Home / dapr / dapr
Repository Analysis

dapr/dapr

Dapr is a portable runtime for building distributed applications across cloud and edge, combining event-driven architecture with workflow orchestration.

0.5 Likely human-written View on GitHub
0.5
Adjusted Score
0.5
Raw Score
100%
Time Factor
2026-05-29
Last Push
25,796
Stars
Go
Language
471,942
Lines of Code
3245
Files
186
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 2HIGH 1MEDIUM 15LOW 168

Pattern Findings

186 matches across 9 categories. Click a row to expand file-level details.

Over-Commented Block150 hits · 150 pts
SeverityFileLineSnippet
LOWdocker/library-scripts/go-debian.sh1#!/usr/bin/env bash
LOWdocker/library-scripts/kubectl-helm-debian.sh1#!/usr/bin/env bash
LOWdocker/library-scripts/docker-in-docker-debian.sh1#!/usr/bin/env bash
LOWdocker/library-scripts/common-debian.sh1#!/usr/bin/env bash
LOWdocker/custom-scripts/install-dapr-tools.sh1#!/usr/bin/env bash
LOWdocker/custom-scripts/setup-user.sh1#!/usr/bin/env bash
LOWdocker/custom-scripts/docker-bind-mount.sh1#!/usr/bin/env bash
LOWdocker/custom-scripts/setup-docker-multiarch.sh1#!/usr/bin/env bash
LOWdocker/custom-scripts/devcontainer-init.sh1#!/usr/bin/env bash
LOWtests/config/k6_sa.yaml1# Copyright 2023 The Dapr Authors
LOWtests/config/zipkin.yaml1#
LOWtests/config/tailscale_role.yaml1# Copyright 2022 The Dapr Authors
LOWtests/config/dapr_kafka_bindings.yaml1#
LOWtests/config/tailscale_key.yaml1# Copyright 2022 The Dapr Authors
LOWtests/config/tailscale_sa.yaml1# Copyright 2022 The Dapr Authors
LOWtests/config/dapr_vault_secretstore.yaml1#
LOWtests/config/dapr_kafka_bindings_custom_route.yaml1#
LOWtests/config/dapr_kafka_bindings_grpc.yaml1#
LOWtests/config/kafka_pubsub.yaml1#
LOWtests/config/k6_sa_secret.yaml1# Copyright 2023 The Dapr Authors
LOWtests/config/resiliency_kafka_bindings_grpc.yaml1#
LOWtests/config/resiliency_servicebus_pubsub.yaml1#
LOWtests/config/resiliency_redis_pubsub.yaml1#
LOWtests/config/redis_override.yaml1#
LOWtests/config/dapr_redis_configuration.yaml1#
LOWtests/config/dapr_postgres_query_state.yaml1#
LOW…ts/config/app_topic_subscription_pluggable_pubsub.yaml1#
LOWtests/config/tailscale_subnet_router.yaml1# Copyright 2022 The Dapr Authors
LOWtests/config/pubsub_perf_components.yaml1#
LOWtests/config/k6_rolebinding.yaml1# Copyright 2023 The Dapr Authors
LOWtests/config/dapr_servicebus_pubsub.yaml1#
LOWtests/config/preview_configurations.yaml1#
LOWtests/config/kafka_override.yaml1#
LOWtests/config/dapr_redis_pubsub.yaml1#
LOWtests/config/dapr_cron_binding.yaml1#
LOWtests/config/mongodb_override.yaml1#
LOWtests/config/resiliency_kafka_bindings.yaml1#
LOWtests/config/dapr_redis_pluggable_state.yaml1#
LOWtests/config/dapr_cosmosdb_state_actorstore.yaml1#
LOWtests/config/dapr_cosmosdb_state.yaml1#
LOWtests/config/tailscale_rolebinding.yaml1# Copyright 2022 The Dapr Authors
LOWtests/config/dapr_kafka_pluggable_bindings.yaml1#
LOWtests/config/dapr_cosmosdb_query_state.yaml1#
LOWtests/config/dapr_redis_state_query.yaml1#
LOWtests/config/dapr_postgres_state.yaml1#
LOW…ration/suite/daprd/shutdown/block/app/pubsub/nonack.go121 case <-time.After(time.Second * 1):
LOW…ntegration/suite/daprd/workflow/signing/nomtlserror.go81 // The log line confirms daprd detected the misconfiguration. The
LOW…tion/suite/daprd/workflow/propagation/childworkflow.go121 // Expected 6 events: the parent's full history at the time it created the child workflow:
LOW…on/suite/daprd/workflow/propagation/activitylineage.go141 // [2] TaskScheduled("actA") — A schedules actA
LOW…tegration/suite/daprd/workflow/propagation/multiapp.go121
LOW…n/suite/daprd/workflow/propagation/ownhistoryevents.go121 require.NoError(t, err)
LOW…on/suite/daprd/workflow/propagation/multiapplineage.go141 //
LOW…ntegration/suite/daprd/workflow/propagation/lineage.go141 //
LOW…egration/suite/daprd/pubsub/bulksubscribe/immediate.go41func init() {
LOW…ration/suite/daprd/mcpserver/workflow_access_policy.go41 "github.com/dapr/durabletask-go/task"
LOWtests/test-infra/skip_azure.sh1#!/usr/bin/env bash
LOWtests/test-infra/wait_azure_registry.sh1#!/usr/bin/env bash
LOWtests/test-infra/setup_azure.sh1#!/usr/bin/env bash
LOWtests/docs/running-e2e-test.md21 ```bash
LOWtests/perf/pubsub_subscribe_http/test_kafka.yaml1#
90 more matches not shown…
Decorative Section Separators12 hits · 36 pts
SeverityFileLineSnippet
MEDIUMdocker/library-scripts/go-debian.sh21#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/go-debian.sh24#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/kubectl-helm-debian.sh21#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/kubectl-helm-debian.sh24#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/docker-in-docker-debian.sh21#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/docker-in-docker-debian.sh24#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/docker-in-docker-debian.sh216#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/docker-in-docker-debian.sh219#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/common-debian.sh21#-------------------------------------------------------------------------------------------------------------
MEDIUMdocker/library-scripts/common-debian.sh24#-------------------------------------------------------------------------------------------------------------
MEDIUM.github/workflows/sync-release-branch.yaml1# ------------------------------------------------------------
MEDIUM.github/workflows/sync-release-branch.yaml12# ------------------------------------------------------------
Verbosity Indicators14 hits · 30 pts
SeverityFileLineSnippet
LOW…te/daprd/workflow/crossapp/suborchestrator/localmix.go92 // Step 1: Call local sub-orchestrator (no AppID specified)
LOW…te/daprd/workflow/crossapp/suborchestrator/localmix.go101 // Step 2: Call cross-app sub-orchestrator
LOW…te/daprd/workflow/crossapp/suborchestrator/localmix.go111 // Step 3: Call another local sub-orchestrator (no AppID specified)
LOW…te/daprd/workflow/crossapp/suborchestrator/localmix.go120 // Step 4: Call another local sub-orchestrator (with local AppID specified)
LOW…ion/suite/daprd/workflow/crossapp/activity/localmix.go92 // Step 1: Call local activity (no AppID specified)
LOW…ion/suite/daprd/workflow/crossapp/activity/localmix.go101 // Step 2: Call cross-app activity
LOW…ion/suite/daprd/workflow/crossapp/activity/localmix.go111 // Step 3: Call another local activity (no AppID specified)
LOW…ion/suite/daprd/workflow/crossapp/activity/localmix.go120 // Step 4: Call another local activity (with local AppID specified)
LOW…ion/suite/daprd/workflow/crossapp/activity/multihop.go87 // Step 1: Process data in app1
LOW…ion/suite/daprd/workflow/crossapp/activity/multihop.go97 // Step 2: Validate data in app2
LOW…ion/suite/daprd/workflow/crossapp/activity/multihop.go107 // Step 3: Transform data in app3
LOW…ion/suite/daprd/workflow/crossapp/activity/multihop.go117 // Step 4: Enrich data in app4
LOW…tegration/suite/daprd/workflow/propagation/activity.go65 // Step 1: plain activity, no propagation
LOW…tegration/suite/daprd/workflow/propagation/activity.go70 // Step 2: activity WITH history propagation — should receive the
Hallucination Indicators2 hits · 20 pts
SeverityFileLineSnippet
CRITICALpkg/runtime/channels/channels.go262 ca := endpoint.Spec.ClientTLS.RootCA.Value.String()
CRITICALpkg/runtime/channels/channels.go276 cert, err := tls.X509KeyPair([]byte(endpoint.Spec.ClientTLS.Certificate.Value.String()), []byte(endpoint.Spec.ClientTL
Self-Referential Comments3 hits · 9 pts
SeverityFileLineSnippet
MEDIUMdocker/custom-scripts/setup-docker-multiarch.sh21# Create a buildx builder with support for multi-arch
MEDIUM.github/workflows/dapr-perf-components.yml135 # Create a resource group
MEDIUM.github/workflows/dapr-perf.yml147 # Create a resource group
Synthetic Comment Markers1 hit · 5 pts
SeverityFileLineSnippet
HIGHdocs/decision_records/sdk/SDK-001-releases.md18Auto-generation of gRPC client side code from Dapr proto files allows Dapr to provide SDKs for the major languages with
Redundant / Tautological Comments2 hits · 3 pts
SeverityFileLineSnippet
LOW.github/workflows/dapr.yml755 # Check if the dapr-${daprVersion}.tgz file is modified.
LOW.github/scripts/get_release_version.py50 # Set LATEST_RELEASE to true
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippet
LOWpkg/resiliency/resiliency.go346 // Note: If this value changes to 0, don't forget to disable "Replay" in direct messaging
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOWtests/apps/perf/workflowsapp/app.py165def shutdown_workflow_runtime():