2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

11.4K

Stars

Jinja

Language

70.1K

Lines of Code

465

Files

119

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 106 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 1.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 12 finding(s).

PR Review Velocity Impact 10.5/100 · LOW

Which changes need focused human review? 119 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 18LOW 101

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 119 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block91 hits · 86 pts

Severity	File	Line	Snippet	Context
LOW	ansible.cfg	1	# Example config file for ansible -- https://ansible.com/	COMMENT
LOW	ansible.cfg	21	#ask_pass = False	COMMENT
LOW	ansible.cfg	41	# You can negate them using ! (ex: !hardware,!facter,!ohai)	COMMENT
LOW	ansible.cfg	61	#inject_facts_as_vars = True	COMMENT
LOW	ansible.cfg	81	# this is done to avoid running all of a type by default.	COMMENT
LOW	ansible.cfg	101	#timeout = 10	COMMENT
LOW	ansible.cfg	121	# By default, variables from roles will be visible in the global variable	COMMENT
LOW	ansible.cfg	141	# Format of string {{ ansible_managed }} available within Jinja2	COMMENT
LOW	ansible.cfg	161	# not the task's args. This is a security feature because ansible cannot know	COMMENT
LOW	ansible.cfg	181	system_warnings = False	COMMENT
LOW	ansible.cfg	201	#become_plugins = /usr/share/ansible/plugins/become	COMMENT
LOW	ansible.cfg	221	#bin_ansible_callbacks = False	COMMENT
LOW	ansible.cfg	241	# hellokitty,kitty,luke-koala,meow,milk,moofasa,moose,ren,sheep,small,stegosaurus,\	COMMENT
LOW	ansible.cfg	261	#fact_caching_connection=/tmp	COMMENT
LOW	ansible.cfg	281	# https://docs.ansible.com/ansible/latest/user_guide/become.html#becoming-an-unprivileged-user	COMMENT
LOW	ansible.cfg	301	# Controls showing custom stats at the end, off by default	COMMENT
LOW	ansible.cfg	321	# set default errors for all plays	COMMENT
LOW	ansible.cfg	341	#become_method = sudo	COMMENT
LOW	ansible.cfg	361		COMMENT
LOW	ansible.cfg	381		COMMENT
LOW	ansible.cfg	401	# first disable 'requiretty' in /etc/sudoers	COMMENT
LOW	ansible.cfg	421		COMMENT
LOW	ansible.cfg	441	# expires, the connection is shutdown. The default value is 30 seconds.	COMMENT
LOW	ansible.cfg	461		COMMENT
LOW	ansible.cfg	481	#unreachable = red	COMMENT
LOW	ansible.cfg	501	#ignore_certs = False	COMMENT
LOW	ansible.cfg	521	#token=my_ah_token	COMMENT
LOW	example/config.yml	1	############################	COMMENT
LOW	example/config.yml	101	ENABLE_CLUSTER_AUDIT: false	COMMENT
LOW	example/config.yml	121		COMMENT
LOW	roles/os-harden/vars/main.yml	1	---	COMMENT
LOW	roles/os-harden/defaults/main.yml	141		COMMENT
LOW	roles/os-harden/defaults/main.yml	161	# * 4 - control of keyboard (SAK, unraw)	COMMENT
LOW	roles/os-harden/defaults/main.yml	181	# case of malicious software, it is possible to use PTRACE to access	COMMENT
LOW	roles/os-harden/defaults/main.yml	201	kernel.yama.ptrace_scope: 1	COMMENT
LOW	roles/os-harden/defaults/main.yml	221	# address-space fragmentation. \| Tail-1	COMMENT
LOW	roles/cluster-addon/tasks/kubeblocks.yml	81	#	COMMENT
LOW	…ter-addon/templates/kubeblocks/postgresql/benchmark.py	1	import subprocess	COMMENT
LOW	…-addon/templates/kubeblocks/postgresql/104.vscale.yaml	21	#Verify Kubernetes cluster has sufficient resources	COMMENT
LOW	…plates/kubeblocks/postgresql/123.scheduled-backup.yaml	1	#https://kubeblocks.io/docs/release-1_0/kubeblocks-for-postgresql/05-backup-restore/03-scheduled-full-backup	COMMENT
LOW	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	1	import redis	COMMENT
LOW	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	21	# --value-size 256	COMMENT
LOW	…n/templates/kubeblocks/redis/123.scheduled-backup.yaml	1	# 手动修改BackupSchedule	COMMENT
LOW	…/cluster-addon/templates/kubeblocks/mysql/benchmark.py	1	import subprocess	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	1	## Configure resource requests and limits	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	21		COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	81		COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	181	quorum: 2	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	201	# cpu: 100m	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	221		COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	241	## Example:	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	281	# -- Example collect script for -script option	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	301	# return result	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	321	## Configures redis with AUTH (requirepass & masterauth conf params)	COMMENT
LOW	manifests/deprecated/efk/fluentd-es-configmap.yaml	21	#	COMMENT
LOW	manifests/deprecated/efk/fluentd-es-configmap.yaml	41	# ...	COMMENT
LOW	manifests/deprecated/efk/fluentd-es-configmap.yaml	61	#	COMMENT
LOW	manifests/deprecated/efk/fluentd-es-configmap.yaml	81	#	COMMENT
LOW	manifests/deprecated/efk/fluentd-es-configmap.yaml	101	# "container_id": "997599971ee6366d4a5920d25b79286ad45ff37a74494f262e3bc98d909d0a7b"	COMMENT
LOW	manifests/deprecated/mariadb-cluster/my-values.yaml	1	## Global Docker image registry	COMMENT
31 more matches not shown…

Decorative Section Separators6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	ansible.cfg	2	# =======================================================	COMMENT
MEDIUM	tools/imgutil.sh	2	#------------------------------------------------------------	COMMENT
MEDIUM	roles/os-harden/vars/main.yml	3	# ====================	COMMENT
MEDIUM	roles/os-harden/vars/main.yml	7	# ---------------------------------------	COMMENT
MEDIUM	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	29	# ==================================================	COMMENT
MEDIUM	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	38	# ==================================================	COMMENT

Self-Referential Comments6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	…n/templates/kubeblocks/postgresql/121.backup-repo.yaml	1	# Create a secret to save the access key for MinIO	COMMENT
MEDIUM	…n/templates/kubeblocks/postgresql/121.backup-repo.yaml	7	# Create the BackupRepo resource	COMMENT
MEDIUM	…-addon/templates/kubeblocks/redis/121.backup-repo.yaml	1	# Create a secret to save the access key for MinIO	COMMENT
MEDIUM	…-addon/templates/kubeblocks/redis/121.backup-repo.yaml	7	# Create the BackupRepo resource	COMMENT
MEDIUM	…-addon/templates/kubeblocks/mysql/121.backup-repo.yaml	1	# Create a secret to save the access key for MinIO	COMMENT
MEDIUM	…-addon/templates/kubeblocks/mysql/121.backup-repo.yaml	7	# Create the BackupRepo resource	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	ansible.cfg	469	# Set this to True to allow libvirt_lxc connections to work without SELinux.	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	89	# Set path to redis-exporter telemtery-path	COMMENT
LOW	manifests/deprecated/redis-cluster/redis-ha/values.yaml	310	# Set path to redis-exporter telemtery-path	COMMENT
LOW	…ifests/deprecated/mysql-cluster/mysql-statefulset.yaml	128	# Check if we need to complete a clone by starting replication.	COMMENT
LOW	manifests/deprecated/jenkins/values.yaml	43	# Set RunAsUser to 1000 to let Jenkins run as non-root user 'jenkins' which exists in 'jenkins/jenkins' docker image.	COMMENT

Excessive Try-Catch Wrapping6 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	…don/templates/kubeblocks/clickhouse/clickhouse-conn.py	78	print(f"An error occurred while connecting to ClickHouse: {e}")	STRING
LOW	…don/templates/kubeblocks/clickhouse/clickhouse-conn.py	79	except Exception as e:	STRING
MEDIUM	…ter-addon/templates/kubeblocks/postgresql/benchmark.py	92	print(f"Error creating PostgreSQL user/database: {e}")	CODE
MEDIUM	…ter-addon/templates/kubeblocks/postgresql/benchmark.py	99	print("Error: sysbench is not installed. Please install it first.")	CODE
MEDIUM	…/cluster-addon/templates/kubeblocks/mysql/benchmark.py	66	print(f"Error creating MySQL user/database: {e}")	STRING
MEDIUM	…/cluster-addon/templates/kubeblocks/mysql/benchmark.py	77	print("Error: sysbench is not installed. Please install it first.")	STRING

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	ansible.cfg	266	# and you can change the location of the files by setting retry_files_save_path	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	16	# Usage:	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	playbooks/99.clean.yml	1	# WARNING: This playbook will erase the entire k8s-cluster, include PODs, ETCD data etc.	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…/cluster-addon/templates/kubeblocks/redis/benchmark.py	71		CODE

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…les/cluster-addon/templates/kubeblocks/mysql/readme.md	27	INSERT INTO t1 VALUES (1, 'John Doe');	CODE

easzlab/kubeasz

Open-Source Code Quality, Security and Technical Debt Review