0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.1K

Stars

Language

1.3M

Lines of Code

5.6K

Files

777

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 705 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 69 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 9 finding(s).

PR Review Velocity Impact 3.3/100 · LOW

Which changes need focused human review? 777 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 9MEDIUM 12LOW 751

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 777 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block644 hits · 598 pts

Severity	File	Line	Snippet	Context
LOW	tools/linter/golangci-lint/.golangci-kal.yml	21	# (tracked in https://github.com/envoyproxy/gateway/issues/9683).	COMMENT
LOW	tools/linter/golangci-lint/.golangci-kal.yml	41	# - "minlength" # Strings, arrays and maps must declare whether empty is valid.	COMMENT
LOW	tools/hack/gwapi-doc-sync.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/boilerplate/boilerplate.py	1	#!/usr/bin/env python	COMMENT
LOW	tools/boilerplate/boilerplate.generatego.txt	1	// Copyright Envoy Gateway Authors	COMMENT
LOW	tools/boilerplate/verify-boilerplate.sh	1	#!/bin/bash	COMMENT
LOW	tools/boilerplate/boilerplate.go.txt	1	// Copyright Envoy Gateway Authors	COMMENT
LOW	test/config/helm/remote-infra-mode.yaml	1	# Helm values used when running the remote-infra e2e suite. The test flips the	COMMENT
LOW	…/httproute-with-dynamic-resolver-backend-with-tls.yaml	61	# cat > openssl.conf <<EOF	COMMENT
LOW	test/e2e/testdata/request-buffer-limit-only.yaml	1	# This manifest exercises the BackendTrafficPolicy requestBuffer field with mode LimitOnly.	COMMENT
LOW	test/e2e/testdata/backend-tls-settings.yaml	81	# 0lTVtFHPAgMBAAECggEAFoT8GjTMPS0vqpHxKV5nUbH5x6ygsAFYF8IN03o/oil4	COMMENT
LOW	test/e2e/testdata/client-mtls.yaml	81	group: ""	COMMENT
LOW	…2e/testdata/grpc-json-transcoder-invalid-bindings.yaml	41	valueRef:	COMMENT
LOW	…2e/testdata/grpc-json-transcoder-invalid-bindings.yaml	261	- transcoder.invalid.v1.InvalidTemplate	COMMENT
LOW	…2e/testdata/grpc-json-transcoder-invalid-bindings.yaml	281	# service InvalidResponseBody {	COMMENT
LOW	test/e2e/remote_infra/sidecar-patch.yaml	1	# Strategic merge patch that injects the remote-infra recording server as a	COMMENT
LOW	test/e2e/tests/authorization_jwt.go	21	)	COMMENT
LOW	test/e2e/tests/authorization_jwt.go	41	// "sub": "1234567890",	COMMENT
LOW	test/e2e/tests/utils.go	861	return total, nil	COMMENT
LOW	test/e2e/tests/utils.go	921		COMMENT
LOW	test/e2e/tests/oidc_testclient.go	1	// Copyright Envoy Gateway Authors	COMMENT
LOW	internal/metrics/metadata.go	21	// MetricType is the type of a metric.	COMMENT
LOW	internal/cmd/server.go	221	// It fetches the resources from the configured provider type	COMMENT
LOW	internal/traces/phase/tracker.go	21	// Tracker records one child span per phase of a long, sequential operation such as a	COMMENT
LOW	internal/extension/types/hooks.go	21	// for a single-server client this is 1 after the RPC is attempted or 0 for	COMMENT
LOW	internal/extension/types/hooks.go	41	// This allows extensions to modify cluster configurations for custom backend types while letting Envoy Gateway	COMMENT
LOW	internal/extension/types/hooks.go	61	// PostHTTPListenerModifyHook is always executed when an extension is loaded. An extension may return nil	COMMENT
LOW	internal/extension/types/manager.go	21	// return true, otherwise return false.	COMMENT
LOW	internal/ir/xds.go	181	// HTTP listeners exposed by the gateway.	COMMENT
LOW	internal/ir/xds.go	401	// HTTPListener holds the listener configuration.	COMMENT
LOW	internal/ir/xds.go	421	// Headers configures special header management for the listener	COMMENT
LOW	internal/ir/xds.go	541	// Certificates contains the set of certificates associated with this listener	COMMENT
LOW	internal/ir/xds.go	581	// StatefulSessionResumption determines if stateful (session-id based) session resumption is enabled	COMMENT
LOW	internal/ir/xds.go	661	// TLSCACertificate holds CA Certificate to validate clients	COMMENT
LOW	internal/ir/xds.go	781	// If set to true, the listener will accept requests without a Proxy Protocol header.	COMMENT
LOW	internal/ir/xds.go	1041	// EnableEnvoyHeaders controls if "x-envoy-" headers are added by the HTTP Router filter.	COMMENT
LOW	internal/ir/xds.go	1061	// is encountered. The default action is to reject the request.	COMMENT
LOW	internal/ir/xds.go	1101	// If this expires before the transport reports connection establishment, the connection is summarily closed.	COMMENT
LOW	internal/ir/xds.go	1121	// The stream idle timeout for connections managed by the connection manager.	COMMENT
LOW	internal/ir/xds.go	1161	Mirrors []*MirrorPolicy `json:"mirrors,omitempty" yaml:"mirrors,omitempty"`	COMMENT
LOW	internal/ir/xds.go	1281	// It is only set when Type is Gzip and at least one setting is specified.	COMMENT
LOW	internal/ir/xds.go	1301	// AdmissionControl defines the schema for admission control based on success rate.	COMMENT
LOW	internal/ir/xds.go	1321	// +optional	COMMENT
LOW	internal/ir/xds.go	1481	type UnstructuredRef struct {	COMMENT
LOW	internal/ir/xds.go	1521	// AllowCredentials indicates whether a request can include user credentials.	COMMENT
LOW	internal/ir/xds.go	1581	// This field must be enabled if the headers generated from the claim are used for	COMMENT
LOW	internal/ir/xds.go	1601		COMMENT
LOW	internal/ir/xds.go	1681		COMMENT
LOW	internal/ir/xds.go	1741		COMMENT
LOW	internal/ir/xds.go	1761	//	COMMENT
LOW	internal/ir/xds.go	1781		COMMENT
LOW	internal/ir/xds.go	1801	//	COMMENT
LOW	internal/ir/xds.go	1821	type ExtAuth struct {	COMMENT
LOW	internal/ir/xds.go	1841	// All headers will be included in the check request to a gRPC authorization server.	COMMENT
LOW	internal/ir/xds.go	1861	// Otherwise, if it is set to false or not set (defaulting to false),	COMMENT
LOW	internal/ir/xds.go	1881	// extension mechanism for sending additional information to the auth server	COMMENT
LOW	internal/ir/xds.go	1901		COMMENT
LOW	internal/ir/xds.go	1941	// Note that coexisting headers will be overridden.	COMMENT
LOW	internal/ir/xds.go	2081	// MinSuccessRate is the lowest request success rate, as a percentage in the	COMMENT
LOW	internal/ir/xds.go	2121		COMMENT
584 more matches not shown…

Hallucination Indicators5 hits · 70 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	…ls/benchmark-dashboard/src/components/ResourcesTab.tsx	30	gatewayMean: Number(item.resources.envoyGateway.cpu.mean.toFixed(1)),	CODE
CRITICAL⚡	…ls/benchmark-dashboard/src/components/ResourcesTab.tsx	31	gatewayMax: Number(item.resources.envoyGateway.cpu.max.toFixed(1)),	CODE
CRITICAL⚡	…ls/benchmark-dashboard/src/components/ResourcesTab.tsx	32	proxyMean: Number(item.resources.envoyProxy.cpu.mean.toFixed(1)),	CODE
CRITICAL⚡	…ls/benchmark-dashboard/src/components/ResourcesTab.tsx	33	proxyMax: Number(item.resources.envoyProxy.cpu.max.toFixed(1))	CODE
CRITICAL	site/static/js/hugo-benchmark-dashboard.js	284	`)}}):null},or=Yn,Fn=k.forwardRef(({active:e,payload:t,className:n,indicator:r="dot",hideLabel:a=!1,hideIndicator:o=!1,l	CODE

Fake / Example Data55 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	test/benchmark/config/nighthawk-test-server-config.yaml	3	# define an origin server on :10000 that always returns "lorem ipsum..."	COMMENT
LOW	test/e2e/testdata/authorization-jwt.yaml	78	values: ["John Doe"]	CODE
LOW	test/e2e/testdata/authorization-jwt.yaml	138	values: ["John Doe"]	CODE
LOW	test/e2e/tests/authorization_jwt.go	27	// "name": "John Doe",	COMMENT
LOW	test/e2e/tests/jwt.go	37	// claim: {"sub":"1234567890","name":"John Doe","https://example.com/claims/tenant_name":"acme","admin":true,"iat":1516	COMMENT
LOW	…ficpolicy-mtls-client-verification-expired-crl.in.yaml	98	- {type: Suffix, value: "@example.org"}	CODE
LOW	…/clienttrafficpolicy-mtls-client-verification.out.yaml	86	value: '@example.org'	CODE
LOW	…/clienttrafficpolicy-mtls-client-verification.out.yaml	1005	suffix: '@example.org'	CODE
LOW	…/clienttrafficpolicy-mtls-client-verification.out.yaml	1038	suffix: '@example.org'	CODE
LOW	…a/clienttrafficpolicy-mtls-client-verification.in.yaml	94	- {type: Suffix, value: "@example.org"}	CODE
LOW	…icpolicy-mtls-client-verification-expired-crl.out.yaml	86	value: '@example.org'	CODE
LOW	…icpolicy-mtls-client-verification-expired-crl.out.yaml	750	suffix: '@example.org'	CODE
LOW	…icpolicy-mtls-client-verification-expired-crl.out.yaml	783	suffix: '@example.org'	CODE
LOW	…ranslator/testdata/in/xds-ir/tracing-otel-headers.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…/testdata/in/xds-ir/tracing-unknown-provider-type.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…xds/translator/testdata/in/xds-ir/tracing-invalid.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…translator/testdata/in/xds-ir/tracing-datadog-uds.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…testdata/in/xds-ir/tracing-otel-sampler-always-on.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…/xds/translator/testdata/in/xds-ir/tracing-zipkin.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	internal/xds/translator/testdata/in/xds-ir/tracing.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…xds/translator/testdata/in/xds-ir/tracing-datadog.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	…/xds/translator/testdata/in/xds-ir/mutual-tls-san.yaml	73	suffix: '@example.org'	CODE
LOW	…/xds/translator/testdata/in/xds-ir/mutual-tls-san.yaml	112	suffix: '@example.org'	CODE
LOW	…nslator/testdata/in/xds-ir/tracing-endpoint-stats.yaml	4	serviceName: "fake-name.fake-ns"	CODE
LOW	…ranslator/testdata/in/xds-ir/tracing-otel-sampler.yaml	2	serviceName: "fake-name.fake-ns"	CODE
LOW	site/content/en/v0.5/design/rate-limit.md	218	to a specific route by matching on the jwt claim. In this case, requests with jwt claim information of `{"name":"John Do	CODE
LOW	…tent/en/v1.9/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.9/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.9/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.7/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.7/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.7/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…nt/en/latest/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…nt/en/latest/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…nt/en/latest/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.6/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.6/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.6/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.8/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.8/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.8/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	site/content/en/v0.6/design/rate-limit.md	238	to a specific route by matching on the jwt claim. In this case, requests with jwt claim information of `{"name":"John Do	CODE
LOW	site/content/en/community/design/rate-limit.md	238	to a specific route by matching on the jwt claim. In this case, requests with jwt claim information of `{"name":"John Do	CODE
LOW	…tent/en/v1.4/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.4/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.4/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.3/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.3/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.3/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.2/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.2/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.2/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE
LOW	…tent/en/v1.5/tasks/security/jwt-claim-authorization.md	57	values: ["John Doe"]	CODE
LOW	…tent/en/v1.5/tasks/security/jwt-claim-authorization.md	96	values: ["John Doe"]	CODE
LOW	…tent/en/v1.5/tasks/security/jwt-claim-authorization.md	144	"name": "John Doe",	CODE

Structural Annotation Overuse28 hits · 44 pts

Severity	File	Line	Snippet	Context
LOW	internal/gatewayapi/envoyproxy_merge.go	19	// Step 1 - Gateway over GatewayClass:	COMMENT
LOW	internal/gatewayapi/envoyproxy_merge.go	24	// Step 2 - Step 1 result over EnvoyGateway defaults:	COMMENT
LOW⚡	internal/gatewayapi/envoyproxy_merge.go	46	// Step 1: Merge Gateway over GatewayClass. Gateway's MergeType controls this step.	COMMENT
LOW⚡	internal/gatewayapi/envoyproxy_merge.go	52	// Step 2: Merge Step 1 result over EnvoyGateway defaults. GatewayClass's MergeType controls	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	56	## Step 1: Enable the Backend extension API	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	88	## Step 2: Create the OPA policy	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	119	## Step 3: Configure the Envoy Proxy pods to have an OPA sidecar	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	256	## Step 4: Connect Envoy to OPA with a SecurityPolicy and Backend	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	312	## Step 5: Configure route to use the OPA authorization	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	341	## Step 6: Test the configuration	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	56	## Step 1: Enable the Backend extension API	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	88	## Step 2: Create the OPA policy	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	119	## Step 3: Configure the Envoy Proxy pods to have an OPA sidecar	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	256	## Step 4: Connect Envoy to OPA with a SecurityPolicy and Backend	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	312	## Step 5: Configure route to use the OPA authorization	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	341	## Step 6: Test the configuration	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	56	## Step 1: Enable the Backend extension API	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	88	## Step 2: Create the OPA policy	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	119	## Step 3: Configure the Envoy Proxy pods to have an OPA sidecar	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	256	## Step 4: Connect Envoy to OPA with a SecurityPolicy and Backend	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	312	## Step 5: Configure route to use the OPA authorization	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	341	## Step 6: Test the configuration	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	56	## Step 1: Enable the Backend extension API	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	88	## Step 2: Create the OPA policy	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	119	## Step 3: Configure the Envoy Proxy pods to have an OPA sidecar	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	256	## Step 4: Connect Envoy to OPA with a SecurityPolicy and Backend	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	312	## Step 5: Configure route to use the OPA authorization	COMMENT
LOW	…/tasks/extensibility/opa-sidecar-unix-domain-socket.md	341	## Step 6: Test the configuration	COMMENT

Magic Placeholder Names8 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH	…ent/en/v1.9/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.7/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…t/en/latest/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.6/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.8/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.4/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.3/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE
HIGH	…ent/en/v1.5/tasks/observability/gateway-api-metrics.md	106	export GRAFANA_API_KEY="your-api-key"	CODE

Self-Referential Comments7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/boilerplate/boilerplate.py	17	# This file is copied from https://github.com/kubernetes/kubernetes/blob/04c2b1fbdc1289c9a72eda87cf7072346e60d241/hack/b	COMMENT
MEDIUM	test/fuzz/oss_fuzz_build.sh	8	# This file contains code derived from Istio, https://github.com/istio/istio	COMMENT
MEDIUM	test/e2e/upgrade/manifests.yaml	2	# This file contains limited base resources that are required for upgrade tests	COMMENT
MEDIUM	test/e2e/base/manifests.yaml	2	# This file contains the base resources that most conformance tests will rely	COMMENT
MEDIUM	internal/gatewayapi/testdata/base/base.yaml	1	# This file contains the base configuration shared by all tests. So we don't need to repeat it in each test.	COMMENT
MEDIUM	examples/kubernetes/http-routing.yaml	1	# This file contains the base resources that the docs/user/HTTP_ROUTING.md guide relies on.	COMMENT
MEDIUM	examples/kubernetes/udp-routing-example-backend.yaml	1	# This file contains the CoreDNS example for UDPRoute testing.	COMMENT

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/hack/gwapi-doc-sync.sh	53	# Drop the upstream test harness directives.	COMMENT
MEDIUM	site/static/js/hugo-benchmark-dashboard.js	33	*/var NO=k,rn=$O;function U(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.len	COMMENT
MEDIUM	site/static/js/hugo-benchmark-dashboard.js	33	*/var NO=k,rn=$O;function U(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.len	COMMENT

Verbosity Indicators5 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	internal/gatewayapi/backendtlspolicy.go	101	// If the backendRef is a Backend resource, we need to check if it has TLS settings.	COMMENT
LOW⚡	internal/gatewayapi/envoyproxy_merge.go	46	// Step 1: Merge Gateway over GatewayClass. Gateway's MergeType controls this step.	COMMENT
LOW⚡	internal/gatewayapi/envoyproxy_merge.go	52	// Step 2: Merge Step 1 result over EnvoyGateway defaults. GatewayClass's MergeType controls	COMMENT
LOW	…ternal/infrastructure/kubernetes/ratelimit/resource.go	533	// we need to check if the user has configured this	COMMENT
LOW	.github/workflows/build_and_test.yaml	334	# So we need to check if this is a pull request and changes.	COMMENT

Slop Phrases4 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/e2e/testdata/client-mtls-trustbundle.yaml	44	# To generate a client certificate, you can use the following commands:	COMMENT
LOW	internal/xds/translator/httpfilters.go	99	// Important: After adding new filter types, don't forget to modify the validation rule of the EnvoyFilter type in the	COMMENT
LOW	internal/xds/translator/httpfilters.go	289	// Important: don't forget to set the order for newly added filters in the	COMMENT
LOW	internal/xds/translator/httpfilters.go	295	// Important: don't forget to set the order for new filters in the	COMMENT

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	tools/hack/create-cluster.sh	67	## Check if kind cluster already exists.	COMMENT
LOW	tools/hack/go-benchmark-compare.sh	169	# Display results	COMMENT
LOW	tools/hack/check-release-notes-filenames.sh	14	# Check if release-notes directory exists	COMMENT
LOW	.github/workflows/build_and_test.yaml	20	# Check if there are changes that require running the test jobs	COMMENT

Hyper-Verbose Identifiers6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	site/tools/benchmark-dashboard/src/main.tsx	11	function initializeBenchmarkDashboardShadow() {	CODE
LOW	site/tools/benchmark-dashboard/src/main.tsx	70	function waitForSafeInitialization() {	CODE
LOW	…/tools/benchmark-dashboard/src/components/ui/chart.tsx	318	function getPayloadConfigFromPayload(	CODE
LOW	…/benchmark-dashboard/src/data/benchmarkDataTemplate.ts	253	export function generatePerformanceSummary(results: TestResult[]) {	CODE
LOW	…/benchmark-dashboard/src/data/benchmarkDataTemplate.ts	265	export function generateLatencyPercentileComparison(results: TestResult[]) {	CODE
LOW	…/benchmark-dashboard/src/data/benchmarkDataTemplate.ts	289	export function generatePerformanceMatrix(results: TestResult[]) {	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	tools/src/release-notes-docs/yml2md.py	16	except ValueError:	CODE

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	tools/boilerplate/boilerplate.py	80	except Exception as exc:	CODE
MEDIUM	tools/boilerplate/boilerplate.py	77	def file_passes(filename, refs, regexs):	CODE

TODO Padding2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	internal/gatewayapi/listenerset.go	156	case anyListenerAccepted: // TODO: implement PartiallyInvalid conditions when Gateway API supports it	CODE
LOW	…frastructure/kubernetes/ratelimit/resource_provider.go	322	// TODO: implement this method	COMMENT

Deep Nesting2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tools/boilerplate/boilerplate.py	190		CODE
LOW	tools/src/release-notes-docs/yml2md.py	32		CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	tools/boilerplate/boilerplate.py	19		CODE

envoyproxy/gateway

Open-Source Code Quality, Security and Technical Debt Review