AI Slop Code Risk Monitor

fleetdm/fleet

SlopCodeMonitor badge for fleetdm/fleet Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Open device management

2.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for fleetdm/fleet, a Go project with 7,086 GitHub stars. SynthScan examined 2,696,105 lines of code across 14158 source files, recording 4708 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 2.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.3
Adjusted Signal
2.3
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
7.1K
Stars
Go
Language
2.7M
Lines of Code
14.2K
Files
4.7K
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3910 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 383 finding(s).

Agent Over-Engineering Ratio 2.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 496 finding(s).

PR Review Velocity Impact 10.5/100 · LOW

Which changes need focused human review? 4708 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 10HIGH 20MEDIUM 530LOW 4148

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4708 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1983 hits · 1778 pts
SeverityFileLineSnippetContext
LOWcmd/osquery-perf/agent.go521COMMENT
LOWcmd/osquery-perf/agent.go561 // Fleet-signed registration token from a delivered PSSO profile. The PSSOCOMMENT
LOWcmd/osquery-perf/agent.go4781 embeddedBundlePaths = flag.Bool("embedded_bundle_paths", false, "Nest duplicate-bundle paths under theirCOMMENT
LOWcmd/osquery-perf/android_agent.go21 "github.com/fleetdm/fleet/v4/cmd/osquery-perf/osquery_perf"COMMENT
LOWcmd/osquery-perf/android_agent.go181// physical SIM reports and Fleet stores as no value at all.COMMENT
LOWcmd/osquery-perf/android_agent.go221COMMENT
LOWcmd/osquery-perf/android_agent.go281// it installs an update, which is why a simulated device can reportCOMMENT
LOWcmd/apple-apns-mock/coordinator_test.go61// waitAnnouncementsHandled blocks until this node's subscription has handledCOMMENT
LOWcmd/apple-apns-mock/handlers.go81 // would otherwise stay alive for the life of the stream.COMMENT
LOWcmd/govulndb-mirror/transform.go21 // not the binary it produced, so they are not mirrored.COMMENT
LOWcmd/govulndb-mirror/validate.go1package mainCOMMENT
LOWcmd/govulndb-mirror/main.go1// Command govulndb-mirror mirrors the Go vulnerability database (https://vuln.go.dev) into theCOMMENT
LOWcmd/maintained-apps/validate/windows.go141 }COMMENT
LOWcmd/osv-processor/transforms.go21 // CVE-specific modifications: modify vulnerability details for specific CVEsCOMMENT
LOWcmd/osv-processor/sync-and-detect-changes.sh1#!/usr/bin/env bashCOMMENT
LOWcmd/osv-processor/main.go581// Only "enterprise_linux" ecosystems are supported; variants like rhel_e4s, rhel_eus,COMMENT
LOWcmd/fleetctl/fleetctl/gitops.go881COMMENT
LOWcmd/fleetctl/fleetctl/gitops_test.go681 // // url: https://hydrant2.example.comCOMMENT
LOWcmd/fleetctl/fleetctl/apply_test.go3081COMMENT
LOWcmd/fleetctl/fleetctl/apply_test.go3101 // assert.False(t, ds.InsertMDMAppleBootstrapPackageFuncInvoked)COMMENT
LOWcmd/fleetctl/fleetctl/apply_test.go3121 // assert.False(t, ds.DeleteMDMAppleBootstrapPackageFuncInvoked)COMMENT
LOWcmd/fleetctl/fleetctl/apply_deprecated_test.go1381 // name := writeTmpYml(t, fmt.Sprintf(appConfigSpecEnableEndUserAuth, "true"))COMMENT
LOWcmd/fleetctl/fleetctl/apply_deprecated_test.go1401 // assert.True(t, ds.SaveAppConfigFuncInvoked)COMMENT
LOWcmd/fleetctl/fleetctl/apply_deprecated_test.go1421 // assert.True(t, ds.SaveTeamFuncInvoked)COMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml1# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #COMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml21 # Read more:COMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml41 # • https://fleetdm.com/docs/deploy/single-sign-on-ssoCOMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml61COMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml81 # • https://fleetdm.com/guides/apple-mdm-setup#volume-purchasing-program-vppCOMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml101 # macos_migration:COMMENT
LOW…d/fleetctl/fleetctl/templates/new/default.template.yml121# from "x86 macs" to "finance department" to "needs new battery".COMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml1# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #COMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml21 setup_experience:COMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml41 # • https://fleetdm.com/docs/configuration/yaml-files#apple-settings-and-windows-settingsCOMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml61 # • https://fleetdm.com/docs/configuration/yaml-files#ipados-updatesCOMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml81 # display_name: "Slack"COMMENT
LOW…plates/new/fleets/personal-mobile-devices.template.yml101 ###########################################################COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml1# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml21 # Configure the macOS setup experienceCOMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml41 #COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml61 # labels_include_any:COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml81 #COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml101 # update_new_hosts: trueCOMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml121COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml141#COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml161###########################################################COMMENT
LOW…leetctl/templates/new/fleets/workstations.template.yml181 # labels_include_any:COMMENT
LOW…/templates/new/.github/workflows/workflow.template.yml61 - name: Apply latest configuration to FleetCOMMENT
LOW…/templates/new/.github/workflows/workflow.template.yml81 # Apple devices with MDM pointed at Fleet. If this URL changesCOMMENT
LOWcmd/android-amapi-mock/main.go1// Command android-amapi-mock is a lightweight mock of Google's Android Management APICOMMENT
LOWcmd/android-amapi-mock/main.go61 // unenroll/enroll flip-flop.COMMENT
LOWcmd/fleet/http_middleware.go21// batch operations. For package-upload routes it also caps the request body andCOMMENT
LOWcmd/fleet/cron.go2721 return ds.ReconcileMaintainedAppSoftwareNames(ctx)COMMENT
LOWcmd/fleet/serve_boot_test.go121// The test does not run in parallel: it swaps the package-global initFatal andCOMMENT
LOWcmd/fleet/redis.go81// effectively enabled — etag_invalidate. Failures go through initFatal, and nilCOMMENT
LOWcmd/fleet-mcp/config.go41COMMENT
LOWcmd/fleet-mcp/main.go21// by the documented `openssl rand -hex 32` (64 chars).COMMENT
LOWorbit/cmd/orbit/orbit.go1661 options = append(options, osquery.WithFlags([]string{"--flagfile", flagfilePath}))COMMENT
LOWorbit/cmd/orbit/orbit.go2101 fallbackCfg fallbackServerOverridesConfig,COMMENT
LOWorbit/cmd/orbit/orbit.go2201 // trw is the Fleet Desktop token reader and writer (implements token rotation).COMMENT
1923 more matches not shown…
Decorative Section Separators394 hits · 1198 pts
SeverityFileLineSnippetContext
MEDIUMtools/mdm/test-batch-profiles.sh3#--------------------------------------------------------------COMMENT
MEDIUMtools/mdm/test-batch-profiles.sh7#--------------------------------------------------------------COMMENT
MEDIUMtools/mdm/make_cfg_profiles.sh3# ----------------------------------------------------COMMENT
MEDIUMtools/mdm/make_cfg_profiles.sh5# ----------------------------------------------------COMMENT
MEDIUM⚡tools/release/publish_release.sh683# ======================================COMMENT
MEDIUM⚡tools/release/publish_release.sh685# ======================================COMMENT
MEDIUMtools/release/publish_release.sh107# ======================================COMMENT
MEDIUMtools/release/publish_release.sh109# ======================================COMMENT
MEDIUMtools/release/publish_release.sh187# ======================================COMMENT
MEDIUMtools/release/publish_release.sh189# ======================================COMMENT
MEDIUMtools/release/publish_release.sh323# ======================================COMMENT
MEDIUMtools/release/publish_release.sh325# ======================================COMMENT
MEDIUMtools/release/publish_release.sh792# ======================================COMMENT
MEDIUMtools/release/publish_release.sh794# ======================================COMMENT
MEDIUMtools/release/publish_release.sh830# ======================================COMMENT
MEDIUMtools/release/publish_release.sh832# ======================================COMMENT
MEDIUMtools/release/publish_release.sh986# ======================================COMMENT
MEDIUMtools/release/publish_release.sh988# ======================================COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh31# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh33# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh43# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh45# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh208# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh210# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh217# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tools/loadtest/metrics/collect-metrics.sh219# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh161# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh163# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh421# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh423# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh602# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh671# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh691# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh693# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh740# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh751# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh806# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh808# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh845# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh847# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh972# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh980# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh997# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh999# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1049# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1051# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1116# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1124# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1195# ---------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1199# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1282# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1292# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1355# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1362# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1412# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1416# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1530# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1536# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1558# -------------------------------------------------------------------------COMMENT
MEDIUMtools/loadtest/metrics/collect-metrics.sh1581# -------------------------------------------------------------------------COMMENT
334 more matches not shown…
Redundant / Tautological Comments1057 hits · 1103 pts
SeverityFileLineSnippetContext
LOWtools/release/publish_release.sh218 # Check if `grep` supports the `-P` option by using it in a no-op search.COMMENT
LOWtools/release/publish_release.sh285 # Check if the formatted date matches the expected date formatCOMMENT
LOWtools/release/publish_release.sh300 # Check if `ggrep` is availableCOMMENT
LOWtools/loadtest/scripts_and_profiles/main.go179 # Check if curl is availableCOMMENT
LOWtools/loadtest/scripts_and_profiles/main.go259 # Check if file exists and is not emptyCOMMENT
LOWtools/loadtest/scripts_and_profiles/main.go270 # Check if file is executable format (basic check)COMMENT
LOWtools/loadtest/scripts_and_profiles/main.go359 # Check if extensions.load file existsCOMMENT
LOWtools/software/icons/generate-icons.sh5# Check if a string is a valid JavaScript identifierCOMMENT
LOWtools/software/icons/generate-icons.sh9 # Check if it matches the pattern: starts with letter/underscore/dollar, followed by letters/digits/underscore/dollar COMMENT
LOWtools/software/icons/generate-icons.sh70 # Check if import already existsCOMMENT
LOWtools/software/icons/generate-icons.sh104 # Check if we should insert before this first importCOMMENT
LOWtools/software/icons/generate-icons.sh167 # Check if map entry already exists (check for both quoted and unquoted keys)COMMENT
LOWtools/software/icons/generate-icons.sh197 # Check if this is a map entry (has a colon)COMMENT
LOWtools/cis/cis-test-runner.py2010 # Check if SSH is reachable. If not (e.g., a previous testSTRING
LOWtools/cis/cis-test-runner.py2031 # Check if the agent is installed and the host is in FleetSTRING
LOWtools/cis/cis-test-runner.py2128 # Check if the host is already MDM-enrolled; if so, skipSTRING
LOWee/server/service/embedded_scripts/linux_lock.sh58 # Set flag to reboot after creating lock filesCOMMENT
LOWee/server/service/embedded_scripts/linux_unlock.sh49# Check if we switched to text mode during lock and restore GUI if neededCOMMENT
LOW⚡ee/maintained-apps/script-diff.sh5# Check if file path is providedCOMMENT
LOW⚡ee/maintained-apps/script-diff.sh13# Check if file existsCOMMENT
LOW⚡ee/maintained-apps/script-diff.sh19# Check if we're in a git repositoryCOMMENT
LOWee/maintained-apps/ingesters/homebrew/scripts.go1110 # Check if the app was running before installationCOMMENT
LOWee/maintained-apps/outputs/forecast/darwin.json21 "ae290788": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/kap/darwin.json21 "d22aa20b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/usage-app/darwin.json21 "e070d417": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/texshop/darwin.json21 "8da3bb6e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/devtoys/darwin.json21 "58a81a86": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/openrefine/darwin.json20 "258ae699": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/t3-code/darwin.json21 "96b55242": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/i1profiler/darwin.json21 "f3fdabef": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/beyond-compare/darwin.json21 "f454ffc6": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/netspot/darwin.json21 "4483993c": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/pd/darwin.json21 "921dbea0": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/cryptomator/darwin.json21 "52c4f35b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/bricklink-studio/darwin.json21 "e06a2564": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/smoothscroll/darwin.json20 "051b70dc": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/default-folder-x/darwin.json21 "7c6b5c32": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/ok-json/darwin.json20 "5f4e50e8": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/knime/darwin.json21 "63a7bd9a": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/neofinder/darwin.json21 "26dc1bea": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/granola/darwin.json20 "212b6a3e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/command-tab-plus/darwin.json20 "6549db18": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/glyphs/darwin.json20 "673b758b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/nextcloud/darwin.json21 "86f0f2ac": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOW…intained-apps/outputs/microsoft-powerpoint/darwin.json20 "5a1bc8d8": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/windowkeys/darwin.json20 "bdb7008e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/spokenly/darwin.json21 "d24fe105": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/markedit/darwin.json21 "b7ef05b4": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/beeper/darwin.json20 "3d6a41e1": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/qlmarkdown/darwin.json21 "38d4c3d8": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/scrivener/darwin.json20 "02b4a5c8": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/meetingbar/darwin.json21 "e4fec1fe": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/emclient/darwin.json21 "635a31ff": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOW…maintained-apps/outputs/github-copilot-app/darwin.json20 "10257e14": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/chime/darwin.json21 "ae30b295": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/microsoft-teams/darwin.json21 "ffa1e5a1": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/kaleidoscope/darwin.json21 "d77843ce": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/onionshare/darwin.json21 "cf6df640": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/homebrew-app/darwin.json20 "9ad8b52e": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
LOWee/maintained-apps/outputs/4k-stogram/darwin.json20 "e9a77143": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\CODE
997 more matches not shown…
Structural Annotation Overuse463 hits · 765 pts
SeverityFileLineSnippetContext
LOWcmd/osquery-perf/android_agent.go590 // Step 1: Register with mock AMAPI proxy (retry with backoff)COMMENT
LOWcmd/osquery-perf/android_agent.go604 // Step 2: Send ENROLLMENT PubSub to Fleet (retry with backoff)COMMENT
LOWcmd/osquery-perf/android_agent.go633 // Step 3: Periodic status reports + command ack + certificate verification loopCOMMENT
LOWcmd/osquery-perf/software-library/README.md110### Step 1: Initialize database from software.sqlCOMMENT
LOWcmd/osquery-perf/software-library/README.md118### Step 2: Export server dataCOMMENT
LOWcmd/osquery-perf/software-library/README.md160### Step 3: Import server dataCOMMENT
LOWcmd/osquery-perf/software-library/README.md174### Step 4: Generate software.sqlCOMMENT
LOWcmd/osquery-perf/software-library/README.md185### Step 5: VerifyCOMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go858 // Step 1: Create a CA and a team with a certificate template referencing it via GitOps.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go923 // Step 2: Run gitops removing the CA but WITHOUT the team file.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go954 // Step 3: Run gitops removing BOTH the CA and the certificate template.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2528 // Step 1: Apply a manual label with hosts.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2557 // Step 2: Re-apply the same label without the hosts key.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2584 // Step 3: Re-apply with empty hosts to clear membership.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5616 // Step 1: Apply a full global config with policies, agent_options, controls, and reports.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5677 // Step 2: Apply a minimal global config that omits policies, agent_options, reports, labels.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5873 // Step 1: Apply a full fleet config with policies, agent_options, controls, features, reports, and software.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5943 // Step 2: Apply a minimal fleet config that omits policies, agent_options, controls, reports, software, settings.COMMENT
LOWorbit/pkg/luks/snapd_fde.go71 // Step 1: generate a recovery key. snapd answers synchronously with the keyCOMMENT
LOWorbit/pkg/luks/snapd_fde.go86 // Step 2: enroll the generated key under the Fleet-owned name (a name-onlyCOMMENT
LOWorbit/pkg/luks/snapd_fde.go115 // Step 3: validate the freshly enrolled key before escrowing it, mirroringCOMMENT
LOWtools/ci/helm-values/logger-pubsub.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/enable-mysql-tls.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/disable-fleet-tls.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/logger-firehose-sts.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/logger-firehose-accesssid.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/custom-annotations.yaml28 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOWtools/ci/helm-values/enable-cloudsql-proxy.yaml25 # WARNING: This may cause database corruption if more than one migration is attempted at a timeCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go462 // Step 1: Add to draftingCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go470 // Step 2: Add :productCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go474 // Step 3: Set status to confirm and celebrateCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go482 // Step 4: Remove :releaseCOMMENT
LOWtools/cis/cis-test-runner.py1262 # Step 1: remove profile → query should poll to FalseCOMMENT
LOWtools/cis/cis-test-runner.py1282 # Step 2: re-install profile → query should poll to TrueCOMMENT
LOWtools/cis/cis-test-runner.py1382 # Step 1: Push enable profile, poll: enable passes + disable failsCOMMENT
LOWtools/cis/cis-test-runner.py1405 # Step 2: Push disable profile, poll: disable passes + enable failsCOMMENT
LOW⚡tools/dibble/pkg/command/wizard.go29 // Step 1: resolve config (URL + token), prompting only for what's missing.COMMENT
LOW⚡tools/dibble/pkg/command/wizard.go39 // Step 2: ping. Fail fast so the user knows their config is wrong beforeCOMMENT
LOWtools/dibble/pkg/command/wizard.go72 // Step 3: theme picker.COMMENT
LOWtools/dibble/pkg/command/wizard.go90 // Step 4: persist final config (URL, token, theme, insecure) if weCOMMENT
LOWtools/dibble/pkg/command/wizard.go111 // Step 5: entity multi-select.COMMENT
LOWtools/dibble/pkg/command/wizard.go162 // Step 6: counts.COMMENT
LOWtools/dibble/pkg/command/wizard.go185 // Step 7: run.COMMENT
LOW…ontend/pages/admin/OrgSettingsPage/cards/Info/Info.tsx261 // Step 1: org_info PATCH. Errors here surface as an org-infoCOMMENT
LOW…ained-apps/outputs/omnissa-horizon-client/windows.json21 "c624ea6f": "# Locates Omnissa Horizon Client's uninstaller from the registry and runs it\n# silently.\n#\n# OmnissaCODE
LOWee/cis/prompt.md40### Step 0: If this is a new OS version, scaffold and register it firstCOMMENT
LOWee/cis/prompt.md56### Step 1: Extract the changelogCOMMENT
LOWee/cis/prompt.md73### Step 2: Read affected sectionsCOMMENT
LOWee/cis/prompt.md89### Step 3: Generate policy YAMLCOMMENT
LOWee/cis/prompt.md107### Step 4: Generate test artifactsCOMMENT
LOWee/cis/prompt.md124### Step 5: Generate MDM profilesCOMMENT
LOW⚡ee/cis/prompt.md137### Step 6: Update README.mdCOMMENT
LOW⚡ee/cis/prompt.md143### Step 7: Handle removalsCOMMENT
LOW⚡ee/cis/prompt.md149### Step 8: ValidateCOMMENT
LOW…ticles/enrolling-linux-devices-for-fleet-management.md19### Step 1 - Verify the prerequisitesCOMMENT
LOW…ticles/enrolling-linux-devices-for-fleet-management.md35### Step 2 - Create the agent packageCOMMENT
LOW…ticles/enrolling-linux-devices-for-fleet-management.md64### Step 3 - Install the agent packageCOMMENT
LOWarticles/build-configuration-profiles-with-ai.md15## Step 1: Put the schema where the agent can read itCOMMENT
LOWarticles/build-configuration-profiles-with-ai.md98## Step 2: Write down the rules the agent can't inferCOMMENT
LOWarticles/build-configuration-profiles-with-ai.md114## Step 3: Ground the agent in real referencesCOMMENT
403 more matches not shown…
Fake / Example Data368 hits · 383 pts
SeverityFileLineSnippetContext
LOWCHANGELOG.md1084- Showed the end user's IdP full name (e.g. "Jane Doe's device") on the My device page header and browser tab when availCODE
LOWcmd/fleetctl/fleetctl/gitops_test.go266 ImpersonatedUserEmail: "admin@example.com",CODE
LOWcmd/fleetctl/fleetctl/preview.go326 email = "admin@example.com"CODE
LOWorbit/pkg/packaging/windows_templates_test.go146 opt.EndUserEmail = "user@example.com"CODE
LOWorbit/pkg/profiles/profiles_darwin_test.go232 {"happy path", withFleetdConfigAndEnrollment, "user@example.com", nil},CODE
LOWorbit/pkg/profiles/profiles_darwin_test.go251 require.Equal(t, "user@example.com", gotContent)CODE
LOWorbit/pkg/profiles/profiles_darwin_test.go581 require.Equal(t, *e, fleet.MDMCustomEnrollmentProfileItem{EndUserEmail: "user@example.com"})CODE
LOWorbit/pkg/profiles/profiles_darwin_test.go590 require.Equal(t, "user@example.com", v)CODE
LOWtools/upgrade/fleet_test.go138 token, err := client.Setup("admin@example.com", "Admin", "password123#", "Fleet Test")CODE
LOWtools/migration-cleanup/main_test.go17 runGit(t, dir, "config", "user.email", "test@test.com")CODE
LOW…ls/hangar/frontend/src/components/tabs/FleetctlTab.tsx855 placeholder="admin@example.com"CODE
LOWtools/dibble/pkg/seed/activities.go111 return tag + "user@example.com"CODE
LOWtools/dibble/pkg/seed/activities.go113 return tag + "user@example.com"CODE
LOWfrontend/__mocks__/hostMock.ts273 idp_full_name: "John Doe",CODE
LOWfrontend/__mocks__/deviceUserMock.ts12 email: "test@test.com",CODE
LOWfrontend/utilities/helpers.tests.tsx108 email: "admin@example.com",CODE
LOW…ppInstallDetailsModal/VppInstallDetailsModal.tests.tsx576 deviceAuthToken="fake_token"CODE
LOWfrontend/hooks/useFormValidation.tests.ts219 act(() => result.current.setField("email", "user@example.com"));CODE
LOWfrontend/pages/LoginPage/LoginPreviewPage.tsx60 email: "admin@example.com",CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx517 user_email: "user@example.com",CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx527 expect(screen.getByText("user@example.com")).toBeInTheDocument();CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx540 user_email: "user@example.com",CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx550 expect(screen.getByText("user@example.com")).toBeInTheDocument();CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx632 user_email: "user@example.com",CODE
LOW…tyFeed/GlobalActivityItem/GlobalActivityItem.tests.tsx643 expect(screen.getByText("user@example.com")).toBeInTheDocument();CODE
LOW…n/ManageUsersPage/components/UserForm/helpers.tests.ts11 email: "user@example.com",CODE
LOW…ManageUsersPage/components/UserForm/UserForm.tests.tsx236 await user.type(screen.getByLabelText("Email"), "user@example.com");CODE
LOW…ManageUsersPage/components/UserForm/UserForm.tests.tsx254 defaultEmail: "user@example.com",CODE
LOW…oogleWorkspaceSection/GoogleWorkspaceSection.tests.tsx37 impersonated_user_email: "admin@example.com",CODE
LOW…oogleWorkspaceSection/GoogleWorkspaceSection.tests.tsx46 expect(screen.getByDisplayValue("admin@example.com")).toBeInTheDocument();CODE
LOW…ents/GoogleWorkspaceSection/GoogleWorkspaceSection.tsx233 placeholder="admin@example.com"CODE
LOW…/pages/admin/OrgSettingsPage/cards/Smtp/Smtp.tests.tsx42 smtpSenderAddress: "admin@example.com",CODE
LOW…olicyAutomationsModal/PolicyAutomationsModal.tests.tsx21 author_email: "admin@example.com",CODE
LOW…/details/PolicyDetailsPage/PolicyDetailsPage.tests.tsx59 author_email: "admin@example.com",CODE
LOW…icyAutomationsFields/PolicyAutomationsFields.tests.tsx77 author_email: "admin@example.com",CODE
LOW…/PolicyAutomationsList/PolicyAutomationsList.tests.tsx29 author_email: "admin@example.com",CODE
LOW…onents/PatchAutomationCta/PatchAutomationCta.tests.tsx18 author_email: "admin@example.com",CODE
LOWfrontend/pages/hosts/details/cards/User/User.tests.tsx24 expect(screen.getByText("John Doe")).toBeInTheDocument();CODE
LOW…r/components/UpdateEndUserModal/UpdateEndUserModal.tsx50 placeholder="user@example.com"CODE
LOW…es/hosts/details/cards/Policies/HostPolicies.tests.tsx20 author_email: "test@test.com",CODE
LOWee/fleet-agent-downloader/config/bootstrap.js63 { emailAddress: 'admin@example.com', fullName: 'Ryan Dahl', isSuperAdmin: true, password: await sails.helpers.passwoCODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js6412 key === 'placeholder' && !el.__iephCODE
LOWee/fleet-agent-downloader/assets/styles/pages/faq.less7 [purpose='placeholder'] {CODE
LOWee/server/scim/users_test.go103 Email: "user@example.com",CODE
LOWee/server/scim/users_test.go140 UserName: "user@example.com",CODE
LOWee/server/scim/users_test.go249 fleetUser := newTestFleetUser(&fleetUserOpts{name: "John Doe", email: "john@example.com", ssoEnabled: true})CODE
LOWee/server/scim/users_test.go268 assert.Equal(t, "John Doe", deleted.UserName)CODE
LOWee/server/scim/users_test.go332 email: "admin@example.com",CODE
LOWee/server/scim/users_test.go345 scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"})CODE
LOWee/server/scim/users_test.go359 email: "admin@example.com",CODE
LOWee/server/scim/users_test.go375 scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"})CODE
LOWee/server/scim/users_test.go386 name: "Jane Doe",CODE
LOWee/server/scim/users_test.go445 if email == "user@example.com" {CODE
LOWee/server/scim/users_test.go463 assert.Equal(t, "user@example.com", emailQueried)CODE
LOWee/server/scim/users_test.go486 mocks.matchFleetUserByEmail("user@example.com", newTestFleetUser(&fleetUserOpts{id: 100, email: "user@example.com"}))CODE
LOWee/server/scim/users_test.go494 scimUser := newTestScimUser(&scimUserOpts{id: 7, userName: "user@example.com"})CODE
LOWee/server/scim/users_test.go508 scimUser := newTestScimUser(&scimUserOpts{id: 7, userName: "user@example.com"})CODE
LOWee/server/scim/users_test.go553 scimUser := newTestScimUser(&scimUserOpts{userName: "admin@example.com"})CODE
LOWee/server/scim/users_test.go555 email: "admin@example.com",CODE
LOWee/server/scim/users_test.go680 userName: "user@example.com",CODE
308 more matches not shown…
Verbosity Indicators99 hits · 167 pts
SeverityFileLineSnippetContext
LOWcmd/osquery-perf/android_agent.go590 // Step 1: Register with mock AMAPI proxy (retry with backoff)COMMENT
LOWcmd/osquery-perf/android_agent.go604 // Step 2: Send ENROLLMENT PubSub to Fleet (retry with backoff)COMMENT
LOWcmd/osquery-perf/android_agent.go633 // Step 3: Periodic status reports + command ack + certificate verification loopCOMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go858 // Step 1: Create a CA and a team with a certificate template referencing it via GitOps.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go923 // Step 2: Run gitops removing the CA but WITHOUT the team file.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go954 // Step 3: Run gitops removing BOTH the CA and the certificate template.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2528 // Step 1: Apply a manual label with hosts.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2557 // Step 2: Re-apply the same label without the hosts key.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go2584 // Step 3: Re-apply with empty hosts to clear membership.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5616 // Step 1: Apply a full global config with policies, agent_options, controls, and reports.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5677 // Step 2: Apply a minimal global config that omits policies, agent_options, reports, labels.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5873 // Step 1: Apply a full fleet config with policies, agent_options, controls, features, reports, and software.COMMENT
LOW…ationtest/gitops/gitops_enterprise_integration_test.go5943 // Step 2: Apply a minimal fleet config that omits policies, agent_options, controls, reports, software, settings.COMMENT
LOWorbit/pkg/luks/snapd_fde.go71 // Step 1: generate a recovery key. snapd answers synchronously with the keyCOMMENT
LOWorbit/pkg/luks/snapd_fde.go86 // Step 2: enroll the generated key under the Fleet-owned name (a name-onlyCOMMENT
LOWorbit/pkg/luks/snapd_fde.go115 // Step 3: validate the freshly enrolled key before escrowing it, mirroringCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go462 // Step 1: Add to draftingCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go470 // Step 2: Add :productCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go474 // Step 3: Set status to confirm and celebrateCOMMENT
LOW⚡tools/github-manage/pkg/ghapi/workflows.go482 // Step 4: Remove :releaseCOMMENT
LOWtools/cis/cis-test-runner.py1262 # Step 1: remove profile → query should poll to FalseCOMMENT
LOWtools/cis/cis-test-runner.py1282 # Step 2: re-install profile → query should poll to TrueCOMMENT
LOWtools/cis/cis-test-runner.py1382 # Step 1: Push enable profile, poll: enable passes + disable failsCOMMENT
LOWtools/cis/cis-test-runner.py1405 # Step 2: Push disable profile, poll: disable passes + enable failsCOMMENT
LOW⚡tools/dibble/pkg/command/wizard.go29 // Step 1: resolve config (URL + token), prompting only for what's missing.COMMENT
LOW⚡tools/dibble/pkg/command/wizard.go39 // Step 2: ping. Fail fast so the user knows their config is wrong beforeCOMMENT
LOWtools/dibble/pkg/command/wizard.go72 // Step 3: theme picker.COMMENT
LOWtools/dibble/pkg/command/wizard.go90 // Step 4: persist final config (URL, token, theme, insecure) if weCOMMENT
LOWtools/dibble/pkg/command/wizard.go111 // Step 5: entity multi-select.COMMENT
LOWtools/dibble/pkg/command/wizard.go162 // Step 6: counts.COMMENT
LOWtools/dibble/pkg/command/wizard.go185 // Step 7: run.COMMENT
LOW…ontend/pages/admin/OrgSettingsPage/cards/Info/Info.tsx261 // Step 1: org_info PATCH. Errors here surface as an org-infoCOMMENT
LOWee/server/service/calendar.go154 // Now, we need to check if there are any events in the queue that need to be re-processed.COMMENT
LOW…ained-apps/outputs/omnissa-horizon-client/windows.json21 "c624ea6f": "# Locates Omnissa Horizon Client's uninstaller from the registry and runs it\n# silently.\n#\n# OmnissaCODE
LOWserver/mdm/android/service/service.go1851 // Step 1: Get all install templates and transition pending → delivering (atomically)COMMENT
LOWserver/mdm/android/service/service.go1879 // Step 2: Build and send config to AMAPI with ALL certificate templatesCOMMENT
LOWserver/mdm/android/service/service.go1897 // Step 3: Transition delivering → deliveredCOMMENT
LOW⚡server/fleetmcp/fleet_integration_test.go164 // Step 3: return more hosts than the cap (set to 5 above) so theCOMMENT
LOW⚡server/fleetmcp/fleet_integration_test.go174 // Step 2: one version per title.COMMENT
LOW⚡server/fleetmcp/fleet_integration_test.go181 // Step 1: one title, short page → stop.COMMENT
LOWserver/fleetmcp/fleet_integration.go1746 // Step 1: software titles affected by this CVE (optionally team-scoped).COMMENT
LOWserver/fleetmcp/fleet_integration.go1799 // Step 2: per title, fetch detail to get version IDs.COMMENT
LOWserver/fleetmcp/fleet_integration.go1843 // Step 3: per version_id, fetch hosts with composing filters server-side.COMMENT
LOWserver/datastore/mysql/software_upgrade_code_test.go439 // Step 3: Host A reports v2.0 with empty upgrade_codeCOMMENT
LOWserver/datastore/mysql/software_upgrade_code_test.go475 // Step 1: Host A reports "7-Zip 24.08 (x64 edition)" with upgrade_codeCOMMENT
LOWserver/datastore/mysql/software_upgrade_code_test.go513 // Step 2: Host B reports "7-Zip 24.09 (x64 edition)" with SAME upgrade_code but different nameCOMMENT
LOWserver/datastore/mysql/microsoft_mdm_test.go5799 // Step 1: create a remove row and ACK it as verified → row deleted.COMMENT
LOWserver/datastore/mysql/microsoft_mdm_test.go5837 // Step 2: fresh install of the same profile with a new command UUID.COMMENT
LOWserver/datastore/mysql/locks.go66 // information_schema.innodb_lock_waits has been deprecated in MySQL 8, so we need to check if it exists.COMMENT
LOWserver/datastore/mysql/microsoft_mdm.go3931 // Step 1: Load UUIDs of profiles to be deleted.COMMENT
LOWserver/datastore/mysql/microsoft_mdm.go3944 // Step 2: Retain the content of profiles being deleted so the profile-manager cron can build <Delete> commands after tCOMMENT
LOWserver/datastore/mysql/microsoft_mdm.go3955 // Step 3: Delete the config profile rows.COMMENT
LOWserver/datastore/mysql/microsoft_mdm.go3975 // Step 4: Clean up host-profile rows for deleted profiles (terminal removes + never-sent installs). The actual <DeleteCOMMENT
LOWserver/datastore/mysql/software_test.go2496 // Step 1: Host1 reports multiple software with the same bundle ID but different versionsCOMMENT
LOW⚡server/datastore/mysql/software_test.go2510 // Step 2: Host2 also reports the same softwareCOMMENT
LOW⚡server/datastore/mysql/software_test.go2517 // Step 3: Host3 reports the SAME software but with a different nameCOMMENT
LOW⚡server/datastore/mysql/software_test.go2526 // Step 4: Verify insertion into software behaviorCOMMENT
LOWserver/datastore/mysql/software_test.go11659 // Step 1: Initial software setup - just one app with bundle IDCOMMENT
LOWserver/datastore/mysql/apple_mdm.go7750 // Step 1: Get up to 3 old command UUIDs from nano_enrollment_queue for thisCOMMENT
LOWserver/datastore/mysql/apple_mdm.go7771 // Step 2: From ncr, find which of those command UUIDs have been acknowledged orCOMMENT
39 more matches not shown…
Modern AI Meta-Vocabulary56 hits · 138 pts
SeverityFileLineSnippetContext
MEDIUMorbit/pkg/table/extension.go197 // factors. Vendored from github.com/karmine05/agentic-detector.COMMENT
MEDIUMorbit/pkg/table/internal/fsutil/fsutil.go256// large, machine-generated, or irrelevant to agentic-config discovery.COMMENT
MEDIUMorbit/pkg/table/ai_tools/README.md13- Upstream: https://github.com/karmine05/agentic-detectorCODE
MEDIUMorbit/pkg/table/ai_tools/internal/classify/classify.go6// agentic-risk signal.COMMENT
MEDIUMorbit/pkg/table/ai_tools/internal/evidence/bundle.go215 // Skip path-like or dotdir "names" (e.g. ".claude", "agentic-detector").COMMENT
MEDIUMorbit/pkg/table/ai_tools/internal/netsock/netsock.go2// agentic network sockets: locally-bound AI/MCP/inference listeners andCOMMENT
MEDIUMorbit/pkg/table/ai_tools/internal/agents/agents.go54 // single highest-risk agentic posture on a host.COMMENT
MEDIUMtools/release/publish_release.sh411 local qa_groups=("#g-apple-at-work" "#g-auto-patching" "#g-byod" "#g-orchestration" "#g-supply-chain" "#g-power-CODE
MEDIUMtools/github-manage/pkg/tui/table.go17// prioritize labels 'story', 'bug', ':release', ':product', '#g-mdm', '#g-orchestration',COMMENT
MEDIUMtools/github-manage/pkg/tui/table.go24 priorityLabels := map[string]bool{"story": true, "bug": true, ":release": true, ":product": true, "#g-mdm": true, "#g-oCODE
MEDIUMtools/github-manage/pkg/ghapi/projects.go41 71: "#g-orchestration", // g-orchestration projectCODE
MEDIUM…reTitleDetailsPage/AddVersionModal/AddVersionModal.tsx67 // Submitting an unmodified scaffold is treated as "no configuration".COMMENT
MEDIUM…Page/EditConfigurationModal/EditConfigurationModal.tsx75 // Place cursor between <dict> tags when starting with empty XML scaffoldCOMMENT
MEDIUM…tleDetailsPage/VersionFormFields/VersionFormFields.tsx45// Add/Edit modals treat an unmodified scaffold as "no configuration" so theCOMMENT
MEDIUM…TitleDetailsPage/EditVersionModal/EditVersionModal.tsx58 // Submitting an unmodified scaffold is treated as "no configuration".COMMENT
MEDIUM…TitleDetailsPage/EditVersionModal/EditVersionModal.tsx80 // Pre-fill the editor with the scaffold when the stored config is empty.COMMENT
MEDIUM…TitleDetailsPage/EditVersionModal/EditVersionModal.tsx105 // Empty editor or unmodified scaffold clears the config (null forCOMMENT
MEDIUM…TitleDetailsPage/EditVersionModal/EditVersionModal.tsx107 // deliberate clear, same effect as the scaffold.COMMENT
MEDIUMee/cis/prompt.md40### Step 0: If this is a new OS version, scaffold and register it firstCOMMENT
MEDIUMarticles/the-cost-of-code-as-config.md119The quickest way to see this in detail is to inspect our [it-and-security](https://github.com/fleetdm/fleet/tree/main/itCODE
MEDIUMarticles/build-configuration-profiles-with-ai.md9- Fleet, with your configuration in a Git repository. An agent needs that reviewable, schema-legible structure to act agCODE
MEDIUMarticles/supercharging-endpoint-management.md1# Supercharging endpoint management with AI assistants and event-driven automationCOMMENT
MEDIUMarticles/not-everything-runs-in-kubernete.md28#### Cloud-based data leader chooses Fleet for orchestration:COMMENT
MEDIUMarticles/rethinking-endpoint-management.md47## The orchestration layerCOMMENT
MEDIUMarticles/warp-breach-find-which-laptops-run-warp.md31This is the same argument Fleet made in [agentic security is only as good as the device data underneath it](https://fleeCODE
MEDIUMarticles/spain-ai-agent-data-breach-no-human.md10- **We called this one early.** In ["Agentic security is only as good as the device data underneath it,"](https://fleetdCODE
MEDIUMarticles/spain-ai-agent-data-breach-no-human.md53- [**Read the fuller argument**](https://fleetdm.com/articles/agentic-security-needs-ground-truth) for what ground truthCODE
MEDIUMarticles/spain-ai-agent-data-breach-no-human.md58- SecurityWeek, [First Agentic AI Data Breach Reported to Spanish Regulator](https://www.securityweek.com/first-agentic-CODE
MEDIUMarticles/nvidia-gtc-2026.md5**[NVIDIA GTC](https://www.nvidia.com/gtc/) BERLIN — Oct. 21, 2026** — [Fleet Device Management](https://fleetdm.com), tCODE
MEDIUMarticles/endpoint-data-loss-prevention.md75### How should teams compare browser-based DLP with agent-based DLP?COMMENT
MEDIUM…cles/sashiko-kernel-cves-which-linux-hosts-affected.md48- **Read the argument for ground truth:** [fleetdm.com/articles/agentic-security-needs-ground-truth](https://fleetdm.comCODE
MEDIUM…icles/zammad-zero-days-root-flaw-find-where-it-runs.md17DIVD discloses vulnerabilities for a living, and on September 21 its own Zammad helpdesk was breached. On October 1, DIVCODE
MEDIUM…icles/zammad-zero-days-root-flaw-find-where-it-runs.md24[Help Net Security](https://www.helpnetsecurity.com/2026/10/01/divd-agentic-ai-attack-breach/) and [SecurityWeek](https:CODE
MEDIUM…icles/zammad-zero-days-root-flaw-find-where-it-runs.md53Fleet has argued that [agentic security needs ground truth](https://fleetdm.com/articles/agentic-security-needs-ground-tCODE
MEDIUM…icles/zammad-zero-days-root-flaw-find-where-it-runs.md67- **Read the argument for ground truth:** [fleetdm.com/articles/agentic-security-needs-ground-truth](https://fleetdm.comCODE
MEDIUM…icles/zammad-zero-days-root-flaw-find-where-it-runs.md71- Help Net Security, [AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit](https://www.heCODE
MEDIUM.claude/skills/fleet-article-formatting/SKILL.md127### Honest-claims guardrailsCOMMENT
MEDIUM.claude/skills/aikido-tickets/SKILL.md57| Orchestration | `#g-orchestration` | https://github.com/orgs/fleetdm/projects/71/ |CODE
MEDIUM.claude/skills/fleet-case-study-formatting/SKILL.md143### Voice and honesty guardrails — stricter than other content typesCOMMENT
MEDIUMserver/service/integration_mdm_macos_setup_test.go2081 // The integration test scaffold doesn't register the rotation cron, soCOMMENT
MEDIUM…s/Contributing/architecture/modular-monolith/README.md111├── bootstrap/ # Public: dependency injection entry pointCODE
MEDIUMdocs/Get started/FAQ.md486### If I use a software orchestration tool (Ansible, Chef, Puppet, etc.) to manage agent options, do I have to apply theCOMMENT
MEDIUMhandbook/it/security.md2126In June 2026, [Aikido Security](https://www.aikido.dev/) performed a white box penetration test of the Fleet applicationCODE
MEDIUMhandbook/company/product-groups.md38| [Orchestration](#orchestration-group) | Increase Fleet's integration footprint. Measured by the number of configuCODE
MEDIUMhandbook/company/product-groups.md68> The [Slack channel](https://fleetdm.slack.com/archives/C084F4MKYSJ), [kanban release board](https://github.com/orgs/flCODE
MEDIUMhandbook/company/product-groups.md1235Please see [handbook/company/product-groups/orchestration](https://fleetdm.com/handbook/company/product-groups#orchestraCODE
MEDIUM.github/workflows/check-go-patch-release.yml6# #g-orchestration board: one for updating Go in the Fleet server and one forCOMMENT
MEDIUM.github/workflows/check-go-patch-release.yml177 labels: '#g-orchestration',CODE
MEDIUM.github/workflows/check-go-patch-release.yml199 labels: ['#g-orchestration'],CODE
MEDIUM.github/workflows/check-go-patch-release.yml209 // --- Project board: add to #g-orchestration and set status to "Inbox" ---COMMENT
MEDIUM.github/workflows/check-go-patch-release.yml225 const PROJECT_ID = 'PVT_kwDOBDAnic4A4BEx'; // #g-orchestration (#71)CODE
MEDIUM.github/workflows/check-go-patch-release.yml248 console.log(`Issue #${issue.number} is already on the #g-orchestration board — skipping.`);CODE
MEDIUM.github/workflows/check-go-patch-release.yml264 console.log(`Added issue #${issue.number} to #g-orchestration board (item ${itemId})`);CODE
MEDIUM…ithub/actions/eng-metrics/test/markdown-parser.test.js520### orchestration groupCOMMENT
MEDIUM.github/ISSUE_TEMPLATE/release-qa-fleetd.md5labels: '#g-orchestration,:release'CODE
MEDIUM.github/ISSUE_TEMPLATE/release-qa.md5labels: '#g-orchestration,#g-apple-at-work,#g-power-to-pc,#g-auto-patching,#g-supply-chain,#g-byod,:release'CODE
AI Slop Vocabulary48 hits · 132 pts
SeverityFileLineSnippetContext
MEDIUMcmd/fleet/serve_test.go49// more robust pattern instead of doing this everywhereCOMMENT
MEDIUMorbit/pkg/setup_experience/setup_experience.go74 // when we check for them? Should we have a more robust way to handle the indeterminateCOMMENT
MEDIUMtools/hangar/internal/settings/settings.go297// adopted, so an upgrade is seamless.COMMENT
MEDIUMtools/github-manage/pkg/jarvis/board.go3// leverage-ordered buckets (what's blocking others, what's a quick win, whatCOMMENT
MEDIUMtools/github-manage/pkg/jarvis/board.go23// Bucket groups items by leverage — who is blocked and how cheaply you can clear it.COMMENT
MEDIUMtools/github-manage/pkg/jarvis/board.go38// BucketOrder is the display and priority order, highest leverage first.COMMENT
MEDIUMtools/github-manage/pkg/jarvis/fetch.go69// repo and classifies them into the leverage board. It runs the gh callsCOMMENT
MEDIUMtools/github-manage/pkg/jarvis/fetch.go129 // leverage buckets below so they aren't shown twice.COMMENT
MEDIUMtools/github-manage/pkg/jarvis/projectview.go63// keys surfaced (to exclude from the leverage buckets), and status/projectCOMMENT
MEDIUMtools/github-manage/pkg/jarvis/workitem.go48// Claude session working on it. It's an issue-centric overlay on the leverageCOMMENT
MEDIUMtools/github-manage/pkg/jarvis/workitem.go57 PR *Item // linked PR item (already leverage-classified), nil if noneCODE
MEDIUMtools/github-manage/pkg/jarvis/projectview_test.go11 // leverage bucket from the last full fetch.COMMENT
MEDIUMtools/github-manage/pkg/jarvis/projectview_test.go54 // #200 must be removed from the leverage bucket (no longer shown twice).COMMENT
MEDIUMtools/github-manage/pkg/jarvis/projectview_test.go54 // #200 must be removed from the leverage bucket (no longer shown twice).COMMENT
MEDIUMtools/github-manage/pkg/jarvis/buckets.go24// BuildBoard classifies the user's PRs and assigned issues into leverage buckets.COMMENT
MEDIUMfrontend/pages/hosts/ManageHostsPage/helpers.ts26// Consider using a third-party library if more robust validation is desiredCOMMENT
MEDIUM…ontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx1174 // No success toast, to make column setting more seamlessCOMMENT
MEDIUMee/server/service/software_installers.go2133 // the correct, timing-robust signal. See #48879.COMMENT
LOWee/maintained-apps/outputs/zed/windows.json20 "3b164442": "# Locates Zed's Inno Setup uninstaller from the registry and runs it silently.\n# Zed's Inno installer CODE
LOWee/maintained-apps/outputs/windsurf/windows.json21 "bb230cc3": "$softwareNameLike = \"Windsurf*\"\n$publisherLike = \"*Codeium*\"\n\n$paths = @(\n 'HKLM:\\SOFTWARECODE
LOWee/maintained-apps/outputs/antigravity-ide/windows.json20 "65cab11a": "$softwareNameLike = \"Antigravity*\"\n$publisherLike = \"*Google*\"\n\n$paths = @(\n 'HKLM:\\SOFTWACODE
MEDIUM…/vulnerability-dashboard/assets/dependencies/moment.js3418 // to utilize falling through the cases.COMMENT
MEDIUMee/cis/win-11/cis-policy-queries.yml4587 Note #1: Organizations that utilize 3rd-party commercial software to manage unique & complex local Administrator pasCODE
MEDIUMee/cis/win-11-intune/l1_win11_intune.yaml10032 Note #2: Organizations that utilize a third--party solution for patching may choose toCODE
MEDIUMwebsite/scripts/build-static-content.js909 let mdStringForThisOpenPosition = `# ${openPosition.jobTitle}\n\n## Let's start with why we exist. 📡\n\nEverCODE
MEDIUMwebsite/assets/js/pages/configuration-builder.page.js48 // Used to keep track of which payloads have been added to the profile builder. (Essentially formData for the payloaCOMMENT
MEDIUMwebsite/assets/js/pages/configuration-builder.page.js5760 // Used to keep track of which payloads have been added to the profile builder. (Essentially formData for the paylCOMMENT
MEDIUMwebsite/assets/dependencies/moment.js3418 // to utilize falling through the cases.COMMENT
MEDIUMserver/mdm/maintainedapps/installers.go96 // This is OK for the first 20 apps we support, but we should do something more robust once weCOMMENT
MEDIUMserver/mdm/nanomdm/test/protocol/transport.go40// The MDM channels utilize this transport to communicate with the host.COMMENT
MEDIUMserver/mdm/nanomdm/storage/mysql/async.go66// value. Otherwise it returns nil and false. Essentially, if the number ofCOMMENT
MEDIUMserver/mdm/nanomdm/push/service/service.go187 // some environments may heavily utilize individual pushes.COMMENT
MEDIUMserver/fleetmcp/schema.go364// and a little more robust than the previous tokenizer since it survivesCOMMENT
MEDIUMserver/service/integration_mdm_lifecycle_test.go1680 // This mirrors how GetHostMDMCheckinInfo derives SCEPRenewalInProgress and is robust to a hostCOMMENT
MEDIUMserver/service/validation_setup.go31 // TODO - implement more robust URL validation hereCOMMENT
MEDIUM…er/service/integration_enterprise_software_fma_test.go658 // first been added via FMA. For a more robust handling of possible error scenarios when addingCOMMENT
MEDIUM…er/service/integration_enterprise_certificates_test.go231 // name-based lookup instead of list-position keeps the test robust against any orderCOMMENT
MEDIUM…s/solutions/cis/win-11/policies/cis-policy-queries.yml3913 Note #1: Organizations that utilize 3rd-party commercial software to manage unique & complex local Administrator pasCODE
MEDIUM…lutions/cis/win-11-intune/policies/l1_win11_intune.yml6143 # tags: framework:CISv8.1, benchmark:win11, level:1, platform:windows, category:configuration, requirement:standard, cCOMMENT
MEDIUM…lutions/cis/win-11-intune/policies/l1_win11_intune.yml9073 Note #2: Organizations that utilize a third--party solution for patching may choose toCODE
MEDIUMhandbook/company/testimonials.yml369# quote: We started working with Fleet Device Management in early March 2022 because we were looking for a reliable obCOMMENT
MEDIUMhandbook/company/open-positions.yml51# - 🧠 Identify opportunities to improve financial systems and tooling, implementing best practices that reduce manuaCOMMENT
MEDIUMhandbook/company/open-positions.yml59# - 🧑‍💻 Comfortable working with modern tooling and excited to leverage technology to automate and streamline financCOMMENT
MEDIUMhandbook/company/open-positions.yml103# - 🚀 Work collaboratively with product and engineering teams to facilitate feature development based on customer asks.COMMENT
MEDIUMhandbook/company/open-positions.yml112# - 🧑‍🔬 Experience working with Enterprise customers to coordinate resolution of complex technical issues and project mCOMMENT
MEDIUMhandbook/company/open-positions.yml164# - 🦢 Work with the Product Design, Customer Success, and Engineering teams to facilitate feature development based oCOMMENT
MEDIUMhandbook/company/open-positions.yml305# - 🚀 Work collaboratively with product and engineering teams to facilitate feature development based on customer asCOMMENT
MEDIUMhandbook/company/open-positions.yml423# - 🦢 Work with the Product Design, Customer Success, and Engineering teams to facilitate feature development based COMMENT
Hallucination Indicators10 hits · 100 pts
SeverityFileLineSnippetContext
CRITICAL…fleet-agent-downloader/assets/dependencies/sails.io.js908 self._raw.io.engine.transport.on('error', function(err){CODE
CRITICAL…eet-agent-downloader/assets/dependencies/jquery.min.js4null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;returnCODE
CRITICALee/server/service/googlecas/googlecas.go161 issued, err := client.Projects.Locations.CaPools.Certificates.Create(ca.CAPoolResourceName(), request).CODE
CRITICAL…ulnerability-dashboard/assets/dependencies/sails.io.js908 self._raw.io.engine.transport.on('error', function(err){CODE
CRITICAL…nerability-dashboard/assets/dependencies/jquery.min.js4null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;returnCODE
CRITICALwebsite/scripts/deliver-estimation-report.js70 graphqlHairball.data.organization.projectsNext.nodes.map((betaProject) => ({CODE
CRITICALwebsite/assets/dependencies/sails.io.js908 self._raw.io.engine.transport.on('error', function(err){CODE
CRITICALwebsite/assets/dependencies/jquery.min.js4null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!o.radioValue&&"radio"===b&&B(a,"input")){var c=a.value;returnCODE
CRITICALserver/mdm/android/service/androidmgmt/proxy_client.go242 call := p.mgmt.Enterprises.Devices.Operations.Get(operationName).Context(ctx)CODE
CRITICALserver/mdm/android/service/androidmgmt/google_client.go250 op, err := g.mgmt.Enterprises.Devices.Operations.Get(operationName).Context(ctx).Do()CODE
Self-Referential Comments30 hits · 94 pts
SeverityFileLineSnippetContext
MEDIUMorbit/pkg/packaging/windows_templates.go710 # Creating a COM instance of the WindowsInstaller.Installer COM objectCOMMENT
MEDIUM⚡tools/tuf/releaser.sh218 # Create a branch to make the changelog update on.COMMENT
MEDIUM⚡tools/tuf/releaser.sh226 # Create a new branch to cherry pick the changelog commit to.COMMENT
MEDIUM⚡tools/tuf/releaser.sh230 # Create a new PR with the changelog.COMMENT
MEDIUMtools/loadtest/scripts_and_profiles/main.go487 # Create the extensions directoryCOMMENT
MEDIUMtools/software/icons/generate-icons.sh397 # Create a temporary icns file from the extracted PNG for compatibility with rest of scriptCOMMENT
MEDIUMee/server/service/embedded_scripts/linux_lock.sh63# Create the pam_nologin files with our custom messageCOMMENT
MEDIUMee/server/service/embedded_scripts/linux_lock.sh91# Create a systemd service to recreate nologin files on bootCOMMENT
MEDIUMdocs/queries.yml2078 # Create a custom object with the desired fields.COMMENT
MEDIUMdocs/queries.yml2370 # Create a custom object with the desired fieldsCOMMENT
MEDIUMdocs/queries.yml2438 # Create a custom object with the desired fieldsCOMMENT
MEDIUMdocs/scripts.yml51 # Create the file using touchCOMMENT
MEDIUMdocs/scripts.yml623 # Create the local user accountCOMMENT
MEDIUMdocs/solutions/macos/scripts/macos_sethostname.sh13# Define the new hostnameCOMMENT
MEDIUMdocs/solutions/linux/scripts/linux_sethostname.sh21# Define the new hostnameCOMMENT
MEDIUMdocs/solutions/apple-container/fleetlab.sh56# Create a self-signed certificate whose Subject Alternative Names (SANs) coverCOMMENT
MEDIUM…tions/cis/macos-15/scripts/macos15-CIS_sudo_logging.sh15# Create the file if it doesn't existCOMMENT
MEDIUM.github/zizmor-gate.yml5# This file is passed explicitly via the action's `config:` input rather than being namedCOMMENT
MEDIUM.github/workflows/deploy-agent-downloader.yml103 # Create a git tree object from the currently staged repository state for this Heroku deploy.COMMENT
MEDIUM.github/workflows/deploy-agent-downloader.yml105 # Create a parentless commit from the tree object.COMMENT
MEDIUM.github/workflows/deploy-vulnerability-dashboard.yml106 # Create a git tree object that contains only the changes in the /website folder.COMMENT
MEDIUM.github/workflows/deploy-vulnerability-dashboard.yml108 # Create a parentless commit from the tree object.COMMENT
MEDIUM.github/workflows/deploy-fleet-website.yml135 # Create a git tree object that contains only the changes in the /website folder.COMMENT
MEDIUM.github/workflows/deploy-fleet-website.yml137 # Create a parentless commit from the tree object.COMMENT
MEDIUM…structure/infrastructure/terraform/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUM…re/infrastructure/guardduty-alerts/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUM…arch_ansible/roles/elasticapm/templates/apm-server.yml19 # Define a shared secret token for authorizing agents using the "Bearer" authorization method.COMMENT
MEDIUM…frastructure/dogfood/terraform/gcp/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUM…re/dogfood/terraform/aws-tf-module/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUM…orm/aws-tf-module/db-temp-restores/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
Hyper-Verbose Identifiers81 hits · 80 pts
SeverityFileLineSnippetContext
LOWtools/release/calendar-sync/sync.py276def match_develop_to_milestone(CODE
LOWtools/release/calendar-sync/sync.py301def fleetd_release_day_summary(version: str) -> str:CODE
LOWtools/api/README.md150def get_all_vulnerable_software_titles():CODE
LOWtools/api/README.md164def get_hosts_for_software_version(version_id):CODE
LOWtools/cis/CIS-Benchmark-diff.py18def remove_trailing_whitespace(text):CODE
LOWtools/cis/CIS-Benchmark-diff.py39def extract_recommendations_fitz(pdf_path, start_phrase, end_phrase):CODE
LOWtools/cis/cis-test-runner.py352def _find_enable_disable_profiles(cis_id: str, profiles_dir: Path) -> tuple[Path | None, Path | None]:CODE
LOWtools/cis/cis-test-runner.py976def wait_for_fleet_registration(CODE
LOW…perArchLinuxRolling/TooltipWrapperArchLinuxRolling.tsx10export default function TooltipWrapperArchLinuxRolling({CODE
LOW…uppet/fleetdm/spec/functions/preassign_profile_spec.rb132 def expect_successful_calls_with_host_profiles(host_profiles, ensure_profile)CODE
LOW…fleet-agent-downloader/assets/dependencies/sails.io.js899 })(function goAheadAndActuallyConnect() {CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js2146function extractPropsFromVNodeData (CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js4064function createFunctionalComponent (CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js4105function cloneAndMarkFunctionalResult (vnode, data, contextVm, options) {CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js4322function createComponentInstanceForVnode (CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js4690function resolveConstructorOptions (Ctor) {CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js5791 function removeAndInvokeRemoveHook (vnode, rm) {CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js6708function getAndRemoveAttr (CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js9961function isDirectChildOfTemplateFor (node) {CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js10706function createCompileToFunctionFn (compile) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js91 function getSpecialTransitionEndEvent() {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js154 getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1893 function getOffsetRectRelativeToArbitraryNode(children, parent) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1945 function getViewportOffsetRectRelativeToArtbitraryNode(element) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1993 function getFixedPositionOffsetParent(element) {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js626 function replaceLongDateFormatTokens(input) {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js2386function configFromStringAndFormat(config) {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js2967function isDaylightSavingTimeShifted () {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js3081function positiveMomentsDifference(base, other) {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js4324function getSetRelativeTimeRounding (roundingFunction) {CODE
LOW…/vulnerability-dashboard/assets/dependencies/moment.js4336function getSetRelativeTimeThreshold (threshold, limit) {CODE
LOW…ulnerability-dashboard/assets/dependencies/sails.io.js899 })(function goAheadAndActuallyConnect() {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js2146function extractPropsFromVNodeData (CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js4064function createFunctionalComponent (CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js4105function cloneAndMarkFunctionalResult (vnode, data, contextVm, options) {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js4322function createComponentInstanceForVnode (CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js4690function resolveConstructorOptions (Ctor) {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js5791 function removeAndInvokeRemoveHook (vnode, rm) {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js6708function getAndRemoveAttr (CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js9961function isDirectChildOfTemplateFor (node) {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js10706function createCompileToFunctionFn (compile) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js91 function getSpecialTransitionEndEvent() {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js154 getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1893 function getOffsetRectRelativeToArbitraryNode(children, parent) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1945 function getViewportOffsetRectRelativeToArtbitraryNode(element) {CODE
LOW…/assets/dependencies/bootstrap-4/bootstrap-4.bundle.js1993 function getFixedPositionOffsetParent(element) {CODE
LOW…ile-generator/configuration-profile-generator-cases.js2323function isWorthRetryingAfterAPause(err) {CODE
LOW…enerator/tests/configuration-profile-generator.test.js372function withAdmxTemplatesCollapsed(profile) {CODE
LOWwebsite/api/helpers/generate-configuration-profile.js281function mobileconfigWrittenFromPayloadSettings(rawResult) {CODE
LOWwebsite/api/helpers/generate-configuration-profile.js314function windowsProfileWrittenFromCommands(rawResult) {CODE
LOWwebsite/api/helpers/generate-configuration-profile.js343function withDoubleEscapedLineBreaksRepaired(content, profileType) {CODE
LOWwebsite/api/helpers/generate-configuration-profile.js397function doesContentMatchProfileType(content, profileType) {CODE
LOWwebsite/assets/dependencies/moment.js626 function replaceLongDateFormatTokens(input) {CODE
LOWwebsite/assets/dependencies/moment.js2386function configFromStringAndFormat(config) {CODE
LOWwebsite/assets/dependencies/moment.js2967function isDaylightSavingTimeShifted () {CODE
LOWwebsite/assets/dependencies/moment.js3081function positiveMomentsDifference(base, other) {CODE
LOWwebsite/assets/dependencies/moment.js4324function getSetRelativeTimeRounding (roundingFunction) {CODE
LOWwebsite/assets/dependencies/moment.js4336function getSetRelativeTimeThreshold (threshold, limit) {CODE
LOWwebsite/assets/dependencies/sails.io.js899 })(function goAheadAndActuallyConnect() {CODE
LOWwebsite/assets/dependencies/vue.js2146function extractPropsFromVNodeData (CODE
21 more matches not shown…
Synthetic Comment Markers12 hits · 75 pts
SeverityFileLineSnippetContext
HIGHwebsite/assets/robots.txt16# include providing AI-generated search summaries.COMMENT
HIGH…cles/sashiko-kernel-cves-which-linux-hosts-affected.md16In March, Kroah-Hartman [told The Register](https://www.theregister.com/software/2026/03/26/linux-kernel-czar-says-ai-buCODE
HIGH…eet-ai-assisted-policy-descriptions-and-resolutions.md43Also, the end user can read about a policy during an [automated maintenance window scheduled in their calendar](https://CODE
HIGHserver/service/profile_validation.go189 // Strict mode checks AI-generated profiles, whose findings should be visible;COMMENT
HIGHhandbook/engineering/README.md216> [Ownership](https://fleetdm.com/handbook/company#ownership) is one of Fleet's key values. When a bot opens a PR on youCODE
HIGHhandbook/engineering/README.md216> [Ownership](https://fleetdm.com/handbook/company#ownership) is one of Fleet's key values. When a bot opens a PR on youCODE
HIGHhandbook/company/product-groups.md265- Whether a [sub-task](#sub-tasks) should be created versus folded into the parent story, including reviewing any AI-genCODE
HIGHhandbook/company/open-positions.yml501# - 🌐 Assist with domain registrations, SaaS tool evaluations, and vendor management as requested.COMMENT
HIGHhandbook/company/pricing-features-table.yml1531# - description: AI generated CVSS v4 context. Coming soon (2024-12-31).COMMENT
HIGHhandbook/company/pricing-features-table.yml1539# - industryName: AI-generated descriptions (optional)COMMENT
HIGHhandbook/company/why-this-way.md310## Why read every line of AI-generated work?COMMENT
HIGHhandbook/company/why-this-way.md317- **Cognitive debt.** Anything generated by AI that you didn't write yourself starts as cognitive debt. You don't fully CODE
Slop Phrases17 hits · 32 pts
SeverityFileLineSnippetContext
LOWorbit/goreleaser-windows-arm64.yml6# If this is updated make sure to update the "How to build from source" section in the README.md.COMMENT
LOWorbit/goreleaser-macos.yml6# If this is updated make sure to update the "How to build from source" section in the README.md.COMMENT
LOWorbit/goreleaser-windows.yml6# If this is updated make sure to update the "How to build from source" section in the README.md.COMMENT
LOWorbit/goreleaser-linux.yml6# If this is updated make sure to update the "How to build from source" section in the README.md.COMMENT
LOWorbit/goreleaser-linux-arm64.yml6# If this is updated make sure to update the "How to build from source" section in the README.md.COMMENT
MEDIUM⚡tools/release/publish_release.sh692# Now you can use the $dry_run variable to see if the option was setCOMMENT
LOWee/fleet-agent-downloader/config/models.js83 // Plus, don't forget to configure MongoDB as your default datastore:COMMENT
LOWee/vulnerability-dashboard/config/models.js83 // Plus, don't forget to configure MongoDB as your default datastore:COMMENT
LOWwebsite/config/models.js83 // Plus, don't forget to configure MongoDB as your default datastore:COMMENT
LOWdocs/solutions/tines/mdm-migration-jamf-pro.json153 "content": "# Configuration\n\n## Jamf\n\nSet up a Jamf Pro [API Role and Client](https://learn.jamf.com/en-US/bunCODE
MEDIUMhandbook/company/pricing-features-table.yml1# [?]: To generate new ASCII art headings used in this file, you can use the @mikermcneil/kit npm package. See https://gCOMMENT
LOW⚡.github/workflows/test-go.yaml81 # make sure to update supported versions docs when MySQL versions changeCOMMENT
LOW⚡.github/workflows/test-go.yaml122 # make sure to update supported versions docs when Redis/Valkey versions changeCOMMENT
LOW⚡.github/workflows/test-go-activity.yaml48 # make sure to update supported versions docs when MySQL versions changeCOMMENT
LOW.github/workflows/golangci-lint.yml73 # Don't forget to updateCOMMENT
LOW.github/workflows/golangci-lint.yml131 # Don't forget to updateCOMMENT
LOW.github/scripts/rclone-install.sh17#when adding a tool to the list make sure to also add its corresponding command further in the scriptCOMMENT
Deep Nesting33 hits · 30 pts
SeverityFileLineSnippetContext
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py169CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py267CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py322CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py354CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py371CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py659CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py713CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py775CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py918CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py968CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py1143CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py156CODE
LOWtools/release/calendar-sync/sync.py106CODE
LOWtools/release/calendar-sync/sync.py453CODE
LOWtools/cis/CIS-Benchmark-diff.py39CODE
LOWtools/cis/cis-test-runner.py398CODE
LOWtools/cis/cis-test-runner.py976CODE
LOWtools/cis/cis-test-runner.py1004CODE
LOWtools/cis/cis-test-runner.py1227CODE
LOWtools/cis/cis-test-runner.py1811CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py169CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py267CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py322CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py354CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py371CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py659CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py713CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py775CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py918CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py968CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py1143CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py156CODE
LOW…utions/api-scripts/sync_applecare_coverage_to_fleet.py194CODE
Empty Error Handlers4 hits · 20 pts
SeverityFileLineSnippetContext
HIGH…es/new/.agents/skills/fleet-gitops/scripts/validate.py210except ImportError:CODE
HIGHtools/cis/cis-test-runner.py923except subprocess.TimeoutExpired:CODE
HIGHtools/cis/cis-test-runner.py990except (HTTPError, URLError):CODE
HIGH.claude/skills/fleet-gitops/scripts/validate.py210except ImportError:CODE
Excessive Try-Catch Wrapping17 hits · 19 pts
SeverityFileLineSnippetContext
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py194 except Exception as e: # noqa: BLE001 - any network or parse failure just disables the checkCODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py247 except Exception as e: # noqa: BLE001 - PyYAML raises its own hierarchyCODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py499 except Exception: # noqa: BLE001CODE
LOW…es/new/.agents/skills/fleet-gitops/scripts/validate.py503 except Exception as e: # noqa: BLE001CODE
MEDIUM…es/new/.agents/skills/fleet-gitops/scripts/validate.py106def rel(self, p):CODE
LOWtools/release/calendar-sync/sync.py784 except Exception as e: # noqa: BLE001CODE
LOW⚡tools/cis/cis-test-runner.py1459 except Exception as e:CODE
LOWtools/cis/cis-test-runner.py2242 except Exception as e:STRING
LOWarticles/google-conditional-access-integration.md215 except Exception as e:CODE
LOWarticles/google-conditional-access-integration.md262 except Exception as e:CODE
MEDIUMarticles/google-conditional-access-integration.md129def upstream_error(source, r):CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py194 except Exception as e: # noqa: BLE001 - any network or parse failure just disables the checkCODE
LOW.claude/skills/fleet-gitops/scripts/validate.py247 except Exception as e: # noqa: BLE001 - PyYAML raises its own hierarchyCODE
LOW.claude/skills/fleet-gitops/scripts/validate.py499 except Exception: # noqa: BLE001CODE
LOW.claude/skills/fleet-gitops/scripts/validate.py503 except Exception as e: # noqa: BLE001CODE
MEDIUM.claude/skills/fleet-gitops/scripts/validate.py106def rel(self, p):CODE
LOW…aude/skills/handbook-pr/scripts/check-handbook-diff.sh183except Exception as e:CODE
TODO Padding13 hits · 19 pts
SeverityFileLineSnippetContext
LOWserver/mdm/nanodep/godep/account_driven_enrollment.go37// TODO: Implement error checks to cover https://developer.apple.com/documentation/devicemanagement/assign-account-driveCOMMENT
LOWserver/mdm/microsoft/wstep.go63 // TODO: implement other methods as needed:COMMENT
LOWserver/mdm/scep/depot/bolt/depot.go175 // TODO: implement allowTimeCOMMENT
LOWserver/mdm/scep/depot/bolt/depot.go176 // TODO: implement revocationCOMMENT
LOWserver/service/integration_mdm_misc_test.go640 // TODO: Add tests for other combinations of mac and windows mdm enabled/disabledCOMMENT
LOWserver/service/integration_mdm_misc_test.go785 // TODO: Add tests for other combinations of mac and windows mdm enabled/disabledCOMMENT
LOWserver/service/mdm_test.go1347// TODO: Add tests for Apple DDM authz?COMMENT
LOWserver/service/apple_mdm_test.go5863 // TODO: Add tests for gitops and observer plus roles? (Settings endpoint test above may also need to be updated)COMMENT
LOW…er/service/integration_certificate_authorities_test.go122 URL: mockHydrantServer.URL, // TODO: implement a test server?CODE
LOWserver/service/integration_mdm_profiles_crud_test.go742 // TODO: Add tests for OS updates declaration when implemented.COMMENT
LOWserver/vulnerabilities/nvd/tools/cpedict/cpedict.go51// TODO: implementCOMMENT
LOWserver/vulnerabilities/nvd/tools/cpedict/cpedict.go57// TODO: implementCOMMENT
LOWserver/vulnerabilities/nvd/tools/cpedict/cpedict.go99 // TODO: implement ProvenanceRecordCOMMENT
Example Usage Blocks11 hits · 16 pts
SeverityFileLineSnippetContext
LOWtools/version-from-branch.sh5# Usage:COMMENT
LOW…/cleanup-docker-sha-tags/cleanup-dockerhub-sha-tags.sh6# Usage:COMMENT
LOWtools/cleanup-docker-sha-tags/cleanup-quay-sha-tags.sh6# Usage:COMMENT
LOWtools/release/backport-check.sh15# Usage:COMMENT
LOWtools/loadtest/metrics/collect-metrics.sh5# Usage:COMMENT
LOWtools/loadtest/metrics/compare-metrics.sh5# Usage:COMMENT
LOWtools/loadtest/scripts_and_profiles/main.go142# Usage:COMMENT
LOWtools/docker-idp/build-push-docker-idp.sh13# Usage:COMMENT
LOWserver/platform/logging/testutils/test_logger.go12// Example usage:COMMENT
LOW…s/solutions/macos/scripts/uninstall-santa-extension.sh7# Usage:COMMENT
LOWapps/fleet-desktop-macos/dev-notify.sh8# Usage:COMMENT
AI Response Leakage2 hits · 12 pts
SeverityFileLineSnippetContext
HIGHarticles/remote-yara-rules.md46 [API](https://fleetdm.com/docs/rest-api/rest-api#modify-configuration). Reference each rule file by path under the mainCODE
HIGHdocs/Configuration/agent-configuration.md269 # returned by `SELECT platform FROM os_version`. In this example, the baseCOMMENT
Magic Placeholder Names2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHwebsite/scripts/freeze-open-pull-requests.js12 sails_custom__githubAccessToken=YOUR_TOKEN_HERE sails run scripts/freeze-open-pull-requests.js --dryCODE
HIGHwebsite/scripts/freeze-open-pull-requests.js15 sails_custom__githubAccessToken=YOUR_TOKEN_HERE sails run scripts/freeze-open-pull-requests.js --limit=100`,CODE
Overly Generic Function Names5 hits · 5 pts
SeverityFileLineSnippetContext
LOWtools/fleet-slackbot/slack-handlers.js76async function handleRequest({ userText, userId, channelId, threadTs, messageTs, threadContext, client, config, github, CODE
LOWee/fleet-agent-downloader/assets/dependencies/vue.js3446function getData (data, vm) {CODE
LOWee/vulnerability-dashboard/assets/dependencies/vue.js3446function getData (data, vm) {CODE
LOWee/fleetd-chrome/src/mockServiceWorker.js140async function handleRequest(event, requestId) {CODE
LOWwebsite/assets/dependencies/vue.js3446function getData (data, vm) {CODE
Unused Imports3 hits · 2 pts
SeverityFileLineSnippetContext
LOWtools/release/calendar-sync/sync.py22CODE
LOWtools/cis/cis-test-runner.py18CODE
LOW…f-module/db-temp-restores/scripts/show_db_temp_info.py4CODE