1.5

Adjusted Signal

1.5

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

749.8K

Lines of Code

2.2K

Files

496

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 351 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 33 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 114 finding(s).

PR Review Velocity Impact 6.5/100 · LOW

Which changes need focused human review? 496 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 23MEDIUM 199LOW 274

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 496 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators112 hits · 382 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	content/guides/nextjs.md	1008	# ============================================	COMMENT
MEDIUM⚡	content/guides/nextjs.md	1010	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	156	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	158	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	185	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	187	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	223	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	225	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	274	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	276	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	302	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	304	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	340	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	342	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	441	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	443	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	470	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	472	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	504	# =========================================	COMMENT
MEDIUM	content/guides/nextjs.md	506	# =========================================	COMMENT
MEDIUM	content/guides/nextjs.md	541	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	543	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	570	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	572	# ============================================	COMMENT
MEDIUM	content/guides/nextjs.md	604	# =========================================	COMMENT
MEDIUM	content/guides/nextjs.md	606	# =========================================	COMMENT
MEDIUM⚡	content/guides/laravel.md	340	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	343	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	347	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	349	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	375	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	379	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	385	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	388	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	467	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	470	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	479	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/laravel.md	482	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	143	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	156	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	194	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	199	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	420	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	423	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	450	# -----------------------------------------------------------	COMMENT
MEDIUM	content/guides/laravel.md	454	# -----------------------------------------------------------	COMMENT
MEDIUM⚡	content/guides/reactjs.md	545	# =========================================	COMMENT
MEDIUM⚡	content/guides/reactjs.md	547	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	135	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	137	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	157	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	159	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	187	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	189	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	211	# =========================================	COMMENT
MEDIUM	content/guides/reactjs.md	213	# =========================================	COMMENT
MEDIUM⚡	content/guides/angular.md	268	# ================================	COMMENT
MEDIUM⚡	content/guides/angular.md	270	# ================================	COMMENT
MEDIUM⚡	content/guides/angular.md	278	# ================================	COMMENT
MEDIUM⚡	content/guides/angular.md	280	# ================================	COMMENT
52 more matches not shown…

Structural Annotation Overuse189 hits · 259 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	57	## Step 0: Pre-flight	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	67	## Step 1: Clone the guide repo	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	90	## Step 2: Convert AsciiDoc to Markdown	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	106	## Step 3: Apply Docker docs style rules	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	122	## Step 4: Update code to latest Testcontainers API	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	164	## Step 5: Create guide directory structure	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	218	## Step 6: Verify code compiles and tests pass	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	339	## Step 7: Update cross-references	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	349	## Step 8: Validate	COMMENT
LOW	.agents/skills/testcontainers-guides-migrator/SKILL.md	378	## Step 9: Commit	COMMENT
LOW	.agents/skills/create-lab-guide/SKILL.md	15	## Step 1: Clone the labspace repo	COMMENT
LOW	.agents/skills/create-lab-guide/SKILL.md	22	## Step 2: Extract key information	COMMENT
LOW	.agents/skills/create-lab-guide/SKILL.md	39	## Step 3: Write the guide markdown	COMMENT
LOW	.agents/skills/create-lab-guide/SKILL.md	92	## Step 4: Apply Docker docs style rules	COMMENT
LOW	.agents/skills/create-lab-guide/SKILL.md	108	## Step 5: Validate	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	52	### Step 1: Add a domain	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	64	### Step 2: Verify your domain	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	116	### Step 3: Create an SSO connection in Docker	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	149	### Step 4: Create an SSO connection in your IdP	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	245	### Step 5: Connect Docker to your IdP	COMMENT
LOW	…uals/security/authentication/single-sign-on/connect.md	294	### Step 6: Test the connection	COMMENT
LOW	content/manuals/docker-hub/quickstart.md	22	## Step 1: Find an image in Docker Hub's library	COMMENT
LOW	content/manuals/docker-hub/quickstart.md	94	## Step 2: Pull and run an image from Docker Hub	COMMENT
LOW	content/manuals/docker-hub/quickstart.md	197	## Step 3: Build and push an image to Docker Hub	COMMENT
LOW	content/manuals/docker-hub/quickstart.md	285	## Step 4: View your repository on Docker Hub and explore options	COMMENT
LOW	…tent/manuals/docker-hub/repos/manage/builds/migrate.md	18	## Step 1: Create access tokens	COMMENT
LOW	…tent/manuals/docker-hub/repos/manage/builds/migrate.md	40	## Step 2: Extract your Autobuilds configuration	COMMENT
LOW	…tent/manuals/docker-hub/repos/manage/builds/migrate.md	100	## Step 3: Migrate to your CI/CD platform	COMMENT
LOW	content/manuals/dhi/get-started.md	25	## Step 1: Find an image to use	COMMENT
LOW	content/manuals/dhi/get-started.md	36	## Step 2: Pull and run the image	COMMENT
LOW	content/manuals/dhi/get-started.md	79	## Step 3: Compare with other images	COMMENT
LOW	content/manuals/dhi/how-to/select-enterprise.md	32	## Step 1: Find an image to use	COMMENT
LOW	content/manuals/dhi/how-to/select-enterprise.md	77	## Step 2: Mirror the repository	COMMENT
LOW	content/manuals/dhi/how-to/select-enterprise.md	124	## Step 3: Customize the image	COMMENT
LOW	content/manuals/dhi/how-to/select-enterprise.md	203	## Step 4: Pull and run your customized image	COMMENT
LOW	content/manuals/dhi/how-to/select-enterprise.md	235	## Step 5: Remove customization and stop mirroring	COMMENT
LOW	content/manuals/dhi/how-to/troubleshoot.md	31	#### Step 1: Run a container from a Hardened Image	COMMENT
LOW	content/manuals/dhi/how-to/troubleshoot.md	53	#### Step 2: Use Docker Debug to inspect the container	COMMENT
LOW	content/manuals/dhi/how-to/troubleshoot.md	95	##### Step 1: Run a container from a hardened image	COMMENT
LOW	content/manuals/dhi/how-to/troubleshoot.md	103	##### Step 2: Mount debugging tools into the container	COMMENT
LOW	content/manuals/dhi/how-to/policies.md	82	#### Step 1: Use a DHI base image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/how-to/policies.md	94	#### Step 2: Build the image	COMMENT
LOW	content/manuals/dhi/how-to/policies.md	103	#### Step 3: Evaluate the image against the DHI policies	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-ubuntu.md	32	### Step 1: Update the base image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-ubuntu.md	62	### Step 2: Update package installation commands	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-ubuntu.md	87	### Step 3: Update the runtime image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-doi.md	37	### Step 1: Update the base image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-doi.md	71	### Step 2: Update the runtime image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-wolfi.md	23	### Step 1: Update the base image in your Dockerfile	COMMENT
LOW	content/manuals/dhi/migration/migrate-from-wolfi.md	52	### Step 2: Update the runtime image in your Dockerfile	COMMENT
LOW	content/manuals/compose/gettingstarted.md	26	## Step 1: Set up the project	COMMENT
LOW	content/manuals/compose/gettingstarted.md	132	## Step 2: Define and start your services	COMMENT
LOW	content/manuals/compose/gettingstarted.md	192	## Step 3: Fix the startup race with health checks	COMMENT
LOW	content/manuals/compose/gettingstarted.md	254	## Step 4: Enable Compose Watch for live updates	COMMENT
LOW	content/manuals/compose/gettingstarted.md	323	## Step 5: Persist data with named volumes	COMMENT
LOW	content/manuals/compose/gettingstarted.md	380	## Step 6: Structure your project with multiple Compose files	COMMENT
LOW	content/manuals/compose/gettingstarted.md	450	## Step 7: Inspect and debug your running stack	COMMENT
LOW	content/manuals/scout/quickstart.md	17	## Step 1: Setup	COMMENT
LOW	content/manuals/scout/quickstart.md	44	## Step 2: Enable Docker Scout	COMMENT
LOW	content/manuals/scout/quickstart.md	66	## Step 3: Analyze image vulnerabilities	COMMENT
129 more matches not shown…

Self-Referential Comments51 hits · 159 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/curate-whats-new/examples/2026-07-13--2026-08-11.yaml	2	# This file is not loaded into the skill's runtime context.	COMMENT
MEDIUM⚡	content/reference/api/registry/latest.yaml	145	# Create a dummy config blob and compute its digest	COMMENT
MEDIUM⚡	data/cli/mcp/docker_mcp_profile_create.yaml	56	# Create a profile with servers from a catalog	COMMENT
MEDIUM⚡	data/cli/mcp/docker_mcp_profile_create.yaml	59	# Create a profile with multiple servers (OCI references)	COMMENT
MEDIUM⚡	data/cli/mcp/docker_mcp_profile_create.yaml	62	# Create a profile with MCP Registry references	COMMENT
MEDIUM	data/cli/mcp/docker_mcp_catalog_tag.yaml	13	# Create a tagged copy with a different name	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	809	### Create a service	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	827	#### Create a service using an image on a private registry (--with-registry-auth) {#with-registry-auth}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	847	### Create a service with 5 replica tasks (--replicas) {#replicas}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	883	### Create a service with secrets (--secret) {#secret}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	915	### Create a service with configs (--config) {#config}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	944	### Create a service with a rolling update policy {#update-delay}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	984	### Create a service with specific hostname (--hostname) {#hostname}	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	1324	#### Create a service using a named volume	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	1353	#### Create a service that uses an anonymous volume	COMMENT
MEDIUM	data/cli/engine/docker_service_create.yaml	1371	#### Create a service that uses a bind-mounted host directory	COMMENT
MEDIUM	data/cli/engine/docker_secret_create.yaml	61	### Create a secret	COMMENT
MEDIUM	data/cli/engine/docker_secret_create.yaml	74	### Create a secret with a file	COMMENT
MEDIUM	data/cli/engine/docker_secret_create.yaml	87	### Create a secret with labels (--label) {#label}	COMMENT
MEDIUM	data/cli/engine/docker_image_save.yaml	47	### Create a backup that can then be used with `docker load`.	COMMENT
MEDIUM	data/cli/engine/docker_context_create.yaml	52	### Create a context with a Docker endpoint (--docker) {#docker}	COMMENT
MEDIUM	data/cli/engine/docker_context_create.yaml	64	### Create a context based on an existing context (--from) {#from}	COMMENT
MEDIUM	data/cli/engine/docker_config_create.yaml	50	### Create a config	COMMENT
MEDIUM	data/cli/engine/docker_config_create.yaml	63	### Create a config with a file	COMMENT
MEDIUM	data/cli/engine/docker_config_create.yaml	76	### Create a config with labels (-l, --label) {#label}	COMMENT
MEDIUM	data/cli/engine/docker_network_connect.yaml	127	### Create a network alias for a container (--alias) {#alias}	COMMENT
MEDIUM	data/cli/engine/docker_volume_ls.yaml	74	### Create a volume	COMMENT
MEDIUM	data/sbx_cli/sbx_env_create.yaml	77	# Create the environment described in the current directory	COMMENT
MEDIUM	data/sbx_cli/sbx_create_cursor.yaml	147	# Create a cloud sandbox for cursor	COMMENT
MEDIUM	data/sbx_cli/sbx_create_cursor.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_create_docker-agent.yaml	147	# Create a cloud sandbox for docker-agent	COMMENT
MEDIUM	data/sbx_cli/sbx_create_docker-agent.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_create_devin.yaml	147	# Create a cloud sandbox for devin	COMMENT
MEDIUM	data/sbx_cli/sbx_create_devin.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_create_gemini.yaml	147	# Create a cloud sandbox for gemini	COMMENT
MEDIUM	data/sbx_cli/sbx_create_gemini.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_run.yaml	197	# Create a cloud sandbox non-interactively and print its ID	COMMENT
MEDIUM	data/sbx_cli/sbx_create_shell.yaml	147	# Create a cloud sandbox for shell	COMMENT
MEDIUM	data/sbx_cli/sbx_create_shell.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_secret_set-custom.yaml	89	# Create a global custom secret. A unique placeholder is generated automatically.	COMMENT
MEDIUM	data/sbx_cli/sbx_create_claude.yaml	147	# Create a cloud sandbox for claude	COMMENT
MEDIUM	data/sbx_cli/sbx_create_claude.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_template_save.yaml	50	# Create a sandbox from the saved template	COMMENT
MEDIUM	data/sbx_cli/sbx_create_codex.yaml	147	# Create a cloud sandbox for codex	COMMENT
MEDIUM	data/sbx_cli/sbx_create_codex.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_create_opencode.yaml	147	# Create a cloud sandbox for opencode	COMMENT
MEDIUM	data/sbx_cli/sbx_create_opencode.yaml	150	# Create a named cloud sandbox with a mixin baked in	COMMENT
MEDIUM	data/sbx_cli/sbx_create.yaml	140	# Create a sandbox for Claude in the current directory	COMMENT
MEDIUM	data/sbx_cli/sbx_create.yaml	143	# Create a sandbox with a custom name	COMMENT
MEDIUM	data/sbx_cli/sbx_create.yaml	161	# Create a cloud sandbox for claude	COMMENT
MEDIUM	data/sbx_cli/sbx_create.yaml	164	# Create a named cloud sandbox with a mixin baked in	COMMENT

Magic Placeholder Names20 hits · 100 pts

Severity	File	Line	Snippet	Context
HIGH	…docker-agent/docs/configuration/opentelemetry/index.md	76	export OTEL_EXPORTER_OTLP_HEADERS="x-api-key=<your-api-key>,Langsmith-Project=<project>"	CODE
HIGH	…ocker/docker-agent/docs/providers/opencode-go/index.md	24	export OPENCODE_API_KEY=your-api-key	CODE
HIGH	…m/docker/docker-agent/docs/providers/moonshot/index.md	26	export MOONSHOT_API_KEY=your-api-key	CODE
HIGH	…om/docker/docker-agent/docs/providers/baseten/index.md	21	export BASETEN_API_KEY=your-api-key	CODE
HIGH	…m/docker/docker-agent/docs/providers/together/index.md	26	export TOGETHER_API_KEY=your-api-key	CODE
HIGH	…com/docker/docker-agent/docs/providers/vercel/index.md	25	export AI_GATEWAY_API_KEY=your-api-key	CODE
HIGH	…docker/docker-agent/docs/providers/openrouter/index.md	21	export OPENROUTER_API_KEY=your-api-key	CODE
HIGH	….com/docker/docker-agent/docs/providers/daoxe/index.md	23	export DAOXE_API_KEY=your-api-key	CODE
HIGH	…/docker/docker-agent/docs/providers/fireworks/index.md	26	export FIREWORKS_API_KEY=your-api-key	CODE
HIGH	…b.com/docker/docker-agent/docs/providers/groq/index.md	23	export GROQ_API_KEY=your-api-key	CODE
HIGH	…om/docker/docker-agent/docs/providers/minimax/index.md	21	export MINIMAX_API_KEY=your-api-key	CODE
HIGH	…m/docker/docker-agent/docs/providers/deepseek/index.md	24	export DEEPSEEK_API_KEY=your-api-key	CODE
HIGH	…ub.com/docker/docker-agent/docs/providers/xai/index.md	21	export XAI_API_KEY=your-api-key	CODE
HIGH	…com/docker/docker-agent/docs/providers/nvidia/index.md	25	export NVIDIA_API_KEY=your-api-key	CODE
HIGH	…docker/docker-agent/docs/providers/atlascloud/index.md	21	export ATLASCLOUD_API_KEY=your-api-key	CODE
HIGH	…/docker/docker-agent/docs/providers/api-route/index.md	23	export API_ROUTE_API_KEY=your-api-key	CODE
HIGH	…com/docker/docker-agent/docs/providers/nebius/index.md	21	export NEBIUS_API_KEY=your-api-key	CODE
HIGH	…cker/docker-agent/docs/providers/opencode-zen/index.md	29	export OPENCODE_API_KEY=your-api-key	CODE
HIGH	…m/docker/docker-agent/docs/providers/cerebras/index.md	25	export CEREBRAS_API_KEY=your-api-key	CODE
HIGH	…om/docker/docker-agent/docs/providers/mistral/index.md	21	export MISTRAL_API_KEY=your-api-key	CODE

Modern AI Meta-Vocabulary34 hits · 90 pts

Severity	File	Line	Snippet	Context
MEDIUM	…docker/docker-agent/docs/configuration/agents/index.md	25	toolsets: [list] # Optional: tool configurations (use `type: rag` for RAG sources)	CODE
MEDIUM	…docker/docker-agent/docs/configuration/agents/index.md	36	code_mode_tools: boolean # Optional: let the agent write JavaScript to orchestrate tool calls (see Code Mode)	CODE
MEDIUM	…/docker/docker-agent/docs/configuration/hooks/index.md	978	### Agent-Switch and Session-Resume: observability for multi-agent and long runs	COMMENT
MEDIUM	…cker/docker-agent/docs/configuration/overview/index.md	46	# 5. RAG — define retrieval-augmented generation sources (optional)	COMMENT
MEDIUM	…github.com/docker/docker-agent/docs/tools/a2a/index.md	51	Starting the toolset fetches the remote agent's card (`/.well-known/agent-card.json`). When that request fails with one	CODE
MEDIUM	…github.com/docker/docker-agent/docs/tools/mcp/index.md	211	Startup failure behaviour: local MCP failures (missing binary, connection refused, bad auth) fail fast — each turn r	CODE
MEDIUM	…github.com/docker/docker-agent/docs/tools/rag/index.md	363	## Debugging RAG	COMMENT
MEDIUM	…github.com/docker/docker-agent/docs/tools/rag/index.md	385	### Top-Level RAG Fields	COMMENT
MEDIUM	…ub.com/docker/docker-agent/docs/providers/dmr/index.md	118	context_size: 32768 # total context window (sent via _configure)	CODE
MEDIUM	…hub.com/docker/docker-agent/docs/features/acp/index.md	31	# With a multi-agent team config	COMMENT
MEDIUM	…docker/docker-agent/docs/features/chat-server/index.md	28	# Pick a specific agent from a multi-agent config	COMMENT
MEDIUM	…om/docker/docker-agent/docs/guides/compaction/index.md	11	## Why long sessions fill the context window	COMMENT
MEDIUM	…ub.com/docker/docker-agent/docs/guides/go-sdk/index.md	288	## RAG Toolset (opt-out)	COMMENT
MEDIUM	…ub.com/docker/docker-agent/docs/guides/go-sdk/index.md	311	### RAG over in-memory documents	COMMENT
MEDIUM	….com/docker/docker-agent/docs/guides/headless/index.md	35	\| Instructions/context every agent turn should see \| `add_prompt_files` in the agent config, or `--prompt-file` on the C	CODE
MEDIUM	….com/docker/docker-agent/docs/guides/headless/index.md	47	3. Model/provider context and media limits — even content that clears the first two layers still has to fit the mode	CODE
MEDIUM	…ocker/docker-agent/docs/concepts/distribution/index.md	184	# Run with a specific agent from a multi-agent config	COMMENT
MEDIUM	…ocker/docker-agent/docs/concepts/distribution/index.md	207	See [Pin external sub-agents to a digest](../multi-agent/index.md#pin-external-sub-agents-to-a-digest) and [External Sub	CODE
MEDIUM	content/manuals/dhi/tools/cli.md	153	# Prepare a single customization scaffold	COMMENT
MEDIUM	content/manuals/dhi/tools/cli.md	160	# Prepare a bulk customization scaffold (pipe JSON array via stdin)	COMMENT
MEDIUM	content/manuals/dhi/how-to/customize.md	198	# Prepare a single customization scaffold	COMMENT
MEDIUM	content/manuals/dhi/how-to/customize.md	205	# Prepare a bulk customization scaffold (pipe JSON array via stdin)	COMMENT
MEDIUM	content/manuals/ai/model-runner/ide-integrations.md	279	[Claude Code](https://claude.com/product/claude-code) is [Anthropic's](https://www.anthropic.com/) command-line tool for	CODE
MEDIUM	…/subscription-billing/plans/docker-agentic-platform.md	22	[Docker Agentic Platform](https://agentic-platform.docker.com/) is a	CODE
MEDIUM	…/subscription-billing/plans/docker-agentic-platform.md	45	[Usage & billing](https://agentic-platform.docker.com/usage) page in Agentic Platform.	CODE
MEDIUM	content/manuals/agentic-platform/signup.md	25	1. Open the [Docker Agentic Platform Console](https://agentic-platform.docker.com/)	CODE
MEDIUM	content/manuals/agentic-platform/signup.md	56	[Usage & billing](https://agentic-platform.docker.com/usage) to review runtime	CODE
MEDIUM	content/manuals/agentic-platform/get-started.md	40	1. Open [Docker Agentic Platform](https://agentic-platform.docker.com/) and	CODE
MEDIUM	content/manuals/agentic-platform/get-started.md	85	1. Open [Docker Agentic Platform](https://agentic-platform.docker.com/) and	CODE
MEDIUM	content/guides/golang.md	316	# A sample microservice in Go packaged into a container image.	COMMENT
MEDIUM	content/guides/claude-code-sandbox-model-runner.md	169	## Step 7: Package `gpt-oss` with a larger context window	COMMENT
MEDIUM⚡	content/guides/claude-code-model-runner.md	140	## Step 7: Package `gpt-oss` with a larger context window	COMMENT
MEDIUM⚡	content/guides/angular.md	315	# Docker & local orchestration	COMMENT
MEDIUM	content/guides/opencode-model-runner.md	135	## Step 5: Package `gpt-oss` with a larger context window	COMMENT

Over-Commented Block41 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	_vendor/modules.txt	1	# github.com/moby/moby/api v1.56.1	COMMENT
LOW	_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md	61	# specification, please refer to https://github.com/cncf-tags/container-device-interface/blob/main/SPEC.md#cdi-json-sp	COMMENT
LOW	_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md	101	platforms = [ "linux/amd64", "linux/arm64" ]	COMMENT
LOW	_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md	161	address = "/run/containerd/containerd.sock"	COMMENT
LOW	_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md	241	# Example:	COMMENT
LOW	_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md	261	# # command that signs the payload in stdin and outputs the signature to stdout.	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.42.yaml	6101	The digest of the targeted content.	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.43.yaml	6141	format: "int64"	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.44.yaml	6281	example: 3987495	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.45.yaml	6261	example: "sha256:c0537ff6a5218ef531ece93d4984efc99bbf3f7497c0a7726c88e2bb7584dc96"	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.46.yaml	6381	# description: \|	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.47.yaml	6401	# TODO Not yet including these fields for now, as they are nil / omitted in our response.	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.40.yaml	5861	format: "int64"	COMMENT
LOW	_vendor/github.com/moby/moby/api/docs/v1.41.yaml	6121	# type: "array"	COMMENT
LOW	…ts/skills/migrate-content-ia/scripts/scope-pr-files.sh	1	#!/bin/bash	COMMENT
LOW	hack/sync-governance-api.sh	1	#!/bin/bash	COMMENT
LOW	content/manuals/dhi/how-to/mirror.md	541	# Optional: inline creds if not relying on prior CLI logins	COMMENT
LOW	content/guides/golang.md	1521	```	COMMENT
LOW	content/guides/dotnet.md	121	# If you need more help, visit the Docker Compose reference guide at	COMMENT
LOW	content/guides/dotnet.md	141	# to set the database password. You must create `db/password.txt` and add	COMMENT
LOW	content/guides/dotnet.md	161	# interval: 10s	COMMENT
LOW	content/guides/dotnet.md	241	# Here the instructions define your application as a service called "server".	COMMENT
LOW	content/guides/dotnet.md	261	# db:	COMMENT
LOW	content/guides/rust.md	581	# syntax=docker/dockerfile:1	COMMENT
LOW	content/guides/php.md	101		COMMENT
LOW	content/guides/php.md	121	# Add core PHP extensions, see	COMMENT
LOW	content/guides/php.md	161	# This service is built from the Dockerfile in the current directory.	COMMENT
LOW	content/guides/php.md	181	# db:	COMMENT
LOW	content/guides/laravel.md	141		COMMENT
LOW	content/guides/java.md	121	# the packaged application into separate layers that can be copied into the final stage.	COMMENT
LOW	content/guides/java.md	181	# database or a cache. For examples, see the Awesome Compose repository:	COMMENT
LOW	content/guides/java.md	201	# user: postgres	COMMENT
LOW	content/guides/java.md	781		COMMENT
LOW	content/guides/ruby.md	101	apt-get install --no-install-recommends -y build-essential curl git pkg-config libyaml-dev && \	COMMENT
LOW	content/guides/ruby.md	121	bundle exec bootsnap precompile --gemfile	COMMENT
LOW	content/guides/ruby.md	201	# Install JavaScript dependencies and Node.js for asset compilation	COMMENT
LOW	content/guides/ruby.md	221	#	COMMENT
LOW	content/guides/nodejs.md	301	# This Dockerfile uses Docker Hardened Images (DHI) for enhanced security.	COMMENT
LOW	content/guides/nodejs.md	621	# serve with hot-reload. Used directly in development via compose.yaml.	COMMENT
LOW	data/custom_role_permissions.yaml	81	# description: Star and unstar repositories	COMMENT
LOW	data/redirects.yml	61	# Details about the "Docker Daemon attack surface". This redirect is currently	COMMENT

Verbosity Indicators10 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW⚡	content/reference/api/registry/latest.yaml	78	# Step 1: Get a bearer token	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	81	# Step 2: Get the image manifest. In this example, an image manifest list is returned.	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	96	# Step 4: Send a HEAD request to check if the layer blob exists	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	101	# Step 5: Download the layer blob	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	140	# Step 1: Get a bearer token	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	149	# Step 2: Check if the blob exists	COMMENT
LOW⚡	content/reference/api/registry/latest.yaml	155	# Step 3: Upload blob using monolithic upload	COMMENT
LOW	content/reference/api/registry/latest.yaml	167	# Step 4: Upload the manifest that references the config blob	COMMENT
LOW	content/reference/api/registry/latest.yaml	221	# Step 1: Get a bearer token	COMMENT
LOW	content/reference/api/registry/latest.yaml	234	# Step 4: Delete the manifest by digest	COMMENT

AI Response Leakage2 hits · 19 pts

Severity	File	Line	Snippet	Context
HIGH	…om/moby/buildkit/frontend/dockerfile/docs/reference.md	2249	# Note: I've written this using sh so it works in the busybox container too	COMMENT
HIGH⚡	content/reference/api/registry/latest.yaml	81	# Step 2: Get the image manifest. In this example, an image manifest list is returned.	COMMENT

AI Slop Vocabulary15 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	package-lock.json	2952	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.35.yaml	80	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.38.yaml	80	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.34.yaml	71	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.29.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.33.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.25.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.32.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.28.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.27.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.31.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.30.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.26.yaml	69	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.37.yaml	80	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE
LOW	_vendor/github.com/moby/moby/api/docs/v1.36.yaml	80	If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this	CODE

Fake / Example Data12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	COMPONENTS.md	532	- Use realistic text, not lorem ipsum	CODE
LOW	STYLE.md	457	- Use realistic text, not lorem ipsum	CODE
LOW	…om/moby/buildkit/frontend/dockerfile/docs/reference.md	1301	ENV MY_NAME="John Doe"	CODE
LOW	…om/moby/buildkit/frontend/dockerfile/docs/reference.md	1311	ENV MY_NAME="John Doe" MY_DOG=Rex\ The\ Dog \	CODE
LOW	hack/api-docs/contracts_test.go	47	{"/components/requestBodies/scim_update_user_request/content/application~1scim+json/schema", `{"schemas":["urn:ietf:pa	CODE
LOW	content/manuals/docker-hub/repos/manage/access.md	275	"invitees": ["user@example.com"]	CODE
LOW	…uals/ai/sandboxes/governance/audit/record-reference.md	155	"org_name": "Acme Inc",	CODE
LOW	…uals/ai/sandboxes/governance/audit/record-reference.md	184	"org_name": "Acme Inc",	CODE
LOW	content/manuals/ai/sandboxes/governance/audit/local.md	48	"org_name": "Acme Inc",	CODE
LOW	content/guides/dex.md	63	- email: "admin@example.com"	CODE
LOW	content/guides/testcontainers-nodejs-getting-started.md	121	const customer1 = { id: 1, name: "John Doe" };	CODE
LOW	content/guides/testcontainers-nodejs-getting-started.md	122	const customer2 = { id: 2, name: "Jane Doe" };	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	.agents/skills/create-pr/SKILL.md	97	example `Generated by Codex` or `Generated by Claude Code`.	CODE

Redundant / Tautological Comments3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	layouts/_shortcodes/files.html	69	{{ $psLines = $psLines \| append "# Write files as UTF-8 without BOM. Works on Windows PowerShell 5.1 and PowerShell 7+."	CODE
LOW	.github/workflows/sync-docker-agent-docs.yml	115	# Check if a closed PR with the same title already exists	COMMENT
LOW	.github/workflows/sync-cli-docs.yml	116	# Check if a closed PR with the same title already exists	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/pr-review.yml	68	- Meta-commentary: "it's worth noting that"	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…ts/skills/migrate-content-ia/scripts/scope-pr-files.sh	5	# Usage:	COMMENT

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…s-api/cookbook/connect-to-cloud-with-a-bearer-token.md	61	export async function loginWithSavedCredentials(path: string) {	CODE
LOW	content/guides/testcontainers-python-getting-started.md	250	def test_get_customer_by_email():	STRING

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/sbx-release-notes.py	18		CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/sbx-release-notes.py	137		CODE

docker/docs

Open-Source Code Quality, Security and Technical Debt Review