Home / google / gvisor
Repository Analysis

google/gvisor

Application Kernel for Containers

8.9 Low AI signal View on GitHub
8.9
Adjusted Score
8.9
Raw Score
100%
Time Factor
2026-05-30
Last Push
18,421
Stars
Go
Language
686,363
Lines of Code
2597
Files
4242
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 187HIGH 8MEDIUM 36LOW 4011

Pattern Findings

4242 matches across 10 categories. Click a row to expand file-level details.

Over-Commented Block4003 hits · 3962 pts
SeverityFileLineSnippet
LOWwebhook/main.go1// Copyright 2020 The gVisor Authors.
LOWwebhook/pkg/cli/cli.go1// Copyright 2020 The gVisor Authors.
LOWwebhook/pkg/injector/webhook.go1// Copyright 2020 The gVisor Authors.
LOWwebhook/pkg/injector/certs.go1// Copyright 2020 The gVisor Authors.
LOWg3doc/proposals/runtime_dedicate_os_thread.md101run, and the M that selects the G then needs to transfer its P to the locked M,
LOWtools/install_containerd.sh1#!/bin/bash
LOWtools/workspace_status.sh1#!/bin/bash
LOWtools/builkite-check-paths.sh1#!/bin/bash
LOWtools/make_release.sh1#!/bin/bash
LOWtools/go_branch.sh1#!/bin/bash
LOWtools/build_cover.sh1#!/bin/bash
LOWtools/tag_release.sh1#!/bin/bash
LOWtools/make_apt.sh1#!/bin/bash
LOWtools/go_fieldenum/main.go1// Copyright 2021 The gVisor Authors.
LOWtools/gvisor_k8s_tool/main.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/cmd/install/install.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/cluster/cluster.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/util/util.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/spec/spec.go1// Copyright 2023 The gVisor Authors.
LOW…ls/gvisor_k8s_tool/provider/clusterflag/clusterflag.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/provider/gke/gke.go1// Copyright 2023 The gVisor Authors.
LOWtools/gvisor_k8s_tool/provider/kubectl/kubectl.go1// Copyright 2023 The gVisor Authors.
LOWtools/checklinkname/check_linkname.go1// Copyright 2021 The gVisor Authors.
LOWtools/checklinkname/check_linkname.go141// function declared as “localname” in the source code. If the
LOWtools/checklinkname/test/test_unsafe.go1// Copyright 2021 The gVisor Authors.
LOWtools/parsers/version.go1// Copyright 2019 The gVisor Authors.
LOWtools/parsers/go_parser_test.go1// Copyright 2020 The gVisor Authors.
LOWtools/parsers/go_parser.go1// Copyright 2020 The gVisor Authors.
LOWtools/parsers/go_parser.go41 suite.Benchmarks = append(suite.Benchmarks, bm)
LOWtools/parsers/parser_main.go1// Copyright 2020 The gVisor Authors.
LOWtools/profiletool/profiletool.go1// Copyright 2024 The gVisor Authors.
LOWtools/profiletool/profiletool.go301 // If a key is not found in a profile, its frequency is assumed to be
LOWtools/compat/realpath.py1#!/usr/bin/env python3
LOWtools/gpu/cos_drivers_test.sh1#!/bin/bash
LOWtools/gpu/all_drivers_test.sh1#!/bin/bash
LOWtools/gpu/main.go1// Copyright 2023 The gVisor Authors.
LOWtools/gpu/drivers/install_driver.go1// Copyright 2023 The gVisor Authors.
LOWtools/gpu/drivers/install_driver_test.go1// Copyright 2023 The gVisor Authors.
LOWtools/go_marshal/main.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/analysis/analysis_unsafe.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/analysis/analysis_unsafe.go41// Internally, we populate the type with random data by doing an unsafe cast to
LOWtools/go_marshal/test/test.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/test/test.go141//
LOWtools/go_marshal/test/test.go161// +marshal
LOWtools/go_marshal/test/dynamic.go1// Copyright 2021 The gVisor Authors.
LOWtools/go_marshal/test/benchmark_test.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/test/marshal_test.go1// Copyright 2020 The gVisor Authors.
LOWtools/go_marshal/test/marshal_test.go421 }
LOWtools/go_marshal/test/escape/escape.go1// Copyright 2020 The gVisor Authors.
LOWtools/go_marshal/test/external/external.go1// Copyright 2019 The gVisor Authors.
LOW…al/gomarshal/generator_interfaces_primitive_newtype.go1// Copyright 2020 The gVisor Authors.
LOW…s/go_marshal/gomarshal/generator_interfaces_dynamic.go1// Copyright 2021 The gVisor Authors.
LOWtools/go_marshal/gomarshal/util.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/gomarshal/util.go81 primitive func(n, t *ast.Ident)
LOWtools/go_marshal/gomarshal/util.go161
LOWtools/go_marshal/gomarshal/util.go341
LOWtools/go_marshal/gomarshal/util.go361//
LOWtools/go_marshal/gomarshal/util.go381// name: "ktime",
LOWtools/go_marshal/gomarshal/generator.go1// Copyright 2019 The gVisor Authors.
LOWtools/go_marshal/gomarshal/generator.go541 // Write the unconditional test file. This file is always compiled,
3943 more matches not shown…
Hallucination Indicators187 hits · 1970 pts
SeverityFileLineSnippet
CRITICALpkg/sentry/vfs/opath.go123 stat, err := fd.vfsfd.vd.mount.fs.impl.StatAt(ctx, rp, opts)
CRITICALpkg/sentry/vfs/opath.go136 statfs, err := fd.vfsfd.vd.mount.fs.impl.StatFSAt(ctx, rp)
CRITICALpkg/sentry/vfs/file_description.go562 stat, err = fd.vd.mount.fs.impl.StatAt(ctx, rp, opts)
CRITICALpkg/sentry/vfs/file_description.go582 err := fd.vd.mount.fs.impl.SetStatAt(ctx, rp, opts)
CRITICALpkg/sentry/vfs/file_description.go604 statfs, err := fd.vd.mount.fs.impl.StatFSAt(ctx, rp)
CRITICALpkg/sentry/vfs/file_description.go756 names, err := fd.vd.mount.fs.impl.ListXattrAt(ctx, rp, size)
CRITICALpkg/sentry/vfs/file_description.go785 val, err := fd.vd.mount.fs.impl.GetXattrAt(ctx, rp, *opts)
CRITICALpkg/sentry/vfs/file_description.go801 err := fd.vd.mount.fs.impl.SetXattrAt(ctx, rp, *opts)
CRITICALpkg/sentry/vfs/file_description.go821 err := fd.vd.mount.fs.impl.RemoveXattrAt(ctx, rp, name)
CRITICALpkg/sentry/vfs/file_description.go835 return fd.vd.mount.fs.impl.Sync(ctx)
CRITICALpkg/sentry/fsimpl/devpts/replica.go107 rfd.inode.t.ld.replicaWaiter.EventRegister(e)
CRITICALpkg/sentry/fsimpl/devpts/replica.go113 rfd.inode.t.ld.replicaWaiter.EventUnregister(e)
CRITICALpkg/sentry/fsimpl/gofer/socket.go106 e.dentry.inode.fs.renameMu.RLock()
CRITICALpkg/sentry/fsimpl/gofer/socket.go108 e.dentry.inode.fs.renameMu.RUnlock()
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1751 d.inode.fs.dentryCache.mu.Lock()
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1754 d.inode.fs.dentryCache.dentries.Remove(&d.cacheEntry)
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1755 d.inode.fs.dentryCache.dentries.PushFront(&d.cacheEntry)
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1756 d.inode.fs.dentryCache.mu.Unlock()
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1762 d.inode.fs.dentryCache.dentries.PushFront(&d.cacheEntry)
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1766 d.inode.fs.dentryCache.mu.Unlock()
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1783 d.inode.fs.dentryCache.mu.Lock()
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1784 d.inode.fs.dentryCache.dentries.Remove(&d.cacheEntry)
CRITICALpkg/sentry/fsimpl/gofer/gofer.go1786 d.inode.fs.dentryCache.mu.Unlock()
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go706 ims, err := rw.file.inode.fs.mf.MapInternal(seg.FileRangeOf(seg.Range().Intersect(mr)), hostarch.Read)
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go874 if rw.file.inode.fs.mf.IsDiskBacked() {
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go880 fd, err := rw.file.inode.fs.mf.DataFD(fr)
CRITICALpkg/sentry/fsimpl/tmpfs/regular_file.go892 ims, err := rw.file.inode.fs.mf.MapInternal(fr, hostarch.Write)
CRITICALpkg/sentry/kernel/task_acct.go215 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/task_acct.go216 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go295 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go296 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go306 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go307 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go1077 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go1079 t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go1083 t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go1090 t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go1280 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go1281 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go1285 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go1286 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go127 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go128 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go458 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go459 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go470 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go471 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go504 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go505 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go559 t.tg.pidns.owner.mu.Lock()
CRITICALpkg/sentry/kernel/ptrace.go560 defer t.tg.pidns.owner.mu.Unlock()
CRITICALpkg/sentry/kernel/ptrace.go659 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go660 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go682 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go683 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go698 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go699 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go721 t.tg.pidns.owner.mu.RLock()
CRITICALpkg/sentry/kernel/ptrace.go722 defer t.tg.pidns.owner.mu.RUnlock()
CRITICALpkg/sentry/kernel/ptrace.go762 t.tg.pidns.owner.mu.Lock()
127 more matches not shown…
AI Slop Vocabulary26 hits · 84 pts
SeverityFileLineSnippet
MEDIUMtest/packetimpact/dut/dut.go137 // Scanning log lines is not the most robust way, we could pass a file
MEDIUMtest/root/crictl_test.go420// - Creates directories and a socket for containerd to utilize.
MEDIUMrunsc/fsgofer/lisafs_test.go26// Note that these are not supposed to be extensive or robust tests. These unit
MEDIUMrunsc/cgroup/systemd.go207// generating the path of slice. Essentially, test-a-b.slice becomes
MEDIUMrunsc/container/metric_server_test.go285// TestContainerMetricsRobustAgainstRestarts that exporting metrics is robust against metric server
MEDIUMrunsc/container/container.go632 // CPU stats can utilize host cgroups for accuracy.
MEDIUMpkg/shim/v1/utils/volumes.go138// - (Essentially we set it to what the admission controller said.)
MEDIUMpkg/sentry/vfs/mount_unsafe.go123 // Essentially every mountTable will contain at least /proc, /sys, and
MEDIUMpkg/sentry/fsimpl/overlay/filesystem.go1265 // Essentially no gVisor filesystem supports RENAME_WHITEOUT, so just do a
MEDIUMpkg/sentry/platform/kvm/machine_amd64.go242 // capability, but it means that this method should be robust to
MEDIUMpkg/sentry/time/parameters.go46 // TODO(b/68779214): make error correction more robust to delayed
MEDIUMpkg/sentry/kernel/task_futex.go53// GetRobustList sets the robust futex list for the task.
MEDIUMpkg/sentry/kernel/task_futex.go61// SetRobustList sets the robust futex list for the task.
MEDIUMpkg/sentry/kernel/task_futex.go68// exitRobustList walks the robust futex list, marking locks dead and notifying
MEDIUMpkg/sentry/kernel/task_futex.go130// wakeRobustListOne wakes a single futex from the robust list.
MEDIUMpkg/sentry/kernel/task.go603 // robustList is a pointer to the head of the tasks's robust futex
MEDIUMpkg/sentry/kernel/task_exit.go278 // Handle the robust futex list.
MEDIUMpkg/sentry/kernel/task_exec.go356 // Handle the robust futex list.
MEDIUMpkg/sentry/kernel/futex/futex.go647// FUTEX_OWNER_DIED is only set by the Linux when robust lists are in use (see
MEDIUMpkg/sentry/kernel/futex/futex.go648// exit_robust_list()). Given we don't support robust lists, although handled
MEDIUMpkg/sentry/socket/netfilter/netfilter.go139 // Read in the struct and table name. IPv4 and IPv6 utilize structs
MEDIUMpkg/bpf/optimizer.go457// (Essentially, we create a common "jump to return" doormat that everyone in
MEDIUMpkg/tcpip/transport/tcp/snd.go1301 // can leverage the SACK information to determine when an incoming ACK is a
MEDIUM…cpip/network/internal/ip/generic_multicast_protocol.go79 // Robustness Variable may be increased. MLD is robust to [Robustness
MEDIUM…cpip/network/internal/ip/generic_multicast_protocol.go87 // Variable may be increased. IGMP is robust to (Robustness Variable -
MEDIUMpkg/tcpip/stack/iptables_types.go100 // don't utilize iptables.
Self-Referential Comments10 hits · 30 pts
SeverityFileLineSnippet
MEDIUMtools/go_branch.sh29# Create a temporary working directory, and ensure that this directory and all
MEDIUMtools/make_apt.sh60# Create a directory for the release.
MEDIUMtools/make_apt.sh64# Create a temporary keyring, and ensure it is cleaned up.
MEDIUMtest/rtnetlink/linux/rtnetlink_test.sh70 # Create a sync pipe that will be closed when TCP_SRV creates a listen socket.
MEDIUMtest/rtnetlink/linux/route_test.sh20# Create a new default route and a new route with a address.
MEDIUMtest/rtnetlink/linux/setlink_test.sh20# Create a new veth pair in the current namespace and change the MTU.
MEDIUMtest/rtnetlink/linux/setlink_test.sh31# Create a new veth pair in the current namespace and rename the link.
MEDIUMtest/rtnetlink/linux/veth_test.sh20# Create a new veth pair in the current namespace.
MEDIUMtest/packetdrill/packetdrill_test.sh173# Create the DUT container and connect to network.
MEDIUMtest/packetdrill/packetdrill_test.sh191# Create the test runner container and connect to network.
Cross-File Repetition6 hits · 30 pts
SeverityFileLineSnippet
HIGHtest/gpu/triton/triton.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .
HIGHtest/gpu/sglang/sglang.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .
HIGHtest/gpu/ollama/ollama.go0\n // ..the quick brown fox\n // ..jumps over\n // ....the lazy dog\n // .
HIGHtest/kubernetes/benchmarks/vllm.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the acti
HIGHtest/kubernetes/benchmarks/sglang.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the acti
HIGHtest/kubernetes/benchmarks/ollama.go0we assembled on the vast green lawn outside as the reactors began to slowly wind down. the workers were solemn; the acti
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippet
HIGHrunsc/fsgofer/lisafs.go581 // Set the owners as requested by the client.
HIGHpkg/sentry/mm/syscalls.go152 // Get pmas and map as requested.
Verbosity Indicators4 hits · 6 pts
SeverityFileLineSnippet
LOWpkg/tcpip/transport/tcp/sack_scoreboard.go233 // We need to check if the immediate lower (if any) sacked
LOW…/tcpip/network/internal/fragmentation/fragmentation.go241 // Before releasing a fragment we need to check if r is already marked as done.
LOWpkg/tcpip/stack/transport_demuxer.go439 // If it was previously bound, we need to check if we can bind again.
LOWpkg/tcpip/stack/transport_demuxer.go458 // If it was previously bound, we need to check if we can bind again.
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippet
LOWtest/image/latin10k.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras ut placerat felis. Maecenas urna est, auctor a efficitur s
LOWtest/image/latin10k.txt1Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras ut placerat felis. Maecenas urna est, auctor a efficitur s
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippet
LOWtools/builkite-check-paths.sh17# Check if any changes are in specified paths. The script exits with 0 if no
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOWimages/gpu/stable-diffusion-xl/generate_image.py187def get_optimal_terminal_width():