GitHub Agentic Workflows
This report presents the forensic synthetic code analysis of github/gh-aw, a Go project with 5,029 GitHub stars. SynthScan v2.0 examined 2,015,550 lines of code across 6551 source files, recording 6046 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 4.0 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 6046 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install-gh-aw.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .grype.yaml | 1 | # Grype configuration used by `gh aw compile --grype`. | COMMENT |
| LOW | .grant.yaml | 21 | # runs this image as an MCP server and never links or redistributes any of its | COMMENT |
| LOW | cmd/linters/main.go | 1 | // Command linters runs the gh-aw custom analysis linters. | COMMENT |
| LOW | eslint-factory/src/rules/core-aliases.ts | 1 | // Known `@actions/core` binding names used across lint rules. | COMMENT |
| LOW | …lint-factory/src/rules/no-core-error-then-setfailed.ts | 221 | COMMENT | |
| LOW | eslint-factory/src/rules/prefer-core-logging.ts | 1 | import { AST_NODE_TYPES, ESLintUtils, TSESLint, TSESTree } from "@typescript-eslint/utils"; | COMMENT |
| LOW | .serena/project.yml | 1 | COMMENT | |
| LOW | .serena/project.yml | 21 | # Note: | COMMENT |
| LOW | .serena/project.yml | 61 | # initial prompt for the project. It will always be given to the LLM upon activating the project | COMMENT |
| LOW | .serena/project.yml | 81 | # The full set of modes to be activated is base_modes (from global config) + default_modes + added_modes. | COMMENT |
| LOW | .serena/project.yml | 101 | # The language backend to use for this project. | COMMENT |
| LOW | .serena/project.yml | 121 | COMMENT | |
| LOW | .serena/project.yml | 141 | # In (large) monorepos, this can be used to index only subfolders of the project root, e.g. | COMMENT |
| LOW | .serena/project.yml | 161 | # (see trusted_project_path_patterns in the global configuration). | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 61 | # List functions with line numbers | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 101 | // # {Domain} Validation | COMMENT |
| LOW | scratchpad/repo-memory.md | 221 | COMMENT | |
| LOW | scratchpad/repo-memory.md | 241 | # } | COMMENT |
| LOW | scratchpad/gastown.md | 321 | # Human: Create work campaign | COMMENT |
| LOW | docs/public/editor/hover-tooltips.js | 1 | // ================================================================ | COMMENT |
| LOW | docs/src/content.config.ts | 41 | // owner: 'githubnext', // GitHub org/user | COMMENT |
| LOW | …src/content/docs/specs/fuzzy-schedule-specification.md | 1141 | ## Appendices | COMMENT |
| LOW | …src/content/docs/specs/fuzzy-schedule-specification.md | 1161 | # Might generate: 37 12 * * * (12:37 PM, within 9 AM-5 PM) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 21 | # Workflow name that appears in the GitHub Actions interface. If not specified, | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 41 | COMMENT | |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 81 | # Optional list of skill references to install during activation. Supports remote | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 101 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 121 | # Format 2: Object form of imports with 'aw' subfield for shared agentic workflow | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 141 | # the frontmatter hash covers the entire markdown body so any change to the | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 161 | # shorthand (e.g., '/my-bot' expands to slash_command + workflow_dispatch) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 181 | slash_command: "example-value" | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 201 | # command, or append '*' as a suffix to enable wildcard prefix matching. | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 221 | # trigger workflow. | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 241 | # Format 3: Command configuration object with custom command name | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 261 | # Events where the command should be active. Default is all comment-related events | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 281 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 301 | # Format 2: Array of label names — any of these labels will trigger the workflow. | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 321 | # Format 1: Single item type or '*' for all types. | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 341 | COMMENT | |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 361 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 381 | # Pull request event types to trigger on. Note: 'converted_to_draft' and | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 401 | paths: [] | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 421 | max-stack: 1 | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 441 | # Array of pull request type names that trigger the workflow. Filters workflow | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 461 | # Array of strings | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 481 | # Issue comment event trigger | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 501 | # Array of strings | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 521 | # on monday', 'weekly on friday around 5pm', 'hourly', 'every 2h', 'every 10 | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 541 | # Input parameters for manual dispatch | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 561 | branches: [] | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 581 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 601 | # Array of strings | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 661 | # Format 2: array | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 681 | gollum: null | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 701 | types: [] | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 741 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 761 | # (optional) | COMMENT |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 781 | COMMENT | |
| LOW | docs/src/content/docs/reference/frontmatter-full.md | 801 | COMMENT | |
| 3295 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CHANGELOG.md | 132 | #### Document the two-file agentic workflow structure (separate `.github/agentics/<id>.md` prompt file and `.github/work | COMMENT |
| MEDIUM | CHANGELOG.md | 197 | #### Removed the stray `workdir` field from generated MCP server configurations for agentic workflows so the output matc | COMMENT |
| MEDIUM | CHANGELOG.md | 236 | #### Document the new two-file agentic workflow structure (separating `.github/agentics/` prompts from `.github/workflow | COMMENT |
| MEDIUM | CHANGELOG.md | 248 | #### Updated the embedded agentic tooling stack: | COMMENT |
| MEDIUM | CHANGELOG.md | 756 | #### Add importable tools: `agentic-workflows`, `serena`, and `playwright`. | COMMENT |
| MEDIUM | CHANGELOG.md | 1640 | #### Added new shared agentic workflow: Another one | COMMENT |
| MEDIUM | CHANGELOG.md | 2126 | #### Improve create-agentic-workflow prompt with writing style guidelines and user engagement tips | COMMENT |
| MEDIUM | CHANGELOG.md | 2171 | #### Add firewall agentic workflow demonstrating network permission enforcement | COMMENT |
| MEDIUM | CHANGELOG.md | 2212 | #### Fixed silent failure when agentic workflow hits max-turns limit - now raises clear error message | COMMENT |
| MEDIUM | CHANGELOG.md | 2295 | #### Add commit-changes-analyzer agentic workflow | COMMENT |
| MEDIUM | CHANGELOG.md | 2297 | #### Add agentic workflow for enhancing Go files with debug logging | COMMENT |
| MEDIUM | CHANGELOG.md | 2495 | #### Add generic timeout field for tools configuration. Allows configuring operation timeouts (in seconds) for tool/MCP | COMMENT |
| MEDIUM | CHANGELOG.md | 2525 | #### Update add command to resolve agentic workflow file from .github/workflows folder | COMMENT |
| MEDIUM | CHANGELOG.md | 2549 | #### Add builtin "agentic-workflows" tool for workflow introspection and analysis | COMMENT |
| MEDIUM | CHANGELOG.md | 2570 | #### Add secret validation steps to agentic engines (Claude, Copilot, Codex) | COMMENT |
| MEDIUM | CHANGELOG.md | 2583 | #### Add shared agentic workflow for Microsoft Fabric RTI MCP server | COMMENT |
| MEDIUM | CHANGELOG.md | 2711 | #### Add SST OpenCode shared agentic workflow and smoke test | COMMENT |
| MEDIUM | CHANGELOG.md | 2787 | #### Add temporary folder usage instructions to agentic workflow prompts | COMMENT |
| MEDIUM | CHANGELOG.md | 2896 | #### Remove push trigger from repo-tree-map agentic workflow | COMMENT |
| MEDIUM | CHANGELOG.md | 2928 | #### Update agentic CLI versions | COMMENT |
| MEDIUM | DEVGUIDE.md | 819 | command_name_orchestrator.go # Main orchestration | CODE |
| MEDIUM | README.md | 12 | - Reference: https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md | CODE |
| MEDIUM | README.md | 28 | - [How Agentic Workflows work](#how-github-agentic-workflows-works) | CODE |
| MEDIUM | README.md | 418 | > **Ready to learn GitHub Agentic Workflows hands-on?** The [**Factory Tour Workshop**](https://github.com/githubnext/gh | CODE |
| MEDIUM | CONTRIBUTING.md | 175 | Load [https://github.com/github/gh-aw/.github/skills/agentic-workflows/SKILL.md](https://github.com/github/gh-aw/blob/ma | CODE |
| MEDIUM | SKILL.md | 14 | Load https://github.com/github/gh-aw/blob/main/.github/skills/agentic-workflows/SKILL.md to learn how to create/update/d | CODE |
| MEDIUM | cmd/gh-aw/capitalization_test.go | 14 | // - Use lowercase "agentic workflows" when referring generically to workflow files/functionality | COMMENT |
| MEDIUM | cmd/gh-aw/capitalization_test.go | 30 | // Define commands that should use lowercase "agentic workflows" (generic usage) | COMMENT |
| MEDIUM | cmd/gh-aw/capitalization_test.go | 57 | // MCP command Long description should use lowercase "agentic workflows" | COMMENT |
| MEDIUM | specs/security-architecture-spec.md | 1626 | # ... agentic execution (read-only) ... | COMMENT |
| MEDIUM | specs/compiler-threat-detection-spec.md | 450 | - Daily optimizer review cycle. Reviewed compiler and parser changes merged since the 1.0.25 audit (`d2432aca6`..`HEAD` | CODE |
| MEDIUM | scratchpad/validation-refactoring.md | 99 | // Package workflow provides {domain} validation for agentic workflows. | COMMENT |
| MEDIUM | scratchpad/dev.md | 2938 | - [File Inlining and Runtime Imports](./file-inlining.md) - `{{#runtime-import}}` macro: file/URL content inclusion in w | CODE |
| MEDIUM | scratchpad/dev.md | 2990 | - v9.13 (2026-05-21): Maintenance tone scan — fixed 8 tone issues across 6 spec files: `serena-tools-analysis.md` (2 fix | CODE |
| MEDIUM | scratchpad/adding-new-engines.md | 211 | // MyEngine represents the My AI agentic engine | COMMENT |
| MEDIUM | scratchpad/string-sanitization-normalization.md | 86 | // Returns: "github-agentic-workflow" (default) | COMMENT |
| MEDIUM | …dr/34008-manifest-scoped-source-tracking-and-update.md | 65 | ### Update orchestration | COMMENT |
| MEDIUM | …eplace-pkg-cli-test-seams-with-dependency-injection.md | 1 | # ADR-34224: Replace mutable pkg/cli test seams with per-flow dependency injection | COMMENT |
| MEDIUM | …ackage-raw-action-workflow-yml-files-in-aw-manifest.md | 21 | #### Alternative 1: Treat `.yml` as another input to the agentic compilation pipeline | COMMENT |
| MEDIUM | docs/tests/copy-button.spec.ts | 8 | // Navigate to the agentic authoring page | COMMENT |
| MEDIUM | docs/tests/copy-button.spec.ts | 54 | // Navigate to the agentic authoring page | COMMENT |
| MEDIUM | docs/tests/copy-button.spec.ts | 106 | // Navigate to the agentic authoring page | COMMENT |
| MEDIUM | docs/slides/index.md | 94 | add-comment: # guardrails for write operations | CODE |
| MEDIUM | docs/src/content/docs/about.md | 11 | **GitHub Agentic Workflows** (`gh-aw`) is an open-source [GitHub CLI](https://cli.github.com/) extension from [GitHub](h | CODE |
| MEDIUM | docs/src/content/docs/patterns/deterministic-ops.md | 9 | GitHub Agentic Workflows can combine deterministic computation ([`steps:`](/gh-aw/reference/steps-jobs/#custom-steps-ste | CODE |
| MEDIUM | docs/src/content/docs/patterns/deterministic-ops.md | 87 | Deterministic steps can also be used for [Custom Trigger Filtering](/gh-aw/reference/triggers/#filtering-by-custom-steps | CODE |
| MEDIUM | docs/src/content/docs/patterns/monitor-ops.md | 10 | The [agentic-ops repository](https://github.com/githubnext/agentic-ops) provides the reference implementation for this a | CODE |
| MEDIUM | …ocs/specs/repository-package-manifest-specification.md | 270 | - workflows/review.md # agentic workflow — compiled on install | CODE |
| MEDIUM | docs/src/content/docs/specs/forecast-specification.md | 252 | # Forecast all agentic workflows in the current repository for the next month | COMMENT |
| MEDIUM | docs/src/content/docs/gallery/maintaining-repos.md | 8 | Repository maintenance is continuous work: triaging issues, reviewing pull requests, keeping tests and dependencies heal | CODE |
| MEDIUM | docs/src/content/docs/setup/cli.md | 14 | | [`gh aw init`](#init) | Set up your repository for agentic workflows | First time configuring a repo — creates skills, | CODE |
| MEDIUM | docs/src/content/docs/setup/cli.md | 23 | | [`gh aw logs`](#logs) | Download and analyze agentic workflow logs and artifacts | Debugging a past run by inspecting | CODE |
| MEDIUM | docs/src/content/docs/troubleshooting/common-issues.md | 376 | Using Copilot Chat (requires [agentic authoring setup](/gh-aw/guides/working-with-workflows/#configuring-your-repository | CODE |
| MEDIUM | docs/src/content/docs/troubleshooting/debugging.md | 27 | - **Copilot Chat on GitHub.com** (requires [agentic authoring setup](/gh-aw/guides/working-with-workflows/#configuring-y | CODE |
| MEDIUM | …docs/blog/2026-01-12-welcome-to-pelis-agent-factory.md | 31 | Peli's factory is a collection of [**automated agentic workflows**](https://gh.io/gh-aw) we use in practice. We have bui | CODE |
| MEDIUM | …docs/blog/2026-01-12-welcome-to-pelis-agent-factory.md | 57 | The factory becomes both an experiment and a reference collection - a living library of patterns that others can study, | CODE |
| MEDIUM | …s/src/content/docs/blog/2026-08-24-agent-of-the-day.md | 22 | - **[Run 32726221560](https://github.com/github/gh-aw/actions/runs/32726221560)** fired from a comment on [discussion #5 | CODE |
| MEDIUM | …s/src/content/docs/blog/2026-08-24-agent-of-the-day.md | 22 | - **[Run 32726221560](https://github.com/github/gh-aw/actions/runs/32726221560)** fired from a comment on [discussion #5 | CODE |
| MEDIUM | …s/src/content/docs/blog/2026-05-26-agent-of-the-day.md | 43 | **Curious about building workflows that watch your workflows?** Explore the full gh-aw project at [github/gh-aw](https:/ | CODE |
| MEDIUM | …s/src/content/docs/blog/2026-05-20-agent-of-the-day.md | 56 | **Want workflows that know when to quit while they're ahead?** Check out the [gh-aw project on GitHub](https://github.co | CODE |
| 606 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | debug.md | 19 | ## Step 1: Install GitHub Agentic Workflows CLI Extension | COMMENT |
| LOW | debug.md | 53 | ## Step 2: Debug the Workflow Failure | COMMENT |
| LOW | debug.md | 73 | ## Step 3: Apply Fixes | COMMENT |
| LOW | debug.md | 86 | ## Step 4: Commit and Push Changes | COMMENT |
| LOW | install.md | 13 | ## Step 1: Install gh-aw CLI Extension | COMMENT |
| LOW | install.md | 35 | ## Step 2: Initialize Repository for Agentic Workflows | COMMENT |
| LOW | install.md | 53 | ## Step 3: Review Changes | COMMENT |
| LOW | create.md | 5 | ## Step 1: Install GitHub Agentic Workflows CLI Extension | COMMENT |
| LOW | create.md | 39 | ## Step 2: Create the Workflow or do Other Actions | COMMENT |
| LOW | create.md | 113 | ## Step 3: Review Changes | COMMENT |
| LOW | create.md | 145 | ## Step 4: Commit and Push Changes | COMMENT |
| LOW | CONTRIBUTING.md | 47 | ### Step 1: Analyze with an Agent (for bug reports) | COMMENT |
| LOW | CONTRIBUTING.md | 57 | ### Step 2: Open an Issue with Your Agentic Plan | COMMENT |
| LOW | CONTRIBUTING.md | 108 | ### Step 3: Discuss and Refine with the Team | COMMENT |
| LOW | CONTRIBUTING.md | 116 | ### Step 4: A Core Team Member Implements the PR | COMMENT |
| LOW | optimize.md | 19 | ## Step 1: Install GitHub Agentic Workflows CLI Extension | COMMENT |
| LOW | optimize.md | 53 | ## Step 2: Optimize Token Consumption | COMMENT |
| LOW | optimize.md | 71 | ## Step 3: Apply Optimizations | COMMENT |
| LOW | optimize.md | 84 | ## Step 4: Commit and Push Changes | COMMENT |
| LOW | package.md | 15 | ## Step 1: Discover Package Contents | COMMENT |
| LOW | package.md | 29 | ## Step 2: Standardize Structure | COMMENT |
| LOW | package.md | 40 | ## Step 3: Create `aw.yml` Package Manifest | COMMENT |
| LOW | package.md | 82 | ## Step 4: Dependency Cleanup for Reusability | COMMENT |
| LOW | package.md | 93 | ## Step 5: Update `README.md` for Consumers | COMMENT |
| LOW | package.md | 107 | ## Step 6: Validate and Deliver | COMMENT |
| LOW⚡ | test-setup-local.sh | 18 | # Step 1: Check if we're in the right directory | COMMENT |
| LOW⚡ | test-setup-local.sh | 26 | # Step 2: Build the actions if js/ directory doesn't exist | COMMENT |
| LOW⚡ | test-setup-local.sh | 39 | # Step 3: Verify js/ directory has files | COMMENT |
| LOW⚡ | test-setup-local.sh | 47 | # Step 4: Create a temporary destination directory | COMMENT |
| LOW⚡ | test-setup-local.sh | 52 | # Step 5: Run setup.sh | COMMENT |
| LOW⚡ | test-setup-local.sh | 66 | # Step 6: Verify files were copied | COMMENT |
| LOW⚡ | test-setup-local.sh | 76 | # Step 7: Check output file | COMMENT |
| LOW⚡ | test-setup-local.sh | 82 | # Step 8: List some of the copied files | COMMENT |
| LOW⚡ | test-setup-local.sh | 87 | # Step 9: Cleanup | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 51 | ### Step 1: Analyze Current Structure | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 76 | ### Step 2: Group by Domain | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 91 | ### Step 3: Create New Files | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 131 | ### Step 4: Move Functions | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 159 | ### Step 5: Reorganize Tests | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 188 | ### Step 6: Update Documentation | COMMENT |
| LOW | scratchpad/validation-refactoring.md | 205 | ### Step 7: Verify No Functional Changes | COMMENT |
| LOW | scratchpad/end-to-end-feature-testing.md | 18 | ### Step 1: Instruct GitHub Copilot Agent to Modify dev.md | COMMENT |
| LOW | scratchpad/end-to-end-feature-testing.md | 44 | ### Step 2: Trigger the Dev Workflow | COMMENT |
| LOW | scratchpad/end-to-end-feature-testing.md | 66 | ### Step 3: Monitor the Dev Workflow Execution | COMMENT |
| LOW | scratchpad/end-to-end-feature-testing.md | 81 | ### Step 4: Review Dev Hawk's Analysis | COMMENT |
| LOW | scratchpad/end-to-end-feature-testing.md | 99 | ### Step 5: Iterate Based on Feedback | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 197 | ### Step 1: Create Engine File | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 236 | ### Step 2: Implement Required Secrets | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 262 | ### Step 3: Implement Installation Steps | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 321 | ### Step 4: Implement Execution Steps | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 397 | ### Step 5: Implement MCP Configuration | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 438 | ### Step 6: Implement Log Parsing (Optional) | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 461 | ### Step 7: Register Engine | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 482 | ### Step 8: Add Engine Constant (Optional) | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 493 | ### Step 9: Add Tests | COMMENT |
| LOW | scratchpad/adding-new-engines.md | 566 | ### Step 10: Update Documentation | COMMENT |
| LOW | scratchpad/actions.md | 787 | #### Step 1: Register Script with Action Path | COMMENT |
| LOW | scratchpad/actions.md | 799 | #### Step 2: Compile with Action Mode | COMMENT |
| LOW | scratchpad/actions.md | 836 | #### Step 3: Output Comparison | COMMENT |
| LOW⚡ | scratchpad/html-entity-mention-bypass-fix.md | 32 | // Step 1: Normalize Unicode (NFC) | COMMENT |
| 635 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …tory/src/rules/no-core-error-then-process-exit.test.ts | 112 | // ── Non-adjacent pairs (intervening statements) ───────────────────────── | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 44 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 53 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 55 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 74 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/resolve-base-commit_test.sh | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/resolve-base-commit_test.sh | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/resolve-base-commit_test.sh | 111 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/resolve-base-commit_test.sh | 113 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 124 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/resolve-base-commit_test.sh | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 146 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 227 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 229 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 248 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | scripts/check-stale-lock-files_test.sh | 250 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 41 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 53 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 72 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 74 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 88 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 90 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 107 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 109 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 130 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 132 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 170 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 172 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 186 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 188 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 207 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 209 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 269 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check-stale-lock-files_test.sh | 272 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/dataflow-pr-discussion-dataset.md | 272 | # ── Discussions ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/dataflow-pr-discussion-dataset.md | 294 | # ── Pull Requests ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/dataflow-pr-discussion-dataset.md | 478 | # ── Write stats ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/upgrade-test.yml | 66 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/upgrade-test.yml | 87 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 26 | // ── Input-definition types ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 48 | // ── Config type ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 85 | // ── Per-call message type ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 118 | // ── Resolved temporary IDs ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 166 | // ── sanitizeContent ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 200 | // ── Handler and factory function types ───────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/js/types/safe-output-script.d.ts | 254 | // ── Globals available in the script body ──────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 41 | # ── Test 1: Core folders and root files are saved ──────────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 66 | # ── Test 2: Absent items are skipped without error ─────────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 85 | # ── Test 3: Empty env vars → nothing saved, exits 0 ───────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 100 | # ── Test 4: Re-run clears stale snapshot (idempotent) ──────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 117 | # ── Test 5: Unset env vars → graceful no-op ────────────────────────────────── | COMMENT |
| MEDIUM | actions/setup/sh/save_base_github_folders_test.sh | 130 | # ── Summary ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | actions/setup/sh/print_firewall_logs_test.sh | 36 | # ── Test 1: Script syntax is valid ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | actions/setup/sh/print_firewall_logs_test.sh | 41 | # ── Test 2: Unknown argument exits 1 ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | actions/setup/sh/print_firewall_logs_test.sh | 50 | # ── Test 3: AWF not installed prints informational message ────────────────── | COMMENT |
| 150 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/skills/playwright-cli/SKILL.md | 39 | playwright-cli fill e5 "user@example.com" --submit | CODE |
| LOW | .claude/skills/playwright-cli/SKILL.md | 330 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | …de/skills/playwright-cli/references/test-generation.md | 21 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | …de/skills/playwright-cli/references/test-generation.md | 23 | # await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | COMMENT |
| LOW | …de/skills/playwright-cli/references/test-generation.md | 44 | await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | CODE |
| LOW | …de/skills/playwright-cli/references/test-generation.md | 118 | await expect(page.getByRole('textbox', { name: 'Email' })).toHaveValue('user@example.com'); | CODE |
| LOW | …laude/skills/playwright-cli/references/running-code.md | 223 | await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | CODE |
| LOW⚡ | …aude/skills/playwright-cli/references/storage-state.md | 238 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | …kills/playwright-cli/references/spec-driven-testing.md | 180 | playwright-cli fill e3 "John Doe" # -> page.getByRole('textbox', {...}).fill(...) | CODE |
| LOW | …kills/playwright-cli/references/spec-driven-testing.md | 199 | // 2. Type 'John Doe' into the username field | COMMENT |
| LOW | …kills/playwright-cli/references/spec-driven-testing.md | 200 | await page.getByRole('textbox', { name: 'username' }).fill('John Doe'); | CODE |
| LOW | …skills/playwright-cli/references/session-management.md | 17 | playwright-cli -s=auth fill e1 "user@example.com" | CODE |
| LOW | scripts/resolve-base-commit_test.sh | 25 | git -C "$dir" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/resolve-base-commit_test.sh | 58 | git -C "$FULL" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/resolve-base-commit_test.sh | 77 | git -C "$SHALLOW" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/resolve-base-commit_test.sh | 130 | git -C "$DIVERGED" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/check-stale-lock-files_test.sh | 153 | git -C "$T7" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/check-stale-lock-files_test.sh | 234 | git -C "$T11" config user.email "test@test.com" | CODE |
| LOW⚡ | scripts/check-stale-lock-files_test.sh | 255 | git -C "$T12" config user.email "test@test.com" | CODE |
| LOW | scripts/check-stale-lock-files_test.sh | 23 | git -C "$repo_dir" config user.email "test@test.com" | CODE |
| LOW | pkg/cli/compile_integration_test.go | 475 | gitConfigEmail := exec.Command("git", "config", "user.email", "test@test.com") | CODE |
| LOW | pkg/cli/compile_integration_test.go | 1527 | gitConfigEmail := exec.Command("git", "config", "user.email", "test@test.com") | CODE |
| LOW | pkg/cli/poutine_integration_test.go | 25 | gitConfigEmail := exec.Command("git", "config", "user.email", "test@test.com") | CODE |
| LOW | pkg/cli/poutine_integration_test.go | 106 | gitConfigEmail := exec.Command("git", "config", "user.email", "test@test.com") | CODE |
| LOW | pkg/cli/copilot_billing_check_test.go | 41 | AuthToken: "fake-token-for-test", | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 7 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 7 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 8 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 8 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 9 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 9 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 10 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 10 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 11 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 11 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 12 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 12 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 13 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 13 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 14 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 14 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 15 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 15 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 16 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 16 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 17 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 17 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 18 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 18 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 19 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 19 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 20 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 20 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 21 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 21 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 22 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 22 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 23 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 23 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| LOW⚡ | pkg/cli/workflows/test-long.md | 24 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq | CODE |
| 513 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/src/content/docs/reference/glossary.md | 551 | A field available on `create-issue:`, `add-comment:`, and `create-pull-request:` safe outputs that strips wrapping backt | CODE |
| HIGH | docs/src/content/docs/reference/glossary.md | 1687 | A [MultiRepoOps](#multirepoops) topology where workflows run from a separate dedicated automation repository targeting y | CODE |
| HIGH | …c/content/docs/reference/safe-outputs-pull-requests.md | 183 | footer: false # omit AI-generated footer from body updates (default: true) | CODE |
| HIGH | …c/content/docs/reference/safe-outputs-pull-requests.md | 341 | footer: true # add AI-generated footer (default: true) | CODE |
| HIGH⚡ | docs/src/content/docs/reference/frontmatter-full.md | 9995 | # Controls when AI-generated footer is added to the review body. Accepts boolean | COMMENT |
| HIGH⚡ | docs/src/content/docs/reference/frontmatter-full.md | 10001 | # Format 1: Controls whether AI-generated footer is added to the review body. true | COMMENT |
| HIGH⚡ | docs/src/content/docs/reference/frontmatter-full.md | 10005 | # Format 2: Controls when AI-generated footer is added to the review body: | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 4242 | # Controls whether AI-generated footer is added to the managed comment. Defaults | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 4663 | # Controls whether AI-generated footer is added to the issue. When false, the | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 6477 | # Controls whether AI-generated footer is added to the discussion. When false, the | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 7073 | # Controls whether AI-generated footer is added when updating the discussion body. | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 8575 | # Controls whether AI-generated footer is added to the comment. When false, the | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 9285 | # Controls whether AI-generated footer is added to the pull request. When false, | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 10886 | # Controls whether AI-generated footer is added to the reply body. When false, the | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 14700 | # Controls whether AI-generated footer is added when updating the issue body. When | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 15017 | # Controls whether AI-generated footer is added when updating the pull request | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 19709 | # Controls whether AI-generated footer is added when updating the release body. | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 20923 | # Custom footer message template for AI-generated content. Available placeholders: | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 21045 | # @mentions in AI-generated content are allowed or escaped. | COMMENT |
| HIGH | docs/src/content/docs/reference/frontmatter-full.md | 21095 | # AI-generated footer content from all created/updated entities (issues, PRs, | COMMENT |
| HIGH | docs/src/content/docs/reference/safe-outputs.md | 316 | footer: false # omit AI-generated footer (default: true) | CODE |
| HIGH | docs/src/content/docs/reference/safe-outputs.md | 943 | footer: false # omit AI-generated footer from review body (default: true) | CODE |
| HIGH | .github/aw/messages.md | 28 | ### Footer messages (appended to every AI-generated comment/issue/PR) | COMMENT |
| HIGH | .github/aw/messages.md | 54 | ### Body headers (prepended to every AI-generated message body) | COMMENT |
| HIGH | .github/aw/safe-outputs-content.md | 27 | footer: false # Optional: omit AI-generated footer while preserving XML markers (default: true) | CODE |
| HIGH | .github/aw/safe-outputs-content.md | 102 | footer: false # Optional: omit AI-generated footer while preserving XML markers (default: true) | CODE |
| HIGH | .github/aw/memory.md | 282 | footer: false # Optional: omit AI-generated footer (default: true) | CODE |
| HIGH | .github/workflows/copilot-agent-analysis.md | 236 | _Generated by Copilot Agent Analysis (Run: [run_id])_ | CODE |
| HIGH | .github/workflows/pr-description-caveman.md | 4 | description: Rewrites a merged PR description with a structured, considered summary optimised for downstream agentic ana | CODE |
| HIGH | .github/workflows/pr-description-caveman.lock.yml | 26 | # Rewrites a merged PR description with a structured, considered summary optimised for downstream agentic analysis. Proc | COMMENT |
| HIGH | .github/workflows/pr-description-caveman.lock.yml | 1574 | WORKFLOW_DESCRIPTION: "Rewrites a merged PR description with a structured, considered summary optimised for do | CODE |
| HIGH | .github/workflows/pr-description-caveman.lock.yml | 1637 | WORKFLOW_DESCRIPTION: "Rewrites a merged PR description with a structured, considered summary optimised for do | CODE |
| HIGH | .github/workflows/pr-nitpick-reviewer.md | 356 | ### Auto-generated Code | COMMENT |
| HIGH | .github/workflows/copilot-cli-deep-research.md | 436 | _Generated by Copilot CLI Deep Research (Run: ${{ github.run_id }})_ | CODE |
| HIGH | .github/workflows/copilot-pr-prompt-analysis.md | 275 | _Generated by Copilot PR Prompt Analysis (Run: ${{ github.run_id }})_ | CODE |
| HIGH | .github/workflows/copilot-pr-merged-report.md | 217 | _Generated by Copilot PR Merged Report (Run: [${{ github.run_id }}](https://github.com/${{ github.repository }}/actions/ | CODE |
| HIGH | .github/workflows/copilot-pr-merged-report.md | 257 | _Generated by Copilot PR Merged Report (Run: [${{ github.run_id }}](...))_ | CODE |
| HIGH | pkg/cli/mcp_secrets.go | 49 | // If we get a 403 error, ignore it as requested | COMMENT |
| HIGH | pkg/workflow/safe_outputs_config_types.go | 27 | Footer *string `yaml:"footer,omitempty"` // Controls AI-generated footer | CODE |
| HIGH | pkg/workflow/markdown_code_region_balancer_fuzz_test.go | 20 | // 4. Common AI-generated patterns are properly handled | COMMENT |
| HIGH | pkg/workflow/markdown_code_region_balancer_fuzz_test.go | 81 | // AI-generated nested markdown examples (common error pattern) | COMMENT |
| HIGH⚡ | pkg/workflow/test_data/sample_codex_log.txt | 163 | "text": "{\"total_count\":20,\"incomplete_results\":false,\"items\":[{\"id\":3316382552,\"number\":14,\"state\":\" | CODE |
| HIGH⚡ | pkg/workflow/test_data/sample_codex_log.txt | 163 | "text": "{\"total_count\":20,\"incomplete_results\":false,\"items\":[{\"id\":3316382552,\"number\":14,\"state\":\" | CODE |
| HIGH | pkg/workflow/test_data/sample_claude_log.txt | 215 | [{"type":"system","subtype":"init","cwd":"/home/runner/work/gh-aw/gh-aw","session_id":"29d324d8-1a92-43c6-8740-babc2875a | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | test-setup-local.sh | 18 | # Step 1: Check if we're in the right directory | COMMENT |
| LOW⚡ | test-setup-local.sh | 26 | # Step 2: Build the actions if js/ directory doesn't exist | COMMENT |
| LOW⚡ | test-setup-local.sh | 39 | # Step 3: Verify js/ directory has files | COMMENT |
| LOW⚡ | test-setup-local.sh | 47 | # Step 4: Create a temporary destination directory | COMMENT |
| LOW⚡ | test-setup-local.sh | 52 | # Step 5: Run setup.sh | COMMENT |
| LOW⚡ | test-setup-local.sh | 66 | # Step 6: Verify files were copied | COMMENT |
| LOW⚡ | test-setup-local.sh | 76 | # Step 7: Check output file | COMMENT |
| LOW⚡ | test-setup-local.sh | 82 | # Step 8: List some of the copied files | COMMENT |
| LOW⚡ | test-setup-local.sh | 87 | # Step 9: Cleanup | COMMENT |
| LOW⚡ | .github/workflows/daily-fact.lock.yml | 350 | GH_AW_PROMPT_CONTENT_0008: "{{#runtime-import? .github/shared-instructions.md}}\n\n### Daily Fact About gh-aw\ | CODE |
| LOW | actions/setup/sh/check_mcp_servers.sh | 204 | # Step 1: Send ping to verify basic connectivity | COMMENT |
| LOW | actions/setup/sh/check_mcp_servers.sh | 218 | # Step 2: Send MCP initialize request, capturing response headers for Mcp-Session-Id | COMMENT |
| LOW | actions/setup/sh/check_mcp_servers.sh | 234 | # Step 3: Send tools/list, including Mcp-Session-Id header if returned by initialize | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 119 | # Step 1: Validate config file exists | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 124 | # Step 2: Check if server exists | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 129 | # Step 3: Extract server configuration | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 135 | # Step 4: Validate server has URL | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 141 | # Step 5: Validate server type | COMMENT |
| LOW⚡ | actions/setup/sh/validate_gatewayed_server.sh | 146 | # Step 6: Validate URL points to gateway | COMMENT |
| LOW | pkg/cli/compile_schedule_calendar_test.go | 407 | // Step 1: scatter the fuzzy expression to a real cron string. | COMMENT |
| LOW⚡ | pkg/cli/compile_schedule_calendar_test.go | 418 | // Step 2: parse the scattered cron with parseCronSchedule. | COMMENT |
| LOW⚡ | pkg/cli/compile_schedule_calendar_test.go | 427 | // Step 3: buildScheduleGrid should register at least one slot. | COMMENT |
| LOW | pkg/cli/compile_schedule_calendar_test.go | 444 | // Step 4: displayScheduleCalendar should produce output referencing the hour. | COMMENT |
| LOW⚡ | pkg/cli/logs_json_clean_test.go | 83 | // Step 1: Build logs data (what happens in the function) | COMMENT |
| LOW⚡ | pkg/cli/logs_json_clean_test.go | 86 | // Step 2: Capture both stdout and stderr | COMMENT |
| LOW⚡ | pkg/cli/logs_json_clean_test.go | 105 | // Step 3: Output JSON FIRST (as our fix does) | COMMENT |
| LOW⚡ | pkg/cli/logs_json_clean_test.go | 108 | // Step 4: Then output stderr message (as our fix does) | COMMENT |
| LOW⚡ | pkg/cli/checks_command.go | 158 | // Step 1: Resolve head SHA from PR (skipped when caller provides it). | COMMENT |
| LOW⚡ | pkg/cli/checks_command.go | 167 | // Step 2: Fetch check runs | COMMENT |
| LOW⚡ | pkg/cli/checks_command.go | 175 | // Step 3: Fetch commit statuses | COMMENT |
| LOW⚡ | pkg/cli/codemod_difc_proxy.go | 35 | // Step 1: remove features.difc-proxy | COMMENT |
| LOW⚡ | pkg/cli/codemod_difc_proxy.go | 42 | // Step 2: add integrity-proxy: false to tools.github if needed | COMMENT |
| LOW | pkg/cli/trial_confirmation.go | 138 | // Step 1: Repository creation/reuse | COMMENT |
| LOW | pkg/cli/trial_confirmation.go | 149 | // Step 2: Clone contents (only in clone-repo mode) | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 216 | // Step 1: Compile to generate the full lock file + manifest. | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 230 | // Step 2: Compile the identical workflow again. The lock file from step 1 acts | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 256 | // Step 1: Establish the baseline manifest with a normal compile. | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 269 | // Step 2: Re-compile. No secrets were added so this must succeed. | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 513 | // Step 1: Compile to generate the lock file + manifest. | COMMENT |
| LOW | pkg/cli/compile_safe_update_integration_test.go | 527 | // Step 2: Compile again. The lock file from step 1 serves as the prior manifest. | COMMENT |
| LOW | pkg/cli/add_package_manifest_skills.go | 23 | // Step 1: resolve manifest skills first (explicit dirs). | COMMENT |
| LOW | pkg/cli/add_package_manifest_skills.go | 58 | // Step 2: always auto-scan and append any skills not already in the manifest. | COMMENT |
| LOW | pkg/cli/trial_runner.go | 47 | // Step 0: Determine workflow mode (mutual exclusion is enforced by Cobra) | COMMENT |
| LOW | pkg/cli/trial_runner.go | 100 | // Step 1: Determine host repository slug | COMMENT |
| LOW | pkg/cli/trial_runner.go | 138 | // Step 2: Create or reuse host repository | COMMENT |
| LOW | pkg/cli/codemod_run_install_scripts.go | 68 | // Step 1: Find the top-level run-install-scripts line | COMMENT |
| LOW⚡ | pkg/cli/codemod_run_install_scripts.go | 95 | // Step 2: Detect the primary indentation unit used in the frontmatter | COMMENT |
| LOW⚡ | pkg/cli/codemod_run_install_scripts.go | 98 | // Step 3: Find the runtimes: block (top-level key) | COMMENT |
| LOW | pkg/cli/codemod_run_install_scripts.go | 118 | // Step 4: Find node: as a direct child of runtimes: | COMMENT |
| LOW | pkg/cli/codemod_run_install_scripts.go | 154 | // Step 5: node: exists – inject run-install-scripts right after node: | COMMENT |
| LOW | pkg/cli/trial_helpers.go | 50 | // Step 3: Clone host repository to local temp directory | COMMENT |
| LOW⚡ | pkg/cli/trial_helpers.go | 63 | // Step 4: Create trials directory | COMMENT |
| LOW⚡ | pkg/cli/trial_helpers.go | 68 | // Step 5: Run trials for each workflow | COMMENT |
| LOW | pkg/cli/trial_helpers.go | 194 | // Step 6: Save combined results for multi-workflow trials | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 25 | // Step 1: Simulate downloaded artifacts structure (before flattening) | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 64 | // Step 2: Flatten the artifact (mimics flattenAgentOutputsArtifact) | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 83 | // Step 3: Test that findAgentLogFile can find the session log after flattening | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 106 | // Step 1: Simulate downloaded artifacts structure (before flattening) | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 140 | // Step 2: Flatten the artifact | COMMENT |
| LOW | pkg/cli/logs_copilot_flattening_integration_test.go | 158 | // Step 3: Test that findAgentLogFile can find the session log via recursive search | COMMENT |
| 62 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/daily-hippo-learn.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/eslint-monster.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/design-decision-gate.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/daily-news.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/auto-triage-issues.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/ab-testing-advisor.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/daily-doc-updater.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | …b/workflows/daily-awf-spec-compiler-surfacing.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/commit-changes-analyzer.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/agent-persona-explorer.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/unbloat-docs.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/spec-enforcer.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/pr-code-quality-reviewer.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | …thub/workflows/daily-multi-device-docs-tester.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/daily-function-namer.lock.yml | 0 | env: awf_reflect_enabled: 1 copilot_github_token: ${{ secrets.copilot_github_token }} gh_aw_max_turns: 90 gh_aw_phase: a | STRING |
| HIGH | .github/workflows/daily-hippo-learn.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/eslint-monster.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/pr-sous-chef.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/design-decision-gate.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/daily-news.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/auto-triage-issues.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/ab-testing-advisor.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/daily-doc-updater.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | …b/workflows/daily-awf-spec-compiler-surfacing.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/commit-changes-analyzer.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/agent-persona-explorer.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/unbloat-docs.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/spec-enforcer.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/poem-bot.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/pr-code-quality-reviewer.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | …thub/workflows/daily-multi-device-docs-tester.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| HIGH | .github/workflows/daily-function-namer.lock.yml | 0 | \'')$path"; [ -n "$goroot" ] && export path="$goroot/bin:$path" || true; [ -n "$erlang_home" ] && export path="$erlang_h | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eslint-factory/src/commonjs-syntax.test.ts | 14 | const messages = linter.verify(`function writeStepSummaryWithTokenUsage(coreObj) { await coreObj.summary.write(); }` | CODE |
| LOW | eslint-factory/src/commonjs-syntax.test.ts | 27 | const messages = linter.verify(`async function writeStepSummaryWithTokenUsage(coreObj) { await coreObj.summary.write | CODE |
| LOW | …equire-lastindex-reset-before-global-exec-loop.test.ts | 62 | function extractTemporaryIdReferences(message) { | CODE |
| LOW | …equire-lastindex-reset-before-global-exec-loop.test.ts | 112 | function extractTemporaryIdReferences(message, stopField) { | CODE |
| LOW | …lint-factory/src/rules/require-spawn-error-listener.ts | 116 | function isUnconditionallyReachableFrom(declaration: TSESTree.VariableDeclarator, listener: TSESTree.CallExpression, sou | CODE |
| LOW | …lint-factory/src/rules/no-core-error-then-setfailed.ts | 55 | function isSetFailedArgPrefixedVersion(errorArg: TSESTree.Expression, setFailedArg: TSESTree.Expression, sourceCode: Sou | CODE |
| LOW | …lint-factory/src/rules/no-core-error-then-setfailed.ts | 100 | function isSetFailedArgStringConcatPrefixedVersion(errorArg: TSESTree.Expression, setFailedArg: TSESTree.Expression, sou | CODE |
| LOW | …lint-factory/src/rules/no-core-error-then-setfailed.ts | 149 | function isCoreMethodCallStatement(node: TSESTree.Statement, sourceCode: SourceCode, methodName: string): node is TSESTr | CODE |
| LOW | …int-factory/src/rules/no-caught-error-interpolation.ts | 26 | function isInlineEventErrorHandler(node: TSESTree.ArrowFunctionExpression | TSESTree.FunctionExpression): boolean { | CODE |
| LOW | …int-factory/src/rules/no-caught-error-interpolation.ts | 45 | function isBareIdentifierExpression(node: TSESTree.Expression): node is TSESTree.Identifier { | CODE |
| LOW | …int-factory/src/rules/no-caught-error-interpolation.ts | 113 | function isDefinitionAvailableAtNode(definition: TSESLint.Scope.Definition, node: TSESTree.Node): boolean { | CODE |
| LOW | …int-factory/src/rules/no-caught-error-interpolation.ts | 123 | function hasResolvableLocalBinding(node: TSESTree.Node, name: string): boolean { | CODE |
| LOW | …tory/src/rules/require-escaped-regexp-interpolation.ts | 43 | function isCanonicalMetacharEscapeRegex(node: TSESTree.Node): boolean { | CODE |
| LOW | …tory/src/rules/require-escaped-regexp-interpolation.ts | 69 | function getFixedLiteralSearchText(node: TSESTree.Node): string | null { | CODE |
| LOW | …tory/src/rules/require-escaped-regexp-interpolation.ts | 76 | function decodeFixedLiteralRegexPattern(pattern: string): string | null { | CODE |
| LOW | …tory/src/rules/require-escaped-regexp-interpolation.ts | 114 | function isLiteralRegexEscapeReplacement(search: string, replacement: string): boolean { | CODE |
| LOW | eslint-factory/src/rules/no-math-minmax-array-spread.ts | 66 | function isUnboundedSpreadArgument(node: TSESTree.Node): boolean { | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 24 | function getCommonContinuationIndent(lines: string[]): string { | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 134 | export function isChildProcessImportBinding(definition: ChildProcessBindingDefinition): boolean { | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 141 | export function isChildProcessObjectBinding(name: string, scopeNode: TSESTree.Node, sourceCode: TSESLint.SourceCode): bo | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 171 | function getFsMethodFromImportBinding(definition: FsBindingDefinition, fsSyncMethods: ReadonlySet<string>): string | nul | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 182 | export function createFsSyncMethodResolver(sourceCode: TSESLint.SourceCode, fsSyncMethods: ReadonlySet<string>, options: | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 183 | function getFsSyncMethodFromProperty(memberExpr: TSESTree.MemberExpression): string | null { | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 194 | function isIdentifierBoundToFsModule(identifierName: string, scopeNode: TSESTree.Node): boolean { | CODE |
| LOW | eslint-factory/src/rules/try-catch-rule-utils.ts | 228 | function resolveFsSyncMethodFromIdentifier(node: TSESTree.CallExpression): string | null { | CODE |
| LOW | …tory/src/rules/require-http-response-error-listener.ts | 20 | function isModuleRequireIdentifier(callee: TSESTree.Identifier, sourceCode: TSESLint.SourceCode): boolean { | CODE |
| LOW⚡ | eslint-factory/src/rules/no-empty-catch-block.ts | 25 | function commentSignalsIntentionalIgnore(comment: TSESTree.Comment): boolean { | CODE |
| LOW⚡ | eslint-factory/src/rules/no-empty-catch-block.ts | 31 | function hasAdjacentIntentionalIgnoreComment(node: TSESTree.Node): boolean { | CODE |
| LOW⚡ | eslint-factory/src/rules/no-empty-catch-block.ts | 39 | function hasIntentionalIgnoreComment(block: TSESTree.BlockStatement, node: TSESTree.Node): boolean { | CODE |
| LOW | …ory/src/rules/no-child-process-interpolated-command.ts | 38 | function resolveIdentifierInitializer(arg: TSESTree.Identifier, scopeNode: TSESTree.Node, sourceCode: TSESLint.SourceCod | CODE |
| LOW | …ory/src/rules/no-child-process-interpolated-command.ts | 86 | function isChildProcessMethodBinding(method: ChildProcessMethod, identifierName: string, scopeNode: TSESTree.Node, sourc | CODE |
| LOW | …ory/src/rules/no-child-process-interpolated-command.ts | 122 | function resolveChildProcessMethod(node: TSESTree.CallExpression, sourceCode: TSESLint.SourceCode): ChildProcessMethod | | CODE |
| LOW | …lint-factory/src/rules/require-fs-io-try-catch.test.ts | 12 | function expectedWrapInTryCatchSuggestion(method: string, statement: string, prefix = "") { | CODE |
| LOW | eslint-factory/src/rules/core-method-resolve.ts | 18 | function hasJSDocCoreParamAnnotation(functionNode: TSESTree.Node, paramName: string, sourceCode: TSESLint.SourceCode): b | CODE |
| LOW | eslint-factory/src/rules/core-method-resolve.ts | 113 | export function isDestructuredCoreMethodIdentifier(identifier: TSESTree.Identifier, methodName: string, sourceCode: TSES | CODE |
| LOW | …s/require-page-counter-increment-in-while-true-loop.ts | 34 | function getCountersImmediatelyBefore(loop: TSESTree.WhileStatement): TSESTree.VariableDeclarator[] { | CODE |
| LOW | …s/require-page-counter-increment-in-while-true-loop.ts | 77 | function isNonPositiveNumericLiteral(node: TSESTree.Expression): boolean { | CODE |
| LOW | …s/require-page-counter-increment-in-while-true-loop.ts | 83 | function isCounterAdvanceAssignment(node: TSESTree.AssignmentExpression, counter: TSESTree.VariableDeclarator): bool | CODE |
| LOW | eslint-factory/src/rules/no-json-stringify-error.ts | 96 | function isDefinitionAvailableAtNode(definition: { type: string; name?: TSESTree.Node | null; node: TSESTree.Node }, | CODE |
| LOW | eslint-factory/src/rules/no-json-stringify-error.ts | 105 | function hasResolvableLocalBinding(node: TSESTree.Node, name: string): boolean { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 21 | function isPotentiallyInvalidDateConstruction(node: TSESTree.NewExpression): boolean { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 48 | function extractGetTimeCheckTarget(node: TSESTree.CallExpression): TSESTree.Node | null { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 63 | function extractDirectNaNCheckTarget(node: TSESTree.CallExpression): TSESTree.Identifier | null { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 89 | function extractIsFiniteCheckTarget(node: TSESTree.CallExpression): TSESTree.Identifier | null { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 103 | function isPotentiallyInvalidDateParseCall(node: TSESTree.CallExpression): boolean { | CODE |
| LOW | …src/rules/require-invalid-date-check-before-compare.ts | 211 | function guardDirectlyGatesComparison(guardPath: TSESTree.Node[], comparisonPath: TSESTree.Node[]): boolean { | CODE |
| LOW | …t-factory/src/rules/no-core-error-then-process-exit.ts | 19 | function getImmediateEnclosingFunction(node: TSESTree.Node, sourceCode: SourceCode): FunctionNode | null { | CODE |
| LOW | …t-factory/src/rules/no-core-error-then-process-exit.ts | 112 | function isControlTransferStatement(node: TSESTree.Statement): boolean { | CODE |
| LOW | eslint-factory/src/rules/prefer-get-error-message.ts | 28 | function isDefinitionAvailableAtNode(definition: TSESLint.Scope.Definition, node: TSESTree.Node): boolean { | CODE |
| LOW | eslint-factory/src/rules/prefer-get-error-message.ts | 37 | function hasResolvableLocalBinding(node: TSESTree.Node, name: string): boolean { | CODE |
| LOW | eslint-factory/src/rules/require-fs-close-sync.ts | 80 | function collectCloseTargetVariables(sourceCode: Readonly<TSESLint.SourceCode>, argument: TSESTree.Node): Set<ScopeVaria | CODE |
| LOW | eslint-factory/src/rules/require-fs-close-sync.ts | 103 | function getFdIdentifierFromOpenCall(node: TSESTree.CallExpression): string | null { | CODE |
| LOW | eslint-factory/src/rules/prefer-number-isnan.ts | 76 | function isProvablyNumericArgument(node: TSESTree.CallExpressionArgument): boolean { | CODE |
| LOW | …tory/src/rules/prefer-get-error-message-over-string.ts | 100 | function isDefinitionAvailableAtNode(definition: TSESLint.Scope.Definition, node: TSESTree.Node): boolean { | CODE |
| LOW | …tory/src/rules/prefer-get-error-message-over-string.ts | 109 | function hasResolvableLocalBinding(node: TSESTree.Node, name: string): boolean { | CODE |
| LOW | …tory/src/rules/prefer-get-error-message-over-string.ts | 121 | function resolvesToCaughtErrorVariable(expr: TSESTree.Identifier): boolean { | CODE |
| LOW | …ry/src/rules/prefer-actions-exec-over-child-process.ts | 98 | function isChildProcessModuleBinding(identifierName: string, scopeNode: TSESTree.Node, sourceCode: TSESLint.SourceCode): | CODE |
| LOW | …ry/src/rules/prefer-actions-exec-over-child-process.ts | 135 | function resolveChildProcessMemberMethod(node: TSESTree.MemberExpression, sourceCode: TSESLint.SourceCode): string | nul | CODE |
| LOW | …ry/src/rules/prefer-actions-exec-over-child-process.ts | 146 | function resolveChildProcessOutputMethodBinding(identifierName: string, scopeNode: TSESTree.Node, sourceCode: TSESLint.S | CODE |
| LOW | …ry/src/rules/prefer-actions-exec-over-child-process.ts | 206 | function resolveChildProcessOutputMethod(node: TSESTree.CallExpression, sourceCode: TSESLint.SourceCode): ResolvedChildP | CODE |
| 84 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install-gh-aw.sh | 29 | # Check if INPUT_VERSION is set (GitHub Actions context) | COMMENT |
| LOW⚡ | install-gh-aw.sh | 86 | # Check if HOME is set | COMMENT |
| LOW⚡ | install-gh-aw.sh | 92 | # Check if curl is available | COMMENT |
| LOW⚡ | install-gh-aw.sh | 98 | # Check if sha256sum or shasum is available (for checksum verification) | COMMENT |
| LOW | install-gh-aw.sh | 314 | # Check if binary already exists | COMMENT |
| LOW | cmd/gh-aw/main.go | 318 | ` + string(constants.CLIExtensionPrefix) + ` run daily-perf-improver --json # Output results in JSON format`, | CODE |
| LOW | .serena/project.yml | 76 | # Set this to [] to disable base modes for this project. | COMMENT |
| LOW | .serena/project.yml | 77 | # Set this to a list of mode names to always include the respective modes for this project. | COMMENT |
| LOW | scripts/generate-video-posters.sh | 14 | # Check if ffmpeg is installed | COMMENT |
| LOW | scripts/delete-old-copilot-branches.sh | 120 | # Check if commit is at least 7 days old | COMMENT |
| LOW | scripts/delete-old-copilot-branches.sh | 152 | # Check if we've reached the max branches limit | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 69 | # Check if agent job has write permissions | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 93 | # Check if handler has API calls | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 95 | # Check if validation appears before API calls | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 123 | # Check if handler enforces max limits using any recognized pattern | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 183 | # Check if handler supports target-repo (match explicit config-surface identifiers only) | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 214 | # Check if handler throws errors | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 239 | # Check if handler adds footers | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 353 | # Check if standard handlers exist | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 371 | # Check if permission computation file exists and is well-formed | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 390 | # Check if safe outputs config generation file exists with schema functions | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 402 | # Check if static schemas file exists (embedded JSON) | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 414 | # Check if safe_outputs_config.go has documentation about schema architecture | COMMENT |
| LOW | scripts/check-safe-outputs-conformance.sh | 1418 | # Check if the gateway handler skips tools not present in config (indirectly validates zero-max) | COMMENT |
| LOW | scripts/build-release.sh | 41 | # Check if platform is supported | COMMENT |
| LOW | .github/workflows/daily-hippo-learn.lock.yml | 502 | run: "# Symlink .hippo into cache-memory so the SQLite store persists across runs.\n# All writes to .hippo/ land | CODE |
| LOW | .github/workflows/copilot-pr-merged-report.lock.yml | 499 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | .github/workflows/copilot-agent-analysis.lock.yml | 601 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | .github/workflows/super-linter.lock.yml | 1948 | # Check if there are actual errors (not just the header) | COMMENT |
| LOW | .github/workflows/docs-noob-tester.lock.yml | 575 | run: "MAX_WAIT=135 # 45 attempts × 3s = 135s max wait\nWAITED=0\n# runner-guard:ignore RGS-012 -- loopback-only | CODE |
| LOW | .github/workflows/copilot-opt.lock.yml | 519 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/session-data\nmkdir -p /tmp/gh-aw/agent/session-dat | CODE |
| LOW | .github/workflows/copilot-opt.lock.yml | 527 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | .github/workflows/deep-report.lock.yml | 655 | # Check if cached data exists from this six-hour bucket | COMMENT |
| LOW | .github/workflows/deep-report.lock.yml | 742 | # Check if there are more pages | COMMENT |
| LOW | .github/workflows/deep-report.lock.yml | 746 | # Check if we've reached the requested count | COMMENT |
| LOW | .github/workflows/deep-report.lock.yml | 799 | # Check if cached data exists from this six-hour bucket | COMMENT |
| LOW | .github/workflows/daily-news.lock.yml | 610 | run: "set -e\n\n# Create directories\nmkdir -p /tmp/gh-aw/agent/daily-news-data\nmkdir -p /tmp/gh-aw/repo-memory | CODE |
| LOW | .github/workflows/prompt-clustering-analysis.lock.yml | 580 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | …thub/workflows/dataflow-pr-discussion-dataset.lock.yml | 608 | # Check if cached data exists from this six-hour bucket | COMMENT |
| LOW | …thub/workflows/dataflow-pr-discussion-dataset.lock.yml | 695 | # Check if there are more pages | COMMENT |
| LOW | …thub/workflows/dataflow-pr-discussion-dataset.lock.yml | 699 | # Check if we've reached the requested count | COMMENT |
| LOW | .github/workflows/daily-issues-report.lock.yml | 618 | # Check if cached data exists from today | COMMENT |
| LOW | .github/workflows/copilot-session-insights.lock.yml | 568 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/session-data\nmkdir -p /tmp/gh-aw/agent/session-dat | CODE |
| LOW | .github/workflows/copilot-pr-nlp-analysis.lock.yml | 571 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | .github/workflows/copilot-pr-prompt-analysis.lock.yml | 537 | run: "# Create output directories\nmkdir -p /tmp/gh-aw/agent/pr-data\nmkdir -p /tmp/gh-aw/cache-memory\n\n# Cach | CODE |
| LOW | .github/workflows/install.yml | 134 | # Check if binary exists | COMMENT |
| LOW | .github/workflows/install.yml | 142 | # Check if binary is executable | COMMENT |
| LOW | .github/workflows/ci.yml | 1117 | # Check if the workflow has relative imports | COMMENT |
| LOW | .github/workflows/hippo-embed.lock.yml | 498 | run: "# Symlink .hippo into cache-memory so the SQLite store persists across runs.\n# All writes to .hippo/ land | CODE |
| LOW | .github/workflows/cgo.yml | 1701 | # Check if the failure was due to context deadline (expected) | COMMENT |
| LOW | .github/workflows/cgo.yml | 2380 | # Check if lock file was generated | COMMENT |
| LOW | actions/setup-cli/install.sh | 29 | # Check if INPUT_VERSION is set (GitHub Actions context) | COMMENT |
| LOW⚡ | actions/setup-cli/install.sh | 86 | # Check if HOME is set | COMMENT |
| LOW⚡ | actions/setup-cli/install.sh | 92 | # Check if curl is available | COMMENT |
| LOW⚡ | actions/setup-cli/install.sh | 98 | # Check if sha256sum or shasum is available (for checksum verification) | COMMENT |
| LOW | actions/setup-cli/install.sh | 314 | # Check if binary already exists | COMMENT |
| LOW | actions/setup-cli/install_test.sh | 66 | # Check if script references INPUT_VERSION | COMMENT |
| LOW | actions/setup-cli/install_test.sh | 79 | # Check if script has gh extension install logic | COMMENT |
| LOW | actions/setup-cli/install_test.sh | 92 | # Check if script uses --pin flag with $VERSION variable AND checks VERSION != "latest" | COMMENT |
| LOW | actions/setup-cli/install_test.sh | 106 | # Check if script has checksum validation logic | COMMENT |
| 28 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | install-gh-aw.sh | 308 | # Create the installation directory if it doesn't exist | COMMENT |
| MEDIUM | scripts/test-build-release.sh | 12 | # Create a temporary directory for testing | COMMENT |
| MEDIUM | scripts/convert-astro-to-gfm.sh | 21 | # Create a temporary file | COMMENT |
| MEDIUM | …thub/workflows/github-mcp-structural-analysis.lock.yml | 534 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/python-data-charts.lock.yml | 557 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/daily-news.lock.yml | 591 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/prompt-clustering-analysis.lock.yml | 584 | run: "mkdir -p /tmp/gh-aw/python/{data,charts,artifacts}\n# Create a virtual environment for proper package isol | CODE |
| MEDIUM | .github/workflows/prompt-clustering-analysis.lock.yml | 603 | run: "# Create output directory for full PR data\nmkdir -p /tmp/gh-aw/agent/prompt-cache/pr-full-data\n\n# Downl | CODE |
| MEDIUM | .github/workflows/daily-security-observability.lock.yml | 578 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/daily-issues-report.lock.yml | 671 | # Create a virtual environment for proper package isolation (avoids --break-system-packages) | COMMENT |
| MEDIUM | .github/workflows/daily-issues-report.lock.yml | 718 | # Create a virtual environment for proper package isolation (avoids --break-system-packages) | COMMENT |
| MEDIUM | .github/workflows/daily-repo-chronicle.lock.yml | 523 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/portfolio-analyst.lock.yml | 543 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/daily-code-metrics.lock.yml | 541 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/copilot-session-insights.lock.yml | 574 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/org-health-report.lock.yml | 528 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/weekly-issue-summary.lock.yml | 528 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/copilot-pr-nlp-analysis.lock.yml | 549 | run: "# Create a virtual environment for proper package isolation (avoids --break-system-packages)\n# Use /tmp/g | CODE |
| MEDIUM | .github/workflows/copilot-pr-nlp-analysis.lock.yml | 563 | run: "mkdir -p /tmp/gh-aw/python/{data,charts,artifacts}\n# Create a virtual environment for proper package isol | CODE |
| MEDIUM | .github/workflows/format-and-commit.yml | 69 | # Create a unique branch name | COMMENT |
| MEDIUM | .github/workflows/agentics-maintenance.yml | 24 | # This file defines the generated agentic maintenance workflow for this repository. | COMMENT |
| MEDIUM | .github/workflows/cgo.yml | 1892 | # Create a test script using the MCP Go SDK | COMMENT |
| MEDIUM | actions/setup-cli/install.sh | 308 | # Create the installation directory if it doesn't exist | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 62 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 100 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 133 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 171 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 209 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 271 | # Create a temporary test socket and symlink | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 383 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/resolve_docker_socket_gid_test.sh | 420 | # Create a temporary test socket | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 92 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 119 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 145 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 172 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 199 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/start_mcp_gateway_test.sh | 226 | # Create a modified script that uses our fake home | COMMENT |
| MEDIUM | actions/setup/sh/convert_gateway_config_codex_test.sh | 22 | # Create the output directory the script writes to | COMMENT |
| MEDIUM | actions/setup/sh/setup_cache_memory_git.sh | 78 | # Create an empty initial commit as the trusted baseline for all branches | COMMENT |
| MEDIUM | actions/setup/sh/convert_gateway_config_codex.sh | 82 | # Create the TOML configuration | COMMENT |
| MEDIUM | pkg/cli/codemod_agent_session_test.go | 89 | create-agent-task: # Create a new agent task | CODE |
| MEDIUM | pkg/cli/codemod_agent_session_test.go | 108 | assert.Contains(t, result, "create-agent-session: # Create a new agent task") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .golangci.yml | 17 | - testifylint # Enforce testify best practices | CODE |
| MEDIUM | .github/workflows/artifacts-summary.lock.yml | 26 | # Generates a comprehensive summary of GitHub Actions artifacts usage across all workflows in the repository | COMMENT |
| MEDIUM | .github/workflows/agentic_commands.yml | 1 | # gh-aw-commands: {"payload_version":"v1","schema_version":"v1","compiler_version":"dev","commands":["*","ace","approach | COMMENT |
| MEDIUM | .github/workflows/agentic_commands.yml | 45 | # /smoke-deepseek-harness -> smoke-deepseek-harness [issue_comment,issues,pull_request,pull_request_comment] reactio | COMMENT |
| MEDIUM | .github/workflows/github-mcp-tools-report.lock.yml | 26 | # Generates a comprehensive report of available MCP server tools and their capabilities for GitHub integration | COMMENT |
| MEDIUM | .github/workflows/example-permissions-warning.lock.yml | 26 | # Example workflow demonstrating proper permission provisioning and security best practices | COMMENT |
| MEDIUM | .github/workflows/daily-vulnhunter-scan.lock.yml | 2226 | # (agents, harness, fix tooling) would just be dead weight in the sandbox. | COMMENT |
| MEDIUM⚡ | .github/workflows/daily-fact.lock.yml | 350 | GH_AW_PROMPT_CONTENT_0008: "{{#runtime-import? .github/shared-instructions.md}}\n\n### Daily Fact About gh-aw\ | CODE |
| MEDIUM | .github/workflows/pr-nitpick-reviewer.lock.yml | 26 | # ⚠️ DEPRECATED: Use PR Code Quality Reviewer (pr-code-quality-reviewer) instead. Provides detailed nitpicky code review | COMMENT |
| MEDIUM | .github/workflows/example-workflow-analyzer.lock.yml | 26 | # Analyzes workflow examples to identify patterns, best practices, and potential improvements | COMMENT |
| MEDIUM | .github/workflows/smoke-deepseek-harness.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"89c59c398940e0765c43ae995ff98e9f5c2f6c0c0f7fd2602dd9eaffa52 | COMMENT |
| MEDIUM | .github/workflows/smoke-deepseek-harness.lock.yml | 30 | # - shared/deepseek-harness.md | COMMENT |
| MEDIUM | .github/workflows/smoke-deepseek-harness.lock.yml | 349 | GH_AW_PROMPT_CONTENT_0005: "{{#runtime-import .github/workflows/shared/deepseek-harness.md}}\n" | CODE |
| MEDIUM | .github/workflows/smoke-deepseek-harness.lock.yml | 356 | GH_AW_PROMPT_CONTENT_0012: "{{#runtime-import .github/workflows/smoke-deepseek-harness.md}}\n" | CODE |
| MEDIUM | .github/workflows/commit-changes-analyzer.lock.yml | 26 | # Analyzes and provides a comprehensive developer-focused report of all changes in the repository since a specified comm | COMMENT |
| MEDIUM | .github/workflows/scout.lock.yml | 26 | # Performs deep research investigations using web search to gather and synthesize comprehensive information on any topic | COMMENT |
| MEDIUM | .github/workflows/pr-code-quality-reviewer.lock.yml | 26 | # Comprehensive code quality review covering bugs, performance, style, naming, and best practices — consolidates Grumpy | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 1121 | # Python is used for robust YAML-aware parsing instead of fragile AWK patterns. | COMMENT |
| MEDIUM | …b/workflows/daily-harness-experiment-proposer.lock.yml | 26 | # Converts compact existing workflow evidence (concluded experiment decisions/analyses, 14-day run/failure aggregates, a | COMMENT |
| MEDIUM | …b/workflows/daily-harness-experiment-proposer.lock.yml | 69 | # skip-if-match: is:open in:title "[harness-experiment-proposal]" # Skip-if-match processed as search check in pre-act | COMMENT |
| MEDIUM | …b/workflows/daily-harness-experiment-proposer.lock.yml | 305 | GH_AW_PROMPT_CONTENT_0007: "{{#runtime-import .github/workflows/daily-harness-experiment-proposer.md}}\n" | CODE |
| MEDIUM | …b/workflows/daily-harness-experiment-proposer.lock.yml | 542 | run: "set -euo pipefail\ncd \"$GITHUB_WORKSPACE\"\nSELF_BASENAME=\"daily-harness-experiment-proposer.md\"\n: > / | CODE |
| MEDIUM | .github/workflows/cgo.yml | 1417 | # Full scan on main branch to ensure comprehensive coverage | COMMENT |
| MEDIUM | actions/setup/sh/run_awf_with_startup_retries.sh | 6 | # before the engine harness writes its first marker line. | COMMENT |
| MEDIUM | actions/setup/sh/run_awf_with_startup_retries.sh | 10 | # GH_AW_AWF_HARNESS_MARKER Marker emitted by the engine harness, e.g. [claude-harness]. | COMMENT |
| MEDIUM | pkg/parser/schedule_parser_fuzz_test.go | 19 | // 6. UTC offset parsing is robust | COMMENT |
| MEDIUM | …flow/threat_detection_external_detector_config_test.go | 74 | // a template variable expression. Checking for '${{' is more robust than | COMMENT |
| MEDIUM | pkg/workflow/compiler_activation_job_test.go | 1132 | // TestInjectIfConditionAfterName verifies the robust line-oriented implementation of | COMMENT |
| MEDIUM | pkg/workflow/mcp_renderer.go | 284 | // Resolve the node binary to its absolute path so the command is robust | COMMENT |
| MEDIUM | pkg/workflow/sanitize_output_fuzz_test.go | 20 | // via Node.js. This allows us to fuzz test JavaScript code using Go's robust | COMMENT |
| MEDIUM | pkg/workflow/mentions_fuzz_test.go | 19 | // via Node.js. This allows us to fuzz test JavaScript code using Go's robust | COMMENT |
| MEDIUM | pkg/workflow/evals_steps.go | 536 | // Use json.Marshal for robust string quoting (handles all JSON escape sequences) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-compat.sh | 10 | # Usage: | COMMENT |
| LOW | scripts/check-stale-schema-binary.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/check-stale-lock-files.sh | 19 | # Usage: | COMMENT |
| LOW | scripts/delete-old-copilot-branches.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/update-install-script-hashes.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/bundle-wasm-docs.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/resolve-base-commit.sh | 23 | # Usage: | COMMENT |
| LOW | scripts/check-workflow-drift.sh | 10 | # Usage: | COMMENT |
| LOW | actions/setup/sh/resolve_docker_socket_gid.sh | 9 | # Usage: | COMMENT |
| LOW | pkg/constants/job_constants.go | 7 | // Example usage: | COMMENT |
| LOW | pkg/constants/job_constants.go | 27 | // Example usage: | COMMENT |
| LOW | pkg/constants/job_constants.go | 47 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 30 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 41 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 61 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 82 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 102 | // Example usage: | COMMENT |
| LOW | pkg/constants/constants.go | 122 | // Example usage: | COMMENT |
| LOW | pkg/constants/url_constants.go | 7 | // Example usage: | COMMENT |
| LOW | pkg/constants/url_constants.go | 17 | // Example usage: | COMMENT |
| LOW | pkg/constants/engine_constants.go | 9 | // Example usage: | COMMENT |
| LOW | pkg/constants/feature_constants.go | 7 | // Example usage: | COMMENT |
| LOW | pkg/constants/version_constants.go | 8 | // Example usage: | COMMENT |
| LOW | pkg/constants/version_constants.go | 28 | // Example usage: | COMMENT |
| LOW | pkg/workflow/config_helpers.go | 162 | // Example usage: | COMMENT |
| LOW | pkg/workflow/mcp_renderer.go | 35 | // Example usage: | COMMENT |
| LOW | pkg/workflow/update_entity_helpers.go | 420 | // Usage example: | COMMENT |
| LOW | pkg/workflow/mcp_environment.go | 42 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/check-safe-outputs-conformance.sh | 1311 | except Exception as e: | CODE |
| LOW | .github/drivers/copilot_sdk_driver_sample_python.py | 119 | except Exception as error: | CODE |
| LOW | .github/workflows/daily-function-namer.md | 93 | except Exception: | CODE |
| LOW | .github/workflows/dataflow-pr-discussion-dataset.md | 422 | except Exception as e: | CODE |
| LOW | .github/workflows/dataflow-pr-discussion-dataset.md | 446 | except Exception as e: | CODE |
| LOW | .github/workflows/daily-security-observability.md | 326 | except Exception: | CODE |
| MEDIUM | …ub/skills/github-discussion-query/query-discussions.py | 35 | print(f"Error running gh command: {e.stderr}", file=sys.stderr) | CODE |
| MEDIUM | …ub/skills/github-discussion-query/query-discussions.py | 38 | print("Error: gh CLI not found. Please install GitHub CLI.", file=sys.stderr) | CODE |
| MEDIUM | …ub/skills/github-discussion-query/query-discussions.py | 54 | print(f"Error applying jq filter: {e.stderr}", file=sys.stderr) | CODE |
| MEDIUM | …ub/skills/github-discussion-query/query-discussions.py | 57 | print("Error: jq not found. Please install jq.", file=sys.stderr) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scratchpad/adding-new-engines.md | 586 | gh aw secrets set MY_ENGINE_API_KEY --value "<your-api-key>" | CODE |
| HIGH | docs/src/content/docs/reference/web-search.md | 41 | gh aw secrets set TAVILY_API_KEY --value "<your-api-key>" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ub/skills/github-discussion-query/query-discussions.py | 97 | {"description": "Get answered discussions", "query": ".[] | select(.answer != null)"}, | CODE |
| HIGH | …ub/skills/github-discussion-query/query-discussions.py | 98 | {"description": "Get unanswered discussions", "query": ".[] | select(.answer == null) | {number, title, cate | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .serena/project.yml | 47 | # Same syntax as gitignore, so you can use * and **. | COMMENT |