An open source trusted cloud native registry project that stores, signs, and scans content.
This report summarizes scanner evidence for goharbor/harbor, a Go project with 29,528 GitHub stars. SynthScan examined 441,454 lines of code across 2957 source files, recording 2224 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 5.1 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2075 finding(s).
Are imports declared and package/API names verified? 122 finding(s).
Are wrappers, guards, and repeated structures necessary? 97 finding(s).
Which changes need focused human review? 2224 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2224 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/notary-migration-fix.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/copyright/header-check.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/copyright/header-check.sh | 21 | # 'fix' argument to automatically add headers to the missing files. | COMMENT |
| LOW | tests/integration.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/integration.sh | 201 | # go get github.com/dghubble/sling | COMMENT |
| LOW | tests/ci/api_common_install.sh | 21 | #---------------Set DNS for docker v20-----------------------# | COMMENT |
| LOW | tests/test-engine-image/dockerd-entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | make/photon/db/docker-entrypoint.sh | 21 | COMMENT | |
| LOW | make/photon/db/upgrade.sh | 41 | cat /tmp/pg_upgrade_internal.log | COMMENT |
| LOW | .github/workflows/codeql-analysis.yml | 41 | #- name: Autobuild | COMMENT |
| LOW | src/cmd/swagger/genyaml.go | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/cmd/standalone-db-migrator/main.go | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/cmd/exporter/main.go | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/copyright.tmpl.js | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/cypress/support/commands.ts | 1 | // *********************************************** | COMMENT |
| LOW | src/portal/cypress/support/commands.ts | 21 | // create various custom commands and overwrite | COMMENT |
| LOW | src/portal/cypress/support/commands.ts | 41 | // | COMMENT |
| LOW | src/portal/cypress/support/e2e.ts | 1 | // *********************************************************** | COMMENT |
| LOW | src/portal/src/main.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/app.component.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/app.module.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/app.component.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/harbor-routing.module.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/index.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …pp/route-reuse-strategy/harbor-route-reuse-strategy.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …ute-reuse-strategy/harbor-route-reuse-strategy.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/license/license.component.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/license/license.component.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/license/license.module.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …c/portal/src/app/not-found/not-found.component.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/not-found/not-found.module.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/not-found/not-found.component.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/shared/shared.module.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …app/shared/directives/max-length-ext.directive.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | src/portal/src/app/shared/directives/port.directive.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …/src/app/shared/directives/date-validator.directive.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …/src/app/shared/directives/max-length-ext.directive.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …ortal/src/app/shared/directives/port.directive.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …app/shared/directives/date-validator.directive.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …red/directives/scroll/scroll-section.directive.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …ared/directives/scroll/scroll-anchor.directive.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …p/shared/directives/scroll/scroll-section.directive.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …pp/shared/directives/scroll/scroll-anchor.directive.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …hared/directives/scroll/scroll-manager.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …app/shared/directives/scroll/scroll-manager.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …/app/shared/router-guard/auth-user-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …hared/router-guard/mode-guard-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …p/shared/router-guard/member-guard-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …uter-guard/member-permission-guard-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …/shared/router-guard/sign-in-guard-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …/shared/router-guard/oidc-guard-active.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …ed/router-guard/sign-in-guard-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …shared/router-guard/auth-user-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …p/shared/router-guard/system-admin-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …c/app/shared/router-guard/oidc-guard-active.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …red/router-guard/system-admin-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …app/shared/router-guard/mode-guard-activate.service.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …red/router-guard/member-guard-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …guard/member-permission-guard-activate.service.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| LOW | …rtal/src/app/shared/pipes/harbor-datetime.pipe.spec.ts | 1 | // Copyright Project Harbor Authors | COMMENT |
| 1918 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/migrate_chart/test_migrate_chart.py | 3 | CODE | |
| LOW | tools/migrate_chart/test_migrate_chart.py | 5 | CODE | |
| LOW | tools/migrate_chart/test_migrate_chart.py | 6 | CODE | |
| LOW | tools/migrate_chart/test_migrate_chart.py | 7 | CODE | |
| LOW | tests/apitests/python/test_tag_immutability.py | 1 | CODE | |
| LOW | tests/apitests/python/test_retention.py | 1 | CODE | |
| LOW | …ts/apitests/python/test_project_level_cve_allowlist.py | 1 | CODE | |
| LOW | …s/python/test_scan_image_artifact_in_public_project.py | 1 | CODE | |
| LOW | tests/apitests/python/test_scan_image_artifact.py | 1 | CODE | |
| LOW | tests/apitests/python/test_scan_image_artifact.py | 7 | CODE | |
| LOW | tests/apitests/python/test_quota_sorting.py | 1 | CODE | |
| LOW | tests/apitests/python/test_scan_data_export.py | 3 | CODE | |
| LOW | tests/apitests/python/test_user_crud.py | 1 | CODE | |
| LOW | tests/apitests/python/test_edit_project_creation.py | 1 | CODE | |
| LOW | tests/apitests/python/test_verify_metrics_enabled.py | 3 | CODE | |
| LOW | tests/apitests/python/test_push_files_by_oras.py | 1 | CODE | |
| LOW | tests/apitests/python/test_assign_role_to_ldap_group.py | 1 | CODE | |
| LOW | tests/apitests/python/test_assign_role_to_ldap_group.py | 7 | CODE | |
| LOW | tests/apitests/python/test_assign_role_to_ldap_group.py | 13 | CODE | |
| LOW | tests/apitests/python/test_add_sys_label_to_tag.py | 1 | CODE | |
| LOW | tests/apitests/python/test_banner_message.py | 3 | CODE | |
| LOW | …tests/python/test_user_limited_guest_get_repository.py | 1 | CODE | |
| LOW | tests/apitests/python/test_job_service_dashboard.py | 1 | CODE | |
| LOW | …ts/apitests/python/test_retain_image_last_pull_time.py | 1 | CODE | |
| LOW | tests/apitests/python/test_log_rotation.py | 1 | CODE | |
| LOW | …sts/apitests/python/test_system_level_stop_scan_all.py | 1 | CODE | |
| LOW | …/apitests/python/test_add_member_to_private_project.py | 1 | CODE | |
| LOW | tests/apitests/python/test_ldap_admin_role.py | 1 | CODE | |
| LOW | tests/apitests/python/test_ldap_admin_role.py | 4 | CODE | |
| LOW | tests/apitests/python/test_system_level_scan_all.py | 1 | CODE | |
| LOW | tests/apitests/python/test_tag_crud.py | 1 | CODE | |
| LOW | tests/apitests/python/test_tag_crud.py | 9 | CODE | |
| LOW | tests/apitests/python/test_tag_crud.py | 10 | CODE | |
| LOW | tests/apitests/python/test_tag_crud.py | 11 | CODE | |
| LOW | tests/apitests/python/test_tag_crud.py | 17 | CODE | |
| LOW | tests/apitests/python/test_stop_scan_image_artifact.py | 1 | CODE | |
| LOW | tests/apitests/python/test_stop_scan_image_artifact.py | 7 | CODE | |
| LOW | tests/apitests/python/test_stop_scan_image_artifact.py | 7 | CODE | |
| LOW | tests/apitests/python/test_p2p.py | 1 | CODE | |
| LOW | tests/apitests/python/test_p2p.py | 5 | CODE | |
| LOW | tests/apitests/python/test_p2p.py | 8 | CODE | |
| LOW | tests/apitests/python/test_p2p.py | 9 | CODE | |
| LOW | tests/apitests/python/test_p2p.py | 10 | CODE | |
| LOW | tests/apitests/python/test_robot_account.py | 1 | CODE | |
| LOW | tests/apitests/python/test_robot_account.py | 6 | CODE | |
| LOW | …sts/apitests/python/test_replication_from_dockerhub.py | 1 | CODE | |
| LOW | …/python/test_stop_sbom_generation_of_image_artifact.py | 1 | CODE | |
| LOW | …/python/test_stop_sbom_generation_of_image_artifact.py | 7 | CODE | |
| LOW | …/python/test_stop_sbom_generation_of_image_artifact.py | 7 | CODE | |
| LOW | tests/apitests/python/test_signature_inheritance.py | 3 | CODE | |
| LOW | tests/apitests/python/test_del_repo.py | 1 | CODE | |
| LOW | …ests/python/test_project_level_policy_content_trust.py | 1 | CODE | |
| LOW | tests/apitests/python/test_cosign_sign_artifact.py | 3 | CODE | |
| LOW | tests/apitests/python/test_referrers_api.py | 3 | CODE | |
| LOW | tests/apitests/python/test_manage_project_member.py | 1 | CODE | |
| LOW | tests/apitests/python/test_proxy_cache.py | 1 | CODE | |
| LOW | tests/apitests/python/test_proxy_cache.py | 15 | CODE | |
| LOW | tests/apitests/python/test_sys_cve_allowlists.py | 1 | CODE | |
| LOW | tests/apitests/python/test_podman_pull_push.py | 3 | CODE | |
| LOW | tests/apitests/python/test_webhook_crud.py | 1 | CODE | |
| 55 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/apitests/python/test_tag_immutability.py | 85 | def test_artifact_and_repo_is_undeletable(self): | CODE |
| LOW | tests/apitests/python/test_tag_immutability.py | 233 | #def test_replication_disability(self): | COMMENT |
| LOW | tests/apitests/python/test_robot_account.py | 147 | def verify_repository_pushable(self, project_access_list, system_ra_client): | CODE |
| LOW | tests/apitests/python/test_robot_account.py | 155 | def verify_repository_unpushable(self, project_access_list, system_ra_client, expected_login_error_message = "unauth | CODE |
| LOW | tests/apitests/python/test_proxy_cache.py | 159 | def do_validate_proxy_cache_filter(self, registry_type="harbor"): | CODE |
| LOW⚡ | tests/apitests/python/library/singularity.py | 10 | def set_singularity_login_env(user, password): | CODE |
| LOW⚡ | tests/apitests/python/library/singularity.py | 14 | def singularity_push_to_harbor(harbor_server, sif_file, project, image, tag): | CODE |
| LOW⚡ | tests/apitests/python/library/singularity.py | 20 | def push_singularity_to_harbor(from_URI, from_namespace, harbor_server, user, password, project, image, tag): | CODE |
| LOW | tests/apitests/python/library/user.py | 98 | def update_user_role_as_sysadmin(self, user_id, IsAdmin, **kwargs): | CODE |
| LOW | tests/apitests/python/library/user.py | 117 | def get_current_user_permissions(self, scope, relative, expect_status_code=200, expect_response_body=None, **kwargs) | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 45 | def set_configurations_of_project_creation_restriction(self, project_creation_restriction, expect_status_code = 200, | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 51 | def set_configurations_of_token_expiration(self, token_expiration, expect_status_code = 200, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 57 | def set_configurations_of_ldap(self, ldap_filter=None, ldap_group_attribute_name=None, | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 64 | def set_configurations_of_audit_log_forward(self, audit_log_forward_endpoint=None, skip_audit_log_database=None, exp | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 69 | def set_configurations_of_retain_image_last_pull_time(self, is_skip, expect_status_code = 200, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/configurations.py | 74 | def set_configurations_of_banner_message(self, message, message_type=None, closable=None, from_date=None, to_date=No | CODE |
| LOW | tests/apitests/python/library/artifact.py | 153 | def check_image_sbom_generation_result(self, project_name, repo_name, reference, expected_scan_status = "Success", * | CODE |
| LOW | tests/apitests/python/library/artifact.py | 182 | def waiting_for_reference_exist(self, project_name, repo_name, reference, ignore_not_found = True, period = 60, loop | CODE |
| LOW | tests/apitests/python/library/gc.py | 135 | def validate_deletion_success(self, gc_id, **kwargs): | CODE |
| LOW | tests/apitests/python/library/registry.py | 23 | def get_registry_id_by_endpoint(self, endpoint, **kwargs): | CODE |
| LOW | tests/apitests/python/library/docker_api.py | 66 | def docker_manifest_push_to_harbor(index, manifests, harbor_server, username, password, cfg_file = "./tests/apitests/pyt | CODE |
| LOW | tests/apitests/python/library/scan_all.py | 57 | def wait_until_scans_all_finish(self, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/replication.py | 24 | def trigger_replication_executions(self, rule_id, expect_status_code = 201, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/replication.py | 28 | def get_replication_executions(self, rule_id, expect_status_code = 200, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/replication.py | 33 | def create_replication_policy(self, dest_registry=None, src_registry=None, name=None, description="", | CODE |
| LOW | tests/apitests/python/library/replication.py | 58 | def check_replication_rule_should_exist(self, check_rule_id, expect_rule_name, expect_trigger = None, **kwargs): | CODE |
| LOW | tests/apitests/python/library/retention.py | 110 | def update_retention_add_rule(self, retention_id, selector_repository="**", selector_tag="**", with_untag="True", ex | CODE |
| LOW | tests/apitests/python/library/retention.py | 162 | def get_retention_exec_task_log(self, retention_id, exec_id, task_id, expect_status_code = 200, **kwargs): | CODE |
| LOW | tests/apitests/python/library/scan.py | 25 | def sbom_generation_of_artifact(self, project_name, repo_name, reference, expect_status_code = 202, expect_response_ | CODE |
| LOW | tests/apitests/python/library/tag_immutability.py | 11 | def create_tag_immutability_policy_rule(self, project_id, selector_repository_decoration = "repoMatches", | CODE |
| LOW | tests/apitests/python/library/tag_immutability.py | 45 | def list_tag_immutability_policy_rules(self, project_id, **kwargs): | CODE |
| LOW | tests/apitests/python/library/tag_immutability.py | 57 | def update_tag_immutability_policy_rule(self, project_id, rule_id, selector_repository_decoration = None, | CODE |
| LOW | tests/apitests/python/library/robot.py | 120 | def update_system_robot_account(self, robot_id, robot_name, robot_account_Permissions_list, disable = None, expect_s | CODE |
| LOW | tests/apitests/python/library/robot.py | 126 | def refresh_robot_account_secret(self, robot_id, robot_new_sec, expect_status_code = 200, **kwargs): | CODE |
| LOW | tests/apitests/python/library/scan_stop.py | 27 | def stop_sbom_generation_of_artifact(self, project_name, repo_name, reference, expect_status_code = 202, expect_resp | CODE |
| LOW | tests/apitests/python/library/scan_data_export.py | 13 | def get_scan_data_export_execution_list(self, expect_status_code=200, expect_response_body=None, **kwargs): | CODE |
| LOW | tests/apitests/python/library/scan_data_export.py | 24 | def get_scan_data_export_execution(self, execution_id, expect_status_code=200, expect_response_body=None, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/repository.py | 44 | def push_self_build_image_to_project(project_name, registry, username, password, image, tag, size=2, expected_login_erro | CODE |
| LOW⚡ | tests/apitests/python/library/repository.py | 53 | def push_special_image_to_project(project_name, registry, username, password, image, tags=None, size=1, expected_login_e | CODE |
| LOW⚡ | tests/apitests/python/library/repository.py | 60 | def push_local_image_to_project(registry, username, password, original_image, original_tag, target_image, target_tag): | CODE |
| LOW | tests/apitests/python/library/project.py | 11 | def is_member_exist_in_project(members, member_user_name, expected_member_role_id = None): | CODE |
| LOW⚡ | tests/apitests/python/library/project.py | 157 | def check_project_member_not_exist(self, project_id, member_user_name, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/project.py | 164 | def check_project_members_exist(self, project_id, member_user_name, expected_member_role_id = None, **kwargs): | CODE |
| LOW⚡ | tests/apitests/python/library/project.py | 171 | def update_project_member_role(self, project_id, member_id, member_role_id, expect_status_code = 200, **kwargs): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/util.py | 4 | def convert_int_to_readable_file_size(file_size): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 255 | def update_project_setting_metadata(self, project, public, contenttrust, preventrunning, preventseverity, scanonpush | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 292 | def update_project_setting_allowlist(self, project, reuse_sys_cve_whitelist, cve_id_list, **kwargs): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 326 | def update_interrogation_services(self, cron, **kwargs): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 362 | def add_project_robot_account(self, project, robot_account, **kwargs): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 483 | def add_tag_immutability_rule(self, project, tag_immutability_rule, **kwargs): | CODE |
| LOW | make/photon/prepare/test_purgeuploads.py | 47 | def test_validate_config_invalid_format(self): | CODE |
| LOW | make/photon/prepare/test_purgeuploads.py | 58 | def test_validate_config_invalid_format(self): | CODE |
| LOW | make/photon/prepare/test_purgeuploads.py | 69 | def test_validate_config_disabled_invalid_format(self): | CODE |
| LOW | make/photon/prepare/test_purgeuploads.py | 79 | def test_validate_config_invalid_string(self): | CODE |
| LOW | make/photon/prepare/utils/registry.py | 91 | def get_storage_provider_info(provider_name, provider_config): | CODE |
| LOW | make/photon/prepare/utils/nginx.py | 83 | def copy_nginx_location_configs_if_exist(src_config_dir, dst_config_dir, filename_pattern): | CODE |
| LOW | make/photon/prepare/utils/nginx.py | 87 | def add_additional_location_config(src, dst): | CODE |
| LOW | src/portal/src/app/shared/units/utils.ts | 168 | export function buildHttpRequestOptionsWithObserveResponse( | CODE |
| LOW | src/portal/src/app/shared/units/utils.ts | 961 | export function getPageSizeFromLocalStorage( | CODE |
| LOW | src/portal/src/app/shared/units/utils.ts | 979 | export function setPageSizeToLocalStorage(key: string, pageSize: number) { | CODE |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/migrate_chart/migrate_chart.py | 79 | except Exception as e: | CODE |
| LOW | tools/migrate_chart/migrate_chart.py | 134 | except Exception as e: | CODE |
| LOW | tests/apitests/python/test_tag_immutability.py | 226 | except Exception as e: | CODE |
| MEDIUM | tests/apitests/python/testutils.py | 80 | print("Error message:", each_err_msg) | CODE |
| LOW | tests/apitests/python/library/system.py | 80 | except Exception as e: | CODE |
| LOW | tests/apitests/python/library/docker_api.py | 111 | except Exception as err: | CODE |
| LOW | tests/apitests/python/library/docker_api.py | 140 | except Exception as err: | CODE |
| LOW | tests/apitests/python/library/docker_api.py | 180 | except Exception as err: | CODE |
| LOW | tests/apitests/python/library/docker_api.py | 227 | except Exception as err: | CODE |
| LOW | tests/apitests/python/library/oras.py | 42 | except Exception as e: | CODE |
| LOW | tests/apitests/python/library/oras.py | 57 | except Exception as e: | CODE |
| MEDIUM | tests/apitests/python/library/oras.py | 35 | def oras_push_cmd(harbor_server, project, repo, tag): | CODE |
| MEDIUM | tests/apitests/python/library/oras.py | 49 | def oras_pull(harbor_server, user, password, project, repo, tag): | CODE |
| LOW | tests/apitests/python/library/repository.py | 99 | except Exception as e: | CODE |
| LOW | tests/apitests/python/library/base.py | 100 | except Exception: | CODE |
| LOW | tests/apitests/python/library/base.py | 145 | except Exception as e: | CODE |
| MEDIUM | tests/apitests/python/library/base.py | 96 | def _get_id_from_header(header): | CODE |
| MEDIUM | tests/apitests/python/library/base.py | 140 | def run_command_with_popen(command): | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 131 | except Exception: | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 610 | except Exception as e: | CODE |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 674 | except Exception as e: | CODE |
| LOW | make/photon/prepare/utils/misc.py | 98 | except Exception as e: | CODE |
| LOW | make/photon/prepare/utils/configs.py | 76 | except Exception as e: | CODE |
| LOW | make/photon/prepare/utils/migration.py | 36 | except Exception as e: | CODE |
| LOW | make/photon/prepare/commands/prepare.py | 36 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/apitests/python/test_podman_pull_push.py | 63 | podman.push("{}:{}".format(self.source_image, self.source_tag), "{}/{}/{}:{}".format(harbor_server, project_name | CODE |
| HIGH | tests/apitests/python/library/docker_api.py | 179 | ret = self.DCLIENT.push(harbor_registry, tag) | CODE |
| HIGH | tests/apitests/python/library/docker_api.py | 223 | ret = self.DCLIENT.push(repo) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/migrate_chart/migrate_chart.py | 110 | CODE | |
| LOW | tests/apitests/python/library/artifact.py | 125 | CODE | |
| LOW | tests/apitests/python/library/artifact.py | 153 | CODE | |
| LOW | tests/apitests/python/library/project.py | 11 | CODE | |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 102 | CODE | |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 174 | CODE | |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 272 | CODE | |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 292 | CODE | |
| LOW | tests/robot-cases/Group3-Upgrade/prepare.py | 362 | CODE | |
| LOW | make/photon/prepare/models.py | 186 | CODE | |
| LOW | make/photon/prepare/utils/configs.py | 109 | CODE | |
| LOW | make/photon/prepare/utils/registry.py | 52 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/controller/scan/base_controller.go | 449 | // for controller to capture the stop flag, leverage the key recycled | COMMENT |
| MEDIUM | src/controller/tag/controller.go | 228 | // in order to leverage the signature and immutable status check | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema2/values.yaml | 181 | # it. To disable redirects, simply set `disableredirect` to `true` instead. | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema1/values.yaml | 181 | # it. To disable redirects, simply set `disableredirect` to `true` instead. | COMMENT |
| MEDIUM | src/pkg/scan/util.go | 75 | // TODO to leverage the artifactType of distribution spec v1.1 to specify the sbom type. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/copyright/header-check.sh | 23 | # Check if headers are fine: | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema2/values.yaml | 2 | # Set how to expose the service. Set the type as "ingress", "clusterIP", "nodePort" or "loadBalancer" | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema2/values.yaml | 135 | # Set it to "-" to disable dynamic provisioning | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema1/values.yaml | 2 | # Set how to expose the service. Set the type as "ingress", "clusterIP", "nodePort" or "loadBalancer" | COMMENT |
| LOW | src/pkg/chart/testdata/harbor-schema1/values.yaml | 135 | # Set it to "-" to disable dynamic provisioning | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/pkg/chart/testdata/harbor-schema2/values.yaml | 119 | # For storing images and charts, you can also use "azure", "gcs", "s3", | COMMENT |
| MEDIUM | src/pkg/chart/testdata/harbor-schema1/values.yaml | 119 | # For storing images and charts, you can also use "azure", "gcs", "s3", | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | make/photon/prepare/utils/cert.py | 63 | except subprocess.CalledProcessError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/apitests/python/test_security_hub.py | 151 | CODE | |
| LOW | tests/apitests/python/library/registry.py | 10 | CODE | |
| LOW | tests/apitests/python/library/replication.py | 33 | CODE | |
| LOW | tests/apitests/python/library/preheat.py | 12 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …erability-summary/vulnerability-summary.component.html | 98 | <div class="placeholder"> | CODE |
| LOW | src/server/middleware/security/session_test.go | 49 | Email: "admin@example.com", | CODE |
| LOW | src/controller/p2p/preheat/enforcer_test.go | 160 | return "fake-token", nil | CODE |
| LOW | src/controller/artifact/processor/cnab/cnab_test.go | 77 | "name": "Jane Doe", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | make/pushimage.sh | 102 | # --------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/pkg/reg/adapter/tencentcr/artifact_registry_test.go | 96 | // TODO: Add test cases. | COMMENT |
| LOW | src/pkg/reg/adapter/tencentcr/artifact_registry_test.go | 141 | // TODO: Add test cases. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/lib/retry/retry.go | 102 | // NOTE: This function will use exponential backoff and jitter for retrying, see | COMMENT |