An open-source AI agent that brings the power of Gemini directly into your terminal.
This report summarizes scanner evidence for google-gemini/gemini-cli, a TypeScript project with 108,643 GitHub stars. SynthScan examined 816,158 lines of code across 2659 source files, recording 794 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 677 finding(s).
Are imports declared and package/API names verified? 74 finding(s).
Are wrappers, guards, and repeated structures necessary? 565 finding(s).
Which changes need focused human review? 794 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 794 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | evals/skill_extraction.eval.ts | 181 | function createWorkflowComparisonSessions(withScratchpad: boolean): { | CODE |
| LOW | evals/skill_extraction.eval.ts | 327 | async function runExtractionAndReadState( | CODE |
| LOW | evals/skill_extraction.eval.ts | 559 | async function writeScratchpadStatsReport( | CODE |
| LOW | evals/skill_extraction.eval.ts | 599 | function expectSuccessfulExtractionRun(run: ExtractionRunSnapshot): void { | CODE |
| LOW | evals/skill_extraction.eval.ts | 656 | function parseScratchpadStatsTrials(): number { | CODE |
| LOW | evals/auto_memory_modes.eval.ts | 328 | async function expectSeedSessionEligible( | CODE |
| LOW | …ols/caretaker-agent/evals/triage/helpers/github_api.py | 69 | def _get_commit_sha_at_timestamp(owner: str, repo: str, created_at: str) -> str: | CODE |
| LOW | …/cloudrun/triage-worker/tests/test_integration_main.py | 268 | def test_validation_failure_triggers_retry(self, mock_triage): | CODE |
| LOW | …/cloudrun/triage-worker/tests/test_integration_main.py | 296 | def test_max_attempts_escalates_to_needs_human(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 23 | def test_acquire_lock_nonexistent_doc(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 30 | def test_acquire_lock_terminal_states(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 41 | def test_acquire_lock_two_strikes_constraint(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 59 | def test_acquire_lock_active_lock_by_other_holder(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 75 | def test_acquire_lock_expired_lock_by_other_holder(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 91 | def test_acquire_lock_success_proceed(self): | CODE |
| LOW⚡ | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 108 | def test_release_lock_nonexistent_doc(self): | CODE |
| LOW⚡ | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 115 | def test_release_lock_holder_mismatch(self): | CODE |
| LOW⚡ | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 123 | def test_release_lock_success_complete(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 144 | def test_release_lock_failure_triggers_retry(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_issues_store.py | 160 | def test_release_lock_failure_max_attempts_needs_human(self): | CODE |
| LOW | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 46 | def test_needs_info_comment_fallback(self): | CODE |
| LOW | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 66 | def test_missing_triage_metadata(self): | CODE |
| LOW | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 86 | def test_invalid_issue_id_format(self): | CODE |
| LOW⚡ | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 100 | def test_summary_missing_keys(self): | CODE |
| LOW⚡ | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 110 | def test_implementation_plan_missing_keys(self): | CODE |
| LOW⚡ | …r-agent/cloudrun/triage-worker/tests/test_validator.py | 120 | def test_testing_strategy_missing_keys(self): | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 67 | def test_main_missing_issue_details_exits_one(self): | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 73 | def test_main_claim_action_early_exits_zero(self): | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 85 | def test_main_auto_close_quality_flow( | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 115 | def test_main_needs_info_quality_flow( | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 142 | def test_main_ok_quality_flow( | CODE |
| LOW | …etaker-agent/cloudrun/triage-worker/tests/test_main.py | 177 | def test_main_failure_triggers_retry_release(self, mock_triage): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_agent_logger.py | 10 | def test_extract_final_output(self): | CODE |
| LOW | …gent/cloudrun/triage-worker/tests/test_agent_logger.py | 42 | def test_process_issue_triage_error(self, mock_agent, mock_upload): | CODE |
| LOW | …caretaker-agent/cloudrun/triage-worker/utils/events.py | 6 | def publish_issue_ready_for_code( | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 14 | def test_strip_ansi_color_codes(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 21 | def test_is_preflight_failure_allowed_single_approved_file(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 27 | def test_is_preflight_failure_allowed_multiple_approved_files(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 36 | def test_is_preflight_failure_allowed_generic_keyword(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 42 | def test_is_preflight_failure_allowed_unapproved_failure(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 51 | def test_is_preflight_failure_allowed_no_failures(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 57 | def test_should_ignore_preflight_failure_concatenates_streams(): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 57 | def test_sync_or_clone_repository(mock_cmd_run, mock_config): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 69 | async def test_run_regression_checks_pass(mock_cmd_run, mock_config): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 81 | async def test_run_regression_checks_bypassed_failure(mock_cmd_run, mock_preflight_filter, mock_config): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 96 | async def test_run_regression_checks_unapproved_failure(mock_cmd_run, mock_preflight_filter, mock_config): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 111 | def test_save_feedback_to_coding_workspace(mock_exists, mock_copyfile, mock_config): | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 131 | async def test_run_loop_success_pr_created( | CODE |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 168 | async def test_run_loop_max_attempts_exceeded(mock_sync, mock_setup, mock_cmd_run, mock_release_lock, mock_acquire_lock, | CODE |
| LOW | …taker-agent/cloudrun/pr-generator/tests/test_worker.py | 15 | def test_ignore_raw_ws_msg_filter(): | CODE |
| LOW | …taker-agent/cloudrun/pr-generator/tests/test_worker.py | 65 | async def test_worker_main_orchestration_error(mock_orchestrator_cls, mock_config_cls): | CODE |
| LOW | …taker-agent/cloudrun/pr-generator/tests/test_worker.py | 80 | async def test_worker_main_unexpected_exception(mock_orchestrator_cls, mock_config_cls): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 21 | def test_sanitize_relative_path_valid(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 27 | def test_sanitize_relative_path_traversal(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 33 | def test_sanitize_relative_path_absolute(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 39 | def test_sanitize_relative_path_null_bytes_and_empty(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 47 | def test_sanitize_identifier_valid(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 53 | def test_sanitize_identifier_injection_stripping(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 59 | def test_sanitize_identifier_empty_fallback(): | CODE |
| LOW⚡ | …t/cloudrun/pr-generator/tests/test_command_executor.py | 68 | def test_command_execution_error_attributes(): | CODE |
| 461 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/core/src/code_assist/server.ts | 592 | return error.response.data.error.details.some( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 282 | mocks.mockStdout.write.mock.calls.filter((call: unknown[]) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1504 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1539 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1567 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1600 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1631 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1667 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1728 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1741 | const titleWritesDelayed = mocks.mockStdout.write.mock.calls.filter( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1795 | const titleWritesMid = mocks.mockStdout.write.mock.calls.filter( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1807 | const titleWritesEnd = mocks.mockStdout.write.mock.calls.filter( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1854 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1924 | const titleWritesAfterOutput = mocks.mockStdout.write.mock.calls.filter( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1938 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1973 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 2010 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 2046 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 3373 | const clearViewportCalls = mocks.mockStdout.write.mock.calls.filter( | CODE |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 3652 | mocks.mockStdout.write.mock.calls.filter((call: unknown[]) => | CODE |
| CRITICAL | .github/workflows/unassign-inactive-assignees.yml | 194 | const prAuthor = event.source.issue.user.login.toLowerCase(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | .gcp/release-docker.yml | 2 | # Step 1: Install root dependencies (includes workspaces) | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 8 | # Step 2: Authenticate for Docker (so we can push images to the artifact registry) | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 14 | # Step 3: Build workspace packages | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 20 | # Step 4: Determine Docker Image Tag | COMMENT |
| LOW | .gcp/release-docker.yml | 38 | # Step 5: Build sandbox container image | COMMENT |
| LOW | .gcp/release-docker.yml | 51 | # Step 8: Publish sandbox container image | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 6 | # Step 1: Install root dependencies | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 12 | # Step 2: Authenticate for Docker | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 18 | # Step 3: Build workspace packages | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 24 | # Step 4: Build Development Image | COMMENT |
| LOW | integration-tests/file-system-interactive.test.ts | 41 | // Step 1: Read the file | COMMENT |
| LOW | integration-tests/file-system-interactive.test.ts | 52 | // Step 2: Write the file | COMMENT |
| LOW | docs/cli/generation-settings.md | 100 | ### Step 1: Alias Resolution | COMMENT |
| LOW | docs/cli/generation-settings.md | 110 | ### Step 2: Override Application | COMMENT |
| LOW | docs/cli/tutorials/plan-mode-steering.md | 31 | ## Step 1: Start a complex task | COMMENT |
| LOW | docs/cli/tutorials/plan-mode-steering.md | 40 | ## Step 2: Steer the research phase | COMMENT |
| LOW | docs/cli/tutorials/plan-mode-steering.md | 52 | ## Step 3: Refine the design mid-turn | COMMENT |
| LOW | docs/cli/tutorials/plan-mode-steering.md | 64 | ## Step 4: Approve and implement | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 27 | ## Step 1: Create a new extension | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 48 | ## Step 2: Understand the extension files | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 131 | ## Step 3: Add extension settings | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 169 | ## Step 4: Link your extension | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 193 | ## Step 5: Add a custom command | COMMENT |
| LOW | docs/extensions/writing-extensions.md | 228 | ## Step 6: Add a custom `GEMINI.md` | STRING |
| LOW | docs/extensions/writing-extensions.md | 304 | ## Step 8: Release your extension | STRING |
| LOW | docs/hooks/writing-hooks.md | 22 | ### Step 1: Create your hook script | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 42 | // Step 1: Normalize newest messages. | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 49 | // Step 2: Check if truncation is needed based on the token threshold (High Watermark) | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 54 | // Step 3: Split into keep/truncate boundaries | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 271 | // Step 1: Initial state | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 295 | // Step 2: Mutate p2 into m2 | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 309 | // Step 3: Upstream adds new nodes (p4, p5) | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 40 | // Step 1: Save client information | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 47 | // Step 2: Save code verifier | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 50 | // Step 3: Set up callback server | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 62 | // Step 4: Redirect to authorization | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 66 | // Step 5: Save tokens after exchange | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 49 | // Step 2: Consult | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 57 | // Step 3: Alignment Check | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 60 | // Step 4: Review & Approval | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 290 | ### Step 1: Understanding the Skill with Concrete Examples | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 316 | ### Step 2: Planning the Reusable Skill Contents | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 349 | ### Step 3: Initializing the Skill | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 382 | ### Step 4: Edit the Skill | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 445 | ### Step 5: Packaging a Skill | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 482 | ### Step 6: Installing and Reloading a Skill | COMMENT |
| LOW | packages/core/src/skills/builtin/skill-creator/SKILL.md | 509 | ### Step 7: Iterate | COMMENT |
| LOW | …s/vscode-ide-companion/scripts/check-vscode-release.js | 11 | // Step 1: Find the commit hash of the last release | COMMENT |
| LOW⚡ | …s/vscode-ide-companion/scripts/check-vscode-release.js | 46 | // Step 2: Check for new commits | COMMENT |
| LOW⚡ | …s/vscode-ide-companion/scripts/check-vscode-release.js | 53 | // Step 3: Check for dependency changes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | .gcp/release-docker.yml | 2 | # Step 1: Install root dependencies (includes workspaces) | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 8 | # Step 2: Authenticate for Docker (so we can push images to the artifact registry) | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 14 | # Step 3: Build workspace packages | COMMENT |
| LOW⚡ | .gcp/release-docker.yml | 20 | # Step 4: Determine Docker Image Tag | COMMENT |
| LOW | .gcp/release-docker.yml | 38 | # Step 5: Build sandbox container image | COMMENT |
| LOW | .gcp/release-docker.yml | 51 | # Step 8: Publish sandbox container image | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 6 | # Step 1: Install root dependencies | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 12 | # Step 2: Authenticate for Docker | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 18 | # Step 3: Build workspace packages | COMMENT |
| LOW⚡ | .gcp/development-worker.yml | 24 | # Step 4: Build Development Image | COMMENT |
| LOW | integration-tests/file-system-interactive.test.ts | 41 | // Step 1: Read the file | COMMENT |
| LOW | integration-tests/file-system-interactive.test.ts | 52 | // Step 2: Write the file | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 42 | // Step 1: Normalize newest messages. | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 49 | // Step 2: Check if truncation is needed based on the token threshold (High Watermark) | COMMENT |
| LOW⚡ | packages/core/src/context/agentHistoryProvider.ts | 54 | // Step 3: Split into keep/truncate boundaries | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 271 | // Step 1: Initial state | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 295 | // Step 2: Mutate p2 into m2 | COMMENT |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 309 | // Step 3: Upstream adds new nodes (p4, p5) | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 40 | // Step 1: Save client information | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 47 | // Step 2: Save code verifier | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 50 | // Step 3: Set up callback server | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 62 | // Step 4: Redirect to authorization | COMMENT |
| LOW⚡ | packages/core/src/mcp/mcp-oauth-provider.test.ts | 66 | // Step 5: Save tokens after exchange | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 49 | // Step 2: Consult | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 57 | // Step 3: Alignment Check | COMMENT |
| LOW⚡ | …ckages/core/src/prompts/planModeNonInteractive.test.ts | 60 | // Step 4: Review & Approval | COMMENT |
| LOW | …s/vscode-ide-companion/scripts/check-vscode-release.js | 11 | // Step 1: Find the commit hash of the last release | COMMENT |
| LOW⚡ | …s/vscode-ide-companion/scripts/check-vscode-release.js | 46 | // Step 2: Check for new commits | COMMENT |
| LOW⚡ | …s/vscode-ide-companion/scripts/check-vscode-release.js | 53 | // Step 3: Check for dependency changes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | evals/snapshot_fidelity.eval.ts | 127 | // Use a self-consistency of 3 runs to get a robust majority vote | COMMENT |
| MEDIUM | integration-tests/json-output.test.ts | 143 | // come up with a more robust solution. | COMMENT |
| MEDIUM | integration-tests/hooks-system.test.ts | 1643 | // This makes the test more robust by creating multiple start/stop cycles | COMMENT |
| MEDIUM | packages/core/src/tools/edit.ts | 1450 | .map((l) => l.trimEnd()); // Trim end of search lines to be more robust | CODE |
| MEDIUM | packages/core/src/utils/memoryImportProcessor.test.ts | 384 | // This test verifies the robust findCodeRegions implementation | COMMENT |
| MEDIUM | packages/core/src/utils/memoryDiscovery.ts | 28 | // TODO: Integrate with a more robust server-side logger if available/appropriate. | COMMENT |
| MEDIUM | packages/core/src/utils/atCommandUtils.ts | 233 | // We rely on validatePath and Config.validatePathAccess for robust checking | COMMENT |
| MEDIUM | packages/core/src/utils/buildFileUtils.ts | 100 | // Consistent path resolution using a single, robust helper to handle traversals (. or ..) and absolute/relative conve | COMMENT |
| MEDIUM | packages/core/src/utils/memoryDiscovery.test.ts | 92 | // Use maxRetries option for robust cleanup without race conditions | COMMENT |
| MEDIUM | packages/core/src/utils/bfsFileSearch.ts | 15 | // TODO: Integrate with a more robust server-side logger. | COMMENT |
| MEDIUM | packages/core/src/utils/filesearch/fileSearch.test.ts | 739 | // Perform a more specific search that should leverage the broad search's cached results | COMMENT |
| MEDIUM | packages/core/src/sandbox/windows/GeminiSandbox.cs | 474 | // Ensure we use the 8.3 long-name equivalent for robust security checks per guidelines | COMMENT |
| MEDIUM | …ages/core/src/sandbox/windows/WindowsSandboxManager.ts | 323 | // Track both versions for inheritance checks to be robust against symlinks. | COMMENT |
| MEDIUM | packages/cli/src/ui/utils/commandUtils.ts | 256 | // Copies a string snippet to the clipboard with robust OSC-52 support. | COMMENT |
| MEDIUM | packages/cli/src/utils/skillUtils.ts | 121 | // Reuse existing robust git cloning utility from extension manager. | COMMENT |
| MEDIUM | packages/a2a-server/src/config/config.ts | 195 | // NOTE: Monkey-patching process.cwd and process.chdir via AsyncLocalStorage is a robust way | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …gent/cloudrun/pr-generator/workflow/db/db_interface.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | integration-tests/clipboard-linux.test.ts | 81 | ); | COMMENT |
| LOW | docs/reference/policy-engine.md | 301 | # (Optional) The name of an MCP server. Can be combined with toolName | COMMENT |
| LOW | docs/reference/policy-engine.md | 321 | # it effectively matches from the start of the command. | COMMENT |
| LOW | scripts/build_package.js | 1 | /** | COMMENT |
| LOW | scripts/sandbox_command.js | 1 | /** | COMMENT |
| LOW | scripts/start.js | 1 | /** | COMMENT |
| LOW | scripts/send_gemini_request.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/build.js | 1 | /** | COMMENT |
| LOW | scripts/clean.js | 1 | /** | COMMENT |
| LOW | scripts/generate-git-commit-info.js | 1 | /** | COMMENT |
| LOW | scripts/build_vscode_companion.js | 1 | /** | COMMENT |
| LOW | scripts/build_sandbox.js | 1 | /** | COMMENT |
| LOW | scripts/copy_files.js | 1 | #!/usr/bin/env node | COMMENT |
| LOW | scripts/harvest_api_reliability.sh | 1 | #!/bin/bash | COMMENT |
| LOW | scripts/copy_bundle_assets.js | 1 | /** | COMMENT |
| LOW | packages/core/src/utils/editCorrector.ts | 141 | // Regex explanation: | COMMENT |
| LOW | packages/core/src/utils/schemaValidator.ts | 21 | // See: https://ajv.js.org/options.html#strict-mode-options | COMMENT |
| LOW | packages/core/src/services/shellExecutionService.ts | 81 | return command; | COMMENT |
| LOW | packages/core/src/services/modelConfigService.ts | 21 | // In many cases the model (or model config alias) is sufficient to fully | COMMENT |
| LOW | …ckages/core/src/services/shellExecutionService.test.ts | 461 | COMMENT | |
| LOW | packages/core/src/policy/config.ts | 381 | // Priority bands (tiers): | COMMENT |
| LOW | packages/core/src/policy/policies/read-only.toml | 1 | # Priority system for policy rules: | COMMENT |
| LOW | packages/core/src/policy/policies/yolo.toml | 1 | # Priority system for policy rules: | COMMENT |
| LOW | packages/core/src/policy/policies/yolo.toml | 21 | # 4.2: MCP servers with trust=true (persistent trusted servers) | COMMENT |
| LOW | packages/core/src/policy/policies/plan.toml | 1 | # Priority system for policy rules: | COMMENT |
| LOW | packages/core/src/policy/policies/plan.toml | 21 | # 4.2: MCP servers with trust=true (persistent trusted servers) | COMMENT |
| LOW | packages/core/src/policy/policies/write.toml | 1 | # Priority system for policy rules: | COMMENT |
| LOW | packages/cli/src/ui/utils/terminalCapabilityManager.ts | 81 | // eslint-disable-next-line no-control-regex | COMMENT |
| LOW | packages/cli/src/ui/components/InboxDialog.tsx | 921 | <Text color={theme.text.secondary}>No items in inbox.</Text> | COMMENT |
| LOW | packages/cli/src/ui/components/InboxDialog.tsx | 981 | // terminals. Every visible row — skill items, patch items, memory-patch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | integration-tests/checkpointing.test.ts | 164 | execFileSync('git', ['config', 'user.email', 'user@example.com'], { | CODE |
| LOW | integration-tests/browser-policy.test.ts | 232 | GEMINI_API_KEY: 'fake-key', | CODE |
| LOW | integration-tests/acp-telemetry.test.ts | 70 | GEMINI_API_KEY: 'fake-key', | CODE |
| LOW | docs/tools/ask-user.md | 80 | "placeholder": "for example, my-awesome-app" | CODE |
| LOW | …s/test-utils/assets/test-servers/google-workspace.json | 502 | "description": "A simple search term (e.g., \"Budget Q3\"), a Google Drive URL, or a full query string (e.g. | CODE |
| LOW | …ckages/core/src/tools/definitions/base-declarations.ts | 109 | export const ASK_USER_QUESTION_PARAM_PLACEHOLDER = 'placeholder'; | CODE |
| LOW | packages/core/src/context/testing/contextTestUtils.ts | 99 | id: id || 'dummy_id', | CODE |
| LOW | …re/src/context/processors/toolMaskingProcessor.test.ts | 32 | id: 'dummy_id', | CODE |
| LOW | …re/src/context/processors/toolMaskingProcessor.test.ts | 69 | id: 'dummy_id', | CODE |
| LOW | packages/core/src/core/contentGenerator.test.ts | 76 | vi.stubEnv('GEMINI_API_KEY', 'fake-key'); | CODE |
| LOW | packages/core/src/services/memoryService.test.ts | 76 | getUserSkillsDir: vi.fn().mockReturnValue('/tmp/fake-user-skills'), | CODE |
| LOW | packages/cli/examples/scrollable-list-demo.tsx | 29 | .map(() => 'lorem ipsum '.repeat((index % 3) + 1).trim()) | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 145 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 188 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 204 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 221 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 236 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 299 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 339 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/validateNonInterActiveAuth.test.ts | 436 | process.env['GEMINI_API_KEY'] = 'fake-key'; | CODE |
| LOW | packages/cli/src/ui/AppContainer.test.tsx | 3206 | apiKey: 'fake-key', | CODE |
| LOW | packages/cli/src/ui/components/MainContent.test.tsx | 1423 | text: `Paragraph ${index + 1}: ${'lorem ipsum '.repeat(20)}`, | CODE |
| LOW⚡ | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2183 | const longText = `not only five centuries, but also the leap into electronic typesetting, remaining essentially un | CODE |
| LOW⚡ | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2186 | It is a long established fact that a reader will be distracted by the readable content of a page when looking at its lay | CODE |
| LOW⚡ | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2189 | Contrary to popular belief, Lorem Ipsum is not simply random text. It has roots in a piece of classical Latin literature | CODE |
| LOW | …s/cli/src/ui/components/shared/ScrollableList.test.tsx | 39 | .map(() => 'lorem ipsum '.repeat((index % 3) + 1).trim()) | CODE |
| LOW | packages/cli/src/ui/hooks/useHistoryManager.test.ts | 275 | const email = 'user@example.com'; | CODE |
| LOW | packages/cli/src/ui/hooks/useHistoryManager.test.ts | 292 | const email = 'user@example.com'; | CODE |
| LOW | packages/a2a-server/src/config/workspace_trust.test.ts | 31 | vi.stubEnv('GEMINI_API_KEY', 'dummy-key-for-eval'); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/caretaker-agent/evals/triage/runner.py | 67 | except Exception: | CODE |
| LOW | tools/caretaker-agent/evals/triage/runner.py | 112 | except Exception as e: | CODE |
| LOW | tools/caretaker-agent/evals/triage/judge.py | 174 | except Exception as e: | CODE |
| LOW | …s/caretaker-agent/evals/triage/tools/sync_firestore.py | 46 | except Exception as e: | CODE |
| LOW | …ols/caretaker-agent/evals/triage/helpers/github_api.py | 98 | except Exception as e: | CODE |
| LOW | …ls/caretaker-agent/evals/triage/helpers/sync_to_gcs.py | 46 | except Exception as e: | CODE |
| LOW | tools/caretaker-agent/evals/triage/helpers/summary.py | 239 | except Exception as e: | CODE |
| LOW | …ker-agent/evals/triage/helpers/generate_golden_spec.py | 39 | except Exception: | CODE |
| LOW | tools/caretaker-agent/cloudrun/triage-worker/main.py | 50 | except Exception as e: | CODE |
| LOW | tools/caretaker-agent/cloudrun/triage-worker/main.py | 95 | except Exception as e: | CODE |
| LOW | tools/caretaker-agent/cloudrun/triage-worker/main.py | 170 | except Exception as e: | CODE |
| LOW | …er-agent/cloudrun/triage-worker/triage_orchestrator.py | 105 | except Exception as e: | CODE |
| LOW | …caretaker-agent/cloudrun/triage-worker/utils/egress.py | 57 | except Exception as e: | CODE |
| LOW | …ker-agent/cloudrun/triage-worker/utils/agent_logger.py | 39 | except Exception as e: | CODE |
| LOW | …ker-agent/cloudrun/triage-worker/utils/agent_logger.py | 99 | except Exception as e: | CODE |
| LOW | …caretaker-agent/cloudrun/triage-worker/utils/events.py | 52 | except Exception as e: | CODE |
| LOW | …retaker-agent/cloudrun/pr-generator/workflow/worker.py | 45 | except Exception as e: | CODE |
| LOW | …retaker-agent/cloudrun/pr-generator/workflow/worker.py | 53 | except Exception as err: | CODE |
| LOW | …ent/cloudrun/pr-generator/workflow/command_executor.py | 148 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/agent_runner.py | 249 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 57 | except Exception: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 156 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 262 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 286 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 301 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 319 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 322 | except Exception as e: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 334 | except Exception as db_err: | CODE |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 637 | except Exception as e: | CODE |
| LOW | …-agent/cloudrun/pr-generator/workflow/github_client.py | 93 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/cloudrun/triage-worker/tests/test_integration_main.py | 14 | CODE | |
| LOW | …/cloudrun/triage-worker/tests/test_integration_main.py | 14 | CODE | |
| LOW | …/cloudrun/triage-worker/tests/test_integration_main.py | 15 | CODE | |
| LOW | …t/cloudrun/pr-generator/tests/test_preflight_filter.py | 6 | CODE | |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 6 | CODE | |
| LOW | …agent/cloudrun/pr-generator/tests/test_orchestrator.py | 12 | CODE | |
| LOW | …taker-agent/cloudrun/pr-generator/tests/test_worker.py | 7 | CODE | |
| LOW | …t/cloudrun/pr-generator/tests/test_command_executor.py | 6 | CODE | |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 29 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE | |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 17 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/send_gemini_request.sh | 2 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/send_gemini_request.sh | 4 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/send_gemini_request.sh | 28 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/harvest_api_reliability.sh | 4 | # ------------------------------- | COMMENT |
| MEDIUM | packages/test-utils/src/perf-test-harness.ts | 489 | // ─── Baseline management ───────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/test-utils/src/perf-test-harness.ts | 538 | // ─── Helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …core/src/agents/browser/browserAgentInvocation.test.ts | 270 | // ─── Structured SubagentProgress emission tests ─────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/changelogs/index.md | 808 | [https://allen.hutchison.org/2025/11/26/the-guardrails-of-autonomy/](https://allen.hutchison.org/2025/11/26/the-guar | CODE |
| MEDIUM | docs/hooks/writing-hooks.md | 148 | ### RAG-based Tool Filtering (BeforeToolSelection) | COMMENT |
| MEDIUM | packages/core/src/core/turn.ts | 253 | // A turn manages the agentic loop turn within the server context. | COMMENT |
| MEDIUM | packages/cli/src/nonInteractiveCliAgentSession.ts | 330 | // Create LegacyAgentSession — owns the agentic loop | COMMENT |
| MEDIUM | packages/cli/src/nonInteractiveCliAgentSession.ts | 347 | // Start the agentic loop (runs in background) | COMMENT |
| MEDIUM | packages/a2a-server/src/commands/init.ts | 118 | // The executor will handle the entire agentic loop, including | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ent/cloudrun/pr-generator/workflow/command_executor.py | 81 | Executes a command safely using direct argument lists without shell invocation. Args: cmd: The comm | STRING |
| HIGH | …r-agent/cloudrun/pr-generator/workflow/agent_runner.py | 130 | Launches and manages an asynchronous conversation with an Antigravity Agent. Args: role: Label repr | STRING |
| HIGH | …-agent/cloudrun/pr-generator/workflow/github_client.py | 36 | Submits a POST request to GitHub to create a new Pull Request. Args: branch_name: The feature branc | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/cli/custom-commands.md | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} | STRING |
| HIGH | docs/extensions/writing-extensions.md | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} | STRING |
| HIGH | …ns/examples/custom-commands/commands/fs/grep-code.toml | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | README.md | 149 | export GEMINI_API_KEY="YOUR_API_KEY" | CODE |
| HIGH | README.md | 165 | export GOOGLE_API_KEY="YOUR_API_KEY" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/gemini-cli-bot-brain.yml | 317 | gh pr create --draft --title "🤖 Gemini Bot Productivity Optimizations" --body "Automated changes generated | CODE |
| HIGH | .github/workflows/gemini-cli-bot-brain.yml | 325 | gh pr create --draft --title "🤖 Gemini Bot Productivity Optimizations" --body "Automated changes generat | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/review.sh | 67 | # Create a detached worktree from origin/main | COMMENT |
| MEDIUM | .github/workflows/test-build-binary.yml | 85 | # Create the P12 file | COMMENT |
| MEDIUM | .github/workflows/test-build-binary.yml | 88 | # Create a temporary keychain | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/create_alias.sh | 24 | # Check if the alias already exists | COMMENT |
| LOW | scripts/review.sh | 55 | # Check if it's actually a registered worktree | COMMENT |
| LOW | .github/workflows/eval-pr.yml | 77 | # Check if comment already exists to avoid spamming | COMMENT |
| LOW | .github/workflows/eval-pr.yml | 147 | # Check if user is a maintainer | COMMENT |
| LOW | .github/workflows/release-patch-3-release.yml | 255 | # Check if this was a version consistency failure | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/caretaker-agent/evals/triage/tools/dataset_metrics.py | 15 | CODE | |
| LOW | …ls/caretaker-agent/evals/triage/helpers/sync_to_gcs.py | 9 | CODE | |
| LOW | tools/caretaker-agent/evals/triage/helpers/summary.py | 70 | CODE | |
| LOW | tools/caretaker-agent/cloudrun/triage-worker/main.py | 33 | CODE | |
| LOW | …r-agent/cloudrun/pr-generator/workflow/agent_runner.py | 123 | CODE | |
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 145 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 57 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/send_gemini_request.sh | 18 | # Usage: | COMMENT |
| LOW | scripts/harvest_api_reliability.sh | 9 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r-agent/cloudrun/pr-generator/workflow/orchestrator.py | 84 | def _setup_workspace(self) -> None: | CODE |
| LOW | …er-agent/cloudrun/pr-generator/workflow/db/__init__.py | 33 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …gent/cloudrun/pr-generator/workflow/db/db_interface.py | 325 | CODE |