2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-23

Last Push

24.6K

Stars

Ruby

Language

7.4M

Lines of Code

61.7K

Files

11.0K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 8341 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.2/100 · LOW

Are imports declared and package/API names verified? 2088 finding(s).

Agent Over-Engineering Ratio 4.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 5260 finding(s).

PR Review Velocity Impact 9.5/100 · LOW

Which changes need focused human review? 10978 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 85HIGH 198MEDIUM 1050LOW 9645

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 10978 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers4711 hits · 4961 pts

Severity	File	Line	Snippet	Context
LOW	tooling/ci/changed_files.rb	24	def get_files_removed_from_todo_files(changed_files)	CODE
LOW	tooling/ci/changed_files.rb	33	def filter_and_get_changed_files_in_mr(filter_pattern: //)	CODE
LOW	tooling/graphql/deprecated_docs/helper.rb	101	def render_name_and_description(object, owner: nil, level: 3)	CODE
LOW	tooling/graphql/deprecated_docs/helper.rb	209	def render_fields_with_arguments(fields, type_name, header_prefix)	CODE
LOW	tooling/graphql/deprecated_docs/helper.rb	441	def map_mutation_inputs_and_payloads(mapping)	CODE
LOW	tooling/lib/tooling/kubernetes_client.rb	12	def cleanup_namespaces_by_created_at(created_before:)	CODE
LOW	tooling/lib/tooling/kubernetes_client.rb	28	def delete_namespaces_by_exact_names(resource_names:, wait:)	CODE
LOW	tooling/lib/tooling/kubernetes_client.rb	41	def namespaces_created_before(created_before:)	CODE
LOW	tooling/lib/tooling/parallel_rspec_runner.rb	205	def tests_with_tagged_examples(tests)	CODE
LOW	tooling/lib/tooling/fast_quarantine.rb	43	def fetch_metadata_from_ancestors(example, attribute)	CODE
LOW	tooling/lib/tooling/test_map_packer.rb	26	def create_branch_from_segments(segments)	CODE
LOW	tooling/lib/tooling/predictive_tests/mapping_fetcher.rb	58	def fetch_frontend_fixtures_mappings(file_path)	CODE
LOW	…oling/lib/tooling/predictive_tests/metrics_exporter.rb	265	def backend_mapping_file_path(strategy)	CODE
LOW	…oling/lib/tooling/predictive_tests/metrics_exporter.rb	297	def generate_and_record_metrics(strategy, predicted_test_files, scoped_failed_files: failed_test_files)	CODE
LOW	…oling/lib/tooling/predictive_tests/metrics_exporter.rb	317	def fetch_crystalball_mappings(strategy)	CODE
LOW	…/lib/tooling/mappings/view_to_system_specs_mappings.rb	47	def find_system_specs_exact_match(view_file)	CODE
LOW	…/lib/tooling/mappings/view_to_system_specs_mappings.rb	53	def find_system_specs_parent_folder_match(view_file)	CODE
LOW	…ing/lib/tooling/mappings/graphql_base_type_mappings.rb	110	def filename_to_spec_filename(filename)	CODE
LOW	…ling/lib/tooling/mappings/partial_to_views_mappings.rb	87	def reconstruct_partial_filename(partial_name)	CODE
LOW	tooling/lib/tooling/helpers/predictive_tests_helper.rb	14	def folders_for_available_editions(base_folder)	CODE
LOW	tooling/danger/rubocop_helper.rb	58	def add_inline_disable_suggestions_for(filename)	CODE
LOW	tooling/danger/container_queries.rb	61	def get_files_with_unexpected_cqs(files, exclusion_list)	CODE
LOW	tooling/danger/container_queries.rb	65	def get_files_with_unexpected_mqs(files, exclusion_list)	CODE
LOW	tooling/danger/database_dictionary.rb	14	def database_dictionary_files(change_type:)	CODE
LOW	tooling/danger/index_removal.rb	57	def up_or_change_method_ranges(file_content)	CODE
LOW	tooling/danger/sidekiq_args.rb	54	def add_comment_for_matched_line(filename)	CODE
LOW	tooling/danger/analytics_instrumentation.rb	231	def report_missing_event_definition(event_name)	CODE
LOW	tooling/danger/database.rb	36	def find_migration_files_before(file_names, cutoff)	CODE
LOW	tooling/danger/database.rb	64	def check_migration_type_on_stable_branch(file_names)	CODE
LOW	tooling/danger/database.rb	78	def check_prevent_index_creation_disabled(file_names)	CODE
LOW	tooling/danger/database.rb	86	def check_prevent_column_addition_disabled(file_names)	CODE
LOW	…hed_background_migration_modification_checks_helper.rb	67	def find_class_or_module_names(batched_background_files)	CODE
LOW	…hed_background_migration_modification_checks_helper.rb	90	def find_unremovable_migrations(migration_class_names)	CODE
LOW	…hed_background_migration_modification_checks_helper.rb	117	def categorize_batched_background_migrations(migration_class_names)	CODE
LOW	…hed_background_migration_modification_checks_helper.rb	162	def find_finalized_migration_files(finalized_migrations)	CODE
LOW	…hed_background_migration_modification_checks_helper.rb	262	def display_unremovable_migrations(unremovable_migrations)	CODE
LOW	tooling/danger/data_deletion.rb	91	def added_deletion_line_numbers(filename)	CODE
LOW	app/uploaders/favicon_uploader.rb	17	def filename_for_different_format(filename, format)	CODE
LOW	app/uploaders/object_storage.rb	194	def generate_final_store_path(root_hash:)	CODE
LOW	app/uploaders/object_storage.rb	261	def workhorse_remote_upload_options(	CODE
LOW	app/uploaders/object_storage.rb	290	def prepare_pending_direct_upload(path)	CODE
LOW	app/mailers/devise_mailer.rb	29	def reset_password_instructions(record, token, opts = {})	CODE
LOW	app/mailers/notify.rb	238	def add_legacy_issue_model_headers(object)	CODE
LOW	app/mailers/application_mailer.rb	59	def render_with_default_locale(&block)	CODE
LOW	app/mailers/application_mailer.rb	96	def preferred_language_by_email(email)	CODE
LOW	app/mailers/emails/pipeline_schedules.rb	5	def pipeline_schedule_owner_unavailable_email(schedule, recipient)	CODE
LOW	app/mailers/emails/remote_mirrors.rb	5	def remote_mirror_update_failed_email(remote_mirror_id, recipient_id)	CODE
LOW⚡	app/mailers/emails/projects.rb	18	def project_was_exported_email(current_user, project)	CODE
LOW⚡	app/mailers/emails/projects.rb	26	def project_was_not_exported_email(current_user, project, errors)	CODE
LOW⚡	app/mailers/emails/projects.rb	35	def project_scheduled_for_deletion(recipient_id, project_id)	CODE
LOW⚡	app/mailers/emails/projects.rb	47	def repository_cleanup_success_email(project, user)	CODE
LOW⚡	app/mailers/emails/projects.rb	57	def repository_cleanup_failure_email(project, user, error)	CODE
LOW⚡	app/mailers/emails/projects.rb	65	def repository_rewrite_history_success_email(project, user)	CODE
LOW⚡	app/mailers/emails/projects.rb	74	def repository_rewrite_history_failure_email(project, user, error)	CODE
LOW⚡	app/mailers/emails/projects.rb	84	def pipeline_variables_migration_complete_email(user, group, counts)	CODE
LOW	app/mailers/emails/projects.rb	115	def prometheus_alert_fired_email(project, user, alert)	CODE
LOW	app/mailers/emails/projects.rb	127	def inactive_project_deletion_warning_email(project, user, deletion_date)	CODE
LOW	app/mailers/emails/merge_requests.rb	21	def new_mention_in_merge_request_email(recipient_id, merge_request_id, updated_by_user_id, reason = nil)	CODE
LOW	app/mailers/emails/merge_requests.rb	28	def push_to_merge_request_email(	CODE
LOW	app/mailers/emails/merge_requests.rb	52	def change_in_merge_request_draft_status_email(recipient_id, merge_request_id, updated_by_user_id, reason = nil)	CODE
4651 more matches not shown…

Over-Commented Block2293 hits · 2279 pts

Severity	File	Line	Snippet	Context
LOW	.labkit_logging_todo.yml	1	# LabKit Logging Field Standardization TODO	COMMENT
LOW	caproni-project.yaml	41	outgoing:	COMMENT
LOW	caproni-project.yaml	81	"^/srv/gitlab/(?<file>config/puma_ipv6)": "./$file"	COMMENT
LOW	caproni-project.yaml	101	# but that path (an emptyDir) only exists inside the pod, not on the	COMMENT
LOW	.gitlab-ci.yml	21	# always use `gitlab-org` runners, however	COMMENT
LOW	.gitlab-ci.yml	41	# it, so a job that defines its own `hooks` also needs these	COMMENT
LOW	tooling/ai_harness/config.yml	1	# Files within FORBIDDEN_PATTERNS that are intentionally committed as	COMMENT
LOW	tooling/ai_harness/config.yml	21	- .claude/skills/README.md	COMMENT
LOW	tooling/lib/tooling/parallel_rspec_runner.rb	61	end	COMMENT
LOW	…oling/lib/tooling/predictive_tests/metrics_exporter.rb	121		COMMENT
LOW	…oling/lib/tooling/predictive_tests/metrics_exporter.rb	261	# Mapping file path for specific strategy	COMMENT
LOW	…ing/lib/tooling/mappings/graphql_base_type_mappings.rb	61	#	COMMENT
LOW	…ling/lib/tooling/mappings/partial_to_views_mappings.rb	61	# Why do we need this method?	COMMENT
LOW	.gitlab/changelog_config.yml	41	# The tag format for gitlab-org/gitlab is vX.Y.Z(-rcX)-ee. The -ee prefix would	COMMENT
LOW	.gitlab/ci/frontend.gitlab-ci.yml	541	# comment is the primary signal for reviewers; the job itself also fails	COMMENT
LOW	.gitlab/ci/rails.gitlab-ci.yml	1741		COMMENT
LOW	.gitlab/ci/housekeeping.gitlab-ci.yml	1	# Scheduled gitlab-housekeeper keeps.	COMMENT
LOW	.gitlab/ci/docs.gitlab-ci.yml	221	# catches the fences up from merged master afterwards. So fence STALENESS is	COMMENT
LOW	.gitlab/ci/contract-testing-ruby.gitlab-ci.yml	1	##############################################################	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	1	include:	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	21	# Trigger: dedicated pipeline schedule on master with	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	41	# scans the manifest for drift, and writes the child-pipeline YAML.	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	61	# AI Catalog ItemConsumer that binds the "Agent Principles Distiller"	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	101	- artifact: tmp/ai-principles-child-pipeline.yml	COMMENT
LOW	.gitlab/ci/sync-principles.gitlab-ci.yml	121	# Runs share one resource group because they all force-push the same reconcile	COMMENT
LOW	.gitlab/ci/whats-new.gitlab-ci.yml	1	# Generates the release-week What's New YAML from all feature docs under	COMMENT
LOW	.gitlab/ci/rules.gitlab-ci.yml	1641		COMMENT
LOW	.gitlab/ci/rules.gitlab-ci.yml	3941	# dependency-patterns	COMMENT
LOW	…tlab/ci/per_test_coverage/jest_test_base.gitlab-ci.yml	1	# Base for the per-test-coverage jest child pipeline. A child pipeline can't	COMMENT
LOW	.gitlab/ci/frontend/test-base.gitlab-ci.yml	1	# Canonical .frontend-test-base, shared by the main frontend pipeline	COMMENT
LOW	.gitlab/ci/sync-principles/setup.gitlab-ci.yml	1	# Shared before_script for every gitlab-ai-principles-distiller job.	COMMENT
LOW	.gitlab/ci/sync-principles/child.gitlab-ci.yml	1	# Static template for the dynamic child pipeline generated by `ai-principles-pipeline-generate`	COMMENT
LOW	.gitlab/ci/sync-principles/child.gitlab-ci.yml	121	expire_in: 7d	COMMENT
LOW	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	21	# Prepare stage	COMMENT
LOW	.gitlab/ci/rails/shared.gitlab-ci.yml	301	extends:	COMMENT
LOW	.gitlab/ci/rails/shared.gitlab-ci.yml	321	#	COMMENT
LOW	.gitlab/caproni/setup.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.gitlab/caproni/setup.sh	221	error " Check: kubectl get pods -n $NAMESPACE -l $SIDEKIQ_DEPLOYMENT_LABEL" >&2	COMMENT
LOW	.gitlab/caproni/setup.sh	661	}	COMMENT
LOW	.gitlab/caproni/activate-license.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.gitlab/caproni/run-qa.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.gitlab/caproni/exec.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.gitlab/caproni/exec.sh	41	QUOTED_ARGS=$(printf '%q ' "$@")	COMMENT
LOW	.gitlab/duo/agent-config-candidate.yml	1	# Duo Agent Platform flow execution config: CANDIDATE.	COMMENT
LOW	.gitlab/duo/agent-config-candidate.yml	21		COMMENT
LOW	.gitlab/duo/agent-config-candidate.yml	141	# instead. That is a plain checkout with none of GDK's config,	COMMENT
LOW	.gitlab/duo/agent-config-candidate.yml	161	# that, with normal network access.	COMMENT
LOW	.gitlab/duo/agent-config-candidate.yml	221	# directly: component_needs_update? returns false for any symlink	COMMENT
LOW	.gitlab/duo/mr-review-instructions.yaml	1	---	COMMENT
LOW	.gitlab/duo/agent-config.yml	21		COMMENT
LOW	.gitlab/duo/agent-config.yml	61		COMMENT
LOW	.rubocop_todo/gitlab/json_safe_parse.yml	1	---	COMMENT
LOW	.rubocop_todo/gitlab/json_safe_parse.yml	21	#	COMMENT
LOW	.rubocop_todo/gitlab/json_safe_parse.yml	41	# - Submit your MR	COMMENT
LOW	app/uploaders/file_uploader.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/uploaders/content_type_whitelist.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/uploaders/personal_file_uploader.rb	41	store_dirs[object_store]	COMMENT
LOW	app/uploaders/personal_file_uploader.rb	61	# For example, consider the requested path /uploads/-/system/personal_snippet/172/ff4ad5c2e40b39ae57cda51577317d20/fil	COMMENT
LOW	app/uploaders/object_storage.rb	41	# the object storage, the extra copy/delete step of CarrierWave	COMMENT
LOW	…ploaders/design_management/design_v432x230_uploader.rb	1	# frozen_string_literal: true	COMMENT
2233 more matches not shown…

Fake / Example Data1975 hits · 2128 pts

Severity	File	Line	Snippet	Context
LOW⚡	app/mailers/notify.rb	105	# >> subject('Lorem ipsum')	COMMENT
LOW⚡	app/mailers/notify.rb	106	# => "Lorem ipsum"	COMMENT
LOW⚡	app/mailers/notify.rb	111	# >> subject('Lorem ipsum')	COMMENT
LOW⚡	app/mailers/notify.rb	112	# => "Ruby on Rails \| Lorem ipsum "	COMMENT
LOW⚡	app/mailers/notify.rb	115	# >> subject('Lorem ipsum', 'Dolor sit amet')	COMMENT
LOW⚡	app/mailers/notify.rb	115	# >> subject('Lorem ipsum', 'Dolor sit amet')	COMMENT
LOW⚡	app/mailers/notify.rb	116	# => "Lorem ipsum \| Dolor sit amet"	COMMENT
LOW⚡	app/mailers/notify.rb	116	# => "Lorem ipsum \| Dolor sit amet"	COMMENT
LOW⚡	app/mailers/application_mailer.rb	36	# >> subject('Lorem ipsum')	COMMENT
LOW⚡	app/mailers/application_mailer.rb	37	# => "Lorem ipsum"	COMMENT
LOW⚡	app/mailers/application_mailer.rb	42	# >> subject('Lorem ipsum')	COMMENT
LOW⚡	app/mailers/application_mailer.rb	43	# => "Ruby on Rails \| Lorem ipsum "	COMMENT
LOW⚡	app/mailers/application_mailer.rb	46	# >> subject('Lorem ipsum', 'Dolor sit amet')	COMMENT
LOW⚡	app/mailers/application_mailer.rb	46	# >> subject('Lorem ipsum', 'Dolor sit amet')	COMMENT
LOW⚡	app/mailers/application_mailer.rb	47	# => "Lorem ipsum \| Dolor sit amet"	COMMENT
LOW⚡	app/mailers/application_mailer.rb	47	# => "Lorem ipsum \| Dolor sit amet"	COMMENT
LOW	app/mailers/previews/devise_mailer_preview.rb	46	name: 'Jane Doe',	CODE
LOW	app/mailers/previews/notify_preview.rb	356	participant = IssueEmailParticipant.create!(issue: issue, email: 'user@example.com')	CODE
LOW	app/mailers/previews/notify_preview.rb	370	participant = IssueEmailParticipant.create!(issue: issue, email: 'user@example.com')	CODE
LOW	app/mailers/previews/repository_check_mailer_preview.rb	5	RepositoryCheckMailer.notify(3, 'admin@example.com').message	CODE
LOW	app/models/user.rb	1100	when 'placeholder'	CODE
LOW	app/models/concerns/has_user_type.rb	66	scope :without_placeholders, -> { where.not(user_type: 'placeholder') }	CODE
LOW	app/validators/json_schemas/ai_catalog/flow_v2.json	821	"placeholder": {	CODE
LOW	…/components/organization_users_token_select.stories.js	42	{ id: 2, name: 'Jane Doe', username: 'jane' },	CODE
LOW	…pts/feature_flags/components/environments_dropdown.vue	141	:aria-label="placeholder"	CODE
LOW	…pts/feature_flags/components/environments_dropdown.vue	142	:placeholder="placeholder"	CODE
LOW	…s/javascripts/content_editor/extensions/placeholder.js	41	name: 'placeholder',	CODE
LOW	app/assets/javascripts/admin/users/constants.js	68	{ value: 'placeholder', title: s__('UserMapping\|Placeholder') },	CODE
LOW	…nents/modals/remove_organization_user_modal.stories.js	71	username: 'John Doe',	CODE
LOW	…nalytics_dashboards/components/scope_picker.stories.js	72	const acme = mockTopLevelGroup({ id: 21, name: 'Acme Inc', path: 'acme', projectsCount: 1 });	CODE
LOW⚡	…scripts/integrations/edit/components/dynamic_field.vue	193	:placeholder="placeholder"	CODE
LOW⚡	…scripts/integrations/edit/components/dynamic_field.vue	202	:placeholder="placeholder"	CODE
LOW⚡	…scripts/integrations/edit/components/dynamic_field.vue	211	:placeholder="placeholder"	CODE
LOW	…ssets/javascripts/work_items/components/item_title.vue	68	:data-placeholder="placeholder"	CODE
LOW	app/assets/javascripts/lib/utils/forms.js	149	* <input type="text" placeholder="Email" value="foo@bar.com" name="user[contact_info][email]" id="user_contact_info_ema	COMMENT
LOW	app/assets/javascripts/lib/utils/forms.js	162	* value: 'foo@bar.com',	COMMENT
LOW	…tries/settings/project/components/expiration_input.vue	109	:placeholder="placeholder"	CODE
LOW	app/assets/javascripts/members/constants.js	176	placeholder: 'placeholder',	CODE
LOW	…ts/javascripts/members/placeholders/components/app.vue	106	...mapState('placeholder', ['pagination']),	CODE
LOW	…/vue_shared/components/page_navigation_menu.stories.js	27	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW	…/vue_shared/components/page_navigation_menu.stories.js	27	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW	…scripts/vue_shared/components/detail_layout.stories.js	77	<p>Esse commodo non aliquip cupidatat ut incididunt reprehenderit proident voluptate. Exercitation enim sunt occae	CODE
LOW	…ue_shared/components/registry/metadata_item.stories.js	97	text: "Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's	CODE
LOW	…avascripts/pipeline_wizard/components/widgets/text.vue	129	:placeholder="placeholder"	CODE
LOW	…vascripts/badges/components/supported_placeholders.vue	35	<code :key="placeholder">{{ placeholderText(placeholder) }}</code	CODE
LOW	spec/tooling/lib/tooling/find_changes_spec.rb	30	let(:project_token) { 'dummy-token' }	CODE
LOW	spec/tooling/lib/tooling/find_changes_spec.rb	79	expect(instance.__send__(:gitlab_token)).to eq('dummy-token')	CODE
LOW	spec/tooling/lib/tooling/find_changes_spec.rb	86	expect(instance.__send__(:gitlab_token)).to eq('dummy-token')	CODE
LOW	spec/tooling/lib/tooling/diff_stats_exporter_spec.rb	87	author_name: 'John Doe',	CODE
LOW	spec/frontend/ide/lib/languages/vue_spec.js	30	'<input :placeholder="placeholder">',	CODE
LOW	spec/frontend/sidebar/mock_data.js	900	name: 'John Doe',	CODE
LOW	…debar/components/assignees/sidebar_participant_spec.js	7	name: 'John Doe',	CODE
LOW	…abels_select_vue/dropdown_contents_create_view_spec.js	147	expect(titleInputEl.attributes('placeholder')).toBe('Label name');	CODE
LOW	…abels_select_vue/dropdown_contents_create_view_spec.js	174	expect(colorInputEl.attributes('placeholder')).toBe('Use custom color #FF0000');	CODE
LOW	…tions/shared/components/solo_owned_groups_list_spec.js	40	propsData: { userId: 1, username: 'John Doe' },	CODE
LOW⚡	spec/frontend/snippets/test_utils.js	9	const CONTENT_1 = 'Lorem ipsum dolar\nSit amit\n\nGoodbye!\n';	CODE
LOW⚡	spec/frontend/snippets/test_utils.js	10	const CONTENT_2 = 'Lorem ipsum dolar sit amit.\n\nGoodbye!\n';	CODE
LOW⚡	spec/frontend/snippets/test_utils.js	17	description: 'Lorem ipsum snippet desc',	CODE
LOW⚡	spec/frontend/snippets/test_utils.js	18	descriptionHtml: '<p>Lorem ipsum snippet desc</p>',	CODE
LOW	…frontend/snippets/components/snippet_blob_edit_spec.js	22	const TEST_CONTENT = 'Lorem ipsum dolar sit amet,\nconsectetur adipiscing elit.';	CODE
1915 more matches not shown…

Self-Referential Comments382 hits · 1170 pts

Severity	File	Line	Snippet	Context
MEDIUM	.gitlab/ci/overrides/gem-cache.rails-next.yml	1	# This file is included dynamically via rules for rails-next pipeline to override `files` array in cache key definition.	COMMENT
MEDIUM	.gitlab/ci/frontend/test-base.gitlab-ci.yml	5	# This file defines the base only. Whichever pipeline includes it must also	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/external.gitlab-ci.yml	1	# This file is loaded when omnibus tests are triggered from a different repository	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	803	# Create a marker file so exec.sh can tell setup has run.	COMMENT
MEDIUM	.gitlab/duo/agent-config-candidate.yml	5	# This file is inert. Gitlab::DuoAgentPlatform::Config reads it only for projects	COMMENT
MEDIUM	.gitlab/duo/agent-config-candidate.yml	162	# Creating the directory is enough. test_env.rb creates the matching	COMMENT
MEDIUM	.gitlab/duo/mr-review-instructions.yaml	16	# This file defines custom review criteria that will be applied to specific files	COMMENT
MEDIUM	app/uploaders/packages/gcs_signed_url_metadata.rb	3	# This module is used to augment the GCS signed URL with metadata that is used for auditing purposes.	COMMENT
MEDIUM	app/models/wiki.rb	602	# This method is invoked when:	COMMENT
MEDIUM	app/models/project.rb	1884	# This method is overridden in EE::Project model	COMMENT
MEDIUM	app/models/project.rb	4124	# This method is here because of support for legacy container repository	COMMENT
MEDIUM	app/models/internal_id.rb	142	# Create a record in internal_ids if one does not yet exist	COMMENT
MEDIUM	app/models/merge_request_diff_file.rb	88	# This method is meant to be used during Project Export.	COMMENT
MEDIUM	app/models/member.rb	872	# This method is overridden in the test environment, see stubbed_member.rb	COMMENT
MEDIUM	app/models/merge_request_diff_commit.rb	130	# This method is defined here and not on MergeRequest, otherwise the SHA	COMMENT
MEDIUM	app/models/ability.rb	131	# This method is something of a band-aid over the problem. The problem is	COMMENT
MEDIUM	app/models/project_import_state.rb	173	# This method is coupled to the repository mirror domain.	COMMENT
MEDIUM	app/models/user.rb	1264	# This method is overridden in JiHu.	COMMENT
MEDIUM	app/models/organizations/organization_setting.rb	34	# This method is based off the ApplicationSetting method with the same name.	COMMENT
MEDIUM	app/models/organizations/organization_setting.rb	35	# This method is an optimization to perform visibility validation only when some fields have changed.	COMMENT
MEDIUM	app/models/cells/transaction_record.rb	4	# This class is a fake ActiveRecord::Base which implements the interface	COMMENT
MEDIUM	app/models/diff_viewer/base.rb	85	# This method is used on the server side to check whether we can attempt to	COMMENT
MEDIUM	app/models/ci/processable.rb	4	# This class is a collection of common features between Ci::Build and Ci::Bridge.	COMMENT
MEDIUM	app/models/ci/pipeline.rb	287	# Create a separate worker for each new operation	COMMENT
MEDIUM	app/models/ci/pipeline.rb	1728	# This method is similar to #modified_paths, but the results	COMMENT
MEDIUM	app/models/ci/variable_value.rb	3	# This class provides a hidden variable value computation	COMMENT
MEDIUM	app/models/ci/namespace_settings.rb	5	# This module is intended to encapsulate CI/CD settings-specific logic	COMMENT
MEDIUM	app/models/ci/build.rb	890	# This method is similar to #artifacts? but it includes the artifacts	COMMENT
MEDIUM	app/models/ci/pipeline_artifact.rb	3	# This class is being used to persist additional artifacts after a pipeline completes, which is a great place to cache a	COMMENT
MEDIUM	app/models/ci/catalog/listing.rb	5	# This class is the SSoT to displaying the list of resources in the CI/CD Catalog.	COMMENT
MEDIUM	app/models/ci/catalog/resource.rb	5	# This class represents a CI/CD Catalog resource.	COMMENT
MEDIUM	app/models/ci/catalog/components_project.rb	5	# This class represents a project that contains one or more CI/CD components.	COMMENT
MEDIUM	app/models/ci/catalog/resources/component.rb	6	# This class represents a CI/CD Catalog resource component.	COMMENT
MEDIUM	app/models/ci/catalog/resources/version.rb	6	# This class represents a CI/CD Catalog resource version.	COMMENT
MEDIUM	app/models/ci/pipeline_creation/requests.rb	3	# This class represents the metadata for the pipeline creation process up until it succeeds and is persisted or fails	COMMENT
MEDIUM	app/models/namespace/traversal_hierarchy.rb	7	# This class provides operations to be performed on the hierarchy itself,	COMMENT
MEDIUM	…models/preloaders/environments/deployment_preloader.rb	5	# This class is to batch-load deployments of multiple environments.	COMMENT
MEDIUM	app/models/namespaces/user_namespace.rb	7	# This class is a placeholder for STI. But we also want to ensure	COMMENT
MEDIUM	app/models/namespaces/traversal/cached.rb	55	# This method implements an OR based cache lookup using COALESCE, similar what you would do in Ruby:	COMMENT
MEDIUM	app/models/integrations/jira.rb	347	# This method is a no-op, because currently Integrations::Jira does not	COMMENT
MEDIUM	app/models/blob_viewer/base.rb	78	# This method is used on the server side to check whether we can attempt to	COMMENT
MEDIUM	app/models/members/group_member.rb	33	# This method is a stopgap in preparation for https://gitlab.com/gitlab-org/gitlab/-/issues/364087	COMMENT
MEDIUM	app/models/members/project_namespace_member.rb	4	# This file is a part of the Consolidate Group and Project member management epic,	COMMENT
MEDIUM	app/models/members/project_member.rb	72	# This method is overridden in the test environment, see stubbed_member.rb	COMMENT
MEDIUM	app/models/merge_request/commits_metadata.rb	140	# This method is defined here and not on MergeRequest, otherwise the SHA	COMMENT
MEDIUM	app/models/concerns/update_namespace_statistics.rb	3	# This module provides helpers for updating `NamespaceStatistics` with `after_save` and	COMMENT
MEDIUM	app/models/concerns/admin_changed_password_notifier.rb	4	# This module is responsible for triggering the `Password changed by administrator` emails	COMMENT
MEDIUM⚡	app/models/concerns/fast_destroy_all.rb	4	# This module is for replacing `dependent: :destroy` and `before_destroy` hooks.	COMMENT
MEDIUM⚡	app/models/concerns/fast_destroy_all.rb	13	# This module defines a format to use `delete_all` and delete associated external data.	COMMENT
MEDIUM	app/models/concerns/fast_destroy_all.rb	78	# This method is to be defined on models which have fast destroyable models as children,	COMMENT
MEDIUM	app/models/concerns/relative_positioning.rb	28	# The following class methods may be overridden to customize positioning behaviour,	COMMENT
MEDIUM	app/models/concerns/relative_positioning.rb	241	# This method is used during rebalancing - override it to customise the update	COMMENT
MEDIUM	app/models/concerns/relative_positioning.rb	254	# This method is used to exclude the current self (or another object)	COMMENT
MEDIUM	app/models/concerns/deprecated_assignee.rb	3	# This module handles backward compatibility for import/export of merge requests after	COMMENT
MEDIUM	app/models/concerns/legacy_bulk_insert.rb	10	# This method is deprecated, and you should use the BulkInsertSafe module	COMMENT
MEDIUM	app/models/concerns/reactive_caching.rb	69	# This method is used for debugging purposes and should not be used otherwise.	COMMENT
MEDIUM	app/models/concerns/mentionable.rb	132	# Create a cross-reference Note for each GFM reference to another Mentionable found in the +mentionable_attrs+.	COMMENT
MEDIUM	app/models/concerns/from_set_operator.rb	4	# Define a high level method to more easily work with the SQL set operations	COMMENT
MEDIUM	app/models/concerns/update_project_statistics.rb	3	# This module is providing helpers for updating `ProjectStatistics` with `after_save` and `before_destroy` hooks.	COMMENT
MEDIUM	app/models/concerns/ci/contextable.rb	5	# This module implements methods that provide context in form of	COMMENT
322 more matches not shown…

Decorative Section Separators351 hits · 1048 pts

Severity	File	Line	Snippet	Context
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	12	# =================================	COMMENT
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	14	# =================================	COMMENT
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	92	# =================================	COMMENT
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	94	# =================================	COMMENT
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	107	# =================================	COMMENT
MEDIUM	.gitlab/ci/caching.gitlab-ci.yml	109	# =================================	COMMENT
MEDIUM	.gitlab/ci/qa.gitlab-ci.yml	97	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa.gitlab-ci.yml	99	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa.gitlab-ci.yml	160	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa.gitlab-ci.yml	162	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/global.gitlab-ci.yml	430	# ==================	COMMENT
MEDIUM	.gitlab/ci/global.gitlab-ci.yml	432	# ==================	COMMENT
MEDIUM	.gitlab/ci/qa-common/main.gitlab-ci.yml	41	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa-common/main.gitlab-ci.yml	43	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa-common/main.gitlab-ci.yml	218	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa-common/main.gitlab-ci.yml	220	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	30	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	32	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	51	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	53	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	121	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/qa-common/rules.gitlab-ci.yml	123	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/performance-on-cng/main.gitlab-ci.yml	18	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/performance-on-cng/main.gitlab-ci.yml	20	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/performance-on-cng/main.gitlab-ci.yml	54	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/performance-on-cng/main.gitlab-ci.yml	56	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	20	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	22	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	28	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	30	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	32	# ------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	34	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	56	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	58	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	402	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	404	# ------------------------------------------	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	481	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-omnibus/main.gitlab-ci.yml	483	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	112	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	114	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	164	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	166	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	329	# ==========================================	COMMENT
MEDIUM	.gitlab/ci/test-on-cng/main.gitlab-ci.yml	331	# ==========================================	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	225	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	227	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	231	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	238	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	762	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	764	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	774	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	.gitlab/caproni/setup.sh	778	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	77	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	119	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	122	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	175	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	177	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	274	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	276	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.gitlab/caproni/setup.sh	292	# ---------------------------------------------------------------------------	COMMENT
291 more matches not shown…

Hallucination Indicators85 hits · 1025 pts

Severity	File	Line	Snippet	Context
CRITICAL	app/models/shard.rb	20	in_config = Gitlab.config.repositories.storages.keys.map(&:to_s)	CODE
CRITICAL	app/assets/javascripts/releases/util.js	116	const releases = response.data.project.releases.nodes.map(convertGraphQLRelease);	CODE
CRITICAL	…ts/javascripts/clusters/agents/graphql/cache_update.js	15	draftData.project.clusterAgent.tokens.nodes.unshift(token);	CODE
CRITICAL	…ts/javascripts/clusters/agents/graphql/cache_update.js	37	draftData.project.clusterAgent.tokens.nodes.filter(({ id }) => id !== revokeToken.id);	CODE
CRITICAL	…/javascripts/filtered_search/droplab/plugins/filter.js	12	var value = e.detail.hook.trigger.value.toLowerCase();	CODE
CRITICAL	app/assets/javascripts/notes/components/notes_app.vue	138	notes: data.note.discussion.notes.nodes.map((note) => ({	CODE
CRITICAL	app/services/branch_rules/base_service.rb	207	self.class.name.deconstantize.demodulize.singularize.underscore.tr('_', ' ')	CODE
CRITICAL	app/services/branches/delete_merged_service.rb	28	source_names = project.origin_merge_requests.opened.without_order.distinct.pluck(:source_branch)	CODE
CRITICAL	app/services/branches/delete_merged_service.rb	29	target_names = project.merge_requests.opened.without_order.distinct.pluck(:target_branch)	CODE
CRITICAL	spec/frontend/releases/components/app_index_spec.js	106	singleRelease.data.project.releases.nodes.splice(	CODE
CRITICAL	…/frontend/content_editor/extensions/copy_paste_spec.js	330	const htmlCall = event.clipboardData.setData.mock.calls.find(	CODE
CRITICAL	spec/frontend/achievements/achievements_app_spec.js	192	...getGroupAchievementsResponse.data.group.achievements.nodes.slice(1),	CODE
CRITICAL	…nd/easter_eggs/contribution_music/vue_in_place_spec.js	81	HTMLElement.prototype.animate.mock.calls.filter(	CODE
CRITICAL	spec/frontend/work_items/mock_data.js	4659	nodes: availableObjectivesResponse.data.namespace.workItems.nodes.filter(	CODE
CRITICAL	spec/frontend/work_items/mock_data.js	6327	nodes: groupEpicsWithMilestonesQueryResponse.data.namespace.workItems.nodes.map(	CODE
CRITICAL	…frontend/work_items/components/work_item_notes_spec.js	60	mockMoreWorkItemNotesResponse.data.namespace.workItem.widgets.find(	CODE
CRITICAL⚡	…k_items/components/work_item_change_type_modal_spec.js	38	const issueTypeId = namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL⚡	…k_items/components/work_item_change_type_modal_spec.js	41	const taskTypeId = namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL⚡	…k_items/components/work_item_change_type_modal_spec.js	44	const epicTypeId = namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL	…k_items/components/work_item_change_type_modal_spec.js	313	namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL	…k_items/components/work_item_metadata_provider_spec.js	134	mockWorkItemTypesConfigurationResponse.data.namespace.workItemTypes.nodes.map(	CODE
CRITICAL	…rontend/work_items/components/work_item_detail_spec.js	355	const { milestone } = workItemByIidQueryResponse.data.namespace.workItem.widgets.find(	CODE
CRITICAL	…nents/shared/work_item_sidebar_dropdown_widget_spec.js	150	const listItems = groupIterationsResponse.data.namespace.attributes.nodes.map((item) => ({	CODE
CRITICAL	…omponents/work_item_links/work_item_links_form_spec.js	39	return namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL	…omponents/work_item_links/work_item_links_form_spec.js	532	availableWorkItemsResponse.data.namespace.workItems.nodes.slice(0, 2),	CODE
CRITICAL	spec/frontend/work_items/graphql/resolvers_spec.js	49	return queryResult.data.namespace.workItem.widgets.find(({ type }) => type === widgetName);	CODE
CRITICAL	…ems/list/components/work_item_bulk_edit_labels_spec.js	24	labels.data.namespace.labels.nodes.push({	CODE
CRITICAL	spec/frontend/todos/components/todos_app_spec.js	463	const allTodoIds = todosResponse.data.currentUser.todos.nodes.map((todo) => todo.id);	CODE
CRITICAL	…/components/filtered_search_tokens/group_token_spec.js	174	todosGroupsResponse.data.currentUser.groups.nodes.forEach((group) => {	CODE
CRITICAL	…tend/vue_shared/components/list_selector/index_spec.js	374	const deployKeysItems = DEPLOY_KEYS_RESPONSE_MOCK.data.project.availableDeployKeys.nodes.map(	CODE
CRITICAL	…ec/frontend/issues/show/components/description_spec.js	330	namespaceWorkItemTypesQueryResponse.data.namespace.workItemTypes.nodes.find(	CODE
CRITICAL	spec/features/dashboard/homepage/homepage_e2e_spec.rb	47	page.driver.browser.manage.window.resize_to(375, 667)	CODE
CRITICAL	spec/features/dashboard/homepage/homepage_e2e_spec.rb	52	page.driver.browser.manage.window.resize_to(1920, 1080)	CODE
CRITICAL	spec/features/boards/boards_spec.rb	128	page.driver.browser.manage.window.resize_to(400, 400)	CODE
CRITICAL	spec/models/clusters/agent_token_spec.rb	150	"o:#{agent_token.agent.project.organization.id.to_s(36)}\n" \	CODE
CRITICAL	…les/features/rich_text_editor/media_shared_examples.rb	30	page.driver.browser.manage.window.resize_to(1280, 720)	CODE
CRITICAL	…services/namespace_package_settings_shared_examples.rb	8	.to change { namespace.package_settings.reset.attributes.symbolize_keys.slice(*from.keys) }	CODE
CRITICAL	…i/filter/references/work_item_reference_filter_spec.rb	104	expect(doc.children.first.children.first.attr('data-original')).to eq inner_html	CODE
CRITICAL	…anzai/filter/references/issue_reference_filter_spec.rb	144	expect(doc.children.first.children.first.attr('data-original')).to eq inner_html	CODE
CRITICAL	…i/filter/references/wiki_page_reference_filter_spec.rb	92	expect(doc.children.first.children.first.attr('data-original')).to eq inner_html	CODE
CRITICAL	spec/docs_screenshots/wiki_docs.rb	14	page.driver.browser.manage.window.resize_to(1366, 1024)	CODE
CRITICAL	spec/docs_screenshots/container_registry_docs.rb	13	page.driver.browser.manage.window.resize_to(1366, 1024)	CODE
CRITICAL	qa/qa/page/admin/settings/component/performance_bar.rb	16	Capybara.current_session.driver.browser.manage.add_cookie(name: 'perf_bar_enabled', value: 'true')	CODE
CRITICAL	qa/qa/runtime/browser.rb	398	Capybara.current_session.driver.browser.manage.add_cookie(	CODE
CRITICAL	qa/qa/runtime/allure_report.rb	82	source: Capybara.current_session.driver.browser.logs.get(:browser).map(&:to_s).join("\n\n"),	CODE
CRITICAL	…ation_security/api_security_testing/troubleshooting.md	393	## `Index was outside the bounds of the array. at Peach.Web.Runner.Services.RunnerOptions.GetHeaders()` {#index-was-o	COMMENT
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	412	at Peach.Web.Runner.Services.RunnerOptions.GetHeaders() in /builds/gitlab-org/security-products/analyzers/api-fuzzing	CODE
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	413	at Peach.Web.Runner.Services.RunnerService.Start(Job job, IRunnerOptions options) in /builds/gitlab-org/security-prod	CODE
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	414	at Peach.Web.Core.Services.WebRunnerMachine.Run(IRunnerOptions runnerOptions, CancellationToken token) in /builds/git	CODE
CRITICAL	…er/application_security/api_fuzzing/troubleshooting.md	430	## `Index was outside the bounds of the array at Peach.Web.Runner.Services.RunnerOptions.GetHeaders()` {#index-was-outsi	COMMENT
CRITICAL⚡	…er/application_security/api_fuzzing/troubleshooting.md	449	at Peach.Web.Runner.Services.RunnerOptions.GetHeaders() in /builds/gitlab-org/security-products/analyzers/api-fuzzing	CODE
CRITICAL⚡	…er/application_security/api_fuzzing/troubleshooting.md	450	at Peach.Web.Runner.Services.RunnerService.Start(Job job, IRunnerOptions options) in /builds/gitlab-org/security-prod	CODE
CRITICAL⚡	…er/application_security/api_fuzzing/troubleshooting.md	451	at Peach.Web.Core.Services.WebRunnerMachine.Run(IRunnerOptions runnerOptions, CancellationToken token) in /builds/git	CODE
CRITICAL	…ation_security/api_security_testing/troubleshooting.md	396	## `Index was outside the bounds of the array. at Peach.Web.Runner.Services.RunnerOptions.GetHeaders()` {#index-was-o	COMMENT
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	415	at Peach.Web.Runner.Services.RunnerOptions.GetHeaders() in /builds/gitlab-org/security-products/analyzers/api-fuzzing	CODE
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	416	at Peach.Web.Runner.Services.RunnerService.Start(Job job, IRunnerOptions options) in /builds/gitlab-org/security-prod	CODE
CRITICAL⚡	…ation_security/api_security_testing/troubleshooting.md	417	at Peach.Web.Core.Services.WebRunnerMachine.Run(IRunnerOptions runnerOptions, CancellationToken token) in /builds/git	CODE
CRITICAL	…er/application_security/api_fuzzing/troubleshooting.md	433	## `Index was outside the bounds of the array at Peach.Web.Runner.Services.RunnerOptions.GetHeaders()` {#index-was-outsi	COMMENT
CRITICAL⚡	…er/application_security/api_fuzzing/troubleshooting.md	452	at Peach.Web.Runner.Services.RunnerOptions.GetHeaders() in /builds/gitlab-org/security-products/analyzers/api-fuzzing	CODE
CRITICAL⚡	…er/application_security/api_fuzzing/troubleshooting.md	453	at Peach.Web.Runner.Services.RunnerService.Start(Job job, IRunnerOptions options) in /builds/gitlab-org/security-prod	CODE
25 more matches not shown…

Modern AI Meta-Vocabulary216 hits · 586 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ling/lib/tooling/predictive_tests/duo_test_selector.rb	265	@logger.warn "⚠️ Duo predicted non-existent directory: #{dir} — possible hallucination"	CODE
MEDIUM	…ling/lib/tooling/predictive_tests/duo_test_selector.rb	288	@logger.warn "⚠️ Duo predicted non-existent file: #{file} — possible hallucination"	CODE
MEDIUM	.gitlab/ci/graphql.gitlab-ci.yml	47	# Regression guard for the security-orchestration load-order cycle	COMMENT
MEDIUM	app/assets/stylesheets/print.scss	155	// (Vue Router) the blob renders inside the tree page's scaffold, where	COMMENT
MEDIUM⚡	…/tools/work_items/get_saved_view_work_items_service.rb	50	# Not used directly since we orchestrate two tools	COMMENT
MEDIUM	app/services/bulk_imports/file_download_service.rb	3	# File Download Service orchestrates remote file download into tmp directory according to configuration context.	COMMENT
MEDIUM	…rvices/bulk_imports/batched_relation_export_service.rb	116	# rubocop:disable CodeReuse/ActiveRecord -- Export orchestration pages through relations and persists batch records	COMMENT
MEDIUM	spec/support/helpers/feature_flag_toggle_helpers.rb	13	# Temporary scaffold for in-progress rollouts; remove the wrapper when the	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-6-released.md	113	### Sélection de modèle pour GitLab Duo Agentic Chat dans VS Code et les IDE JetBrains {#model-selection-for-gitlab-duo-	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-6-released.md	150	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-3-released.md	269	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-9-released.md	167	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-10-released.md	218	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-5-released.md	107	### GPT-5 est désormais disponible comme option de modèle pour GitLab Duo Agentic Chat {#gpt-5-now-available-as-a-model-	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-5-released.md	167	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-5-released.md	300	### Nouvelles fonctionnalités de gestion des vulnérabilités dans GitLab Duo Agentic Chat {#new-vulnerability-management-	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-2-released.md	215	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-7-released.md	52	### Sélection de modèle distincte pour Agentic Chat et les agents {#separate-model-selection-for-agentic-chat-and-agents	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-7-released.md	202	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-7-released.md	220	### Prise en charge de `AGENTS.md` avec GitLab Duo Chat (Agentic) dans les IDE {#support-for-agentsmd-with-gitlab-duo-ch	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-4-released.md	155	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-8-released.md	113	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-11-released.md	193	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/18/gitlab-18-11-released.md	195	### Modèle par défaut de GitLab Duo Agentic Chat mis à jour de Haiku 4.5 à Sonnet 4.6 {#default-model-for-gitlab-duo-age	COMMENT
MEDIUM	doc-locale/fr-fr/releases/17/gitlab-17-10-released.md	227	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/17/gitlab-17-8-released.md	119	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/17/gitlab-17-9-released.md	265	## Agentic Core {#agentic-core}	COMMENT
MEDIUM	doc-locale/fr-fr/releases/17/gitlab-17-11-released.md	275	## Agentic Core {#agentic-core}	COMMENT
MEDIUM⚡	…s/19/gitlab-19-1-released/model-selection-allowlist.md	6	documentation_link: "../../../user/duo_agent_platform/model_selection/#select-a-model-for-agentic-chat"	CODE
MEDIUM⚡	…s/19/gitlab-19-1-released/model-selection-allowlist.md	14	- Sur GitLab.com, en tant que [Propriétaire du groupe principal](../../../user/duo_agent_platform/model_selection.md#sel	CODE
MEDIUM⚡	…s/19/gitlab-19-1-released/model-selection-allowlist.md	15	- Sur GitLab Self-Managed, en tant qu'[administrateur de l'instance](../../../administration/gitlab_duo/model_selection.	CODE
MEDIUM	…c-locale/fr-fr/user/gitlab_duo_chat/troubleshooting.md	303	## Problèmes spécifiques à GitLab Duo Agentic Chat {#issues-specific-to-gitlab-duo-agentic-chat}	COMMENT
MEDIUM	doc-locale/fr-fr/user/gitlab_duo_chat/agentic_chat.md	99	- Vous pouvez fournir du [contexte](../duo_agent_platform/context.md#gitlab-duo-agentic-chat) supplémentaire pour vot	CODE
MEDIUM	doc-locale/fr-fr/user/gitlab_duo_chat/agentic_chat.md	120	- [Flow Developer](../duo_agent_platform/flows/foundational_flows/developer.md#use-the-flow-in-agentic-chat)	CODE
MEDIUM	doc-locale/fr-fr/user/gitlab_duo_chat/agentic_chat.md	531	- [Article de blog : GitLab Duo Chat fait peau neuve : place à l'IA agentique](https://about.gitlab.com/blog/gitlab-duo-	CODE
MEDIUM	…ocale/fr-fr/user/duo_agent_platform/sessions/_index.md	45	## Sessions GitLab Duo Agentic Chat {#gitlab-duo-agentic-chat-sessions}	COMMENT
MEDIUM	…o_agent_platform/flows/claude-edit-v1-flow-registry.md	1184	### Flow multi-agent avec superviseur {#multi-agent-supervisor-flow}	COMMENT
MEDIUM	…tform/flows/foundational_flows/software_development.md	70	- Vous pouvez fournir du [contexte](../../context.md#gitlab-duo-agentic-chat) supplémentaire pour votre conversation	CODE
MEDIUM	doc-locale/fr-fr/user/gitlab_duo/model_selection.md	74	### GitLab Duo Non-Agentic Chat {#gitlab-duo-non-agentic-chat}	COMMENT
MEDIUM	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	298	Si vous souhaitez demander à Chat quoi ajuster, faites-le dans l'IDE dans le fichier `setup.py`, plutôt que dans l'in	CODE
MEDIUM	doc-locale/fr-fr/user/clusters/agent/ci_cd_workflow.md	226	### Environnements avec des connexions à la fois basées sur des certificats et basées sur des agents {#environments-with	COMMENT
MEDIUM	…ser/application_security/dependency_scanning/_index.md	58	### Résolution agentique des changements majeurs {#agentic-breaking-change-resolution}	COMMENT
MEDIUM	…endency_scanning/agentic-breaking-change-resolution.md	46	## Activer la résolution agentique des modifications incompatibles {#enable-agentic-breaking-change-resolution}	COMMENT
MEDIUM	…rity/remediate/dependency_scanning_auto_remediation.md	30	- Résolution agentique des changements cassants : lorsqu'une mise à jour de version provoque un échec de pipeline en rai	CODE
MEDIUM	…rity/remediate/dependency_scanning_auto_remediation.md	51	- Politique de mise à jour : GitLab propose uniquement des mises à jour de versions patch et mineures, sauf si la [résol	CODE
MEDIUM	…rity/remediate/dependency_scanning_auto_remediation.md	63	## Activer la résolution agentique des changements cassants {#enable-agentic-breaking-change-resolution}	COMMENT
MEDIUM	…-locale/fr-fr/user/application_security/sast/_index.md	73	### Résolution agentique des vulnérabilités SAST {#agentic-sast-vulnerability-resolution}	COMMENT
MEDIUM	…ty/vulnerabilities/agentic_vulnerability_resolution.md	34	Pour une démonstration interactive, consultez [Agentic SAST Vulnerability Resolution](https://gitlab.navattic.com/agenti	CODE
MEDIUM	…-locale/fr-fr/user/project/merge_requests/developer.md	95	### Utiliser le flow dans Agentic Chat {#use-the-flow-in-agentic-chat}	COMMENT
MEDIUM	…-locale/fr-fr/user/project/merge_requests/developer.md	209	### Utiliser le flow Developer dans Agentic Chat {#use-the-developer-flow-in-agentic-chat}	COMMENT
MEDIUM	…_extensions/jetbrains_ide/jetbrains_troubleshooting.md	58	# or keep it minimal for agentic AI in IDEs	COMMENT
MEDIUM	…ditor_extensions/visual_studio_code/troubleshooting.md	319	# or keep it minimal for agentic AI in IDEs	COMMENT
MEDIUM	…ministration/gitlab_duo_self_hosted/troubleshooting.md	475	## La réponse du Chat agentique ne s'affiche pas dans l'interface utilisateur {#response-from-agentic-chat-does-not-disp	COMMENT
MEDIUM	…lab_duo_self_hosted/supported_llm_serving_platforms.md	377	#### Garde-fous Bedrock {#bedrock-guardrails}	COMMENT
MEDIUM	…lab_duo_self_hosted/supported_llm_serving_platforms.md	414	Pour plus d'informations, consultez [Amazon Bedrock Guardrails](https://docs.aws.amazon.com/bedrock/latest/userguide/gua	CODE
MEDIUM	doc-locale/ja-jp/releases/18/gitlab-18-9-released.md	168	## エージェントコア {#agentic-core}	COMMENT
MEDIUM	doc-locale/ja-jp/releases/17/gitlab-17-10-released.md	226	## エージェント型コア {#agentic-core}	COMMENT
MEDIUM	doc-locale/ja-jp/releases/17/gitlab-17-8-released.md	117	## エージェント型コア {#agentic-core}	COMMENT
MEDIUM	doc-locale/ja-jp/releases/17/gitlab-17-9-released.md	264	## エージェント型コア {#agentic-core}	COMMENT
MEDIUM	doc-locale/ja-jp/releases/17/gitlab-17-11-released.md	271	## エージェント型コア {#agentic-core}	COMMENT
156 more matches not shown…

Cross-File Repetition104 hits · 520 pts

Severity	File	Line	Snippet	Context
HIGH	doc-locale/fr-fr/ci/migration/teamcity.md	0	npm install jest-teamcity --no-save npm run test -- --reporters=jest-teamcity	STRING
HIGH	doc-locale/ja-jp/ci/migration/teamcity.md	0	npm install jest-teamcity --no-save npm run test -- --reporters=jest-teamcity	STRING
HIGH	doc-locale/ko-kr/ci/migration/teamcity.md	0	npm install jest-teamcity --no-save npm run test -- --reporters=jest-teamcity	STRING
HIGH	doc/ci/migration/teamcity.md	0	npm install jest-teamcity --no-save npm run test -- --reporters=jest-teamcity	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize an article with validation. args: name (str): the name/title of the book price (float): the price of the book	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize an article with validation. args: name (str): the name/title of the book price (float): the price of the book	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize an article with validation. args: name (str): the name/title of the book price (float): the price of the book	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize an article with validation. args: name (str): the name/title of the book price (float): the price of the book	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the name with validation. args: name (str): the name/title of the book raises: valueerror: if name is empty or too l	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the name with validation. args: name (str): the name/title of the book raises: valueerror: if name is empty or too l	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the name with validation. args: name (str): the name/title of the book raises: valueerror: if name is empty or too l	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the name with validation. args: name (str): the name/title of the book raises: valueerror: if name is empty or too l	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the price with validation. args: price (float): the price of the book raises: valueerror: if price is negative or no	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the price with validation. args: price (float): the price of the book raises: valueerror: if price is negative or no	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the price with validation. args: price (float): the price of the book raises: valueerror: if price is negative or no	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the price with validation. args: price (float): the price of the book raises: valueerror: if price is negative or no	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the quantity with validation. args: quantity (int): the quantity in stock raises: valueerror: if quantity is negativ	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the quantity with validation. args: quantity (int): the quantity in stock raises: valueerror: if quantity is negativ	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the quantity with validation. args: quantity (int): the quantity in stock raises: valueerror: if quantity is negativ	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	set the quantity with validation. args: quantity (int): the quantity in stock raises: valueerror: if quantity is negativ	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	doc/user/gitlab_duo/tutorials/duo_python_fix_errors.md	0	convert the article to a dictionary. returns: dict: dictionary representation of the article	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create an article from a dictionary. args: data (dict): dictionary with article data returns: article: new article insta	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create an article from a dictionary. args: data (dict): dictionary with article data returns: article: new article insta	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create an article from a dictionary. args: data (dict): dictionary with article data returns: article: new article insta	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create an article from a dictionary. args: data (dict): dictionary with article data returns: article: new article insta	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	context manager for database connections. automatically handles connection opening, committing, and closing. yields: sql	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	context manager for database connections. automatically handles connection opening, committing, and closing. yields: sql	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	context manager for database connections. automatically handles connection opening, committing, and closing. yields: sql	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	context manager for database connections. automatically handles connection opening, committing, and closing. yields: sql	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize the database by creating the articles table if it doesn't exist.	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize the database by creating the articles table if it doesn't exist.	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize the database by creating the articles table if it doesn't exist.	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	initialize the database by creating the articles table if it doesn't exist.	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create table if not exists articles ( id integer primary key autoincrement, name text not null, price real not null, qua	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create table if not exists articles ( id integer primary key autoincrement, name text not null, price real not null, qua	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create table if not exists articles ( id integer primary key autoincrement, name text not null, price real not null, qua	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	create table if not exists articles ( id integer primary key autoincrement, name text not null, price real not null, qua	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	add a new article to the database. args: article (article): article object to add returns: int: id of the newly added ar	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	add a new article to the database. args: article (article): article object to add returns: int: id of the newly added ar	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	add a new article to the database. args: article (article): article object to add returns: int: id of the newly added ar	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	add a new article to the database. args: article (article): article object to add returns: int: id of the newly added ar	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get an article by its id. args: article_id (int): id of the article to retrieve returns: article: article object if foun	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get an article by its id. args: article_id (int): id of the article to retrieve returns: article: article object if foun	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get an article by its id. args: article_id (int): id of the article to retrieve returns: article: article object if foun	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get an article by its id. args: article_id (int): id of the article to retrieve returns: article: article object if foun	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get all articles from the database. returns: list: list of article objects	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get all articles from the database. returns: list: list of article objects	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get all articles from the database. returns: list: list of article objects	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	get all articles from the database. returns: list: list of article objects	STRING
HIGH	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	update an existing article in the database. args: article (article): article object with updated values returns: bool: t	STRING
HIGH	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	update an existing article in the database. args: article (article): article object with updated values returns: bool: t	STRING
HIGH	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	update an existing article in the database. args: article (article): article object with updated values returns: bool: t	STRING
HIGH	doc/user/gitlab_duo/tutorials/fix_code_python_shop.md	0	update an existing article in the database. args: article (article): article object with updated values returns: bool: t	STRING
44 more matches not shown…

Structural Annotation Overuse268 hits · 424 pts

Severity	File	Line	Snippet	Context
LOW	.gitlab/ci/per_test_coverage.gitlab-ci.yml	35	# Step 1: select the test queue for this slot (weekday delta + stale-rescue,	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	52	# Step 2: render FOSS rspec half of the child pipeline.	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	61	# Step 3: render EE rspec half of the child pipeline.	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	71	# Step 4: render jest half of the child pipeline.	COMMENT
LOW⚡	.gitlab/duo/flows/appsec-review.yaml	5	# Step 1: Build comprehensive MR context	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	26	# Step 2: Pre-scan codebase for security-relevant context	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	47	# Step 3: Perform AppSec review	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	63	# Step 4: Validate findings with sanity check	COMMENT
LOW	app/models/repository.rb	1279	# NOTE: This method is similar to #squash but takes explicit SHAs instead of	COMMENT
LOW	app/models/group.rb	359	# WARNING: This method should never be used on its own	COMMENT
LOW	app/models/group.rb	451	# WARNING: This method should never be used on its own	COMMENT
LOW	app/models/ci/build.rb	178	# WARNING: This scope could lead to performance implications for large size of tables `ci_builds` and ci_runners`.	COMMENT
LOW	…/presenters/projects/settings/deploy_keys_presenter.rb	25	# NOTE: This method is redundant. Use `available_project_keys` and `available_public_keys` instead.	COMMENT
LOW	app/finders/deployments_finder.rb	3	# WARNING: This finder does not check permissions!	COMMENT
LOW	app/graphql/types/packages/metadata_type.rb	31	# NOTE: This method must be kept in sync with `PackageWithoutVersionsType#metadata`,	COMMENT
LOW	app/graphql/types/packages/package_file_type.rb	22	# NOTE: This method must be kept in sync with the union	COMMENT
LOW	app/graphql/types/packages/package_base_type.rb	55	# NOTE: This method must be kept in sync with the union	COMMENT
LOW	app/graphql/types/packages/file_metadata_type.rb	20	# NOTE: This method must be kept in sync with `PackageFileType#file_metadata`,	COMMENT
LOW	…graphql/types/packages/package_dependency_link_type.rb	16	# NOTE: This method must be kept in sync with the union	COMMENT
LOW	…raphql/types/packages/dependency_link_metadata_type.rb	16	# NOTE: This method must be kept in sync with `PackageDependencyLinkType#metadata`,	COMMENT
LOW⚡	…/tools/work_items/get_saved_view_work_items_service.rb	55	# Step 1: Fetch the saved view to get its filters and sort	COMMENT
LOW⚡	…/tools/work_items/get_saved_view_work_items_service.rb	61	# Step 2: Fetch work items using the saved view's filters	COMMENT
LOW	…ces/work_items/data_sync/widgets/start_and_due_date.rb	16	# NOTE: This method is for cleanup simulation and testing purposes, it is not actually called within the	COMMENT
LOW	…tializers_before_autoloader/100_patch_omniauth_saml.rb	11	# NOTE: This method duplicates code from omniauth-saml	COMMENT
LOW	spec/frontend/drawio/drawio_editor_spec.js	178	// Step 5: The draw.io editor will send the downloaded diagram to the iframe	COMMENT
LOW⚡	spec/features/accessibility/README.md	52	# Step 1: Navigate to project	COMMENT
LOW⚡	spec/features/accessibility/README.md	59	# Step 2: Open Web IDE	COMMENT
LOW⚡	spec/features/accessibility/README.md	66	# Step 3: Create new file	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	280	# Step 1: Get all tables with organization_id columns	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	291	# Step 2: Check each table individually to avoid complex joins	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	316	# Step 3: Check foreign keys using Rails schema introspection	COMMENT
LOW	spec/lib/gitlab/database/collation_checker_spec.rb	179	expect(logger).to receive(:warn).with("\n# Step 1: Fix duplicate entries in unique indexes")	CODE
LOW⚡	spec/lib/gitlab/database/collation_checker_spec.rb	191	expect(logger).to receive(:warn).with("\n# Step 2: Rebuild affected indexes")	CODE
LOW⚡	spec/lib/gitlab/database/collation_checker_spec.rb	200	expect(logger).to receive(:warn).with("\n# Step 3: Refresh collation versions")	CODE
LOW	…ale/fr-fr/integration/advanced_search/elasticsearch.md	417	# WARNING: This task deletes all existing indices	COMMENT
LOW	…ale/fr-fr/integration/advanced_search/elasticsearch.md	421	# WARNING: This task deletes all existing indices	COMMENT
LOW⚡	…c-locale/fr-fr/administration/raketasks/maintenance.md	712	# Step 1: Check for duplicate entries in unique indexes	COMMENT
LOW⚡	…c-locale/fr-fr/administration/raketasks/maintenance.md	718	# Step 2: Rebuild affected indexes	COMMENT
LOW⚡	…c-locale/fr-fr/administration/raketasks/maintenance.md	725	# Step 3: Refresh collation versions	COMMENT
LOW	doc-locale/ja-jp/update/deprecations.md	3783	# WARNING: This will not work after GitLab 15.0	COMMENT
LOW	…ale/ja-jp/integration/advanced_search/elasticsearch.md	418	# WARNING: This task deletes all existing indices	COMMENT
LOW	…ale/ja-jp/integration/advanced_search/elasticsearch.md	422	# WARNING: This task deletes all existing indices	COMMENT
LOW	…-locale/ja-jp/user/packages/generic_packages/_index.md	479	# Step 1: Get the package ID	COMMENT
LOW	…-locale/ja-jp/user/packages/generic_packages/_index.md	491	# Step 2: Get list of files in the package	COMMENT
LOW	…-locale/ja-jp/user/packages/generic_packages/_index.md	501	# Step 3: Download each file	COMMENT
LOW⚡	…c-locale/ja-jp/administration/raketasks/maintenance.md	715	# Step 1: Check for duplicate entries in unique indexes	COMMENT
LOW⚡	…c-locale/ja-jp/administration/raketasks/maintenance.md	721	# Step 2: Rebuild affected indexes	COMMENT
LOW⚡	…c-locale/ja-jp/administration/raketasks/maintenance.md	728	# Step 3: Refresh collation versions	COMMENT
LOW	…ale/ko-kr/integration/advanced_search/elasticsearch.md	417	# WARNING: This task deletes all existing indices	COMMENT
LOW	…ale/ko-kr/integration/advanced_search/elasticsearch.md	421	# WARNING: This task deletes all existing indices	COMMENT
LOW⚡	…c-locale/ko-kr/administration/raketasks/maintenance.md	712	# Step 1: Check for duplicate entries in unique indexes	COMMENT
LOW⚡	…c-locale/ko-kr/administration/raketasks/maintenance.md	718	# Step 2: Rebuild affected indexes	COMMENT
LOW⚡	…c-locale/ko-kr/administration/raketasks/maintenance.md	725	# Step 3: Refresh collation versions	COMMENT
LOW	scripts/merge_request_query_differ.rb	45	# Step 1: Extract query fingerprints from MR	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	61	# Step 2: Get master fingerprints	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	68	# Step 3: Compare and filter	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	72	# Step 4: Report generation	COMMENT
LOW	lib/gitlab/tracking.rb	3	# WARNING: This module has been deprecated and will be removed in the future	COMMENT
LOW⚡	lib/gitlab/database/collation_checker.rb	312	logger.warn("\n# Step 1: Fix duplicate entries in unique indexes")	CODE
LOW⚡	lib/gitlab/database/collation_checker.rb	337	logger.warn("\n# Step 2: Rebuild affected indexes")	CODE
208 more matches not shown…

AI Response Leakage40 hits · 385 pts

Severity	File	Line	Snippet	Context
HIGH	…r-fr/administration/sidekiq/sidekiq_troubleshooting.md	433	# In this example, we want to remove any update_merge_requests jobs	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1336	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1344	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1352	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	doc-locale/fr-fr/administration/auth/oidc.md	1405	# In this example, the 'acr' claim must have the value 'gold' that is also defined in the Keycloak docu	COMMENT
HIGH	doc-locale/fr-fr/administration/auth/oidc.md	1458	# In this example, the Microsoft Entra ID administrators have defined `c20`	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1518	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1526	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/fr-fr/administration/auth/oidc.md	1534	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	…a-jp/administration/sidekiq/sidekiq_troubleshooting.md	433	# In this example, we want to remove any update_merge_requests jobs	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1352	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1360	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1368	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	doc-locale/ja-jp/administration/auth/oidc.md	1426	# In this example, the 'acr' claim must have the value 'gold' that is also defined in the Keycloak docu	COMMENT
HIGH	doc-locale/ja-jp/administration/auth/oidc.md	1482	# In this example, the Microsoft Entra ID administrators have defined `c20`	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1542	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1550	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/ja-jp/administration/auth/oidc.md	1558	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	…o-kr/administration/sidekiq/sidekiq_troubleshooting.md	433	# In this example, we want to remove any update_merge_requests jobs	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1336	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1344	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1352	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	doc-locale/ko-kr/administration/auth/oidc.md	1405	# In this example, the 'acr' claim must have the value 'gold' that is also defined in the Keycloak docu	COMMENT
HIGH	doc-locale/ko-kr/administration/auth/oidc.md	1458	# In this example, the Microsoft Entra ID administrators have defined `c20`	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1518	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1526	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc-locale/ko-kr/administration/auth/oidc.md	1534	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	lib/gitlab/ci/templates/dotNET-Core.gitlab-ci.yml	82	# for 'dotnet restore' command. In this example, a temporary directory is created	COMMENT
HIGH	doc/development/secure_coding_guidelines/ruby.md	405	# In this example we use `ParseOptions` but select insecure options.	COMMENT
HIGH	…ation_security/api_security_testing/troubleshooting.md	264	The following example uses the [statically defined credentials](../../../ci/docker/using_docker_images.md#use-statically	CODE
HIGH	…er/application_security/api_fuzzing/troubleshooting.md	299	The following example uses the [statically defined credentials](../../../ci/docker/using_docker_images.md#use-statically	CODE
HIGH	doc/administration/sidekiq/sidekiq_troubleshooting.md	493	# In this example, we want to remove any update_merge_requests jobs	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1457	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1465	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1473	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT
HIGH	doc/administration/auth/oidc.md	1530	# In this example, the 'acr' claim must have the value 'gold' that is also defined in the Keycloak docu	COMMENT
HIGH	doc/administration/auth/oidc.md	1591	# In this example, the Microsoft Entra ID administrators have defined `c20`	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1652	# In this example, the 'acr' (Authentication Context Class Reference) claim	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1660	# In this example, the 'amr' (Authentication Method References) claim	COMMENT
HIGH⚡	doc/administration/auth/oidc.md	1668	# In this example, the `claims` parameter is added to the authorization request and instructs the	COMMENT

AI Slop Vocabulary106 hits · 245 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/doctor/steps/perform_doctor_checks/check_gitignore.rb	12	# Keep in sync: if you change these entries, update .ai-harness-doctor-forbidden-paths	COMMENT
MEDIUM	…tor/steps/perform_doctor_checks/check_ai_references.rb	17	# Keep in sync: if you change this pattern, update .ai-harness-doctor-patterns	COMMENT
MEDIUM	…tor/steps/perform_doctor_checks/check_ai_references.rb	45	# Keep in sync: if you change these patterns, update .ai-harness-doctor-patterns	COMMENT
MEDIUM	…r/steps/perform_doctor_checks/check_forbidden_files.rb	14	# Keep in sync: if you change these patterns, update .ai-harness-doctor-forbidden-paths	COMMENT
MEDIUM	.gitlab/ci/rules.gitlab-ci.yml	1208	# - tooling/ai_harness/config.yml (harness-wide config consumed by the doctor)	COMMENT
MEDIUM	.gitlab/ci/rules.gitlab-ci.yml	2061	# Frontend integration tests are EE-only; the harness and fixtures do not exist in	COMMENT
MEDIUM⚡	.gitlab/duo/flows/appsec-review.yaml	5	# Step 1: Build comprehensive MR context	COMMENT
LOW	app/mailers/emails/service_desk.rb	308	# We read the uploads before in setup_service_desk_attachments, so let's just add them	COMMENT
LOW	app/models/merge_request_diff.rb	576	# It is not good enough for highlighting diffs, so we can't simply pass	COMMENT
LOW	app/models/note.rb	250	# So instead we just pass over the string representations of the note and discussion IDs,	COMMENT
LOW	app/models/redirect_route.rb	10	# We don't just use :namespace_id here, because it's updated by	COMMENT
LOW	app/models/project.rb	2055	# present. Since the validation for that will fail, we can just return	COMMENT
MEDIUM	app/models/todo.rb	310	# so we can utilize the index on state / user id.	COMMENT
LOW	app/models/application_setting.rb	1472	# We already have an ApplicationSetting record, so just return it.	COMMENT
MEDIUM	app/models/internal_id.rb	15	# In order to leverage InternalId for other usages, the idea is to	COMMENT
MEDIUM	app/models/user.rb	1752	# Typically used in conjunction with projects table to get projects	COMMENT
MEDIUM	app/models/ci/build.rb	1533	# Use select to leverage cached associations and avoid N+1 queries	COMMENT
MEDIUM	app/models/packages/policies/dependency_proxy/group.rb	3	# We use this class, in conjunction with the	COMMENT
MEDIUM	app/models/concerns/atomic_internal_id.rb	18	# This concern uses InternalId records to facilitate atomicity.	COMMENT
MEDIUM	app/models/concerns/ci/maskable.rb	13	# * Absolutely no fun is allowed	COMMENT
LOW	app/models/concerns/integrations/base/linear.rb	62	# in a separate DB table, but for the Linear integration we just use the `encrypted_properties` column	COMMENT
LOW	app/finders/merge_requests_finder.rb	363	# Same thing when the input is a DateTime object: just return it directly.	COMMENT
MEDIUM	app/finders/ci/jobs_finder.rb	18	# params[:skip_ordering] needed when using in conjunction with Ci::BuildSourceFinder	COMMENT
MEDIUM	app/graphql/mutations/packages/destroy_files.rb	75	# We can leverage the fact that a package file has a one-to-one relationship	COMMENT
LOW	…orkers/gitlab/jira_import/stage/import_notes_worker.rb	13	# new job waiter will have zero jobs_remaining by default, so it will just pass on to next stage	COMMENT
LOW	…/gitlab/jira_import/stage/import_attachments_worker.rb	13	# new job waiter will have zero jobs_remaining by default, so it will just pass on to next stage	COMMENT
MEDIUM	app/workers/concerns/worker_attributes.rb	94	# Worker can utilize Sidekiq readonly database replicas capabilities by setting data_consistency attribute.	COMMENT
MEDIUM	app/workers/concerns/worker_attributes.rb	130	# If data_consistency is not set to :always, worker will try to utilize load balancing capabilities and use the repl	COMMENT
MEDIUM	app/controllers/projects/uploads_controller.rb	14	# comprehensive test coverage and proper enforcement in a follow-up MR.	COMMENT
MEDIUM	app/controllers/groups/uploads_controller.rb	12	# comprehensive test coverage and proper enforcement in a follow-up MR.	COMMENT
LOW	…able_actions/captcha_check/rest_api_actions_support.rb	31	# while still others just return a plain string error.	COMMENT
MEDIUM	app/assets/javascripts/wikis/components/wiki_form.vue	544	// More robust check for printable characters	COMMENT
MEDIUM	…s/javascripts/work_items/list/view_change_detection.js	44	// baseline. Selecting them here keeps the comparison robust to any extra keys	COMMENT
MEDIUM	app/assets/stylesheets/page_bundles/merge_requests.scss	778	// One loop moves the gradient one band cycle, so the restart is seamless.	COMMENT
MEDIUM	app/assets/stylesheets/page_bundles/search.scss	219	// We leverage most of the styling but broke off	COMMENT
LOW	app/helpers/webpack_helper.rb	115	# We proxy webpack output in 'test' and 'dev' environment, so we can just use asset_host	COMMENT
LOW	app/services/snippets/update_service.rb	70	# the repository we can just return	COMMENT
MEDIUM	app/services/web_hooks/log_execution_service.rb	38	# might leverage this to roll out a feature for group and project webhooks using the same feature flag."	COMMENT
LOW	app/services/ci/register_job_service.rb	223	# the queue entry has been removed, so let's just return here.	COMMENT
LOW	app/services/captcha/captcha_verification_service.rb	11	# is 'remote_ip'. Therefore, we just create a struct to avoid passing the full request	COMMENT
LOW	app/services/jira_import/start_import_service.rb	57	# we do not have the jira_project_name or jira_project_xid yet so just set a mock value,	COMMENT
MEDIUM	…p/services/import/source_users/generate_csv_service.rb	7	# facilitate the user mapping flow.	COMMENT
MEDIUM	app/services/routes/rename_descendants_service.rb	110	# This comprehensive attribute set is required for the initial attempt of `upsert_all` to function effectively.	COMMENT
MEDIUM	config/vue3migration/compilers/vue2_template.js	17	// AST and injects the key property by manipulating AST nodes, making it robust against any code	COMMENT
LOW	spec/fast_spec_helper.rb	66	# Mock out the GettextI18nRails `_` method to just pass through the key as the text	COMMENT
MEDIUM	…rontend/feature_flags/components/feature_flags_spec.js	26	featureFlagsClientLibrariesHelpPagePath: '/help/feature-flags#unleash-clients',	CODE
MEDIUM	spec/frontend/wikis/notes/mock_data.js	6	"# Welcome to Our Wiki!\r\n\r\nThis wiki is a collaborative resource for information about [Project Name/Topic]. \r\	CODE
MEDIUM	spec/features/markdown/markdown_spec.rb	6	# This feature spec is intended to be a comprehensive exercising of all of	COMMENT
LOW	spec/policies/concerns/policy_actor_spec.rb	20	# initialized. So here we just use an instance	COMMENT
LOW	spec/requests/user_avatar_spec.rb	12	# may not be a good idea, so we just set up the ideal case.	COMMENT
LOW	…c/finders/concerns/finder_with_group_hierarchy_spec.rb	23	# however for this spec just return the group ids	COMMENT
LOW⚡	…port/helpers/orphan_final_artifacts_cleanup_helpers.rb	148	# we just use match_array.	COMMENT
LOW	spec/factories/organizations/organizations.rb	25	# Most specs should just create a normal organization.	COMMENT
LOW	spec/factories/design_management/versions.rb	26	# By default all designs are created_designs, so just add them.	COMMENT
MEDIUM	spec/scripts/semgrep_result_processor_spec.rb	744	# More robust mocking of HTTP operations	COMMENT
MEDIUM	spec/lib/gitlab/tracking_spec.rb	225	# rubocop:disable GitlabSecurity/PublicSend -- done to facilitate debug log	COMMENT
MEDIUM	…lib/gitlab/database/load_balancing/session_map_spec.rb	105	# This makes the spec more robust in single-db scenarios	COMMENT
MEDIUM	…lib/gitlab/database/load_balancing/session_map_spec.rb	162	# This makes the spec more robust in single-db scenarios	COMMENT
MEDIUM	spec/controllers/uploads_controller_spec.rb	313	# the real WorkhorseAuthenticatable guard and the JWT injection harness).	COMMENT
LOW	spec/controllers/projects/pipelines_controller_spec.rb	233	# let's just create new ones with random names.	COMMENT
46 more matches not shown…

Redundant / Tautological Comments135 hits · 210 pts

Severity	File	Line	Snippet	Context
LOW	tooling/danger/analytics_instrumentation.rb	219	# Check if additional_properties contains all tracked_properties	COMMENT
LOW	tooling/danger/ast_parser.rb	74	# Check if a constant is assigned the specified string value	COMMENT
LOW	tooling/danger/ast_parser.rb	83	# Check if a method is called with job_class_name: 'ClassName' argument	COMMENT
LOW	tooling/danger/documentation.rb	65	# Output messages	COMMENT
LOW	.gitlab/ci/docs.gitlab-ci.yml	99	# Check if this a release branch, which would be the case for a backport.	COMMENT
LOW	.gitlab/ci/docs.gitlab-ci.yml	106	# Check if we're directly on a stable branch (direct push/commit)	COMMENT
LOW	.gitlab/ci/docs.gitlab-ci.yml	119	# Check if the branch exists in the Docs website repo, fallback to main if not	COMMENT
LOW	…nts/repositories/repository_redirect_url_constraint.rb	20	# Check if the path matches any known repository containers.	COMMENT
LOW⚡	app/models/project.rb	2472	# Check if repository already exists on disk	COMMENT
LOW⚡	app/models/project.rb	2477	# Check if repository with same path already exists on disk we can	COMMENT
LOW	app/models/project.rb	3215	# Check if Hashed Storage is enabled for the project with at least informed feature rolled out	COMMENT
LOW	app/models/project.rb	4089	# Check if a reference is being done cross-project	COMMENT
LOW	app/models/protected_branch.rb	67	# Check if branch name is marked as protected in the system	COMMENT
LOW	app/models/commit_range.rb	130	# Check if both the starting and ending commit IDs exist in a project's	COMMENT
LOW	app/models/namespace.rb	1014	# Check if a reference is being done cross-project	COMMENT
LOW	app/models/project_team.rb	286	# Check if the user owns the project via a personal namespace.	COMMENT
LOW	app/models/group.rb	770	# Check if user is a last owner of the group.	COMMENT
LOW	app/models/legacy_diff_note.rb	48	# Check if this note is part of an "active" discussion	COMMENT
LOW	app/models/ref_matcher.rb	63	# Check if other_pattern (which is a wildcard) matches our literal pattern.	COMMENT
LOW	app/models/doorkeeper/concerns/token_fallback.rb	57	# Check if FIPS implementation is FIPS 140-3 or above	COMMENT
LOW	app/models/merge_request/commits_metadata.rb	95	# Check if there are commits that don't exist yet in the mapping. It means	COMMENT
LOW	app/policies/ci/runner_policy.rb	53	# Check if any projects where user is a maintainer+ are inheriting group runners	COMMENT
LOW	app/policies/ci/runner_policy.rb	67	# Check if runner is associated to any projects where user has read_runners permission	COMMENT
LOW	app/finders/merge_requests/by_approvals_finder.rb	55	# Check if we have the special label in ids or usernames field	COMMENT
LOW	app/graphql/types/base_argument.rb	51	# Check if the type is an array type	COMMENT
LOW⚡	…resolvers/work_items/description_templates_resolver.rb	54	# Check if we have duplicate project and group templates from TemplateFinder where	COMMENT
LOW	app/workers/process_commit_worker.rb	89	# Check if a time entry with this commit info already exists	COMMENT
LOW	app/workers/process_commit_worker.rb	155	# Check if message contains time tracking syntax	COMMENT
LOW	app/controllers/projects/compare_controller.rb	168	# Check if Gitaly is available using the health check service.	COMMENT
LOW	app/controllers/projects/work_items_controller.rb	85	# Check if user can edit the work item	COMMENT
LOW	app/controllers/projects/issues_controller.rb	144	# Check if user can edit the issue	COMMENT
LOW	app/helpers/application_helper.rb	55	# Check if a particular controller is the current one	COMMENT
LOW	app/helpers/application_helper.rb	76	# Check if a particular action is the current one	COMMENT
LOW	app/services/system_notes/issuables_service.rb	263	# Check if a cross-reference is disallowed	COMMENT
LOW	app/services/system_notes/issuables_service.rb	387	# Check if a cross reference to a Mentionable from the `mentioned_in` Mentionable	COMMENT
LOW	…environments/schedule_to_delete_review_apps_service.rb	51	# Check if the actor has write permission to a potentially-protected environment.	COMMENT
LOW	…projects/hashed_storage/migrate_attachments_service.rb	37	# Check if target path has discardable content	COMMENT
LOW	…ces/projects/hashed_storage/base_attachment_service.rb	32	# Check if target path has discardable content	COMMENT
LOW	…/merge_requests/get_merge_request_conflicts_service.rb	87	# Check if branches/refs are valid	COMMENT
LOW	app/services/mcp/tools/concerns/versionable.rb	37	# Check if a version exists	COMMENT
LOW	…erge_requests/unstick_locked_merge_requests_service.rb	73	# Set MR to be marked as merged if one of the following is true:	COMMENT
LOW	…erge_requests/unstick_locked_merge_requests_service.rb	93	# Set MR to be unlocked since it's stuck and maybe not merged yet.	COMMENT
LOW	…erge_requests/unstick_locked_merge_requests_service.rb	104	# Check if MR is still in the process of merging so we don't interrupt the process.	COMMENT
LOW	app/services/integrations/group_mention_service.rb	78	# Check if direct group members have read access to the context of the group mention	COMMENT
LOW	…es/work_items/saved_views/filter_normalizer_service.rb	141	# Check if user can read the group or project before allowing them to save	COMMENT
LOW	app/services/analytics/glql/parser_service.rb	52	# Check if it's pure YAML (no frontmatter)	COMMENT
LOW	config/initializers/js_routes.rb	15	# Set prefix to empty string so it doesn't default to `Rails.application.config.relative_url_root``	COMMENT
LOW	…ures/projects/labels/issues_sorted_by_priority_spec.rb	26	# Assign labels to issues disorderly	COMMENT
LOW	…ures/projects/labels/issues_sorted_by_priority_spec.rb	60	# Assign labels to issues disorderly	COMMENT
LOW	…eatures/admin/admin_users_impersonation_tokens_spec.rb	26	# Set date to 1st of next month	COMMENT
LOW	…/features/user_settings/personal_access_tokens_spec.rb	30	# Set date to 1st of next month	COMMENT
LOW	spec/support/matchers/siphon.rb	61	# Check if all ignored columns actually exist in PG	COMMENT
LOW	…red_examples/features/access_tokens_shared_examples.rb	22	# Set date to 1st of next month	COMMENT
LOW	…/shared_examples/requests/api/notes_shared_examples.rb	368	# Check if note is really deleted	COMMENT
LOW	…d_examples/requests/api/discussions_shared_examples.rb	412	# Check if note is really deleted	COMMENT
LOW	spec/factories/todos.rb	16	# Set project to nil when group is provided	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	560	# Check if the table itself has a loose foreign key	COMMENT
LOW	spec/lib/gitlab/database/load_balancing/host_spec.rb	452	# Set it to a really large number, but still less than the 5 seconds from pg_sleep(5) to prove that the	COMMENT
LOW	qa/qa/page/group/bulk_import.rb	49	# Check if import page has a successfully imported group	COMMENT
LOW	qa/qa/page/component/groups_filter.rb	11	# Check if a group exists in private or public tab	COMMENT
75 more matches not shown…

Synthetic Comment Markers23 hits · 158 pts

Severity	File	Line	Snippet	Context
HIGH	tooling/ai_harness/doctor/README.md	70	## Review criteria for AI-generated specs	COMMENT
HIGH	…/javascripts/vue_shared/components/markdown/header.vue	401	this.insertIntoTextarea(`${text}\n\n---\n\n_${__('This comment was generated by AI')}_`);	CODE
HIGH	…/javascripts/vue_shared/components/markdown/header.vue	731	comment: __('This comment was generated by AI'),	CODE
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	535	// Possible AI-generated code below	COMMENT
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	546	// Possible AI-generated code below	COMMENT
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	1190	# Potential AI-generated code below	COMMENT
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	1248	# Potential AI-generated code below	COMMENT
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	1295	# Potential AI-generated code below	COMMENT
HIGH	doc-locale/ja-jp/user/gitlab_duo/use_cases.md	1307	# Potential AI-generated code below	COMMENT
HIGH	doc/AGENTS.md	10	## Common mistakes to avoid in AI-generated documentation	COMMENT
HIGH	doc/releases/16/gitlab-16-3-released.md	414	GitLab surfaces vulnerabilities that contain relevant information, however, sometimes it is unclear where to start. It t	CODE
HIGH	doc/development/documentation/workflow.md	91	#### AI-generated documentation	COMMENT
HIGH	…nt/documentation/ai-instruction-files-documentation.md	28	\| [`doc/AGENTS.md`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/doc/AGENTS.md) \| Entry point for the `doc` direct	CODE
HIGH	doc/development/documentation/styleguide/_index.md	2150	## AI-generated content	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	561	// Possible AI-generated code below	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	572	// Possible AI-generated code below	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	1244	# Potential AI-generated code below	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	1302	# Potential AI-generated code below	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	1350	# Potential AI-generated code below	COMMENT
HIGH	doc/user/gitlab_duo/use_cases.md	1362	# Potential AI-generated code below	COMMENT
HIGH	doc/user/application_security/sast/evaluation_guide.md	76	### AI-generated test code	COMMENT
HIGH	doc/api/graphql/reference/mutations.md	17302	\| `readinessScore` \| [`Float`](scalars.md#float) \| Confidence rating representing the estimated accuracy of the fix in t	CODE
HIGH	doc/administration/gitlab_duo_self_hosted/logging.md	141	To specify the location of logs generated by AI Gateway and the GitLab Duo Agent Platform, run:	CODE

Example Usage Blocks97 hits · 146 pts

Severity	File	Line	Snippet	Context
LOW	.gitlab/caproni/setup.sh	18	# Usage:	COMMENT
LOW	.gitlab/caproni/run-qa.sh	4	# Usage:	COMMENT
LOW	.gitlab/caproni/exec.sh	6	# Usage:	COMMENT
LOW	app/models/preloaders/labels_preloader.rb	8	# Usage:	COMMENT
LOW	app/models/preloaders/merge_request_diff_preloader.rb	6	# Usage:	COMMENT
LOW⚡	app/models/concerns/fast_destroy_all.rb	21	# How to use	COMMENT
LOW	app/models/concerns/routable.rb	11	# Usage:	COMMENT
LOW	app/models/concerns/routable.rb	68	# Usage:	COMMENT
LOW	app/models/concerns/routable.rb	85	# Usage:	COMMENT
LOW	app/models/concerns/strip_attribute.rb	8	# Usage:	COMMENT
LOW	app/models/concerns/participable.rb	27	# Usage:	COMMENT
LOW	app/models/concerns/safely_change_column_default.rb	13	# Usage:	COMMENT
LOW	app/models/concerns/ci/partitionable.rb	7	# Usage:	COMMENT
LOW	…models/concerns/ci/partitionable/association_finder.rb	52	# Usage:	COMMENT
LOW	app/workers/concerns/reenqueuer.rb	74	# Usage:	COMMENT
LOW	…alidators/organizations/same_organization_validator.rb	15	# Usage:	COMMENT
LOW	…project_update/find_records_due_for_refresh_service.rb	6	# Usage:	COMMENT
LOW	app/services/projects/after_rename_service.rb	7	# Example usage:	COMMENT
LOW	…ces/projects/apple_target_platform_detector_service.rb	15	# Example usage:	COMMENT
LOW	…/services/users/refresh_authorized_projects_service.rb	11	# Usage:	COMMENT
LOW	app/services/concerns/gitlab/handles_removal_of.rb	9	# Usage:	COMMENT
LOW	config/bullet.yml	5	# Example usage:	COMMENT
LOW	…s/consumer/external/helpers/contract_name_generator.rb	10	# Usage:	COMMENT
LOW	…ts/organizations/transfer_batch_size_shared_context.rb	10	# Usage:	COMMENT
LOW	…ontexts/requests/gitaly_unavailable_shared_contexts.rb	7	# Usage:	COMMENT
LOW	spec/support/matchers/lock_rows.rb	6	# Usage:	COMMENT
LOW	spec/support/matchers/result_matchers.rb	3	# Example usage:	COMMENT
LOW	…port/matchers/click_house_cursor_pagination_matcher.rb	15	# Usage:	COMMENT
LOW	spec/support/helpers/graphql_helpers.rb	888	# Usage:	COMMENT
LOW	spec/support/helpers/sorting_helper.rb	8	# Usage:	COMMENT
LOW	spec/support/helpers/features/branches_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/sorting_helpers.rb	5	# Usage:	COMMENT
LOW	…c/support/helpers/features/responsive_table_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/two_factor_helpers.rb	6	# Usage:	COMMENT
LOW	spec/support/helpers/features/canonical_link_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/mirroring_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/releases_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/web_ide_spec_helpers.rb	5	# Usage:	COMMENT
LOW	spec/support/helpers/features/notes_helpers.rb	5	# Usage:	COMMENT
LOW	…s/lib/banzai/filters/filter_timeout_shared_examples.rb	8	# Usage:	COMMENT
LOW	…s/lib/banzai/filters/filter_timeout_shared_examples.rb	45	# Usage:	COMMENT
LOW	…s/lib/banzai/filters/filter_timeout_shared_examples.rb	65	# Usage:	COMMENT
LOW	…s/lib/banzai/filters/filter_timeout_shared_examples.rb	79	# Usage:	COMMENT
LOW	…s/lib/banzai/filters/filter_timeout_shared_examples.rb	88	# Usage:	COMMENT
LOW	…/lib/atlassian/jira_dev_info_client_shared_examples.rb	7	# Usage:	COMMENT
LOW	…shared_examples/workers/idempotency_shared_examples.rb	6	# Usage:	COMMENT
LOW	…t/shared_examples/services/incident_shared_examples.rb	6	# Usage:	COMMENT
LOW	…t/shared_examples/services/incident_shared_examples.rb	22	# Usage:	COMMENT
LOW	…ices/organizations/batched_transfer_shared_examples.rb	13	# Example usage:	COMMENT
LOW	…vices/organizations/org_id_rollback_shared_examples.rb	13	# Example usage:	COMMENT
LOW	…/organizations/transaction_rollback_shared_examples.rb	14	# Example usage:	COMMENT
LOW	…/organizations/transaction_rollback_shared_examples.rb	53	# Example usage:	COMMENT
LOW	…/organizations/transaction_rollback_shared_examples.rb	77	# Example usage:	COMMENT
LOW	…/organizations/transaction_rollback_shared_examples.rb	110	# Example usage:	COMMENT
LOW	spec/lib/banzai/pipeline/shared_examples.rb	10	# Example usage:	COMMENT
LOW	scripts/product_usage_data_event_formatter.rb	5	# Usage:	COMMENT
LOW	scripts/lint/validate_release_categories.rb	10	# Usage:	COMMENT
LOW	scripts/lint/check_ui_text.rb	14	# Usage:	COMMENT
LOW	scripts/lint/sort_role_permissions.rb	7	# Usage:	COMMENT
LOW	scripts/internal_events/monitor.rb	8	# Usage:	COMMENT
37 more matches not shown…

Magic Placeholder Names27 hits · 145 pts

Severity	File	Line	Snippet	Context
HIGH	doc-locale/fr-fr/operations/observability/api_access.md	25	## Obtenir votre clé API {#get-your-api-key}	COMMENT
HIGH	doc-locale/fr-fr/operations/observability/api_access.md	62	curl --header "SIGNOZ-API-KEY: <your_api_key>" \	CODE
HIGH	doc-locale/fr-fr/operations/observability/api_access.md	66	Remplacez `<your_api_key>` par la clé figurant sur la page API Keys, et `<group_id>` par l'identifiant de votre grou	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	79	\| `--api-key` \| - \| `--api-key=your-api-key` \| Clé API	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	97	--api-key=your-api-key \	CODE
HIGH	doc-locale/ja-jp/user/project/import/github.md	404	curl --header "Authorization: Bearer <YOUR-TOKEN>" "https://{PROXY_HOSTNAME}/user"	CODE
HIGH	doc-locale/ja-jp/user/project/import/github.md	421	curl --head --header "Authorization: Bearer <YOUR-TOKEN>" "https://{PROXY_DOMAIN}/api/v3/repos/{repository_path}/pulls?s	CODE
HIGH	doc-locale/ja-jp/operations/observability/api_access.md	25	## APIキーを取得 {#get-your-api-key}	COMMENT
HIGH	doc-locale/ja-jp/operations/observability/api_access.md	62	curl --header "SIGNOZ-API-KEY: <your_api_key>" \	CODE
HIGH	doc-locale/ja-jp/operations/observability/api_access.md	66	`<your_api_key>`をAPI Keysページのキーに、`<group_id>`をGitLabグループID (またはSelf-ManagedインスタンスのURL) に置き換えます。	CODE
HIGH	doc-locale/ja-jp/operations/observability/mcp_server.md	41	## APIキーを取得する {#get-your-api-key}	COMMENT
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	80	\| `--api-key` \| - \| `--api-key=your-api-key` \| モデルAPIキ	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	98	--api-key=your-api-key \	CODE
HIGH	doc-locale/ko-kr/operations/observability/api_access.md	25	## API 키 가져오기 {#get-your-api-key}	COMMENT
HIGH	doc-locale/ko-kr/operations/observability/api_access.md	62	curl --header "SIGNOZ-API-KEY: <your_api_key>" \	CODE
HIGH	doc-locale/ko-kr/operations/observability/api_access.md	66	`<your_api_key>`을 API Keys 페이지의 키로 바꾸고, `<group_id>`을 GitLab 그룹 ID(또는 자체 관리 인스턴스 URL)로 바꿉니다.	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	79	\| `--api-key` \| - \| `--api-key=your-api-key` \| 모델 API	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	97	--api-key=your-api-key \	CODE
HIGH	doc/development/ai_features/duo_chat.md	230	LANGCHAIN_API_KEY: '<your-api-key>'	CODE
HIGH	doc/development/ai_features/duo_chat.md	240	export LANGCHAIN_API_KEY='<your-api-key>'	CODE
HIGH	doc/user/project/import/github.md	438	curl --header "Authorization: Bearer <YOUR-TOKEN>" "https://{PROXY_HOSTNAME}/user"	CODE
HIGH	doc/user/project/import/github.md	455	curl --head --header "Authorization: Bearer <YOUR-TOKEN>" "https://{PROXY_DOMAIN}/api/v3/repos/{repository_path}/pulls?s	CODE
HIGH	doc/operations/observability/api_access.md	98	curl --header "SIGNOZ-API-KEY: <your_api_key>" \	CODE
HIGH	doc/operations/observability/api_access.md	102	Replace `<your_api_key>` with the key from the API Keys page, and	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	83	\| `--api-key` \| - \| `--api-key=your-api-key`	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	94	--api-key=your-api-key	CODE
HIGH	…ministration/gitlab_duo_self_hosted/troubleshooting.md	103	--api-key=your-api-key \	CODE

Excessive Try-Catch Wrapping93 hits · 126 pts

Severity	File	Line	Snippet	Context
MEDIUM	…locale/fr-fr/solutions/components/oss_license_check.md	376	print(f"Error fetching data: {e}")	CODE
LOW	doc-locale/fr-fr/user/storage_management_automation.md	821	except Exception as e:	CODE
LOW	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	926	except Exception as e:	CODE
LOW	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	938	except Exception as e:	CODE
LOW	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	972	except Exception as e:	CODE
LOW	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	1007	except Exception as e:	CODE
LOW	…r-fr/user/gitlab_duo/tutorials/fix_code_python_shop.md	1025	except Exception as e:	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	394	print(f"Error deleting article: {e}")	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	432	print(f"Error updating article: {e}")	CODE
LOW	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	595	except Exception as e:	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	597	print(f"Error retrieving books: {e}")	CODE
LOW	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	646	except Exception as e:	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	648	print(f"Error adding book: {e}")	CODE
LOW	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	678	except Exception as e:	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	680	print(f"Error deleting book: {e}")	CODE
LOW	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	735	except Exception as e:	CODE
MEDIUM	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	737	print(f"Error updating book: {e}")	CODE
LOW	…testing/configuration/customizing_analyzer_settings.md	473	except Exception as e:	CODE
LOW	…testing/configuration/customizing_analyzer_settings.md	497	except Exception as e:	CODE
LOW	…fuzzing/configuration/customizing_analyzer_settings.md	492	except Exception as e:	CODE
LOW	…fuzzing/configuration/customizing_analyzer_settings.md	516	except Exception as e:	CODE
MEDIUM	…locale/ja-jp/solutions/components/oss_license_check.md	376	print(f"Error fetching data: {e}")	CODE
LOW	doc-locale/ja-jp/user/storage_management_automation.md	821	except Exception as e:	CODE
LOW	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	926	except Exception as e:	CODE
LOW	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	938	except Exception as e:	CODE
LOW	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	972	except Exception as e:	CODE
LOW	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	1007	except Exception as e:	CODE
LOW	…a-jp/user/gitlab_duo/tutorials/fix_code_python_shop.md	1025	except Exception as e:	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	394	print(f"Error deleting article: {e}")	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	432	print(f"Error updating article: {e}")	CODE
LOW	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	595	except Exception as e:	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	597	print(f"Error retrieving books: {e}")	CODE
LOW	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	646	except Exception as e:	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	648	print(f"Error adding book: {e}")	CODE
LOW	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	678	except Exception as e:	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	680	print(f"Error deleting book: {e}")	CODE
LOW	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	735	except Exception as e:	CODE
MEDIUM	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	737	print(f"Error updating book: {e}")	CODE
LOW	…testing/configuration/customizing_analyzer_settings.md	480	except Exception as e:	CODE
LOW	…testing/configuration/customizing_analyzer_settings.md	504	except Exception as e:	CODE
LOW	…fuzzing/configuration/customizing_analyzer_settings.md	501	except Exception as e:	CODE
LOW	…fuzzing/configuration/customizing_analyzer_settings.md	525	except Exception as e:	CODE
LOW	…er/packages/package_registry/tutorial_generate_sbom.md	274	except Exception as e:	CODE
MEDIUM	…er/packages/package_registry/tutorial_generate_sbom.md	275	print(f"Error processing version history: {e}")	CODE
LOW	…er/packages/package_registry/tutorial_generate_sbom.md	312	except Exception as e:	CODE
MEDIUM	…er/packages/package_registry/tutorial_generate_sbom.md	313	print(f"Error merging package data: {e}")	CODE
MEDIUM	…locale/ko-kr/solutions/components/oss_license_check.md	376	print(f"Error fetching data: {e}")	CODE
LOW	doc-locale/ko-kr/user/storage_management_automation.md	821	except Exception as e:	CODE
LOW	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	926	except Exception as e:	CODE
LOW	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	938	except Exception as e:	CODE
LOW	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	972	except Exception as e:	CODE
LOW	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	1007	except Exception as e:	CODE
LOW	…o-kr/user/gitlab_duo/tutorials/fix_code_python_shop.md	1025	except Exception as e:	CODE
MEDIUM	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	394	print(f"Error deleting article: {e}")	CODE
MEDIUM	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	432	print(f"Error updating article: {e}")	CODE
LOW	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	595	except Exception as e:	CODE
MEDIUM	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	597	print(f"Error retrieving books: {e}")	CODE
LOW	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	646	except Exception as e:	CODE
MEDIUM	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	648	print(f"Error adding book: {e}")	CODE
LOW	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	678	except Exception as e:	CODE
33 more matches not shown…

Slop Phrases36 hits · 64 pts

Severity	File	Line	Snippet	Context
LOW	.gitlab/ci/global.gitlab-ci.yml	36	# If the job extending this also defines `needs`, make sure to update	COMMENT
LOW	app/models/project_feature.rb	8	# When updating this array, make sure to update rubocop/cop/gitlab/feature_available_usage.rb as well.	COMMENT
LOW	app/models/ci/unlock_pipeline_request.rb	13	# because we use `ZPOPMIN` to make sure to return the lowest/oldest request in terms of unix timestamp score.	COMMENT
LOW	app/models/concerns/issuable.rb	413	# When using CTE make sure to select the same columns that are on the group_by clause.	COMMENT
LOW	app/components/pajamas/toggle_component.rb	4	# To actually initialize the component, make sure to call the initToggle helper from ~/toggles.	COMMENT
LOW	app/graphql/types/work_items/widget_interface.rb	18	# Whenever a new widget is added make sure to update the spec to avoid N + 1 queries in	COMMENT
MEDIUM	app/validators/custom_uniqueness_validator.rb	35	# With this validator you can replace parts of the query with custom sql. Examples:	COMMENT
LOW	app/services/notification_service.rb	600	# If changing the next line don't forget to do the same in EE section	COMMENT
LOW	app/services/notification_service.rb	600	# If changing the next line don't forget to do the same in EE section	COMMENT
LOW	app/services/ci/unlock_pipeline_service.rb	45	# pipeline ID. So let's make sure to only unlock artifacts if the pipeline has not been unlocked.	COMMENT
LOW	…p/services/todos/destroy/destroyed_issuable_service.rb	10	# So when an issue/work item is deleted, we just make sure to delete todos for both target types	COMMENT
LOW	spec/fast_spec_helper.rb	13	# fast_spec_helper context. If you rename the class, make sure you update all references!	COMMENT
LOW	spec/support/helpers/login_helpers.rb	69	# When using this helper, make sure to assert on the expected page state after signing in,	COMMENT
MEDIUM	…ity/ci_configuration/create_service_shared_examples.rb	73	- pip install tox flake8 # you can also use tox	CODE
MEDIUM	…ity/ci_configuration/create_service_shared_examples.rb	218	- pip install tox flake8 # you can also use tox	CODE
LOW	spec/lib/gitlab/reference_extractor_spec.rb	347	# make sure you are not overriding existing prefix before changing this hash	COMMENT
LOW	spec/services/quick_actions/interpret_service_spec.rb	4770	# expected copy is added, ensuring we don't forget to update the copy.	COMMENT
LOW	spec/services/quick_actions/interpret_service_spec.rb	4770	# expected copy is added, ensuring we don't forget to update the copy.	COMMENT
LOW	workhorse/cmd/gitlab-workhorse/authorization_test.go	100	// Don't forget to validate the alg is what you expect:	COMMENT
LOW	workhorse/internal/testhelper/testhelper.go	183	// Don't forget to validate the alg is what you expect:	COMMENT
LOW	…s/browser_ui/3_create/repository/push_over_ssh_spec.rb	6	# Note: If you run these tests against GDK make sure you've enabled sshd	COMMENT
LOW	…er_ui/3_create/repository/protocol_v2_push_ssh_spec.rb	6	# Note: If you run this test against GDK make sure you've enabled sshd and	COMMENT
MEDIUM	public/-/speedscope/speedscope.026f36b0.js	23	"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.applyMiddleware=w,exports.bindActionCreators	CODE
MEDIUM	…/gitlab/ci/templates/Qualys-IaC-Security.gitlab-ci.yml	20	# Before you can use this template, add the following CI/CD variables to your	COMMENT
MEDIUM	lib/gitlab/ci/templates/C++.gitlab-ci.yml	17	# instead of calling g++ directly you can also use some build toolkit like make	COMMENT
MEDIUM	lib/gitlab/ci/templates/Python.gitlab-ci.yml	28	- pip install ruff tox # you can also use tox	CODE
LOW	lib/gitlab/ci/templates/Laravel.gitlab-ci.yml	53	# Don't forget to set the database config in .env.testing correctly	COMMENT
MEDIUM	lib/gitlab/ci/templates/Laravel.gitlab-ci.yml	61	# you can change this to to your frontend building script like	COMMENT
MEDIUM	lib/gitlab/ci/templates/Indeni.Cloudrail.gitlab-ci.yml	21	# Before you can use this template, get a Cloudrail API key from the Cloudrail web	COMMENT
LOW	lib/gitlab/ci/templates/OpenTofu.latest.gitlab-ci.yml	5	# Please make sure to use the component when your project is hosted on GitLab.com	COMMENT
LOW	lib/gitlab/ci/templates/Jobs/SAST.gitlab-ci.yml	55	# NOTE: When adding a new extension here, make sure to remove any matching extensions from `.semgrep-with-advanced-sast-	COMMENT
LOW	lib/gitlab/ci/templates/Jobs/SAST.latest.gitlab-ci.yml	52	# NOTE: When adding a new extension here, make sure to remove any matching extensions from `.semgrep-with-advanced-sast-	COMMENT
LOW	…gitlab/ci/templates/OpenTofu/Base.latest.gitlab-ci.yml	5	# Please make sure to use the component (https://gitlab.com/components/opentofu)	COMMENT
LOW	lib/gitlab/git/diff.rb	28	# If this value ever changes, make sure to create a migration to update	COMMENT
MEDIUM	data/deprecations/15-9-deprecate-queue-selector.yml	12	You can migrate away from queue selectors to [listening to all queues in all processes](https://docs.gitlab.com/admi	CODE
MEDIUM	…ta/deprecations/15-9-deprecate-ci-pre-clone-script.yml	9	The [`CI_PRE_CLONE_SCRIPT` variable](https://docs.gitlab.com/ci/runners/saas/linux_saas_runner/#pre-clone-script) su	CODE

Verbosity Indicators28 hits · 49 pts

Severity	File	Line	Snippet	Context
LOW	.gitlab/ci/per_test_coverage.gitlab-ci.yml	35	# Step 1: select the test queue for this slot (weekday delta + stale-rescue,	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	52	# Step 2: render FOSS rspec half of the child pipeline.	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	61	# Step 3: render EE rspec half of the child pipeline.	COMMENT
LOW⚡	.gitlab/ci/per_test_coverage.gitlab-ci.yml	71	# Step 4: render jest half of the child pipeline.	COMMENT
LOW⚡	.gitlab/duo/flows/appsec-review.yaml	5	# Step 1: Build comprehensive MR context	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	26	# Step 2: Pre-scan codebase for security-relevant context	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	47	# Step 3: Perform AppSec review	COMMENT
LOW	.gitlab/duo/flows/appsec-review.yaml	63	# Step 4: Validate findings with sanity check	COMMENT
LOW	app/assets/javascripts/locale/index.js	12	* won't be defined in the web worker context so we need to check if it is defined	COMMENT
LOW	…s/javascripts/notes/components/noteable_discussion.vue	178	* In these we need to check if the `original_position.position_type`	COMMENT
LOW⚡	…/tools/work_items/get_saved_view_work_items_service.rb	55	# Step 1: Fetch the saved view to get its filters and sort	COMMENT
LOW⚡	…/tools/work_items/get_saved_view_work_items_service.rb	61	# Step 2: Fetch work items using the saved view's filters	COMMENT
LOW	spec/frontend/drawio/drawio_editor_spec.js	178	// Step 5: The draw.io editor will send the downloaded diagram to the iframe	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	280	# Step 1: Get all tables with organization_id columns	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	291	# Step 2: Check each table individually to avoid complex joins	COMMENT
LOW	spec/lib/gitlab/organizations/sharding_key_spec.rb	316	# Step 3: Check foreign keys using Rails schema introspection	COMMENT
LOW	spec/lib/gitlab/database/collation_checker_spec.rb	179	expect(logger).to receive(:warn).with("\n# Step 1: Fix duplicate entries in unique indexes")	CODE
LOW⚡	spec/lib/gitlab/database/collation_checker_spec.rb	191	expect(logger).to receive(:warn).with("\n# Step 2: Rebuild affected indexes")	CODE
LOW⚡	spec/lib/gitlab/database/collation_checker_spec.rb	200	expect(logger).to receive(:warn).with("\n# Step 3: Refresh collation versions")	CODE
LOW	scripts/merge_request_query_differ.rb	45	# Step 1: Extract query fingerprints from MR	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	61	# Step 2: Get master fingerprints	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	68	# Step 3: Compare and filter	COMMENT
LOW⚡	scripts/merge_request_query_differ.rb	72	# Step 4: Report generation	COMMENT
LOW⚡	lib/gitlab/database/collation_checker.rb	312	logger.warn("\n# Step 1: Fix duplicate entries in unique indexes")	CODE
LOW⚡	lib/gitlab/database/collation_checker.rb	337	logger.warn("\n# Step 2: Rebuild affected indexes")	CODE
LOW	lib/gitlab/database/collation_checker.rb	348	logger.warn("\n# Step 3: Refresh collation versions")	CODE
LOW⚡	…/gitlab/graphql/authz/boundary_extractors/preloader.rb	54	# Step 1: for each node, load its boundary record	COMMENT
LOW⚡	…/gitlab/graphql/authz/boundary_extractors/preloader.rb	78	# Step 2: for tokens subject to enforcement we also need the root namespace	COMMENT

Docstring Block Structure4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	…-fr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	537	Create an article from a dictionary. Args: data (dict): Dictionary with article data	STRING
HIGH	…-jp/user/gitlab_duo/tutorials/duo_python_fix_errors.md	537	Create an article from a dictionary. Args: data (dict): Dictionary with article data	STRING
HIGH	…-kr/user/gitlab_duo/tutorials/duo_python_fix_errors.md	537	Create an article from a dictionary. Args: data (dict): Dictionary with article data	STRING
HIGH	doc/user/gitlab_duo/tutorials/duo_python_fix_errors.md	560	Create an article from a dictionary. Args: data (dict): Dictionary with article data	STRING

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	qa/qa/resource/user.rb	121	# TODO: implement separate delete method that only admin user can perform	COMMENT
LOW	lib/gitlab/git/repository.rb	670	# TODO: implement this method	COMMENT

Modern Structural Boilerplate1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/custom_models/create_index.py	23	logger = logging.getLogger(__name__)	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/custom_models/create_index.py	10		CODE

gitlabhq/gitlabhq

Open-Source Code Quality, Security and Technical Debt Review