The Workflow Engine for .NET
This report summarizes scanner evidence for elsa-workflows/elsa-core, a C# project with 7,901 GitHub stars. SynthScan examined 904,000 lines of code across 9273 source files, recording 3340 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 5.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3034 finding(s).
Are imports declared and package/API names verified? 200 finding(s).
Are wrappers, guards, and repeated structures necessary? 1285 finding(s).
Which changes need focused human review? 3340 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3340 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dotnet-install.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …amework/Elsa.Studio.DomInterop/Contracts/IClipboard.cs | 1 | namespace Elsa.Studio.DomInterop.Contracts; | COMMENT |
| LOW | …c/framework/Elsa.Studio.DomInterop/Contracts/IFiles.cs | 1 | namespace Elsa.Studio.DomInterop.Contracts; | COMMENT |
| LOW | …ework/Elsa.Studio.DomInterop/Contracts/IDomAccessor.cs | 1 | using Elsa.Studio.DomInterop.Models; | COMMENT |
| LOW | …ework/Elsa.Studio.DomInterop/Contracts/IDomAccessor.cs | 21 | /// <param name="elementRef">The element reference to get the visible height for.</param> | COMMENT |
| LOW | …o/src/framework/Elsa.Studio.DomInterop/Models/Union.cs | 41 | /// <summary> | COMMENT |
| LOW | …src/framework/Elsa.Studio.DomInterop/Models/DomRect.cs | 1 | namespace Elsa.Studio.DomInterop.Models; | COMMENT |
| LOW | …src/framework/Elsa.Studio.DomInterop/Models/DomRect.cs | 21 | public double Width { get; set; } | COMMENT |
| LOW | …/framework/Elsa.Studio.DomInterop/Models/ElementRef.cs | 1 | using Elsa.Studio.Models; | COMMENT |
| LOW | …/framework/Elsa.Studio.DomInterop/Models/ElementRef.cs | 21 | private ElementRef(ElementReference value) : base(value) { } | COMMENT |
| LOW | studio/src/framework/Elsa.Studio.Core/ToolVersion.cs | 1 | namespace Elsa.Studio; | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/ElsaStudioIcons.cs | 1 | namespace Elsa.Studio; | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/ElsaStudioIcons.cs | 21 | /// <summary> | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/ElsaStudioIcons.cs | 41 | /// <summary> | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/ElsaStudioIcons.cs | 61 | /// <summary> | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/ElsaStudioIcons.cs | 81 | /// </summary> | COMMENT |
| LOW | …ork/Elsa.Studio.Core/Contracts/IActivityTabRegistry.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …ork/Elsa.Studio.Core/Contracts/INotificationHandler.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …o/src/framework/Elsa.Studio.Core/Contracts/IFeature.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …ework/Elsa.Studio.Core/Contracts/IContentVisualizer.cs | 21 | /// Determines whether the content can be visualized with this visualizer. | COMMENT |
| LOW | …/framework/Elsa.Studio.Core/Contracts/IThemeService.cs | 21 | /// The current theme. | COMMENT |
| LOW | …k/Elsa.Studio.Core/Contracts/IRemoteFeatureProvider.cs | 1 | using Elsa.Api.Client.Resources.Features.Models; | COMMENT |
| LOW | …/src/framework/Elsa.Studio.Core/Contracts/IMediator.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …/src/framework/Elsa.Studio.Core/Contracts/IMediator.cs | 21 | /// <summary> | COMMENT |
| LOW | …sa.Studio.Core/Contracts/IContentVisualizerProvider.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …c/framework/Elsa.Studio.Core/Contracts/IMenuService.cs | 1 | using Elsa.Studio.Models; | COMMENT |
| LOW | …ramework/Elsa.Studio.Core/Contracts/IFeatureService.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …ramework/Elsa.Studio.Core/Contracts/IFeatureService.cs | 21 | COMMENT | |
| LOW | …framework/Elsa.Studio.Core/Contracts/IUIHintHandler.cs | 21 | /// <summary> | COMMENT |
| LOW | …Elsa.Studio.Core/Contracts/IUIFieldExtensionService.cs | 1 | using Elsa.Studio.Models; | COMMENT |
| LOW | …Elsa.Studio.Core/Contracts/IPermissionRefreshSignal.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …ramework/Elsa.Studio.Core/Contracts/IWidgetRegistry.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …lsa.Studio.Core/Contracts/IBackendApiClientProvider.cs | 1 | using System.Diagnostics.CodeAnalysis; | COMMENT |
| LOW | …o.Core/Contracts/IAnonymousBackendApiClientProvider.cs | 1 | using System.Diagnostics.CodeAnalysis; | COMMENT |
| LOW | …framework/Elsa.Studio.Core/Contracts/IAppBarService.cs | 21 | COMMENT | |
| LOW | …framework/Elsa.Studio.Core/Contracts/IAppBarService.cs | 41 | /// Adds an element of the specified type to the app bar. | COMMENT |
| LOW | …Elsa.Studio.Core/Contracts/IUIFieldExtensionHandler.cs | 21 | COMMENT | |
| LOW | …Elsa.Studio.Core/Contracts/IUIFieldExtensionHandler.cs | 41 | COMMENT | |
| LOW | …c/framework/Elsa.Studio.Core/Contracts/IStartupTask.cs | 1 | namespace Elsa.Studio.Contracts; | COMMENT |
| LOW | …c/framework/Elsa.Studio.Core/Contracts/IActivityTab.cs | 21 | COMMENT | |
| LOW | …c/framework/Elsa.Studio.Core/Contracts/IActivityTab.cs | 41 | /// <summary> | COMMENT |
| LOW | …ework/Elsa.Studio.Core/Enums/FieldExtensionPosition.cs | 1 | namespace Elsa.Studio.Enums; | COMMENT |
| LOW | …framework/Elsa.Studio.Core/Models/ClientInformation.cs | 1 | namespace Elsa.Studio.Models; | COMMENT |
| LOW | …/Elsa.Studio.Core/Models/TabulatedContentVisualizer.cs | 1 | namespace Elsa.Studio.Models; | COMMENT |
| LOW | …k/Elsa.Studio.Core/Models/DisplayInputEditorContext.cs | 21 | public WorkflowDefinition WorkflowDefinition { get; set; } = null!; | COMMENT |
| LOW | …k/Elsa.Studio.Core/Models/DisplayInputEditorContext.cs | 41 | public object? Value { get; set; } | COMMENT |
| LOW | …framework/Elsa.Studio.Core/Models/ServerInformation.cs | 1 | namespace Elsa.Studio.Models; | COMMENT |
| LOW | studio/src/framework/Elsa.Studio.Core/Models/Result.cs | 1 | namespace Elsa.Studio.Models; | COMMENT |
| LOW | …udio/src/framework/Elsa.Studio.Core/Models/MenuItem.cs | 21 | /// <summary> | COMMENT |
| LOW | …src/framework/Elsa.Studio.Core/Models/AppBarElement.cs | 1 | using System.Diagnostics.CodeAnalysis; | COMMENT |
| LOW | …src/framework/Elsa.Studio.Core/Models/AppBarElement.cs | 21 | /// Controls the placement of the element by specifying its position relative to others. | COMMENT |
| LOW | ….Studio.Core/Abstractions/FieldExtensionHandlerBase.cs | 21 | public virtual bool IncludeForAll { get; set; } = false; | COMMENT |
| LOW | …k/Elsa.Studio.Core/Authorization/IPermissionService.cs | 1 | namespace Elsa.Studio.Authorization; | COMMENT |
| LOW | …framework/Elsa.Studio.Core/Authorization/Permission.cs | 1 | namespace Elsa.Studio.Authorization; | COMMENT |
| LOW | …work/Elsa.Studio.Core/Services/RemoteFeatureCatalog.cs | 1 | using Elsa.Api.Client.Resources.Features.Models; | COMMENT |
| LOW | …udio.Core/Services/DefaultContentVisualizerProvider.cs | 21 | /// Defaults to <see cref="DefaultContentVisualizer"/> Visualizer if none match. | COMMENT |
| LOW | …work/Elsa.Studio.Core/Services/DefaultUIHintService.cs | 21 | // public RenderFragment DisplayInputEditor(DisplayInputEditorContext context) | COMMENT |
| LOW | …/framework/Elsa.Studio.Core/Localization/ILocalizer.cs | 1 | using Microsoft.Extensions.Localization; | COMMENT |
| LOW | …c/framework/Elsa.Studio.Shared/WellKnownSyntaxNames.cs | 1 | namespace Elsa.Studio; | COMMENT |
| LOW | …ework/Elsa.Studio.Shared/Branding/IBrandingProvider.cs | 21 | /// <summary> | COMMENT |
| 1606 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | studio/test/browser/RoleManagement/fixtures.ts | 298 | export function captureRuntimeDiagnostics(page: Page, secrets: string[]): RuntimeDiagnostics { | CODE |
| LOW | …dio.Diagnostics.OpenTelemetry/wwwroot/openTelemetry.js | 43 | export function formatEnvironmentVariables(variables) { | CODE |
| LOW | …lows.Designer/ClientLib/scripts/generate-bpmn-types.js | 68 | function resolveNuGetGlobalPackagesFolder() { | CODE |
| LOW | …r/ClientLib/src/react-designer/components/Designer.tsx | 172 | function computeReconnectingBridges(removedIds: Set<string>, allEdges: Edge[]): Edge[] { | CODE |
| LOW | …r/ClientLib/src/react-designer/components/Designer.tsx | 240 | function arrangeSequenceNodesInOrder(nodes: Node<ActivityNodeData>[], orientation: SequenceLayoutOrientation): Node<Acti | CODE |
| LOW | …ows.Designer/ClientLib/src/react-designer/api/index.ts | 75 | export function moveSelectedReactSequenceNode(graphId: string, direction: -1 | 1): void { | CODE |
| LOW | …io.Workflows.Designer/ClientLib/src/bpmn/view-model.ts | 610 | function reportUnresolvedDiagramReferences( | CODE |
| LOW⚡ | …b/src/designer/internal/state-machine-accessibility.ts | 5 | export function applyStateMachineGraphAccessibility(graph: Graph) { | CODE |
| LOW⚡ | …b/src/designer/internal/state-machine-accessibility.ts | 10 | export function applyStateMachineNodeAccessibility(graph: Graph, node: Node) { | CODE |
| LOW⚡ | …b/src/designer/internal/state-machine-accessibility.ts | 16 | export function applyStateMachineEdgeAccessibility(graph: Graph, edge: Edge) { | CODE |
| LOW⚡ | …b/src/designer/internal/state-machine-accessibility.ts | 24 | function applyStateMachineCellAccessibility(graph: Graph, cell: Node | Edge, accessibleName: string, className: string, | CODE |
| LOW | …lientLib/src/designer/internal/state-machine-shapes.ts | 5 | export function registerStateMachineShapes() { | CODE |
| LOW | …s.Designer/ClientLib/src/designer/api/sequence-mode.ts | 9 | export function normalizeSequenceOrientation(value?: string | null): SequenceLayoutOrientation { | CODE |
| LOW | …ws.Designer/ClientLib/src/designer/api/grid-options.ts | 8 | export function createDesignerGridOptions(settings?: any): DesignerGridOptions { | CODE |
| LOW | …ws.Designer/ClientLib/src/designer/api/grid-options.ts | 17 | export function resolveDesignerGridOptions(options: DesignerGridOptions, themeColor: string) { | CODE |
| LOW | …/ClientLib/src/designer/api/calculate-activity-size.ts | 33 | export function getActivityMeasurementScopeClass(element: Element | null): string { | CODE |
| LOW | …signer/ClientLib/src/designer/api/apply-graph-theme.ts | 21 | export function applyDesignerThemeVariables(element: HTMLElement, theme: X6DesignerTheme) { | CODE |
| LOW | …/designer/api/raise-activity-embedded-port-selected.ts | 4 | export async function raiseActivityEmbeddedPortSelected(elementId: string, activityModel: Activity | string, portName: s | CODE |
| LOW | …n.UnitTests/OpenIdConnect/OpenIdConnectAdapterTests.cs | 329 | private sealed class StaticResponseHandler : HttpMessageHandler | CODE |
| LOW | …n.UnitTests/OpenIdConnect/OpenIdConnectAdapterTests.cs | 334 | private sealed class TokenResponseHandler(string token, string? discovery = null) : HttpMessageHandler | CODE |
| LOW | …n.UnitTests/OpenIdConnect/OpenIdConnectAdapterTests.cs | 345 | private sealed class CapturingTokenResponseHandler(string token) : HttpMessageHandler | CODE |
| LOW | …rios/OutputConverters/OutputConverterApiClientTests.cs | 60 | private sealed class ResponseHandler(string response) : HttpMessageHandler | STRING |
| LOW | …ows.Runtime/Handlers/ValidateWorkflowRequestHandler.cs | 17 | public class ValidateWorkflowRequestHandler( | CODE |
| LOW⚡ | …lsa-release-announcements/tests/test_buffer_receipt.py | 18 | def test_resume_requires_reconciliation_and_known_id_cannot_be_discarded(self): | CODE |
| LOW⚡ | …lsa-release-announcements/tests/test_buffer_receipt.py | 25 | def test_confirmed_absence_allows_retry_but_changed_target_does_not(self): | CODE |
| LOW⚡ | …lsa-release-announcements/tests/test_buffer_receipt.py | 33 | def test_incomplete_or_matching_reconciliation_cannot_authorize_repost(self): | CODE |
| LOW | …lsa-release-announcements/tests/test_buffer_receipt.py | 47 | def test_only_exact_sent_connector_post_produces_receipt(self): | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 189 | def test_dry_run_is_default_and_has_safe_payload(self) -> None: | CODE |
| LOW⚡ | …/elsa-release-announcements/tests/test_post_discord.py | 201 | def test_oversize_message_is_rejected_without_truncation(self) -> None: | CODE |
| LOW⚡ | …/elsa-release-announcements/tests/test_post_discord.py | 209 | def test_execute_requires_state_file(self) -> None: | CODE |
| LOW⚡ | …/elsa-release-announcements/tests/test_post_discord.py | 218 | def test_held_state_lock_refuses_then_reacquires_after_release(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 234 | def test_failed_crosspost_resumes_without_duplicate_create(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 254 | def test_ambiguous_create_reconciles_by_nonce_without_repost(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 271 | def test_ambiguous_create_without_match_stops_without_repost(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 285 | def test_unusable_create_responses_reconcile_without_repost(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 305 | def test_changed_payload_or_target_is_rejected(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 321 | def test_successful_rerun_does_not_create_duplicate(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 332 | def test_webhook_dry_run_does_not_expose_webhook_url(self) -> None: | CODE |
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 342 | def test_webhook_execute_reuses_state_without_storing_secret(self) -> None: | CODE |
| LOW | …lls/elsa-release-announcements/scripts/post_discord.py | 345 | def reconcile_ambiguous_create( | CODE |
| LOW | …lsa-release-announcements/scripts/announcement_pack.py | 234 | def render_discord_highlights(highlights: list[str]) -> str: | STRING |
| LOW | .agents/skills/elsa-release/tests/test_release.py | 19 | def test_supported_versions_and_channel_properties(self) -> None: | CODE |
| LOW | .agents/skills/elsa-release/tests/test_release.py | 32 | def test_invalid_and_mismatched_versions_are_rejected(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 46 | def test_default_source_is_release_branch_for_base_version(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 51 | def test_remote_source_uses_fresh_remote_sha_and_rejects_stale_local_ref(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 56 | def test_remote_only_source_sha_is_usable_before_fetch(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 60 | def test_remote_only_object_does_not_turn_preflight_into_a_mutation(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 65 | def test_stable_rc_source_with_wrong_base_fails_before_any_mutation(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 71 | def test_containment_accepts_origin_and_configured_remote(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 77 | def test_existing_tag_mismatch_is_rejected_without_retagging(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 81 | def test_matching_existing_release_is_reused_without_create_or_edit(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 88 | def test_legacy_release_with_branch_target_metadata_reuses_matching_remote_tag(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 98 | def test_kind_and_draft_mismatches_fail_for_existing_release(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 107 | def test_remote_error_is_not_treated_as_missing_tag(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 113 | def test_not_found_release_is_distinguished_from_authentication_error(self) -> None: | CODE |
| LOW⚡ | .agents/skills/elsa-release/tests/test_release.py | 120 | def test_notes_version_metadata_must_match_requested_release(self) -> None: | CODE |
| LOW | …ents/skills/elsa-release/tests/test_verify_packages.py | 248 | def test_success_checks_both_feeds_signed_normalization_and_exact_latest_tag(self) -> None: | CODE |
| LOW | …ents/skills/elsa-release/tests/test_verify_packages.py | 257 | def test_missing_artifact_and_unknown_extra_fail_with_partial_report(self) -> None: | CODE |
| LOW | …ents/skills/elsa-release/tests/test_verify_packages.py | 268 | def test_wrong_commit_and_publish_lag_fail(self) -> None: | CODE |
| LOW | …ents/skills/elsa-release/tests/test_verify_packages.py | 280 | def test_wrong_version_is_rejected(self) -> None: | CODE |
| 1118 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …k/Elsa.Studio.Translations/ResxLocalizationProvider.cs | 15 | return Elsa.Studio.Translations.Translations.ResourceManager.GetString(key, CultureInfo.CurrentUICulture) ?? key | CODE |
| CRITICAL | …o.Workflows.Tests/RemoteBpmnInterchangeServiceTests.cs | 228 | Assert.Equal(("v2", 2, "order-process"), (result.Success.Import.Id, result.Success.Import.Version, result.Succes | CODE |
| CRITICAL | …ows.Core/Domain/Models/Bpmn/BpmnExportFailureReason.cs | 5 | /// exception message <c>Elsa.Bpmn.Interchange.Services.BpmnInterchangeDocumentService.Export(WorkflowDefinition)</c> | COMMENT |
| CRITICAL | …Studio.Dashboard.Tests/DashboardPagePermissionTests.cs | 226 | await new Elsa.Studio.Diagnostics.OpenTelemetry.Dashboard.Feature(_registry).InitializeAsync(); | CODE |
| CRITICAL | …Studio.Dashboard.Tests/DashboardPagePermissionTests.cs | 236 | await new Elsa.Studio.Diagnostics.OpenTelemetry.Dashboard.Feature(_registry).InitializeAsync(); | CODE |
| CRITICAL | …Studio.Dashboard.Tests/DashboardPagePermissionTests.cs | 483 | new Elsa.Studio.Diagnostics.StructuredLogs.Dashboard.Feature(_registry), | CODE |
| CRITICAL | …Studio.Dashboard.Tests/DashboardPagePermissionTests.cs | 484 | new Elsa.Studio.Diagnostics.ConsoleLogs.Dashboard.Feature(_registry) | CODE |
| CRITICAL | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 13 | Assert.Equal(expected, Elsa.Studio.ExternalAuthentication.Services.LocalReturnPath.Normalize(candidate)); | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 36 | Assert.Equal("/studio/workflows/x", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("workflows/x", studioBa | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 37 | Assert.Equal("/studio/workflows/definitions?tab=active", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("w | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 38 | Assert.Equal("/studio/c|/windows", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("c|/windows", studioBase | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 39 | Assert.Equal("/studio/http:evil.com", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("http:evil.com", stud | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 40 | Assert.Equal("/", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("//evil.com", studioBase)); | CODE |
| CRITICAL⚡ | …rnalAuthentication.Tests/Login/LocalReturnPathTests.cs | 41 | Assert.Equal("/workflows/definitions?x=1", Elsa.Studio.Login.Pages.Login.Login.ResolveReturnUrl("/workflows/defi | CODE |
| CRITICAL | …sks.UnitTests/Authorization/EndpointPermissionTests.cs | 112 | Elsa.Testing.Shared.Authorization.EndpointCoverage.FindEndpoints(Module).Select(x => x.Name); | CODE |
| CRITICAL | …flows.Management/Stores/MemoryWorkflowInstanceStore.cs | 217 | [RequiresUnreferencedCode("Calls Elsa.Workflows.Management.Filters.WorkflowInstanceFilter.Apply(IQueryable<WorkflowI | CODE |
| CRITICAL | …ce.EFCore/Modules/Runtime/ActivityExecutionLogStore.cs | 39 | [RequiresUnreferencedCode("Calls Elsa.Persistence.EFCore.Modules.Runtime.EFCoreActivityExecutionStore.DeserializeAct | CODE |
| CRITICAL | …ce.EFCore/Modules/Runtime/ActivityExecutionLogStore.cs | 52 | [RequiresUnreferencedCode("Calls Elsa.Persistence.EFCore.Modules.Runtime.EFCoreActivityExecutionStore.DeserializeAct | CODE |
| CRITICAL | …ce.EFCore/Modules/Runtime/ActivityExecutionLogStore.cs | 102 | [RequiresUnreferencedCode("Calls Elsa.Persistence.EFCore.Modules.Runtime.EFCoreActivityExecutionStore.DeserializeAct | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 186 | "name": "Elsa.Ldap.UnitTests.Activities.MoveLdapEntryTests.MoveLdapEntry_ReturnsErrorWhenServerRespondsWithN | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 190 | "name": "Elsa.Ldap.UnitTests.Activities.MoveLdapEntryTests.MoveLdapEntry_ReturnsErrorWhenServerRespondsWithN | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 194 | "name": "Elsa.Ldap.UnitTests.Activities.MoveLdapEntryTests.MoveLdapEntry_ReturnsErrorWhenServerRespondsWithN | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 198 | "name": "Elsa.Ldap.UnitTests.Activities.DeleteLdapEntryTests.DeleteLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 206 | "name": "Elsa.Ldap.UnitTests.Activities.ModifyLdapEntryTests.ModifyLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 210 | "name": "Elsa.Ldap.UnitTests.Activities.ModifyLdapEntryTests.ModifyLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 234 | "name": "Elsa.Ldap.UnitTests.Activities.AddLdapEntryTests.AddLdapEntry_ReturnsErrorWhenServerRespondsWithNon | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 242 | "name": "Elsa.Ldap.UnitTests.Activities.DeleteLdapEntryTests.DeleteLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 246 | "name": "Elsa.Ldap.UnitTests.Activities.MoveLdapEntryTests.MoveLdapEntry_ReturnsErrorWhenServerRespondsWithN | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 250 | "name": "Elsa.Ldap.UnitTests.Activities.ModifyLdapEntryTests.ModifyLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 258 | "name": "Elsa.Ldap.UnitTests.Activities.AddLdapEntryTests.AddLdapEntry_ReturnsErrorWhenServerRespondsWithNon | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 262 | "name": "Elsa.Ldap.UnitTests.Activities.CompareLdapEntryTests.CompareLdapEntry_ReturnsErrorWhenServerRespond | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 270 | "name": "Elsa.Ldap.UnitTests.Activities.DeleteLdapEntryTests.DeleteLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 282 | "name": "Elsa.Ldap.UnitTests.Activities.CompareLdapEntryTests.CompareLdapEntry_ReturnsErrorWhenServerRespond | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 286 | "name": "Elsa.Ldap.UnitTests.Activities.CompareLdapEntryTests.CompareLdapEntry_ReturnsErrorWhenServerRespond | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 294 | "name": "Elsa.Ldap.UnitTests.Activities.CompareLdapEntryTests.CompareLdapEntry_ReturnsErrorWhenServerRespond | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 298 | "name": "Elsa.Ldap.UnitTests.Activities.AddLdapEntryTests.AddLdapEntry_ReturnsErrorWhenServerRespondsWithNon | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 306 | "name": "Elsa.Ldap.UnitTests.Activities.AddLdapEntryTests.AddLdapEntry_ReturnsErrorWhenServerRespondsWithNon | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 310 | "name": "Elsa.Ldap.UnitTests.Activities.CompareLdapEntryTests.CompareLdapEntry_ReturnsErrorWhenServerRespond | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 314 | "name": "Elsa.Ldap.UnitTests.Activities.MoveLdapEntryTests.MoveLdapEntry_ReturnsErrorWhenServerRespondsWithN | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 318 | "name": "Elsa.Ldap.UnitTests.Activities.AddLdapEntryTests.AddLdapEntry_ReturnsErrorWhenServerRespondsWithNon | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 326 | "name": "Elsa.Ldap.UnitTests.Activities.DeleteLdapEntryTests.DeleteLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 330 | "name": "Elsa.Ldap.UnitTests.Activities.ModifyLdapEntryTests.ModifyLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL⚡ | …ion-program/consolidation/provider-build-evidence.json | 334 | "name": "Elsa.Ldap.UnitTests.Activities.DeleteLdapEntryTests.DeleteLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 222 | "name": "Elsa.Ldap.UnitTests.Activities.ModifyLdapEntryTests.ModifyLdapEntry_ReturnsErrorWhenServerRespondsW | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 388 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 400 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 404 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"a/b\", | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 416 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 436 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 460 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 476 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"a/b/c\" | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 480 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 492 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"#\", to | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 584 | "name": "Elsa.Mqtt.UnitTests.Utilities.MqttTopicMatcherTests.IsMatch_ReturnsExpectedResult(filter: \"sensors | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 674 | "name": "Elsa.Scheduling.Quartz.ComponentTests.QuartzJobTransientRetryTests.RunWorkflowJob_TransientExceptio | CODE |
| CRITICAL | …ion-program/consolidation/provider-build-evidence.json | 686 | "name": "Elsa.Scheduling.Quartz.ComponentTests.QuartzJobTransientRetryTests.RunWorkflowJob_TransientExceptio | CODE |
| CRITICAL⚡ | …nt-tip-c4b3-evidence/full-suite-first-run-failure.json | 40 | "Elsa.Studio.Core.Tests.HostThemeConfigurationTests.Hosts_bind_the_presentation_theme_section(hostPath: [\"Elsa. | CODE |
| CRITICAL⚡ | …nt-tip-c4b3-evidence/full-suite-first-run-failure.json | 42 | "Elsa.Studio.Core.Tests.HostThemeConfigurationTests.Hosts_bind_the_presentation_theme_section(hostPath: [\"Elsa. | CODE |
| CRITICAL⚡ | …nt-tip-c4b3-evidence/full-suite-first-run-failure.json | 44 | "Elsa.Studio.Core.Tests.StudioShellCssContractTests.AccountMenusInheritShellUtilityColor(componentPath: [\"Elsa. | CODE |
| CRITICAL⚡ | …nt-tip-c4b3-evidence/full-suite-first-run-failure.json | 46 | "Elsa.Studio.Core.Tests.StudioShellCssContractTests.AccountMenusInheritShellUtilityColor(componentPath: [\"Elsa. | CODE |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lls/elsa-release-announcements/scripts/post_discord.py | 74 | CODE | |
| LOW | .agents/skills/elsa-release/tests/test_release_train.py | 646 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/package_manifest.py | 40 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 88 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 122 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 284 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 334 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 431 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 620 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 359 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 379 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 1077 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 1663 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 2040 | CODE | |
| LOW | …/integration-program/research/test_validate_catalog.py | 42 | CODE | |
| LOW | docs/integration-program/research/validate_catalog.py | 17 | CODE | |
| LOW | …tion-program/test_prepare_workbench_secrets_runtime.py | 850 | CODE | |
| LOW | …egration-program/run_secrets_sqlite_upgrade_fixture.py | 218 | CODE | |
| LOW | …integration-program/test_mapped_slack_package_proof.py | 72 | CODE | |
| LOW | …program/test_prove_consolidated_admission_consumers.py | 97 | CODE | |
| LOW | scripts/integration-program/source_bindings.py | 40 | CODE | |
| LOW | …ntegration-program/test_prove_consolidated_packages.py | 148 | CODE | |
| LOW | …ntegration-program/test_prove_consolidated_packages.py | 628 | CODE | |
| LOW | …ntegration-program/test_prove_consolidated_packages.py | 754 | CODE | |
| LOW | …ntegration-program/test_prove_consolidated_packages.py | 773 | CODE | |
| LOW | …ntegration-program/test_prove_consolidated_packages.py | 805 | CODE | |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 48 | CODE | |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 91 | CODE | |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 207 | CODE | |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 352 | CODE | |
| LOW | …integration-program/test_prepare_consolidated_build.py | 244 | CODE | |
| LOW | …gration-program/test_consolidated_publisher_handoff.py | 711 | CODE | |
| LOW | scripts/integration-program/package_closure.py | 419 | CODE | |
| LOW | scripts/integration-program/package_closure.py | 713 | CODE | |
| LOW | …egration-program/test_consolidated_package_executor.py | 74 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 69 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 230 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 320 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 428 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 523 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 602 | CODE | |
| LOW | …tegration-program/test_secrets_sqlite_bridge_guards.py | 44 | CODE | |
| LOW | …ipts/integration-program/prepare_paired_blazor_host.py | 54 | CODE | |
| LOW | …ripts/integration-program/test_plan_product_release.py | 576 | CODE | |
| LOW | …ation-program/run_secrets_sqlserver_upgrade_fixture.py | 280 | CODE | |
| LOW | …ts/integration-program/consolidated_recovery_inputs.py | 84 | CODE | |
| LOW | …ts/integration-program/consolidated_recovery_inputs.py | 122 | CODE | |
| LOW | …ation-program/test_secrets_sqlserver_bridge_fixture.py | 86 | CODE | |
| LOW | scripts/integration-program/package_impact.py | 16 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 88 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 311 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 501 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 558 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 600 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 686 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 782 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 814 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 831 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 866 | CODE | |
| LOW | …/integration-program/test_prepare_maintenance_build.py | 1118 | CODE | |
| 63 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/elsa-release-announcements/tests/test_post_discord.py | 1 | CODE | |
| LOW | …lls/elsa-release-announcements/scripts/post_discord.py | 4 | CODE | |
| LOW | …lsa-release-announcements/scripts/announcement_pack.py | 4 | CODE | |
| LOW | .agents/skills/elsa-release/tests/test_release.py | 1 | CODE | |
| LOW | …ents/skills/elsa-release/tests/test_verify_packages.py | 1 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_notes.py | 4 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release.py | 4 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_support.py | 3 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/package_manifest.py | 3 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/package_manifest.py | 9 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/verify_packages.py | 11 | CODE | |
| LOW | .agents/skills/elsa-release/scripts/release_train.py | 3 | CODE | |
| LOW | scripts/validate_packages_publication_selection.py | 13 | CODE | |
| LOW | scripts/validate_packages_workflow_gates.py | 10 | CODE | |
| LOW | …ration-program/verify_import_source_tip_refresh_r10.py | 4 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r3.py | 4 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r7.py | 11 | CODE | |
| LOW | …program/test_prove_consolidated_admission_consumers.py | 2 | CODE | |
| LOW | …integration-program/test_extract_nuke_test_evidence.py | 1 | CODE | |
| LOW | …ts/integration-program/consolidated_candidate_input.py | 2 | CODE | |
| LOW | scripts/integration-program/source_bindings.py | 3 | CODE | |
| LOW | …ntegration-program/verify_import_source_tip_refresh.py | 4 | CODE | |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 8 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r6.py | 4 | CODE | |
| LOW | …/integration-program/test_current_tip_legacy_assets.py | 3 | CODE | |
| LOW | scripts/integration-program/run_mongo_atomic_proof.py | 4 | CODE | |
| LOW | …tion-program/prepare_consolidated_release_candidate.py | 3 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r2.py | 4 | CODE | |
| LOW | scripts/integration-program/package_closure.py | 4 | CODE | |
| LOW | …ion-program/verify_mapped_slack_consumer_provenance.py | 4 | CODE | |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 3 | CODE | |
| LOW | scripts/integration-program/test_product_layout.py | 7 | CODE | |
| LOW | …egration-program/test_import_source_tip_refresh_r10.py | 3 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r9.py | 4 | CODE | |
| LOW | …ripts/integration-program/test_plan_product_release.py | 1 | CODE | |
| LOW | …tegration-program/test_import_source_tip_refresh_r5.py | 3 | CODE | |
| LOW | …s/integration-program/test_verify_slack_source_link.py | 3 | CODE | |
| LOW | scripts/integration-program/run_slack_package_proof.py | 9 | CODE | |
| LOW | …ts/integration-program/consolidated_recovery_inputs.py | 2 | CODE | |
| LOW | scripts/integration-program/verify_product_layout.py | 3 | CODE | |
| LOW | …tegration-program/test_import_source_tip_refresh_r4.py | 3 | CODE | |
| LOW | scripts/integration-program/package_impact.py | 4 | CODE | |
| LOW | …pts/integration-program/prove_consolidated_packages.py | 7 | CODE | |
| LOW | …s/integration-program/prove_slack_artifact_consumer.py | 4 | CODE | |
| LOW | scripts/integration-program/prove_studio_npm_pair.py | 3 | CODE | |
| LOW | …s/integration-program/consolidated_package_recovery.py | 3 | CODE | |
| LOW | …/integration-program/test_legacy_asset_dispositions.py | 3 | CODE | |
| LOW | …gration-program/verify_import_source_tip_refresh_r8.py | 4 | CODE | |
| LOW | scripts/integration-program/product_release_metadata.py | 2 | CODE | |
| LOW | …ntegration-program/verify_studio_package_provenance.py | 4 | CODE | |
| LOW | …/integration-program/run_mapped_slack_package_proof.py | 10 | CODE | |
| LOW | …/integration-program/run_mapped_slack_package_proof.py | 29 | CODE | |
| LOW | …tegration-program/test_import_source_tip_refresh_r7.py | 3 | CODE | |
| LOW | …tion-program/consolidated_executor_approval_summary.py | 3 | CODE | |
| LOW | …tegration-program/run_consolidated_recovery_fixture.py | 3 | CODE | |
| LOW | …ogram/run_stable_persisted_workflow_upgrade_fixture.py | 3 | CODE | |
| LOW | …ogram/run_stable_persisted_workflow_upgrade_fixture.py | 10 | CODE | |
| LOW | …ogram/run_stable_persisted_workflow_upgrade_fixture.py | 10 | CODE | |
| LOW | …ogram/run_stable_persisted_workflow_upgrade_fixture.py | 10 | CODE | |
| LOW | …ogram/run_stable_persisted_workflow_upgrade_fixture.py | 10 | CODE | |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …udio.Workflows.Tests/BpmnActivityBindingFormatTests.cs | 0 | {"typename":"uri","expression":{"type":"javascript","value":"geturl()"}} | STRING |
| HIGH | ….Workflows.Tests/WorkflowEditorBpmnSaveRoutingTests.cs | 0 | {"typename":"uri","expression":{"type":"javascript","value":"geturl()"}} | STRING |
| HIGH | …lsa.Studio.Workflows.Tests/BpmnDocumentSessionTests.cs | 0 | {"typename":"uri","expression":{"type":"javascript","value":"geturl()"}} | STRING |
| HIGH | …ions/Labels/20260913133325_PerTenantLabelUniqueness.cs | 0 | update "{_schema.schema}"."labels" set "tenantid" = '' where "tenantid" is null; | STRING |
| HIGH | …ions/Labels/20260913133340_PerTenantLabelUniqueness.cs | 0 | update "{_schema.schema}"."labels" set "tenantid" = '' where "tenantid" is null; | STRING |
| HIGH | …ions/Labels/20260913133258_PerTenantLabelUniqueness.cs | 0 | update "{_schema.schema}"."labels" set "tenantid" = '' where "tenantid" is null; | STRING |
| HIGH | …gration-program/verify_import_source_tip_refresh_r3.py | 0 | verify this receipt's reviewed commits. the live-head publisher-workflow check (.github/workflows/packages.yml and updat | STRING |
| HIGH | …gration-program/verify_import_source_tip_refresh_r6.py | 0 | verify this receipt's reviewed commits. the live-head publisher-workflow check (.github/workflows/packages.yml and updat | STRING |
| HIGH | …gration-program/verify_import_source_tip_refresh_r4.py | 0 | verify this receipt's reviewed commits. the live-head publisher-workflow check (.github/workflows/packages.yml and updat | STRING |
| HIGH | …egration-program/run_secrets_sqlite_upgrade_fixture.py | 0 | require the exact outcome observed for the hash-pinned package pair. | STRING |
| HIGH | …ation-program/run_secrets_sqlserver_upgrade_fixture.py | 0 | require the exact outcome observed for the hash-pinned package pair. | STRING |
| HIGH | …tion-program/run_secrets_postgresql_upgrade_fixture.py | 0 | require the exact outcome observed for the hash-pinned package pair. | STRING |
| HIGH | …ogram/secrets-sqlserver-bridge/current-core/Program.cs | 0 | insert into elsasecretslegacyv381 ( legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescr | STRING |
| HIGH | …gram/secrets-postgresql-bridge/current-core/Program.cs | 0 | insert into elsasecretslegacyv381 ( legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescr | STRING |
| HIGH | …secrets-sqlite-bridge-contract/current-core/Program.cs | 0 | insert into elsasecretslegacyv381 ( legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescr | STRING |
| HIGH | …ogram/secrets-sqlserver-bridge/current-core/Program.cs | 0 | select legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescription, legacyversion, legacy | STRING |
| HIGH | …gram/secrets-postgresql-bridge/current-core/Program.cs | 0 | select legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescription, legacyversion, legacy | STRING |
| HIGH | …secrets-sqlite-bridge-contract/current-core/Program.cs | 0 | select legacyid, legacysecretid, legacyname, legacyscope, legacyencryptedvalue, legacydescription, legacyversion, legacy | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …lls/elsa-release-announcements/scripts/post_discord.py | 552 | except FileNotFoundError: | CODE |
| HIGH | .agents/skills/elsa-release/scripts/verify_packages.py | 357 | except ValueError: | CODE |
| HIGH | …tion-program/prove_consolidated_admission_consumers.py | 454 | except OSError: | CODE |
| HIGH | …tion-program/prove_consolidated_admission_consumers.py | 232 | except ProcessLookupError: | CODE |
| HIGH | …egration-program/test_consolidated_package_executor.py | 782 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | …ipts/integration-program/prepare_paired_blazor_host.py | 85 | except ProcessLookupError: | CODE |
| HIGH | scripts/integration-program/run_paired_source_probe.py | 75 | except ProcessLookupError: | CODE |
| HIGH | …pts/integration-program/prove_consolidated_packages.py | 68 | except ProcessLookupError: | CODE |
| HIGH | …s/integration-program/consolidated_package_recovery.py | 169 | except Exception: | CODE |
| HIGH | …tegration-program/run_consolidated_recovery_fixture.py | 191 | except Exception: | CODE |
| HIGH | …s/integration-program/consolidated_package_executor.py | 165 | except ProcessLookupError: | CODE |
| HIGH | scripts/integration-program/plan_product_release.py | 104 | except (OSError, ValueError, http.client.HTTPException): | CODE |
| HIGH | scripts/integration-program/plan_product_release.py | 545 | except OSError: | CODE |
| HIGH | …/integration-program/consolidated_publisher_handoff.py | 733 | except (OSError, subprocess.TimeoutExpired, UnicodeDecodeError): | CODE |
| HIGH | …/integration-program/consolidated_publisher_handoff.py | 245 | except ProcessLookupError: | CODE |
| HIGH | …ration-program/prove_consolidated_package_consumers.py | 341 | except ProcessLookupError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/pr.yml | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | .github/workflows/pr.yml | 15 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …cify/extensions/git/scripts/bash/create-new-feature.sh | 195 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …cify/extensions/git/scripts/bash/create-new-feature.sh | 202 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 120 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 122 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 153 | #============================================================================== | COMMENT |
| MEDIUM⚡ | .specify/scripts/bash/update-agent-context.sh | 155 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 47 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 49 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 89 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 91 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 233 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 235 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 524 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 526 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 598 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 600 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 781 | #============================================================================== | COMMENT |
| MEDIUM | .specify/scripts/bash/update-agent-context.sh | 783 | #============================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …egration-program/run_secrets_sqlite_upgrade_fixture.py | 368 | except Exception as error: | CODE |
| LOW | scripts/integration-program/source_bindings.py | 193 | except Exception: | CODE |
| LOW | scripts/integration-program/source_bindings.py | 214 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 127 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 225 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 288 | except Exception: | CODE |
| LOW⚡ | …tion-program/prove_consolidated_admission_consumers.py | 391 | except Exception: | CODE |
| LOW⚡ | …tion-program/prove_consolidated_admission_consumers.py | 400 | except Exception: | CODE |
| LOW⚡ | …tion-program/prove_consolidated_admission_consumers.py | 409 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 448 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 474 | except Exception: | CODE |
| LOW | …tion-program/prove_consolidated_admission_consumers.py | 492 | except Exception: | CODE |
| LOW | scripts/integration-program/package_closure.py | 203 | except Exception: | CODE |
| LOW | scripts/integration-program/package_closure.py | 778 | except Exception as error: | CODE |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 468 | except Exception as error: | STRING |
| LOW | …tion-program/run_persisted_workflow_upgrade_fixture.py | 641 | except Exception as error: | STRING |
| LOW | …ation-program/run_secrets_sqlserver_upgrade_fixture.py | 318 | except Exception: | CODE |
| LOW | …ation-program/run_secrets_sqlserver_upgrade_fixture.py | 449 | except Exception as error: | CODE |
| MEDIUM | …ation-program/run_secrets_sqlserver_upgrade_fixture.py | 265 | def docker_run(command, *, redact=()): | CODE |
| LOW | scripts/integration-program/prove_studio_npm_pair.py | 490 | except Exception: | CODE |
| LOW | scripts/integration-program/prove_studio_npm_pair.py | 498 | except Exception: | CODE |
| LOW | scripts/integration-program/prove_studio_npm_pair.py | 521 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 94 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 169 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 239 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 359 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 415 | except Exception: | CODE |
| LOW | …s/integration-program/consolidated_package_recovery.py | 476 | except Exception as error: | CODE |
| MEDIUM | …s/integration-program/consolidated_package_recovery.py | 91 | def read(): | CODE |
| MEDIUM | …s/integration-program/consolidated_package_recovery.py | 234 | def _read_result(transport, url, authorization, limit): | CODE |
| LOW | …s/integration-program/run_secrets_postgresql_bridge.py | 354 | except Exception as error: | CODE |
| MEDIUM | …s/integration-program/run_secrets_postgresql_bridge.py | 28 | def run(command, *, cwd=None, env=None, capture=False, timeout=900): | CODE |
| LOW | …tegration-program/run_consolidated_recovery_fixture.py | 191 | except Exception: | CODE |
| LOW | …ts/integration-program/run_secrets_sqlserver_bridge.py | 546 | except Exception as error: | CODE |
| MEDIUM | …ts/integration-program/run_secrets_sqlserver_bridge.py | 137 | def run(command, *, cwd=None, env=None, capture=False, timeout=900): | CODE |
| LOW | …egration-program/run_secrets_sqlite_bridge_contract.py | 551 | except Exception as error: | CODE |
| MEDIUM | …egration-program/run_secrets_sqlite_bridge_contract.py | 46 | def run(command, *, cwd=None, env=None, capture=False, timeout=None): | CODE |
| LOW | …s/integration-program/consolidated_package_executor.py | 543 | except Exception: | STRING |
| LOW | …ripts/integration-program/prepare_maintenance_build.py | 1040 | except Exception as error: | CODE |
| LOW | …ripts/integration-program/prepare_maintenance_build.py | 1075 | except Exception: | CODE |
| LOW | …tion-program/run_secrets_postgresql_upgrade_fixture.py | 295 | except Exception: | CODE |
| LOW | …tion-program/run_secrets_postgresql_upgrade_fixture.py | 480 | except Exception as error: | CODE |
| MEDIUM | …tion-program/run_secrets_postgresql_upgrade_fixture.py | 263 | def docker_run(command, *, capture=False, input_text=None, redact=()): | CODE |
| LOW | …ipts/integration-program/extract_nuke_test_evidence.py | 67 | except Exception as error: # pragma: no cover - exercised through CLI failures. | CODE |
| LOW | .specify/scripts/bash/common.sh | 373 | except Exception: | CODE |
| LOW | .specify/scripts/bash/common.sh | 461 | except Exception: | CODE |
| LOW | .specify/scripts/bash/common.sh | 492 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dotnet-install.sh | 429 | # Check if the major version is a valid number and less than 6 | COMMENT |
| LOW | dotnet-install.sh | 1484 | # Check if the SDK version is already installed. | COMMENT |
| LOW | dotnet-install.sh | 1542 | # Check if the SDK version is already installed. | COMMENT |
| LOW | dotnet-install.sh | 1663 | # Check if the SDK version is installed; if not, fail the installation. | COMMENT |
| LOW | dotnet-install.sh | 1677 | # Check if the standard SDK version is installed. | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/git-common.sh | 6 | # Check if we have git available at the repo root | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/auto-commit.sh | 34 | # Check if git is available | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/auto-commit.sh | 106 | # Check if event section existed at all | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/auto-commit.sh | 120 | # Check if there are changes to commit | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/initialize-repo.sh | 37 | # Check if git is available | COMMENT |
| LOW | .specify/extensions/git/scripts/bash/initialize-repo.sh | 43 | # Check if already a git repo | COMMENT |
| LOW | …cify/extensions/git/scripts/bash/create-new-feature.sh | 249 | # Check if git is available at this repo root | COMMENT |
| LOW | .specify/scripts/bash/common.sh | 104 | # Check if we have git available at the spec-kit root level | COMMENT |
| LOW | .specify/scripts/bash/common.sh | 111 | # Check if .git exists (directory or file for worktrees/submodules) | COMMENT |
| LOW | .specify/scripts/bash/common.sh | 305 | # Check if jq is available for safe JSON construction | COMMENT |
| LOW | .specify/scripts/bash/common.sh | 576 | # Check if any layer uses a non-replace strategy | COMMENT |
| LOW | .specify/scripts/bash/setup-plan.sh | 54 | # Output results | COMMENT |
| LOW | .specify/scripts/bash/setup-tasks.sh | 65 | # Output results | COMMENT |
| LOW | .specify/scripts/bash/check-prerequisites.sh | 154 | # Output results | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 125 | # Check if we have a current branch/feature (git or non-git) | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 136 | # Check if plan.md exists | COMMENT |
| LOW⚡ | .specify/scripts/bash/update-agent-context.sh | 146 | # Check if template exists (needed for new files) | COMMENT |
| LOW | .specify/scripts/bash/update-agent-context.sh | 407 | # Check if sections exist in the file | COMMENT |
| LOW | .specify/scripts/bash/create-new-feature.sh | 32 | # Check if the next argument is another option (starts with --) | COMMENT |
| LOW | .specify/scripts/bash/create-new-feature.sh | 197 | # Check if git is available at this repo root (not a parent) | COMMENT |
| LOW | .specify/scripts/bash/create-new-feature.sh | 333 | # Check if branch already exists | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/test_validate_packages_workflow_gates.py | 85 | SELECTION_RUN.replace(".py", ".py || true"), | CODE |
| HIGH | …gration-program/verify_import_source_tip_refresh_r6.py | 74 | if (record == null) | CODE |
| HIGH | …gration-program/verify_import_source_tip_refresh_r6.py | 81 | if (record == null) | CODE |
| HIGH⚡ | …egration-program/test_consolidated_package_executor.py | 750 | response = b'{"status":200,"complete":true,"failure_category":null,"body":""}' | CODE |
| HIGH | scripts/integration-program/run_slack_package_proof.py | 445 | ?? throw new InvalidOperationException("SlackClientFactory cache is null; refusing to execute the activity.")); | STRING |
| HIGH⚡ | scripts/integration-program/run_slack_package_proof.py | 467 | if (conversationsApi.CreateCalls != 1 || conversationsApi.ChannelName != requestedName || | STRING |
| HIGH⚡ | scripts/integration-program/run_slack_package_proof.py | 468 | conversationsApi.IsPrivate != true || conversationsApi.TeamId != requestedTeamId) | STRING |
| HIGH⚡ | scripts/integration-program/run_slack_package_proof.py | 470 | if (channel?.Id != expectedChannelId || channel.Name != requestedName) | STRING |
| HIGH | scripts/integration-program/run_slack_package_proof.py | 500 | if (targetMethod?.Name != nameof(IConversationsApi.Create) || args is null || args.Length < 3) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …nalAuthentication.Persistence.EFCore/efcore-initial.sh | 12 | # Define the list of providers | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.6.sh | 3 | # Define the modules to update | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.6.sh | 6 | # Define the list of providers | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.7.sh | 3 | # Define the modules to update | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.7.sh | 6 | # Define the list of providers | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.8.sh | 3 | # Define the modules to update. | COMMENT |
| MEDIUM | core/src/modules/Elsa.Persistence.EFCore/efcore-3.8.sh | 8 | # Define the list of providers | COMMENT |
| MEDIUM | .specify/scripts/bash/setup-plan.sh | 50 | # Create a basic plan file if template doesn't exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ROADMAP.md | 262 | - Productize the Studio copilot foundation that landed in [elsa-studio#900](https://github.com/elsa-workflows/elsa-studi | CODE |
| MEDIUM | core/docs/specs/001-shell-reload-api/tasks.md | 141 | # After T008 defines the US1 orchestration behavior: | COMMENT |
| MEDIUM | core/docs/specs/001-shell-reload-api/research.md | 11 | ## Decision 2: Introduce a shell reload orchestration service in the API module | COMMENT |
| MEDIUM | core/docs/specs/001-shell-reload-api/research.md | 43 | ## Decision 6: Keep endpoint request/response models collocated and move shared orchestration types into contracts | COMMENT |
| MEDIUM | core/docs/specs/002-graceful-shutdown/tasks.md | 93 | ### Contracts & orchestration | COMMENT |
| MEDIUM | core/docs/specs/008-weaver-ai-copilot/research.md | 12 | ## Decision: Elsa Server hosts Weaver orchestration | COMMENT |
| MEDIUM | …integration-program/secrets-collision-compatibility.md | 140 | - #8333 merged a bounded, synthetic default-tenant Workbench/Studio browser receipt for current Secrets management actio | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …vaScript.IntegrationTests/JsonElementConverterTests.cs | 84 | ""name"": ""John Doe"", | CODE |
| LOW | …vaScript.IntegrationTests/JsonElementConverterTests.cs | 87 | ""street"": ""123 Main St"", | CODE |
| LOW | …vaScript.IntegrationTests/JsonElementConverterTests.cs | 109 | ""contact"": { ""email"": ""john.doe@example.com"", ""phone"": ""555-1234"" } | CODE |
| LOW | …y/WorkflowDefinitionScriptAuthorizationServiceTests.cs | 135 | Root = new WriteLine("placeholder") | CODE |
| LOW | …y/WorkflowDefinitionScriptAuthorizationServiceTests.cs | 146 | Root = new WriteLine("placeholder") | CODE |
| LOW | …tionTests/Scenarios/JavaScriptNativeVariables/Tests.cs | 34 | Assert.Equal("Jane Doe", line1); | CODE |
| LOW | …ationTests/Scenarios/JavaScriptNativeVariables/Data.cs | 10 | customer.Name = "John Doe"; | CODE |
| LOW | …Tests/Scenarios/JavaScriptNativeVariables/Workflows.cs | 22 | customer.Name = 'Jane Doe'; | CODE |
| LOW | …ivities/Http/HttpEndpointQueryStringAndHeadersTests.cs | 41 | var encodedName = Uri.EscapeDataString("John Doe"); | CODE |
| LOW | …enarios/Activities/Http/HttpEndpointFileUploadTests.cs | 65 | var formFields = new[] { ("name", "John Doe") }; | CODE |
| LOW | …/Scenarios/Activities/Http/HttpEndpointContentTests.cs | 55 | [InlineData("John Doe", "john@example.com", "Name: John Doe", "Email: john@example.com")] | CODE |
| LOW | docs/integration-program/source-handoff-register.json | 9640 | "representedPortions": "Bogus35.6.5 already declared, not fake-data functionality.", | CODE |
| LOW | docs/integration-program/source-handoff-register.json | 9654 | "rationale": "Bogus35.6.5 already declared, not fake-data functionality. Remaining boundary: Four generators/base/ | CODE |
| LOW⚡ | …ripts/integration-program/test_package_proof_guards.py | 45 | tool.write_text("placeholder", encoding="utf-8") | CODE |
| LOW | …ripts/integration-program/test_dependabot_discovery.rb | 314 | base = Pathname.new(File.dirname(path)).join(match[2]).cleanpath.join("placeholder").to_s | CODE |
| LOW⚡ | …/integration-program/test_prepare_maintenance_build.py | 689 | for category in ['placeholder', 'runnable']: | CODE |
| LOW⚡ | …/integration-program/test_prepare_maintenance_build.py | 693 | path = paths[0] if category == 'placeholder' else paths[-1] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-20_workflow-instance-deletion_runtime-coordination.md | 144 | // Step 1: Delete running instances individually (requires coordination by the workflow runtime). | COMMENT |
| LOW | …-20_workflow-instance-deletion_runtime-coordination.md | 167 | // Step 2: Bulk delete finished instances (no coordination needed). | COMMENT |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 46 | // Step 1: Add a new temporary nullable column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 54 | // Step 2: Update the temporary column with converted values from the original column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 62 | // Step 3: Drop the original column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 68 | // Step 4: Rename the temporary column to the original column name | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 75 | // Step 5: Alter the new column to be non-nullable | STRING |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 42 | // Step 1: Run startup tasks (with dependency ordering) | COMMENT |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 45 | // Step 2: Run background tasks | COMMENT |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 48 | // Step 3: Start recurring tasks | COMMENT |
| LOW | …Api/Endpoints/WorkflowInstances/BulkDelete/Endpoint.cs | 31 | // Step 1: Delete running instances individually (requires coordination by the workflow runtime). | COMMENT |
| LOW | …Api/Endpoints/WorkflowInstances/BulkDelete/Endpoint.cs | 51 | // Step 2: Bulk delete finished instances (no coordination needed). | COMMENT |
| LOW | …Elsa.Mqtt.UnitTests/Services/MqttClientFactoryTests.cs | 12 | // NOTE: This method is not testable in a unit test because it actually attempts to connect with the created client. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 46 | // Step 1: Add a new temporary nullable column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 54 | // Step 2: Update the temporary column with converted values from the original column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 62 | // Step 3: Drop the original column | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 68 | // Step 4: Rename the temporary column to the original column name | STRING |
| LOW⚡ | …/Elsa.Persistence.EFCore.PostgreSql/MigrationHelper.cs | 75 | // Step 5: Alter the new column to be non-nullable | STRING |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 42 | // Step 1: Run startup tasks (with dependency ordering) | COMMENT |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 45 | // Step 2: Run background tasks | COMMENT |
| LOW⚡ | …ancy/Implementations/TenantTaskLifecycleCoordinator.cs | 48 | // Step 3: Start recurring tasks | COMMENT |
| LOW | …Api/Endpoints/WorkflowInstances/BulkDelete/Endpoint.cs | 31 | // Step 1: Delete running instances individually (requires coordination by the workflow runtime). | COMMENT |
| LOW | …Api/Endpoints/WorkflowInstances/BulkDelete/Endpoint.cs | 51 | // Step 2: Bulk delete finished instances (no coordination needed). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/pr.yml | 4 | # This code was generated. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …integration-program/test_mapped_slack_package_proof.py | 524 | def update_metadata(fixture: dict, *, source: str) -> None: | CODE |
| LOW⚡ | …integration-program/test_mapped_slack_package_proof.py | 531 | def update_asset_hash(fixture: dict, value: str) -> None: | CODE |
| LOW⚡ | …integration-program/test_mapped_slack_package_proof.py | 538 | def update_asset_identity(fixture: dict, version: str) -> None: | CODE |
| LOW⚡ | …integration-program/test_mapped_slack_package_proof.py | 546 | def update_cached_archive(fixture: dict, content: bytes) -> None: | CODE |
| LOW | …integration-program/test_mapped_slack_package_proof.py | 557 | def update_target_framework(fixture: dict) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …modules/Elsa.Dsl.ElsaScript/Parser/ElsaScriptParser.cs | 9 | /// ElsaScript parser using Parlot for robust parsing. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/integration-program/test_prepare_maintenance_build.py | 41 | CODE |