Step 06: In-place restore. Delete the topic on the source instance to	COMMENT
LOW	examples/backups/kafka/03-create-bucket.sh	2	# Step 03: Provision an in-cluster Bucket and cache its S3 coordinates. The	COMMENT
LOW	examples/backups/kafka/02-create-backupclass.sh	2	# Step 02: Map the Kafka application kind to the Job strategy from step 01. The	COMMENT
LOW	examples/backups/kafka/04-create-kafka.sh	2	# Step 04: Provision a Kafka instance with KAFKA_REPLICAS brokers, create the	COMMENT
LOW	examples/backups/kafka/07-restore-to-copy.sh	2	# Step 07: To-copy restore. Provision a second Kafka application and restore the	COMMENT
LOW	examples/backups/kafka/05-create-backupjob.sh	2	# Step 05: Create a BackupJob and wait for it to succeed. The controller	COMMENT
LOW	examples/backups/kafka/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped generic Job backup strategy for Kafka	COMMENT
LOW	examples/backups/etcd/02-create-bucket.sh	2	# Step 02: Provision an in-cluster Bucket, mint the per-app credentials	COMMENT
LOW	examples/backups/etcd/05-restore-in-place.sh	2	# Step 05: Demonstrate destructive in-place restore. Overwrites the	COMMENT
LOW	examples/backups/etcd/04-create-backupjob.sh	2	# Step 04: Submit an ad-hoc BackupJob, wait for it to land a snapshot in	COMMENT
LOW	examples/backups/etcd/03-create-etcd-src.sh	2	# Step 03: Apply the source Etcd application, wait for the operator-side	COMMENT
LOW	examples/backups/etcd/01-create-strategy.sh	2	# Step 01: Apply the cluster-scoped Etcd strategy. Admin operation -	COMMENT
LOW	examples/backups/foundationdb/02-create-bucket.sh	2	# Step 02: Provision an in-cluster Bucket, mint the FoundationDB	COMMENT
LOW	examples/backups/foundationdb/06-restore-to-copy.sh	2	# Step 06: To-copy restore. Provision a second FoundationDB cluster and	COMMENT
LOW	examples/backups/foundationdb/05-restore-in-place.sh	2	# Step 05: In-place restore. Clear the sentinel key on the source instance	COMMENT
LOW	examples/backups/foundationdb/04-create-backupjob.sh	2	# Step 04: Submit a BackupJob and wait for it to land a restorable	COMMENT
LOW	…les/backups/foundationdb/03-create-foundationdb-src.sh	2	# Step 03: Provision the source FoundationDB cluster, wait for it to	COMMENT
LOW	examples/backups/foundationdb/01-create-strategy.sh	2	# Step 01: Create the cluster-scoped FoundationDB backup strategy. The	COMMENT
LOW	examples/backups/vmdisk/03-create-vmdisk.sh	2	# Step 03: Create a standalone VMDisk and wait for it to be ready to back up.	COMMENT
LOW	examples/backups/vmdisk/05-restore-in-place.sh	2	# Step 05: Restore the standalone VMDisk in-place from its backup.	COMMENT
LOW	examples/backups/vmdisk/02-create-backupclass.sh	2	# Step 02: Create a BackupClass binding VMDisk to the Velero strategy.	COMMENT
LOW	examples/backups/vmdisk/04-create-backupjob.sh	2	# Step 04: Back up the standalone VMDisk via a BackupJob.	COMMENT
LOW	examples/backups/vmdisk/01-create-strategy.sh	2	# Step 01: Create the Velero backup/restore strategy for a standalone VMDisk.	COMMENT
LOW	examples/backups/vmi/03-create-vmdisk.sh	2	# Step 03: Create a VMDisk with Ubuntu cloud image	COMMENT
LOW	examples/backups/vmi/06-restore-in-place.sh	2	# Step 06: Restore the VMInstance in-place (same namespace, same application)	COMMENT
8 more matches not shown…

Fake / Example Data113 hits · 87 pts

Severity	File	Line	Snippet	Context
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	58	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	59	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	61	authUsername: "mailer@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	88	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	89	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	91	authUsername: "mailer@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	169	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	170	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	172	authUsername: "mailer@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	597	to: "john..doe@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	598	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	602	errorMessage: 'alerta.alerts.email.to must be an address or a comma-separated list of addresses, such as oncal	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	609	to: ".john@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	610	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	614	errorMessage: 'alerta.alerts.email.to must be an address or a comma-separated list of addresses, such as oncal	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	621	to: "john.doe.@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	622	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	626	errorMessage: 'alerta.alerts.email.to must be an address or a comma-separated list of addresses, such as oncal	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	633	to: "mailto:oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	634	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	638	errorMessage: 'alerta.alerts.email.to must be an address or a comma-separated list of addresses, such as oncal	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	646	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	669	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	670	from: "alerts@example.org, second@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	674	errorMessage: 'alerta.alerts.email.from must be one address, such as alerts@example.org or Alerts <alerts@exam	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	681	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	715	to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	716	from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	724	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	733	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	742	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	751	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	760	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	769	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	778	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	787	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	796	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	805	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	814	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	823	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	832	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	840	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	849	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	858	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	868	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	877	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	885	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	895	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	903	alerta.alerts.email.to: " oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	904	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1090	alerta.alerts.email.from: "alerts{{bad}}@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1098	alerta.alerts.email.to: "on{call}@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1099	alerta.alerts.email.from: "alerts{primary}@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1111	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1119	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1128	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1138	alerta.alerts.email.from: "alerts@example.org"	CODE
LOW⚡	…s/system/monitoring/tests/alertmanager_email_test.yaml	1146	alerta.alerts.email.to: "oncall@example.org"	CODE
LOW	…s/system/monitoring/tests/alertmanager_email_test.yaml	113	to: "oncall@example.org"	CODE
LOW	…s/system/monitoring/tests/alertmanager_email_test.yaml	114	from: "alerts@example.org"	CODE
53 more matches not shown…

Self-Referential Comments28 hits · 84 pts

Severity	File	Line	Snippet	Context
MEDIUM	hack/e2e-capture-previous-logs.sh	301	# Create the output directory before the first log line, not just before the	COMMENT
MEDIUM	examples/backups/kafka/00-helpers.sh	203	# Create the demo topic (idempotent) and publish MESSAGE_COUNT keyed sentinel	COMMENT
MEDIUM	examples/backups/kafka-metadata/00-helpers.sh	212	# Create the demo topic with a distinctive retention.ms sentinel so the restore	COMMENT
MEDIUM	examples/backups/kafka-metadata/00-helpers.sh	223	# Create a topic with an explicit partition count (no config sentinel). Used for	COMMENT
MEDIUM	packages/system/openbao/charts/openbao/values.yaml	1114	# Create a Secret API object to store a non-expiring token for the service account.	COMMENT
MEDIUM	packages/system/reloader/charts/reloader/values.yaml	322	# Define the max allowed resources for the pod	COMMENT
MEDIUM	packages/system/reloader/charts/reloader/values.yaml	326	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…es/system/gpu-operator/charts/gpu-operator/values.yaml	253	# Create a ConfigMap (default: false)	COMMENT
MEDIUM	…es/system/gpu-operator/charts/gpu-operator/values.yaml	391	# Create a ConfigMap (default: false)	COMMENT
MEDIUM	…es/system/cert-manager/charts/cert-manager/values.yaml	641	# Create a ServiceMonitor to add cert-manager to Prometheus.	COMMENT
MEDIUM	…es/system/cert-manager/charts/cert-manager/values.yaml	693	# Create a PodMonitor to add cert-manager to Prometheus.	COMMENT
MEDIUM	…es/system/cert-manager/charts/cert-manager/values.yaml	1164	# Create the CA Injector deployment	COMMENT
MEDIUM	…erator/charts/altinity-clickhouse-operator/values.yaml	205	# This file is auto-generated	COMMENT
MEDIUM	…/system/opencost/charts/opencost/values-openshift.yaml	2	# This file is meant to be used by users deploying Opencost to OpenShift (OCP) clusters. For more configuration options,	COMMENT
MEDIUM	packages/system/cilium/charts/cilium/values.yaml	2	# This file is based on install/kubernetes/cilium/*values.yaml.tmpl.	COMMENT
MEDIUM	…onitoring-agents/charts/kube-state-metrics/values.yaml	473	# Define the max allowed resources for the pod	COMMENT
MEDIUM	…onitoring-agents/charts/kube-state-metrics/values.yaml	477	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…ing-agents/charts/prometheus-node-exporter/values.yaml	120	## Creating a service is enabled by default	COMMENT
MEDIUM	…ing-agents/charts/prometheus-node-exporter/values.yaml	577	# Define the max allowed resources for the pod	COMMENT
MEDIUM	…ing-agents/charts/prometheus-node-exporter/values.yaml	581	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…system/monitoring-agents/charts/fluent-bit/values.yaml	246	# Define the max allowed resources for the pod	COMMENT
MEDIUM	…system/monitoring-agents/charts/fluent-bit/values.yaml	250	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…s-nginx/templates/admission-webhooks/cert-manager.yaml	3	# Create a selfsigned Issuer, in order to create a root CA certificate for	COMMENT
MEDIUM	…s-nginx/templates/admission-webhooks/cert-manager.yaml	32	# Create an Issuer that uses the above generated CA certificate to issue certs	COMMENT
MEDIUM	packages/apps/kubernetes/hack/update-versions.sh	108	# Create a temporary file for filtering	COMMENT
MEDIUM	.github/workflows/pull-requests-release.yaml	169	# Create the release tag at the merge commit — write-once.	COMMENT
MEDIUM	.github/workflows/build-main.yaml	132	# Create the builder in the SAME config the build step reads	COMMENT
MEDIUM	.github/workflows/tags.yaml	597	# Create the release-X.Y.Z staging branch (holds the digest-bake commit for	COMMENT

Redundant / Tautological Comments41 hits · 66 pts

Severity	File	Line	Snippet	Context
LOW	hack/check-optional-repos.sh	29	# Check if required parameters are provided	COMMENT
LOW⚡	hack/migrate-to-version-1.0.sh	17	# Check if kubectl is available	COMMENT
LOW⚡	hack/migrate-to-version-1.0.sh	23	# Check if jq is available	COMMENT
LOW⚡	hack/migrate-to-version-1.0.sh	29	# Check if we can access the cluster	COMMENT
LOW	examples/backups/vmi/00-helpers.sh	59	# Check if a Kubernetes resource exists	COMMENT
LOW	packages/core/platform/values.yaml	99	# Set this to comma-separated list of master node IPs to override.	COMMENT
LOW	packages/system/harbor/charts/harbor/values.yaml	2	# Set how to expose the service. Set the type as "ingress", "clusterIP", "nodePort", "loadBalancer" or "route"	COMMENT
LOW	packages/system/harbor/charts/harbor/values.yaml	148	# Set it to "-" to disable dynamic provisioning	COMMENT
LOW	packages/system/kubeovn/charts/kube-ovn/values.yaml	226	# Set existingClaim to skip in-chart PVC creation and point the	COMMENT
LOW	…iraeus/templates/validating-webhook-configuration.yaml	1	# Check if the TLS secret already exists and initialize variables for later use at the top level	COMMENT
LOW	…search-operator/charts/opensearch-operator/values.yaml	43	# Set this to false to disable the experimental parallel recovery in case you are experiencing problems	COMMENT
LOW	…search-operator/charts/opensearch-operator/values.yaml	45	# Set this to true to enable the standard go pprof endpoints on port 6060 (https://pkg.go.dev/net/http/pprof)	COMMENT
LOW	…ystem/cilium/charts/cilium/files/nodeinit/prestop.bash	35	# Check if we're running on GKE, identified by the	COMMENT
LOW	…ystem/cilium/charts/cilium/files/nodeinit/startup.bash	27	# Check if we're running on GKE, identified by the	COMMENT
LOW	…ller/charts/snapshot-controller/templates/webhook.yaml	2	# Check if the TLS secret already exists and initialize variables for later use at the top level	COMMENT
LOW	packages/apps/mariadb/hack/update-versions.sh	13	# Check if jq is installed	COMMENT
LOW	packages/apps/mariadb/hack/update-versions.sh	112	# Check if version section already exists	COMMENT
LOW	packages/apps/redis/hack/update-versions.sh	13	# Check if skopeo is installed	COMMENT
LOW	packages/apps/redis/hack/update-versions.sh	19	# Check if jq is installed	COMMENT
LOW	packages/apps/redis/hack/update-versions.sh	122	# Check if version section already exists	COMMENT
LOW	packages/apps/opensearch/hack/update-versions.sh	13	# Check if skopeo is installed	COMMENT
LOW	packages/apps/opensearch/hack/update-versions.sh	19	# Check if jq is installed	COMMENT
LOW	packages/apps/opensearch/hack/update-versions.sh	177	# Check if version section already exists	COMMENT
LOW	packages/apps/valkey/hack/update-versions.sh	19	# Check if skopeo is installed	COMMENT
LOW	packages/apps/valkey/hack/update-versions.sh	25	# Check if jq is installed	COMMENT
LOW	packages/apps/valkey/hack/update-versions.sh	86	# Check if version section already exists	COMMENT
LOW	packages/apps/rabbitmq/hack/update-versions.sh	13	# Check if jq is installed	COMMENT
LOW	packages/apps/rabbitmq/hack/update-versions.sh	94	# Check if version section already exists	COMMENT
LOW	packages/apps/mongodb/hack/update-versions.sh	17	# Check if skopeo is installed	COMMENT
LOW	packages/apps/mongodb/hack/update-versions.sh	23	# Check if jq is installed	COMMENT
LOW	packages/apps/mongodb/hack/update-versions.sh	89	# Check if version section already exists	COMMENT
LOW	packages/apps/postgres/hack/update-versions.sh	24	# Check if skopeo is installed	COMMENT
LOW	packages/apps/postgres/hack/update-versions.sh	30	# Check if jq is installed	COMMENT
LOW	packages/apps/postgres/hack/update-versions.sh	131	# Check if version section already exists	COMMENT
LOW	packages/apps/kubernetes/hack/update-versions.sh	14	# Check if skopeo is installed	COMMENT
LOW	packages/apps/kubernetes/hack/update-versions.sh	20	# Check if jq is installed	COMMENT
LOW	packages/apps/kubernetes/hack/update-versions.sh	201	# Check if version section already exists	COMMENT
LOW⚡	packages/apps/foundationdb/hack/update-versions.sh	13	# Check if skopeo is installed	COMMENT
LOW⚡	packages/apps/foundationdb/hack/update-versions.sh	19	# Check if jq is installed	COMMENT
LOW⚡	packages/apps/foundationdb/hack/update-versions.sh	25	# Check if yq is installed	COMMENT
LOW	packages/apps/foundationdb/hack/update-versions.sh	149	# Check if version section already exists	COMMENT

Hyper-Verbose Identifiers41 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW⚡	…vertical-pod-autoscaler/templates/tests/configmap.yaml	21	def test_admission_controller_service_connection():	CODE
LOW⚡	…vertical-pod-autoscaler/templates/tests/configmap.yaml	30	def test_admission_controller_metrics_service_connection():	CODE
LOW⚡	…vertical-pod-autoscaler/templates/tests/configmap.yaml	38	def test_recommender_metrics_service_connection():	CODE
LOW⚡	…vertical-pod-autoscaler/templates/tests/configmap.yaml	46	def test_updater_metrics_service_connection():	CODE
LOW	packages/system/local-storage/tests/rbac_test.py	44	def test_lifecycle_and_namespace_boundary(self):	CODE
LOW	packages/system/local-storage/tests/rbac_test.py	88	def test_external_rbac_is_not_granted(self):	CODE
LOW	…/packages/k8s-client/src/useSelfSubjectAccessReview.ts	66	export function useSelfSubjectAccessReview(	CODE
LOW	…/console/src/components/AdditionalPropertiesWidget.tsx	7	export function AdditionalPropertiesWidget(props: WidgetProps) {	CODE
LOW	…ges/console/apps/console/src/components/SchemaForm.tsx	30	function addAdditionalPropertiesWidgets(schema: RJSFSchema, uiSchema: UiSchema = {}): UiSchema {	CODE
LOW	…s/console/src/components/AdditionalPropertiesField.tsx	9	export function AdditionalPropertiesField(props: FieldProps) {	CODE
LOW	…/console/src/components/AdditionalPropertiesEditor.tsx	17	export function AdditionalPropertiesEditor({	CODE
LOW	…le/apps/console/src/hooks/useBackupClassAdminAccess.ts	8	export function useBackupClassAdminAccess(): { allowed: boolean; isLoading: boolean } {	CODE
LOW	…mages/console/apps/console/src/lib/sensitive-fields.ts	96	export function addSensitiveStringWidgets(	CODE
LOW	…images/console/apps/console/src/lib/app-definitions.ts	22	export function useApplicationDefinitions() {	CODE
LOW	…images/console/apps/console/src/lib/immutable-paths.ts	123	function wildcardArrayLengthChanged(	CODE
LOW	…s/console/apps/console/src/routes/sidebar-sections.tsx	47	export function useMarketplaceSidebarSections(): SidebarSection[] {	CODE
LOW	…s/console/apps/console/src/routes/sidebar-sections.tsx	79	export function useConsoleSidebarSections(): SidebarSection[] {	CODE
LOW	…/apps/console/src/routes/MigrationSourceCreatePage.tsx	11	export function MigrationSourceCreatePage() {	CODE
LOW	…/apps/console/src/routes/MigrationResourceListPage.tsx	21	export function MigrationResourceListPage({ resourceType, title }: MigrationResourceListPageProps) {	CODE
LOW	…apps/console/src/routes/BackupRestoreJobCreatePage.tsx	18	export function BackupRestoreJobCreatePage() {	CODE
LOW	…onsole/apps/console/src/routes/BackupClassListPage.tsx	101	function BackupArtifactsCountPanel() {	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	33	def test_rechecks_unused_secondary_before_down(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	44	def test_keeps_primary_even_when_not_open_and_keeps_open_secondary(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	50	def test_handles_multiple_unused_resources_without_a_fixed_inventory(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	58	def test_keeps_resource_when_any_volume_is_open(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	65	def test_state_change_between_reads_prevents_down(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	74	def test_recheck_must_identify_exact_resource(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	83	def test_ambiguous_status_prevents_all_down_actions(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	107	def test_status_error_or_timeout_aborts(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	118	def test_down_failure_or_timeout_stops_before_next_resource(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	127	def test_abort_logs_bounded_status_diagnostics_without_down(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	139	def test_abort_logs_down_diagnostics_and_stops_before_next_resource(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	154	def test_abort_logs_partial_timeout_stderr_for_status_and_down(self):	CODE
LOW	…ckages/system/linstor/tests/test_satellite_pre_stop.py	173	def test_deadline_prevents_further_down_and_bounds_command_timeout(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	185	def test_deadline_stops_rechecks_when_resources_keep_becoming_busy(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	192	def test_default_dry_run_never_downs(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	199	def test_unknown_argument_prevents_even_status(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	205	def test_chart_command_form_passes_execute_as_the_only_argument(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	216	def test_script_name_placeholder_before_execute_is_rejected(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	222	def test_empty_resource_list_is_a_noop(self):	CODE
LOW⚡	…ckages/system/linstor/tests/test_satellite_pre_stop.py	228	def test_logs_to_java_in_same_container_not_shared_pid_one(self):	CODE

Cross-File Repetition9 hits · 45 pts

Severity	File	Snippet	Context
HIGH	…na-operator/crds/grafana.integreatly.org_grafanas.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…efinitions/strategy.backups.cozystack.io_mariadbs.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…em/keda/charts/keda/templates/crds/crd-scaledjobs.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…r-crds/charts/crds/templates/crd-prometheusagents.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rator-crds/charts/crds/templates/crd-prometheuses.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…ator-crds/charts/crds/templates/crd-alertmanagers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rator-crds/charts/crds/templates/crd-thanosrulers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…s/hack/kamaji.clastix.io_tenantcontrolplanes_spec.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…kamaji/crds/kamaji.clastix.io_tenantcontrolplanes.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING

Slop Phrases7 hits · 20 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/system/harbor/charts/harbor/values.yaml	132	# For storing images and charts, you can also use "azure", "gcs", "s3",	COMMENT
MEDIUM	…harts/metallb/charts/frr-k8s/templates/controller.yaml	90	# or you can use "all_wrap" for all daemons, e.g. to use perf record:	COMMENT
MEDIUM	…s/system/metallb/charts/metallb/templates/speaker.yaml	106	# or you can use "all_wrap" for all daemons, e.g. to use perf record:	COMMENT
MEDIUM	packages/system/seaweedfs/charts/seaweedfs/values.yaml	383	# If these don't meet your needs, you can use "custom" here along with extraVolumes and extraVolumeMounts	COMMENT
MEDIUM	packages/system/cilium/charts/cilium/values.yaml	3786	# Or alternatively you can use a list of clusters:	COMMENT
LOW	…m/cilium/charts/cilium/templates/cilium-configmap.yaml	111	# TLS please make sure you follow the tutorial in https://cilium.link/etcd-config	COMMENT
MEDIUM	…/system/ingress-nginx/charts/ingress-nginx/values.yaml	200	# E.g. to specify the default SSL certificate you can use	COMMENT

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	hack/select-install.sh	9	# Usage:	COMMENT
LOW	hack/proxmox-talos-template.sh	23	# Usage:	COMMENT
LOW	hack/e2e-chainsaw/_lib/etcd-probe.sh	44	# Usage:	COMMENT
LOW	…ystem/seaweedfs/charts/seaweedfs/openshift-values.yaml	19	# Usage:	COMMENT

Deep Nesting5 hits · 5 pts

Severity	File	Line	Context
LOW	.claude/hooks/md-no-hardwrap.py	194	CODE
LOW	.claude/hooks/md-no-hardwrap.py	591	CODE
LOW	.claude/hooks/md-no-hardwrap.py	661	CODE
LOW	hack/helm-release-size.py	45	CODE
LOW	packages/system/local-storage/tests/rbac_test.py	20	CODE

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	packages/system/linstor/hack/satellite-pre-stop.py	135	except Exception as error:	CODE
MEDIUM	packages/system/linstor/hack/satellite-pre-stop.py	131	def run_hook():	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	.claude/hooks/md-no-hardwrap.py	46		CODE

TODO Padding1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/cmd/server/start.go	408	ShortNames: []string{}, // TODO: implement shortnames	CODE

cozystack/cozystack

Open-Source Code Quality, Security and Technical Debt Review