Open device management
This report presents the forensic synthetic code analysis of fleetdm/fleet, a Go project with 6,581 GitHub stars. SynthScan v2.0 examined 2,036,273 lines of code across 13171 source files, recording 3821 pattern matches distributed across 21 syntactic categories. The overall adjusted score of 2.5 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3821 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .eslintrc.js | 61 | "import/no-extraneous-dependencies": 0, | COMMENT |
| LOW | cmd/osquery-perf/agent.go | 481 | // for the subset of macOS MDM agents selected for PSSO (see pssoParams.prob) | COMMENT |
| LOW | cmd/osquery-perf/agent.go | 561 | scheduledQueryData *sync.Map | COMMENT |
| LOW | cmd/maintained-apps/validate/windows.go | 141 | // Only exempt genuine Office products (e.g. "Microsoft 365 Apps for | COMMENT |
| LOW | cmd/osv-processor/transforms.go | 21 | // CVE-specific modifications: modify vulnerability details for specific CVEs | COMMENT |
| LOW | cmd/osv-processor/sync-and-detect-changes.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | cmd/osv-processor/main.go | 561 | // runRHEL. | COMMENT |
| LOW | cmd/fleetctl/fleetctl/gitops_test.go | 661 | cs2, ok := customSCEPByName["CustomScepProxy2"] | COMMENT |
| LOW | cmd/fleetctl/fleetctl/gitops_test.go | 681 | // // check hydrant | COMMENT |
| LOW | cmd/fleetctl/fleetctl/gitops_test.go | 1781 | COMMENT | |
| LOW | cmd/fleetctl/fleetctl/apply_test.go | 3021 | // // setup app config | COMMENT |
| LOW | cmd/fleetctl/fleetctl/apply_test.go | 3041 | // name = writeTmpYml(t, fmt.Sprintf(appConfigSpecEnableEndUserAuth, "false")) | COMMENT |
| LOW | cmd/fleetctl/fleetctl/apply_test.go | 3061 | // _, err = runAppNoChecks([]string{"apply", "-f", name}) | COMMENT |
| LOW | cmd/fleetctl/fleetctl/apply_deprecated_test.go | 1361 | // assert.YAMLEq(t, expectedNotSetAppConfg, runAppForTest(t, []string{"get", "config", "--yaml"})) | COMMENT |
| LOW | cmd/fleetctl/fleetctl/apply_deprecated_test.go | 1381 | // assert.False(t, ds.GetMDMAppleBootstrapPackageMetaFuncInvoked) | COMMENT |
| LOW | cmd/fleetctl/fleetctl/apply_deprecated_test.go | 1401 | // assert.False(t, ds.InsertMDMAppleBootstrapPackageFuncInvoked) | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 1 | # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 21 | # Read more: | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 41 | # • https://fleetdm.com/docs/deploy/single-sign-on-sso | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 61 | COMMENT | |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 81 | # • https://fleetdm.com/guides/apple-mdm-setup#volume-purchasing-program-vpp | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 101 | # macos_migration: | COMMENT |
| LOW | …d/fleetctl/fleetctl/templates/new/default.template.yml | 121 | # from "x86 macs" to "finance department" to "needs new battery". | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 1 | # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 21 | setup_experience: | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 41 | # • https://fleetdm.com/docs/configuration/yaml-files#apple-settings-and-windows-settings | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 61 | # • https://fleetdm.com/docs/configuration/yaml-files#ipados-updates | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 81 | # display_name: "Slack" | COMMENT |
| LOW | …plates/new/fleets/personal-mobile-devices.template.yml | 101 | ########################################################### | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 1 | # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 21 | # Configure the macOS setup experience | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 41 | # | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 61 | # labels_include_any: | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 81 | # | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 101 | # update_new_hosts: true | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 121 | COMMENT | |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 141 | # | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 161 | ########################################################### | COMMENT |
| LOW | …leetctl/templates/new/fleets/workstations.template.yml | 181 | # labels_include_any: | COMMENT |
| LOW | …/templates/new/.github/workflows/workflow.template.yml | 41 | with: | COMMENT |
| LOW | …/templates/new/.github/workflows/workflow.template.yml | 61 | ########################################################### | COMMENT |
| LOW | cmd/fleet/serve_boot_test.go | 121 | // The test does not run in parallel: it swaps the package-global initFatal and | COMMENT |
| LOW | cmd/fleet-mcp/schema.go | 361 | // flag the common bug class of comparing a TEXT column against a bare integer | COMMENT |
| LOW | cmd/fleet-mcp/mcp_server.go | 1 | package main | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1101 | return ids, nil | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1221 | if err != nil { | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1241 | // combined, we fetch both sets and intersect by host ID. | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1501 | PolicyName: result.Policy.Name, | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1561 | // → list of software titles affected by the CVE (in the team if scoped). | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1821 | } | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 2061 | }, nil | COMMENT |
| LOW | cmd/fleet-mcp/main.go | 41 | _, _ = w.Write([]byte("ok\n")) | COMMENT |
| LOW | orbit/cmd/orbit/orbit.go | 1901 | fleetURL string | COMMENT |
| LOW | orbit/cmd/desktop/desktop.go | 141 | // swiftDialogCh is a channel shared by the migrator and the offline watcher to | COMMENT |
| LOW | orbit/cmd/desktop/desktop.go | 681 | log.Error().Err(err).Msg("write to stderr file") | COMMENT |
| LOW | orbit/pkg/token/readwriter.go | 141 | COMMENT | |
| LOW | orbit/pkg/backoff/backoff.go | 1 | // Package backoff provides a stateful exponential backoff tracker for | COMMENT |
| LOW | orbit/pkg/packaging/packaging.go | 41 | // Insecure enables insecure TLS connections for the generated package. | COMMENT |
| LOW | orbit/pkg/packaging/packaging.go | 61 | // This may be required when using TLS client authentication for connecting to Fleet via a proxy. | COMMENT |
| LOW | orbit/pkg/packaging/packaging.go | 81 | UpdateTLSServerCertificate string | COMMENT |
| 1455 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/release/publish_release.sh | 214 | # Check if `grep` supports the `-P` option by using it in a no-op search. | COMMENT |
| LOW | tools/release/publish_release.sh | 281 | # Check if the formatted date matches the expected date format | COMMENT |
| LOW | tools/release/publish_release.sh | 296 | # Check if `ggrep` is available | COMMENT |
| LOW | tools/loadtest/metrics/compare-metrics.sh | 390 | # Check if this metric exists in at least the last two files | COMMENT |
| LOW | tools/loadtest/scripts_and_profiles/main.go | 179 | # Check if curl is available | COMMENT |
| LOW | tools/loadtest/scripts_and_profiles/main.go | 259 | # Check if file exists and is not empty | COMMENT |
| LOW | tools/loadtest/scripts_and_profiles/main.go | 270 | # Check if file is executable format (basic check) | COMMENT |
| LOW | tools/loadtest/scripts_and_profiles/main.go | 359 | # Check if extensions.load file exists | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 30 | # Check if a string is a valid JavaScript identifier | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 34 | # Check if it matches the pattern: starts with letter/underscore/dollar, followed by letters/digits/underscore/dollar | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 95 | # Check if import already exists | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 129 | # Check if we should insert before this first import | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 192 | # Check if map entry already exists (check for both quoted and unquoted keys) | COMMENT |
| LOW | tools/software/icons/generate-icons.sh | 222 | # Check if this is a map entry (has a colon) | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1999 | # Check if SSH is reachable. If not (e.g., a previous test | STRING |
| LOW | tools/cis/cis-test-runner.py | 2020 | # Check if the agent is installed and the host is in Fleet | STRING |
| LOW | tools/cis/cis-test-runner.py | 2117 | # Check if the host is already MDM-enrolled; if so, skip | STRING |
| LOW | ee/server/service/embedded_scripts/linux_lock.sh | 58 | # Set flag to reboot after creating lock files | COMMENT |
| LOW | ee/server/service/embedded_scripts/linux_unlock.sh | 49 | # Check if we switched to text mode during lock and restore GUI if needed | COMMENT |
| LOW⚡ | ee/maintained-apps/script-diff.sh | 5 | # Check if file path is provided | COMMENT |
| LOW⚡ | ee/maintained-apps/script-diff.sh | 13 | # Check if file exists | COMMENT |
| LOW⚡ | ee/maintained-apps/script-diff.sh | 19 | # Check if we're in a git repository | COMMENT |
| LOW | ee/maintained-apps/ingesters/homebrew/scripts.go | 670 | # Check if the app was running before installation | COMMENT |
| LOW | ee/maintained-apps/outputs/forecast/darwin.json | 20 | "87bc838d": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/kap/darwin.json | 19 | "82a1d5cd": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/usage-app/darwin.json | 19 | "85b735d2": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/texshop/darwin.json | 20 | "99dd4af9": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/devtoys/darwin.json | 19 | "2e2640ac": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/openrefine/darwin.json | 19 | "0c28d24c": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/i1profiler/darwin.json | 20 | "fa8f4b2a": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/beyond-compare/darwin.json | 20 | "5fca1cb5": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/netspot/darwin.json | 20 | "bf337d03": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/firefox/darwin.json | 19 | "b5e4c76e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/pd/darwin.json | 20 | "8a005b0c": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/cryptomator/darwin.json | 19 | "04e0f825": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/bricklink-studio/darwin.json | 20 | "491b9b39": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/smoothscroll/darwin.json | 19 | "2181d828": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/default-folder-x/darwin.json | 20 | "67a369f4": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/ok-json/darwin.json | 19 | "b2a6fb6e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/knime/darwin.json | 19 | "3c077491": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/neofinder/darwin.json | 19 | "586a3071": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/granola/darwin.json | 20 | "89a55638": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/wispr-flow/darwin.json | 19 | "3a49fcfd": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/command-tab-plus/darwin.json | 20 | "e8f1ed6a": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/glyphs/darwin.json | 19 | "a5e9ac58": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/nextcloud/darwin.json | 20 | "c18d4d3b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | …intained-apps/outputs/microsoft-powerpoint/darwin.json | 20 | "fc3e906d": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/abstract/darwin.json | 20 | "ca022a22": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/windowkeys/darwin.json | 19 | "19a9b28d": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/spokenly/darwin.json | 19 | "5f8295ce": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/markedit/darwin.json | 19 | "7274248d": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/beeper/darwin.json | 20 | "a73050ea": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/qlmarkdown/darwin.json | 19 | "038ce2fa": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/scrivener/darwin.json | 19 | "da6d93c4": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/meetingbar/darwin.json | 19 | "1fe9317d": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/emclient/darwin.json | 19 | "82810e95": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/chime/darwin.json | 20 | "81d243ad": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/microsoft-teams/darwin.json | 20 | "9842434b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/kaleidoscope/darwin.json | 19 | "a22b7c23": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| LOW | ee/maintained-apps/outputs/onionshare/darwin.json | 19 | "17c365cb": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\ | CODE |
| 978 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/mdm/test-batch-profiles.sh | 3 | #-------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/mdm/test-batch-profiles.sh | 7 | #-------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/mdm/make_cfg_profiles.sh | 3 | # ---------------------------------------------------- | COMMENT |
| MEDIUM | tools/mdm/make_cfg_profiles.sh | 5 | # ---------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/release/publish_release.sh | 625 | # ====================================== | COMMENT |
| MEDIUM⚡ | tools/release/publish_release.sh | 627 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 106 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 108 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 183 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 185 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 319 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 321 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 734 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 736 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 772 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 774 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 914 | # ====================================== | COMMENT |
| MEDIUM | tools/release/publish_release.sh | 916 | # ====================================== | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 26 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 137 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 144 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/loadtest/metrics/collect-metrics.sh | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 110 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 304 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 306 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 398 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 467 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 487 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 489 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 536 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 538 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 575 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 577 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 702 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 710 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 727 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 729 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 773 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 775 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 840 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 844 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 893 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 903 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 957 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 961 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1075 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1081 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1103 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1123 | # ------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1220 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1222 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1405 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/collect-metrics.sh | 1426 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/compare-metrics.sh | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/loadtest/metrics/compare-metrics.sh | 38 | # --------------------------------------------------------------------------- | COMMENT |
| 282 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/osquery-perf/software-library/README.md | 110 | ### Step 1: Initialize database from software.sql | COMMENT |
| LOW | cmd/osquery-perf/software-library/README.md | 118 | ### Step 2: Export server data | COMMENT |
| LOW | cmd/osquery-perf/software-library/README.md | 160 | ### Step 3: Import server data | COMMENT |
| LOW | cmd/osquery-perf/software-library/README.md | 174 | ### Step 4: Generate software.sql | COMMENT |
| LOW | cmd/osquery-perf/software-library/README.md | 185 | ### Step 5: Verify | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 786 | // Step 1: Create a CA and a team with a certificate template referencing it via GitOps. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 851 | // Step 2: Run gitops removing the CA but WITHOUT the team file. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 882 | // Step 3: Run gitops removing BOTH the CA and the certificate template. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2330 | // Step 1: Apply a manual label with hosts. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2359 | // Step 2: Re-apply the same label without the hosts key. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2386 | // Step 3: Re-apply with empty hosts to clear membership. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 4901 | // Step 1: Apply a full global config with policies, agent_options, controls, and reports. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 4962 | // Step 2: Apply a minimal global config that omits policies, agent_options, reports, labels. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 5158 | // Step 1: Apply a full fleet config with policies, agent_options, controls, features, reports, and software. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 5228 | // Step 2: Apply a minimal fleet config that omits policies, agent_options, controls, reports, software, settings. | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 160 | // Step 3: return more hosts than the cap (set to 5 above) so the | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 170 | // Step 2: one version per title. | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 177 | // Step 1: one title, short page → stop. | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1598 | // Step 1: software titles affected by this CVE (optionally team-scoped). | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1651 | // Step 2: per title, fetch detail to get version IDs. | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1695 | // Step 3: per version_id, fetch hosts with composing filters server-side. | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 71 | // Step 1: generate a recovery key. snapd answers synchronously with the key | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 86 | // Step 2: enroll the generated key under the Fleet-owned name (a name-only | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 115 | // Step 3: validate the freshly enrolled key before escrowing it, mirroring | COMMENT |
| LOW | tools/ci/helm-values/logger-pubsub.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/enable-mysql-tls.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/disable-fleet-tls.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/logger-firehose-sts.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/logger-firehose-accesssid.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/custom-annotations.yaml | 28 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW | tools/ci/helm-values/enable-cloudsql-proxy.yaml | 25 | # WARNING: This may cause database corruption if more than one migration is attempted at a time | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 462 | // Step 1: Add to drafting | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 470 | // Step 2: Add :product | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 474 | // Step 3: Set status to confirm and celebrate | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 482 | // Step 4: Remove :release | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1251 | # Step 1: remove profile → query should poll to False | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1271 | # Step 2: re-install profile → query should poll to True | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1371 | # Step 1: Push enable profile, poll: enable passes + disable fails | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1394 | # Step 2: Push disable profile, poll: disable passes + enable fails | COMMENT |
| LOW⚡ | tools/dibble/pkg/command/wizard.go | 29 | // Step 1: resolve config (URL + token), prompting only for what's missing. | COMMENT |
| LOW⚡ | tools/dibble/pkg/command/wizard.go | 39 | // Step 2: ping. Fail fast so the user knows their config is wrong before | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 72 | // Step 3: theme picker. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 90 | // Step 4: persist final config (URL, token, theme, insecure) if we | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 111 | // Step 5: entity multi-select. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 162 | // Step 6: counts. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 185 | // Step 7: run. | COMMENT |
| LOW | …ontend/pages/admin/OrgSettingsPage/cards/Info/Info.tsx | 264 | // Step 1: org_info PATCH. Errors here surface as an org-info | COMMENT |
| LOW | …ained-apps/outputs/omnissa-horizon-client/windows.json | 20 | "c624ea6f": "# Locates Omnissa Horizon Client's uninstaller from the registry and runs it\n# silently.\n#\n# Omnissa | CODE |
| LOW | ee/cis/prompt.md | 40 | ### Step 0: If this is a new OS version, scaffold and register it first | COMMENT |
| LOW | ee/cis/prompt.md | 56 | ### Step 1: Extract the changelog | COMMENT |
| LOW | ee/cis/prompt.md | 73 | ### Step 2: Read affected sections | COMMENT |
| LOW | ee/cis/prompt.md | 89 | ### Step 3: Generate policy YAML | COMMENT |
| LOW | ee/cis/prompt.md | 107 | ### Step 4: Generate test artifacts | COMMENT |
| LOW | ee/cis/prompt.md | 124 | ### Step 5: Generate MDM profiles | COMMENT |
| LOW⚡ | ee/cis/prompt.md | 137 | ### Step 6: Update README.md | COMMENT |
| LOW⚡ | ee/cis/prompt.md | 143 | ### Step 7: Handle removals | COMMENT |
| LOW⚡ | ee/cis/prompt.md | 149 | ### Step 8: Validate | COMMENT |
| LOW | …ticles/enrolling-linux-devices-for-fleet-management.md | 19 | ### Step 1 - Verify the prerequisites | COMMENT |
| LOW | …ticles/enrolling-linux-devices-for-fleet-management.md | 35 | ### Step 2 - Create the agent package | COMMENT |
| LOW | …ticles/enrolling-linux-devices-for-fleet-management.md | 64 | ### Step 3 - Install the agent package | COMMENT |
| 264 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CHANGELOG.md | 44 | - Showed the end user's IdP full name (e.g. "Jane Doe's device") on the My device page header and browser tab when avail | CODE |
| LOW | cmd/fleetctl/fleetctl/gitops_test.go | 264 | ImpersonatedUserEmail: "admin@example.com", | CODE |
| LOW | cmd/fleetctl/fleetctl/preview.go | 326 | email = "admin@example.com" | CODE |
| LOW | orbit/pkg/profiles/profiles_darwin_test.go | 232 | {"happy path", withFleetdConfigAndEnrollment, "user@example.com", nil}, | CODE |
| LOW | orbit/pkg/profiles/profiles_darwin_test.go | 251 | require.Equal(t, "user@example.com", gotContent) | CODE |
| LOW | orbit/pkg/profiles/profiles_darwin_test.go | 579 | require.Equal(t, *e, fleet.MDMCustomEnrollmentProfileItem{EndUserEmail: "user@example.com"}) | CODE |
| LOW | orbit/pkg/profiles/profiles_darwin_test.go | 588 | require.Equal(t, "user@example.com", v) | CODE |
| LOW | tools/upgrade/fleet_test.go | 140 | token, err := client.Setup("admin@example.com", "Admin", "password123#", "Fleet Test") | CODE |
| LOW | …ls/hangar/frontend/src/components/tabs/FleetctlTab.tsx | 853 | placeholder="admin@example.com" | CODE |
| LOW | tools/dibble/pkg/seed/activities.go | 111 | return tag + "user@example.com" | CODE |
| LOW | tools/dibble/pkg/seed/activities.go | 113 | return tag + "user@example.com" | CODE |
| LOW | frontend/__mocks__/hostMock.ts | 266 | idp_full_name: "John Doe", | CODE |
| LOW | frontend/__mocks__/deviceUserMock.ts | 11 | email: "test@test.com", | CODE |
| LOW | frontend/utilities/helpers.tests.tsx | 106 | email: "admin@example.com", | CODE |
| LOW | …ppInstallDetailsModal/VppInstallDetailsModal.tests.tsx | 537 | deviceAuthToken="fake_token" | CODE |
| LOW | frontend/pages/LoginPage/LoginPreviewPage.tsx | 61 | email: "admin@example.com", | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 405 | user_email: "user@example.com", | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 415 | expect(screen.getByText("user@example.com")).toBeInTheDocument(); | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 428 | user_email: "user@example.com", | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 438 | expect(screen.getByText("user@example.com")).toBeInTheDocument(); | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 501 | user_email: "user@example.com", | CODE |
| LOW | …tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx | 512 | expect(screen.getByText("user@example.com")).toBeInTheDocument(); | CODE |
| LOW | …ManageUsersPage/components/UserForm/UserForm.tests.tsx | 102 | defaultEmail: "user@example.com", | CODE |
| LOW | …oogleWorkspaceSection/GoogleWorkspaceSection.tests.tsx | 37 | impersonated_user_email: "admin@example.com", | CODE |
| LOW | …oogleWorkspaceSection/GoogleWorkspaceSection.tests.tsx | 46 | expect(screen.getByDisplayValue("admin@example.com")).toBeInTheDocument(); | CODE |
| LOW | …ents/GoogleWorkspaceSection/GoogleWorkspaceSection.tsx | 234 | placeholder="admin@example.com" | CODE |
| LOW | …olicyAutomationsModal/PolicyAutomationsModal.tests.tsx | 21 | author_email: "admin@example.com", | CODE |
| LOW | …/details/PolicyDetailsPage/PolicyDetailsPage.tests.tsx | 59 | author_email: "admin@example.com", | CODE |
| LOW | …/PolicyAutomationsList/PolicyAutomationsList.tests.tsx | 29 | author_email: "admin@example.com", | CODE |
| LOW | …onents/PatchAutomationCta/PatchAutomationCta.tests.tsx | 17 | author_email: "admin@example.com", | CODE |
| LOW | frontend/pages/hosts/details/cards/User/User.tests.tsx | 22 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …r/components/UpdateEndUserModal/UpdateEndUserModal.tsx | 51 | placeholder="user@example.com" | CODE |
| LOW | …es/hosts/details/cards/Policies/HostPolicies.tests.tsx | 19 | author_email: "test@test.com", | CODE |
| LOW | ee/fleet-agent-downloader/config/bootstrap.js | 63 | { emailAddress: 'admin@example.com', fullName: 'Ryan Dahl', isSuperAdmin: true, password: await sails.helpers.passwo | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 6412 | key === 'placeholder' && !el.__ieph | CODE |
| LOW | ee/fleet-agent-downloader/assets/styles/pages/faq.less | 7 | [purpose='placeholder'] { | CODE |
| LOW | ee/server/scim/users_test.go | 64 | Email: "user@example.com", | CODE |
| LOW | ee/server/scim/users_test.go | 100 | UserName: "user@example.com", | CODE |
| LOW | ee/server/scim/users_test.go | 153 | fleetUser := newTestFleetUser(&fleetUserOpts{name: "John Doe", email: "john@example.com", ssoEnabled: true}) | CODE |
| LOW | ee/server/scim/users_test.go | 172 | assert.Equal(t, "John Doe", deleted.UserName) | CODE |
| LOW | ee/server/scim/users_test.go | 236 | email: "admin@example.com", | CODE |
| LOW | ee/server/scim/users_test.go | 249 | scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"}) | CODE |
| LOW | ee/server/scim/users_test.go | 263 | email: "admin@example.com", | CODE |
| LOW | ee/server/scim/users_test.go | 279 | scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"}) | CODE |
| LOW | ee/server/scim/users_test.go | 290 | name: "Jane Doe", | CODE |
| LOW | ee/server/scim/users_test.go | 346 | if email == "user@example.com" { | CODE |
| LOW | ee/server/scim/users_test.go | 364 | assert.Equal(t, "user@example.com", emailQueried) | CODE |
| LOW | ee/server/scim/users_test.go | 404 | scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"}) | CODE |
| LOW | ee/server/scim/users_test.go | 406 | email: "admin@example.com", | CODE |
| LOW | ee/server/scim/users_test.go | 561 | attrs := newTestAttrs("user@example.com", ptr.Bool(false), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 588 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 615 | attrs := newTestAttrs("user@example.com", ptr.Bool(false), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 675 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 888 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 921 | attrs := newTestAttrs("user@example.com", nil, "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 945 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 970 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 997 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/scim/users_test.go | 1022 | attrs := newTestAttrs("user@example.com", ptr.Bool(true), "John", "Doe") | CODE |
| LOW | ee/server/calendar/google_calendar_test.go | 23 | baseUserEmail = "user@example.com" | CODE |
| 191 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 786 | // Step 1: Create a CA and a team with a certificate template referencing it via GitOps. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 851 | // Step 2: Run gitops removing the CA but WITHOUT the team file. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 882 | // Step 3: Run gitops removing BOTH the CA and the certificate template. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2330 | // Step 1: Apply a manual label with hosts. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2359 | // Step 2: Re-apply the same label without the hosts key. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 2386 | // Step 3: Re-apply with empty hosts to clear membership. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 4901 | // Step 1: Apply a full global config with policies, agent_options, controls, and reports. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 4962 | // Step 2: Apply a minimal global config that omits policies, agent_options, reports, labels. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 5158 | // Step 1: Apply a full fleet config with policies, agent_options, controls, features, reports, and software. | COMMENT |
| LOW | …ationtest/gitops/gitops_enterprise_integration_test.go | 5228 | // Step 2: Apply a minimal fleet config that omits policies, agent_options, controls, reports, software, settings. | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 160 | // Step 3: return more hosts than the cap (set to 5 above) so the | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 170 | // Step 2: one version per title. | COMMENT |
| LOW⚡ | cmd/fleet-mcp/fleet_integration_test.go | 177 | // Step 1: one title, short page → stop. | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1598 | // Step 1: software titles affected by this CVE (optionally team-scoped). | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1651 | // Step 2: per title, fetch detail to get version IDs. | COMMENT |
| LOW | cmd/fleet-mcp/fleet_integration.go | 1695 | // Step 3: per version_id, fetch hosts with composing filters server-side. | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 71 | // Step 1: generate a recovery key. snapd answers synchronously with the key | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 86 | // Step 2: enroll the generated key under the Fleet-owned name (a name-only | COMMENT |
| LOW | orbit/pkg/luks/snapd_fde.go | 115 | // Step 3: validate the freshly enrolled key before escrowing it, mirroring | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 462 | // Step 1: Add to drafting | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 470 | // Step 2: Add :product | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 474 | // Step 3: Set status to confirm and celebrate | COMMENT |
| LOW⚡ | tools/github-manage/pkg/ghapi/workflows.go | 482 | // Step 4: Remove :release | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1251 | # Step 1: remove profile → query should poll to False | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1271 | # Step 2: re-install profile → query should poll to True | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1371 | # Step 1: Push enable profile, poll: enable passes + disable fails | COMMENT |
| LOW | tools/cis/cis-test-runner.py | 1394 | # Step 2: Push disable profile, poll: disable passes + enable fails | COMMENT |
| LOW⚡ | tools/dibble/pkg/command/wizard.go | 29 | // Step 1: resolve config (URL + token), prompting only for what's missing. | COMMENT |
| LOW⚡ | tools/dibble/pkg/command/wizard.go | 39 | // Step 2: ping. Fail fast so the user knows their config is wrong before | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 72 | // Step 3: theme picker. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 90 | // Step 4: persist final config (URL, token, theme, insecure) if we | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 111 | // Step 5: entity multi-select. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 162 | // Step 6: counts. | COMMENT |
| LOW | tools/dibble/pkg/command/wizard.go | 185 | // Step 7: run. | COMMENT |
| LOW | …ontend/pages/admin/OrgSettingsPage/cards/Info/Info.tsx | 264 | // Step 1: org_info PATCH. Errors here surface as an org-info | COMMENT |
| LOW | ee/server/service/calendar.go | 154 | // Now, we need to check if there are any events in the queue that need to be re-processed. | COMMENT |
| LOW | …ained-apps/outputs/omnissa-horizon-client/windows.json | 20 | "c624ea6f": "# Locates Omnissa Horizon Client's uninstaller from the registry and runs it\n# silently.\n#\n# Omnissa | CODE |
| LOW | server/mdm/android/service/service.go | 1525 | // Step 1: Get all install templates and transition pending → delivering (atomically) | COMMENT |
| LOW | server/mdm/android/service/service.go | 1553 | // Step 2: Build and send config to AMAPI with ALL certificate templates | COMMENT |
| LOW | server/mdm/android/service/service.go | 1571 | // Step 3: Transition delivering → delivered | COMMENT |
| LOW | server/datastore/mysql/software_upgrade_code_test.go | 439 | // Step 3: Host A reports v2.0 with empty upgrade_code | COMMENT |
| LOW | server/datastore/mysql/software_upgrade_code_test.go | 475 | // Step 1: Host A reports "7-Zip 24.08 (x64 edition)" with upgrade_code | COMMENT |
| LOW | server/datastore/mysql/software_upgrade_code_test.go | 513 | // Step 2: Host B reports "7-Zip 24.09 (x64 edition)" with SAME upgrade_code but different name | COMMENT |
| LOW | server/datastore/mysql/microsoft_mdm_test.go | 4504 | // Step 1: create a remove row and ACK it as verified → row deleted. | COMMENT |
| LOW | server/datastore/mysql/microsoft_mdm_test.go | 4542 | // Step 2: fresh install of the same profile with a new command UUID. | COMMENT |
| LOW | server/datastore/mysql/locks.go | 66 | // information_schema.innodb_lock_waits has been deprecated in MySQL 8, so we need to check if it exists. | COMMENT |
| LOW | server/datastore/mysql/microsoft_mdm.go | 2696 | // Step 1: Load UUIDs of profiles to be deleted. | COMMENT |
| LOW⚡ | server/datastore/mysql/microsoft_mdm.go | 2709 | // Step 2: Retain the content of profiles being deleted so the profile-manager cron can build <Delete> commands after t | COMMENT |
| LOW⚡ | server/datastore/mysql/microsoft_mdm.go | 2717 | // Step 3: Delete the config profile rows. | COMMENT |
| LOW | server/datastore/mysql/microsoft_mdm.go | 2732 | // Step 4: Clean up host-profile rows for deleted profiles (terminal removes + never-sent installs). The actual <Delete | COMMENT |
| LOW | server/datastore/mysql/software_test.go | 2224 | // Step 1: Host1 reports multiple software with the same bundle ID but different versions | COMMENT |
| LOW⚡ | server/datastore/mysql/software_test.go | 2238 | // Step 2: Host2 also reports the same software | COMMENT |
| LOW⚡ | server/datastore/mysql/software_test.go | 2245 | // Step 3: Host3 reports the SAME software but with a different name | COMMENT |
| LOW⚡ | server/datastore/mysql/software_test.go | 2254 | // Step 4: Verify insertion into software behavior | COMMENT |
| LOW | server/datastore/mysql/software_test.go | 10622 | // Step 1: Initial software setup - just one app with bundle ID | COMMENT |
| LOW | server/datastore/mysql/apple_mdm.go | 6458 | // Step 1: Get up to 3 old command UUIDs from nano_enrollment_queue for this | COMMENT |
| LOW | server/datastore/mysql/apple_mdm.go | 6479 | // Step 2: From ncr, find which of those command UUIDs have been acknowledged or | COMMENT |
| LOW | server/datastore/mysql/apple_mdm.go | 6498 | // Step 3: Delete from neq and ncr in the same transaction, scoped to this enrollment. We may not | COMMENT |
| LOW | server/datastore/mysql/software.go | 1402 | // Step 1: Collect all non-empty upgrade_codes from incoming software that might need updating | COMMENT |
| LOW | server/datastore/mysql/software.go | 1422 | // Step 2: Query for existing titles that already have these upgrade_codes | COMMENT |
| 37 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | orbit/pkg/packaging/windows_templates.go | 685 | # Creating a COM instance of the WindowsInstaller.Installer COM object | COMMENT |
| MEDIUM⚡ | tools/tuf/releaser.sh | 218 | # Create a branch to make the changelog update on. | COMMENT |
| MEDIUM⚡ | tools/tuf/releaser.sh | 226 | # Create a new branch to cherry pick the changelog commit to. | COMMENT |
| MEDIUM⚡ | tools/tuf/releaser.sh | 230 | # Create a new PR with the changelog. | COMMENT |
| MEDIUM | tools/loadtest/scripts_and_profiles/main.go | 487 | # Create the extensions directory | COMMENT |
| MEDIUM | tools/software/icons/generate-icons.sh | 427 | # Create a temporary icns file from the extracted PNG for compatibility with rest of script | COMMENT |
| MEDIUM | ee/server/service/embedded_scripts/linux_lock.sh | 63 | # Create the pam_nologin files with our custom message | COMMENT |
| MEDIUM | ee/server/service/embedded_scripts/linux_lock.sh | 91 | # Create a systemd service to recreate nologin files on boot | COMMENT |
| MEDIUM | ee/maintained-apps/outputs/postman/windows.json | 19 | "8594f0bc": "# Learn more about .exe install scripts:\n# http://fleetdm.com/learn-more-about/exe-install-scripts\n\n | CODE |
| MEDIUM | ee/maintained-apps/outputs/brave-browser/windows.json | 19 | "30c77f69": "$softwareName = \"Brave\"\n\n# Script to uninstall software as the current logged-in user.\n$userScript | CODE |
| MEDIUM | ee/maintained-apps/outputs/brave-browser/windows.json | 20 | "9a0c2b15": "$exeFilePath = \"${env:INSTALLER_PATH}\"\n\n$exitCode = 0\n\ntry {\n\n# Copy the installer to a public | CODE |
| MEDIUM | ee/maintained-apps/outputs/figma/windows.json | 19 | "442d71b3": "$exeFilePath = \"${env:INSTALLER_PATH}\"\n\n$exitCode = 0\n\ntry {\n\n# Copy the installer to a public | CODE |
| MEDIUM | website/assets/resources/install-fleetctl.sh | 45 | # Create the install directory if it does not exist. | COMMENT |
| MEDIUM | docs/queries.yml | 2092 | # Create a custom object with the desired fields. | COMMENT |
| MEDIUM | docs/queries.yml | 2384 | # Create a custom object with the desired fields | COMMENT |
| MEDIUM | docs/queries.yml | 2452 | # Create a custom object with the desired fields | COMMENT |
| MEDIUM | docs/scripts.yml | 51 | # Create the file using touch | COMMENT |
| MEDIUM | docs/scripts.yml | 623 | # Create the local user account | COMMENT |
| MEDIUM | docs/solutions/macos/scripts/macos_sethostname.sh | 13 | # Define the new hostname | COMMENT |
| MEDIUM | docs/solutions/linux/scripts/linux_sethostname.sh | 21 | # Define the new hostname | COMMENT |
| MEDIUM | …tions/cis/macos-15/scripts/macos15-CIS_sudo_logging.sh | 15 | # Create the file if it doesn't exist | COMMENT |
| MEDIUM | .github/zizmor-gate.yml | 5 | # This file is passed explicitly via the action's `config:` input rather than being named | COMMENT |
| MEDIUM | .github/workflows/deploy-agent-downloader.yml | 103 | # Create a git tree object from the currently staged repository state for this Heroku deploy. | COMMENT |
| MEDIUM | .github/workflows/deploy-agent-downloader.yml | 105 | # Create a parentless commit from the tree object. | COMMENT |
| MEDIUM | .github/workflows/deploy-vulnerability-dashboard.yml | 106 | # Create a git tree object that contains only the changes in the /website folder. | COMMENT |
| MEDIUM | .github/workflows/deploy-vulnerability-dashboard.yml | 108 | # Create a parentless commit from the tree object. | COMMENT |
| MEDIUM | .github/workflows/deploy-fleet-website.yml | 131 | # Create a git tree object that contains only the changes in the /website folder. | COMMENT |
| MEDIUM | .github/workflows/deploy-fleet-website.yml | 133 | # Create a parentless commit from the tree object. | COMMENT |
| MEDIUM | infrastructure/guardduty/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | infrastructure/guardduty/findings/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | infrastructure/guardduty/members/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …structure/infrastructure/terraform/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …re/infrastructure/guardduty-alerts/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …arch_ansible/roles/elasticapm/templates/apm-server.yml | 19 | # Define a shared secret token for authorizing agents using the "Bearer" authorization method. | COMMENT |
| MEDIUM | …frastructure/dogfood/terraform/gcp/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …re/dogfood/terraform/aws-tf-module/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| MEDIUM | …orm/aws-tf-module/db-temp-restores/.terraform.lock.hcl | 1 | # This file is maintained automatically by "terraform init". | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/fleet/serve_test.go | 47 | // more robust pattern instead of doing this everywhere | COMMENT |
| MEDIUM | cmd/fleet-mcp/schema.go | 367 | // and a little more robust than the previous tokenizer since it survives | COMMENT |
| MEDIUM | orbit/pkg/setup_experience/setup_experience.go | 74 | // when we check for them? Should we have a more robust way to handle the indeterminate | COMMENT |
| MEDIUM | frontend/pages/hosts/ManageHostsPage/helpers.ts | 18 | // Consider using a third-party library if more robust validation is desired | COMMENT |
| MEDIUM | …ontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx | 1033 | // No success toast, to make column setting more seamless | COMMENT |
| MEDIUM | ee/server/service/software_installers.go | 1674 | // the correct, timing-robust signal. See #48879. | COMMENT |
| LOW | ee/maintained-apps/outputs/zed/windows.json | 19 | "3b164442": "# Locates Zed's Inno Setup uninstaller from the registry and runs it silently.\n# Zed's Inno installer | CODE |
| LOW | ee/maintained-apps/outputs/windsurf/windows.json | 20 | "bb230cc3": "$softwareNameLike = \"Windsurf*\"\n$publisherLike = \"*Codeium*\"\n\n$paths = @(\n 'HKLM:\\SOFTWARE | CODE |
| LOW | ee/maintained-apps/outputs/antigravity-ide/windows.json | 19 | "65cab11a": "$softwareNameLike = \"Antigravity*\"\n$publisherLike = \"*Google*\"\n\n$paths = @(\n 'HKLM:\\SOFTWA | CODE |
| MEDIUM | …/vulnerability-dashboard/assets/dependencies/moment.js | 3418 | // to utilize falling through the cases. | COMMENT |
| MEDIUM | ee/cis/win-11/cis-policy-queries.yml | 4593 | Note #1: Organizations that utilize 3rd-party commercial software to manage unique & complex local Administrator pas | CODE |
| MEDIUM | ee/cis/win-11-intune/l1_win11_intune.yaml | 10032 | Note #2: Organizations that utilize a third--party solution for patching may choose to | CODE |
| MEDIUM | website/scripts/build-static-content.js | 887 | let mdStringForThisOpenPosition = `# ${openPosition.jobTitle}\n\n## Let's start with why we exist. 📡\n\nEver | CODE |
| MEDIUM | website/assets/js/pages/configuration-builder.page.js | 48 | // Used to keep track of which payloads have been added to the profile builder. (Essentially formData for the payloa | COMMENT |
| MEDIUM | website/assets/js/pages/configuration-builder.page.js | 5760 | // Used to keep track of which payloads have been added to the profile builder. (Essentially formData for the payl | COMMENT |
| MEDIUM | website/assets/dependencies/moment.js | 3418 | // to utilize falling through the cases. | COMMENT |
| MEDIUM | server/mdm/maintainedapps/installers.go | 86 | // This is OK for the first 20 apps we support, but we should do something more robust once we | COMMENT |
| MEDIUM | server/mdm/nanomdm/test/protocol/transport.go | 40 | // The MDM channels utilize this transport to communicate with the host. | COMMENT |
| MEDIUM | server/mdm/nanomdm/storage/mysql/async.go | 66 | // value. Otherwise it returns nil and false. Essentially, if the number of | COMMENT |
| MEDIUM | server/mdm/nanomdm/push/buford/buford.go | 133 | // some environments may heavily utilize individual pushes. | COMMENT |
| MEDIUM | server/mdm/nanomdm/push/service/service.go | 187 | // some environments may heavily utilize individual pushes. | COMMENT |
| MEDIUM | server/service/integration_mdm_lifecycle_test.go | 1656 | // This mirrors how GetHostMDMCheckinInfo derives SCEPRenewalInProgress and is robust to a host | COMMENT |
| MEDIUM | server/service/validation_setup.go | 31 | // TODO - implement more robust URL validation here | COMMENT |
| MEDIUM | …s/solutions/cis/win-11/policies/cis-policy-queries.yml | 3919 | Note #1: Organizations that utilize 3rd-party commercial software to manage unique & complex local Administrator pas | CODE |
| MEDIUM | …lutions/cis/win-11-intune/policies/l1_win11_intune.yml | 6143 | # tags: framework:CISv8.1, benchmark:win11, level:1, platform:windows, category:configuration, requirement:standard, c | COMMENT |
| MEDIUM | …lutions/cis/win-11-intune/policies/l1_win11_intune.yml | 9073 | Note #2: Organizations that utilize a third--party solution for patching may choose to | CODE |
| MEDIUM | handbook/company/testimonials.yml | 326 | # quote: We started working with Fleet Device Management in early March 2022 because we were looking for a reliable ob | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 100 | # - 🚀 Work collaboratively with product and engineering teams to facilitate feature development based on customer asks. | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 109 | # - 🧑🔬 Experience working with Enterprise customers to coordinate resolution of complex technical issues and project m | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 161 | # - 🦢 Work with the Product Design, Customer Success, and Engineering teams to facilitate feature development based o | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 188 | # - 🚀 Perform manual testing of newly developed features on all supported devices, platforms, and browsers, ensuring | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 193 | # - 💖 Proficient in creating comprehensive testing plans. | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 214 | # - 🪴 Promote existing product best practices in lieu of engineering-led product changes whenever possible | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 218 | # - 📈 Proactively engage with customers to identify areas where product adoption can be increased, or areas where pro | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 268 | # - 🚀 Work collaboratively with product and engineering teams to facilitate feature development based on customer as | COMMENT |
| MEDIUM | handbook/company/open-positions.yml | 386 | # - 🦢 Work with the Product Design, Customer Success, and Engineering teams to facilitate feature development based | COMMENT |
| MEDIUM | pkg/spec/gitops.go | 1201 | // This is inefficient, but it is more robust and less error-prone. | COMMENT |
| MEDIUM | pkg/spec/gitops.go | 1251 | // This is inefficient, but it is more robust and less error-prone. | COMMENT |
| MEDIUM | pkg/spec/gitops.go | 1287 | // This is inefficient, but it is more robust and less error-prone. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/api/README.md | 150 | def get_all_vulnerable_software_titles(): | CODE |
| LOW | tools/api/README.md | 164 | def get_hosts_for_software_version(version_id): | CODE |
| LOW | tools/cis/CIS-Benchmark-diff.py | 18 | def remove_trailing_whitespace(text): | CODE |
| LOW | tools/cis/CIS-Benchmark-diff.py | 39 | def extract_recommendations_fitz(pdf_path, start_phrase, end_phrase): | CODE |
| LOW | tools/cis/cis-test-runner.py | 352 | def _find_enable_disable_profiles(cis_id: str, profiles_dir: Path) -> tuple[Path | None, Path | None]: | CODE |
| LOW | tools/cis/cis-test-runner.py | 965 | def wait_for_fleet_registration( | CODE |
| LOW | …perArchLinuxRolling/TooltipWrapperArchLinuxRolling.tsx | 10 | export default function TooltipWrapperArchLinuxRolling({ | CODE |
| LOW | …uppet/fleetdm/spec/functions/preassign_profile_spec.rb | 132 | def expect_successful_calls_with_host_profiles(host_profiles, ensure_profile) | CODE |
| LOW | …fleet-agent-downloader/assets/dependencies/sails.io.js | 899 | })(function goAheadAndActuallyConnect() { | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 2146 | function extractPropsFromVNodeData ( | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 4064 | function createFunctionalComponent ( | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 4105 | function cloneAndMarkFunctionalResult (vnode, data, contextVm, options) { | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 4322 | function createComponentInstanceForVnode ( | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 4690 | function resolveConstructorOptions (Ctor) { | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 5791 | function removeAndInvokeRemoveHook (vnode, rm) { | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 6708 | function getAndRemoveAttr ( | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 9961 | function isDirectChildOfTemplateFor (node) { | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 10706 | function createCompileToFunctionFn (compile) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 91 | function getSpecialTransitionEndEvent() { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 154 | getTransitionDurationFromElement: function getTransitionDurationFromElement(element) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1893 | function getOffsetRectRelativeToArbitraryNode(children, parent) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1945 | function getViewportOffsetRectRelativeToArtbitraryNode(element) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1993 | function getFixedPositionOffsetParent(element) { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 626 | function replaceLongDateFormatTokens(input) { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 2386 | function configFromStringAndFormat(config) { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 2967 | function isDaylightSavingTimeShifted () { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 3081 | function positiveMomentsDifference(base, other) { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 4324 | function getSetRelativeTimeRounding (roundingFunction) { | CODE |
| LOW | …/vulnerability-dashboard/assets/dependencies/moment.js | 4336 | function getSetRelativeTimeThreshold (threshold, limit) { | CODE |
| LOW | …ulnerability-dashboard/assets/dependencies/sails.io.js | 899 | })(function goAheadAndActuallyConnect() { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 2146 | function extractPropsFromVNodeData ( | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 4064 | function createFunctionalComponent ( | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 4105 | function cloneAndMarkFunctionalResult (vnode, data, contextVm, options) { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 4322 | function createComponentInstanceForVnode ( | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 4690 | function resolveConstructorOptions (Ctor) { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 5791 | function removeAndInvokeRemoveHook (vnode, rm) { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 6708 | function getAndRemoveAttr ( | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 9961 | function isDirectChildOfTemplateFor (node) { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 10706 | function createCompileToFunctionFn (compile) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 91 | function getSpecialTransitionEndEvent() { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 154 | getTransitionDurationFromElement: function getTransitionDurationFromElement(element) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1893 | function getOffsetRectRelativeToArbitraryNode(children, parent) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1945 | function getViewportOffsetRectRelativeToArtbitraryNode(element) { | CODE |
| LOW | …/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js | 1993 | function getFixedPositionOffsetParent(element) { | CODE |
| LOW | website/assets/dependencies/moment.js | 626 | function replaceLongDateFormatTokens(input) { | CODE |
| LOW | website/assets/dependencies/moment.js | 2386 | function configFromStringAndFormat(config) { | CODE |
| LOW | website/assets/dependencies/moment.js | 2967 | function isDaylightSavingTimeShifted () { | CODE |
| LOW | website/assets/dependencies/moment.js | 3081 | function positiveMomentsDifference(base, other) { | CODE |
| LOW | website/assets/dependencies/moment.js | 4324 | function getSetRelativeTimeRounding (roundingFunction) { | CODE |
| LOW | website/assets/dependencies/moment.js | 4336 | function getSetRelativeTimeThreshold (threshold, limit) { | CODE |
| LOW | website/assets/dependencies/sails.io.js | 899 | })(function goAheadAndActuallyConnect() { | CODE |
| LOW | website/assets/dependencies/vue.js | 2146 | function extractPropsFromVNodeData ( | CODE |
| LOW | website/assets/dependencies/vue.js | 4064 | function createFunctionalComponent ( | CODE |
| LOW | website/assets/dependencies/vue.js | 4105 | function cloneAndMarkFunctionalResult (vnode, data, contextVm, options) { | CODE |
| LOW | website/assets/dependencies/vue.js | 4322 | function createComponentInstanceForVnode ( | CODE |
| LOW | website/assets/dependencies/vue.js | 4690 | function resolveConstructorOptions (Ctor) { | CODE |
| LOW | website/assets/dependencies/vue.js | 5791 | function removeAndInvokeRemoveHook (vnode, rm) { | CODE |
| LOW | website/assets/dependencies/vue.js | 6708 | function getAndRemoveAttr ( | CODE |
| LOW | website/assets/dependencies/vue.js | 9961 | function isDirectChildOfTemplateFor (node) { | CODE |
| LOW | website/assets/dependencies/vue.js | 10706 | function createCompileToFunctionFn (compile) { | CODE |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …fleet-agent-downloader/assets/dependencies/sails.io.js | 908 | self._raw.io.engine.transport.on('error', function(err){ | CODE |
| CRITICAL | …eet-agent-downloader/assets/dependencies/jquery.min.js | 4 | null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;return | CODE |
| CRITICAL | …ulnerability-dashboard/assets/dependencies/sails.io.js | 908 | self._raw.io.engine.transport.on('error', function(err){ | CODE |
| CRITICAL | …nerability-dashboard/assets/dependencies/jquery.min.js | 4 | null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;return | CODE |
| CRITICAL | website/scripts/deliver-estimation-report.js | 70 | graphqlHairball.data.organization.projectsNext.nodes.map((betaProject) => ({ | CODE |
| CRITICAL | website/assets/dependencies/sails.io.js | 908 | self._raw.io.engine.transport.on('error', function(err){ | CODE |
| CRITICAL | website/assets/dependencies/jquery.min.js | 4 | null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;return | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/release/publish_release.sh | 392 | --assignee "xpkoala" --label "#g-orchestration" \ | CODE |
| MEDIUM | tools/github-manage/cmd/gm/bugs.go | 34 | var productGroupLabels = []string{"#g-software", "#g-orchestration", "#g-mdm", "#g-security-compliance"} | CODE |
| MEDIUM | tools/github-manage/pkg/tui/table.go | 17 | // prioritize labels 'story', 'bug', ':release', ':product', '#g-mdm', '#g-orchestration', | COMMENT |
| MEDIUM | tools/github-manage/pkg/tui/table.go | 24 | priorityLabels := map[string]bool{"story": true, "bug": true, ":release": true, ":product": true, "#g-mdm": true, "#g-o | CODE |
| MEDIUM | tools/github-manage/pkg/ghapi/projects.go | 33 | 71: "#g-orchestration", // g-orchestration project | CODE |
| MEDIUM | …Page/EditConfigurationModal/EditConfigurationModal.tsx | 70 | // Place cursor between <dict> tags when starting with empty XML scaffold | COMMENT |
| MEDIUM | ee/cis/prompt.md | 40 | ### Step 0: If this is a new OS version, scaffold and register it first | COMMENT |
| MEDIUM | articles/the-cost-of-code-as-config.md | 119 | The quickest way to see this in detail is to inspect our [it-and-security](https://github.com/fleetdm/fleet/tree/main/it | CODE |
| MEDIUM | articles/supercharging-endpoint-management.md | 1 | # Supercharging endpoint management with AI assistants and event-driven automation | COMMENT |
| MEDIUM | articles/not-everything-runs-in-kubernete.md | 28 | #### Cloud-based data leader chooses Fleet for orchestration: | COMMENT |
| MEDIUM | articles/rethinking-endpoint-management.md | 47 | ## The orchestration layer | COMMENT |
| MEDIUM | articles/endpoint-data-loss-prevention.md | 75 | ### How should teams compare browser-based DLP with agent-based DLP? | COMMENT |
| MEDIUM | …s/Contributing/architecture/modular-monolith/README.md | 111 | ├── bootstrap/ # Public: dependency injection entry point | CODE |
| MEDIUM | docs/Get started/FAQ.md | 471 | ### If I use a software orchestration tool (Ansible, Chef, Puppet, etc.) to manage agent options, do I have to apply the | COMMENT |
| MEDIUM | handbook/product-design/README.md | 188 | 2. If `customer-` labels are applied to the user story, at-mention the [VP of Customer Success](https://fleetdm.com/hand | CODE |
| MEDIUM | handbook/engineering/README.md | 122 | 4. If `customer-` labels are applied to the user story, at-mention the [VP of Customer Success](https://fleetdm.com/hand | CODE |
| MEDIUM | handbook/engineering/README.md | 142 | - Notify the relevant PD in the #g-apple-at-work, #g-auto-patching, #g-orchestration, or #g-security-compliance Slack ch | CODE |
| MEDIUM | handbook/company/product-groups.md | 38 | | [Orchestration](#orchestration-group) | Increase and exceed maturity in the [orchestration](https://fl | CODE |
| MEDIUM | handbook/company/product-groups.md | 67 | > The [Slack channel](https://fleetdm.slack.com/archives/C084F4MKYSJ), [kanban release board](https://github.com/orgs/fl | CODE |
| MEDIUM | handbook/company/product-groups.md | 459 | Occasionally, a contributor outside of the [product groups](https://fleetdm.com/handbook/product-groups#current-product- | CODE |
| MEDIUM | handbook/company/product-groups.md | 532 | - [ ] [Product group](https://fleetdm.com/handbook/company/product-groups) label added (e.g. `#g-apple-at-work`, `#g-orc | CODE |
| MEDIUM | handbook/company/product-groups.md | 754 | We inform customers and the community about critical bugs immediately so they don’t trigger it themselves. When a bug me | CODE |
| MEDIUM | handbook/company/product-groups.md | 814 | > If a feature request has an urgent Fleet need and can't wait until the next feature fest, @ mention the Head of Produc | CODE |
| MEDIUM | handbook/company/product-groups.md | 867 | > Working groups use the bug triage process below. For product groups (#g-orchestration and #g-security-compliance) Prod | CODE |
| MEDIUM | handbook/company/product-groups.md | 1292 | 1. **Sprint kickoff**: On the first day of the sprint, the team, along with stakeholders, selects issues from the [🦢 Dra | CODE |
| MEDIUM | handbook/company/product-groups.md | 1334 | Please see [handbook/company/product-groups/orchestration](https://fleetdm.com/handbook/company/product-groups#orchestra | CODE |
| MEDIUM | …ithub/actions/eng-metrics/test/markdown-parser.test.js | 520 | ### orchestration group | COMMENT |
| MEDIUM | .github/ISSUE_TEMPLATE/release-qa-fleetd.md | 5 | labels: '#g-orchestration,:release' | CODE |
| MEDIUM | .github/ISSUE_TEMPLATE/release-qa.md | 5 | labels: '#g-orchestration,#g-apple-at-work,#g-power-to-pc,#g-auto-patching,#g-security-compliance,:release' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | website/assets/robots.txt | 16 | # include providing AI-generated search summaries. | COMMENT |
| HIGH | …eet-ai-assisted-policy-descriptions-and-resolutions.md | 43 | Also, the end user can read about a policy during an [automated maintenance window scheduled in their calendar](https:// | CODE |
| HIGH | handbook/engineering/README.md | 199 | > [Ownership](https://fleetdm.com/handbook/company#ownership) is one of Fleet's key values. When a bot opens a PR on you | CODE |
| HIGH | handbook/engineering/README.md | 199 | > [Ownership](https://fleetdm.com/handbook/company#ownership) is one of Fleet's key values. When a bot opens a PR on you | CODE |
| HIGH | handbook/company/open-positions.yml | 464 | # - 🌐 Assist with domain registrations, SaaS tool evaluations, and vendor management as requested. | COMMENT |
| HIGH | handbook/company/pricing-features-table.yml | 1511 | # - description: AI generated CVSS v4 context. Coming soon (2024-12-31). | COMMENT |
| HIGH | handbook/company/pricing-features-table.yml | 1519 | # - industryName: AI-generated descriptions (optional) | COMMENT |
| HIGH | handbook/company/why-this-way.md | 305 | ## Why read every line of AI-generated work? | COMMENT |
| HIGH | handbook/company/why-this-way.md | 312 | - **Cognitive debt.** Anything generated by AI that you didn't write yourself starts as cognitive debt. You don't fully | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | orbit/goreleaser-windows-arm64.yml | 6 | # If this is updated make sure to update the "How to build from source" section in the README.md. | COMMENT |
| LOW | orbit/goreleaser-macos.yml | 6 | # If this is updated make sure to update the "How to build from source" section in the README.md. | COMMENT |
| LOW | orbit/goreleaser-windows.yml | 6 | # If this is updated make sure to update the "How to build from source" section in the README.md. | COMMENT |
| LOW | orbit/goreleaser-linux.yml | 6 | # If this is updated make sure to update the "How to build from source" section in the README.md. | COMMENT |
| LOW | orbit/goreleaser-linux-arm64.yml | 6 | # If this is updated make sure to update the "How to build from source" section in the README.md. | COMMENT |
| MEDIUM⚡ | tools/release/publish_release.sh | 634 | # Now you can use the $dry_run variable to see if the option was set | COMMENT |
| LOW | ee/fleet-agent-downloader/config/models.js | 83 | // Plus, don't forget to configure MongoDB as your default datastore: | COMMENT |
| LOW | ee/vulnerability-dashboard/config/models.js | 83 | // Plus, don't forget to configure MongoDB as your default datastore: | COMMENT |
| LOW | website/config/models.js | 83 | // Plus, don't forget to configure MongoDB as your default datastore: | COMMENT |
| LOW | docs/solutions/tines/mdm-migration-jamf-pro.json | 153 | "content": "# Configuration\n\n## Jamf\n\nSet up a Jamf Pro [API Role and Client](https://learn.jamf.com/en-US/bun | CODE |
| MEDIUM | handbook/company/pricing-features-table.yml | 1 | # [?]: To generate new ASCII art headings used in this file, you can use the @mikermcneil/kit npm package. See https://g | COMMENT |
| LOW⚡ | .github/workflows/test-go.yaml | 73 | # make sure to update supported versions docs when MySQL versions change | COMMENT |
| LOW⚡ | .github/workflows/test-go.yaml | 114 | # make sure to update supported versions docs when Redis/Valkey versions change | COMMENT |
| LOW⚡ | .github/workflows/test-go-activity.yaml | 48 | # make sure to update supported versions docs when MySQL versions change | COMMENT |
| LOW | .github/workflows/golangci-lint.yml | 79 | # Don't forget to update | COMMENT |
| LOW | .github/workflows/golangci-lint.yml | 143 | # Don't forget to update | COMMENT |
| LOW | .github/scripts/rclone-install.sh | 17 | #when adding a tool to the list make sure to also add its corresponding command further in the script | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/mdm/nanodep/godep/account_driven_enrollment.go | 37 | // TODO: Implement error checks to cover https://developer.apple.com/documentation/devicemanagement/assign-account-drive | COMMENT |
| LOW | server/mdm/microsoft/wstep.go | 59 | // TODO: implement other methods as needed: | COMMENT |
| LOW | server/mdm/scep/depot/bolt/depot.go | 175 | // TODO: implement allowTime | COMMENT |
| LOW | server/mdm/scep/depot/bolt/depot.go | 176 | // TODO: implement revocation | COMMENT |
| LOW | server/chart/datasets.go | 46 | // TODO: implement bitmap compression so we can track more CVEs. | COMMENT |
| LOW | server/chart/internal/mysql/charts.go | 160 | // TODO: implement bitmap compression so we can collect more CVE data. | COMMENT |
| LOW | server/datastore/mysql/apple_mdm.go | 4415 | // TODO: Add test coverage for scepRenewalInProgress branching logic. | COMMENT |
| LOW | server/service/mdm_test.go | 1329 | // TODO: Add tests for Apple DDM authz? | COMMENT |
| LOW | server/service/apple_mdm_test.go | 4163 | // TODO: Add tests for gitops and observer plus roles? (Settings endpoint test above may also need to be updated) | COMMENT |
| LOW | …er/service/integration_certificate_authorities_test.go | 119 | URL: mockHydrantServer.URL, // TODO: implement a test server? | CODE |
| LOW | server/service/integration_mdm_profiles_test.go | 3790 | // TODO: Add tests for create/delete forbidden declaration types? | COMMENT |
| LOW | server/service/integration_mdm_profiles_test.go | 3813 | // TODO: Add tests for OS updates declaration when implemented. | COMMENT |
| LOW | server/vulnerabilities/nvd/tools/cpedict/cpedict.go | 51 | // TODO: implement | COMMENT |
| LOW | server/vulnerabilities/nvd/tools/cpedict/cpedict.go | 57 | // TODO: implement | COMMENT |
| LOW | server/vulnerabilities/nvd/tools/cpedict/cpedict.go | 99 | // TODO: implement ProvenanceRecord | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/version-from-branch.sh | 5 | # Usage: | COMMENT |
| LOW | …/cleanup-docker-sha-tags/cleanup-dockerhub-sha-tags.sh | 6 | # Usage: | COMMENT |
| LOW | tools/cleanup-docker-sha-tags/cleanup-quay-sha-tags.sh | 6 | # Usage: | COMMENT |
| LOW | tools/release/backport-check.sh | 15 | # Usage: | COMMENT |
| LOW | tools/loadtest/metrics/collect-metrics.sh | 5 | # Usage: | COMMENT |
| LOW | tools/loadtest/metrics/compare-metrics.sh | 5 | # Usage: | COMMENT |
| LOW | tools/loadtest/scripts_and_profiles/main.go | 142 | # Usage: | COMMENT |
| LOW | server/platform/logging/testutils/test_logger.go | 12 | // Example usage: | COMMENT |
| LOW | …s/solutions/macos/scripts/uninstall-santa-extension.sh | 7 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | articles/remote-yara-rules.md | 46 | [API](https://fleetdm.com/docs/rest-api/rest-api#modify-configuration). Reference each rule file by path under the main | CODE |
| HIGH | docs/Configuration/agent-configuration.md | 267 | # returned by `SELECT platform FROM os_version`. In this example, the base | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | website/scripts/freeze-open-pull-requests.js | 12 | sails_custom__githubAccessToken=YOUR_TOKEN_HERE sails run scripts/freeze-open-pull-requests.js --dry | CODE |
| HIGH | website/scripts/freeze-open-pull-requests.js | 15 | sails_custom__githubAccessToken=YOUR_TOKEN_HERE sails run scripts/freeze-open-pull-requests.js --limit=100`, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/fleet-slackbot/slack-handlers.js | 61 | async function handleRequest({ userText, userId, channelId, threadTs, messageTs, threadContext, client, config, github, | CODE |
| LOW | ee/fleet-agent-downloader/assets/dependencies/vue.js | 3446 | function getData (data, vm) { | CODE |
| LOW | ee/vulnerability-dashboard/assets/dependencies/vue.js | 3446 | function getData (data, vm) { | CODE |
| LOW | ee/fleetd-chrome/src/mockServiceWorker.js | 140 | async function handleRequest(event, requestId) { | CODE |
| LOW | website/assets/dependencies/vue.js | 3446 | function getData (data, vm) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/cis/CIS-Benchmark-diff.py | 39 | CODE | |
| LOW | tools/cis/cis-test-runner.py | 398 | CODE | |
| LOW | tools/cis/cis-test-runner.py | 965 | CODE | |
| LOW | tools/cis/cis-test-runner.py | 993 | CODE | |
| LOW | tools/cis/cis-test-runner.py | 1216 | CODE | |
| LOW | tools/cis/cis-test-runner.py | 1800 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/cis/cis-test-runner.py | 18 | CODE | |
| LOW | …f-module/db-temp-restores/scripts/show_db_temp_info.py | 4 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/cis/cis-test-runner.py | 1448 | except Exception as e: | CODE |
| LOW | tools/cis/cis-test-runner.py | 2231 | except Exception as e: | STRING |