Light, fluffy, and always free - The AWS Local Emulator alternative
This report summarizes scanner evidence for floci-io/floci, a Java project with 26,662 GitHub stars. SynthScan examined 1,568,356 lines of code across 5730 source files, recording 3535 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 7.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 619 finding(s).
Are imports declared and package/API names verified? 464 finding(s).
Are wrappers, guards, and repeated structures necessary? 2904 finding(s).
Which changes need focused human review? 3535 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3535 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compatibility-tests/compat-terraform/main.tf | 665 | # ── SES Receipt Rule Set ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …t-java/src/test/java/com/floci/test/SchedulerTest.java | 135 | // ──────────────────────────── Schedule CRUD ──────────────────────────── | COMMENT |
| MEDIUM | …t-java/src/test/java/com/floci/test/SchedulerTest.java | 546 | // ──────────────────────────── Tagging ──────────────────────────── | COMMENT |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 80 | // ── Lambda handler source code ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 160 | // ── Setup / Teardown ───────────────────────────────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 182 | // ── Helpers ────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 287 | // ──────────────────────────── 1. Basic WebSocket flow ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 319 | // ──────────────────────────── 2. Chat-style broadcast ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 372 | // ──────────────────────────── 3. $connect authorization ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 419 | // ──────────────────────────── 4. Route selection ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 472 | // ──────────────────────────── 5. @connections API ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 532 | // ──────────────────────────── 6. Stage variables ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 571 | // ──────────────────────────── 7. Mock integration ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 612 | // ──────────────────────────── 8. Disconnect cleanup ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 653 | // ──────────────────────────── 9. Payload size limit ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 693 | // ──────────────────────────── 10. Server-initiated close via @connections DELETE ──────────────────────────── | STRING |
| MEDIUM | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 741 | // ── WebSocket message capture listener ─────────────────────────────────── | STRING |
| MEDIUM | …dk-test-java/src/test/java/com/floci/test/EksTest.java | 162 | // ──────────────────────────── Managed node groups (#1137) ──────────────────────────── | COMMENT |
| MEDIUM | …dk-test-java/src/test/java/com/floci/test/EksTest.java | 162 | // ──────────────────────────── Managed node groups (#1137) ──────────────────────────── | COMMENT |
| MEDIUM | …c/test/java/com/floci/test/SesDedicatedIpPoolTest.java | 140 | // ─────────────── IP-level / scaling / account warmup ─────────────── | COMMENT |
| MEDIUM | …st/java/com/floci/test/CloudWatchLogsInsightsTest.java | 138 | // ──────────────────────────── helpers ──────────────────────────── | COMMENT |
| MEDIUM | …a/src/test/java/com/floci/test/IamEnforcementTest.java | 59 | // ── Resource names ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …a/src/test/java/com/floci/test/IamEnforcementTest.java | 108 | // ── Shared state ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …a/src/test/java/com/floci/test/IamEnforcementTest.java | 177 | // ── Client factories ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …a/src/test/java/com/floci/test/IamEnforcementTest.java | 223 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …test-java/src/test/java/com/floci/test/LambdaTest.java | 212 | // ───────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …test-java/src/test/java/com/floci/test/LambdaTest.java | 214 | // ───────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/com/floci/test/CloudFormationLambdaInlineZipTest.java | 48 | // ── Node.js inline source ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/com/floci/test/CloudFormationLambdaInlineZipTest.java | 108 | // ── Python inline source ─────────────────────────────────────────────────── | STRING |
| MEDIUM | …/com/floci/test/CloudFormationLambdaInlineZipTest.java | 153 | // ── helpers ──────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | …st/java/com/floci/test/LambdaPayloadSizeLimitTest.java | 53 | // ── Request payload limits ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …st/java/com/floci/test/LambdaPayloadSizeLimitTest.java | 104 | // ── Response payload limit ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …va/src/test/java/com/floci/test/CodeDeployEcsTest.java | 107 | // ── ELB v2 setup ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …va/src/test/java/com/floci/test/CodeDeployEcsTest.java | 187 | // ── ECS setup ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …va/src/test/java/com/floci/test/CodeDeployEcsTest.java | 227 | // ── CodeDeploy ECS deployment ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …va/src/test/java/com/floci/test/CodeDeployEcsTest.java | 402 | // ── Canary deployment variant ───────────────────────────────────────────── | STRING |
| MEDIUM | …rc/test/java/com/floci/test/StepFunctionsTagsTest.java | 69 | // ──────────────── State Machine Tags ──────────────── | STRING |
| MEDIUM | …rc/test/java/com/floci/test/StepFunctionsTagsTest.java | 115 | // ──────────────── Activity Tags ──────────────── | STRING |
| MEDIUM | …rc/test/java/com/floci/test/StepFunctionsTagsTest.java | 146 | // ──────────────── Helpers ──────────────── | STRING |
| MEDIUM | …-java/src/test/java/com/floci/test/CognitoSrpTest.java | 186 | // ────────────────────────── Caldera SRP helpers ────────────────────────── | COMMENT |
| MEDIUM | …est/java/com/floci/test/StepFunctionsActivityTest.java | 56 | // ──────────────────────────── Part A: Activity CRUD ──────────────────────────── | COMMENT |
| MEDIUM | …est/java/com/floci/test/StepFunctionsActivityTest.java | 98 | // ──────────────────────────── Part B: Activity task roundtrip ──────────────────────────── | COMMENT |
| MEDIUM | …est/java/com/floci/test/StepFunctionsActivityTest.java | 156 | // ──────────────────────────── Part C: waitForTaskToken ──────────────────────────── | STRING |
| MEDIUM | …est/java/com/floci/test/StepFunctionsActivityTest.java | 220 | // ──────────────────────────── helper ──────────────────────────── | STRING |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 129 | // ─── Load Balancers ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 224 | // ─── Target Groups ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 291 | // ─── Targets ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 341 | // ─── Listeners ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 394 | // ─── Rules ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 589 | // ─── Tags ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 621 | // ─── SSL Policies / Account Limits ─────────────────────────────────────── | COMMENT |
| MEDIUM | …-test-java/src/test/java/com/floci/test/ElbV2Test.java | 650 | // ─── Delete cascade ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/test/java/com/floci/test/SesConfigurationSetTest.java | 66 | // ─────────────────────────── V2 (SESv2) ─────────────────────────── | COMMENT |
| MEDIUM | …/test/java/com/floci/test/SesConfigurationSetTest.java | 129 | // ─────────────────────────── V1 (SES) ─────────────────────────── | COMMENT |
| MEDIUM | …/test/java/com/floci/test/SesConfigurationSetTest.java | 191 | // ────────────────────────── Validation ────────────────────────── | COMMENT |
| MEDIUM | …/test/java/com/floci/test/SesConfigurationSetTest.java | 215 | // ─────────────────── V2 SuppressionOptions (per-CS) ─────────────────── | COMMENT |
| MEDIUM | …/test/java/com/floci/test/SesConfigurationSetTest.java | 308 | // ─────────────────────────── Helpers ─────────────────────────── | COMMENT |
| MEDIUM | …va/com/floci/test/StepFunctionsDescribeMapRunTest.java | 159 | // ──────────────────────────── helpers ──────────────────────────── | STRING |
| MEDIUM | …test-java/src/test/java/com/floci/test/BackupTest.java | 55 | // ── Vault ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …test-java/src/test/java/com/floci/test/BackupTest.java | 110 | // ── Plan ─────────────────────────────────────────────────────────────────── | COMMENT |
| 2160 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …t-java/src/test/java/com/floci/test/SchedulerTest.java | 314 | .retryPolicy(software.amazon.awssdk.services.scheduler.model.RetryPolicy.builder() | CODE |
| CRITICAL | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 254 | .credentialsProvider(software.amazon.awssdk.auth.credentials.StaticCredentialsProvider.create( | STRING |
| CRITICAL | …com/floci/test/ApiGatewayV2WebSocketDataPlaneTest.java | 255 | software.amazon.awssdk.auth.credentials.AwsBasicCredentials.create("test", "test"))) | STRING |
| CRITICAL | …test-java/src/test/java/com/floci/test/AthenaTest.java | 266 | software.amazon.awssdk.services.glue.model.Column.builder().name("customer") | CODE |
| CRITICAL | …test-java/src/test/java/com/floci/test/AthenaTest.java | 267 | software.amazon.awssdk.services.glue.model.Column.builder().name("amount").t | CODE |
| CRITICAL | …test-java/src/test/java/com/floci/test/AthenaTest.java | 342 | .tags(software.amazon.awssdk.services.athena.model.Tag.builder() | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/SsmTest.java | 201 | software.amazon.awssdk.services.ssm.model.Tag.builder().key("env").value("test").build(), | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/SsmTest.java | 202 | software.amazon.awssdk.services.ssm.model.Tag.builder().key("team").value("backend").build() | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/EfsTest.java | 76 | .tags(software.amazon.awssdk.services.efs.model.Tag.builder().key("foo").value("bar").build()) | CODE |
| CRITICAL | …va/src/test/java/com/floci/test/CodeDeployEcsTest.java | 160 | .defaultActions(software.amazon.awssdk.services.elasticloadbalancingv2.model.Action.builder() | CODE |
| CRITICAL | …st-java/src/test/java/com/floci/test/FirehoseTest.java | 89 | .record(software.amazon.awssdk.services.firehose.model.Record.builder() | CODE |
| CRITICAL⚡ | …st-java/src/test/java/com/floci/test/FirehoseTest.java | 102 | software.amazon.awssdk.services.firehose.model.Record.builder().data(SdkBytes.fromString("{\"i\":1}", St | CODE |
| CRITICAL⚡ | …st-java/src/test/java/com/floci/test/FirehoseTest.java | 103 | software.amazon.awssdk.services.firehose.model.Record.builder().data(SdkBytes.fromString("{\"i\":2}", St | CODE |
| CRITICAL⚡ | …st-java/src/test/java/com/floci/test/FirehoseTest.java | 104 | software.amazon.awssdk.services.firehose.model.Record.builder().data(SdkBytes.fromString("{\"i\":3}", St | CODE |
| CRITICAL | …k-test-java/src/test/java/com/floci/test/Ec2Tests.java | 833 | .tags(software.amazon.awssdk.services.ec2.model.Tag.builder().key("Name").value("sdk-test-instance").bui | CODE |
| CRITICAL | …test/java/com/floci/test/SesAccountAttributesTest.java | 218 | org.junit.jupiter.api.Assumptions.assumeFalse(TestFixtures.isRealAws(), | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 71 | sesV2.createConfigurationSet(software.amazon.awssdk.services.sesv2.model.CreateConfigurationSetRequest.builder() | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 86 | assertThatThrownBy(() -> sesV2.createConfigurationSet(software.amazon.awssdk.services.sesv2.model.CreateConfigur | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 109 | sesV2.listConfigurationSets(software.amazon.awssdk.services.sesv2.model.ListConfigurationSetsRequest.bui | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 117 | sesV2.deleteConfigurationSet(software.amazon.awssdk.services.sesv2.model.DeleteConfigurationSetRequest.builder() | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 196 | assertThatThrownBy(() -> sesV2.createConfigurationSet(software.amazon.awssdk.services.sesv2.model.CreateConfigur | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 220 | sesV2.createConfigurationSet(software.amazon.awssdk.services.sesv2.model.CreateConfigurationSetRequest.builder() | CODE |
| CRITICAL | …/test/java/com/floci/test/SesConfigurationSetTest.java | 320 | sesV2.deleteConfigurationSet(software.amazon.awssdk.services.sesv2.model.DeleteConfigurationSetRequest.build | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/AcmTest.java | 287 | software.amazon.awssdk.services.acm.model.Tag.builder().key("Environment").value("test").build() | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/AcmTest.java | 288 | software.amazon.awssdk.services.acm.model.Tag.builder().key("Project").value("floci").build() | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/AcmTest.java | 309 | .tags(software.amazon.awssdk.services.acm.model.Tag.builder().key("Project").value("floci").build())); | CODE |
| CRITICAL | …st-java/src/test/java/com/floci/test/DynamoDbTest.java | 331 | software.amazon.awssdk.services.dynamodb.model.Tag.builder().key("env").value("test").build(), | CODE |
| CRITICAL | …st-java/src/test/java/com/floci/test/DynamoDbTest.java | 332 | software.amazon.awssdk.services.dynamodb.model.Tag.builder().key("team").value("backend").build( | CODE |
| CRITICAL | …ava/com/floci/test/CloudFormationVirtualHostTests.java | 38 | .credentialsProvider(software.amazon.awssdk.auth.credentials.StaticCredentialsProvider.create( | CODE |
| CRITICAL | …ava/com/floci/test/CloudFormationVirtualHostTests.java | 39 | software.amazon.awssdk.auth.credentials.AwsBasicCredentials.create("test", "test"))) | CODE |
| CRITICAL | …t-java/src/test/java/com/floci/test/S3ControlTest.java | 131 | software.amazon.awssdk.services.s3control.model.Tag.builder() | CODE |
| CRITICAL | …t-java/src/test/java/com/floci/test/S3ControlTest.java | 133 | software.amazon.awssdk.services.s3control.model.Tag.builder() | CODE |
| CRITICAL | …t-java/src/test/java/com/floci/test/S3ControlTest.java | 155 | .tags(software.amazon.awssdk.services.s3control.model.Tag.builder() | CODE |
| CRITICAL | …t-java/src/test/java/com/floci/test/S3ControlTest.java | 182 | software.amazon.awssdk.services.s3control.model.Tag.builder() | CODE |
| CRITICAL | …t-java/src/test/java/com/floci/test/S3ControlTest.java | 184 | software.amazon.awssdk.services.s3control.model.Tag.builder() | CODE |
| CRITICAL | …k-test-java/src/test/java/com/floci/test/EcsTests.java | 292 | .tags(software.amazon.awssdk.services.ecs.model.Tag.builder().key("env").value("test").build(), | CODE |
| CRITICAL | …k-test-java/src/test/java/com/floci/test/EcsTests.java | 293 | software.amazon.awssdk.services.ecs.model.Tag.builder().key("team").value("sdk").build()) | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 315 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 336 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 362 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 435 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 538 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 690 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 729 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 753 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …java/src/test/java/com/floci/test/SesTemplateTest.java | 812 | .template(software.amazon.awssdk.services.ses.model.Template.builder() | CODE |
| CRITICAL | …test/java/com/floci/test/LambdaFunctionConfigTest.java | 245 | .imageConfig(software.amazon.awssdk.services.lambda.model.ImageConfig.builder() | CODE |
| CRITICAL | …test/java/com/floci/test/LambdaFunctionConfigTest.java | 264 | .imageConfig(software.amazon.awssdk.services.lambda.model.ImageConfig.builder() | CODE |
| CRITICAL | …dk-test-java/src/test/java/com/floci/test/IamTest.java | 245 | .tags(software.amazon.awssdk.services.iam.model.Tag.builder().key("env").value("sdk-test").build()) | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 324 | software.amazon.awssdk.services.ses.model.CreateConfigurationSetEventDestinationRequest.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 326 | .eventDestination(software.amazon.awssdk.services.ses.model.EventDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 332 | .snsDestination(software.amazon.awssdk.services.ses.model.SNSDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 365 | software.amazon.awssdk.services.ses.model.DescribeConfigurationSetRequest.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 375 | software.amazon.awssdk.services.ses.model.CreateConfigurationSetEventDestinationRequest.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 377 | .eventDestination(software.amazon.awssdk.services.ses.model.EventDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 381 | .snsDestination(software.amazon.awssdk.services.ses.model.SNSDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 395 | software.amazon.awssdk.services.ses.model.UpdateConfigurationSetEventDestinationRequest.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 397 | .eventDestination(software.amazon.awssdk.services.ses.model.EventDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 401 | .snsDestination(software.amazon.awssdk.services.ses.model.SNSDestination.builder() | CODE |
| CRITICAL⚡ | …loci/test/SesConfigurationSetEventDestinationTest.java | 409 | software.amazon.awssdk.services.ses.model.DescribeConfigurationSetRequest.builder() | CODE |
| 281 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …rvent/floci/compat/RedshiftRelationalSpectrumTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …thub/hectorvent/floci/compat/RedshiftSpectrumTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …services/redshift/RedshiftSpectrumIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …ci/services/redshift/proxy/RedshiftRoleAccessTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …i/services/redshift/spectrum/SpectrumS3ReaderTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …s/redshift/spectrum/ExternalTableMaterializerTest.java | 0 | {"version":"2012-10-17","statement":[{"effect":"allow", "principal":{"service":"redshift.amazonaws.com"},"action":"sts:a | STRING |
| HIGH | …a/src/test/java/com/floci/test/IamEnforcementTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:*","resource":"*"} ]} | STRING |
| HIGH | …es/s3/S3CopyObjectSourcePermissionIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:*","resource":"*"} ]} | STRING |
| HIGH | …/floci/services/iam/IamEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:*","resource":"*"} ]} | STRING |
| HIGH | …/test/java/com/floci/test/S3BlockPublicAccessTest.java | 0 | {"version":"2012-10-17","statement":[{"sid":"oneaccount","effect":"allow", "principal":{"aws":"arn:aws:iam::111122223333 | STRING |
| HIGH | …/s3/S3BlockPublicAccessEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[{"sid":"oneaccount","effect":"allow", "principal":{"aws":"arn:aws:iam::111122223333 | STRING |
| HIGH | …ci/services/s3/S3BlockPublicAccessIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[{"sid":"oneaccount","effect":"allow", "principal":{"aws":"arn:aws:iam::111122223333 | STRING |
| HIGH | …orvent/floci/core/common/IamEnforcementFilterTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …/S3PresignedPostIamOnlyEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …/s3/S3PresignedPostAuthEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …/floci/services/iam/IamEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …orvent/floci/core/common/IamEnforcementFilterTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"deny","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …/S3PresignedPostIamOnlyEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"deny","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …/s3/S3PresignedPostAuthEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"deny","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …es/s3/S3PresignedUrlIamEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"deny","action":"s3:putobject","resource":"*"} ]} | STRING |
| HIGH | …e/common/AssumedRoleAccountRoutingIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …amodb/DynamoDbTagResourcePartitionIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …rvices/dynamodb/DynamoDbProjectionIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …services/dynamodb/DynamoDbTableArnIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …t/floci/services/dynamodb/DynamoDbIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …s/stepfunctions/StepFunctionsRetryIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …nctions/StepFunctionsMockedServiceIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …/dynamodb/DynamoDbKinesisStreamingIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …i/services/dynamodb/NativeDynamoDbJsonHandlerTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …amodb/backend/DynamoDbLocalBackendIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …ctions/StepFunctionsAccountContextIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …/services/apigateway/ApiGatewayAwsIntegrationTest.java | 0 | { "tablename": "%s", "keyschema": [{"attributename": "id", "keytype": "hash"}], "attributedefinitions": [{"attributename | STRING |
| HIGH | …ore/BedrockAgentCoreInvokeValidateIntegrationTest.java | 0 | { "agentruntimename": "tagagent", "agentruntimeartifact": {"containerconfiguration": {"containeruri": "x:latest"}}, "net | STRING |
| HIGH | …recontrol/BedrockAgentCoreEndpointIntegrationTest.java | 0 | { "agentruntimename": "tagagent", "agentruntimeartifact": {"containerconfiguration": {"containeruri": "x:latest"}}, "net | STRING |
| HIGH | …ol/BedrockAgentCoreTaggingIdentityIntegrationTest.java | 0 | { "agentruntimename": "tagagent", "agentruntimeartifact": {"containerconfiguration": {"containeruri": "x:latest"}}, "net | STRING |
| HIGH | …kagentcore/BedrockAgentCoreHarnessIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …bedrockruntime/BedrockProxyTimeoutIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …rvices/bedrockruntime/BedrockProxyIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …ices/bedrockruntime/BedrockRuntimeIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …ockruntime/BedrockProxyPassthroughIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …rockruntime/BedrockProxyInvalidUrlIntegrationTest.java | 0 | {"messages": [{"role": "user", "content": [{"text": "hi"}]}]} | STRING |
| HIGH | …/services/s3/S3PresignedPutTaggingIntegrationTest.java | 0 | <completemultipartupload> <part><partnumber>1</partnumber><etag>%s</etag></part> <part><partnumber>1</partnumber><etag>% | STRING |
| HIGH | …vices/s3/S3UploadPartCopyVersionedIntegrationTest.java | 0 | <completemultipartupload> <part><partnumber>1</partnumber><etag>%s</etag></part> <part><partnumber>1</partnumber><etag>% | STRING |
| HIGH | …vent/floci/services/s3/S3MultipartIntegrationTest.java | 0 | <completemultipartupload> <part><partnumber>1</partnumber><etag>%s</etag></part> <part><partnumber>1</partnumber><etag>% | STRING |
| HIGH | …hectorvent/floci/services/s3/S3AclIntegrationTest.java | 0 | <completemultipartupload> <part><partnumber>1</partnumber><etag>%s</etag></part> <part><partnumber>1</partnumber><etag>% | STRING |
| HIGH | …S3PresignedTaggingSigV4EnforcementIntegrationTest.java | 0 | <completemultipartupload> <part><partnumber>1</partnumber><etag>%s</etag></part> <part><partnumber>1</partnumber><etag>% | STRING |
| HIGH | …/S3PresignedPostIamOnlyEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"arn:aws:s3:::%1$s/*"} ]} | STRING |
| HIGH | …/s3/S3PresignedPostAuthEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"arn:aws:s3:::%1$s/*"} ]} | STRING |
| HIGH | …es/s3/S3CopyObjectSourcePermissionIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"arn:aws:s3:::%1$s/*"} ]} | STRING |
| HIGH | …es/s3/S3PresignedUrlIamEnforcementIntegrationTest.java | 0 | {"version":"2012-10-17","statement":[ {"effect":"allow","action":"s3:putobject","resource":"arn:aws:s3:::%1$s/*"} ]} | STRING |
| HIGH | …floci/services/s3/S3BlockPublicAccessSettingsTest.java | 0 | <publicaccessblockconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <blockpublicacls>%s</blockpublicacls> < | STRING |
| HIGH | …/s3/S3BlockPublicAccessEnforcementIntegrationTest.java | 0 | <publicaccessblockconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <blockpublicacls>%s</blockpublicacls> < | STRING |
| HIGH | …ci/services/s3/S3BlockPublicAccessIntegrationTest.java | 0 | <publicaccessblockconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <blockpublicacls>%s</blockpublicacls> < | STRING |
| HIGH | …vices/s3/S3AccelerateConfigurationIntegrationTest.java | 0 | <versioningconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <status>enabled</status> </versioningconfigura | STRING |
| HIGH | …nt/floci/services/s3/S3ReplicationIntegrationTest.java | 0 | <versioningconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <status>enabled</status> </versioningconfigura | STRING |
| HIGH | …ices/s3/S3ReplicationConfigurationIntegrationTest.java | 0 | <versioningconfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <status>enabled</status> </versioningconfigura | STRING |
| HIGH | …nt/floci/services/s3/S3AnalyticsConfigurationTest.java | 0 | <id>a</id> <filter> <and> <prefix>logs/</prefix> <tag><key>env</key><value>prod</value></tag> <tag><key>team</key><value | STRING |
| HIGH | …vent/floci/services/s3/S3MetricsConfigurationTest.java | 0 | <id>a</id> <filter> <and> <prefix>logs/</prefix> <tag><key>env</key><value>prod</value></tag> <tag><key>team</key><value | STRING |
| HIGH | …rvices/s3/S3AnalyticsConfigurationIntegrationTest.java | 0 | <id>a</id> <filter> <and> <prefix>logs/</prefix> <tag><key>env</key><value>prod</value></tag> <tag><key>team</key><value | STRING |
| HIGH | …services/s3/S3IntelligentTieringConfigurationTest.java | 0 | <id>a</id> <filter> <and> <prefix>logs/</prefix> <tag><key>env</key><value>prod</value></tag> <tag><key>team</key><value | STRING |
| 149 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/docs/test_check_service_matrix.py | 17 | def test_extract_descriptor_keys_basic(): | CODE |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 28 | def test_extract_descriptor_keys_ignores_other_string_literals(): | STRING |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 35 | def test_count_descriptor_calls_matches_literal_keys_when_all_literal(): | STRING |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 43 | def test_count_descriptor_calls_excludes_the_definition(): | STRING |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 227 | def test_find_unlinked_pages_flags_a_page_with_no_row(tmp_path): | STRING |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 234 | def test_find_unlinked_pages_honours_facet_exemption(tmp_path): | STRING |
| LOW⚡ | tools/docs/test_check_service_matrix.py | 240 | def test_find_unlinked_pages_ignores_non_markdown(tmp_path): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 55 | def test_count_descriptor_calls_catches_a_non_literal_key(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 67 | def test_extract_matrix_slugs_scoped_to_table(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 87 | def test_extract_matrix_slugs_strips_anchor(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 91 | def test_extract_matrix_action_counts(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 112 | def test_extract_matrix_action_counts_ignores_links_outside_matrix(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 134 | def test_extract_matrix_slugs_raises_on_missing_heading(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 145 | def test_find_undocumented_exact_match_needs_no_alias(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 157 | def test_find_undocumented_alias_resolves(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 168 | def test_find_undocumented_flags_genuine_gap(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 180 | def test_find_undocumented_unexpired_deferred_is_silenced(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 193 | def test_find_undocumented_expired_deferred_reports_and_still_flags(): | STRING |
| LOW | tools/docs/test_check_service_matrix.py | 209 | def test_find_undocumented_deferred_entry_already_resolved_is_not_flagged(): | STRING |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 30 | def test_namespace_and_leaf_of_a_three_segment_type(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 35 | def test_two_segment_type_keeps_its_prefix(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 45 | def test_renders_one_row_per_namespace_in_configured_order(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 56 | def test_unlisted_types_sort_alphabetically_after_curated_ones(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 66 | def test_notes_and_row_notes_are_appended(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 75 | def test_display_names_override_the_leaf(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 84 | def test_merged_namespace_folds_into_one_row(): | CODE |
| LOW | tools/docs/test_regen_cfn_resource_types.py | 97 | def test_extra_types_appear_after_inventory_types(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 112 | def test_warns_when_a_namespace_has_no_label(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 117 | def test_warns_when_type_order_names_a_type_nothing_provisions(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 125 | def test_warns_when_an_extra_type_has_no_reason(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 133 | def test_warns_when_a_type_is_claimed_by_two_provisioners(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 142 | def test_no_double_ownership_warning_when_each_type_has_one_owner(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 151 | def test_load_inventory_rejects_a_malformed_row(tmp_path): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 158 | def test_splice_replaces_only_the_marked_block(): | CODE |
| LOW⚡ | tools/docs/test_regen_cfn_resource_types.py | 165 | def test_splice_requires_exactly_one_marker_pair(): | CODE |
| LOW | tools/docs/test_regen_action_docs.py | 17 | def test_extract_switch_single_label(): | CODE |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 59 | def test_extract_switch_ignores_non_pascal_and_default(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 68 | def test_extract_switch_excludes_screaming_case_enum_labels(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 102 | def test_extract_rest_ucfirsts_method_names(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 110 | def test_extract_rest_requires_class_path(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 115 | def test_extract_rest_skips_comments_between_annotation_and_method(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 207 | def test_parse_marker_block_rejects_missing_markers(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 212 | def test_parse_table_rejects_non_table_line(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 218 | def test_parse_table_rejects_extra_columns(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 226 | def test_pipe_in_description_round_trips(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 251 | def test_regenerate_preserves_known_and_placeholders_new(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 261 | def test_regenerate_is_idempotent(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 268 | def test_regenerate_touches_only_marker_block(): | STRING |
| LOW⚡ | tools/docs/test_regen_action_docs.py | 275 | def test_render_marker_block_shape(): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 28 | def test_extract_switch_multi_label_arm(): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 38 | def test_extract_switch_multiline_arm(): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 133 | def test_extract_rest_inherits_methods_from_superclass(tmp_path: Path): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 159 | def test_extract_actions_applies_rename_and_exclude(tmp_path: Path): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 172 | def test_extract_actions_dedupes_across_sources(tmp_path: Path): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 188 | def test_split_row_honors_escaped_pipe(): | STRING |
| LOW | tools/docs/test_regen_action_docs.py | 192 | def test_parse_marker_block_preserves_descriptions(): | STRING |
| LOW | tools/docs/service_inventory.py | 219 | def parse_readme_category_names(md_source: str) -> list[str]: | CODE |
| LOW | tools/docs/service_inventory.py | 266 | def parse_action_table_services(path: Path) -> list[str]: | CODE |
| LOW | tools/docs/check_service_matrix.py | 110 | def extract_matrix_action_counts(md_source: str) -> dict[str, int]: | CODE |
| LOW | tools/docs/regen_action_docs.py | 96 | def _extract_raw_rest_methods(java_source: str) -> list[str]: | CODE |
| 392 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 54 | '{"a":false}', '{"a":"true"}', '{"a":null}', '{}', '{"a":{}}', | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 77 | '{"a":[1,2]}', '{"a":[2,1]}', '{"a":[null,2]}', | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 80 | '{"a":null}', '{}', '[1,2]', '{"a":2} trailing', | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 103 | ("or", "[level=ERROR || level=WARN, rest]"), | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 105 | ("cross-field", "[a=ERROR || b=one, b]"), | CODE |
| HIGH⚡ | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 118 | '1e-999', '"1e-999"', '0', 'true', '"true"', 'null', '[1,2]', '[null,2]', | CODE |
| HIGH⚡ | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 120 | structures = ['{}', '{"a":null}', '{"a":2}', '{"a":1}', '{"a":"2"}', | CODE |
| HIGH⚡ | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 122 | '{"a":[null,2]}', '{"a":{}}', '{"a":{"b":2}}', | CODE |
| HIGH⚡ | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 123 | '{"a":[{"b":1},{"b":2}]}', '{"a":[{"b":null}]}', | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 146 | ("bare-null", "{ $.a = null }", structures), | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 159 | ("json-keyword-case", "{ $.a is null }", structures), | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 171 | '{"a":true}', '{"a":false}', '{"a":[true,false]}', '{"a":[null]}', | CODE |
| HIGH | …/aws-capture/cloudwatchlogs/capture_filter_patterns.py | 172 | '{"a":[[null]]}', '{"a":[{"b":2},{"b":1}]}', '{"a":[{}]}', '{}', | CODE |
| HIGH⚡ | tools/docs/test_check_service_matrix.py | 20 | "ssm", storageMode(...), 5000L, null, ServiceProtocol.JSON, | CODE |
| HIGH⚡ | tools/docs/test_check_service_matrix.py | 31 | src = 'descriptor("kafka", "msk", true, true, "msk", null, 5000L, null, X, Y, Set.of("kafka-signing-prefix."), Set.o | STRING |
| HIGH⚡ | tools/docs/test_regen_action_docs.py | 62 | case null, default -> b(); | STRING |
| HIGH⚡ | tools/docs/test_service_inventory.py | 36 | "ssm", storageMode(...), 5000L, null, ServiceProtocol.JSON, | CODE |
| HIGH⚡ | tools/docs/test_service_inventory.py | 57 | null, null, 5000L, null, ServiceProtocol.REST_JSON, | CODE |
| HIGH⚡ | tools/docs/test_service_inventory.py | 71 | null, null, 5000L, AwsNamespaces.STS, ServiceProtocol.QUERY, | CODE |
| HIGH | tools/partition/partition_literals.py | 106 | re.compile(r'Arn\.of\(\s*"[^"]*"\s*,\s*(?:""|null)\s*,'), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 171 | ('AwsArnUtils.Arn.of( "s3" , null, "", bucket)', True), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 196 | ('partition.equals("aws")', True), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 197 | ('Objects.equals(parsed.partition(), "aws")', True), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 198 | ('Objects.equals("aws", partition)', True), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 199 | ('Objects.equals(arn.partition(), "aws")', True), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 200 | ('foo(Objects.equals(a, b), "aws")', False), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 201 | ('Objects.equals(a, b) || log("aws")', False), | CODE |
| HIGH⚡ | tools/partition/test_partition_literals.py | 209 | ('name.equals("awsome")', False), | CODE |
| HIGH⚡ | compatibility-tests/sdk-test-python/conftest.py | 231 | " const name = (event && event.name) ? event.name : 'World';\n" | CODE |
| HIGH | …tibility-tests/sdk-test-python/tests/test_sagemaker.py | 49 | "ContainerArguments": ["mkdir -p /opt/ml/model && echo ok > /opt/ml/model/model.txt"], | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/docs/regen_action_docs.py | 41 | # doc and the tool's output would agree on the omission. | COMMENT |
| LOW | tools/docs/service_matrix.yaml | 1 | # Registry for the service-matrix presence check (tools/docs/check_service_matrix.py). | COMMENT |
| LOW | tools/aws/regen_managed_policies.py | 61 | # AWS managed policy catalog. | COMMENT |
| LOW | tools/slr/service_linked_roles.py | 41 | import sys | COMMENT |
| LOW | tools/slr/service_linked_roles.py | 261 | if principal not in {row.principal for row in rows}: | COMMENT |
| LOW | tools/slr/service_linked_roles.py | 281 | # | COMMENT |
| LOW | docker/entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | …bility-tests/compat-terraform/run-bats-in-container.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …-terraform/test/security-group-rule-sources-tf/main.tf | 1 | # Regression coverage for #2266 at the Terraform layer. | COMMENT |
| LOW | …va/io/github/hectorvent/floci/compat/RedshiftTest.java | 41 | COMMENT | |
| LOW | …ibility-tests/compat-opentofu/run-bats-in-container.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docs/configuration/advanced/application-yml.md | 81 | flush-interval-ms: 5000 | COMMENT |
| LOW | .github/ci/prefetch-images.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/ci/prefetch-images.sh | 101 | # The Cedar sidecar pin lives in application.yml; read it rather than duplicate it. | COMMENT |
| LOW | .github/ci/compat-opentofu-allowlist-otf-only.txt | 1 | # Resource addresses allowed to exist ONLY in compat-opentofu/main.tf (not | COMMENT |
| LOW | .github/ci/compat-partition-allowlist-cn-north-1.txt | 1 | # Known failures of the Java SDK suite against a Floci deployed in cn-north-1, with the | COMMENT |
| LOW | .github/workflows/release.yml | 1 | name: Release | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 1 | name: PR Hygiene | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 61 | # runner already trusts, which is nobody's, so it would report every | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 121 | env: | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 141 | # GitHub is the authority here, and agents commit through GitHub | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 281 | - name: Title and commits follow Conventional Commits | COMMENT |
| LOW | .github/workflows/pr-hygiene.yml | 341 | exit $FAILED | COMMENT |
| LOW | .github/workflows/compatibility.yml | 181 | steps: | COMMENT |
| LOW | .github/workflows/compatibility.yml | 201 | # arch-neutral, so only classifier-based natives re-download), and | COMMENT |
| LOW | .github/workflows/nightly.yml | 1 | name: Nightly | COMMENT |
| LOW | .github/workflows/release-cut.yml | 1 | name: Release Cut | COMMENT |
| LOW | .github/workflows/iam-namespace-drift.yml | 1 | name: IAM Namespace Drift | COMMENT |
| LOW | .github/workflows/compat-partitions.yml | 1 | name: Partition Compatibility | COMMENT |
| LOW | .github/workflows/warm-compat-caches.yml | 1 | # Populates the buildx layer caches that `compatibility.yml`'s test legs read. | COMMENT |
| LOW | .github/workflows/warm-compat-caches.yml | 21 | # is keyed on. Test sources deliberately do not trigger a re-warm where they | COMMENT |
| LOW | .github/workflows/ci.yml | 141 | | sed 's/^/::warning title=prefetch-images.sh::/' || true | COMMENT |
| LOW | src/test/resources/application.yml | 361 | # docker-network: floci-network | COMMENT |
| LOW | …orvent/floci/core/common/IamEnforcementFilterTest.java | 1461 | List.of(FULL_AWS_ACCESS))); | COMMENT |
| LOW | …services/ssm/SsmCommandServiceDirectExecutionTest.java | 241 | assertEquals("Execution Timed Out", invocation.getStatusDetails()); | COMMENT |
| LOW | …services/ssm/SsmCommandServiceDirectExecutionTest.java | 321 | } | COMMENT |
| LOW | …services/ssm/SsmCommandServiceDirectExecutionTest.java | 401 | // observe "all done" and both enter updateCommandStatus's finalize branch concurrently on that | COMMENT |
| LOW | …thub/hectorvent/floci/services/eks/EksServiceTest.java | 781 | // A subnet that exists in the DEFAULT region and nowhere else. | COMMENT |
| LOW | …loci/services/lambda/LambdaVersionIntegrationTest.java | 201 | @Test | COMMENT |
| LOW | …loci/services/lambda/runtime/RuntimeApiServerTest.java | 581 | // inFlight under the lock, schedules a deferred sendInvocation on the | COMMENT |
| LOW | …loci/services/lambda/runtime/RuntimeApiServerTest.java | 801 | assertEquals(1, server.pendingQueueSize(), | COMMENT |
| LOW | …services/cloudformation/AwsIncludeIntegrationTest.java | 221 | // containsString cannot tell DeclaredTransforms apart from either of them and would | COMMENT |
| LOW | …2VpcEndpointNetworkInterfaceLookupIntegrationTest.java | 281 | "nothing in this VPC is customer-managed"); | COMMENT |
| LOW | …/hectorvent/floci/services/ec2/Ec2IntegrationTest.java | 1821 | COMMENT | |
| LOW | …/hectorvent/floci/services/ec2/Ec2IntegrationTest.java | 2041 | @Test | COMMENT |
| LOW | …orvent/floci/services/ec2/Ec2ContainerManagerTest.java | 881 | @Test | COMMENT |
| LOW | …orvent/floci/services/ec2/Ec2ContainerManagerTest.java | 901 | + Ec2ContainerManager.SSH_CLIENT_MISSING_EXIT_CODE), script); | COMMENT |
| LOW | src/main/resources/application.yml | 21 | # default. In TLS mode Quarkus listens on 127.0.0.1:4510/4511 behind the TCP proxy on 4566, and | COMMENT |
| LOW | src/main/resources/application.yml | 41 | add-all-charsets: true | COMMENT |
| LOW | src/main/resources/application.yml | 161 | host-persistent-path: ./data | COMMENT |
| LOW | src/main/resources/application.yml | 321 | # FLOCI_DOCKER_STREAMING_MAX_CONNECTIONS: separate pool for container log-follow streams, so | COMMENT |
| LOW | src/main/resources/application.yml | 601 | mock: false | COMMENT |
| LOW | src/main/resources/application.yml | 661 | # unauthenticated console is not reachable where the API deliberately is not. | COMMENT |
| LOW | src/main/resources/kms/aws-managed-keys.yaml | 1 | # AWS managed KMS keys. | COMMENT |
| LOW | src/main/resources/kms/aws-managed-keys.yaml | 21 | # | COMMENT |
| LOW | src/main/resources/kms/aws-managed-keys.yaml | 41 | # WHAT EACH ENTRY RESTS ON. The entries are grouped below by the strength of their evidence, so | COMMENT |
| LOW | src/main/resources/iam/managed-policies.yaml | 1 | # AWS managed policy catalog. | COMMENT |
| LOW | src/main/resources/sagemaker/instance-type-catalog.yaml | 1 | # Accelerator facts for SageMaker ml.* instance types. | COMMENT |
| LOW | …/floci/core/common/docker/LaunchedContainerAwsEnv.java | 141 | String ak = hostEnv.apply("AWS_ACCESS_KEY_ID"); | COMMENT |
| LOW | …vent/floci/core/common/docker/PerKeyContainerPool.java | 81 | // see nothing (this container isn't in the map yet) without the generation bump alone | COMMENT |
| 46 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …c/test/java/com/floci/test/SesMessageInsightsTest.java | 99 | String messageId = send("user@example.com", "compat-ordinary"); | CODE |
| LOW | …c/test/java/com/floci/test/SesMessageInsightsTest.java | 113 | assertThat(recipient.destination()).isEqualTo("user@example.com"); | CODE |
| LOW | …rc/test/java/com/floci/test/SesReceiptRuleSetTest.java | 132 | .recipients("probe@example.com", "other@example.org") | CODE |
| LOW | …rc/test/java/com/floci/test/SesReceiptRuleSetTest.java | 146 | assertThat(rule.recipients()).containsExactly("other@example.org", "probe@example.com"); | CODE |
| LOW | …est/java/com/floci/test/SesBatchGetMetricDataTest.java | 94 | send("user@example.com"); | CODE |
| LOW⚡ | compatibility-tests/sdk-test-python/tests/test_sts.py | 87 | WebIdentityToken="dummy-token", | CODE |
| LOW⚡ | compatibility-tests/sdk-test-python/tests/test_sts.py | 103 | WebIdentityToken="dummy-token", | CODE |
| LOW | …nt/floci/core/common/WebIdentityTokenVerifierTest.java | 102 | assertTrue(verifier.peekIssuer("dummy-token").isEmpty()); | CODE |
| LOW⚡ | …services/secretsmanager/SecretsManagerServiceTest.java | 1275 | service.createSecret("placeholder", "v1", null, null, null, null, REGION); | CODE |
| LOW⚡ | …services/secretsmanager/SecretsManagerServiceTest.java | 1277 | SecretVersion staged = service.putSecretValue("placeholder", null, null, | CODE |
| LOW | …oci/services/controltower/ControlTowerServiceTest.java | 416 | "parameters":[{"key":"IdentityCenterEnabledBaselineArn","value":"placeholder"}]} | CODE |
| LOW | …b/hectorvent/floci/services/sns/SnsMobilePushTest.java | 55 | "android-app", "GCM", Map.of("PlatformCredential", "fake-key"), REGION); | CODE |
| LOW | …floci/services/cognito/CognitoOAuthControllerTest.java | 127 | null, null, "s1", null, null, "user@example.com", null); | CODE |
| LOW⚡ | …torvent/floci/services/cognito/CognitoServiceTest.java | 2249 | "email", "admin@example.com", | CODE |
| LOW⚡ | …torvent/floci/services/cognito/CognitoServiceTest.java | 2252 | "email", "admin@example.com")); | CODE |
| LOW⚡ | …torvent/floci/services/cognito/CognitoServiceTest.java | 2255 | assertEquals("admin@example.com", updated.getAttributes().get("email")); | CODE |
| LOW | …ent/floci/services/cognito/CognitoIntegrationTest.java | 417 | { "Name": "email", "Value": "user@example.com" }, | CODE |
| LOW | …ent/floci/services/cognito/CognitoIntegrationTest.java | 2418 | { "Name": "email", "Value": "user@example.com" }, | CODE |
| LOW | …gnito/CognitoAttributeVerificationConcurrencyTest.java | 44 | private static final String ADMIN_EMAIL = "admin@example.com"; | CODE |
| LOW | …/services/cloudfront/CloudFrontOriginSecurityTest.java | 100 | "http", "user@example.com", 80, "/", null)); | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 1615 | "ObjectKey": "placeholder" | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 1659 | "ObjectKey": "placeholder" | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 1986 | "ObjectKey": "placeholder" | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 2054 | "ObjectKey": "placeholder" | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 2151 | "ObjectKey": "placeholder" | CODE |
| LOW | …services/codepipeline/CodePipelineIntegrationTest.java | 2251 | "ObjectKey": "placeholder" | CODE |
| LOW | …ices/iam/StsWebIdentityEnforcementIntegrationTest.java | 17 | assumeRole("dummy-token") | CODE |
| LOW | …es/iam/UnknownAccessKeyEnforcementIntegrationTest.java | 164 | .formParam("WebIdentityToken", "dummy-token") | CODE |
| LOW | …rvices/identitystore/IdentityStoreIntegrationTest.java | 42 | .body("UserName", equalTo("admin@example.com")) | CODE |
| LOW | …i/services/identitystore/IdentityStoreServiceTest.java | 41 | User user = service.createUser(request("UserName", "admin@example.com")); | CODE |
| LOW | …i/services/identitystore/IdentityStoreServiceTest.java | 143 | service.createUser(request("UserName", "admin@example.com")); | CODE |
| LOW | …floci/services/eks/EksIrsaEndToEndIntegrationTest.java | 252 | assumeRole("dummy-token") | CODE |
| LOW⚡ | …torvent/floci/services/ses/SesMessageInsightsTest.java | 32 | List<EmailInsights> insights = build(List.of("user@example.com"), Map.of()); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SesMessageInsightsTest.java | 35 | assertEquals("user@example.com", insights.get(0).destination()); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SesMessageInsightsTest.java | 41 | List<EmailInsights> insights = build(List.of("bounce@simulator.amazonses.com", "user@example.com"), Map.of()); | CODE |
| LOW | …torvent/floci/services/ses/SesMessageInsightsTest.java | 66 | addresses.add("user@example.com"); | CODE |
| LOW | …torvent/floci/services/ses/SesMessageInsightsTest.java | 94 | List<String> envelope = List.of("user@example.com", "success@simulator.amazonses.com"); | CODE |
| LOW | …torvent/floci/services/ses/SesMessageInsightsTest.java | 195 | List<EmailInsights> insights = build(List.of("user@example.com"), Map.of()); | CODE |
| LOW | …torvent/floci/services/ses/SesMessageInsightsTest.java | 216 | List<EmailInsights> insights = build(List.of("user@example.com"), Map.of()); | CODE |
| LOW | …/services/ses/SesMessageInsightsV2IntegrationTest.java | 105 | .body("Insights[0].Destination", equalTo("user@example.com")) | STRING |
| LOW | …vent/floci/services/ses/SesInsightsControllerTest.java | 88 | List.of("user@example.com"), List.of(), List.of(), List.of(), "old", "hi", null); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SimulatorAddressesTest.java | 60 | assertFalse(SimulatorAddresses.isSuccess("user@example.com")); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SimulatorAddressesTest.java | 61 | assertFalse(SimulatorAddresses.isBounce("user@example.com")); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SimulatorAddressesTest.java | 62 | assertFalse(SimulatorAddresses.isComplaint("user@example.com")); | CODE |
| LOW⚡ | …torvent/floci/services/ses/SimulatorAddressesTest.java | 63 | assertFalse(SimulatorAddresses.isSuppressionList("user@example.com")); | CODE |
| LOW | …oci/services/ses/SesIdentityListFilterServiceTest.java | 43 | identity("bob@example.org", "EmailAddress", "TemporaryFailure"); | CODE |
| LOW | …oci/services/ses/SesIdentityListFilterServiceTest.java | 44 | identity("carol@example.org", "EmailAddress", "Failed"); | CODE |
| LOW⚡ | …oci/services/ses/SesIdentityListFilterServiceTest.java | 57 | assertEquals(List.of("alice@filter.test", "bob@example.org", "carol@example.org"), | CODE |
| LOW⚡ | …oci/services/ses/SesIdentityListFilterServiceTest.java | 63 | assertEquals(List.of("carol@example.org"), names(Map.of("VERIFICATION_STATUS", "FAILED"))); | CODE |
| LOW⚡ | …oci/services/ses/SesIdentityListFilterServiceTest.java | 64 | assertEquals(List.of("bob@example.org"), names(Map.of("VERIFICATION_STATUS", "TEMPORARY_FAILURE"))); | CODE |
| LOW | …ctorvent/floci/services/ses/SesExportPayloadsTest.java | 61 | String[] lines = csv(List.of(email("hello", delivered("user@example.com")))).split("\n"); | CODE |
| LOW | …ctorvent/floci/services/ses/SesExportPayloadsTest.java | 79 | String[] lines = csv(List.of(email("hello", bounced("user@example.com")))).split("\n"); | CODE |
| LOW | …ctorvent/floci/services/ses/SesExportPayloadsTest.java | 88 | String row = csv(List.of(email("say \"hi\"", delivered("user@example.com")))).split("\n")[1]; | CODE |
| LOW | …loci/services/ses/SesReceiptRuleV1IntegrationTest.java | 50 | .formParam("Rule.Recipients.member.2", "other@example.org") | CODE |
| LOW | …loci/services/ses/SesReceiptRuleV1IntegrationTest.java | 72 | assertTrue(body.indexOf("other@example.org") < body.indexOf("probe@example.com")); | CODE |
| LOW | …ci/services/ses/SesIdentityCertificateServiceTest.java | 62 | identityService.verifyEmailIdentity("alice@example.org", REGION); | CODE |
| LOW⚡ | …ci/services/ses/SesIdentityCertificateServiceTest.java | 95 | service.associate("alice@example.org", null, CERT_ARN, REGION); | CODE |
| LOW⚡ | …ci/services/ses/SesIdentityCertificateServiceTest.java | 97 | assertEquals(List.of("alice@example.org"), | CODE |
| LOW⚡ | …ci/services/ses/SesIdentityCertificateServiceTest.java | 98 | fromAddresses(service.list("alice@example.org", null, null, REGION))); | CODE |
| LOW⚡ | …ci/services/ses/SesIdentityCertificateServiceTest.java | 100 | () -> service.associate("alice@example.org", "bob@example.org", CERT_ARN, REGION)); | CODE |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 61 | // Step 1: Create user WITHOUT the boolean field set | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 79 | // Step 2: Update user - set boolean to true and other fields | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 89 | // Step 3: Get the item and verify the boolean was set correctly | COMMENT |
| LOW | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 109 | // Step 1: Create user WITH boolean = false | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 122 | // Step 2: Update boolean to true | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 129 | // Step 3: Verify the boolean changed to true | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 17 | // Step 1: Create API | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 31 | // Step 2: Create Authorizer | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 49 | // Step 3: Update Authorizer via PATCH | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 74 | // Step 4: GET Authorizer to verify persistence | COMMENT |
| LOW | …vent/floci/services/acm/AcmServicePersistenceTest.java | 42 | // Step 1: Create a service with a persistent backend and create a certificate | COMMENT |
| LOW⚡ | …vent/floci/services/acm/AcmServicePersistenceTest.java | 58 | // Step 2: Create a second service instance sharing the same storage directory (simulating restart) | COMMENT |
| LOW⚡ | …vent/floci/services/acm/AcmServicePersistenceTest.java | 62 | // Step 3: Validate that the certificate was correctly restored and properties match | COMMENT |
| LOW | …rvent/floci/services/codedeploy/CodeDeployService.java | 1644 | // Step 1: shift canaryPercentage to targetVersion | COMMENT |
| LOW | …rvent/floci/services/codedeploy/CodeDeployService.java | 1657 | // Step 2: flip 100% to targetVersion | COMMENT |
| LOW⚡ | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 558 | // Step 1: Send SASLInitialResponse with client-first-message | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 576 | // Step 2: Read AuthenticationSASLContinue (authType=11) | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 599 | // Step 3: Compute client-final-message with proof | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 617 | // Step 4: Read AuthenticationSASLFinal (authType=12) — server signature (ignored) | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 628 | // Step 5: Read final AuthenticationOK | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 61 | // Step 1: Create user WITHOUT the boolean field set | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 79 | // Step 2: Update user - set boolean to true and other fields | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 89 | // Step 3: Get the item and verify the boolean was set correctly | COMMENT |
| LOW | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 109 | // Step 1: Create user WITH boolean = false | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 122 | // Step 2: Update boolean to true | COMMENT |
| LOW⚡ | …st/java/com/floci/test/DynamoDbEnhancedClientTest.java | 129 | // Step 3: Verify the boolean changed to true | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 17 | // Step 1: Create API | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 31 | // Step 2: Create Authorizer | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 49 | // Step 3: Update Authorizer via PATCH | COMMENT |
| LOW | …gateway/ApiGatewayUpdateAuthorizerIntegrationTest.java | 74 | // Step 4: GET Authorizer to verify persistence | COMMENT |
| LOW | …vent/floci/services/acm/AcmServicePersistenceTest.java | 42 | // Step 1: Create a service with a persistent backend and create a certificate | COMMENT |
| LOW⚡ | …vent/floci/services/acm/AcmServicePersistenceTest.java | 58 | // Step 2: Create a second service instance sharing the same storage directory (simulating restart) | COMMENT |
| LOW⚡ | …vent/floci/services/acm/AcmServicePersistenceTest.java | 62 | // Step 3: Validate that the certificate was correctly restored and properties match | COMMENT |
| LOW | …rvent/floci/services/codedeploy/CodeDeployService.java | 1644 | // Step 1: shift canaryPercentage to targetVersion | COMMENT |
| LOW | …rvent/floci/services/codedeploy/CodeDeployService.java | 1657 | // Step 2: flip 100% to targetVersion | COMMENT |
| LOW⚡ | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 558 | // Step 1: Send SASLInitialResponse with client-first-message | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 576 | // Step 2: Read AuthenticationSASLContinue (authType=11) | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 599 | // Step 3: Compute client-final-message with proof | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 617 | // Step 4: Read AuthenticationSASLFinal (authType=12) — server signature (ignored) | COMMENT |
| LOW | …/floci/services/rds/proxy/PostgresProtocolHandler.java | 628 | // Step 5: Read final AuthenticationOK | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/aws/regen_partitions.py | 81 | except ImportError: | CODE |
| HIGH | compatibility-tests/sdk-test-python/tests/test_iot.py | 388 | except ClientError: | CODE |
| HIGH | …lity-tests/sdk-test-python/tests/test_ses_templates.py | 459 | except ClientError: | CODE |
| HIGH | …lity-tests/sdk-test-python/tests/test_ses_templates.py | 466 | except ClientError: | CODE |
| HIGH | …lity-tests/sdk-test-python/tests/test_ses_templates.py | 473 | except ClientError: | CODE |
| HIGH | …lity-tests/sdk-test-python/tests/test_ses_templates.py | 480 | except ClientError: | CODE |
| HIGH | …patibility-tests/sdk-test-python/tests/test_neptune.py | 127 | except ClientError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/docs/test_check_service_matrix.py | 5 | CODE | |
| LOW | tools/docs/test_regen_cfn_resource_types.py | 5 | CODE | |
| LOW | tools/docs/test_regen_action_docs.py | 5 | CODE | |
| LOW | tools/docs/service_inventory.py | 29 | CODE | |
| LOW | tools/docs/check_service_matrix.py | 28 | CODE | |
| LOW | tools/docs/regen_action_docs.py | 19 | CODE | |
| LOW | tools/docs/test_service_inventory.py | 10 | CODE | |
| LOW | tools/docs/regen_cfn_resource_types.py | 17 | CODE | |
| LOW | tools/docs/regen_cfn_resource_types.py | 20 | CODE | |
| LOW | tools/aws/test_regen_dynamodb_shapes.py | 5 | CODE | |
| LOW | tools/aws/test_regen_managed_policies.py | 5 | CODE | |
| LOW | tools/aws/regen_region_facts.py | 31 | CODE | |
| LOW | tools/aws/regen_partitions.py | 43 | CODE | |
| LOW | tools/aws/test_regen_service_namespaces.py | 5 | CODE | |
| LOW | tools/aws/regen_managed_policies.py | 34 | CODE | |
| LOW | tools/aws/regen_service_namespaces.py | 42 | CODE | |
| LOW | tools/aws/test_regen_region_facts.py | 5 | CODE | |
| LOW | tools/aws/test_regen_partitions.py | 5 | CODE | |
| LOW | tools/aws/regen_dynamodb_shapes.py | 19 | CODE | |
| LOW | tools/partition/partition_literals.py | 32 | CODE | |
| LOW | tools/partition/test_partition_literals.py | 5 | CODE | |
| LOW | tools/slr/test_service_linked_roles.py | 9 | CODE | |
| LOW | tools/slr/service_linked_roles.py | 35 | CODE | |
| LOW | …patibility-tests/sdk-test-python/tests/test_kinesis.py | 5 | CODE | |
| LOW | …atibility-tests/sdk-test-python/tests/test_dynamodb.py | 3 | CODE | |
| LOW | …ibility-tests/sdk-test-python/tests/test_cloudwatch.py | 5 | CODE | |
| LOW | compatibility-tests/sdk-test-python/tests/test_sns.py | 5 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/checkstyle/test_import_order.py | 16 | CODE | |
| LOW | tools/docs/service_inventory.py | 113 | CODE | |
| LOW | tools/docs/service_inventory.py | 219 | CODE | |
| LOW | tools/aws/regen_region_facts.py | 239 | CODE | |
| LOW | tools/aws/regen_partitions.py | 219 | CODE | |
| LOW | tools/aws/regen_partitions.py | 250 | CODE | |
| LOW | tools/aws/regen_managed_policies.py | 161 | CODE | |
| LOW | tools/partition/partition_literals.py | 155 | CODE | |
| LOW | tools/partition/partition_literals.py | 216 | CODE | |
| LOW | tools/partition/partition_literals.py | 285 | CODE | |
| LOW | compatibility-tests/sdk-test-python/conftest.py | 247 | CODE | |
| LOW | compatibility-tests/sdk-test-python/tests/test_pipes.py | 285 | CODE | |
| LOW | …ty-tests/sdk-test-python/tests/metric_filter_replay.py | 173 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | compatibility-tests/sdk-test-python/tests/test_pipes.py | 411 | except Exception: | CODE |
| LOW⚡ | …y-tests/sdk-test-python/tests/test_s3_notifications.py | 41 | except Exception as e: | CODE |
| LOW⚡ | …y-tests/sdk-test-python/tests/test_s3_notifications.py | 45 | except Exception as e: | CODE |
| LOW⚡ | …y-tests/sdk-test-python/tests/test_s3_notifications.py | 50 | except Exception as e: | CODE |
| LOW | …ty-tests/sdk-test-python/tests/metric_filter_replay.py | 94 | except Exception: | CODE |
| LOW | …ty-tests/sdk-test-python/tests/metric_filter_replay.py | 227 | except Exception as error: | CODE |
| LOW⚡ | …ts/sdk-test-python/tests/test_cloudformation_naming.py | 86 | except Exception as e: | CODE |
| LOW | …ts/sdk-test-python/tests/test_cloudformation_naming.py | 315 | except Exception as e: | CODE |
| LOW | …patibility-tests/sdk-test-python/tests/test_s3_cors.py | 35 | except Exception as e: | CODE |
| LOW | …patibility-tests/sdk-test-python/tests/test_s3_cors.py | 40 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/services/bedrock.md | 4 | **Endpoint:** `http://localhost:4566/guardrails` (SigV4 service `bedrock`) | CODE |
| MEDIUM | …orvent/floci/core/common/IamEnforcementFilterTest.java | 1578 | // account-root key, whose resolveCallerArns is empty (see the workload-guardrails test above). | COMMENT |
| MEDIUM | …floci/services/organizations/OrganizationsService.java | 881 | // ──────────────────────────── Control Tower guardrails ──────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | compatibility-tests/sdk-test-python/conftest.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | …y-tests/sdk-test-python/tests/test_s3_notifications.py | 7 | logger = logging.getLogger(__name__) | CODE |
| LOW | compatibility-tests/sdk-test-python/tests/test_ecr.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ts/sdk-test-python/tests/test_cloudformation_naming.py | 13 | logger = logging.getLogger(__name__) | CODE |
| LOW | …sts/sdk-test-python/tests/test_firehose_compression.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …patibility-tests/sdk-test-python/tests/test_s3_cors.py | 9 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/main/resources/application.yml | 931 | # harness-echo-prefix: 'You said: ' # Prefix on the reply InvokeHarness streams back | COMMENT |
| MEDIUM | src/main/resources/application.yml | 932 | # harness-empty-reply: 'No user message was supplied.' | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/services/appsync.md | 641 | -H "x-api-key: da2-YOUR_API_KEY" \ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …sts/sdk-test-awscli/test/test_helper/common-setup.bash | 48 | # Check if operation is unsupported | COMMENT |
| LOW | src/main/resources/application.yml | 660 | # Set it to 127.0.0.1 when Floci's own port is published on loopback only, so the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compatibility-tests/sdk-test-python/tests/test_sqs.py | 232 | # Create main queue and DLQ | COMMENT |