Home / google / gvisor
AI Slop Code RIsk Monitor

google/gvisor

Application Kernel for Containers

8.5 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for google/gvisor, a Go project with 19,629 GitHub stars. SynthScan examined 808,167 lines of code across 2928 source files, recording 4929 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 8.5 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

8.5
Adjusted Signal
8.5
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
19.6K
Stars
Go
Language
808.2K
Lines of Code
2.9K
Files
4.9K
Pattern Hits
2026-10-12
Scan Date
0.07
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 25.6/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 4707 finding(s).

Hallucinated Dependency & Supply Chain Risk 11.9/100 · LOW

Are imports declared and package/API names verified? 209 finding(s).

Agent Over-Engineering Ratio 0.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 44 finding(s).

PR Review Velocity Impact 34.6/100 · MEDIUM

Which changes need focused human review? 4929 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 194HIGH 20MEDIUM 40LOW 4675

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4929 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block4606 hits · 4551 pts
SeverityFileLineSnippetContext
LOWwebhook/main.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWwebhook/pkg/cli/cli.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWwebhook/pkg/injector/webhook.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWwebhook/pkg/injector/certs.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWg3doc/user_guide/sdk/python_docs_api_test.py1# Copyright 2026 The gVisor Authors.COMMENT
LOWg3doc/proposals/runtime_dedicate_os_thread.md101run, and the M that selects the G then needs to transfer its P to the locked M,COMMENT
LOWtools/install_containerd.sh1#!/bin/bashCOMMENT
LOWtools/workspace_status.sh1#!/bin/bashCOMMENT
LOWtools/builkite-check-paths.sh1#!/bin/bashCOMMENT
LOWtools/make_release.sh1#!/bin/bashCOMMENT
LOWtools/make_release.sh41export DEBIAN_FRONTEND=noninteractiveCOMMENT
LOWtools/make_python_release.sh1#!/bin/bashCOMMENT
LOWtools/lint.sh1#!/bin/bashCOMMENT
LOWtools/gen_compile_commands.py1#!/usr/bin/env python3COMMENT
LOWtools/go_branch.sh1#!/bin/bashCOMMENT
LOWtools/build_cover.sh1#!/bin/bashCOMMENT
LOWtools/build_cover.sh81# sync/atomic.AddInt32), which will not work. We may be able to re-enableCOMMENT
LOWtools/gopackagesdriver.sh1#!/usr/bin/env bashCOMMENT
LOWtools/tag_release.sh1#!/bin/bashCOMMENT
LOWtools/devcontainer-init.sh1#!/usr/bin/env bashCOMMENT
LOWtools/check_license_headers.sh1#!/bin/bashCOMMENT
LOWtools/make_apt.sh1#!/bin/bashCOMMENT
LOWtools/go_fieldenum/main.go1// Copyright 2021 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/main.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/cmd/install/install.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/cluster/cluster.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/util/util.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/spec/spec.go1// Copyright 2023 The gVisor Authors.COMMENT
LOW…ls/gvisor_k8s_tool/provider/clusterflag/clusterflag.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/provider/gke/gke.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gvisor_k8s_tool/provider/kubectl/kubectl.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/checklinkname/check_linkname.go1// Copyright 2021 The gVisor Authors.COMMENT
LOWtools/checklinkname/check_linkname.go141// function declared as “localname” in the source code. If theCOMMENT
LOWtools/checklinkname/test/test_unsafe.go1// Copyright 2021 The gVisor Authors.COMMENT
LOWtools/parsers/version.go1// Copyright 2019 The gVisor Authors.COMMENT
LOWtools/parsers/go_parser_test.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWtools/parsers/go_parser.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWtools/parsers/go_parser.go41 suite.Benchmarks = append(suite.Benchmarks, bm)COMMENT
LOWtools/parsers/parser_main.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWtools/profiletool/profiletool.go1// Copyright 2024 The gVisor Authors.COMMENT
LOWtools/profiletool/profiletool.go301 if len(aggA.keys) == 0 || len(aggB.keys) == 0 {COMMENT
LOWtools/compat/realpath.py1#!/usr/bin/env python3COMMENT
LOWtools/gpu/cos_drivers_test.sh1#!/bin/bashCOMMENT
LOWtools/gpu/all_drivers_test.sh1#!/bin/bashCOMMENT
LOWtools/gpu/main.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gpu/drivers/install_driver.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/gpu/drivers/install_driver_test.go1// Copyright 2023 The gVisor Authors.COMMENT
LOWtools/go_marshal/main.go1// Copyright 2019 The gVisor Authors.COMMENT
LOWtools/go_marshal/analysis/analysis_unsafe.go1// Copyright 2019 The gVisor Authors.COMMENT
LOWtools/go_marshal/analysis/analysis_unsafe.go41// Internally, we populate the type with random data by doing an unsafe cast toCOMMENT
LOWtools/go_marshal/test/test.go1// Copyright 2019 The gVisor Authors.COMMENT
LOWtools/go_marshal/test/test.go141//COMMENT
LOWtools/go_marshal/test/test.go161// +marshalCOMMENT
LOWtools/go_marshal/test/dynamic.go1// Copyright 2021 The gVisor Authors.COMMENT
LOWtools/go_marshal/test/benchmark_test.go1// Copyright 2019 The gVisor Authors.COMMENT
LOWtools/go_marshal/test/marshal_test.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWtools/go_marshal/test/marshal_test.go421 }COMMENT
LOWtools/go_marshal/test/escape/escape.go1// Copyright 2020 The gVisor Authors.COMMENT
LOWtools/go_marshal/test/external/external.go1// Copyright 2019 The gVisor Authors.COMMENT
LOW…al/gomarshal/generator_interfaces_primitive_newtype.go1// Copyright 2020 The gVisor Authors.COMMENT
4546 more matches not shown…
Hallucination Indicators194 hits · 2040 pts
SeverityFileLineSnippetContext
CRITICALpkg/sentry/vfs/opath.go128 stat, err := fd.vfsfd.vd.mount.fs.impl.StatAt(ctx, rp, opts)CODE
CRITICALpkg/sentry/vfs/opath.go141 statfs, err := fd.vfsfd.vd.mount.fs.impl.StatFSAt(ctx, rp)CODE
CRITICALpkg/sentry/vfs/file_description.go241 fd.vd.mount.vfs.numFiles.Add(-1)CODE
CRITICALpkg/sentry/vfs/file_description.go595 stat, err = fd.vd.mount.fs.impl.StatAt(ctx, rp, opts)CODE
CRITICALpkg/sentry/vfs/file_description.go622 err := fd.vd.mount.fs.impl.SetStatAt(ctx, rp, opts)CODE
CRITICALpkg/sentry/vfs/file_description.go644 statfs, err := fd.vd.mount.fs.impl.StatFSAt(ctx, rp)CODE
CRITICALpkg/sentry/vfs/file_description.go801 names, err := fd.vd.mount.fs.impl.ListXattrAt(ctx, rp, size)CODE
CRITICALpkg/sentry/vfs/file_description.go830 val, err := fd.vd.mount.fs.impl.GetXattrAt(ctx, rp, *opts)CODE
CRITICALpkg/sentry/vfs/file_description.go846 err := fd.vd.mount.fs.impl.SetXattrAt(ctx, rp, *opts)CODE
CRITICALpkg/sentry/vfs/file_description.go866 err := fd.vd.mount.fs.impl.RemoveXattrAt(ctx, rp, name)CODE
CRITICALpkg/sentry/vfs/file_description.go885 acl, err := fd.vd.mount.fs.impl.GetPosixACLAt(ctx, rp, t)CODE
CRITICALpkg/sentry/vfs/file_description.go901 acl, mode, err := fd.vd.mount.fs.impl.SetPosixACLAt(ctx, rp, t, acl, clearSGID)CODE
CRITICALpkg/sentry/vfs/file_description.go911 return fd.vd.mount.fs.impl.Sync(ctx)CODE
CRITICALpkg/sentry/fsimpl/devpts/replica.go107 rfd.inode.t.ld.replicaWaiter.EventRegister(e)CODE
CRITICALpkg/sentry/fsimpl/devpts/replica.go113 rfd.inode.t.ld.replicaWaiter.EventUnregister(e)CODE
CRITICALpkg/sentry/fsimpl/gofer/socket.go106 e.dentry.inode.fs.renameMu.RLock()CODE
CRITICALpkg/sentry/fsimpl/gofer/socket.go108 e.dentry.inode.fs.renameMu.RUnlock()CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1848 d.inode.fs.dentryCache.mu.Lock()CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1851 d.inode.fs.dentryCache.dentries.Remove(&d.cacheEntry)CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1852 d.inode.fs.dentryCache.dentries.PushFront(&d.cacheEntry)CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1853 d.inode.fs.dentryCache.mu.Unlock()CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1859 d.inode.fs.dentryCache.dentries.PushFront(&d.cacheEntry)CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1863 d.inode.fs.dentryCache.mu.Unlock()CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1880 d.inode.fs.dentryCache.mu.Lock()CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1881 d.inode.fs.dentryCache.dentries.Remove(&d.cacheEntry)CODE
CRITICAL⚡pkg/sentry/fsimpl/gofer/gofer.go1883 d.inode.fs.dentryCache.mu.Unlock()CODE
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go752 ims, err := rw.file.inode.fs.mf.MapInternal(seg.FileRangeOf(seg.Range().Intersect(mr)), hostarch.Read)CODE
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go920 if rw.file.inode.fs.mf.IsDiskBacked() {CODE
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go926 fd, err := rw.file.inode.fs.mf.DataFD(fr)CODE
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go938 ims, err := rw.file.inode.fs.mf.MapInternal(fr, hostarch.Write)CODE
CRITICALpkg/sentry/fsimpl/cgroup2fs/memory.go138 mc.m.c.fs.treeMu.RLock()CODE
CRITICALpkg/sentry/fsimpl/cgroup2fs/memory.go140 mc.m.c.fs.treeMu.RUnlock()CODE
CRITICALpkg/sentry/kernel/task_acct.go224 t.tg.pidns.owner.mu.RLock()CODE
CRITICALpkg/sentry/kernel/task_acct.go225 defer t.tg.pidns.owner.mu.RUnlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go309 t.tg.pidns.owner.mu.Lock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go310 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go320 t.tg.pidns.owner.mu.Lock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go321 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1100 t.tg.pidns.owner.mu.RLock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1102 t.tg.pidns.owner.mu.RUnlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1106 t.tg.pidns.owner.mu.RUnlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1113 t.tg.pidns.owner.mu.RUnlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1303 t.tg.pidns.owner.mu.Lock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1304 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1308 t.tg.pidns.owner.mu.RLock()CODE
CRITICAL⚡pkg/sentry/kernel/ptrace.go1309 defer t.tg.pidns.owner.mu.RUnlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go129 t.tg.pidns.owner.mu.RLock()CODE
CRITICALpkg/sentry/kernel/ptrace.go130 defer t.tg.pidns.owner.mu.RUnlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go472 t.tg.pidns.owner.mu.Lock()CODE
CRITICALpkg/sentry/kernel/ptrace.go473 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go485 t.tg.pidns.owner.mu.Lock()CODE
CRITICALpkg/sentry/kernel/ptrace.go486 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go521 t.tg.pidns.owner.mu.Lock()CODE
CRITICALpkg/sentry/kernel/ptrace.go522 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go576 t.tg.pidns.owner.mu.Lock()CODE
CRITICALpkg/sentry/kernel/ptrace.go577 defer t.tg.pidns.owner.mu.Unlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go676 t.tg.pidns.owner.mu.RLock()CODE
CRITICALpkg/sentry/kernel/ptrace.go677 defer t.tg.pidns.owner.mu.RUnlock()CODE
CRITICALpkg/sentry/kernel/ptrace.go699 t.tg.pidns.owner.mu.RLock()CODE
CRITICALpkg/sentry/kernel/ptrace.go700 defer t.tg.pidns.owner.mu.RUnlock()CODE
134 more matches not shown…
AI Slop Vocabulary27 hits · 87 pts
SeverityFileLineSnippetContext
MEDIUMtest/packetimpact/dut/dut.go137 // Scanning log lines is not the most robust way, we could pass a fileCOMMENT
MEDIUMtest/root/crictl_test.go424// - Creates directories and a socket for containerd to utilize.COMMENT
MEDIUMrunsc/fsgofer/lisafs_test.go26// Note that these are not supposed to be extensive or robust tests. These unitCOMMENT
MEDIUMrunsc/cgroup/systemd.go295// generating the path of slice. Essentially, test-a-b.slice becomesCOMMENT
MEDIUMrunsc/container/metric_server_test.go285// TestContainerMetricsRobustAgainstRestarts that exporting metrics is robust against metric serverCOMMENT
MEDIUMrunsc/container/container.go705 // CPU stats can utilize host cgroups for accuracy.COMMENT
MEDIUMpkg/shim/v1/utils/volumes.go164// - (Essentially we set it to what the admission controller said.)COMMENT
MEDIUMpkg/sentry/vfs/mount_unsafe.go123 // Essentially every mountTable will contain at least /proc, /sys, andCOMMENT
MEDIUMpkg/sentry/fsimpl/overlay/filesystem.go1338 // Essentially no gVisor filesystem supports RENAME_WHITEOUT, so just do aCOMMENT
MEDIUMpkg/sentry/platform/kvm/machine_amd64.go242 // capability, but it means that this method should be robust toCOMMENT
MEDIUMpkg/sentry/time/parameters.go46 // TODO(b/68779214): make error correction more robust to delayedCOMMENT
MEDIUMpkg/sentry/control/state_cuda.go134 // Option 1 is more robust, however, support for --get-state was only addedCOMMENT
MEDIUM⚡pkg/sentry/kernel/task_futex.go53// GetRobustList sets the robust futex list for the task.COMMENT
MEDIUM⚡pkg/sentry/kernel/task_futex.go61// SetRobustList sets the robust futex list for the task.COMMENT
MEDIUM⚡pkg/sentry/kernel/task_futex.go68// exitRobustList walks the robust futex list, marking locks dead and notifyingCOMMENT
MEDIUMpkg/sentry/kernel/task_futex.go130// wakeRobustListOne wakes a single futex from the robust list.COMMENT
MEDIUMpkg/sentry/kernel/task.go656 // robustList is a pointer to the head of the tasks's robust futexCOMMENT
MEDIUM⚡pkg/sentry/kernel/task_exit.go282 // Handle the robust futex list.COMMENT
MEDIUMpkg/sentry/kernel/task_exec.go357 // Handle the robust futex list.COMMENT
MEDIUMpkg/sentry/kernel/futex/futex.go695// FUTEX_OWNER_DIED is only set by the Linux when robust lists are in use (seeCOMMENT
MEDIUMpkg/sentry/kernel/futex/futex.go696// exit_robust_list()). Given we don't support robust lists, although handledCOMMENT
MEDIUMpkg/sentry/socket/netfilter/netfilter.go153 // Read in the struct and table name. IPv4 and IPv6 utilize structsCOMMENT
MEDIUMpkg/bpf/optimizer.go457// (Essentially, we create a common "jump to return" doormat that everyone inCOMMENT
MEDIUMpkg/tcpip/transport/tcp/snd.go1323 // can leverage the SACK information to determine when an incoming ACK is aCOMMENT
MEDIUM…cpip/network/internal/ip/generic_multicast_protocol.go79 // Robustness Variable may be increased. MLD is robust to [RobustnessCOMMENT
MEDIUM…cpip/network/internal/ip/generic_multicast_protocol.go87 // Variable may be increased. IGMP is robust to (Robustness Variable -COMMENT
MEDIUMpkg/tcpip/stack/iptables_types.go104 // don't utilize iptables.COMMENT
Docstring Block Structure7 hits · 35 pts
SeverityFileLineSnippetContext
HIGHg3doc/user_guide/sdk/python_docs_api_test.py31Locates a required file from filesystem or test runfiles. Args: rel_path: Path of the file relative to the reposiSTRING
HIGHimages/systemd-user/gnome-mcp/desktop_mcp.py122Run an xdotool command against the desktop's display. Args: *args: The xdotool subcommand and its arguments. RSTRING
HIGHimages/systemd-user/gnome-mcp/desktop_mcp.py450Return the screen an action produced, and say whether it changed. Returning the screenshot from the action itself is STRING
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py107Normalizes environment variables into a list of 'KEY=VALUE' strings. Args: env: A list of 'KEY=VALUE' strings or STRING
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py148Normalizes and validates working directory into an absolute POSIX path. Relative paths are resolved and normalized reSTRING
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py181Normalizes and validates mount configurations into a list of Mount objects. Args: mounts: A sequence of Mount objSTRING
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py566Runs the given command inside the running sandbox. Args: cmd: The command to run. *args: Arguments to tSTRING
Self-Referential Comments11 hits · 33 pts
SeverityFileLineSnippetContext
MEDIUMtools/go_branch.sh29# Create a temporary working directory, and ensure that this directory and allCOMMENT
MEDIUMtools/make_apt.sh60# Create a directory for the release.COMMENT
MEDIUMtools/make_apt.sh64# Create a temporary keyring, and ensure it is cleaned up.COMMENT
MEDIUMtest/rtnetlink/linux/rtnetlink_test.sh70 # Create a sync pipe that will be closed when TCP_SRV creates a listen socket.COMMENT
MEDIUMtest/rtnetlink/linux/route_test.sh20# Create a new default route and a new route with a address.COMMENT
MEDIUMtest/rtnetlink/linux/setlink_test.sh20# Create a new veth pair in the current namespace and change the MTU.COMMENT
MEDIUMtest/rtnetlink/linux/setlink_test.sh31# Create a new veth pair in the current namespace and rename the link.COMMENT
MEDIUMtest/rtnetlink/linux/veth_test.sh20# Create a new veth pair in the current namespace.COMMENT
MEDIUMtest/packetdrill/packetdrill_test.sh173# Create the DUT container and connect to network.COMMENT
MEDIUMtest/packetdrill/packetdrill_test.sh191# Create the test runner container and connect to network.COMMENT
MEDIUMsandboxexec/sandbox/python/tests/sandbox_test.py79 # Create the background sandbox (default network="none" works forCOMMENT
Cross-File Repetition6 hits · 30 pts
SeverityFileLineSnippetContext
HIGHtest/gpu/triton/triton.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .STRING
HIGHtest/gpu/sglang/sglang.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .STRING
HIGHtest/gpu/ollama/ollama.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .STRING
HIGHtest/kubernetes/benchmarks/vllm.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the actiSTRING
HIGHtest/kubernetes/benchmarks/sglang.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the actiSTRING
HIGHtest/kubernetes/benchmarks/ollama.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the actiSTRING
Hyper-Verbose Identifiers30 hits · 26 pts
SeverityFileLineSnippetContext
LOWg3doc/user_guide/sdk/python_docs_api_test.py113 def test_public_classes_documented(self):CODE
LOWg3doc/user_guide/sdk/python_docs_api_test.py133 def test_public_methods_documented(self):CODE
LOWg3doc/user_guide/sdk/python_docs_api_test.py156 def test_sandbox_init_parameters_documented(self):CODE
LOWimages/gpu/stable-diffusion-xl/generate_image.py187def get_optimal_terminal_width():CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py97 def test_exec_invalid_command_or_args(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py118 def test_non_root_networking_error(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py188 def test_init_env_list_and_dict(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py216 def test_init_env_overrides_path(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py230 def test_init_env_malformed_raises_error(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py269 def test_runtime_dir_ownership_and_cleanup(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py290 def test_runtime_dir_creation_error(self, mock_mkdtemp):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py297 def test_state_dir_creation_error(self, mock_makedirs):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py310 def test_create_bundle_makedirs_error(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py324 def test_sandbox_subprocess_timeout(self, mock_run):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py336 def test_sandbox_subprocess_error(self, mock_run):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py347 def test_invalid_networking_mode(self): # pylint: disable=unused-argumentCODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py356 def test_invalid_networking_type(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py375 def test_network_mode_enum_bundle(CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py391 def test_network_sandbox_nonroot_raises_error(CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py400 def test_network_mode_none_real_sandbox(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py412 def test_network_mode_host_real_sandbox(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py424 def test_find_runsc_not_found(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py438 def test_custom_bind_mount_readonly(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py460 def test_custom_bind_mount_readwrite(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py497 def test_dict_mount_configuration(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py516 def test_mount_validation_errors(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py562 def test_container_default_working_dir(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py581 def test_container_working_dir(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py593 def test_container_working_dir_relative(self):CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py641 def test_mount_factory_methods(self):CODE
Empty Error Handlers5 hits · 25 pts
SeverityFileLineSnippetContext
HIGHtest/benchmarks/seccheck/dummy_uds_server.py53except OSError:CODE
HIGHimages/systemd-user/gnome-mcp/desktop_mcp.py393except OSError:CODE
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py629except OSError:CODE
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py635except OSError:CODE
HIGHsandboxexec/sandbox/python/gvisor/sandbox.py415except OSError:CODE
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippetContext
HIGHrunsc/fsgofer/lisafs.go633 // Set the owners as requested by the client.COMMENT
HIGHpkg/sentry/mm/syscalls.go161 // Get pmas and map as requested.COMMENT
Structural Annotation Overuse8 hits · 12 pts
SeverityFileLineSnippetContext
LOW.claude/skills/add-syscall/SKILL.md140### Step 1: Run the native testCOMMENT
LOW.claude/skills/add-syscall/SKILL.md174### Step 2: Build the gvisor implementationCOMMENT
LOW.claude/skills/add-syscall/SKILL.md188### Step 3: Run the gvisor (runsc) testCOMMENT
LOWpkg/sentry/devices/nvproxy/README.md54### Step 1: Place the New Version in the TreeCOMMENT
LOWpkg/sentry/devices/nvproxy/README.md71### Step 2: Calculate the Driver ChecksumCOMMENT
LOWpkg/sentry/devices/nvproxy/README.md81### Step 3: Account for ABI ChangesCOMMENT
LOWpkg/sentry/devices/nvproxy/README.md137### Step 4: Add Support for New or Modified IoctlsCOMMENT
LOWpkg/tcpip/tcpip.go861 // NOTE: This method is a no-op for sockets other than TCP.COMMENT
Fake / Example Data9 hits · 9 pts
SeverityFileLineSnippetContext
LOWtest/compatibility/wordpress/wordpress_test.go48 adminEmail = "admin@example.com"CODE
LOWtest/compatibility/gitea/gitea_test.go44 adminEmail = "admin@example.com"CODE
LOWtest/image/latin10k.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras ut placerat felis. Maecenas urna est, auctor a efficitur sCODE
LOWtest/image/latin10k.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras ut placerat felis. Maecenas urna est, auctor a efficitur sCODE
LOWwebsite/blog/2026-09-17-systemd-in-gvisor.md512 --env=OPENCLAW_GATEWAY_TOKEN="dummy-token-for-sandbox" \CODE
LOWwebsite/blog/2026-09-17-systemd-in-gvisor.md526secret from above: `dummy-token-for-sandbox`. We've now logged into OpenClaw.CODE
LOW…e/blog/2026-04-15-magi-multi-agent-gvisor-isolation.md407 --env=OPENCLAW_GATEWAY_TOKEN="dummy-token-for-sandbox" \CODE
LOW…e/blog/2026-04-15-magi-multi-agent-gvisor-isolation.md434You can now go to `http://127.0.0.1:18789/?token=dummy-token-for-sandbox` andCODE
LOWpkg/sentry/socket/netlink/netfilter/protocol.go1167 m.PutAttrString(linux.NFTA_GEN_PROC_NAME, "placeholder")CODE
Deep Nesting7 hits · 6 pts
SeverityFileLineSnippetContext
LOWg3doc/user_guide/sdk/python_docs_api_test.py30CODE
LOWg3doc/user_guide/sdk/python_docs_api_test.py133CODE
LOWsandboxexec/sandbox/python/gvisor/sandbox.py103CODE
LOWsandboxexec/sandbox/python/gvisor/sandbox.py178CODE
LOWsandboxexec/sandbox/python/gvisor/sandbox.py289CODE
LOWsandboxexec/sandbox/python/gvisor/sandbox.py452CODE
LOWsandboxexec/sandbox/python/tests/sandbox_test.py135CODE
Unused Imports6 hits · 6 pts
SeverityFileLineSnippetContext
LOWtools/gen_compile_commands.py24CODE
LOWsandboxexec/sandbox/python/gvisor/__init__.py17CODE
LOWsandboxexec/sandbox/python/gvisor/__init__.py18CODE
LOWsandboxexec/sandbox/python/gvisor/__init__.py19CODE
LOWsandboxexec/sandbox/python/gvisor/__init__.py20CODE
LOWsandboxexec/sandbox/python/gvisor/__init__.py21CODE
Verbosity Indicators4 hits · 6 pts
SeverityFileLineSnippetContext
LOWpkg/tcpip/transport/tcp/sack_scoreboard.go233 // We need to check if the immediate lower (if any) sackedCOMMENT
LOW…/tcpip/network/internal/fragmentation/fragmentation.go267 // Before releasing a fragment we need to check if r is already marked as done.COMMENT
LOWpkg/tcpip/stack/transport_demuxer.go439 // If it was previously bound, we need to check if we can bind again.COMMENT
LOWpkg/tcpip/stack/transport_demuxer.go458 // If it was previously bound, we need to check if we can bind again.COMMENT
Example Usage Blocks2 hits · 3 pts
SeverityFileLineSnippetContext
LOWtools/lint.sh21# Usage:COMMENT
LOWpkg/seccheck/scsdk/tracker.go20// ## Usage:COMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMwebsite/blog/2026-09-17-systemd-in-gvisor.md440## Sandboxed agentic desktop accessCOMMENT
Excessive Try-Catch Wrapping2 hits · 3 pts
SeverityFileLineSnippetContext
LOWsandboxexec/sandbox/python/gvisor/sandbox.py421 except Exception:CODE
MEDIUMexamples/sandboxexec/python/safe_runner.py159 print(f"Error: {stderr}", file=sys.stderr)CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtools/builkite-check-paths.sh17# Check if any changes are in specified paths. The script exits with 0 if noCOMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWexamples/sandboxexec/python/safe_runner.py25CODE