Repository for skills to assist AI coding agents with .NET and C#
This report summarizes scanner evidence for dotnet/skills, a C# project with 5,598 GitHub stars. SynthScan examined 360,901 lines of code across 1909 source files, recording 2525 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 9.1 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2405 finding(s).
Are imports declared and package/API names verified? 41 finding(s).
Are wrappers, guards, and repeated structures necessary? 537 finding(s).
Which changes need focused human review? 2525 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2525 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dotnet-skills.experiment.yaml | 1 | # Skill-vs-baseline experiment for every dotnet skill. | COMMENT |
| LOW | dotnet-skills.luna.experiment.yaml | 1 | # Skill-vs-baseline experiment for every dotnet skill. | COMMENT |
| LOW | eng/run-skill-evals.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/run-skill-evals.sh | 21 | # Subsetting uses the harness's `--eval-filter`, intersected with the experiment | COMMENT |
| LOW | eng/allowed-external-deps.txt | 1 | # Allowed external dependencies for the skill-validator. | COMMENT |
| LOW | eng/known-domains.txt | 1 | # Known domains for skill/agent content | COMMENT |
| LOW | eng/skill-validator/tests/Check/SkillProfileTests.cs | 381 | COMMENT | |
| LOW | eng/skill-validator/src/Shared/RetryHelper.cs | 1 | namespace SkillValidator.Shared; | COMMENT |
| LOW | eng/skill-validator/src/Shared/RetryHelper.cs | 21 | COMMENT | |
| LOW | eng/skill-validator/src/Shared/LlmJson.cs | 1 | using System.Text.Json; | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/LlmSession.cs | 1 | using GitHub.Copilot; | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/BaselineStore.cs | 121 | } | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/BaselineStore.cs | 381 | /// </summary> | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/BaselineStore.cs | 421 | COMMENT | |
| LOW | eng/skill-validator/src/Evaluate/Models.cs | 501 | public string? BaselineOut { get; init; } | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/SessionDatabase.cs | 1 | using System.Buffers.Binary; | COMMENT |
| LOW | eng/skill-validator/src/Evaluate/AgentRunner.cs | 701 | // If all servers were filtered out, treat as no MCP servers | COMMENT |
| LOW | …skill-validator/src/Check/ExternalDependencyChecker.cs | 21 | // Cross-host spellings that are not case-insensitive matches of the names | COMMENT |
| LOW | …skill-validator/src/Check/ExternalDependencyChecker.cs | 141 | findings.Add($"Non-built-in tool '{tool}' in tools list — review needed: verify this tool is int | COMMENT |
| LOW | …skill-validator/src/Check/ExternalDependencyChecker.cs | 161 | COMMENT | |
| LOW | eng/skill-validator/src/Check/SkillProfiler.cs | 41 | // WITH their full <description> only until that budget is exhausted; every | COMMENT |
| LOW | eng/skill-validator/src/Check/SkillProfiler.cs | 61 | // (name + description + location + markup), NOT the raw descriptions — | COMMENT |
| LOW | eng/skill-validator/src/Check/SkillProfiler.cs | 381 | return ["Possible causes from skill analysis:", | COMMENT |
| LOW | eng/eval-quality/underpowered-allowlist.txt | 1 | # Evals below the 5-distinct-stimulus floor enforced by check_eval_quality.py. | COMMENT |
| LOW | eng/dashboard/skill-value.js | 1 | // Skill Value dashboard view | COMMENT |
| LOW | plugins/dotnet-advanced/skills/dotnet-pinvoke/SKILL.md | 341 | // Trivial: use platform naming convention | COMMENT |
| LOW | …/find-untested-sources/scripts/Find-UntestedSources.cs | 1 | #:package Microsoft.CodeAnalysis.CSharp@4.14.0 | COMMENT |
| LOW | …/find-untested-sources/scripts/Find-UntestedSources.cs | 21 | // disambiguate by namespace match against the test file's usings. | COMMENT |
| LOW | tests/dotnet-data/optimizing-ef-core-queries/eval.yaml | 1 | name: optimizing-ef-core-queries | COMMENT |
| LOW | …timizing-ef-core-queries/benchmark-fixtures/Program.cs | 1 | using System.Diagnostics; | COMMENT |
| LOW | …s/dotnet-upgrade/dotnet-aot-compat/before/ArmClient.cs | 41 | /// Initializes a new instance of the <see cref="ArmClient"/> class. | COMMENT |
| LOW | …s/dotnet-upgrade/dotnet-aot-compat/before/ArmClient.cs | 121 | /// </summary> | COMMENT |
| LOW | …s/dotnet-upgrade/dotnet-aot-compat/before/ArmClient.cs | 141 | /// </summary> | COMMENT |
| LOW | …s/dotnet-upgrade/dotnet-aot-compat/before/ArmClient.cs | 261 | /// <summary> Gets all resource providers for a subscription. </summary> | COMMENT |
| LOW | …dotnet-upgrade/dotnet-aot-compat/before/ArmResource.cs | 61 | /// <summary> | COMMENT |
| LOW | …tnet-upgrade/dotnet-aot-compat/before/ArmCollection.cs | 41 | /// Gets the resource identifier. | COMMENT |
| LOW | …tnet-upgrade/dotnet-aot-compat/before/ArmCollection.cs | 61 | /// Gets the base uri for this resource client. | COMMENT |
| LOW | …rade/dotnet-aot-compat/before/ExperimentalAttribute.cs | 41 | /// <summary> | COMMENT |
| LOW | …-compat/before/Resources/Generated/SubscriptionData.cs | 21 | /// <summary> | COMMENT |
| LOW | …-compat/before/Resources/Generated/SubscriptionData.cs | 41 | /// <term>BinaryData.FromObjectAsJson(new { key = "value" })</term> | COMMENT |
| LOW | …pat/before/Resources/Generated/PolicyAssignmentData.cs | 21 | { | COMMENT |
| LOW | …pat/before/Resources/Generated/PolicyAssignmentData.cs | 41 | /// <item> | COMMENT |
| LOW | …pat/before/Resources/Generated/PolicyAssignmentData.cs | 61 | Overrides = new ChangeTrackingList<PolicyOverride>(); | COMMENT |
| LOW | …pat/before/Resources/Generated/PolicyAssignmentData.cs | 121 | public IDictionary<string, ArmPolicyParameterValue> Parameters { get; } | COMMENT |
| LOW | …pat/before/Resources/Generated/PolicyAssignmentData.cs | 141 | /// <term>BinaryData.FromString("\"foo\"")</term> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 41 | /// Gets the specified resource provider. | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 81 | scope.Failed(e); | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 101 | /// <item> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 141 | /// <description>Providers_List</description> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 161 | } | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 181 | /// </item> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 201 | /// <item> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 241 | /// <item> | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 281 | COMMENT | |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 321 | catch (Exception e) | COMMENT |
| LOW | …fore/Resources/Generated/ResourceProviderCollection.cs | 341 | /// <description>2022-09-01</description> | COMMENT |
| LOW | …ompat/before/Resources/Generated/ManagementLockData.cs | 21 | { | COMMENT |
| LOW | …ompat/before/Resources/Generated/ManagementLockData.cs | 41 | /// <item> | COMMENT |
| LOW | …esources/Generated/TenantPolicyDefinitionCollection.cs | 61 | /// <term>Operation Id</term> | COMMENT |
| LOW | …esources/Generated/TenantPolicyDefinitionCollection.cs | 101 | /// <item> | COMMENT |
| 1309 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/evaluation/test_token_failover.py | 1490 | self.assertIn("### Step 0: Validate Dispatch Inputs", investigate) | CODE |
| LOW | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 69 | ### Step 1: Understand the Scaffolding Request | COMMENT |
| LOW⚡ | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 103 | ### Step 2: Discover UI Style (non-API scaffolders only) | COMMENT |
| LOW⚡ | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 113 | ### Step 3: Apply Blazor-Specific Rules (Blazor scaffolders only) | COMMENT |
| LOW⚡ | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 121 | ### Step 4: Generate Code | COMMENT |
| LOW | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 151 | ### Step 5: Set Up Entity Framework (if applicable) | COMMENT |
| LOW | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 160 | ### Step 6: Generate .http File (API scaffolders only) | COMMENT |
| LOW | …tnet-data/skills/create-datadriven-aspnetcore/SKILL.md | 172 | ### Step 7: Verify | COMMENT |
| LOW | plugins/dotnet-ai/skills/technology-selection/SKILL.md | 13 | ## Step 1: Classify the task (decision tree) | COMMENT |
| LOW | plugins/dotnet-ai/skills/technology-selection/SKILL.md | 48 | ## Step 2: Cover the branch essentials, then decide depth | COMMENT |
| LOW | …t-experimental/skills/exp-mock-usage-analysis/SKILL.md | 33 | ### Step 1: Read all provided code | COMMENT |
| LOW | …t-experimental/skills/exp-mock-usage-analysis/SKILL.md | 44 | ### Step 2: Trace each mock setup through the production code | COMMENT |
| LOW | …t-experimental/skills/exp-mock-usage-analysis/SKILL.md | 66 | ### Step 3: Check for replaceable mocks | COMMENT |
| LOW | …t-experimental/skills/exp-mock-usage-analysis/SKILL.md | 75 | ### Step 4: Report findings | COMMENT |
| LOW | …-experimental/skills/exp-test-maintainability/SKILL.md | 37 | ### Step 1: Gather the test code | COMMENT |
| LOW | …-experimental/skills/exp-test-maintainability/SKILL.md | 48 | ### Step 2: Identify maintainability issues | COMMENT |
| LOW | …-experimental/skills/exp-test-maintainability/SKILL.md | 154 | ### Step 3: Apply calibration rules | COMMENT |
| LOW | …-experimental/skills/exp-test-maintainability/SKILL.md | 165 | ### Step 4: Report findings | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 20 | ### Step 1: Get Latest SDK Version | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 45 | ### Step 2: Find Workload Set Version | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 64 | ### Step 3: Download Workload Set Manifest | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 94 | ### Step 4: Download Workload Manifest | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 119 | ### Step 5: Parse WorkloadDependencies.json | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 172 | # Step 1: Get SDK info | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 177 | # Step 2: Get latest workload set version | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 182 | # Step 3: Download workload set manifest | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 187 | # Step 4: Download Android manifest | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 195 | # Step 1: Get SDK info | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 201 | # Step 2: Get latest workload set version | COMMENT |
| LOW⚡ | …i-doctor/references/workload-dependencies-discovery.md | 206 | # Step 3: Download workload set manifest and extract | COMMENT |
| LOW | …i-doctor/references/workload-dependencies-discovery.md | 217 | # Step 4: Download Android manifest and extract WorkloadDependencies | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 63 | ### Step 1: Enable AOT analysis in the .csproj | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 75 | ### Step 2: Build and collect warnings | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 93 | ### Step 3: Triage warnings by code (do NOT read every file) | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 105 | ### Step 4: Fix warnings iteratively (innermost first) | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 205 | ### Step 5: Rebuild and repeat | COMMENT |
| LOW | …ugins/dotnet-upgrade/skills/dotnet-aot-compat/SKILL.md | 209 | ### Step 6: Validate all TFMs | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 48 | ### Step 1: Evaluate readiness | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 63 | ### Step 2: Choose a rollout strategy | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 97 | ### Step 3: Fix dereference warnings | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 144 | ### Step 4: Annotate declarations | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 207 | ### Step 5: Apply nullable attributes for advanced scenarios | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 213 | ### Step 6: Clean up suppressions | COMMENT |
| LOW | …et-upgrade/skills/migrate-nullable-references/SKILL.md | 224 | ### Step 7: Validate | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 54 | ### Step 1: Assess the project | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 73 | ### Step 2: Update the Target Framework | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 91 | ### Step 3: Fix source-breaking and compilation changes | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 129 | ### Step 4: Address behavioral changes | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 169 | ### Step 5: Update infrastructure | COMMENT |
| LOW | …t-upgrade/skills/migrate-dotnet10-to-dotnet11/SKILL.md | 198 | ### Step 6: Verify | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 56 | ### Step 1: Assess the project | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 70 | ### Step 2: Update the Target Framework | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 91 | ### Step 3: Resolve build errors and source-incompatible changes | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 160 | ### Step 4: Address behavioral changes | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 208 | ### Step 5: Update infrastructure | COMMENT |
| LOW | …et-upgrade/skills/migrate-dotnet9-to-dotnet10/SKILL.md | 238 | ### Step 6: Verify | COMMENT |
| LOW | …net-upgrade/skills/migrate-dotnet8-to-dotnet9/SKILL.md | 50 | ### Step 1: Assess the project | COMMENT |
| LOW | …net-upgrade/skills/migrate-dotnet8-to-dotnet9/SKILL.md | 65 | ### Step 2: Update the Target Framework | COMMENT |
| LOW | …net-upgrade/skills/migrate-dotnet8-to-dotnet9/SKILL.md | 85 | ### Step 3: Resolve build errors and source-incompatible changes | COMMENT |
| LOW | …net-upgrade/skills/migrate-dotnet8-to-dotnet9/SKILL.md | 131 | ### Step 4: Address behavioral changes | COMMENT |
| 325 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/eval-quality/check_eval_quality.py | 198 | def _mapping_without_duplicates(loader, node, deep=False): | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 310 | def _without_execution_shard_metadata(content: str) -> str: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 336 | def _execution_shard_metadata(content: str) -> tuple[str | None, str | None]: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 349 | def is_execution_shard_metadata_only_change( | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 483 | def check_symlink_containment(path: str, root: str) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 731 | def _atif_nonnegative_integer(value, path: str) -> int: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 749 | def _validate_atif_content_parts(value, path: str) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 868 | def _validate_atif_trajectory(document, path: str = "", *, embedded: bool = False) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 931 | def is_simple_curated_response(document: dict) -> bool: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 954 | def is_oversized_curated_response(document: dict) -> bool: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1007 | def check_trajectory_output_graders( | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1061 | def check_required_vally_inputs(spec: str, doc: dict) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1087 | def materialize_declared_files(spec: str, stim: dict, workspace: str) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1364 | def check_unquoted_rubric_code_tokens(spec: str, raw: str) -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1742 | def report_missing_workspace_change_references() -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1757 | def report_nested_response_references() -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1771 | def report_oversized_inline_references() -> None: | CODE |
| LOW | eng/eval-quality/check_eval_quality.py | 1785 | def report_unreferenced_capability_stimuli() -> None: | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 367 | def missing_golden_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 371 | def untracked_golden_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 381 | def tracked_golden_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 565 | def untracked_golden_symlink_target(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 569 | def tracked_golden_symlink_target(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 573 | def escaping_golden_symlink_target(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 585 | def trajectory_that_fails_its_output_grader(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 595 | def unflagged_regex_is_case_sensitive(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 605 | def unflagged_regex_is_not_multiline(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 773 | def capability_without_reference(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 777 | def capability_without_slice_tags(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 781 | def capability_with_reference_and_slice_tags(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 785 | def capability_with_invalid_slice_tags(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 794 | def absolute_golden_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 803 | def traversing_golden_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 810 | def fixture_grader_with_trajectory(d, grader_yaml): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 823 | def state_grader_without_materialized_reference(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 831 | def baseline_file_exists_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 839 | def run_command_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 847 | def baseline_file_not_exists_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 855 | def baseline_file_contains_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 864 | def required_file_removal_needs_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 873 | def baseline_file_not_contains_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 882 | def required_diff_needs_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 890 | def empty_diff_needs_no_patch(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 894 | def transcript_grader_with_trajectory(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1050 | def absolute_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1055 | def missing_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1059 | def empty_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1063 | def missing_suite_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1068 | def empty_suite_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1073 | def traversing_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1077 | def windows_traversing_fixture_destination(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1162 | def file_contains_without_config(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1166 | def file_contains_without_path(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1174 | def file_contains_without_value(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1182 | def file_not_contains_without_path(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1190 | def file_not_contains_without_value(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1198 | def file_not_exists_without_config(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1269 | def shell_wrapped_dotnet_test_with_execution_assertion(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1279 | def compound_shell_command_with_dotnet_test(d): | CODE |
| LOW⚡ | eng/eval-quality/selftest_eval_quality.py | 1330 | def config_and_defaults_together(d): | CODE |
| 398 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | eng/run-skill-evals.sh | 12 | # verdict is reported as underpowered instead. The underlying evaluation harness | COMMENT |
| MEDIUM⚡ | eng/run-skill-evals.sh | 21 | # Subsetting uses the harness's `--eval-filter`, intersected with the experiment | COMMENT |
| MEDIUM | eng/run-skill-evals.sh | 208 | # result, not a harness failure. | COMMENT |
| MEDIUM | tests/dotnet-data/optimizing-ef-core-queries/eval.yaml | 15 | # alone can't add. A micro-benchmark harness (staged into perf/) then times each | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 85 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 137 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 189 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 239 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 285 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 322 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 506 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 553 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 600 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …ManagementGroup/Generated/ManagementGroupCollection.cs | 649 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 111 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 153 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 196 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 242 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 288 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …Group/Generated/ManagementGroupSubscriptionResource.cs | 334 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 120 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 153 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 188 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 233 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 277 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 322 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 366 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …e/ManagementGroup/Generated/ManagementGroupResource.cs | 410 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 77 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 128 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 178 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 225 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 343 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 387 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 431 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/ManagementGroupSubscriptionCollection.cs | 477 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 79 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 108 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 195 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 229 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 296 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 324 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 385 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 416 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 477 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 503 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 742 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …rated/RestOperations/ManagementGroupsRestOperations.cs | 775 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/RestOperations/EntitiesRestOperations.cs | 154 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/RestOperations/EntitiesRestOperations.cs | 197 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/RestOperations/EntitiesRestOperations.cs | 267 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …oup/Generated/RestOperations/EntitiesRestOperations.cs | 314 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 79 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 110 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 175 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 202 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 263 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …erations/ManagementGroupSubscriptionsRestOperations.cs | 296 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| MEDIUM | …/Models/ManagementGroupCollectionGetEntitiesOptions.cs | 53 | /// <summary> Indicates whether the request should utilize any caches. Populate the header with 'no-cache' value | COMMENT |
| MEDIUM | …ManagementGroup/Generated/Extensions/TenantResource.cs | 52 | /// <param name="cacheControl"> Indicates whether the request should utilize any caches. Populate the header wit | COMMENT |
| 62 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/dashboard/token-usage.js | 32 | // ── Public entry point ────────────────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/token-usage.js | 57 | // ── Main renderer ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/token-usage.js | 111 | // ── Summary cards ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/token-usage.js | 166 | // ── Daily overview charts ─────────────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/token-usage.js | 250 | // ── Per-plugin sub-charts ─────────────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/token-usage.js | 322 | // ── Collapsible breakdown table ───────────────────────────────────── | COMMENT |
| MEDIUM | eng/dashboard/skill-value.js | 208 | // ── Public entry point ────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/validate-pat-pool.yml | 43 | # ----------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/validate-pat-pool.yml | 47 | # ----------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/validate-pat-pool.yml | 149 | # ----------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/validate-pat-pool.yml | 151 | # ----------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/evaluation-run.yml | 71 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/evaluation-run.yml | 73 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/evaluation-run.yml | 383 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/evaluation-run.yml | 385 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/skill-coverage.yml | 20 | # ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/skill-coverage.yml | 24 | # ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/skill-coverage.yml | 302 | # ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/skill-coverage.yml | 305 | # ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .github/workflows/evaluation.yml | 836 | # ========================================================================== | COMMENT |
| MEDIUM⚡ | .github/workflows/evaluation.yml | 842 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 157 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 161 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 298 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 316 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 729 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 732 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 876 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 879 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1036 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1039 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1105 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1108 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1266 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1270 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1478 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1482 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1688 | # ========================================================================== | COMMENT |
| MEDIUM | .github/workflows/evaluation.yml | 1693 | # ========================================================================== | COMMENT |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 161 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 163 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 237 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 241 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 62 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 64 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 81 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 83 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 153 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 155 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 190 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 192 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 208 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 210 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 258 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 260 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 312 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 314 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 386 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 388 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/scripts/pr-triage-act.sh | 400 | # ---------------------------------------------------------------------- | COMMENT |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | eng/eval-quality/selftest_eval_quality.py | 1284 | " command: 'sh -c \"test -f sample/Thing.cs && dotnet test\"'\n" | CODE |
| HIGH | eng/evaluation/test_token_failover.py | 99 | setFailed: message => errors.push(String(message)), | CODE |
| HIGH | eng/evaluation/test_token_failover.py | 120 | calls.push({{ type: "comment", body: args.body }}); | CODE |
| HIGH | eng/evaluation/test_token_failover.py | 240 | setFailed: message => errors.push(String(message)), | CODE |
| HIGH | eng/evaluation/test_token_failover.py | 257 | calls.push({{ type: "update", body: args.body }}); | CODE |
| HIGH | eng/agentic-workflows/test_copilot_proxy.py | 57 | assert.equal(headers["transfer-encoding"], undefined); | CODE |
| HIGH | eng/agentic-workflows/test_copilot_proxy.py | 60 | assert.equal(parsed.stream_options, undefined); | CODE |
| HIGH | eng/agentic-workflows/test_copilot_proxy.py | 74 | assert.equal(result.codexCompatibility, null); | CODE |
| HIGH⚡ | …/agent.test-engineer/graders/check_classic_behavior.py | 51 | "if (percentage < 0m || percentage > 100m)", "if (false)"), | STRING |
| HIGH⚡ | …/agent.test-engineer/graders/check_classic_behavior.py | 53 | "if (product == null)", "if (false)"), | STRING |
| HIGH⚡ | …/agent.test-engineer/graders/check_classic_behavior.py | 59 | "if (rate < 0m || rate > 1m)", "if (false)"), | STRING |
| HIGH⚡ | …testability-migration/graders/test_check_time_scope.py | 70 | "builder.Services.AddSingleton<TimeProvider>(_ => null);", | STRING |
| HIGH | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 63 | "!Number.isFinite(percent) || percent < 0 || percent > 100", "false"), | CODE |
| HIGH⚡ | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 97 | "!decision.available || (available !== undefined && available < line.quantity)", | CODE |
| HIGH⚡ | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 98 | "(available !== undefined && available < line.quantity)"), | CODE |
| HIGH⚡ | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 100 | "!decision.available || (available !== undefined && available < line.quantity)", | CODE |
| HIGH⚡ | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 107 | "line.quantity,\n ).catch(() => ({ available: true, availableQuantity: undefined, reason: undefined | CODE |
| HIGH | …/dotnet-test/code-testing/graders/check_xunit_tests.py | 58 | ("exact-decimal", "discountPercent > 0 && discountPercent < 100"), | CODE |
| HIGH⚡ | …s/dotnet-test/graders/test_portable_review_examples.py | 74 | self.assertIn("assertEquals(null, repository.updated)", case) | CODE |
| HIGH⚡ | …s/dotnet-test/graders/test_portable_review_examples.py | 84 | self.assertIn("$findInvoice = { $null }", case) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …otnet-ai/skills/technology-selection/references/rag.md | 1 | # RAG, embeddings, and document ingestion | COMMENT |
| MEDIUM | …skill-quality/references/writing-for-baseline-delta.md | 111 | ## 12. Size orchestration to the request | COMMENT |
| MEDIUM | .github/workflows/issue-triage.md | 83 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/pr-triage-batch.yml | 15 | # `stale-sweep` job, cron `17 4 * * 1`), which replaces the former agentic | COMMENT |
| MEDIUM | .github/workflows/devops-health-check.md | 1141 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/issue-investigate.md | 51 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/markdown-linter.md | 99 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/devops-health-groom.md | 790 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/agentics-maintenance.yml | 24 | # This file defines the generated agentic maintenance workflow for this repository. | COMMENT |
| MEDIUM | .github/workflows/devops-health-investigate.md | 485 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/pr-malicious-scan.agent.md | 85 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/shared/pat_pool.README.md | 82 | # Run agentic jobs in an isolated `copilot-pat-pool` environment. | COMMENT |
| MEDIUM | .github/workflows/shared/pat_pool.README.md | 201 | [configure-repo]: https://github.github.com/gh-aw/guides/agentic-authoring/#configuring-your-repository | CODE |
| MEDIUM | .github/agents/agentic-workflows.md | 45 | - Configuration: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 69 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 79 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/update-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 89 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/debug-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 99 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/upgrade-agentic-workflows.md` | CODE |
| MEDIUM | .github/agents/agentic-workflows.md | 119 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-shared-agentic-workflow.md` | CODE |
| MEDIUM | .github/agents/agentic-workflows.md | 193 | # Initialize repository for agentic workflows | COMMENT |
| MEDIUM | .github/agents/agentic-workflows.md | 225 | - Always reference the instructions file at `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agent | CODE |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 4 | # Deterministic stale-PR sweep. Replaces the former agentic | COMMENT |
| MEDIUM | .github/scripts/pr-stale-sweep.sh | 7 | # Policy (unchanged from the agentic version): | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | eng/dashboard/dashboard-filtering.test.js | 337 | const tooltip = efficiencyChart.options.plugins.tooltip.callbacks.afterTitle([{ dataIndex: 0 }]); | CODE |
| CRITICAL | eng/dashboard/dashboard-filtering.test.js | 367 | qualityChart.options.plugins.legend.labels.generateLabels(qualityChart).length, | CODE |
| CRITICAL⚡ | eng/dashboard/dashboard.js | 230 | return Chart.defaults.plugins.legend.labels.generateLabels(chart).map(function(l) { | CODE |
| CRITICAL⚡ | eng/dashboard/dashboard.js | 237 | return Chart.defaults.plugins.legend.labels.generateLabels(chart).filter(function(l) { | CODE |
| CRITICAL | …/find-untested-sources/scripts/Find-UntestedSources.cs | 324 | TypeInfoResolver = new System.Text.Json.Serialization.Metadata.DefaultJsonTypeInfoResolver(), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ated/Models/PolicyDefinitionReference.Serialization.cs | 0 | "); builder.appendline($"{policydefinitionreferenceid} | STRING |
| HIGH | …Generated/Models/NonComplianceMessage.Serialization.cs | 0 | "); builder.appendline($"{policydefinitionreferenceid} | STRING |
| HIGH | …ated/Models/PolicyDefinitionReference.Serialization.cs | 0 | "); builder.appendline($"{policydefinitionreferenceid} | STRING |
| HIGH | …Generated/Models/NonComplianceMessage.Serialization.cs | 0 | "); builder.appendline($"{policydefinitionreferenceid} | STRING |
| HIGH | …Common/Generated/Internal/BicepSerializationHelpers.cs | 0 | ")) { inmultilinestring = false; } stringbuilder.appendline(line); continue; } if (line.contains(" | STRING |
| HIGH | …/Custom/Models/ManagedServiceIdentity.Serialization.cs | 0 | ")) { inmultilinestring = false; } stringbuilder.appendline(line); continue; } if (line.contains(" | STRING |
| HIGH | …Common/Generated/Internal/BicepSerializationHelpers.cs | 0 | ")) { inmultilinestring = false; } stringbuilder.appendline(line); continue; } if (line.contains(" | STRING |
| HIGH | …/Custom/Models/ManagedServiceIdentity.Serialization.cs | 0 | ")) { inmultilinestring = false; } stringbuilder.appendline(line); continue; } if (line.contains(" | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/eval-quality/check_eval_quality.py | 580 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 682 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 749 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 801 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1007 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1087 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1128 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1198 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1297 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1364 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1455 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1821 | CODE | |
| LOW | eng/eval-quality/check_eval_quality.py | 1374 | CODE | |
| LOW | eng/agentic-workflows/validate_agentic_workflows.py | 284 | CODE | |
| LOW | …find-untested-sources/scripts/find_untested_sources.py | 226 | CODE | |
| LOW | …find-untested-sources/scripts/find_untested_sources.py | 512 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 198 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 214 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 229 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 261 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 286 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 298 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 444 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 470 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 525 | CODE | |
| LOW | tests/agentic-workflows/test_graders.py | 549 | CODE | |
| LOW | tests/agentic-workflows/make_workflow_contexts.py | 13 | CODE | |
| LOW | …/agent.test-engineer/graders/check_classic_behavior.py | 82 | CODE | |
| LOW | tests/dotnet-test/grade-tests/test_regressions.py | 61 | CODE | |
| LOW | tests/dotnet-test/grade-tests/test_regressions.py | 115 | CODE | |
| LOW | tests/dotnet-test/grade-tests/test_regressions.py | 136 | CODE | |
| LOW | …test/coverage-analysis/graders/test_setup_discovery.py | 62 | CODE | |
| LOW | …t/agent.test-quality-auditor/graders/check_readonly.py | 14 | CODE | |
| LOW | …gent.testability-migration/graders/check_time_scope.py | 49 | CODE | |
| LOW | …gent.testability-migration/graders/check_time_scope.py | 96 | CODE | |
| LOW | …gent.testability-migration/graders/check_time_scope.py | 129 | CODE | |
| LOW | …et-test/code-testing/graders/test_check_xunit_tests.py | 67 | CODE | |
| LOW | …et-test/code-testing/graders/test_check_xunit_tests.py | 143 | CODE | |
| LOW | …dotnet-test/code-testing/graders/check_python_tests.py | 82 | CODE | |
| LOW | …s/dotnet-test/code-testing/graders/check_cart_tests.py | 246 | CODE | |
| LOW | …/dotnet-test/code-testing/graders/check_xunit_tests.py | 202 | CODE | |
| LOW | …s/dotnet-test/code-testing/graders/check_production.py | 18 | CODE | |
| LOW | …net-test/code-testing/graders/test_check_cart_tests.py | 39 | CODE | |
| LOW | …net-test/code-testing/graders/test_check_cart_tests.py | 61 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/eval-quality/check_eval_quality.py | 86 | CODE | |
| LOW | eng/evaluation/test_token_failover.py | 11 | CODE | |
| LOW | eng/agentic-workflows/stage_agentic_workflow_package.py | 4 | CODE | |
| LOW | …flows/test_build_failure_analysis_operational_value.py | 4 | CODE | |
| LOW | eng/agentic-workflows/test_copilot_proxy.py | 4 | CODE | |
| LOW | …g/agentic-workflows/test_validate_agentic_workflows.py | 4 | CODE | |
| LOW | eng/agentic-workflows/validate_agentic_workflows.py | 4 | CODE | |
| LOW | …/agentic-workflows/test_unskip_closed_tests_package.py | 4 | CODE | |
| LOW | …find-untested-sources/scripts/find_untested_sources.py | 22 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 21 | mockCalendar.Setup(c => c.BookSlot("slot-1", "user@example.com")).Returns(true); | CODE |
| LOW⚡ | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 25 | var result = scheduler.ScheduleAppointment(new DateTime(2025, 3, 15), "user@example.com"); | CODE |
| LOW⚡ | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 28 | mockEmail.Verify(e => e.SendConfirmation("user@example.com", "Appointment Confirmed", It.IsAny<string>()), Times | CODE |
| LOW | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 41 | var result = scheduler.ScheduleAppointment(new DateTime(2025, 3, 15), "user@example.com"); | CODE |
| LOW | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 58 | mockCalendar.Setup(c => c.BookSlot("slot-2", "user@example.com")).Returns(false); | CODE |
| LOW | …nalysis/well-placed-mocks/AppointmentSchedulerTests.cs | 62 | var result = scheduler.ScheduleAppointment(new DateTime(2025, 3, 15), "user@example.com"); | CODE |
| LOW | …ge-analysis/mocking-trivial-types/OrderServiceTests.cs | 71 | var mockAddress = new Mock<Address>("123 Main St", "Springfield", "62701", "US"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/dotnet-test/detect-static-dependencies/eval.yaml | 167 | - Did not include statics from auto-generated code in obj/ or bin/ directories | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …entic-workflows/unskip-closed-tests/tests/run_tests.py | 245 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/agentics-maintenance.yml | 24 | # This file defines the generated agentic maintenance workflow for this repository. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | eng/run-skill-evals.sh | 16 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/evaluation/test_token_failover.py | 1490 | self.assertIn("### Step 0: Validate Dispatch Inputs", investigate) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …find-untested-sources/scripts/find_untested_sources.py | 304 | except Exception as exc: | CODE |