Your window into all of your data
This report summarizes scanner evidence for elastic/kibana, a TypeScript project with 21,353 GitHub stars. SynthScan examined 16,413,088 lines of code across 122824 source files, recording 15796 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 1.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 12583 finding(s).
Are imports declared and package/API names verified? 1972 finding(s).
Are wrappers, guards, and repeated structures necessary? 9928 finding(s).
Which changes need focused human review? 15796 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 15796 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …/extend/key-concepts/performance/client-performance.md | 43 | plugins.management.sections.section.kibana.registerApp({ | CODE |
| CRITICAL | …lic/react_embeddables/data_table/data_table_queries.ts | 117 | const timeRangeFilter = services.data.query.timefilter.timefilter.createFilter( | CODE |
| CRITICAL | …n/plugins/user_profiles_consumer/server/init_routes.ts | 67 | pluginDeps.security.authz.actions.app.get(appPrivilege) | CODE |
| CRITICAL | …ration/spaces_only/tests/alerting/group2/monitoring.ts | 146 | getResponse.body.monitoring.run.history.forEach((history: any) => { | CODE |
| CRITICAL | …n/common/plugins/task_manager_fixture/server/plugin.ts | 104 | await coreCtx.elasticsearch.client.asInternalUser.indices.refresh({ | CODE |
| CRITICAL | …egration/plugins/elasticsearch_client/server/plugin.ts | 28 | const body = await coreContext.elasticsearch.client.asCurrentUser.security.getUser(); | CODE |
| CRITICAL | …i_integration/test_suites/task_manager/health_route.ts | 345 | expect(health.stats.workload.value.schedule.find(([val]) => val === interval)).to.eql( | CODE |
| CRITICAL | …unctional/plugins/test_endpoints/server/init_routes.ts | 552 | const refreshResult = await coreStart.elasticsearch.client.asInternalUser.indices.refresh({ | CODE |
| CRITICAL | …unctional/plugins/test_endpoints/server/init_routes.ts | 662 | await coreStart.elasticsearch.client.asInternalUser.indices.refresh({ | CODE |
| CRITICAL | …/test/api_integration/apis/ml/jobs/category_results.ts | 88 | '[0] failed to execute bulk item (index) index {[testing-twitter-pycon-realtime][_doc][1115075670953136128], | CODE |
| CRITICAL | …/test/api_integration/apis/ml/jobs/category_results.ts | 116 | 'All shards failed for phase: [query]\norg.elasticsearch.ElasticsearchException$1: Result window is too larg | CODE |
| CRITICAL | …/test/api_integration/apis/ml/jobs/category_results.ts | 171 | '[0] failed to execute bulk item (index) index {[testing-twitter-pycon-realtime][_doc][1115075670953136128], sourc | CODE |
| CRITICAL | …test/api_integration/apis/telemetry/telemetry_local.ts | 123 | stats.stack_stats.kibana.plugins.saved_objects_counts.by_type.find( | CODE |
| CRITICAL | …hared/maps/test/scout/api/tests/maps_telemetry.spec.ts | 44 | const geoPointFieldStats = apiResponse.cluster_stats.indices.mappings.field_types.find( | CODE |
| CRITICAL | …hared/maps/test/scout/api/tests/maps_telemetry.spec.ts | 49 | const geoShapeFieldStats = apiResponse.cluster_stats.indices.mappings.field_types.find( | CODE |
| CRITICAL | x-pack/platform/plugins/shared/maps/server/routes.ts | 107 | const resp = await coreContext.elasticsearch.client.asCurrentUser.indices.getSettings({ | CODE |
| CRITICAL | x-pack/platform/plugins/shared/maps/server/plugin.ts | 148 | const getFilterMigrations = plugins.data.query.filterManager.getAllMigrations.bind( | CODE |
| CRITICAL | …ns/shared/maps/server/data_indexing/indexing_routes.ts | 286 | await coreContext.elasticsearch.client.asCurrentUser.indices.getMapping({ | CODE |
| CRITICAL | x-pack/platform/plugins/shared/maps/public/plugin.ts | 240 | plugins.data.search.aggs.types.registerLegacy(GEOHASH_GRID, getGeoHashBucketAgg); | CODE |
| CRITICAL | x-pack/platform/plugins/shared/alerting/README.md | 85 | **server.newPlatform.setup.plugins.alerting.registerType(options)** | CODE |
| CRITICAL | x-pack/platform/plugins/shared/alerting/README.md | 448 | server.newPlatform.setup.plugins.alerting.registerType(myRuleType); | CODE |
| CRITICAL | …pack/platform/plugins/shared/alerting/server/plugin.ts | 442 | const getSearchSourceMigrations = plugins.data.search.searchSource.getAllMigrations.bind( | CODE |
| CRITICAL | …ypted_saved_objects/server/routes/key_rotation.test.ts | 98 | const [config] = routeParamsMock.router.post.mock.calls.find( | CODE |
| CRITICAL | …ypted_saved_objects/server/routes/key_rotation.test.ts | 114 | const [, rotateRouteHandler] = routeParamsMock.router.post.mock.calls.find( | CODE |
| CRITICAL | …latform/plugins/shared/query_activity/public/plugin.ts | 31 | plugins.management.sections.section.clusterPerformance.registerApp({ | CODE |
| CRITICAL | …der/server/services/execution/execution_runner.test.ts | 1309 | telemetry.analyticsService.reportExecutionComplete.mock.calls.map(([call]) => [ | CODE |
| CRITICAL | …cution/run_agent/deductive/run_deductive_agent.test.ts | 112 | const emitted = ctx.events.emit.mock.calls.map((c: any) => c[0].type as string); | CODE |
| CRITICAL | …cution/run_agent/deductive/run_deductive_agent.test.ts | 232 | const types = ctx.events.emit.mock.calls.map((c: any) => c[0].type as string); | CODE |
| CRITICAL | …cution/run_agent/deductive/run_deductive_agent.test.ts | 274 | const types = ctx.events.emit.mock.calls.map((c: any) => c[0].type as string); | CODE |
| CRITICAL | …d_objects_tagging/server/usage/fetch_tag_usage_data.ts | 60 | const usedTagIds = bucket.nested_ref.tag_references.tag_id.buckets.map( | CODE |
| CRITICAL | …platform/plugins/shared/security/server/plugin.test.ts | 58 | core.elasticsearch.client.asInternalUser.xpack.usage.mockResolvedValue({ | CODE |
| CRITICAL | …d/security/server/authentication/authenticator.test.ts | 2188 | mockOptions.clusterClient.asInternalUser.security.invalidateToken.mockResponse({ | CODE |
| CRITICAL | …d/security/server/authentication/authenticator.test.ts | 2193 | mockOptions.clusterClient.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …shared/security/server/authentication/authenticator.ts | 280 | this.options.config.authc.sortedProviders.map(({ type, name }) => { | CODE |
| CRITICAL | …shared/security/server/authentication/authenticator.ts | 691 | this.options.config.authc.http.schemes.map((scheme) => scheme.toLowerCase()) | CODE |
| CRITICAL | …shared/security/server/authentication/providers/pki.ts | 301 | result = (await this.options.client.asInternalUser.transport.request({ | CODE |
| CRITICAL | …urity/server/authentication/providers/kerberos.test.ts | 126 | mockOptions.client.asInternalUser.security.getToken.mockResponse( | CODE |
| CRITICAL | …urity/server/authentication/providers/kerberos.test.ts | 161 | mockOptions.client.asInternalUser.security.getToken.mockResponse( | CODE |
| CRITICAL | …urity/server/authentication/providers/kerberos.test.ts | 203 | mockOptions.client.asInternalUser.security.getToken.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …urity/server/authentication/providers/kerberos.test.ts | 230 | mockOptions.client.asInternalUser.security.getToken.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …urity/server/authentication/providers/kerberos.test.ts | 254 | mockOptions.client.asInternalUser.security.getToken.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …d/security/server/authentication/providers/kerberos.ts | 162 | tokens = await this.options.client.asInternalUser.security.getToken({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 55 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 107 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 209 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 257 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 309 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 346 | mockOptions.client.asInternalUser.transport.request.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 381 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 440 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 482 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 556 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 680 | mockOptions.client.asInternalUser.transport.request.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 718 | mockOptions.client.asInternalUser.transport.request.mockRejectedValue(failureReason); | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 756 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 824 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 883 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 956 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 996 | mockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| CRITICAL | …/security/server/authentication/providers/saml.test.ts | 1046 | customMockOptions.client.asInternalUser.transport.request.mockResolvedValue({ | CODE |
| 833 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/extend/tutorials/kibana-data-search-services.md | 455 | function onSearchSessionConfigChange() { | CODE |
| LOW | docs/extend/tutorials/kibana-data-search-services.md | 487 | function onSearchSessionConfigChange(searchSessionIdFromUrl?: string) { | CODE |
| LOW | examples/saved_objects/server/search_example_routes.ts | 16 | export function registerSearchExampleRoutes(router: IRouter, log: Logger) { | CODE |
| LOW | examples/saved_objects/server/esql_example_routes.ts | 20 | export function registerEsqlExampleRoutes(router: IRouter, log: Logger) { | CODE |
| LOW | …/public/app/presentation_container_example/page_api.ts | 67 | function getLastSavedStateForChild(childId: string) { | CODE |
| LOW | …le/public/examples/3_creating_custom_format_editor.tsx | 48 | export function registerExampleFormatEditor(indexPatternFieldEditor: IndexPatternFieldEditorSetup) { | CODE |
| LOW | …amples/routing_example/server/routes/message_routes.ts | 69 | export function registerGetMessageByIdRoute(router: IRouter) { | CODE |
| LOW | …ample/server/routes/random_number_between_generator.ts | 18 | export function registerGetRandomNumberBetweenRoute(router: IRouter) { | CODE |
| LOW | …uting_example/server/routes/random_number_generator.ts | 18 | export function registerGetRandomNumberRoute(router: IRouter) { | CODE |
| LOW | …uting_example/public/random_number_between_example.tsx | 27 | export function RandomNumberBetweenRouteExample({ fetchRandomNumberBetween }: Props) { | CODE |
| LOW | …s/search_examples/server/routes/server_search_route.ts | 17 | export function registerServerSearchRoute(router: IRouter<DataRequestHandlerContext>) { | CODE |
| LOW | examples/grid_example/public/serialized_grid_layout.ts | 16 | export function clearSerializedDashboardState() { | CODE |
| LOW | examples/grid_example/public/serialized_grid_layout.ts | 20 | export function getSerializedDashboardState(): MockSerializedDashboardState { | CODE |
| LOW | examples/unified_doc_viewer/public/application.tsx | 41 | function UnifiedDocViewerExamplesApp({ data }: { data: DataPublicPluginStart }) { | CODE |
| LOW | scripts/evals.js | 46 | function filterMetadataWithExistingConfigs(metadata, repoRoot) { | CODE |
| LOW | scripts/sync_logs.js | 362 | function formatDestCandidatesTried(config) { | CODE |
| LOW | …ests_reporter/generate_scout_test_failure_artifacts.ts | 36 | export async function generateScoutTestFailureArtifacts({ | CODE |
| LOW | …-reporter-cli/failed_tests_reporter/failure_details.ts | 49 | export function getConfigPathFromCommandLine(command?: string): string { | CODE |
| LOW | …porter-cli/failed_tests_reporter/get_scout_failures.ts | 234 | export function getScoutCommandLineFromFailures(failures: ScoutTestFailureExtended[]): string { | CODE |
| LOW | …cli/failed_tests_reporter/failed_tests_reporter_cli.ts | 94 | export function runFailedTestsReporterCli() { | CODE |
| LOW | …t-reporter-cli/failed_tests_reporter/report_failure.ts | 42 | export function redactSensitiveGithubFailureText(text: string): string { | CODE |
| LOW | …t-reporter-cli/failed_tests_reporter/report_failure.ts | 98 | function getErrorMessageForComment( | CODE |
| LOW | …t-reporter-cli/failed_tests_reporter/report_failure.ts | 128 | function renderErrorMessageSection({ | CODE |
| LOW | …est-reporter-cli/failed_tests_reporter/get_failures.ts | 57 | export function getReportNameFromClassname(classname: string): string { | CODE |
| LOW | …-cli/flaky_test_issues/report_flaky_test_issues_cli.ts | 39 | export function runReportFlakyTestIssuesCli() { | CODE |
| LOW | packages/kbn-dependency-ownership/src/cli.ts | 27 | export async function identifyDependencyOwnershipCLI() { | CODE |
| LOW | packages/kbn-ts-type-check-cli/root_refs_config.ts | 23 | async function isRootRefsConfigSelfManaged() { | CODE |
| LOW | packages/kbn-mock-idp-plugin/public/role_switcher.tsx | 147 | function isAuthenticatedWithMockIDP(user: AuthenticatedUser) { | CODE |
| LOW | …onsole-definitions/src/generate_console_definitions.ts | 127 | export function generateConsoleDefinitions({ | CODE |
| LOW | …enerate-console-definitions/src/audit_overrides_cli.ts | 69 | export function runAuditConsoleDefinitionOverridesCli() { | CODE |
| LOW | …e-definitions/src/generate_kibana_api_doc_links_cli.ts | 21 | export function runGenerateKibanaApiDocLinksCli() { | CODE |
| LOW | packages/kbn-generate-console-definitions/src/cli.ts | 19 | export function runGenerateConsoleDefinitionsCli() { | CODE |
| LOW | packages/kbn-docs-utils/src/stats.ts | 60 | function collectAdoptionTrackedAPIStats( | CODE |
| LOW | packages/kbn-docs-utils/src/get_plugin_api_map.ts | 85 | function collectAdoptionTrackedAPIs( | CODE |
| LOW | packages/kbn-docs-utils/src/get_plugin_api_map.ts | 126 | function collectDeprecationsForApi( | CODE |
| LOW | packages/kbn-docs-utils/src/build_api_docs_cli.ts | 39 | async function endTransactionWithFailure(transaction: Transaction | null) { | CODE |
| LOW | …kbn-docs-utils/src/get_declaration_nodes_for_plugin.ts | 35 | export function getDeclarationNodesForPluginScope( | CODE |
| LOW | …kbn-docs-utils/src/get_declaration_nodes_for_plugin.ts | 69 | function getExportedFileDeclarations( | CODE |
| LOW | …-docs-utils/src/mdx/build_plugin_deprecations_table.ts | 15 | export function buildPluginDeprecationsTable( | CODE |
| LOW | …kbn-docs-utils/src/mdx/write_plugin_split_by_folder.ts | 21 | export async function writePluginDocSplitByFolder( | CODE |
| LOW | …kbn-docs-utils/src/mdx/write_plugin_split_by_folder.ts | 74 | function createServicePluginDocDef(pluginDoc: PluginApi, service?: string): PluginApi { | CODE |
| LOW | …n-docs-utils/src/mdx/write_deprecations_due_by_team.ts | 24 | export async function writeDeprecationDueByTeam( | CODE |
| LOW | …docs-utils/src/mdx/write_deprecations_doc_by_plugin.ts | 19 | export async function writeDeprecationDocByPlugin( | CODE |
| LOW | …ls/src/build_api_declarations/build_api_declaration.ts | 28 | export function buildApiDeclarationTopNode( | CODE |
| LOW | …docs-utils/src/build_api_declarations/get_signature.ts | 150 | export function normalizeVerboseSignatures(signature: string): string { | CODE |
| LOW | packages/kbn-swc-config/src/node_register.js | 16 | function getNodeRegisterParserConfig(path) { | CODE |
| LOW | …es/kbn-lint-packages-cli/migrate_plugins_to_package.ts | 23 | function convertPluginIdToPackageId(pluginId: string) { | CODE |
| LOW | …cli-dev-mode/src/should_redirect_from_old_base_path.ts | 16 | export function shouldRedirectFromOldBasePath(path: string) { | CODE |
| LOW | …ings-cli/src/commands/run_check_kibana_settings_cli.ts | 23 | export function runCheckKibanaSettingsCli() { | CODE |
| LOW | …/src/snapshots/validate_changes/existing_type_utils.ts | 65 | export function validateNoStructuralModelVersionChanges( | CODE |
| LOW | …/src/snapshots/validate_changes/existing_type_utils.ts | 448 | export function validateNewMappingsInModelVersion( | CODE |
| LOW | …/src/snapshots/validate_changes/existing_type_utils.ts | 493 | export function validateIgnoreAboveExistingType( | CODE |
| LOW | …/src/snapshots/validate_changes/existing_type_utils.ts | 536 | export function validateNameTitleFieldTypesExistingType( | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 27 | export function validateInitialModelVersion(name: string, mv: ModelVersionSummary): void { | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 39 | export function validateModelVersionNumbers(name: string, mvs: ModelVersionSummary[]) { | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 72 | export function validateNewModelVersionSchemas(name: string, mv: ModelVersionSummary) { | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 103 | export function validateUpdateSchemaContinuity(name: string, registeredType: SavedObjectsType) { | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 178 | function extractMappingCompatibleSchemaFields(joiSchema: any, path: string[] = []): string[] { | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 200 | export function validateAllMappingsInModelVersion( | CODE |
| LOW | …cts-cli/src/snapshots/validate_changes/common_utils.ts | 254 | function throwIfIndexOrEnabledFalse( | CODE |
| 8627 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/reference/advanced-settings-global.yml | 2 | # This file is used to generate "Logging settings" page in the product docs | COMMENT |
| MEDIUM | docs/reference/advanced-settings-space.yml | 2 | # This file is used to generate "Logging settings" page in the product docs | COMMENT |
| MEDIUM | …s/reference/configuration-reference/cases-settings.yml | 2 | # This file is used to generate "Cases settings" page in the product docs | COMMENT |
| MEDIUM | …/configuration-reference/automatic-import-settings.yml | 2 | # This file is used to generate "Automatic Import settings" page in the product docs | COMMENT |
| MEDIUM | …ration-reference/reporting-settings-background-job.yml | 2 | # This file is used to generate "Reporting background job settings" page in the product docs | COMMENT |
| MEDIUM | …s/reference/configuration-reference/fleet-settings.yml | 2 | # This file is used to generate "Fleet settings" page in the product docs | COMMENT |
| MEDIUM | …/configuration-reference/reporting-settings-enable.yml | 2 | # This file is used to generate "Enable reporting settings" page in the product docs | COMMENT |
| MEDIUM | …nce/configuration-reference/url-drilldown-settings.yml | 2 | # This file is used to generate "URL drilldown settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …nce/configuration-reference/reporting-settings-csv.yml | 2 | # This file is used to generate "CSV settings settings" page in the product docs | COMMENT |
| MEDIUM | …configuration-reference/product-intercept-settings.yml | 2 | # This file is used to generate "Product intercept settings" page in the product docs | COMMENT |
| MEDIUM | …eference/configuration-reference/alerting-settings.yml | 2 | # This file is used to generate the "Alerting and action settings in Kibana" page in the product docs. | COMMENT |
| MEDIUM | …/reference/configuration-reference/spaces-settings.yml | 2 | # This file is used to generate "Spaces settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …reference/configuration-reference/logging-settings.yml | 2 | # This file is used to generate "Logging settings" page in the product docs | COMMENT |
| MEDIUM | …configuration-reference/security-solution-settings.yml | 2 | # This file is used to generate "Security Solution settings" page in the product docs | COMMENT |
| MEDIUM | docs/reference/configuration-reference/map-settings.yml | 2 | # This file is used to generate "Map settings" page in the product docs | COMMENT |
| MEDIUM | …ference/configuration-reference/telemetry-settings.yml | 2 | # This file is used to generate "Telemetry settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …ence/configuration-reference/ai-assistant-settings.yml | 2 | # This file is used to generate "Knowledge base artifact settings for AI Assistants" page in the product docs | COMMENT |
| MEDIUM | …ration-reference/reporting-settings-encryption-key.yml | 2 | # This file is used to generate "Encryption key setting for reporting in Kibana" page in the product docs | COMMENT |
| MEDIUM | …configuration-reference/reporting-settings-png-pdf.yml | 2 | # This file is used to generate "PNG/PDF settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …ference/configuration-reference/profiling-settings.yml | 2 | # This file is used to generate "Universal Profiling settings" page in the product docs | COMMENT |
| MEDIUM | …ence/configuration-reference/task-manager-settings.yml | 2 | # This file is used to generate "Task Manager settings" page in the product docs | COMMENT |
| MEDIUM | …erence/configuration-reference/monitoring-settings.yml | 2 | # This file is used to generate "Monitoring settings" page in the product docs | COMMENT |
| MEDIUM | …s/reference/configuration-reference/share-settings.yml | 2 | # This file is used to generate "Sharing settings" page in the product docs | COMMENT |
| MEDIUM | docs/reference/configuration-reference/apm-settings.yml | 2 | # This file is used to generate "APM settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …reference/configuration-reference/general-settings.yml | 2 | # This file is used to generate the "General settings in Kibana" page in the product docs. | COMMENT |
| MEDIUM | …cs/reference/configuration-reference/logs-settings.yml | 2 | # This file is used to generate "Logs settings" page in the product docs | COMMENT |
| MEDIUM | …reference/configuration-reference/metrics-settings.yml | 2 | # This file is used to generate "Metrics settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …/reference/configuration-reference/banner-settings.yml | 2 | # This file is used to generate "Banner settings in Kibana" page in the product docs | COMMENT |
| MEDIUM | …eference/configuration-reference/security-settings.yml | 2 | # This file is used to generate "Security settings" page in the product docs | COMMENT |
| MEDIUM | …figuration-reference/internationalization-settings.yml | 2 | # This file is used to generate "i18n settings" page in the product docs | COMMENT |
| MEDIUM | …e/configuration-reference/search-sessions-settings.yml | 2 | # This file is used to generate "Background search and search sessions settings" page in the product docs | COMMENT |
| MEDIUM | examples/screenshot_mode_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/data_streams_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/portable_dashboards_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/saved_objects/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/locator_explorer/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/unified_field_list_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/esql_validation_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/vega_sandbox_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/hello_world/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/embeddable_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/workflows_extensions_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/controls_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/data_view_field_editor_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/user_profile_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/field_formats_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/response_stream/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/pubsub_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/eso_model_version_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/routing_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/esql_ast_inspector/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/feature_control_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/esql_ux_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/partial_results_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/content_management_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/unified_tabs_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/files_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/discover_customization_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/v8_profiler_examples/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| MEDIUM | examples/preboot_example/moon.yml | 1 | # This file is generated by the @kbn/moon package. Any manual edits will be erased! | COMMENT |
| 1560 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/codeql/quick_check.sh | 65 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/codeql/quick_check.sh | 67 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/codeql/quick_check.sh | 100 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/codeql/quick_check.sh | 102 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …int-plugin-eslint/rules/scout_test_file_naming.test.js | 138 | // ── Namespace (new structure) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …int-plugin-eslint/rules/scout_test_file_naming.test.js | 350 | // ── Namespace (new structure) – invalid cases ───────────────────────────── | COMMENT |
| MEDIUM | …mizer/src/config/create_external_plugin_config.test.ts | 21 | // ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …mizer/src/config/create_external_plugin_config.test.ts | 23 | // ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …mizer/src/config/create_external_plugin_config.test.ts | 156 | // ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …mizer/src/config/create_external_plugin_config.test.ts | 158 | // ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 11 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 24 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 110 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 112 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 198 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/kibana.overlays.bump_slim.yaml | 200 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/dashboards.overlays.yaml | 6 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/dashboards.overlays.yaml | 8 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/streams.overlays.yaml | 6 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | oas_docs/overlays/streams.overlays.yaml | 8 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | oas_docs/overlays/discover_sessions.overlays.yaml | 6 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/discover_sessions.overlays.yaml | 8 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/visualizations.overlays.yaml | 6 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | oas_docs/overlays/visualizations.overlays.yaml | 8 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …_gen_ai/inference/tests/product_docs_search_quality.ts | 140 | // ── 1. Document count ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …_gen_ai/inference/tests/product_docs_search_quality.ts | 151 | // ── 2. Query relevance ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …leet_tasks/tests/version_specific_policy_assignment.ts | 569 | // ── Half A — stale variant cleanup (kibana#283077) ────────────────────────────────────────── | COMMENT |
| MEDIUM | …leet_tasks/tests/version_specific_policy_assignment.ts | 569 | // ── Half A — stale variant cleanup (kibana#283077) ────────────────────────────────────────── | COMMENT |
| MEDIUM | …leet_tasks/tests/version_specific_policy_assignment.ts | 652 | // ── Half B — out-of-set agent version gets a variant deployed by Phase 1 ───────────────────── | COMMENT |
| MEDIUM | …et_api_integration/apis/agent_policy/policy_base_id.ts | 24 | // ─── policy_base_id on .fleet-policies documents ────────────────────────── | COMMENT |
| MEDIUM | …et_api_integration/apis/agent_policy/policy_base_id.ts | 92 | // ─── agent count queries via policy_base_id ─────────────────────────────── | COMMENT |
| MEDIUM | …et_api_integration/apis/agent_policy/policy_base_id.ts | 176 | // ─── fallback for agents without policy_base_id ─────────────────────────── | COMMENT |
| MEDIUM | …et_api_integration/apis/agent_policy/policy_base_id.ts | 231 | // ─── backfill on Fleet setup ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …outes/unified_history/source_filter_pagination.test.ts | 30 | // ── mock result-count enrichment (not relevant to pagination) ────────── | COMMENT |
| MEDIUM | …outes/unified_history/source_filter_pagination.test.ts | 45 | // ── helpers to build realistic ES hits ───────────────────────────────── | COMMENT |
| MEDIUM | …outes/unified_history/source_filter_pagination.test.ts | 174 | // ── collect ALL pages via cursor traversal ────────────────────────────── | COMMENT |
| MEDIUM⚡ | …outes/unified_history/source_filter_pagination.test.ts | 193 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | …outes/unified_history/source_filter_pagination.test.ts | 195 | // ═══════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | …outes/unified_history/source_filter_pagination.test.ts | 203 | // ── data set: 15 Live + 10 Rule = 25 total ────────────────────────── | COMMENT |
| MEDIUM | …lugins/shared/osquery/server/routes/pack/utils.test.ts | 1826 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …lugins/shared/osquery/server/routes/pack/utils.test.ts | 1828 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …osquery/public/results/export_filters_context.test.tsx | 18 | // ─── Test helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …osquery/public/results/export_filters_context.test.tsx | 33 | // ─── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 273 | // ── helpers ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 392 | // ── access-control mode create/update ─────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 486 | // ── read access ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 694 | // ── access control redaction on agent read paths ─────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 750 | // ── /access_control endpoint ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 785 | // ── PUT /access_control authz ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 940 | // ── default agent immunity ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 958 | // ── cluster admin bypass ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …der/agents/api/tests/agents_access_control_api.spec.ts | 976 | // ── user-picker proxy ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sations/api/tests/conversations_add_events_api.spec.ts | 42 | // ── Happy path ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sations/api/tests/conversations_add_events_api.spec.ts | 146 | // ── Negative paths ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 274 | // ── helpers ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 493 | // ── public conversation access ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 958 | // ── auto-create IDOR ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 1008 | // ── access-control conversation GET/PUT routes ────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 1197 | // ── cluster admin management ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …ons/api/tests/conversations_access_control_api.spec.ts | 1425 | // ── route-level privileges ────────────────────────────────────────────── | COMMENT |
| 1178 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/kibana-privilege-deprecation/SKILL.md | 27 | ### Step 1: Create new replacement feature(s) | COMMENT |
| LOW | .agents/skills/kibana-privilege-deprecation/SKILL.md | 31 | ### Step 2: Mark existing feature as deprecated | COMMENT |
| LOW | .agents/skills/kibana-privilege-deprecation/SKILL.md | 53 | ### Step 3: Define `replacedBy` on every privilege | COMMENT |
| LOW | .agents/skills/kibana-privilege-deprecation/SKILL.md | 113 | ### Step 4: Update code to use new features | COMMENT |
| LOW | .agents/skills/branch-readiness-checks/SKILL.md | 30 | ### Step 0: Identify affected packages | COMMENT |
| LOW⚡ | .agents/skills/branch-readiness-checks/SKILL.md | 48 | ### Step 1: Run `check_changes` against branch base | COMMENT |
| LOW⚡ | .agents/skills/branch-readiness-checks/SKILL.md | 58 | ### Step 2: Lint TS projects | COMMENT |
| LOW⚡ | .agents/skills/branch-readiness-checks/SKILL.md | 68 | ### Step 3: Type check | COMMENT |
| LOW | .agents/skills/branch-readiness-checks/SKILL.md | 93 | ### Step 4: Unit tests | COMMENT |
| LOW | .agents/skills/branch-readiness-checks/SKILL.md | 105 | ### Step 5: CODEOWNERS generation | COMMENT |
| LOW | .agents/skills/branch-readiness-checks/SKILL.md | 115 | ### Step 6: Moon project regeneration | COMMENT |
| LOW | .agents/skills/encrypted-saved-objects/SKILL.md | 31 | ### Step 1: Register the Saved Object type with Core | COMMENT |
| LOW | .agents/skills/encrypted-saved-objects/SKILL.md | 43 | ### Step 2: Register with the ESO Service | COMMENT |
| LOW | .agents/skills/cypress-to-scout-migration/SKILL.md | 39 | ## Step 0: Load solution-specific skill `[mandatory]` | COMMENT |
| LOW⚡ | .agents/skills/cypress-to-scout-migration/SKILL.md | 133 | ### Step 1: Determine test type `[high freedom]` | COMMENT |
| LOW⚡ | .agents/skills/cypress-to-scout-migration/SKILL.md | 138 | ### Step 2: Set up Scout scaffold `[low freedom — use script]` | COMMENT |
| LOW | .agents/skills/cypress-to-scout-migration/SKILL.md | 150 | ### Step 3: Map Cypress patterns to Scout `[medium freedom]` | COMMENT |
| LOW | .agents/skills/cypress-to-scout-migration/SKILL.md | 188 | ### Step 4: Write the Scout test `[high freedom]` | COMMENT |
| LOW | .agents/skills/cypress-to-scout-migration/SKILL.md | 205 | ### Step 5: Review and verify `[low freedom — mandatory checklist]` | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 29 | ## Step 0: Parse intent | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 41 | ## Step 1: Check `bk` authentication | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 51 | ## Step 2: Resolve suite(s) | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 71 | ## Step 3: Resolve branch | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 98 | ## Step 4: Resolve models | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 167 | ## Step 5: Build the command | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 185 | ## Step 6: Confirm | COMMENT |
| LOW | .agents/skills/evals-run-on-demand/SKILL.md | 211 | ## Step 7: Execute and report | COMMENT |
| LOW | docs/extend/contributing/codebase/upgrading-nodejs.md | 10 | ## Step 1: Generate custom Node.js builds [_step_1_generate_custom_node_js_builds] | COMMENT |
| LOW | docs/extend/contributing/codebase/upgrading-nodejs.md | 15 | ## Step 2: Create PR to upgrade Node.js [_step_2_create_pr_to_upgrade_node_js] | COMMENT |
| LOW | docs/extend/key-concepts/saved-objects/delete.md | 24 | #### Step 1: Remove the type registration | COMMENT |
| LOW | docs/extend/key-concepts/saved-objects/delete.md | 28 | #### Step 2: Run the automated check | COMMENT |
| LOW | docs/extend/key-concepts/saved-objects/delete.md | 59 | #### Step 3: Commit the changes | COMMENT |
| LOW⚡ | scripts/codeql/quick_check.sh | 112 | # Step 1: Run the Docker container to create a CodeQL database from the source code. | COMMENT |
| LOW | scripts/codeql/quick_check.sh | 125 | # Step 2: Run the Docker container to analyze the CodeQL database. | COMMENT |
| LOW | scripts/codeql/quick_check.sh | 178 | # Step 3: Print summary of SARIF results | COMMENT |
| LOW | .buildkite/pipeline-utils/affected-packages/README.md | 84 | // Step 1: Get affected packages (handles all edge cases) | COMMENT |
| LOW | .buildkite/pipeline-utils/affected-packages/README.md | 92 | // Step 2: Filter any file list | COMMENT |
| LOW⚡ | …scripts/serverless/create_deploy_tag/create_fix_tag.sh | 6 | # Step 1: Check if the commit is in the specific named branch | COMMENT |
| LOW⚡ | …scripts/serverless/create_deploy_tag/create_fix_tag.sh | 10 | # Step 2: Check if the commit is also part of any other branches | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 25 | // Step 1: Trigger ES build and promote (synchronous) | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 30 | // Step 2: Wait for ES build to complete, then bump package.json and other files on the release branch | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 37 | // Step 3: Wait, then trigger DRA snapshot (async). | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 42 | // Step 4: Update the labels for PRs and the color of the label itself | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 46 | // Step 5: Reconcile labels | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 52 | // Step 1: Trigger ES build and promote | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 60 | // Step 2: Wait for ES build to complete, then update versions.json on main. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 70 | // Step 3: Wait, then create the new release branch off main | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 74 | // Step 4: Wait, and then do a bunch of file changes in the new branch. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 78 | // Step 5: Wait, then trigger DRA snapshot and staging on the new release branch. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 83 | // Step 6: Wait, then bump main's package.json to the next dev version. This runs | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 91 | // Step 7: Wait, then trigger DRA snapshot on main. Runs after the package.json bump | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 59 | // Step 1: extract a part of the feature definition that will be shared between deprecated and new | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 70 | // Step 2: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW⚡ | …_integration/plugins/features_provider/server/index.ts | 89 | // Step 3: define a new feature with exactly same privileges. | COMMENT |
| LOW⚡ | …_integration/plugins/features_provider/server/index.ts | 98 | // Step 1: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 164 | // Step 2: define new features | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 328 | // Step 1: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 356 | // Step 2: Create a new feature with the desired privileges structure. | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 403 | // Step 1: mark existing feature A and feature B as deprecated. | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 433 | // Step 2: introduce new features (v2) with privileges that don't grant access to `ab`. | COMMENT |
| 554 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/reference/connectors-kibana/gmail-action-type.md | 140 | : (Required) Recipient email addresses (bare addr-spec, for example `["user@example.com"]`). | CODE |
| LOW | docs/reference/connectors-kibana/threatq-action-type.md | 59 | "username": "user@example.com", | CODE |
| LOW | examples/data_streams_example/server/index.ts | 59 | name: 'John Doe', | CODE |
| LOW | …out_system/public/components/_flyout_with_overlays.tsx | 107 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut | CODE |
| LOW | …out_system/public/components/_flyout_with_overlays.tsx | 107 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut | CODE |
| LOW | …ut_system/public/components/_flyout_with_component.tsx | 206 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque nisl eros, | CODE |
| LOW | …ut_system/public/components/_flyout_with_component.tsx | 206 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque nisl eros, | CODE |
| LOW | …ut_system/public/components/_flyout_with_component.tsx | 224 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque nisl eros, | CODE |
| LOW | …ut_system/public/components/_flyout_with_component.tsx | 224 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque nisl eros, | CODE |
| LOW | …pipeline-utils/affected-packages/module_lookup.test.ts | 184 | git(tmpDir, 'config user.email "test@test.com"'); | CODE |
| LOW | …/spaces_only/tests/actions/execute_unsecured_action.ts | 99 | config: { service: '__json', from: 'bob@example.org', hasAuth: true }, | CODE |
| LOW | …aces_only/tests/actions/connector_types/stack/email.ts | 290 | "from": "bob@example.org", | CODE |
| LOW | …aces_only/tests/actions/connector_types/stack/email.ts | 295 | "from": { "address": "bob@example.org", "name": "" }, | CODE |
| LOW | …nnector_types/stack/email_recipient_allowlist/email.ts | 16 | const getCopyOfAllowedEmailAddresses = () => ['foo.bar@example.org', 'user@test.com']; | CODE |
| LOW | …nnector_types/stack/email_recipient_allowlist/email.ts | 66 | to.push('to.foo@example.org'); | CODE |
| LOW | …nector_types/stack/email_recipient_allowlist/config.ts | 10 | export const recipientAllowList = ['*.bar@example.org', '*@test.com']; | CODE |
| LOW | …spaces/group2/tests/actions/connector_types/thehive.ts | 303 | body: '{"observables":[{"dataType":"url","data":"http://example.com"},{"dataType":"mail","data":"foo | CODE |
| LOW | …spaces/group2/tests/actions/connector_types/thehive.ts | 325 | data: 'foo@example.org', | CODE |
| LOW | …on/reporting_and_security/security_roles_privileges.ts | 340 | to: ['user@example.com'], | CODE |
| LOW | …on/reporting_and_security/security_roles_privileges.ts | 353 | to: ['user@example.com'], | CODE |
| LOW | …m/test/reporting_api_integration/services/scenarios.ts | 333 | notification: { email: { to: string[] } } = { email: { to: ['test@test.com'] } }, | CODE |
| LOW | …functional/reporting_and_security/scheduled_reports.ts | 165 | await testSubjects.setValue('emailRecipientsCombobox', 'user@example.com'); | CODE |
| LOW | …functional/reporting_and_security/scheduled_reports.ts | 190 | await testSubjects.setValue('emailRecipientsCombobox', 'user@example.com'); | CODE |
| LOW | …st/saved_object_api_integration/low-level/apis/find.ts | 73 | expect(savedObjects[0].attributes.author).to.be('John Doe'); | CODE |
| LOW | …st/saved_object_api_integration/low-level/apis/find.ts | 97 | expect(savedObjects[0].attributes.author).to.be('John Doe'); | CODE |
| LOW | …orm/test/functional/services/ml/job_wizard_advanced.ts | 26 | return (await testSubjects.getAttribute(inputLocator, 'placeholder')) ?? ''; | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 46 | "name": "fake_name", | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 50 | "message": "User is creating rule [id=ALERT_ID] [name=fake_name]", | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 59 | savedObject: { type: RULE_SAVED_OBJECT_TYPE, id: 'ALERT_ID', name: 'fake_name' }, | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 77 | "name": "fake_name", | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 81 | "message": "User has created rule [id=ALERT_ID] [name=fake_name]", | CODE |
| LOW⚡ | …erting/server/rules_client/common/audit_events.test.ts | 90 | savedObject: { type: RULE_SAVED_OBJECT_TYPE, id: 'ALERT_ID', name: 'fake_name' }, | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 28 | savedObject: { type: RULE_SAVED_OBJECT_TYPE, id: 'ALERT_ID', name: 'fake_name' }, | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 112 | "name": "fake_name", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 116 | "message": "Failed attempt to create rule [id=ALERT_ID] [name=fake_name]", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 228 | name: 'fake_name', | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 247 | "name": "fake_name", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 251 | "message": "User is creating gap auto fill scheduler gap_auto_fill_scheduler [id=SCHEDULER_ID] [name=fake_name]" | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 263 | name: 'fake_name', | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 282 | "name": "fake_name", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 286 | "message": "User has got gap auto fill scheduler gap_auto_fill_scheduler [id=SCHEDULER_ID] [name=fake_name]", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 298 | name: 'fake_name', | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 321 | "name": "fake_name", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 325 | "message": "Failed attempt to delete gap auto fill scheduler gap_auto_fill_scheduler [id=SCHEDULER_ID] [name=fak | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 370 | name: `backfill for rule "fake_name"`, | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 389 | "name": "backfill for rule \\"fake_name\\"", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 393 | "message": "User is getting ad hoc run for ad_hoc_run_params [id=AD_HOC_RUN_ID] backfill for rule \\"fake_name\\ | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 405 | name: `backfill for rule "fake_name"`, | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 424 | "name": "backfill for rule \\"fake_name\\"", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 428 | "message": "User has found ad hoc run for ad_hoc_run_params [id=AD_HOC_RUN_ID] backfill for rule \\"fake_name\\" | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 440 | name: `backfill for rule "fake_name"`, | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 463 | "name": "backfill for rule \\"fake_name\\"", | CODE |
| LOW | …erting/server/rules_client/common/audit_events.test.ts | 467 | "message": "Failed attempt to delete ad hoc run for ad_hoc_run_params [id=AD_HOC_RUN_ID] backfill for rule \\"fa | CODE |
| LOW | …lugins/shared/osquery/server/lib/get_user_info.test.ts | 30 | email: 'user@example.com', | CODE |
| LOW | …lugins/shared/osquery/server/lib/get_user_info.test.ts | 44 | email: 'user@example.com', | CODE |
| LOW | …nshotting/server/browsers/extract/__fixtures__/file.md | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eleifend dolor, lacinia ullamcorper metus. Nam | CODE |
| LOW | …nshotting/server/browsers/extract/__fixtures__/file.md | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eleifend dolor, lacinia ullamcorper metus. Nam | CODE |
| LOW | …ilder/converse/api/tests/converse_callback_api.spec.ts | 299 | full_name: 'Jane Doe', | CODE |
| LOW | …lugins/shared/agent_builder/server/routes/chat.test.ts | 208 | full_name: 'Jane Doe', | CODE |
| LOW | …lugins/shared/agent_builder/server/routes/chat.test.ts | 223 | full_name: 'Jane Doe', | CODE |
| 861 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tsconfig.base.json | 3121 | "DOM.Iterable" | COMMENT |
| LOW | config/serverless.security.essentials.yml | 21 | ### proposal can be created in this tier. Hiding keeps its privileges out of Role management. | COMMENT |
| LOW | config/kibana.yml | 1 | # For more configuration options see the configuration guide for Kibana in | COMMENT |
| LOW | config/kibana.yml | 21 | # Defaults to `false`. | COMMENT |
| LOW | config/kibana.yml | 41 | #server.ssl.certificate: /path/to/your/server.crt | COMMENT |
| LOW | config/kibana.yml | 61 | # must be a positive integer. | COMMENT |
| LOW | config/kibana.yml | 81 | #elasticsearch.shardTimeout: 30000 | COMMENT |
| LOW | config/kibana.yml | 101 | #logging.appenders.default: | COMMENT |
| LOW | config/kibana.yml | 121 | #logging.loggers: | COMMENT |
| LOW | config/kibana.yml | 141 | # Logs system usage information. | COMMENT |
| LOW | config/kibana.yml | 161 | # Specifies the available locales in the user profile settings. | COMMENT |
| LOW | config/kibana.yml | 181 | # This value should be lower than or equal to your Elasticsearch cluster’s `http.max_content_length` | COMMENT |
| LOW | …ress-to-scout-migration/scripts/scaffold_scout_spec.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docs/changelog.yml | 1 | # Changelog Configuration | COMMENT |
| LOW | examples/eso_model_version_example/server/plugin.ts | 1 | /* | COMMENT |
| LOW | scripts/kibana_api_common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/index_dependency_usage.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/index_dependency_usage.sh | 21 | # | COMMENT |
| LOW | scripts/create_models_labels.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/archive_migration_functions.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/common/index.ts | 21 | // line 12 - ImACommonType | COMMENT |
| LOW | …egration_tests/__fixtures__/src/plugin_a/public/fns.ts | 101 | // line 28 - e | COMMENT |
| LOW | …egration_tests/__fixtures__/src/plugin_a/public/fns.ts | 121 | // line 24 - a | COMMENT |
| LOW | …egration_tests/__fixtures__/src/plugin_a/public/fns.ts | 141 | // line 44 - a | COMMENT |
| LOW | …tion_tests/__fixtures__/src/plugin_a/public/classes.ts | 121 | // missing comments (9): | COMMENT |
| LOW | …tion_tests/__fixtures__/src/plugin_a/public/classes.ts | 141 | // line 62 - getVar | COMMENT |
| LOW | …tion_tests/__fixtures__/src/plugin_a/public/classes.ts | 161 | // line 83 - aFnWithGen | COMMENT |
| LOW | …n_tests/__fixtures__/src/plugin_a/public/const_vars.ts | 81 | /** | COMMENT |
| LOW | …n_tests/__fixtures__/src/plugin_a/public/const_vars.ts | 101 | // line 19 - notAnArrowFn | COMMENT |
| LOW | …ation_tests/__fixtures__/src/plugin_a/public/plugin.ts | 181 | // missing comments (7): | COMMENT |
| LOW | …ation_tests/__fixtures__/src/plugin_a/public/plugin.ts | 201 | // line 66 - getSearchLanguage | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/types.ts | 101 | } | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/types.ts | 121 | // line 65 - AReactElementFn | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/types.ts | 141 | // line 21 - ImAType | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/types.ts | 161 | // line 75 - Unnamed | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/index.ts | 41 | // line 24 - InterfaceWithIndexSignature | COMMENT |
| LOW | …ration_tests/__fixtures__/src/plugin_a/public/index.ts | 61 | // line 24 - InterfaceWithIndexSignature | COMMENT |
| LOW | …on_tests/__fixtures__/src/plugin_a/public/foo/index.ts | 21 | // line 12 - FooType | COMMENT |
| LOW | …ckages/kbn-generate/src/commands/codeowners_command.ts | 21 | const GENERATED_START = `#### | COMMENT |
| LOW | packages/kbn-cli-dev-mode/src/watcher.ts | 61 | const fire = (repoRel: string) => { | COMMENT |
| LOW | packages/kbn-ts-projects/ts_projects.ts | 21 | ], | COMMENT |
| LOW | …eap-snapshot-analyzer-cli/src/run_require_cache_cli.ts | 1 | /* | COMMENT |
| LOW | packages/kbn-heap-snapshot-analyzer-cli/src/run_cli.ts | 1 | /* | COMMENT |
| LOW | packages/kbn-heap-snapshot-analyzer-cli/src/run_cli.ts | 1181 | status(` Retained sizes in ${elapsed(tRet)}`); | COMMENT |
| LOW | packages/kbn-heap-snapshot-analyzer-cli/src/run_cli.ts | 1341 | // Parallel attribution: first non-library package frame (skips third-party | COMMENT |
| LOW | …k-optimizer/src/config/create_single_compile_config.ts | 201 | // Get externals for shared deps | COMMENT |
| LOW | …k-optimizer/src/config/create_single_compile_config.ts | 301 | sideEffects: dist, | COMMENT |
| LOW | …k-optimizer/src/config/create_single_compile_config.ts | 321 | // so that minChunks is respected -- A/B testing confirmed this has | COMMENT |
| LOW | …kages/kbn-rspack-optimizer/src/config/shared_config.ts | 121 | react: { | COMMENT |
| LOW | …ges/kbn-rspack-optimizer/src/utils/entry_generation.ts | 141 | // extracted by splitChunks: | COMMENT |
| LOW | …ges/kbn-rspack-optimizer/src/utils/entry_generation.ts | 201 | // 1. Core + all plugins loaded in parallel via dynamic import() | COMMENT |
| LOW | packages/kbn-eslint-config/typescript.js | 61 | // all the recommend rules as it is not allowed yet | COMMENT |
| LOW | .github/stale.yml | 41 | COMMENT | |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"57ec98962be3dade88f415d5ddc54d43216b2bb0f2d34752b8f0f95581a | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 41 | # - OTEL_LOG_TOOL_DETAILS: .github/workflows/shared/app-dex-agents-otel.md | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 61 | # - actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 1081 | # - LS | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 1101 | # - mcp__github__get_job_logs | COMMENT |
| LOW | .github/workflows/flaky-test-fixer.lock.yml | 1121 | # - mcp__github__list_discussion_categories | COMMENT |
| 814 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | scripts/codeql/quick_check.sh | 112 | # Step 1: Run the Docker container to create a CodeQL database from the source code. | COMMENT |
| LOW | scripts/codeql/quick_check.sh | 125 | # Step 2: Run the Docker container to analyze the CodeQL database. | COMMENT |
| LOW | scripts/codeql/quick_check.sh | 178 | # Step 3: Print summary of SARIF results | COMMENT |
| LOW⚡ | …scripts/serverless/create_deploy_tag/create_fix_tag.sh | 6 | # Step 1: Check if the commit is in the specific named branch | COMMENT |
| LOW⚡ | …scripts/serverless/create_deploy_tag/create_fix_tag.sh | 10 | # Step 2: Check if the commit is also part of any other branches | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 25 | // Step 1: Trigger ES build and promote (synchronous) | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 30 | // Step 2: Wait for ES build to complete, then bump package.json and other files on the release branch | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 37 | // Step 3: Wait, then trigger DRA snapshot (async). | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 42 | // Step 4: Update the labels for PRs and the color of the label itself | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 46 | // Step 5: Reconcile labels | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 52 | // Step 1: Trigger ES build and promote | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 60 | // Step 2: Wait for ES build to complete, then update versions.json on main. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 70 | // Step 3: Wait, then create the new release branch off main | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 74 | // Step 4: Wait, and then do a bunch of file changes in the new branch. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 78 | // Step 5: Wait, then trigger DRA snapshot and staging on the new release branch. | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 83 | // Step 6: Wait, then bump main's package.json to the next dev version. This runs | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/version_bump/pipeline.ts | 91 | // Step 7: Wait, then trigger DRA snapshot on main. Runs after the package.json bump | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 59 | // Step 1: extract a part of the feature definition that will be shared between deprecated and new | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 70 | // Step 2: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW⚡ | …_integration/plugins/features_provider/server/index.ts | 89 | // Step 3: define a new feature with exactly same privileges. | COMMENT |
| LOW⚡ | …_integration/plugins/features_provider/server/index.ts | 98 | // Step 1: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 164 | // Step 2: define new features | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 328 | // Step 1: mark feature A as deprecated and provide proper replacements for all feature and | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 356 | // Step 2: Create a new feature with the desired privileges structure. | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 403 | // Step 1: mark existing feature A and feature B as deprecated. | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 433 | // Step 2: introduce new features (v2) with privileges that don't grant access to `ab`. | COMMENT |
| LOW | …_integration/plugins/features_provider/server/index.ts | 446 | // Step 3: introduce new feature C that only grants access to `ab`. | COMMENT |
| LOW⚡ | …latform/test/functional/apps/rollup_job/rollup_page.ts | 109 | // Step 2: Histogram | COMMENT |
| LOW⚡ | …latform/test/functional/apps/rollup_job/rollup_page.ts | 114 | // Step 3: Terms (optional) | COMMENT |
| LOW⚡ | …latform/test/functional/apps/rollup_job/rollup_page.ts | 118 | // Step 4: Histogram(optional) | COMMENT |
| LOW⚡ | …latform/test/functional/apps/rollup_job/rollup_page.ts | 122 | // Step 5: Metrics(optional) | COMMENT |
| LOW⚡ | …latform/test/functional/apps/rollup_job/rollup_page.ts | 126 | // Step 6: saveJob and verify the name in the list | COMMENT |
| LOW | …ver/lib/rule_gaps/task/gap_auto_fill_scheduler_task.ts | 395 | // Step 1: Initialization | COMMENT |
| LOW | …ver/lib/rule_gaps/task/gap_auto_fill_scheduler_task.ts | 463 | // Step 2: Capacity pre-check | COMMENT |
| LOW | …ver/lib/rule_gaps/task/gap_auto_fill_scheduler_task.ts | 479 | // Step 3: Fetch rule IDs with gaps | COMMENT |
| LOW | …ver/lib/rule_gaps/task/gap_auto_fill_scheduler_task.ts | 502 | // Step 4: Process rules in batches | COMMENT |
| LOW | …ver/lib/rule_gaps/task/gap_auto_fill_scheduler_task.ts | 526 | // Step 5: Finalize and log results | COMMENT |
| LOW | …/document_fields/fields/edit_field/use_update_field.ts | 88 | // We need to check if, by changing the type, we will also | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 224 | // Step 1: Logistics | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 228 | // Step 2: Component templates | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 232 | // Step 3: Settings | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 236 | // Step 4: Mappings | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 240 | // Step 5: Aliases | COMMENT |
| LOW⚡ | …cation/components/template_form/template_form.test.tsx | 244 | // Step 6: Review → submit | COMMENT |
| LOW | …application/components/pipeline_form/pipeline_form.tsx | 168 | We need to check if the form is dirty and also if the form has been submitted. | CODE |
| LOW | …ed/security/server/session_management/session_index.ts | 688 | // an alias (pre-8.4). In this case, we need to check if the index exists under the alias name, or the index name. | COMMENT |
| LOW⚡ | …rm/plugins/shared/streams/server/lib/streams/client.ts | 259 | // Step 1: Check current state | COMMENT |
| LOW⚡ | …rm/plugins/shared/streams/server/lib/streams/client.ts | 265 | // Step 2: Determine which streams to create/enable | COMMENT |
| LOW | …rm/plugins/shared/streams/server/lib/streams/client.ts | 291 | // Step 3: Check if this is a noop | COMMENT |
| LOW | …rm/plugins/shared/streams/server/lib/streams/client.ts | 302 | // Step 4: Create Kibana definitions for missing streams | COMMENT |
| LOW | …rm/plugins/shared/streams/server/lib/streams/client.ts | 317 | // Step 5: Enable streams in Elasticsearch (parallel calls) | COMMENT |
| LOW | …ms/server/lib/streams/attachments/attachment_client.ts | 464 | // Step 1: Validate all attachments in parallel | COMMENT |
| LOW | …ms/server/lib/streams/attachments/attachment_client.ts | 482 | // Step 2: Get existing attachments from storage | COMMENT |
| LOW | …ms/server/lib/streams/attachments/attachment_client.ts | 496 | // Step 3: Build bulk operations array | COMMENT |
| LOW | …ver/routes/streams/crud/create_classic_stream_route.ts | 55 | // Step 1: Create the backing data stream | COMMENT |
| LOW | …ver/routes/streams/crud/create_classic_stream_route.ts | 69 | // Step 2: Register the classic stream in Kibana | COMMENT |
| LOW | …ins/shared/cloud_connect/server/routes/authenticate.ts | 111 | // Step 1: Validate the API key scope | COMMENT |
| LOW | …ins/shared/cloud_connect/server/routes/authenticate.ts | 124 | // Step 2: Onboard the cluster based on the key type | COMMENT |
| LOW⚡ | …components/onboarding/connection_wizard/index.test.tsx | 84 | // Step 1: Sign up or log in buttons should be present | COMMENT |
| LOW⚡ | …components/onboarding/connection_wizard/index.test.tsx | 91 | // Step 3: API key input should be present (step 2 in UI since step 2 is skipped) | COMMENT |
| 397 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/reference/connectors-kibana/trello-action-type.md | 142 | 1. Copy this URL and replace `YOUR_API_KEY` with the key from the previous step: | CODE |
| HIGH | docs/reference/connectors-kibana/trello-action-type.md | 145 | https://trello.com/1/authorize?expiration=never&scope=read,write&response_type=token&key=YOUR_API_KEY | CODE |
| HIGH | …ference/connectors-kibana/pagerduty-mcp-action-type.md | 28 | : Your PagerDuty API key. Enter it in the format `Token token=YOUR_API_KEY`. Refer to [Get API credentials](#pagerduty | CODE |
| HIGH | …s_page/details_page_overview/details_page_overview.tsx | 84 | apiKey: 'your_api_key', | CODE |
| HIGH | …pack/platform/plugins/shared/elastic_console/README.md | 61 | -H "Authorization: ApiKey YOUR_API_KEY" \ | CODE |
| HIGH | …pack/platform/plugins/shared/elastic_console/README.md | 222 | api_key="YOUR_API_KEY", | CODE |
| HIGH | …pack/platform/plugins/shared/elastic_console/README.md | 243 | apiKey: 'YOUR_API_KEY', | CODE |
| HIGH | …omponents/stream_list_view/streams_settings_flyout.tsx | 201 | api_key: "<your-api-key>"`, | CODE |
| HIGH | …omponents/stream_list_view/streams_settings_flyout.tsx | 205 | api_key => "<your-api-key>" | CODE |
| HIGH | …nents/src/cli_install_modal/cli_install_modal.test.tsx | 87 | expect(result).toContain('--es-api-key <your-api-key>'); | CODE |
| HIGH | …n-shared-components/src/cli_install_modal/constants.ts | 11 | export const CLI_API_KEY_PLACEHOLDER = '<your-api-key>'; | CODE |
| HIGH | …ty/packages/kbn-evals-suite-attack-discovery/README.md | 60 | EVAL_KBN_API_KEY=<your-api-key> \ | CODE |
| HIGH⚡ | …onboarding/constants/have_vectors_language_snippets.ts | 319 | api_key="YOUR_API_KEY", | CODE |
| HIGH⚡ | …onboarding/constants/have_vectors_language_snippets.ts | 335 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 15 | api_key="YOUR_API_KEY", | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 52 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 104 | try (ElasticsearchClient esClient = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey( | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 146 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 197 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 257 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 291 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 358 | try (ElasticsearchClient client = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey("Y | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 388 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 416 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 440 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 458 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 474 | api_key="YOUR_API_KEY", | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 510 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 554 | try (ElasticsearchClient client = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey("Y | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 604 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 642 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 688 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 728 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …nboarding/src/onboarding/constants/console_snippets.ts | 9 | export const API_KEY_PLACEHOLDER = 'YOUR_API_KEY'; | CODE |
| HIGH⚡ | …arding/constants/generate_vectors_language_snippets.ts | 278 | api_key="YOUR_API_KEY", | CODE |
| HIGH⚡ | …arding/constants/generate_vectors_language_snippets.ts | 291 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 15 | api_key="YOUR_API_KEY", | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 43 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 84 | try (ElasticsearchClient esClient = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey( | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 121 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 173 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 224 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 247 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 310 | try (ElasticsearchClient client = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey("Y | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 339 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 366 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 387 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 405 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 421 | api_key="YOUR_API_KEY", | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 440 | auth: { apiKey: "YOUR_API_KEY" }, | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 466 | try (ElasticsearchClient client = ElasticsearchClient.of(e -> e.host("https://your-elasticsearch-url").apiKey("Y | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 501 | elasticsearch.WithAPIKey("YOUR_API_KEY"), | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 528 | let creds = Credentials::EncodedApiKey("YOUR_API_KEY".into()); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 555 | .Authentication(new ApiKey("YOUR_API_KEY")); | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 584 | api_key: 'YOUR_API_KEY' | CODE |
| HIGH | …bservability/plugins/apm/docs/openapi/apm/bundled.json | 1158 | "source": "curl -X GET \"http://localhost:5601/api/apm/sourcemaps\" \\\n-H 'Content-Type: application/json' | CODE |
| HIGH | …bservability/plugins/apm/docs/openapi/apm/bundled.json | 1287 | "source": "curl -X POST \"http://localhost:5601/api/apm/sourcemaps\" \\\n-H 'Content-Type: multipart/form-da | CODE |
| HIGH | …bservability/plugins/apm/docs/openapi/apm/bundled.json | 1414 | "source": "curl -X DELETE \"http://localhost:5601/api/apm/sourcemaps/apm:foo-1.0.0-644fd5a9\" \\\n-H 'Conten | CODE |
| HIGH | …bservability/plugins/apm/docs/openapi/apm/bundled.yaml | 729 | -H 'Authorization: ApiKey ${YOUR_API_KEY}' | CODE |
| HIGH | …bservability/plugins/apm/docs/openapi/apm/bundled.yaml | 811 | -H 'Authorization: ApiKey ${YOUR_API_KEY}' \ | CODE |
| 39 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | config/serverless.security.essentials.yml | 22 | # agenticInvestigations.hidden: true # TODO: uncomment when agentic investigations plugin is enabled | COMMENT |
| MEDIUM | config/serverless.security.complete.yml | 27 | # agenticInvestigations.category: "security" # TODO: uncomment when agentic investigations plugin is enabled | COMMENT |
| MEDIUM | config/serverless.oblt.logs_essentials.yml | 40 | # agenticInvestigations.hidden: true # TODO: uncomment when agentic investigations plugin is enabled | COMMENT |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 7 | All issues referenced are from [`elastic/agentic-interface-program`](https://github.com/elastic/agentic-interface-progra | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 11 | **Cases tools not gated in Search projects ([#154](https://github.com/elastic/agentic-interface-program/issues/154)):** | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 11 | **Cases tools not gated in Search projects ([#154](https://github.com/elastic/agentic-interface-program/issues/154)):** | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 15 | **Context Engine tools registered when feature is off ([#156](https://github.com/elastic/agentic-interface-program/issue | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 15 | **Context Engine tools registered when feature is off ([#156](https://github.com/elastic/agentic-interface-program/issue | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 19 | **Streams tools on wrong project types ([#157](https://github.com/elastic/agentic-interface-program/issues/157), [#160]( | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 19 | **Streams tools on wrong project types ([#157](https://github.com/elastic/agentic-interface-program/issues/157), [#160]( | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 30 | **Render directives leak to MCP clients ([#148](https://github.com/elastic/agentic-interface-program/issues/148)):** Too | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 30 | **Render directives leak to MCP clients ([#148](https://github.com/elastic/agentic-interface-program/issues/148)):** Too | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 35 | **Internal identifiers in error messages ([#153](https://github.com/elastic/agentic-interface-program/issues/153)):** A | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 35 | **Internal identifiers in error messages ([#153](https://github.com/elastic/agentic-interface-program/issues/153)):** A | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 45 | **Workflow tool bypasses destructive controls ([#145](https://github.com/elastic/agentic-interface-program/issues/145)): | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 45 | **Workflow tool bypasses destructive controls ([#145](https://github.com/elastic/agentic-interface-program/issues/145)): | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 50 | **MCP bypasses confirmation dialogs ([#147](https://github.com/elastic/agentic-interface-program/issues/147)):** Streams | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 50 | **MCP bypasses confirmation dialogs ([#147](https://github.com/elastic/agentic-interface-program/issues/147)):** Streams | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 65 | **Separate read and write MCP tools ([#114](https://github.com/elastic/agentic-interface-program/issues/114)):** A combi | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 65 | **Separate read and write MCP tools ([#114](https://github.com/elastic/agentic-interface-program/issues/114)):** A combi | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 75 | **Descriptions script assistant behavior ([#149](https://github.com/elastic/agentic-interface-program/issues/149)):** To | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 75 | **Descriptions script assistant behavior ([#149](https://github.com/elastic/agentic-interface-program/issues/149)):** To | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 80 | **Extraneous conversation data in parameters ([#152](https://github.com/elastic/agentic-interface-program/issues/152)):* | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 80 | **Extraneous conversation data in parameters ([#152](https://github.com/elastic/agentic-interface-program/issues/152)):* | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 91 | **Duplicated schema per result ([#146](https://github.com/elastic/agentic-interface-program/issues/146)):** `get_connect | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 91 | **Duplicated schema per result ([#146](https://github.com/elastic/agentic-interface-program/issues/146)):** `get_connect | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 95 | **Full document content with no control ([#155](https://github.com/elastic/agentic-interface-program/issues/155)):** `pr | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 95 | **Full document content with no control ([#155](https://github.com/elastic/agentic-interface-program/issues/155)):** `pr | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 105 | **Raw Zod validation trace ([#143](https://github.com/elastic/agentic-interface-program/issues/143)):** `create_partitio | CODE |
| MEDIUM⚡ | …/agent-builder-tool-review/references/common-issues.md | 105 | **Raw Zod validation trace ([#143](https://github.com/elastic/agentic-interface-program/issues/143)):** `create_partitio | CODE |
| MEDIUM | …/agent-builder-tool-review/references/common-issues.md | 116 | **Missing annotations ([#111](https://github.com/elastic/agentic-interface-program/issues/111)):** Tools shipped without | CODE |
| MEDIUM | …/agent-builder-tool-review/references/common-issues.md | 116 | **Missing annotations ([#111](https://github.com/elastic/agentic-interface-program/issues/111)):** Tools shipped without | CODE |
| MEDIUM⚡ | .agents/skills/cypress-to-scout-migration/SKILL.md | 138 | ### Step 2: Set up Scout scaffold `[low freedom — use script]` | COMMENT |
| MEDIUM | .agents/skills/kbn-ui-package/SKILL.md | 116 | ### 4d. Create packaging/ scaffold | COMMENT |
| MEDIUM | .agents/skills/kbn-ui-package/SKILL.md | 218 | ### 4e. Create packaging/example/ scaffold | COMMENT |
| MEDIUM | .agents/skills/scout-create-scaffold/SKILL.md | 35 | # UI scaffold, sequential (non-parallel) | COMMENT |
| MEDIUM | docs/extend/tutorials/external-plugin-development.md | 21 | * **Manifest.** External plugins use a flat `kibana.json` manifest (a different schema than the in-repo `kibana.jsonc`). | COMMENT |
| MEDIUM | …oud-serverless/kibana-cloud-serverless-2026-09-25.yaml | 207 | - https://github.com/elastic/agentic-interface-program/issues/143 | CODE |
| MEDIUM | …oud-serverless/kibana-cloud-serverless-2026-09-22.yaml | 509 | - https://github.com/elastic/agentic-interface-program/issues/154 | CODE |
| MEDIUM | …oud-serverless/kibana-cloud-serverless-2026-09-22.yaml | 624 | - https://github.com/elastic/agentic-interface-program/issues/148 | CODE |
| MEDIUM | examples/workflows_extensions_example/README.md | 69 | You can emit events in two ways: **via the request-scoped client** (from a route, recommended) or **directly** via the s | CODE |
| MEDIUM | examples/workflows_extensions_example/README.md | 94 | For information about some guardrails in event-driven triggers see [Event-driven guardrails](../../src/platform/plugins/ | CODE |
| MEDIUM | examples/workflows_extensions_example/README.md | 94 | For information about some guardrails in event-driven triggers see [Event-driven guardrails](../../src/platform/plugins/ | CODE |
| MEDIUM | packages/kbn-plugin-generator/src/render_template.ts | 117 | // exclude the unused scaffold tree (paths still include classic/ or di/) | COMMENT |
| MEDIUM | .github/workflows/flaky-fix-verifier.md | 701 | ## Workflow guardrails | COMMENT |
| MEDIUM | .buildkite/scripts/common/setup_job_env.sh | 150 | # don't fetch the validator, and orchestration steps on the minimal image have no node yet (this runs | COMMENT |
| MEDIUM | .buildkite/scripts/steps/evals/run_suite.sh | 5 | # NOTE: Keep this Buildkite *step* script mostly bash + orchestration. | COMMENT |
| MEDIUM | …omponents/templates_v2/utils/template_field_actions.ts | 52 | // control -> plain scaffold object, computed once from FIELD_DEFAULT_SNIPPETS. Only snippets that | COMMENT |
| MEDIUM | …/components/templates_v2/utils/field_action_catalog.ts | 24 | // A conditation scaffold referencing another field — the author fills in the real field/value. | COMMENT |
| MEDIUM | …/components/templates_v2/utils/field_action_catalog.ts | 48 | // Placeholder scaffold values the author replaces (like `field_name`/`value` below) — not | COMMENT |
| MEDIUM | …ts/field_library/utils/field_definition_json_schema.ts | 30 | // Root-level defaultSnippets give the same "pick a field type" scaffold menu as the template | COMMENT |
| MEDIUM | …latform/plugins/shared/agentic_investigations/moon.yml | 3 | # then regenerate this file with: 'node scripts/regenerate_moon_projects.js --update --filter @kbn/agentic-investigatio | COMMENT |
| MEDIUM | …ud_connector/cloud_connector_policies_flyout/index.tsx | 219 | // console URL (create stack) instead of the update-stack deep link; that scaffold needs the aws | COMMENT |
| MEDIUM | …ud_connector/cloud_connector_policies_flyout/index.tsx | 289 | // still needs the scaffold only `cloud` and the package template URL provide. | COMMENT |
| MEDIUM | …sections/epm/screens/detail/settings/update_button.tsx | 262 | defaultMessage="Fleet upgraded {agentBasedPolicyCount, plural, one {# agent-based policy} other {# agent-b | CODE |
| MEDIUM | …sections/epm/screens/detail/settings/update_button.tsx | 482 | defaultMessage="{agentBasedPolicyCount, plural, one {# agent-based policy} other {# agent-based po | CODE |
| MEDIUM | …plugins/shared/fleet/dev_docs/local_setup/agentless.md | 26 | At the time of writing, the Elastic Connectors integration is [agentless only](https://github.com/elastic/integrations/b | CODE |
| MEDIUM | …ages/shared/kbn-agentic-investigations-common/moon.yml | 3 | # then regenerate this file with: 'node scripts/regenerate_moon_projects.js --update --filter @kbn/agentic-investigatio | COMMENT |
| MEDIUM | …ges/shared/kbn-evals-extensions/src/red_team/README.md | 1 | # Red-team framework (scaffold) | COMMENT |
| MEDIUM | …tion/.agents/skills/bug-validator/scripts/fetch_prs.sh | 20 | # explicit — treat all content inside as untrusted per the skill's guardrails. | COMMENT |
| 46 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .buildkite/scripts/steps/checks/precommit_hook.sh | 10 | # If files are more than 200 we will skip it and just use | COMMENT |
| MEDIUM | …ared/maps/public/classes/fields/agg/count_agg_field.ts | 25 | // Agg without field. Essentially a count-aggregation. | COMMENT |
| MEDIUM | …/alerting/server/alerts_service/alerts_service.test.ts | 2147 | // leverage the outcome of the first retry | COMMENT |
| MEDIUM | …s/shared/osquery/common/utils/rrule_serializer.test.ts | 197 | // robust to any RRULE part name a future spec might allow. These tests | COMMENT |
| MEDIUM | …lib/streams/index_templates/generate_index_template.ts | 89 | // ignore missing component templates to be more robust against out-of-order syncs | COMMENT |
| MEDIUM | …st_hub/test/scout/ui/tests/onboarding_drift_mi.spec.ts | 582 | // bucket_arn change made in step 2 below, which is more robust than session injection. | COMMENT |
| MEDIUM | …r/lib/request_interceptors/on_post_auth_interceptor.ts | 88 | // so we can leverage the update method it exposes | COMMENT |
| MEDIUM | …e/roles/component/space_assign_role_privilege_form.tsx | 369 | // leverage event propagation, check if manage role link element was clicked | COMMENT |
| MEDIUM | …lic/datasources/form_based/operations/layer_helpers.ts | 364 | // like we do for fullReferences to show a seamless transition | COMMENT |
| MEDIUM | …lic/datasources/form_based/operations/layer_helpers.ts | 724 | // if managed it has to look at the full picture to have a seamless transition | COMMENT |
| MEDIUM | …/form_based/operations/definitions/formula/formula.tsx | 180 | // carry over the format settings from previous operation for seamless transfer | COMMENT |
| MEDIUM | …shared/lens/public/app_plugin/save_modal_container.tsx | 378 | // should we make it more robust here and better check the context of the saving | COMMENT |
| MEDIUM | …/pick_fields_step/components/agg_select/agg_select.tsx | 54 | // for more robust rendering | COMMENT |
| MEDIUM | …plorer/components/timeseries_chart/timeseries_chart.js | 782 | // TODO needs revisiting to be a more robust normalization | COMMENT |
| MEDIUM | x-pack/platform/plugins/shared/actions/server/config.ts | 176 | // We leverage the enabledActionTypes list by allowing the other plugins to overwrite it by using "setEnabledConnectorTy | COMMENT |
| MEDIUM | …inference/scripts/load_esql_docs/generate_esql_docs.ts | 763 | // Use native unzip command which is more robust | COMMENT |
| MEDIUM | …t/server/services/epm/packages/package_verification.ts | 159 | // Essentially, since the sha1 key was reformmated to sha256 as part of https://github.com/elastic/elasticsearch/i | COMMENT |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 123 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 154 | content: '# User Guide\n\nThis is a comprehensive guide.', | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 275 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 295 | content: '# User Guide\n\nThis is a comprehensive guide.', | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 675 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 703 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 720 | content: '# User Guide\n\nThis is a comprehensive guide.', | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 736 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 757 | buffer: Buffer.from('# User Guide\n\nThis is a comprehensive guide.', 'utf8'), | CODE |
| MEDIUM | …l_state_machine/steps/step_save_knowledge_base.test.ts | 774 | content: '# User Guide\n\nThis is a comprehensive guide.', | CODE |
| MEDIUM | …_state_machine/steps/step_delete_previous_pipelines.ts | 32 | // assets to remain installed. This is a temporary solution - more robust solution tracked here https://github.com/ela | COMMENT |
| MEDIUM | …tform/plugins/private/canvas/public/style/hackery.scss | 32 | // Canvas has a few modals that necessitate a fixed height due to robust content | COMMENT |
| MEDIUM | …oring/public/components/kibana/instances/instances.tsx | 231 | // We want to create a seamless experience for the user by merging in the setup data | COMMENT |
| MEDIUM | …itoring/public/components/elasticsearch/nodes/nodes.js | 370 | // We want to create a seamless experience for the user by merging in the setup data | COMMENT |
| MEDIUM | …sform/components/aggregation_list/sub_aggs_section.tsx | 72 | // for more robust rendering | COMMENT |
| MEDIUM | …components/pivot_configuration/pivot_configuration.tsx | 53 | // for more robust rendering | COMMENT |
| MEDIUM | …lang/src/transpilers/esql/processors/uri_parts.test.ts | 209 | // than by substring match so the test is robust to pretty-printer | COMMENT |
| MEDIUM | …st/scout/api/tests/cross_compatibility/replace.spec.ts | 304 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …/test/scout/api/tests/cross_compatibility/grok.spec.ts | 464 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …test/scout/api/tests/cross_compatibility/split.spec.ts | 230 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …/test/scout/api/tests/cross_compatibility/date.spec.ts | 206 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …s/test/scout/api/tests/cross_compatibility/set.spec.ts | 175 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …/test/scout/api/tests/cross_compatibility/math.spec.ts | 354 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …st/scout/api/tests/cross_compatibility/convert.spec.ts | 165 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …est/scout/api/tests/cross_compatibility/rename.spec.ts | 152 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …est/scout/api/tests/cross_compatibility/append.spec.ts | 109 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …st/scout/api/tests/cross_compatibility/dissect.spec.ts | 247 | // rather it highlights the nuanced behavioral differences in certain edge cases among transpilers. | COMMENT |
| MEDIUM | …uite-agent-builder-visualizations/playwright.config.ts | 24 | // occasional rate-limit retries). Two retries keep the suite robust against | COMMENT |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 200 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 200 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 224 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 224 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 605 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 605 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 629 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 629 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 1030 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 1030 | "kibana.alert.rule.note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created usi | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 1054 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s_archives/contextual_flyout_security_alerts/data.json | 1054 | "note": "## Triage and analysis\n\n> **Disclaimer**:\n> This investigation guide was created using generative AI | CODE |
| MEDIUM | …s/exploratory-tester/scripts/test_session_resources.py | 4522 | # a fake-page harness test extracting and executing the real | STRING |
| MEDIUM | …ry-tester/scripts/manual-tools/serve-seeded-harness.py | 26 | pass # keep test output quiet; harness assertions read HTTP responses, not this log | CODE |
| MEDIUM | …ry-tester/scripts/manual-tools/serve-seeded-harness.py | 82 | # Serve this script's own directory (where seeded-live-harness.html | COMMENT |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ckages/kbn-repo-source-classifier-cli/src/type_tree.ts | 67 | print(options: PrintOpts) { | CODE |
| HIGH | …ckages/kbn-repo-source-classifier-cli/src/type_tree.ts | 81 | print(` ${prefix}`, childTypes); | CODE |
| HIGH | …ckages/kbn-repo-source-classifier-cli/src/type_tree.ts | 86 | print('', tree); | CODE |
| HIGH⚡ | .buildkite/scripts/common/util.test.ts | 45 | elif [[ "$1 $2 \${3:-}" == "config unset auth/access_token_file" ]]; then | CODE |
| HIGH⚡ | .buildkite/scripts/common/util.test.ts | 47 | elif [[ "$1 $2" == "auth print-access-token" ]]; then | CODE |
| HIGH⚡ | .buildkite/scripts/common/util.test.ts | 49 | elif [[ "$1 $2 \${3:-}" == "storage objects describe" ]]; then | CODE |
| HIGH⚡ | .buildkite/scripts/common/util.test.ts | 51 | elif [[ "$1 $2" == "storage cp" ]]; then | CODE |
| HIGH | …/shared/fleet/server/services/epm/fields/field.test.ts | 19 | print(val) { | CODE |
| HIGH | …r/services/epm/elasticsearch/template/template.test.ts | 62 | print(val) { | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 33 | print("export const CRITICAL_VALUES_TABLE = [") | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 35 | print(f" [{', '.join([str(x) for x in row])}],") | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 36 | print("];") | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 39 | print("export const SIGNIFICANCE_LEVELS = [") | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 40 | print(f" {', '.join([f'{x:.6f}' for x in significance_levels])}") | CODE |
| HIGH⚡ | …pack/platform/packages/shared/ml/chi2test/constants.ts | 41 | print("];") | CODE |
| HIGH⚡ | …onboarding/constants/have_vectors_language_snippets.ts | 329 | print(result["hits"]["hits"]) | CODE |
| HIGH | …onboarding/constants/have_vectors_language_snippets.ts | 504 | print(result["hits"]["hits"]) | CODE |
| HIGH⚡ | …arding/constants/generate_vectors_language_snippets.ts | 285 | print(result["hits"]["hits"]) | CODE |
| HIGH | …arding/constants/generate_vectors_language_snippets.ts | 434 | print(result["hits"]["hits"]) | CODE |
| HIGH | …nightshift-shared/src/condition_to_esql_filter.test.ts | 46 | print({ | CODE |
| HIGH | …nightshift-shared/src/condition_to_esql_filter.test.ts | 58 | print({ | CODE |
| HIGH⚡ | …-code-examples/src/getting-started-tutorials/python.ts | 46 | print("Index created:", create_response) | CODE |
| HIGH⚡ | …-code-examples/src/getting-started-tutorials/python.ts | 48 | print(f"Index '{index_name}' already exists.") | CODE |
| HIGH⚡ | …-code-examples/src/getting-started-tutorials/python.ts | 65 | print("Mappings updated:", mapping_response) | CODE |
| HIGH⚡ | …-code-examples/src/getting-started-tutorials/python.ts | 83 | print(bulk_response) | CODE |
| HIGH⚡ | …-code-examples/src/getting-started-tutorials/python.ts | 94 | print(search_response['hits']['hits']) | CODE |
| HIGH | …s/shared/kbn-search-agent/src/skills/keyword_search.ts | 143 | print(f"Error indexing doc: {err['index']['error']}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/extend/plugin-list.md | 151 | | [customContent](https://github.com/elastic/kibana/blob/main/x-pack/platform/plugins/shared/custom_content/README.md) | | CODE |
| HIGH | …oud-serverless/kibana-cloud-serverless-2026-09-15.yaml | 288 | description: Custom panels generated by AI Assistant tools and skills now render directly inside the conversation, so | CODE |
| HIGH | …ed/ml/server/models/results_service/results_service.ts | 84 | // Obtains data for the anomalies table, aggregating anomalies by day or hour as requested. | COMMENT |
| HIGH | …ions/sections/epm/screens/detail/overview/overview.tsx | 198 | // get the headings and creates a nested structure as requested by EuiSideNav | COMMENT |
| HIGH | …suite-streams/scripts/create_dataset_from_clipboard.ts | 175 | source: 'Generated by AI suggestion - ${timestamp}', | CODE |
| HIGH | …suite-streams/scripts/create_dataset_from_clipboard.ts | 241 | source: 'Generated by AI suggestion - ${timestamp}', | CODE |
| HIGH | …impl/schemas/chat/post_chat_complete_route.schema.yaml | 112 | - assistant # AI-generated response | CODE |
| HIGH | …on_cypress/es_archives/siem_migrations/rules/data.json | 244 | "message": "## Translation Summary\n\nLet's break down the translation process:\n\n1. The original SPL que | CODE |
| HIGH | …rallel_tests/reports/ai_value_report_with_data.spec.ts | 40 | // waits for an AI-generated insight, which requires a configured default AI | COMMENT |
| HIGH | …gineering/rule-management/detection-rule-management.md | 66 | - **PR #262307 ([Security Solution] Add rules/_search endpoint)** — multiple human reviewers approved the PR. The review | CODE |
| HIGH | …plan-generator/references/example-test-plan-backend.md | 251 | *🤖 Generated by claude-sonnet-4-6 on YYYY-MM-DD* | COMMENT |
| HIGH | …ls/test-plan-generator/references/example-test-plan.md | 281 | *🤖 Generated by claude-sonnet-4-6 on 2026-05-13* | COMMENT |
| HIGH | …_v2/document/main/components/document_summary.test.tsx | 93 | expect(screen.getByText(/Generated by AI on/)).toBeInTheDocument(); | CODE |
| HIGH | …_v2/document/main/components/document_summary.test.tsx | 109 | expect(screen.queryByText(/Generated by AI on/)).not.toBeInTheDocument(); | CODE |
| HIGH | …lyout_v2/document/main/components/document_summary.tsx | 72 | defaultMessage: 'Generated by AI on {timestamp}', | CODE |
| HIGH | …flyout_v2/document/main/hooks/use_document_summary.tsx | 61 | * "Generated by AI on …". | COMMENT |
| HIGH | …details_flyout/components/entity_highlights_result.tsx | 279 | defaultMessage="Generated by AI on {timestamp}" | CODE |
| HIGH | …ls_flyout/components/entity_highlights_result.test.tsx | 222 | expect(screen.getByText(/Generated by AI on/)).toBeInTheDocument(); | CODE |
| HIGH | …ls_flyout/components/entity_highlights_result.test.tsx | 298 | expect(screen.queryByText(/Generated by AI on/)).not.toBeInTheDocument(); | CODE |
| HIGH | …g/top_threat_hunting_leads/generated_on_label.test.tsx | 31 | expect(screen.getByText('Generated by AI on Jul 16, 2026 @ 22:32:00.000')).toBeInTheDocument(); | CODE |
| HIGH | …g/top_threat_hunting_leads/generated_on_label.test.tsx | 39 | expect(screen.getByText('Generated by AI on Jul 16, 2026 @ 15:32:00.000')).toBeInTheDocument(); | CODE |
| HIGH | …unting/top_threat_hunting_leads/generated_on_label.tsx | 19 | defaultMessage="Generated by AI on {timestamp}" | CODE |
| HIGH | …ns/security_solution/public/reports/pages/ai_value.tsx | 149 | // 6 lens components and 1 AI generated key insight | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | examples/field_formats_example/public/plugin.tsx | 43 | // just for demonstration purposes: | COMMENT |
| MEDIUM | examples/user_activity_example/server/routes.ts | 20 | reason: 'This route is for demonstration purposes only', | CODE |
| LOW | …rm/plugins/shared/alerting/server/health/task_state.ts | 16 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …orm/plugins/shared/alerting/server/usage/task_state.ts | 15 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …rting/server/invalidate_pending_api_keys/task_state.ts | 15 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …gins/shared/osquery/server/lib/telemetry/task_state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …m/plugins/shared/task_manager/server/task_validator.ts | 73 | // Otherwise, failures on read / write would occur. (don't forget to unskip test) | COMMENT |
| LOW | …m/plugins/shared/task_manager/server/task_validator.ts | 124 | // Otherwise, failures on read / write would occur. (don't forget to unskip test) | COMMENT |
| LOW | …rm/plugins/shared/ml/server/saved_objects/sync_task.ts | 29 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …form/plugins/shared/actions/server/usage/task_state.ts | 48 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …ins/shared/fleet/server/services/agent_policy_watch.ts | 63 | { fields: ['is_protected', 'id', 'revision'], spaceId: '*' } // Don't forget to extend this to include all fields | CODE |
| LOW | …red/fleet/public/components/add_agent_help_popover.tsx | 74 | defaultMessage="Don't forget to add the agent to your host" | CODE |
| LOW | …m/plugins/private/reporting/server/usage/task_state.ts | 15 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| MEDIUM | …orm/plugins/private/product_intercept/common/config.ts | 19 | * It's worth noting that if the intercept plugin is disabled this setting will have no effect. | COMMENT |
| LOW | …ent-builder-genai-utils/tools/generate_esql/actions.ts | 103 | : `I don't see any query in your response, can you please try again? Don't forget to wrap your query with \` | CODE |
| MEDIUM | …shared/kbn-elastic-assistant/impl/mock/conversation.ts | 97 | "In EQL (Event Query Language), you can write the equivalent of `host.name: *` using the `exists` operator. Here | CODE |
| LOW | …_solution_serverless/server/task_manager/task_state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| MEDIUM | …ild_unvalidated_report_from_last_message/utils.test.ts | 20 | This query limits the results to 10 items from the specified index. Let me know if you need further assistance! | CODE |
| MEDIUM | …ild_unvalidated_report_from_last_message/utils.test.ts | 36 | This query limits the results to 10 items from the specified index. Let me know if you need further assistance! | CODE |
| LOW | …ty_solution/server/endpoint/lib/metadata/task_state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …e_rule_to_natural_language/prompts/qradar/flow_bias.ts | 16 | #### Currently Elastic does not have a way to handle Flow Bias. Don't include it in Flattened detection logic but make s | COMMENT |
| LOW | …s/security_solution/server/lib/telemetry/task_state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …/server/lib/entity_analytics/risk_score/tasks/state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …b/entity_analytics/privilege_monitoring/tasks/state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| LOW | …er/lib/entity_analytics/lead_generation/tasks/state.ts | 14 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| MEDIUM | …t_v2/document/main/hooks/use_document_summary.test.tsx | 240 | })}\nLet me know if you need more.`; | CODE |
| MEDIUM | …diff/comparison_side/field_comparison_side.stories.tsx | 326 | '## Setup\n\nThis rule requires data coming in from one of the following integrations:\n- Elastic Defend\n- Audi | CODE |
| MEDIUM | …diff/comparison_side/field_comparison_side.stories.tsx | 328 | '## Setup\n\nThis rule requires data coming in from one of the following integrations:\n- Elastic Defend\n- Audi | CODE |
| LOW | …gins/cloud_security_posture/server/tasks/task_state.ts | 22 | * As you add a new schema version, don't forget to change latestTaskStateSchema variable to reference the latest schema | COMMENT |
| MEDIUM | …es_package_generation/generate_prebuilt_rule_assets.ts | 297 | '## Setup\n\nThis rule requires data coming in from one of the following integrations:\n- Elastic Defend\n- Auditb | CODE |
| MEDIUM | …ty-esql-generation-regression/src/extract_esql.test.ts | 96 | 'Here you go:\n\n```esql\nFROM logs-*\n| WHERE @timestamp >= NOW() - 1h\n```\n\nLet me know if you need adju | CODE |
| MEDIUM | …pages/logs/log_entry_rate/sections/anomalies/index.tsx | 103 | defaultMessage: 'You may want to adjust your time range.', | CODE |
| LOW | …common/tutorial/instructions/apm_agent_instructions.ts | 243 | Don't forget to download the latest version of the RUM Agent from [GitHub]({GitHubLink}) or [UNPKG]({UnpkgLink}), \ | CODE |
| LOW | …ublic/applications/shared/kibana_chrome/set_chrome.tsx | 35 | * Example usage (don't forget to i18n.translate() page titles!): | COMMENT |
| MEDIUM⚡ | …earch-code-examples/src/api-tutorials/agent_builder.ts | 105 | # ✅ The response includes the ES|QL query that you can use to create a custom tool. | COMMENT |
| LOW | …-objects/base-server-internal/src/validation/schema.ts | 17 | // to ensure that we don't forget to keep the schema up-to-date. TS will complain | COMMENT |
| LOW | …orkflow_detail/ui/workflow_detail_connector_flyout.tsx | 115 | const endColumn = model.getLineMaxColumn(lineNumber); // make sure to replace the entire line | CODE |
| LOW | …ic/visualize_app/utils/use/use_visualize_app_state.tsx | 143 | // don't forget to clean up | COMMENT |
| MEDIUM | …te/vis_types/timelion/server/series_functions/props.js | 76 | // multi: false is not required and is shown here for demonstration purposes | COMMENT |
| LOW | …d/kbn-test/src/functional_tests/run_tests/run_tests.ts | 35 | " Don't forget to use `node scripts/build_kibana_platform_plugins` to build plugins you plan on testing" | CODE |
| LOW | …ate/kbn-handlebars/scripts/update_upstream_git_hash.sh | 24 | echo "Done! - Don't forget to commit any changes to $HASH_FILE" | CODE |
| LOW | src/dev/lint_with_types/run_lint_with_types.ts | 111 | ❗️ After staging your changes, don't forget to run eslint/prettier on them with: | CODE |
| LOW | src/dev/no_pkg_semver_ranges/index.ts | 84 | `in package.json (${fieldsSummary}) - don't forget to bootstrap!` | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ts/skills/exploratory-tester/scripts/knowledge-hash.py | 13 | Prints `{"exists": bool, "sha256": str|null, "sections": [str, ...]}` | STRING |
| HIGH⚡ | …s/exploratory-tester/scripts/test_session_resources.py | 6457 | ' "path": null,\n' | STRING |
| HIGH⚡ | …s/exploratory-tester/scripts/test_session_resources.py | 6459 | ' "sha256": null,\n' | STRING |
| HIGH⚡ | …s/exploratory-tester/scripts/test_session_resources.py | 6460 | ' "approved_at": null,\n' | STRING |
| HIGH | …s/exploratory-tester/scripts/test_session_resources.py | 4647 | "(ev.status != null || ev.failure != null) && !ev.abandonedByNavigation", | STRING |
| HIGH | …s/exploratory-tester/scripts/test_session_resources.py | 4647 | "(ev.status != null || ev.failure != null) && !ev.abandonedByNavigation", | STRING |
| HIGH | …s/exploratory-tester/scripts/test_session_resources.py | 6514 | '{ "path": null, "approved": false, "sha256": null, ' | STRING |
| HIGH | …s/exploratory-tester/scripts/test_session_resources.py | 6515 | '"approved_at": null, "approved_sections": [] }', | STRING |
| HIGH | …s/exploratory-tester/scripts/test_session_resources.py | 6846 | # Case 2: legacy session predating hash-gating (sha256 is null) — | STRING |
| HIGH⚡ | …ts/skills/exploratory-tester/scripts/parse-findings.py | 16 | "status_override": {"status": "blocked", "reason": "..."} | null, | STRING |
| HIGH⚡ | …ts/skills/exploratory-tester/scripts/parse-findings.py | 23 | "current_behavior": "...", "expected_behavior": "..." | null, | STRING |
| HIGH⚡ | …ts/skills/exploratory-tester/scripts/parse-findings.py | 24 | "why_issue": "..." | null, "evidence": ["...", ...], | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/delete_kibana_indices.sh | 6 | # Check if a config file is provided and use the default if not | COMMENT |
| LOW | scripts/build_one_console.sh | 16 | # Check if the build script exists | COMMENT |
| LOW | …dkite/scripts/steps/esql_generate_function_metadata.sh | 86 | # Check if a PR already exists | COMMENT |
| LOW | .buildkite/scripts/steps/scout_update_metadata.sh | 50 | # Check if an open PR with the same title targeting this base already exists | COMMENT |
| LOW | .buildkite/scripts/steps/otel_semconv_sync.sh | 152 | # Check if a PR already exists | COMMENT |
| LOW | .buildkite/scripts/steps/otel_semconv_sync.sh | 214 | # Check if YAML actually changed | COMMENT |
| LOW | .buildkite/scripts/steps/test/scout/run_test_lane.sh | 124 | # Check if a load index was already marked as passed | COMMENT |
| LOW | .buildkite/scripts/steps/uiam/promote_image.sh | 30 | # Check if the image has a multi-arch manifest | COMMENT |
| LOW | …scripts/steps/uiam/promote_image_cosmos_db_emulator.sh | 30 | # Check if the image has a multi-arch manifest | COMMENT |
| LOW | .buildkite/scripts/steps/functional/common.sh | 48 | # Check if reports exist before uploading | COMMENT |
| LOW | …/cases/common/workflows/steps/get_cases_by_alert_id.ts | 42 | `## Check if alert already belongs to a case | CODE |
| LOW | …ins/shared/cases/common/workflows/steps/assign_case.ts | 43 | `## Assign users to case | CODE |
| LOW | …-flaky-test-doctor/scripts/audit_fleet_failed_tests.sh | 70 | # Check if file exists | COMMENT |
| LOW | …orkflow-gen/generate_workflow/prompts/workflow_docs.ts | 664 | # Check if previous step succeeded | COMMENT |
| LOW | …/es_archives/helper_scripts/contextual_flyout_setup.sh | 6 | # Set KIBANA_ROOT to 7 levels up from the script directory (to reach Kibana root) | COMMENT |
| LOW | …rity_solution/scripts/telemetry/build_ebt_data_view.sh | 21 | # Check if vault command exists | COMMENT |
| LOW | …rity_solution/scripts/telemetry/build_ebt_data_view.sh | 48 | # Check if result is empty after trimming | COMMENT |
| LOW | …/observability_onboarding/public/assets/auto_detect.sh | 21 | # Check if the `lsof` command exists in PATH, if not use `/usr/sbin/lsof` if possible | COMMENT |
| LOW | …/observability_onboarding/public/assets/auto_detect.sh | 646 | # Check if LSOF_PATH is executable | COMMENT |
| LOW | …packages/shared/kbn-safer-lodash-set/scripts/update.sh | 25 | # Check if there's changes to the patched files | COMMENT |
| LOW | …/managed/definitions/alertzero/rule_tuning_worker.yaml | 404 | # Check if any steps that read required source data failed. | COMMENT |
| LOW | …ared/kbn-dev-utils/src/precommit_hook/script_source.ts | 77 | # Check if we have node js bin in path | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ress-to-scout-migration/scripts/scaffold_scout_spec.sh | 90 | // TODO: implement | COMMENT |
| LOW | …ress-to-scout-migration/scripts/scaffold_scout_spec.sh | 116 | // TODO: implement | COMMENT |
| LOW | …cs/components/monitor_add_edit/form/validation.test.ts | 84 | // TODO: Add test for other monitor types if needed | COMMENT |
| LOW | …now_mode/manual_test_run_mode/browser_test_results.tsx | 95 | // TODO: Add error toast | COMMENT |
| LOW | …now_mode/manual_test_run_mode/browser_test_results.tsx | 103 | // TODO: Add error toast | COMMENT |
| LOW | …ent_annotation/server/fetch_event_annotations/index.ts | 10 | // TODO: implement this on the server | COMMENT |
| LOW | …ed-ux/document_data_cascade/impl/src/lib/utils.test.ts | 33 | // TODO: implement mock for getParentRows | COMMENT |
| LOW⚡ | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 152 | // TODO: Implement test setup | COMMENT |
| LOW⚡ | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 161 | // TODO: Implement test setup | COMMENT |
| LOW⚡ | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 170 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 186 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 201 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 216 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 231 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 261 | // TODO: Implement test setup | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 278 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 286 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 298 | // TODO: Implement test | COMMENT |
| LOW | …out-info/llms/generate-scout-skeleton-from-ftr-test.md | 308 | // TODO: Implement test | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ypress-to-scout-migration/scripts/extract_selectors.sh | 5 | # Usage: | COMMENT |
| LOW | …ress-to-scout-migration/scripts/scaffold_scout_spec.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/kibana_api_common.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/index_dependency_usage.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/create_models_labels.sh | 6 | # Usage: | COMMENT |
| LOW | …s/shared/streams/dev/full_dev_flow/streams_full_dev.sh | 9 | # Usage: | COMMENT |
| LOW | …entic_investigations/scripts/seed_impact_attachment.sh | 24 | # Usage: | COMMENT |
| LOW | …kills/test-plan-generator/scripts/publish_test_plan.sh | 12 | # Usage: | COMMENT |
| LOW | …kills/test-plan-generator/scripts/resolve_verbosity.sh | 10 | # Usage: | COMMENT |
| LOW | …tion/.agents/skills/bug-validator/scripts/fetch_prs.sh | 6 | # Usage: | COMMENT |
| LOW | …on/.agents/skills/bug-validator/scripts/fetch_issue.sh | 5 | # Usage: | COMMENT |
| LOW | …kills/exploratory-tester/scripts/create-noise-index.sh | 6 | # Usage: | COMMENT |
| LOW | …tion/public/management/cypress/support/data_loaders.ts | 467 | * ### Usage: | COMMENT |
| LOW | …/alertzero/scripts/seed_proposals_based_on_workflow.sh | 55 | # Usage: | COMMENT |
| LOW | …plugins/alertzero/scripts/seed_proposal_attachments.sh | 29 | # Usage: | COMMENT |
| LOW | …evals-suite-pci-compliance/scripts/seed_dev_cluster.sh | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/security_solution/.agents/scripts/session_metrics.py | 4 | CODE | |
| LOW | …ts/skills/exploratory-tester/scripts/knowledge-hash.py | 25 | CODE | |
| LOW | …kills/exploratory-tester/scripts/delete-flow-spaces.py | 4 | CODE | |
| LOW | …skills/exploratory-tester/scripts/session_resources.py | 4 | CODE | |
| LOW | …xploratory-tester/scripts/register-session-resource.py | 4 | CODE | |
| LOW | …lls/exploratory-tester/scripts/break-remote-cluster.py | 4 | CODE | |
| LOW | …s/exploratory-tester/scripts/session-resource-state.py | 9 | CODE | |
| LOW | …ts/skills/exploratory-tester/scripts/parse-findings.py | 79 | CODE | |
| LOW | …/exploratory-tester/scripts/test_report_bookkeeping.py | 6 | CODE | |
| LOW | …skills/exploratory-tester/scripts/ensure-base-space.py | 4 | CODE | |
| LOW | …nts/skills/exploratory-tester/scripts/render-report.py | 69 | CODE | |
| LOW | …xploratory-tester/scripts/cleanup-session-resources.py | 4 | CODE | |
| LOW | …y_solution/.agents/skills/file-bug/scripts/file-bug.py | 3 | CODE | |
| LOW | …y_solution/.agents/skills/file-bug/scripts/file_bug.py | 1 | CODE | |
| LOW | x-pack/build_chromium/build.py | 1 | CODE | |
| LOW | x-pack/build_chromium/build.py | 1 | CODE | |
| LOW | x-pack/build_chromium/build_util.py | 1 | CODE | |
| LOW | x-pack/build_chromium/build_util.py | 1 | CODE | |
| LOW | x-pack/build_chromium/init.py | 1 | CODE | |
| LOW | x-pack/build_chromium/init.py | 1 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/security_solution/.agents/scripts/session_metrics.py | 135 | CODE | |
| LOW | …s/exploratory-tester/scripts/capture-remote-cluster.py | 232 | CODE | |
| LOW | …lls/exploratory-tester/scripts/break-remote-cluster.py | 74 | CODE | |
| LOW | …lls/exploratory-tester/scripts/break-remote-cluster.py | 111 | CODE | |
| LOW | …s/exploratory-tester/scripts/restore-remote-cluster.py | 388 | CODE | |
| LOW | …s/exploratory-tester/scripts/test_session_resources.py | 1144 | CODE | |
| LOW | …s/exploratory-tester/scripts/test_session_resources.py | 4236 | CODE | |
| LOW | …loratory-tester/scripts/restore-and-cleanup-session.py | 29 | CODE | |
| LOW | …kills/exploratory-tester/scripts/create-flow-spaces.py | 24 | CODE | |
| LOW | …skills/exploratory-tester/scripts/ensure-base-space.py | 21 | CODE | |
| LOW | …nts/skills/exploratory-tester/scripts/render-report.py | 110 | CODE | |
| LOW | …nts/skills/exploratory-tester/scripts/render-report.py | 149 | CODE | |
| LOW | …xploratory-tester/scripts/cleanup-session-resources.py | 170 | CODE | |
| LOW | …y_solution/.agents/skills/file-bug/scripts/file-bug.py | 135 | CODE | |
| LOW | …y_solution/.agents/skills/file-bug/scripts/file_bug.py | 743 | CODE | |
| LOW | …y_solution/.agents/skills/file-bug/scripts/file_bug.py | 1785 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …edge_base/security_labs/elevate_your_threat_hunting.md | 135 | print(f"Error: {response.text}") | CODE |
| MEDIUM | …ticsearch-agent/skills/recipes/keyword-search/SKILL.md | 132 | print(f"Error indexing doc: {err['index']['error']}") | CODE |
| MEDIUM | …s/shared/kbn-search-agent/src/skills/keyword_search.ts | 143 | print(f"Error indexing doc: {err['index']['error']}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lugins/apm/public/services/rest/storybook_mock_http.ts | 34 | function handleRequest(method: string, pathname: string, options?: any): Promise<any> { | CODE |
| LOW | …orm/packages/shared/kbn-flot-charts/lib/jquery_flot.js | 1085 | function processData() { | CODE |