2.4

Adjusted Signal

2.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

7.4K

Stars

Java

Language

663.9K

Lines of Code

5.5K

Files

415

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 238 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.3/100 · LOW

Are imports declared and package/API names verified? 177 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 92 finding(s).

PR Review Velocity Impact 10.4/100 · LOW

Which changes need focused human review? 415 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 114HIGH 1MEDIUM 5LOW 295

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 415 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators114 hits · 1228 pts

Severity	File	Line	Snippet	Context
CRITICAL	…/com/thoughtworks/go/config/BasicCruiseConfigTest.java	505	com.thoughtworks.go.plugin.domain.authorization.Capabilities capabilities = new com.thoughtworks.go.plugin.domai	CODE
CRITICAL	…/com/thoughtworks/go/config/BasicCruiseConfigTest.java	521	com.thoughtworks.go.plugin.domain.elastic.Capabilities capabilities = new com.thoughtworks.go.plugin.domain.elas	CODE
CRITICAL	…a/com/thoughtworks/go/config/PluginRoleConfigTest.java	329	com.thoughtworks.go.plugin.domain.authorization.Capabilities capabilities = new com.thoughtworks.go.plugin.domai	CODE
CRITICAL	…/domain/packagerepository/PackageRepositoriesTest.java	122	com.thoughtworks.go.plugin.api.material.packagerepository.PackageConfiguration packageConfiguration = new com.th	CODE
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	356	P4MaterialConfig p4MaterialConfig = com.thoughtworks.go.helper.MaterialConfigsMother.p4MaterialConfig();	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	373	SvnMaterialConfig material = com.thoughtworks.go.helper.MaterialConfigsMother.svnMaterialConfig("http://user:pas	CODE
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	380	HgMaterialConfig material = com.thoughtworks.go.helper.MaterialConfigsMother.hgMaterialConfig();	CODE
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	583	StageConfig stageConfig = com.thoughtworks.go.helper.StageConfigMother.custom("newStage", new AuthConfig());	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	703	downest.add(com.thoughtworks.go.helper.StageConfigMother.stageConfig("stage-2", new JobConfigs(new JobConfig(cis	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	814	cruiseConfig.addPipeline("default", com.thoughtworks.go.helper.PipelineConfigMother.pipelineConfig("test", new M	STRING
CRITICAL⚡	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	828	PackageRepository repository = com.thoughtworks.go.domain.packagerepository.PackageRepositoryMother.create("repo	STRING
CRITICAL⚡	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	830	com.thoughtworks.go.domain.packagerepository.PackageDefinitionMother.create("does-not-exist", "package-name"	STRING
CRITICAL⚡	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	834	cruiseConfig.addPipeline("default", com.thoughtworks.go.helper.PipelineConfigMother.pipelineConfig("test", new M	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	963	PipelineTemplateConfig template = com.thoughtworks.go.helper.PipelineTemplateConfigMother.createTemplate("templa	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	990	PipelineTemplateConfig template = com.thoughtworks.go.helper.PipelineTemplateConfigMother.createTemplate("templa	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlWriterTest.java	1002	PipelineTemplateConfig template = com.thoughtworks.go.helper.PipelineTemplateConfigMother.createTemplate("templa	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlLoaderTest.java	3006	com.thoughtworks.go.plugin.api.material.packagerepository.PackageConfiguration packageConfiguration = new com.th	STRING
CRITICAL	…oughtworks/go/config/MagicalGoConfigXmlLoaderTest.java	3392	PluggableTaskConfigStore.store().setPreferenceFor("plugin-id-1", new TaskPreference(new com.thoughtworks.go.plug	STRING
CRITICAL	…thoughtworks/go/config/GoFileConfigDataSourceTest.java	113	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAs("loser_boozer");	CODE
CRITICAL	…thoughtworks/go/config/GoFileConfigDataSourceTest.java	131	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAs("loser_boozer");	CODE
CRITICAL	…thoughtworks/go/config/GoFileConfigDataSourceTest.java	148	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAs("loser_boozer");	CODE
CRITICAL	…oughtworks/go/config/update/RoleConfigCommandTest.java	238	com.thoughtworks.go.plugin.domain.authorization.Capabilities capabilities = new com.thoughtworks.go.plugin.domai	CODE
CRITICAL	…test/java/com/thoughtworks/go/server/GoServerTest.java	96	AppServer appServer = com.thoughtworks.go.util.ReflectionUtil.getField(goServer, "server");	CODE
CRITICAL	…newsecurity/filters/AgentAuthenticationFilterTest.java	140	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAsRandomUser(originalRequest);	CODE
CRITICAL	…ity/filters/AbstractBasicAuthenticationFilterTest.java	202	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAs(request, BOB, PASSWORD);	CODE
CRITICAL	…urity/filters/AccessTokenAuthenticationFilterTest.java	235	com.thoughtworks.go.server.newsecurity.SessionUtilsHelper.loginAs(request, BOB);	CODE
CRITICAL	…/AccessTokenBasedPluginAuthenticationProviderTest.java	82	AuthenticationResponse responseToSend = new AuthenticationResponse(new com.thoughtworks.go.plugin.domain.authori	CODE
CRITICAL	…/AccessTokenBasedPluginAuthenticationProviderTest.java	98	AuthenticationResponse responseToSend = new AuthenticationResponse(new com.thoughtworks.go.plugin.domain.authori	CODE
CRITICAL	…s/go/server/service/SecurityAuthConfigServiceTest.java	108	new com.thoughtworks.go.plugin.domain.common.ValidationResult()));	CODE
CRITICAL	…erver/service/materials/PackageMaterialPollerTest.java	72	poller = new com.thoughtworks.go.server.service.materials.PackageMaterialPoller(packageRepositoryExtension);	CODE
CRITICAL⚡	…/service/materials/PluggableSCMMaterialPollerTest.java	139	com.thoughtworks.go.domain.materials.ModifiedFile f1 = new com.thoughtworks.go.domain.materials.ModifiedFile("f1	CODE
CRITICAL⚡	…/service/materials/PluggableSCMMaterialPollerTest.java	140	com.thoughtworks.go.domain.materials.ModifiedFile f2 = new com.thoughtworks.go.domain.materials.ModifiedFile("f2	CODE
CRITICAL⚡	…/service/materials/PluggableSCMMaterialPollerTest.java	141	com.thoughtworks.go.domain.materials.ModifiedFile f3 = new com.thoughtworks.go.domain.materials.ModifiedFile("f3	CODE
CRITICAL	…/java/com/thoughtworks/go/util/GoConfigFileHelper.java	595	new MagicalGoConfigXmlWriter(com.thoughtworks.go.util.ConfigElementImplementationRegistryMother.withNoPlugins())	CODE
CRITICAL	server/src/main/resources/spring-all-servlet.xml	62	pointcut="execution(* org.springframework.web.servlet.HandlerMapping.getHandler(..))"	CODE
CRITICAL	server/src/main/webapp/WEB-INF/rails/karma.conf.js	66	files: manifest.entrypoints.specRoot.assets.js.map((eachAsset) => {	CODE
CRITICAL	…app/WEB-INF/rails/app/models/value_stream_map_model.rb	144	@modified_time = com.thoughtworks.go.server.presentation.models.TimeConverter.toHumanReadableFuzzyDuration(modificat	CODE
CRITICAL	…app/WEB-INF/rails/app/controllers/stages_controller.rb	77	schedule_date: com.thoughtworks.go.api.base.JsonOutputWriter.jsonDate(stage_summary.getStage().scheduledDate	CODE
CRITICAL	…F/rails/app/controllers/value_stream_map_controller.rb	48	vsm = value_stream_map_service.getValueStreamMap(com.thoughtworks.go.config.CaseInsensitiveString.new(params[:pipeli	CODE
CRITICAL	…F/rails/app/assets/javascripts/lib/jquery-ui-1.14.2.js	6	!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){"use strict"	CODE
CRITICAL	…B-INF/rails/app/assets/javascripts/lib/jquery-3.7.1.js	2	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f	CODE
CRITICAL	…webapp/WEB-INF/rails/app/helpers/application_helper.rb	68	return com.thoughtworks.go.presentation.FlashMessageModel.new(Array(val).join(". ").to_s, key.to_s)	CODE
CRITICAL	…ver/src/main/webapp/WEB-INF/rails/spec/rspec_config.rb	31	com.thoughtworks.go.server.web.FlashMessageService.useFlash(com.thoughtworks.go.server.web.FlashMessageService::Flas	CODE
CRITICAL	…B-INF/rails/spec/models/value_stream_map_model_spec.rb	119	vsm.addUpstreamMaterialNode(SCMDependencyNode.new("git", "git", "Git"), com.thoughtworks.go.config.CaseInsensitiveSt	CODE
CRITICAL	…B-INF/rails/spec/models/value_stream_map_model_spec.rb	220	vsm.addUpstreamMaterialNode(SCMDependencyNode.new("git", "git", "Git"), com.thoughtworks.go.config.CaseInsensitiveSt	CODE
CRITICAL	…B-INF/rails/spec/models/value_stream_map_model_spec.rb	332	modification = com.thoughtworks.go.domain.materials.Modification.new("user", "comment", "", java.util.Date.new(), "r	CODE
CRITICAL	…B-INF/rails/spec/models/value_stream_map_model_spec.rb	333	return com.thoughtworks.go.domain.materials.Modifications.new([modification].to_java(com.thoughtworks.go.domain.mate	CODE
CRITICAL	…app/WEB-INF/rails/spec/support/misc_spec_extensions.rb	19	@user \|\|= com.thoughtworks.go.server.domain.Username.new(CaseInsensitiveString.new("some-user"), "display name")	CODE
CRITICAL	…s/spec/controllers/value_stream_map_controller_spec.rb	97	modification = com.thoughtworks.go.domain.materials.Modification.new("user", "comment", "", java.util.Date.new()	CODE
CRITICAL	…s/spec/controllers/value_stream_map_controller_spec.rb	98	modifications = com.thoughtworks.go.domain.materials.Modifications.new([modification].to_java(com.thoughtworks.g	CODE
CRITICAL	…s/spec/controllers/value_stream_map_controller_spec.rb	280	vsm = ValueStreamMap.new(material, nil, com.thoughtworks.go.domain.materials.Modification.new("user", "comment",	CODE
CRITICAL	…s/spec/controllers/value_stream_map_controller_spec.rb	307	material_config = com.thoughtworks.go.helper.MaterialConfigsMother.git('http://some.repo')	CODE
CRITICAL	…controllers/admin/pipelines_snippet_controller_spec.rb	170	validity = com.thoughtworks.go.config.validation.GoConfigValidity.valid()	CODE
CRITICAL	…controllers/admin/pipelines_snippet_controller_spec.rb	186	validity = com.thoughtworks.go.config.validation.GoConfigValidity.mergeConflict('error message')	CODE
CRITICAL	…controllers/admin/pipelines_snippet_controller_spec.rb	211	validity = com.thoughtworks.go.config.validation.GoConfigValidity.mergePreValidationError(nil)	CODE
CRITICAL	…rails/spec/controllers/admin/stages_controller_spec.rb	22	allow(@go_config_service).to receive(:checkConfigFileValid).and_return(com.thoughtworks.go.config.validation.GoConfi	CODE
CRITICAL⚡	…/WEB-INF/rails/spec/helpers/application_helper_spec.rb	223	supported << com.thoughtworks.go.plugin.domain.analytics.SupportedAnalytics.new("vsm", "id1", "title1") if suppo	CODE
CRITICAL⚡	…/WEB-INF/rails/spec/helpers/application_helper_spec.rb	224	supported << com.thoughtworks.go.plugin.domain.analytics.SupportedAnalytics.new("vsm", "id2", "title2") if suppo	CODE
CRITICAL⚡	…/WEB-INF/rails/spec/helpers/application_helper_spec.rb	225	com.thoughtworks.go.plugin.domain.analytics.Capabilities.new(supported)	CODE
CRITICAL	…ges/package_repositories/package_repository_widget.tsx	59	const linked = vnode.attrs.scrollOptions.package_repo_sm.sm.getTarget() === vnode.attrs.packageRepository.name();	CODE
54 more matches not shown…

Over-Commented Block139 hits · 139 pts

Severity	File	Line	Snippet	Context
LOW	docker/trivy-scan.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…houghtworks/go/config/materials/git/RefSpecHelper.java	101	}	COMMENT
LOW	…in/java/com/thoughtworks/go/config/GoConfigCloner.java	21	// Cloner to handle nullification of specific classes in config objects.	COMMENT
LOW	…/thoughtworks/go/domain/PipelineTimelineEntryTest.java	161	// this was not universally true in history in some cases where the pipeline name differs only by its case.	COMMENT
LOW	server/src/main/webapp/WEB-INF/init.rb	1	#	COMMENT
LOW	…app/WEB-INF/rails/app/models/value_stream_map_model.rb	1	#	COMMENT
LOW	…/src/main/webapp/WEB-INF/rails/app/models/go_config.rb	1	#	COMMENT
LOW	…EB-INF/rails/app/controllers/application_controller.rb	1	#	COMMENT
LOW	…app/WEB-INF/rails/app/controllers/stages_controller.rb	1	#	COMMENT
LOW	…bapp/WEB-INF/rails/app/controllers/admin_controller.rb	1	#	COMMENT
LOW	…F/rails/app/controllers/value_stream_map_controller.rb	1	#	COMMENT
LOW	…B-INF/rails/app/controllers/admin/stages_controller.rb	1	#	COMMENT
LOW	…ails/app/controllers/admin/configuration_controller.rb	1	#	COMMENT
LOW	…/app/controllers/admin/pipelines_snippet_controller.rb	1	#	COMMENT
LOW	…ain/webapp/WEB-INF/rails/app/assets/config/manifest.js	21		COMMENT
LOW	…EB-INF/rails/app/assets/new_stylesheets/_settings.scss	21	// -----------------------------	COMMENT
LOW	…EB-INF/rails/app/assets/new_stylesheets/_settings.scss	41	// 17. Dropdown	COMMENT
LOW	…EB-INF/rails/app/assets/new_stylesheets/_settings.scss	61	// 37. Prototype Position	COMMENT
LOW	…EB-INF/rails/app/assets/new_stylesheets/_settings.scss	921	// stylelint-enable	COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	41	// environments (Edge, IE11, Windows Phone) and possibly other environments.	COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1561	// finding a token with a value, a token identified as 'stopTrim', or	COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1581	// stopTrim	COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1601		COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1621		COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1641	// renders a plural label for a value with decimal precision.	COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1661		COMMENT
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	1681	// test and force the use of the `formatNumber` fallback function	COMMENT
LOW	…-INF/rails/app/assets/javascripts/lib/moment-2.31.0.js	1	//! moment.js	COMMENT
LOW	…n/webapp/WEB-INF/rails/app/helpers/pipelines_helper.rb	1	#	COMMENT
LOW	…n/webapp/WEB-INF/rails/app/helpers/materials_helper.rb	1	#	COMMENT
LOW	…app/WEB-INF/rails/app/helpers/flash_messages_helper.rb	1	#	COMMENT
LOW	…main/webapp/WEB-INF/rails/app/helpers/stages_helper.rb	1	#	COMMENT
LOW	…webapp/WEB-INF/rails/app/helpers/application_helper.rb	1	#	COMMENT
LOW	…EB-INF/rails/app/helpers/admin/authorization_helper.rb	1	#	COMMENT
LOW	server/src/main/webapp/WEB-INF/rails/config/routes.rb	1	#	COMMENT
LOW	…er/src/main/webapp/WEB-INF/rails/config/environment.rb	1	#	COMMENT
LOW	…er/src/main/webapp/WEB-INF/rails/config/application.rb	1	#	COMMENT
LOW	…er/src/main/webapp/WEB-INF/rails/config/application.rb	41	# Please, add to the `ignore` list any other `lib` subdirectories that do	COMMENT
LOW	server/src/main/webapp/WEB-INF/rails/config/boot.rb	1	#	COMMENT
LOW	…er/src/main/webapp/WEB-INF/rails/config/locales/en.yml	1	# Files in the config/locales directory are used for internationalization	COMMENT
LOW	…er/src/main/webapp/WEB-INF/rails/config/locales/en.yml	21	#	COMMENT
LOW	…webapp/WEB-INF/rails/config/environments/production.rb	1	#	COMMENT
LOW	…webapp/WEB-INF/rails/config/environments/production.rb	41	# Disable serving static files from `public/`, relying on NGINX/Apache to do so instead.	COMMENT
LOW	…webapp/WEB-INF/rails/config/environments/production.rb	61	# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.	COMMENT
LOW	…webapp/WEB-INF/rails/config/environments/production.rb	81	# config.cache_store = :mem_cache_store	COMMENT
LOW	…ebapp/WEB-INF/rails/config/environments/development.rb	1	#	COMMENT
LOW	…/main/webapp/WEB-INF/rails/config/environments/test.rb	1	#	COMMENT
LOW	…config/initializers/application_controller_renderer.rb	1	#	COMMENT
LOW	…config/initializers/application_controller_renderer.rb	21	# http_host: 'example.org',	COMMENT
LOW	…B-INF/rails/config/initializers/backtrace_silencers.rb	1	#	COMMENT
LOW	…webapp/WEB-INF/rails/config/initializers/mime_types.rb	1	#	COMMENT
LOW	…/rails/config/initializers/filter_parameter_logging.rb	1	#	COMMENT
LOW	…app/WEB-INF/rails/config/initializers/session_store.rb	1	#	COMMENT
LOW	…p/WEB-INF/rails/config/initializers/wrap_parameters.rb	1	#	COMMENT
LOW	…ain/webapp/WEB-INF/rails/config/initializers/assets.rb	1	#	COMMENT
LOW	…EB-INF/rails/config/initializers/cookies_serializer.rb	1	#	COMMENT
LOW	…EB-INF/rails/config/initializers/permissions_policy.rb	1	#	COMMENT
LOW	…EB-INF/rails/config/initializers/permissions_policy.rb	21		COMMENT
LOW	…F/rails/config/initializers/content_security_policy.rb	1	#	COMMENT
LOW	…F/rails/config/initializers/content_security_policy.rb	21	# https://guides.rubyonrails.org/security.html#content-security-policy-header	COMMENT
79 more matches not shown…

Hyper-Verbose Identifiers92 hits · 98 pts

Severity	File	Line	Snippet	Context
LOW	…EB-INF/rails/app/controllers/application_controller.rb	87	def render_localized_operation_result(result)	CODE
LOW	…app/assets/javascripts/vsm_analytics_pipeline_panel.js	20	var VSMAnalyticsPipelinePanel = function VSMAnalyticsPipelinePanel(cont) {	CODE
LOW	…NF/rails/app/assets/javascripts/console_log_tailing.js	32	function maybeHideGlobalBackToTopButton() {	CODE
LOW	…INF/rails/app/assets/javascripts/console_log_socket.js	78	function retryConnectionOrFallbackToPollingOnError(e) {	CODE
LOW	…rails/app/assets/javascripts/log_output_transformer.js	172	function appendNewLineIfDoesNotExists(line) {	CODE
LOW	…rails/app/assets/javascripts/log_output_transformer.js	180	function inlineMultilineExecutableTask(logLines) {	CODE
LOW	…p/WEB-INF/rails/app/assets/javascripts/vsm_renderer.js	107	function hideMultiplePipelineInstances() {	CODE
LOW	…rails/app/assets/javascripts/build_summary_observer.js	34	displayAnyErrorMessages: function displayErrorMessagesOnBuildDetails(json) {	CODE
LOW	…-INF/rails/app/assets/javascripts/build_detail_page.js	20	this.transform = function processTransformOnAllTransformers(logLines) {	CODE
LOW	…-INF/rails/app/assets/javascripts/build_detail_page.js	26	this.invoke = function processInvokeOnAllTransformers(callback, args) {	CODE
LOW	…/app/assets/javascripts/stage_detail_ajax_refresher.js	20	function registerCheckboxStatesToRememberUnder(elementOrSelector) {	CODE
LOW	…pp/assets/javascripts/dashboard_periodical_executor.js	16	function DashboardPeriodicalExecutor(url, pause_condition) {	CODE
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	661	function toLocaleStringSupportsLocales() {	CODE
LOW	…assets/javascripts/lib/moment-duration-format-2.3.2.js	671	function featureTestFormatterRounding(formatter) {	CODE
LOW	…rails/app/assets/javascripts/lib/jquery-pinOnScroll.js	71	function maybeCallUsingRequestAnimationFrame(func, arguments) {	CODE
LOW	…n/webapp/WEB-INF/rails/app/helpers/pipelines_helper.rb	31	def trigger_message_with_formatted_date_time(date_time, who)	CODE
LOW	…n/webapp/WEB-INF/rails/app/helpers/pipelines_helper.rb	44	def url_for_pipeline_value_stream_map(pipeline, options = {})	CODE
LOW	…n/webapp/WEB-INF/rails/app/helpers/materials_helper.rb	29	def render_comment_markup_for(comment, material_type, pipeline_name)	CODE
LOW	…n/webapp/WEB-INF/rails/app/helpers/materials_helper.rb	41	def render_comment_for_package_material(comment)	CODE
LOW	…n/webapp/WEB-INF/rails/app/helpers/materials_helper.rb	48	def render_tracking_tool_link_for_comment(comment, pipeline_name)	CODE
LOW	…main/webapp/WEB-INF/rails/app/helpers/stages_helper.rb	30	def stage_detail_path_for_identifier(identifier, options = {})	CODE
LOW	…webapp/WEB-INF/rails/app/helpers/application_helper.rb	147	def link_blocking_post_to_server(options = {})	CODE
LOW	…webapp/WEB-INF/rails/app/helpers/application_helper.rb	155	def javascript_post_to_server(options)	CODE
LOW	…s/spec/webpack/views/dashboard/pipeline_widget_spec.js	992	function stubTriggerOptionsWithInvalidData(pipelineName) {	CODE
LOW	…/spec/javascripts/console_log_foldable_section_spec.js	31	function detectPrefixesWhichArePartOfSection(section) {	CODE
LOW	…ils/spec/javascripts/value_stream_map_renderer_spec.js	536	function pipelineNodeWithRestriction(type, nodeName, parents, dependents, depth, view_type, message) {	CODE
LOW	…ebpack/rails-shared/plugin-endpoint-request-handler.js	38	defineFetchAnalyticsHandler: function defineFetchAnalyticsHandler(models) {	CODE
LOW	…webpack/models/environment_variables/spec/test_data.ts	31	function environmentVariableWithOriginInXmlJson(secure: boolean = false) {	CODE
LOW	…webpack/models/environment_variables/spec/test_data.ts	41	function environmentVariableWithOriginConfigRepoJson(secure: boolean = false) {	CODE
LOW	…bpack/models/materials/spec/pluggable_scm_crud_spec.ts	191	function scmCheckConnectionResponse() {	CODE
LOW	…WEB-INF/rails/webpack/models/mixins/errors_consumer.ts	140	function consumeForPipelineConfigSPA(response: any, model: any, path: string, allErrors: Errors): void {	CODE
LOW	…WEB-INF/rails/webpack/models/mixins/errors_consumer.ts	158	function addErrorsToModelForPipelineConfigSPA(errors: ErrorMap, model: any, path: string, allErrors: Errors): void {	CODE
LOW	…WEB-INF/rails/webpack/models/mixins/errors_consumer.ts	204	function addToUnmatchIfNotPluginProperty(container: any, unmatched: Errors, path: string, key: string, msg: string) {	CODE
LOW	…models/secret_configs/spec/secret_configs_crud_spec.ts	156	function secretConfigsWithAutocompleteSuggestionsResponse() {	CODE
LOW	…models/secret_configs/spec/secret_configs_crud_spec.ts	186	function deleteSecretConfigResponse(id: string) {	CODE
LOW	…webpack/models/shared/analytics_interaction_manager.js	91	function AnalyticsInteractionManager() {	CODE
LOW	…F/rails/webpack/models/shared/spec/permissions_spec.ts	109	function elasticAgentProfilePermission(): PermissionJSON {	CODE
LOW	…app/WEB-INF/rails/webpack/models/config_repos/types.ts	246	export function humanizedMaterialNameForMaterialType(materialType: string) {	CODE
LOW	…app/WEB-INF/rails/webpack/models/config_repos/types.ts	250	export function humanizedMaterialAttributeName(key: string) {	CODE
LOW	…rails/webpack/models/config_repos/config_repos_crud.ts	23	export function configRepoToSnakeCaseJSON(o: ConfigRepo) {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	28	function pipelineAssociationInXmlJson(): PipelineJSON {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	38	function pipelineAssociationInConfigRepoJson(): PipelineJSON {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	48	function agentAssociationInXmlJson() {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	56	function agentAssociationInConfigRepoJson() {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	64	function environmentVariableAssociationInXmlJson(secure: boolean = false) {	CODE
LOW⚡	…ails/webpack/models/new-environments/spec/test_data.ts	74	function environmentVariableAssociationInConfigRepoJson(secure: boolean = false) {	CODE
LOW	…p/WEB-INF/rails/webpack/models/users/role_selection.ts	46	export function computeBulkUpdateRolesJSON(rolesSelection: Map<GoCDRole, TriStateCheckbox>, users: Users) {	CODE
LOW	…ack/models/compare/spec/pipeline_instance_crud_spec.ts	124	function pipelineInstancesResponse() {	CODE
LOW	…dels/artifact_stores/spec/artifact_stores_crud_spec.ts	99	function listArtifactStoreResponse() {	CODE
LOW	…dels/artifact_stores/spec/artifact_stores_crud_spec.ts	110	function deleteArtifactStoreResponse() {	CODE
LOW	…bpack/models/authorization/specs/authorization_spec.ts	354	function arePermissionForEntitiesEqual(entity: PermissionForEntity, otherEntity: PermissionForEntity) {	CODE
LOW⚡	…/webpack/models/backups/spec/server_backup_api_spec.ts	165	function getCompletedServerBackupResponse() {	CODE
LOW⚡	…/webpack/models/backups/spec/server_backup_api_spec.ts	169	function getErrorServerBackupResponse() {	CODE
LOW⚡	…/webpack/models/backups/spec/server_backup_api_spec.ts	173	function getInProgressServerBackupResponse() {	CODE
LOW	…min_access_tokens/spec/admin_access_token_crud_spec.ts	78	function revokedAccessTokenResponse() {	CODE
LOW	…/webpack/models/package_repositories/spec/test_data.ts	69	export function pluginInfoWithPackageRepositoryExtension(): PluginInfoJSON {	CODE
LOW	…ge_repositories/spec/package_repositories_crud_spec.ts	144	function packageRepositoriesResponse() {	CODE
LOW	…ge_repositories/spec/package_repositories_crud_spec.ts	159	function packageRepositoryResponse() {	CODE
LOW	…ge_repositories/spec/package_repositories_crud_spec.ts	170	function deletePackageRepoResponse() {	CODE
LOW	…k/models/pipeline_configs/spec/pipeline_config_spec.ts	266	function stubPipelineCreateSuccess(config: PipelineConfig) {	CODE
32 more matches not shown…

Fake / Example Data63 hits · 72 pts

Severity	File	Line	Snippet	Context
LOW	…tworks/go/domain/config/ConfigurationPropertyTest.java	360	property.getSecretParams().getFirst().setValue("some-dummy-value");	CODE
LOW	…tworks/go/domain/config/ConfigurationPropertyTest.java	362	assertThat(property.getResolvedValue()).isEqualTo("some-dummy-value");	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	98	AuthenticationResponse response = new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.c	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	126	.thenReturn(new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.com"), Collections.	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	211	final UsernamePassword credentials = new UsernamePassword("foo@bar.com", PASSWORD);	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	215	when(authorizationExtension.authenticateUser(PLUGIN_ID_1, "foo@bar.com", PASSWORD, securityConfig.securityAu	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	233	AuthenticationResponse response = new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.c	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	257	AuthenticationResponse response = new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.c	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	286	when(authorizationExtension.authenticateUser(PLUGIN_ID_2, USERNAME, PASSWORD, List.of(ldapAuthConfig), Colle	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	301	AuthenticationResponse response = new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.c	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	328	final UsernamePassword credentials = new UsernamePassword("foo@bar.com", PASSWORD);	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	331	when(authorizationExtension.authenticateUser(PLUGIN_ID_1, "foo@bar.com", PASSWORD, securityConfig.securityAu	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	345	assertThat(newAuthenticationToken.getCredentials().getUsername()).isEqualTo("foo@bar.com");	CODE
LOW	…ers/PasswordBasedPluginAuthenticationProviderTest.java	360	AuthenticationResponse response = new AuthenticationResponse(new User(USERNAME, "display-name", "test@test.c	CODE
LOW	…works/go/server/service/MaterialConfigServiceTest.java	183	Map<MaterialConfig, Boolean> materialConfigs = materialConfigService.getMaterialConfigsToOperatePermissions(	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	229	k2.getSecretParams().getFirst().setValue("some-dummy-value");	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	248	assertConfiguration(scmConfiguration.getValue(), "k2", "some-dummy-value");	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	255	k2.getSecretParams().getFirst().setValue("some-dummy-value");	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	279	assertConfiguration(scmConfiguration.getValue(), "k2", "some-dummy-value");	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	286	k2.getSecretParams().getFirst().setValue("some-dummy-value");	CODE
LOW	…/service/materials/PluggableSCMMaterialPollerTest.java	309	assertConfiguration(scmConfiguration.getValue(), "k2", "some-dummy-value");	CODE
LOW	…-INF/rails/app/assets/javascripts/lib/lodash-4.18.1.js	62	i.delete(t),p}function gi(n){return Ls(Vi(n,X,_o),n+"")}function yi(n){return de(n,Pc,Os)}function di(n){return de(n,qc,	CODE
LOW	…app/assets/javascripts/lib/trimpath-template-1.0.38.js	318	// Example: exprs == 'firstName\|default:"John Doe"\|capitalize'.split('\|')	COMMENT
LOW	…app/assets/javascripts/lib/trimpath-template-1.0.38.js	347	var expr = exprArr[index]; // Ex: exprArr == [firstName,capitalize,default:"John Doe"]	CODE
LOW	…app/assets/javascripts/lib/trimpath-template-1.0.38.js	348	if (index <= 0) { // Ex: expr == 'default:"John Doe"'	CODE
LOW	…pp/WEB-INF/rails/webpack/models/users/spec/fixtures.ts	64	email: "admin@example.com",	CODE
LOW	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	91	const reallyLongText = "Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	225	content={"Lorem Ipsum is simply dummy text of the printing and typesetting in	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	226	"Lorem Ipsum has been the industry's standard dummy text ever since the 1500s	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	229	content={"Contrary to popular belief, Lorem Ipsum is not simply random text. I	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	229	content={"Contrary to popular belief, Lorem Ipsum is not simply random text. I	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	231	"The standard chunk of Lorem Ipsum used since the 1500s is reproduced below fo	CODE
LOW	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	463	helpText="Lorem ipsum is the dummy text used by the print and typesetting industry"	CODE
LOW	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	464	label="Lorem ipsum"	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	480	helpText={"Lorem ipsum dolor sit amet, consectetur adipiscing."}/>,	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	480	helpText={"Lorem ipsum dolor sit amet, consectetur adipiscing."}/>,	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	485	helpText={"Lorem ipsum dolor sit amet, consectetur adipiscing."}/>,	CODE
LOW⚡	…app/WEB-INF/rails/webpack/views/pages/kitchen_sink.tsx	485	helpText={"Lorem ipsum dolor sit amet, consectetur adipiscing."}/>,	CODE
LOW	…es/new-environments/spec/edit_pipelines_modal_spec.tsx	165	expect(searchInput.getAttribute("placeholder")).toBe("pipeline name");	CODE
LOW	…pages/new-environments/spec/edit_agents_modal_spec.tsx	162	expect(searchInput.getAttribute("placeholder")).toBe("agent hostname");	CODE
LOW	…ews/pages/compare/spec/select_instance_widget_spec.tsx	49	expect(helper.byTestId("form-field-input-")).toHaveAttr("placeholder", placeHolder);	CODE
LOW	…erver/transaction/TransactionCacheInterceptorTest.java	116	final Modification mod = new Modification("loser", "loser commiting a winner stroke", "foo@bar.com", new Date(),	CODE
LOW	…erver/transaction/TransactionCacheInterceptorTest.java	134	final Modification mod = new Modification("loser", "loser commiting a winner stroke", "foo@bar.com", new Date(),	CODE
LOW	…ks/go/server/dao/PipelineSqlMapDaoIntegrationTest.java	241	modifications.add(new Modification(MOD_USER, MOD_COMMENT, "foo@bar.com", YESTERDAY_CHECKIN, ModificationsMother.	CODE
LOW⚡	…rks/go/server/service/PipelineScheduleServiceTest.java	474	Modification modification1 = new Modification("lgao", "Fixing the not checked in files", "foo@bar.com", yesterda	CODE
LOW⚡	…rks/go/server/service/PipelineScheduleServiceTest.java	478	Modification modification2 = new Modification("committer", "Added the README file", "foo@bar.com", today, "100")	CODE
LOW⚡	…rks/go/server/service/PipelineScheduleServiceTest.java	482	Modification modification3 = new Modification("committer <html />", "Added the README file with <html />", "foo@	CODE
LOW	…ava/com/thoughtworks/go/remote/work/BuildWorkTest.java	119	<value>dummy-value</value>	CODE
LOW	…ava/com/thoughtworks/go/remote/work/BuildWorkTest.java	694	assertThat(consoleOut).contains(String.format("[go] overriding environment variable '%s' with value 'dummy-value	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	61	Modification modification = new Modification("user", "comment", "foo@bar.com", date, "15");	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	62	Modification anotherModificationWithoutLabel = new Modification("user", "comment", "foo@bar.com", date, "15");	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	63	Modification modificationWithLabel = new Modification("user", "comment", "foo@bar.com", date, "15");	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	75	Modification modification = new Modification("user", "comment", "foo@bar.com", new Date(), "pipe/1/stage/2", Jso	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	82	modification = new Modification("user", null, "foo@bar.com", new Date(), "pipe/1/stage/2", JsonHelper.toJsonExpo	CODE
LOW⚡	…thoughtworks/go/domain/materials/ModificationTest.java	91	Modification modification = new Modification("user", "comment", "foo@bar.com", new Date(), "pipe/1/stage/2");	CODE
LOW	…omain/materials/scm/PluggableSCMMaterialAgentTest.java	98	pluggableSCMMaterial.getScmConfig().getConfiguration().getFirst().getSecretParams().getFirst().setValue("some-du	CODE
LOW	…omain/materials/scm/PluggableSCMMaterialAgentTest.java	115	assertThat(scmConfiguration.getValue().get("k1").getValue()).isEqualTo("some-dummy-value");	CODE
LOW	…in/builder/pluggableTask/PluggableTaskConsoleTest.java	84	Lorem ipsum dolor sit amet, consectetur adipisicing elit,\s	CODE
LOW	…in/builder/pluggableTask/PluggableTaskConsoleTest.java	84	Lorem ipsum dolor sit amet, consectetur adipisicing elit,\s	CODE
LOW	…in/builder/pluggableTask/PluggableTaskConsoleTest.java	100	Lorem ipsum dolor sit amet, consectetur adipisicing elit,\s	CODE
3 more matches not shown…

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…p/WEB-INF/rails/config/initializers/wrap_parameters.rb	19	# This file contains settings for ActionController::ParamsWrapper which	COMMENT
MEDIUM	…EB-INF/rails/config/initializers/permissions_policy.rb	19	# Define an application-wide HTTP permissions policy. For further	COMMENT
MEDIUM	…F/rails/config/initializers/content_security_policy.rb	19	# Define an application-wide content security policy.	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…/com/thoughtworks/go/config/MergeCruiseConfigTest.java	54	// we append one more, remote pipeline in the same group as requested local ones to make test use MergeP	COMMENT

Slop Phrases2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…rver/src/main/webapp/WEB-INF/rails/spec/spec_helper.rb	62	# with RSpec, but feel free to customize to your heart's content.	COMMENT
MEDIUM	…EB-INF/rails/webpack/single_page_apps/new_dashboard.js	58	* That said, it's worth noting that this could be equivalently implemented as a genuine	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…in/java/com/thoughtworks/go/config/CachedGoConfig.java	76	//NOTE: This method is called on a thread from Spring	COMMENT

gocd/gocd

Open-Source Code Quality, Security and Technical Debt Review