0.2

Adjusted Signal

0.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

21.2K

Stars

TypeScript

Language

6.5M

Lines of Code

11.0K

Files

662

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 614 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 41 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 182 finding(s).

PR Review Velocity Impact 0.9/100 · LOW

Which changes need focused human review? 662 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 51MEDIUM 100LOW 507

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 662 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Structural Annotation Overuse259 hits · 422 pts

Severity	File	Line	Snippet	Context
LOW	…profit/project-pods/creating-a-volunteering-project.md	41	## Step 1: Prepare your project	COMMENT
LOW	…profit/project-pods/creating-a-volunteering-project.md	92	## Step 2: Submit the Project Intake Form	COMMENT
LOW	…profit/project-pods/creating-a-volunteering-project.md	112	## Step 3: Review process	COMMENT
LOW	…profit/project-pods/creating-a-volunteering-project.md	125	## Step 4: Working with your volunteer Pod	COMMENT
LOW⚡	…des/granting-higher-permissions-to-top-contributors.md	18	## Step 1: Audit your {% data variables.product.prodname_discussions %} top contributors	COMMENT
LOW⚡	…des/granting-higher-permissions-to-top-contributors.md	26	## Step 2: Review permission levels for {% data variables.product.prodname_discussions %}	COMMENT
LOW⚡	…des/granting-higher-permissions-to-top-contributors.md	32	## Step 3: Change permissions levels for top contributors	COMMENT
LOW⚡	…des/granting-higher-permissions-to-top-contributors.md	36	## Step 4: Notify community members of elevated access	COMMENT
LOW	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	100	### Step 1: Research loop - Analyzing accessibility requirements	COMMENT
LOW	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	124	### Step 2: Planning loop - Accessibility implementation strategy	COMMENT
LOW	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	147	### Step 3: Implementation loop - Making accessibility improvements	COMMENT
LOW	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	169	### Step 4: Testing loop - Accessibility verification with Playwright	COMMENT
LOW	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	192	### Step 5: Updating {% data variables.product.github %} issues	COMMENT
LOW	content/copilot/tutorials/create-an-extension.md	59	### Step 1: Create the extension file	COMMENT
LOW	content/copilot/tutorials/create-an-extension.md	140	### Step 2: Load the extension	COMMENT
LOW	content/copilot/tutorials/create-an-extension.md	163	### Step 3: Confirm the extension is running	COMMENT
LOW	content/copilot/tutorials/create-an-extension.md	167	### Step 4: Try it out	COMMENT
LOW	content/copilot/tutorials/create-an-extension.md	227	### Step 1: Create the extension file	COMMENT
LOW⚡	content/copilot/tutorials/create-an-extension.md	299	### Step 2: Load the extension	COMMENT
LOW⚡	content/copilot/tutorials/create-an-extension.md	309	### Step 3: Confirm the extension is running	COMMENT
LOW⚡	content/copilot/tutorials/create-an-extension.md	315	### Step 4: Try it out	COMMENT
LOW	…orials/budgets/getting-started-with-budget-controls.md	18	## Step 1: Set a universal user-level budget	COMMENT
LOW	…orials/budgets/getting-started-with-budget-controls.md	29	## Step 2: Identify your power users and set individual overrides	COMMENT
LOW⚡	…orials/budgets/getting-started-with-budget-controls.md	40	## Step 3: Set an enterprise spending limit	COMMENT
LOW⚡	…orials/budgets/getting-started-with-budget-controls.md	46	## Step 4: Enable "Stop usage when budget limit is reached" on every spending limit	COMMENT
LOW⚡	…orials/budgets/getting-started-with-budget-controls.md	55	## Step 5: Monitor regularly	COMMENT
LOW	…orials/roll-out-at-scale/communicate-copilot-impact.md	33	## Step 1: Define the decision	COMMENT
LOW	…orials/roll-out-at-scale/communicate-copilot-impact.md	45	## Step 2: Establish the comparison	COMMENT
LOW	…orials/roll-out-at-scale/communicate-copilot-impact.md	58	## Step 3: Assemble the evidence	COMMENT
LOW	…orials/roll-out-at-scale/communicate-copilot-impact.md	73	## Step 4: Separate observations from conclusions	COMMENT
LOW	…orials/roll-out-at-scale/communicate-copilot-impact.md	83	## Step 5: Write the narrative	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	30	## Step 1: Define your trial goals	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	41	## Step 2: View adoption and engagement metrics in the dashboard	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	60	## Step 3: Evaluate your trial results	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	74	## Step 4: Incorporate qualitative feedback	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	86	## Step 5: Extend your evaluation through the {% data variables.product.prodname_copilot_short %} usage metrics API	COMMENT
LOW	…copilot/tutorials/roll-out-at-scale/measure-success.md	119	## Step 6: Decide whether to expand rollout	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	34	## Step 1: Access the usage metrics dashboard	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	40	## Step 2: Track license activation	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	52	## Step 3: Identify early adoption signals	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	67	## Step 4: Act on limited adoption signals	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	83	## Step 5: Track activation programmatically	COMMENT
LOW	…t-at-scale/assign-licenses/track-usage-and-adoption.md	91	## Step 6: Export user-level data for deeper analysis	COMMENT
LOW	…github/customize-copilot/customize-copilot-overview.md	22	## Step 1: Teach {% data variables.product.prodname_copilot_short %} your project's conventions	COMMENT
LOW	…github/customize-copilot/customize-copilot-overview.md	43	## Step 2: Create a specialized agent	COMMENT
LOW	…github/customize-copilot/customize-copilot-overview.md	77	## Step 3: Organize project context with a space	COMMENT
LOW	…w-tos/copilot-on-github/use-copilot-agents/overview.md	16	## Step 1: Assign an issue to {% data variables.product.prodname_copilot_short %}	COMMENT
LOW	…w-tos/copilot-on-github/use-copilot-agents/overview.md	28	## Step 2: Start a research task at the same time	COMMENT
LOW	…w-tos/copilot-on-github/use-copilot-agents/overview.md	40	## Step 3: Watch both sessions	COMMENT
LOW	…w-tos/copilot-on-github/use-copilot-agents/overview.md	50	## Step 4: Request a {% data variables.copilot.copilot_code-review_short %} on the pull request	COMMENT
LOW	…w-tos/copilot-on-github/use-copilot-agents/overview.md	62	## Step 5: Review the output and iterate	COMMENT
LOW⚡	…/set-up-a-dedicated-enterprise-for-copilot-business.md	74	### Step 1: Check your unaffiliated users policy	COMMENT
LOW⚡	…/set-up-a-dedicated-enterprise-for-copilot-business.md	78	### Step 2: Remove the organization	COMMENT
LOW⚡	…/set-up-a-dedicated-enterprise-for-copilot-business.md	88	### Step 3: Confirm your members are unaffiliated	COMMENT
LOW⚡	…/set-up-a-dedicated-enterprise-for-copilot-business.md	92	### Step 4: Update your license count	COMMENT
LOW⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	28	## Step 1: Install the `gh aw` extension	COMMENT
LOW⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	36	## Step 2: Add a workflow and trigger a run	COMMENT
LOW⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	55	## Step 3: Wait for the workflow to complete	COMMENT
LOW⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	63	## Step 4: Customize the workflow (optional)	COMMENT
LOW	…tent/copilot/how-tos/copilot-sdk/setup/github-oauth.md	37	## Step 1: create a GitHub OAuth app	COMMENT
199 more matches not shown…

Hyper-Verbose Identifiers175 hits · 182 pts

Severity	File	Line	Snippet	Context
LOW⚡	content/copilot/tutorials/write-tests.md	85	def test_deposit_positive_amount(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	89	def test_withdraw_within_balance(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	94	def test_deposit_negative_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	98	def test_withdraw_negative_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	102	def test_withdraw_more_than_balance_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	107	def test_initial_balance_negative_raises_error(self):	CODE
LOW	content/copilot/tutorials/write-tests.md	213	def test_deposit_with_notification(self):	CODE
LOW	content/copilot/tutorials/write-tests.md	234	def test_deposit_negative_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	264	def test_deposit_with_notification(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	270	def test_deposit_negative_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	276	def test_deposit_zero_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	282	def test_withdraw_with_notification(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	288	def test_withdraw_exceeding_balance_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	294	def test_withdraw_negative_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	300	def test_withdraw_zero_amount_raises_error(self):	CODE
LOW⚡	content/copilot/tutorials/write-tests.md	306	def test_initial_negative_balance_raises_error(self):	CODE
LOW	…s/copilot-cookbook/testing-code/generate-unit-tests.md	72	def test_price_edge_case_zero(self):	CODE
LOW	…tion-library/custom-instructions/testing-automation.md	53	def test_should_reject_invalid_emails(self, user_service, invalid_email):	CODE
LOW	…tion-library/custom-instructions/testing-automation.md	58	def test_should_handle_validation_failure(self, mock_validator, user_service):	CODE
LOW	…pilot/how-tos/copilot-sdk/features/streaming-events.md	197	def subscribe_parent_response(session: CopilotSession) -> None:	CODE
LOW	…tent/copilot/how-tos/copilot-sdk/setup/github-oauth.md	268	async function getOrRefreshToken(userId: string): Promise<string> {	CODE
LOW	…e/copilot-for-common-tasks/get-ide-code-suggestions.md	281	function calculateDaysBetweenDates(begin, end) {	CODE
LOW	…e/copilot-for-common-tasks/get-ide-code-suggestions.md	306	function calculateDaysBetweenDates(begin, end) {	CODE
LOW	…e/copilot-for-common-tasks/get-ide-code-suggestions.md	329	function calculateDaysBetweenDates(begin, end) {	CODE
LOW	…e/copilot-for-common-tasks/get-ide-code-suggestions.md	343	function calculateDaysBetweenDates(begin, end) {	CODE
LOW	…ering-failed-deliveries-for-an-organization-webhook.md	111	async function checkAndRedeliverWebhooks() {	CODE
LOW	…ering-failed-deliveries-for-an-organization-webhook.md	218	async function fetchWebhookDeliveriesSince({	CODE
LOW	…livering-failed-deliveries-for-a-repository-webhook.md	113	async function checkAndRedeliverWebhooks() {	CODE
LOW	…livering-failed-deliveries-for-a-repository-webhook.md	223	async function fetchWebhookDeliveriesSince({	CODE
LOW	…livering-failed-deliveries-for-a-github-app-webhook.md	115	async function checkAndRedeliverWebhooks() {	CODE
LOW	…livering-failed-deliveries-for-a-github-app-webhook.md	226	async function fetchWebhookDeliveriesSince({lastWebhookRedeliveryTime, app}) {	CODE
LOW	…r-a-github-app/building-ci-checks-with-a-github-app.md	313	def authenticate_installation(payload)	CODE
LOW	…r-a-github-app/building-ci-checks-with-a-github-app.md	513	def authenticate_installation(payload)	CODE
LOW	…r-a-github-app/building-ci-checks-with-a-github-app.md	1535	def authenticate_installation(payload)	CODE
LOW	…nt/rest/guides/scripting-with-the-rest-api-and-ruby.md	293	def comment_if_data_files_changed(octokit, owner, repo, pull_number)	CODE
LOW	…t/guides/scripting-with-the-rest-api-and-javascript.md	396	async function commentIfDataFilesChanged({owner, repo, pullNumber}) {	CODE
LOW	data/reusables/copilot/type-function-header.md	4	function calculateDaysBetweenDates(begin, end) {	CODE
LOW	src/audit-logs/lib/deduplicate.ts	18	export async function writeDeduplicatedAuditLogData(	CODE
LOW	src/audit-logs/lib/index.ts	68	function reconstructEventsFromSharedFormat(version: string, page: string): AuditLogEventT[] \| null {	CODE
LOW	src/audit-logs/lib/index.ts	136	export function resolveReferenceLinksToMarkdown(	CODE
LOW	src/audit-logs/lib/index.ts	152	async function computeReferenceLinksToMarkdown(	CODE
LOW	src/audit-logs/lib/index.ts	194	async function resolveReferenceLinksToTitles(	CODE
LOW	src/audit-logs/lib/index.ts	267	export function getCategorizedAuditLogEvents(page: string, version: string): CategorizedEvents {	CODE
LOW	src/audit-logs/lib/index.ts	347	export async function filterAndUpdateGhesDataByAllowlistValues({	CODE
LOW	src/audit-logs/lib/index.ts	447	function processAndGetEventDescription(	CODE
LOW	src/audit-logs/lib/index.ts	447	function processAndGetEventDescription(	CODE
LOW	src/content-linter/scripts/lint-content.ts	695	function getSearchReplaceRuleSeverity(	CODE
LOW	…ib/linting-rules/outdated-release-phase-terminology.ts	65	function findOutdatedTerminologyMatches(line: string): MatchInfo[] {	CODE
LOW	…/content-linter/lib/linting-rules/liquid-versioning.ts	134	function validateIfversionConditionals(cond: string, possibleVersionNames: Set<string>): string[] {	CODE
LOW	…r/lib/linting-rules/frontmatter-versions-whitespace.ts	60	function checkForUnwantedWhitespace(value: string): boolean {	CODE
LOW	…-linter/lib/linting-rules/liquid-ifversion-versions.ts	238	async function getApplicableVersionFromLiquidTag(conditionStr: string): Promise<VersionsObject> {	CODE
LOW	src/products/lib/get-product-groups.ts	118	export function mapEnglishToLocalizedNames(	CODE
LOW	src/landings/types.ts	80	export function mapRawTocItemToSimpleTocItem(raw: RawTocItem): SimpleTocItem {	CODE
LOW	src/landings/components/useSidebarExpandState.tsx	54	export function SidebarExpandStateProvider({ children }: { children: ReactNode }) {	CODE
LOW	…ntent-render/tests/render-changed-and-deleted-files.ts	33	function getRenamedOldContentFiles() {	CODE
LOW	src/content-render/unified/rewrite-table-captions.ts	25	function hasExistingAccessibilityAttributes(tableNode: Element): boolean {	CODE
LOW	src/content-render/unified/rewrite-table-captions.ts	85	export default function addTableAccessibilityLabels() {	CODE
LOW	src/content-render/unified/processor.ts	87	export function createMarkdownOnlyProcessor(context: Context): UnifiedProcessor {	CODE
LOW	src/content-render/unified/processor.ts	107	function markUnescapedAlertMarkers() {	CODE
LOW	src/content-render/unified/rewrite-asset-urls.ts	11	function isAssetOrPublicImg(node: Node): node is Element {	CODE
115 more matches not shown…

Modern AI Meta-Vocabulary59 hits · 155 pts

Severity	File	Line	Snippet	Context
MEDIUM	CHANGELOG.md	121	* Pre-enablement: [Building guardrails for GitHub Copilot cloud agent](https://docs.github.com/en/enterprise-cloud@lates	COMMENT
MEDIUM	CHANGELOG.md	288	We’ve added a new tutorial, "[Using hooks with Copilot CLI for predictable, policy-compliant execution](https://docs.git	CODE
MEDIUM	CHANGELOG.md	433	* [Monitoring agentic activity in your enterprise](https://docs.github.com/copilot/how-tos/administer-copilot/manage-for	COMMENT
MEDIUM	CHANGELOG.md	436	* [Audit log events for agents](https://docs.github.com/copilot/reference/agentic-audit-log-events)	COMMENT
MEDIUM	content/copilot/responsible-use/agents.md	292	## 11. Learn more about GitHub Copilot agentic features	COMMENT
MEDIUM	…kflows-and-operations/copilot-cli-in-github-actions.md	44	* Use [{% data variables.product.github %} Agentic Workflows](https://github.com/github/gh-aw) rather than invoking {% d	COMMENT
MEDIUM	…/agent-powered-workflows-and-operations/code-review.md	80	### Usage of {% data variables.product.prodname_actions %} runners for agentic capabilities in code review	COMMENT
MEDIUM	…/agent-powered-workflows-and-operations/code-review.md	107	Code reviews have two cost components: {% data variables.product.prodname_ai_credits_short %} for the model interaction	CODE
MEDIUM	…flows-and-operations/about-github-agentic-workflows.md	106	For more information, see the [engine reference](https://github.github.com/gh-aw/reference/engines/?utm_source=agentic-w	CODE
MEDIUM	…flows-and-operations/about-github-agentic-workflows.md	108	## Security guardrails	COMMENT
MEDIUM	…flows-and-operations/about-github-agentic-workflows.md	119	For a full architecture walkthrough, see the [security documentation](https://github.github.com/gh-aw/introduction/archi	CODE
MEDIUM	…flows-and-operations/about-github-agentic-workflows.md	139	For an overview of billing for {% data variables.copilot.github_agentic_workflows %} and cost optimization guidance, see	CODE
MEDIUM	…t/concepts/prompting-and-context/context-management.md	18	## About the context window	COMMENT
MEDIUM	…t/concepts/prompting-and-context/context-management.md	31	## Why the context window matters	COMMENT
MEDIUM	…t/concepts/prompting-and-context/context-management.md	50	## Managing your context window	COMMENT
MEDIUM	…copilot/concepts/copilot-surfaces/copilot-on-github.md	147	### Automations and agentic workflows	COMMENT
MEDIUM	content/copilot/tutorials/reduce-technical-debt.md	177	### Safety guardrails	COMMENT
MEDIUM	…ntent/copilot/tutorials/enhance-agent-mode-with-mcp.md	20	## About {% data variables.product.prodname_copilot_short %}'s agentic capabilities and MCP	COMMENT
MEDIUM	content/copilot/tutorials/optimize-ai-usage.md	186	## 8. Add deterministic guardrails	COMMENT
MEDIUM	…t-at-scale/govern-at-scale/pilot-a-feature-or-model.md	118	### Watch for cost and agentic activity in budgets and the audit log	COMMENT
MEDIUM	…-out-at-scale/enable-developers/integrate-ai-agents.md	42	>[!NOTE] {% data variables.product.github %} is continually expanding its AI-powered platform. Some of the features desc	CODE
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	18	This article focuses on the core tasks: creating, updating, and reusing workflows. For complete technical detail and add	CODE
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	73	If you use `gh aw add-wizard`, the setup flow prompts you to create that secret. If you are creating an agentic workflow	CODE
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	109	* In the {% data variables.product.github %} web interface. See [creating workflows in the GitHub web interface](https:/	COMMENT
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	110	* Manually. See [creating workflows by manual editing](https://github.github.com/gh-aw/setup/creating-workflows/?utm_sou	COMMENT
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	130	For the full frontmatter reference, see the [{% data variables.copilot.github_agentic_workflows %} frontmatter documenta	CODE
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	132	## Example agentic workflow	COMMENT
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	183	For detailed editing guidance, see [Editing Workflows](https://github.github.com/gh-aw/guides/editing-workflows/?utm_sou	CODE
MEDIUM	…agentic-workflows/creating-github-agentic-workflows.md	201	For more information, see [Reusing Workflows](https://github.github.com/gh-aw/guides/reusing-workflows/?utm_source=creat	CODE
MEDIUM⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	18	This quickstart focuses on getting your first workflow running. For deeper setup and troubleshooting guidance, see the [	CODE
MEDIUM⚡	…copilot/how-tos/github-agentic-workflows/quickstart.md	48	1. Guide you through secret and authentication setup for your chosen engine. Depending on the engine you choose, the wiz	CODE
MEDIUM	…pilot/how-tos/copilot-sdk/features/streaming-events.md	877	## Quick reference: agentic turn flow	COMMENT
MEDIUM	…/copilot-sdk/integrations/microsoft-agent-framework.md	643	### Handle errors at the orchestration level	COMMENT
MEDIUM	…/copilot/how-tos/use-copilot-agents/use-code-review.md	29	{% data variables.copilot.copilot_code-review_short %} uses {% data variables.product.prodname_actions %} to run agentic	CODE
MEDIUM	…tent/copilot/how-tos/copilot-cli/cli-best-practices.md	215	### Automatic context window management	COMMENT
MEDIUM	…ilot/how-tos/copilot-cli/use-copilot-cli-in-actions.md	27	For most automation use cases, we recommend using [{% data variables.product.github %} Agentic Workflows](https://github	CODE
MEDIUM	…ilot-cli/administer-copilot-cli-for-your-enterprise.md	79	## Applying guardrails so teams follow organizational policies	COMMENT
MEDIUM	…tos/copilot-cli/use-copilot-cli/agentic-code-review.md	18	## About agentic code review	COMMENT
MEDIUM	…ilot-cli/automate-copilot-cli/automate-with-actions.md	22	For most automation use cases, we recommend using [{% data variables.product.github %} Agentic Workflows](https://github	CODE
MEDIUM⚡	…r-enterprise/manage-agents/monitor-agentic-activity.md	15	## Viewing active and recent agentic sessions in your enterprise	COMMENT
MEDIUM⚡	…r-enterprise/manage-agents/monitor-agentic-activity.md	22	## Tracking agentic activity in your enterprise through the audit log	COMMENT
MEDIUM⚡	…r-enterprise/manage-agents/monitor-agentic-activity.md	26	### Viewing agentic activity in the audit log on {% data variables.product.github %}	COMMENT
MEDIUM⚡	…r-enterprise/manage-agents/monitor-agentic-activity.md	32	### Streaming agentic activity from the audit log	COMMENT
MEDIUM	…erprise/streaming-the-audit-log-for-your-enterprise.md	29	You can also stream agent session activity from {% data variables.product.prodname_copilot %} to the same destination yo	CODE
MEDIUM	…tainer-configuration/introduction-to-dev-containers.md	115	Various options are available to you if you want to use existing container orchestration in your dev container. See the	CODE
MEDIUM	…-alerts/disabling-copilot-autofix-for-code-scanning.md	17	This article covers disabling {% data variables.copilot.copilot_autofix_short %}. {% data variables.copilot.agentic_auto	CODE
MEDIUM	…torials/develop-agentic-workflows-in-github-actions.md	55	Other engines such as Pi (experimental) are also supported. For the full list, see the [{% data variables.copilot.github	CODE
MEDIUM	…torials/develop-agentic-workflows-in-github-actions.md	109	* For advanced engine configuration, safe outputs, and more workflow examples, see the [{% data variables.copilot.github	COMMENT
MEDIUM	src/workflows/measure-instruction-budget.ts	14	// Single source of truth for guardrails. Keep these in sync with the instruction	COMMENT
MEDIUM	src/graphql/data/ghes-3.20/schema-users.json	3179	"href": "/graphql/reference/copilot#interface-agentic"	CODE
MEDIUM	src/graphql/data/ghes-3.20/schema-copilot.json	45	"href": "/graphql/reference/copilot#interface-agentic",	CODE
MEDIUM	src/graphql/data/ghes-3.21/schema-users.json	3179	"href": "/graphql/reference/copilot#interface-agentic"	CODE
MEDIUM	src/graphql/data/ghes-3.21/schema-copilot.json	45	"href": "/graphql/reference/copilot#interface-agentic",	CODE
MEDIUM	src/graphql/data/ghes-3.22/schema-users.json	3266	"href": "/graphql/reference/copilot#interface-agentic"	CODE
MEDIUM	src/graphql/data/ghes-3.22/schema-copilot.json	46	"href": "/graphql/reference/copilot#interface-agentic",	CODE
MEDIUM	src/graphql/data/ghec/schema-users.json	3260	"href": "/graphql/reference/copilot#interface-agentic"	CODE
MEDIUM	src/graphql/data/ghec/schema-copilot.json	53	"href": "/graphql/reference/copilot#interface-agentic",	CODE
MEDIUM	src/graphql/data/fpt/schema-users.json	3260	"href": "/graphql/reference/copilot#interface-agentic"	CODE
MEDIUM	src/graphql/data/fpt/schema-copilot.json	53	"href": "/graphql/reference/copilot#interface-agentic",	CODE

Magic Placeholder Names29 hits · 150 pts

Severity	File	Line	Snippet	Context
HIGH	content/copilot/copilot-on-ghes/set-up-copilot-cli.md	59	ghe-config secrets.copilot-proxy.endpoint-key 'YOUR-API-KEY'	CODE
HIGH	content/copilot/copilot-on-ghes/set-up-copilot-cli.md	68	Replace `YOUR-API-KEY` with the real API key before applying the configuration.	CODE
HIGH	…w-tos/copilot-cli/customize-copilot/add-mcp-servers.md	63	* Next to Environment Variables, optionally specify environment variables the server needs, such as API keys or	COMMENT
HIGH	…w-tos/copilot-cli/customize-copilot/add-mcp-servers.md	68	* Next to HTTP Headers, optionally specify HTTP headers as JSON. For example, `{"CONTEXT7_API_KEY": "YOUR-API-K	COMMENT
HIGH	…w-tos/copilot-cli/customize-copilot/add-mcp-servers.md	146	"CONTEXT7_API_KEY": "YOUR-API-KEY"	CODE
HIGH	…ow-tos/copilot-cli/customize-copilot/add-llm-models.md	94	"apiKey": "YOUR-API-KEY"	CODE
HIGH	…ow-tos/copilot-cli/customize-copilot/add-llm-models.md	106	Replace `YOUR-API-KEY` with your provider's API key and `YOUR-MODEL-NAME` with a model name available to your account	CODE
HIGH	…s/setting-up-external-monitoring-with-opentelemetry.md	302	api-key: "your-api-key"	CODE
HIGH	src/article-api/tests/rest-transformer.ts	109	expect(res.body).toContain('Authorization: Bearer <YOUR-TOKEN>')	CODE
HIGH	src/article-api/templates/rest-page.template.md	8	> Most endpoints use `Authorization: Bearer <YOUR-TOKEN>` and `Accept: application/vnd.github+json` headers{% if apiVers	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	178	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	189	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	200	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	211	expect(result).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	222	expect(result).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	235	expect(result).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	248	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	262	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	275	expect(result).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	289	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	301	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	313	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	756	expect(shellResult).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	779	expect(shellResult).toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	798	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	817	expect(result).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	835	expect(enterpriseResult).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/tests/get-rest-code-samples-2.ts	854	expect(basicAuthResult).not.toContain('-H "Authorization: Bearer <YOUR-TOKEN>"')	CODE
HIGH	src/rest/components/get-rest-code-samples.ts	70	let authHeader = omitAuth ? '' : '-H "Authorization: Bearer <YOUR-TOKEN>"'	CODE

AI Response Leakage12 hits · 115 pts

Severity	File	Line	Snippet	Context
HIGH	…g-for-github-docs/creating-diagrams-for-github-docs.md	112	* [Hierarchy](https://en.wikipedia.org/wiki/Hierarchy#Visually_representing_hierarchies): Hierarchies are useful for sho	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	108	# explicit write access to the repository. In this example,	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	112	# In this example, @doctocat owns any files in the build/logs	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	122	# In this example, @octocat owns any file in an apps directory	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	126	# In this example, @doctocat owns any file in the `/docs`	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	131	# In this example, any change inside the `/scripts` directory	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	135	# In this example, @octocat owns any file in a `/logs` directory such as	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	140	# In this example, @octocat owns any file in the `/apps`	COMMENT
HIGH⚡	…tures/customizing-your-repository/about-code-owners.md	148	# In this example, @octocat owns any file in the `/apps`	COMMENT
HIGH	…s/customize-code-scanning/prepare-code-for-analysis.md	412	# In this example, the {% data variables.product.prodname_codeql_cli %} has been downloaded and placed on the PATH.	COMMENT
HIGH	content/graphql/guides/using-global-node-ids.md	107	Once you've confirmed the type, you can use an [inline fragment](https://graphql.org/learn/queries/#inline-fragments) to	CODE
HIGH	content/actions/reference/security/oidc.md	136	You can configure a subject that filters for the [`pull_request`](/actions/reference/workflows-and-actions/events-that-t	CODE

Synthetic Comment Markers10 hits · 79 pts

Severity	File	Line	Snippet	Context
HIGH	CHANGELOG.md	533	We've added a new tutorial about how to [Review AI-generated code](https://docs.github.com/copilot/tutorials/review-ai-g	CODE
HIGH	content/copilot/responsible-use/inline-suggestions.md	164	* Exercise human oversight when appropriate: Human oversight is an important safeguard when interacting with AI appl	COMMENT
HIGH	content/copilot/responsible-use/agents.md	146	* False positives: Copilot code review has a risk of hallucination—it may highlight problems in reviewed code that d	COMMENT
HIGH	content/copilot/responsible-use/agents.md	147	* Inaccurate or insecure code suggestions: As part of its comments, Copilot code review may provide specific code su	COMMENT
HIGH⚡	content/copilot/responsible-use/agents.md	268	* Exercise human oversight when appropriate: Human oversight is an important safeguard when interacting with AI appl	COMMENT
HIGH⚡	content/copilot/responsible-use/agents.md	271	* Use Copilot code review to supplement human reviews, not to replace them: While Copilot code review can be a power	COMMENT
HIGH⚡	content/copilot/responsible-use/agents.md	279	* Use Copilot CLI as a tool, not a replacement: You should always review and verify commands and code generated by C	COMMENT
HIGH	content/copilot/tutorials/review-ai-generated-code.md	13	Reviewing code generated by AI tools like {% data variables.product.prodname_copilot %}, ChatGPT, or other agents is bec	CODE
HIGH	…olicy/github-terms/github-community-code-of-conduct.md	81	### _Reasonable use of AI generated content_	COMMENT
HIGH	…bout-github-support/about-copilot-in-github-support.md	49	The responses you receive from {% data variables.copilot.copilot_in_support %} are generated by AI without human interve	CODE

Over-Commented Block64 hits · 64 pts

Severity	File	Line	Snippet	Context
LOW	config/kustomize/base/deployments/webapp.yaml	101	# Readiness removes hung pods from load balancing.	COMMENT
LOW	…stance-from-the-command-line/command-line-utilities.md	1641	# "company" : "GitHub"	COMMENT
LOW	…tures/customizing-your-repository/about-code-owners.md	81	If you specify a user or team that doesn't exist or has insufficient access, a code owner will not be assigned.	COMMENT
LOW	…tures/customizing-your-repository/about-code-owners.md	101	# You can also use email addresses if you prefer. They'll be	COMMENT
LOW	…tures/customizing-your-repository/about-code-owners.md	121		COMMENT
LOW	…ation/setting-up-your-dotnet-project-for-codespaces.md	61	}	COMMENT
LOW	…r-a-github-app/building-ci-checks-with-a-github-app.md	1541	# Check X-Hub-Signature to confirm that this webhook was generated by	COMMENT
LOW	content/get-started/using-git/about-git-rebase.md	81	#	COMMENT
LOW	…rted/using-git/using-git-rebase-on-the-command-line.md	61		COMMENT
LOW	data/tables/copilot/auto-model-selection.yml	1	# Please keep this list sorted in the following order:	COMMENT
LOW	data/tables/copilot/model-supported-plans.yml	1	# Please keep this list sorted in alphabetical order.	COMMENT
LOW	data/tables/copilot/model-supported-clients.yml	1	# Please keep this list sorted in alphabetical order.	COMMENT
LOW	data/tables/copilot/model-deprecation-history.yml	1	# Please keep this list sorted in the following order:	COMMENT
LOW	data/tables/copilot/image-models-and-pricing.yml	1	# This file defines per-token pricing for image generation models available in GitHub Copilot.	COMMENT
LOW	data/tables/copilot/matrix-meta.yml	1	# Shared configuration for the Copilot IDE feature matrix.	COMMENT
LOW	data/tables/copilot/models-and-pricing.yml	1	# This file defines per-token pricing for AI models available in GitHub Copilot.	COMMENT
LOW	data/tables/copilot/model-release-status.yml	1	# Please keep this list sorted in the following order:	COMMENT
LOW	data/features/actions-cache-admin-ui.yml	1	# Reference: #8112	COMMENT
LOW	…a/reusables/actions/actions-use-sha-pinning-comment.md	1	# GitHub recommends pinning actions to a commit SHA.	COMMENT
LOW	…les/actions/actions-not-certified-by-github-comment.md	1	# This workflow uses actions that are not certified by GitHub.	COMMENT
LOW	src/audit-logs/scripts/rebuild-dedup.ts	1	// Rebuilds src/audit-logs/data/shared/entries.json, fields-pool.json, and	COMMENT
LOW	src/landings/components/sidebar-navlist-depth.ts	1	// Depth flattening needs only this ProductTreeNode subset, keeping React and Next	COMMENT
LOW	src/landings/components/SidebarProduct.tsx	261	)	COMMENT
LOW	src/landings/components/useSidebarExpandState.tsx	1	import { createContext, useCallback, useContext, useMemo, useState } from 'react'	COMMENT
LOW	src/content-render/scripts/all-documents/cli.ts	1	// Generates JSON metadata for documents.	COMMENT
LOW	src/content-render/stylesheets/markdown-overrides.scss	41	// A CTA button written alone in markdown, such as <a class="btn btn-primary mt-3 ...">,	COMMENT
LOW	src/content-render/stylesheets/markdown-overrides.scss	61	// and longer translations or narrower callout columns self-correct.	COMMENT
LOW	src/content-render/stylesheets/markdown-overrides.scss	81	// design-system value makes the button slightly wider rather than most of a space narrower.	COMMENT
LOW	…ontent-render/stylesheets/article-section-framing.scss	1	// Article body sections stack with single horizontal rules, matching Figma node 795:41405.	COMMENT
LOW	src/content-pipelines/config.yml	1	# Content pipelines sync source docs into allowed target articles with the	COMMENT
LOW	src/content-pipelines/scripts/update.ts	1	// Clones an external source repository, detects changed docs, and runs the	COMMENT
LOW	src/workflows/find-past-built-pr.ts	1	import type { Octokit } from '@octokit/rest'	COMMENT
LOW	src/workflows/purge-fastly-changed-content.ts	21	// The GitHub compare API returns at most 300 files per page. If a deploy changes	COMMENT
LOW	src/workflows/generate-llms-txt.ts	1	// Generates an llms.txt file from popularity data and the docs page catalog.	COMMENT
LOW	src/workflows/sync-sdk-docs/strip-hidden-blocks.ts	1	// Removes docs-validate: hidden ranges from Copilot SDK docs.	COMMENT
LOW	src/workflows/sync-sdk-docs/normalize-sdk-docs.ts	21	'content-dir': { type: 'string' },	COMMENT
LOW	src/workflows/sync-sdk-docs/preserve-redirects.ts	1	#!/usr/bin/env node	COMMENT
LOW	src/workflows/sync-sdk-docs/convert-mermaid.ts	1	#!/usr/bin/env node	COMMENT
LOW	src/workflows/tests/actions-workflows.ts	221	}	COMMENT
LOW	src/frame/components/DefaultLayout.tsx	261	// The desktop rail-collapse cookie does not hide the open mobile nav. Otherwise	COMMENT
LOW	…e/components/ui/MarkdownContent/stylesheets/lists.scss	1	.markdownBody {	COMMENT
LOW	…e/components/ui/MarkdownContent/stylesheets/lists.scss	61	// box to cap height, but browsers lack broad support, so pin the height	COMMENT
LOW	…e/components/ui/MarkdownContent/stylesheets/lists.scss	121	// This selector group MUST mirror the ordered-list one above. The two share a	COMMENT
LOW	src/frame/components/page-header/Header.module.scss	1	.header {	COMMENT
LOW	src/frame/components/page-header/Header.module.scss	41	// Brand's narrow-menu links animate one slot each at	COMMENT
LOW	src/frame/components/lib/prefetch.ts	1	import { useCallback } from 'react'	COMMENT
LOW	…rame/components/article/ViewMarkdownButton.module.scss	1	// The copy-markdown control is a pill-shaped text button with a small rounded	COMMENT
LOW	…rame/components/article/ViewMarkdownButton.module.scss	21	//	COMMENT
LOW	…rame/components/article/ViewMarkdownButton.module.scss	101	var(--brand-borderRadius-full, 624.9375rem) 0;	COMMENT
LOW	…rame/components/article/ViewMarkdownButton.module.scss	121	//	COMMENT
LOW	…frame/components/article/ArticleGridLayout.module.scss	181	// Brand default #b6bfb8 would read as a heavier divider than the page's other rules.	COMMENT
LOW	src/frame/stylesheets/index.scss	1	@import "@primer/css/color-modes/index.scss"; // Color modes must load before core.	COMMENT
LOW	src/frame/stylesheets/index.scss	41		COMMENT
LOW	src/frame/stylesheets/index.scss	81	// <html> — so routing through the scale here just resolves the LIGHT gray-7	COMMENT
LOW	src/frame/stylesheets/index.scss	101	// Site-wide links use Brand link blue.	COMMENT
LOW	src/frame/stylesheets/breadcrumbs-overrides.scss	1	// Docs 2026 breadcrumbs invert @primer/react-brand default emphasis.	COMMENT
LOW	src/frame/stylesheets/underline-nav-brand.scss	1	// Docs 2026: Primer Brand tokens for @primer/react's UnderlineNav.	COMMENT
LOW	src/frame/stylesheets/underline-nav-brand.scss	21	@mixin underline-nav-brand-tokens {	COMMENT
LOW	src/frame/stylesheets/underline-nav-brand.scss	61	// Tab hover fill. Primer's is a blue-tinted alpha wash, which would leave the	COMMENT
LOW	src/frame/stylesheets/underline-nav-brand.scss	81	var(--color-canvas-overlay)	COMMENT
4 more matches not shown…

Slop Phrases24 hits · 48 pts

Severity	File	Line	Snippet	Context
MEDIUM	data/ui.yml	77	unable_to_answer: Sorry, I'm unable to answer that question. Check that you selected the correct GitHub version or	CODE
MEDIUM	data/ui.yml	80	invalid_query: Sorry, I'm unable to answer that question. Please try asking a different question.	CODE
MEDIUM	src/rest/data/ghes-3.21-2022-11-28/search.json	1161	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.21-2022-11-28/search.json	10143	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.22-2026-03-10/search.json	1167	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.22-2026-03-10/search.json	9884	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/fpt-2026-03-10/search.json	1179	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/fpt-2026-03-10/search.json	9908	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghec-2022-11-28/search.json	1194	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghec-2022-11-28/search.json	10209	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.19-2022-11-28/search.json	1107	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.19-2022-11-28/search.json	10035	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.20-2022-11-28/search.json	1107	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.20-2022-11-28/search.json	10035	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.21-2026-03-10/search.json	1158	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.21-2026-03-10/search.json	9866	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.22-2022-11-28/search.json	1170	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.22-2022-11-28/search.json	10161	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/fpt-2022-11-28/search.json	1182	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/fpt-2022-11-28/search.json	10185	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghes-3.18-2022-11-28/search.json	1107	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghes-3.18-2022-11-28/search.json	10035	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE
MEDIUM	src/rest/data/ghec-2026-03-10/search.json	1191	"description": "This repo is for demonstration purposes only.",	CODE
MEDIUM	src/rest/data/ghec-2026-03-10/search.json	9932	"descriptionHTML": "<p>Find users via various criteria. This method returns up to 100 results <a href=\"https://do	CODE

Hallucination Indicators4 hits · 40 pts

Severity	File	Line	Snippet	Context
CRITICAL	…nerabilities/scan-from-vs-code/use-the-model-editor.md	116	![Screenshot of "Dependency mode" with one model for "com.alipay.sofa.jraft.option.BallotBoxOptions.getClosureQueue(	CODE
CRITICAL	src/workflows/fr-add-docs-reviewers-requests.ts	177	const existingItemIDs = projectData.organization.projectV2.items.nodes.map(	CODE
CRITICAL	src/workflows/projects.ts	66	const field = data.organization.projectV2.fields.nodes.find(	CODE
CRITICAL	src/workflows/projects.ts	82	const field = data.organization.projectV2.fields.nodes.find(	CODE

Self-Referential Comments6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	data/tables/copilot/auto-model-selection.yml	10	# This file defines which AI models are available for Copilot cloud agent	COMMENT
MEDIUM	data/tables/copilot/model-supported-plans.yml	3	# This file defines which AI models are available in each Copilot plan.	COMMENT
MEDIUM	data/tables/copilot/model-supported-clients.yml	3	# This file defines which AI models are available in each GitHub Copilot client.	COMMENT
MEDIUM	data/tables/copilot/image-models-and-pricing.yml	1	# This file defines per-token pricing for image generation models available in GitHub Copilot.	COMMENT
MEDIUM	data/tables/copilot/models-and-pricing.yml	1	# This file defines per-token pricing for AI models available in GitHub Copilot.	COMMENT
MEDIUM	data/tables/copilot/model-release-status.yml	9	# This file defines the list of AI models available in GitHub Copilot and	COMMENT

Decorative Section Separators5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	content/copilot/tutorials/copilot-cli-hooks.md	434	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	content/copilot/tutorials/copilot-cli-hooks.md	438	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	content/copilot/tutorials/copilot-cli-hooks.md	511	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	content/copilot/tutorials/copilot-cli-hooks.md	515	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	data/variables/product.yml	193	# ------------------------	COMMENT

AI Slop Vocabulary5 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	data/features/code-scanning-link-alert-to-issue.yml	1	# Reference: #20489 - Code scanning alerts link to GitHub issues to facilitate collaboration and work management	COMMENT
MEDIUM	data/release-notes/enterprise-server/3-21/0-rc1.yml	47	Organization owners can manage enterprise teams more securely by using GitHub Apps with fine-grained permissio	CODE
MEDIUM	data/release-notes/enterprise-server/3-21/0.yml	43	Organization owners can manage enterprise teams more securely by using GitHub Apps with fine-grained permissio	CODE
MEDIUM	…landings/components/shared/LandingCarousel.module.scss	133	// Landing cards use a seamless collapsed-border grid, not separate cards.	COMMENT
MEDIUM	…onents/shared/LandingArticleGridWithFilter.module.scss	26	// The article grid uses seamless shared 1px dividers, not separate cards.	COMMENT

Fake / Example Data8 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…how-tos/copilot-cli/automate-copilot-cli/quickstart.md	50	EMAIL_TO="user@example.com"	CODE
LOW	…usables/copilot/copilot-cli/cli-example-plugin-file.md	8	"name": "Jane Doe",	CODE
LOW	src/frame/tests/page.ts	365	expect(page!.applicableVersions.includes('placeholder')).toBe(false)	CODE
LOW	src/search/tests/sanitize-search-query.ts	272	expect(sanitizeSecretScanningSearchQuery('user@example.com')).toBe('[EMAIL]')	CODE
LOW	…/data-directory/scripts/find-orphaned-features/find.ts	25	'placeholder',	CODE
LOW	…/data-directory/scripts/find-orphaned-features/find.ts	288	new Set(['placeholder', 'foo-bar']),	CODE
LOW	…/data-directory/scripts/find-orphaned-features/find.ts	302	console.assert(!test.has('placeholder'), test.toString())	CODE
LOW	src/events/components/experiments/experiments.ts	33	turnOnWithURLParam: 'placeholder',	CODE

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…-cookbook/refactor-code/refactor-data-access-layers.md	107	print(f"An error occurred: {e}")	CODE
LOW	…copilot-cookbook/refactor-code/handle-cross-cutting.md	88	except Exception as e:	CODE

github/docs

Open-Source Code Quality, Security and Technical Debt Review