2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-20

Last Push

21.1K

Stars

Language

2.6M

Lines of Code

10.4K

Files

4.5K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4097 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.9/100 · LOW

Are imports declared and package/API names verified? 294 finding(s).

Agent Over-Engineering Ratio 1.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 417 finding(s).

PR Review Velocity Impact 9.9/100 · LOW

Which changes need focused human review? 4469 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 61HIGH 7MEDIUM 144LOW 4257

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4469 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block3620 hits · 3556 pts

Severity	File	Line	Snippet	Context
LOW	CHANGELOG.md	8501	# Note: Name can't include any spaces and should be DNS-compatible A-Za-z0-9-._	COMMENT
LOW	CHANGELOG.md	8801	#	COMMENT
LOW	constants.go	481	CertExtensionAgentScopePin = "agent-scope-pin@goteleport.com"	COMMENT
LOW	constants.go	501	// check.	COMMENT
LOW	constants.go	521	// CertExtensionGeneration counts the number of times a certificate has	COMMENT
LOW	constants.go	541	// by the device to authenticate itself.	COMMENT
LOW	constants.go	561	// types.BeamIDLabel label.	COMMENT
LOW	constants.go	581		COMMENT
LOW	constants.go	721	// access to all user groups.	COMMENT
LOW	constants.go	741		COMMENT
LOW	constants.go	761	// SystemIdentityCenterAccessRoleName specifies the name of a system role	COMMENT
LOW	constants.go	801	var PresetRoles = []string{PresetEditorRoleName, PresetAccessRoleName, PresetAuditorRoleName}	COMMENT
LOW	constants.go	841	const (	COMMENT
LOW	constants.go	861		COMMENT
LOW	constants.go	1081	// EnvVarUnstableDisableSAMLRedirectDowngradeCheck allows disabling saml_connector	COMMENT
LOW	constants_test.go	1	// Teleport	COMMENT
LOW	web/packages/design/src/Popover/Popover.tsx	201	const borderRadius = 4;	COMMENT
LOW	web/packages/design/src/Popover/Popover.tsx	221	// unforgiving and won't tell you what's wrong with your declaration, so the	COMMENT
LOW	web/packages/design/src/StepSlider/StepSlider.tsx	241	// of refs for all steps of all flows.	COMMENT
LOW	web/packages/design/src/SlideTabs/SlideTabs.tsx	321	const TabSliderInner = styled.div<{ appearance: Appearance; intent: Intent }>`	COMMENT
LOW	web/packages/teleport/src/Discover/useDiscover.tsx	261	//	COMMENT
LOW	web/packages/teleport/src/Discover/useDiscover.tsx	361	setInfoGuideConfig(getDiscoverInfoGuideConfig(overview));	COMMENT
LOW	web/packages/teleport/src/Discover/Database/common.tsx	181	return matched;	COMMENT
LOW	…scover/ConnectMyComputer/SetupConnect/SetupConnect.tsx	61	});	COMMENT
LOW	…stedClusters/templates/trusted_cluster_enterprise.yaml	1	#	COMMENT
LOW	…rc/Roles/RoleEditor/StandardEditor/MetadataSection.tsx	61	// Verifies whether a role already exists with this name and dispatches a	COMMENT
LOW	…eleport/src/components/SelectFilters/SelectFilters.tsx	381	type Option = BaseOption & {	COMMENT
LOW	…eleport/src/components/Authenticated/Authenticated.tsx	181	}	COMMENT
LOW	…ges/teleport/src/UnifiedResources/UnifiedResources.tsx	281	)	COMMENT
LOW	web/packages/teleport/src/AppLauncher/AppLauncher.tsx	41		COMMENT
LOW	web/packages/teleport/src/services/joinToken/types.ts	61	// JoinRole defines built-in system roles and are roles associated with	COMMENT
LOW	web/packages/teleport/src/services/user/types.ts	161	displayPrimary?: string;	COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	421	// the human-readable name of the Okta SAML app created	COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	721		COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	761	discovery_config: string;	COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	801	// resourceURL is the Amazon Web Console URL to access this RDS Database.	COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	861	// If empty, it indicates that the rule is not being used.	COMMENT
LOW	…b/packages/teleport/src/services/integrations/types.ts	1221	subnetIds: string[];	COMMENT
LOW	web/packages/teleport/src/services/userEvent/types.ts	341	id: string;	COMMENT
LOW	web/packages/shared/utils/base64/base64-arraybuffer.ts	1	// Modified from https://github.com/niklasvh/base64-arraybuffer/	COMMENT
LOW	…ackages/shared/utils/base64/base64-arraybuffer.test.ts	1	// Modified from https://github.com/niklasvh/base64-arraybuffer/	COMMENT
LOW	web/packages/shared/libs/ironrdp/src/lib.rs	1	// Teleport	COMMENT
LOW	web/packages/shared/libs/ironrdp/src/lib.rs	141	}	COMMENT
LOW	web/packages/shared/components/TextEditor/ace.js	21	// Ace extension and mode files (e.g. mode-json.js, ext-searchbox.js) reference	COMMENT
LOW	…ckages/shared/components/DesktopSession/Withholder.tsx	61	handleInputEvent(params);	COMMENT
LOW	…red/components/DesktopSession/DesktopSession.story.tsx	161	// Currently, the logic is hardcoded in the component so we have no control over it.	COMMENT
LOW	web/packages/shared/services/types.ts	81	}	COMMENT
LOW	web/packages/teleterm/electron-builder-config.js	1	import { spawn } from 'node:child_process';	COMMENT
LOW	web/packages/teleterm/electron-builder-config.js	101	fs.writeFileSync(plistPath, tshAppPlist);	COMMENT
LOW	web/packages/teleterm/src/main.ts	121	// On Windows/Linux: Re-launching the app while it's already running	COMMENT
LOW	…/src/ui/ConnectMyComputer/connectMyComputerContext.tsx	341	//	COMMENT
LOW	…/ConnectMyComputer/DocumentConnectMyComputer/Setup.tsx	401	markAgentAsConfigured();	COMMENT
LOW	…packages/teleterm/src/ui/DocumentGateway/useGateway.ts	81	}	COMMENT
LOW	web/packages/teleterm/src/ui/Search/SearchBar.tsx	101	});	COMMENT
LOW	web/packages/teleterm/src/ui/Search/useSearch.ts	81	// useResourceSearch has to return _something_ even when we don't want to perform a search.	COMMENT
LOW	web/packages/teleterm/src/ui/Search/useSearch.test.tsx	181	const otherClusterParams: UriParams = {	COMMENT
LOW	…eyboardArrowsNavigation/useKeyboardArrowsNavigation.ts	61	// 1. When scrolling from the last to the first element, the top of the scrollable area gets	COMMENT
LOW	…b/packages/teleterm/src/ui/DeepLinks/launchDeepLink.ts	81	// 2. A login dialog could be covered by an important dialog.	COMMENT
LOW	…onnectionsFilterableList/ConnectionStatusIndicator.tsx	81	// Using text instead of an icon because any icon used here would be smaller than the	COMMENT
LOW	…kages/teleterm/src/ui/services/modals/modalsService.ts	21		COMMENT
3560 more matches not shown…

Hallucination Indicators61 hits · 730 pts

Severity	File	Line	Snippet	Context
CRITICAL	integration/teleterm_test.go	467	expires := pack.Root.Cluster.Config.Clock.Now().Add(time.Minute)	CODE
CRITICAL	integration/proxy/proxy_test.go	392	teleportCluster := suite.root.Config.Auth.ClusterName.GetClusterName()	CODE
CRITICAL	integration/helpers/instance.go	1743	w.i.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL	lib/cache/user_group_test.go	74	require.Equal(t, 500, p.cache.collections.userGroups.store.len())	CODE
CRITICAL	lib/cache/workload_identity.go	129	scopeFilter := c.collections.workloadIdentity.watch.ScopeFilter.ToProto()	CODE
CRITICAL	lib/cache/workload_identity.go	187	if !scopes.MatchScope(c.collections.workloadIdentity.watch.ScopeFilter.ToProto(), wi.GetScope()) {	CODE
CRITICAL	lib/cache/cache_test.go	2192	require.Empty(t, p.cache.collections.roles.store.len())	CODE
CRITICAL	lib/cache/bot_instance.go	114	if !scopes.MatchScope(c.collections.botInstances.watch.ScopeFilter.ToProto(), bi.GetScope()) {	CODE
CRITICAL	lib/cache/bot_instance.go	188	collectionFilter := c.collections.botInstances.watch.ScopeFilter.ToProto()	CODE
CRITICAL	lib/cache/access_list_test.go	328	count := p.cache.collections.accessListReviews.store.len()	CODE
CRITICAL	lib/cache/plugin_static_credentials_test.go	97	for cred := range p.cache.collections.pluginStaticCredentials.store.resources(pluginStaticCredentialsNameIndex, "",	CODE
CRITICAL	lib/auth/access_request_test.go	2378	resp, err := s.testPack.tlsServer.AuthServer.AuthServer.SubmitAccessReview(ctx, review)	CODE
CRITICAL	lib/auth/access_request_test.go	2428	resp, err := s.testPack.tlsServer.AuthServer.AuthServer.GetAccessRequests(ctx, types.AccessRequestFilter{})	CODE
CRITICAL	lib/auth/webauthn/register.go	333	!parsedResp.Response.AttestationObject.AuthData.Flags.UserVerified() {	CODE
CRITICAL	…achineid/machineidv1/spiffe_federation_service_test.go	500	created, err := srv.AuthServer.AuthServer.Services.SPIFFEFederations.CreateSPIFFEFederation(	CODE
CRITICAL	lib/web/server.go	134	activeConnections := s.cfg.Handler.handler.userConns.Load()	CODE
CRITICAL	lib/web/server.go	147	activeConnections = s.cfg.Handler.handler.userConns.Load()	CODE
CRITICAL	lib/web/databases_test.go	642	s.webHandler.handler.cfg.PublicProxyAddr = s.webHandler.handler.cfg.ProxyWebAddr.String()	CODE
CRITICAL	lib/web/proxy_settings.go	99	proxySettings.Kube.ListenAddr = p.ServiceConfig.Proxy.Kube.ListenAddr.String()	CODE
CRITICAL	lib/srv/regular/sshserver_test.go	395	sessions, err := f.ssh.srv.termHandlers.SessionRegistry.SessionTrackerService.GetActiveSessionTrackers(ctx)	CODE
CRITICAL	lib/srv/regular/sshserver_test.go	409	size, err := f.ssh.srv.termHandlers.SessionRegistry.GetTerminalSize(sessionID)	CODE
CRITICAL	lib/srv/regular/sshserver_test.go	4042	sessions, err := f.ssh.srv.termHandlers.SessionRegistry.SessionTrackerService.GetActiveSessionTrackers(ctx)	CODE
CRITICAL	lib/srv/regular/sshserver_test.go	4125	sessionTracker, err := f.ssh.srv.termHandlers.SessionRegistry.SessionTrackerService.GetSessionTracker(ctx, sid)	CODE
CRITICAL	tool/tctl/common/resources/accesslist.go	58	al.Spec.Audit.Recurrence.Frequency.String(),	CODE
CRITICAL	tool/tsh/common/kube_test.go	184	rootClusterName: s.root.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL	tool/tsh/common/kube_test.go	185	leafClusterName: s.leaf.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	255	{p.root.Config.Proxy.WebAddr.String(), "leaf1", "leaf-cluster", formattedLeafLabels, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	256	{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster2, formattedRootLabels, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	257	{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster1, formattedRootLabels, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	270	[]string{p.root.Config.Proxy.WebAddr.String(), "leaf1", p.leafKubeCluster, formattedLeafLabelsVerbose, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	271	[]string{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster2, formattedRootLabelsVerbose, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	272	[]string{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster1, formattedRootLabelsVerbose, ""},	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	282	table.AddRow([]string{p.root.Config.Proxy.WebAddr.String(), "leaf1", "leaf-cluster", formattedLeafLabels, ""})	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	283	table.AddRow([]string{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster2, formattedRootLabels, ""})	CODE
CRITICAL⚡	tool/tsh/common/kube_test.go	284	table.AddRow([]string{p.root.Config.Proxy.WebAddr.String(), "root", p.rootKubeCluster1, formattedRootLabels, ""})	CODE
CRITICAL	tool/tsh/common/kube_test.go	387	rootClusterName := s.root.Config.Auth.ClusterName.GetClusterName()	CODE
CRITICAL	tool/tsh/common/kube_test.go	585	webProxyAddr, err := utils.ParseAddr(s.root.Config.Proxy.WebAddr.String())	CODE
CRITICAL	tool/tsh/common/kube_test.go	646	s.root.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL	tool/tsh/common/kube_test.go	723	ClusterName: s.root.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL	tool/tsh/common/db_test.go	465	profile, err := clientStore.ReadProfileStatus(s.root.Config.Proxy.WebAddr.String())	CODE
CRITICAL⚡	tool/tsh/common/tsh_helper_test.go	235	tunnelAddr := s.root.Config.Proxy.WebAddr.String()	CODE
CRITICAL⚡	tool/tsh/common/tsh_helper_test.go	236	if s.root.Config.Auth.NetworkingConfig.GetProxyListenerMode() != types.ProxyListenerMode_Multiplex {	CODE
CRITICAL⚡	tool/tsh/common/tsh_helper_test.go	237	tunnelAddr = s.root.Config.Proxy.ReverseTunnelListenAddr.String()	CODE
CRITICAL⚡	tool/tsh/common/tsh_helper_test.go	240	tc, err := types.NewTrustedCluster(s.root.Config.Auth.ClusterName.GetClusterName(), types.TrustedClusterSpecV2{	CODE
CRITICAL⚡	tool/tsh/common/tsh_helper_test.go	243	ProxyAddress: s.root.Config.Proxy.WebAddr.String(),	CODE
CRITICAL	tool/tsh/common/tsh_helper_test.go	309	rt, err := s.root.GetAuthServer().GetTunnelConnections(t.Context(), s.leaf.Config.Auth.ClusterName.GetClusterName())	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	138	"--proxy", s.root.Config.Proxy.WebAddr.String(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	148	tshHome, _ := mustLoginLegacy(t, s, s.leaf.Config.Auth.ClusterName.GetClusterName())	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	152	"--proxy", s.root.Config.Proxy.WebAddr.String(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	162	"--proxy", s.root.Config.Proxy.WebAddr.String(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	165	"--cluster", s.leaf.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	174	tshHome, _ := mustLoginLegacy(t, s, s.root.Config.Auth.ClusterName.GetClusterName())	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	179	s.leaf.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	535	s.root.Config.Proxy.SSHAddr.Host(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	536	s.root.Config.Auth.ClusterName.GetClusterName(),	CODE
CRITICAL⚡	tool/tsh/common/proxy_test.go	537	s.root.Config.SSH.Addr.Port(defaults.SSHServerListenPort))	CODE
CRITICAL	tool/tsh/common/proxy_test.go	738	s.root.Config.SSH.Addr.Port(defaults.SSHServerListenPort), "echo", "hello")	CODE
CRITICAL	tool/tsh/common/proxy_test.go	819	sshConn := fmt.Sprintf("%s.%s", s.root.Config.Hostname, s.root.Config.Auth.ClusterName.GetClusterName())	CODE
CRITICAL	tool/tsh/common/proxy_test.go	820	nodePort := s.root.Config.SSH.Addr.Port(defaults.SSHServerListenPort)	CODE
CRITICAL	tool/tsh/common/proxy_test.go	961	if res.Cluster == s.root.Config.Auth.ClusterName.GetName() {	CODE
1 more matches not shown…

Hyper-Verbose Identifiers339 hits · 348 pts

Severity	File	Line	Snippet	Context
LOW	web/packages/design/src/datetime/format.ts	77	export function displayDateWithPrefixedTime(date: Date): string {	CODE
LOW	web/packages/design/src/Popover/Popover.tsx	128	function getAllowedPopoverPositions(transformOrigin: Origin) {	CODE
LOW	web/packages/design/src/Popover/Popover.tsx	141	function getPreferredPopoverPositions(anchorOrigin: Origin) {	CODE
LOW	web/packages/design/src/system/typography.ts	62	export function shouldForwardTypographyProp(	CODE
LOW	web/packages/design/src/DataTable/DataTable.story.tsx	114	export function DefaultAndClickableLabels() {	CODE
LOW	web/packages/teleport/src/features.tsx	86	export function shouldHideInaccessibleFeatures(cfg: Cfg) {	CODE
LOW	web/packages/teleport/src/teleportContext.tsx	153	function hasAccessMonitoringAccess() {	CODE
LOW	web/packages/teleport/src/teleportContext.tsx	160	function hasAccessGraphIntegrationsAccess() {	CODE
LOW	…packages/teleport/src/Bots/Details/BotDetails.test.tsx	823	function withFetchInstancesSuccess() {	CODE
LOW	…src/Bots/Add/GitHubActionsK8s/ConfigureAccess.test.tsx	294	function withListUnifiedResourcesSuccess(opts?: {	CODE
LOW	…s/Add/GitHubActionsK8s/KubernetesLabelsSelect.test.tsx	441	function withListUnifiedResourcesSuccess(opts?: {	CODE
LOW	web/packages/teleport/src/Bots/Add/Shared/kubernetes.ts	35	export function makeKubernetesAccessChecker(selected: KubernetesLabel[]) {	CODE
LOW	…scover/Database/EnrollRdsDatabase/SingleEnrollment.tsx	189	function handleOnProceedWithValidation(	CODE
LOW	…cover/Database/DeployService/AutoDeploy/AutoDeploy.tsx	91	function manuallyValidateRequiredFields() {	CODE
LOW	…cover/Database/DeployService/AutoDeploy/AutoDeploy.tsx	606	function AutoDiscoverDeploySuccess({	CODE
LOW	…/Database/DeployService/AutoDeploy/AutoDeploy.test.tsx	111	async function waitForSubnetsAndSecurityGroups() {	CODE
LOW	…scover/Database/SetupAccess/AwsRdsAuthRequirements.tsx	330	export function AwsRdsAuthRequirementAlert({	CODE
LOW	…leport/src/Discover/Database/MutualTls/useMutualTls.ts	107	function generateSignCertificateCurlCommand(	CODE
LOW	…/Discover/Database/CreateDatabase/useCreateDatabase.ts	140	function updateAgentMetaUponRequiringDeployment(db: CreateDatabaseRequest) {	CODE
LOW	…/Discover/Database/CreateDatabase/useCreateDatabase.ts	269	async function attemptDbServerQueryAndBuildErrMsg(	CODE
LOW	…/Discover/Database/CreateDatabase/useCreateDatabase.ts	367	function handleNextStepForSelfHostedAwsEnrollment() {	CODE
LOW	…er/DiscoveryConfigSsm/DiscoveryConfigCreatedDialog.tsx	23	export function DiscoveryConfigCreatedDialog({	CODE
LOW	web/packages/teleport/src/Discover/Shared/Timeout.tsx	61	function millisecondsToMinutesSeconds(ms: number) {	CODE
LOW	…t/src/Discover/Shared/CustomInputFieldForAsterisks.tsx	26	export function CustomInputFieldForAsterisks({	CODE
LOW	…/teleport/src/Discover/Shared/useJoinTokenSuspender.ts	41	export function clearCachedJoinTokenResult(resourceKinds: ResourceKind[]) {	CODE
LOW	…/packages/teleport/src/Discover/Shared/ResourceKind.ts	54	export function resourceKindToPreferredResource(kind: ResourceKind): Resource {	CODE
LOW	…ed/ConnectionDiagnostic/ConnectionDiagnosticResult.tsx	40	export function ConnectionDiagnosticResult({	CODE
LOW	…teleport/src/Discover/Shared/AwsAccount/AwsAccount.tsx	209	async function proceedWithExistingIntegration(validator: Validator) {	CODE
LOW	…teleport/src/Discover/Shared/AwsAccount/AwsAccount.tsx	344	async function fetchAwsIntegrationsWithApps(	CODE
LOW	…eport/src/Discover/Shared/SetupAccess/useUserTraits.ts	238	function updateResourceMetaDynamicTraits(	CODE
LOW	…eport/src/Discover/Shared/SetupAccess/useUserTraits.ts	416	export function initSelectedOptionsHelper({	CODE
LOW	…igureDiscoveryService/CreatedDiscoveryConfigDialog.tsx	46	export function CreatedDiscoveryConfigDialog({	CODE
LOW	…onfigureDiscoveryService/ConfigureDiscoveryService.tsx	39	export function ConfigureDiscoveryService({	CODE
LOW	…/teleport/src/Discover/SelectResource/utils/filters.ts	26	export function filterBySupportedPlatformsAndAuthTypes(	CODE
LOW	…ges/teleport/src/Discover/SelectResource/utils/sort.ts	31	function isConnectMyComputerAvailable(	CODE
LOW	…ges/teleport/src/Discover/SelectResource/utils/sort.ts	39	export function sortResourcesByPreferences(	CODE
LOW	…/packages/teleport/src/Discover/Fixtures/databases.tsx	49	export function getSelectedAwsPostgresDbMeta(): DbMeta {	CODE
LOW	…cover/Kubernetes/EnrollEKSCluster/EnrollEksCluster.tsx	160	function fetchClustersWithNewRegion(region: Regions) {	CODE
LOW	…ackages/teleport/src/Discover/Overview/ActivityTab.tsx	115	function handleEventTypeFilterChange(newFilter: EventTypeFilter) {	CODE
LOW	…eport/src/Discover/Overview/IaCIntegrationOverview.tsx	510	function getStatsRefetchIntervalMs(stats: IntegrationWithSummary \| undefined) {	CODE
LOW	…b/packages/teleport/src/Discover/Overview/Overview.tsx	315	export function getDiscoverInfoGuideConfig(	CODE
LOW	…src/Discover/Overview/IaCIntegrationOverview.story.tsx	329	export function AzureWithWildcardSubscription() {	CODE
LOW	…st/ServerSideSupportedList/ServerSideSupportedList.tsx	198	function getFetchFuncForServerSidePaginating(	CODE
LOW	…/packages/teleport/src/Navigation/ResourcesSection.tsx	104	function encodeUrlQueryParamsWithTypedKinds(	CODE
LOW	web/packages/teleport/src/Navigation/Navigation.tsx	136	function getDashboardNavigationSections(	CODE
LOW	web/packages/teleport/src/Navigation/Navigation.tsx	152	function getSubsectionsForCategory(	CODE
LOW	…leport/src/TrustedClusters/DeleteTrust/DeleteTrust.tsx	29	export default function DeleteTrustedClusterDialog(props: Props) {	CODE
LOW	web/packages/teleport/src/Roles/PolicyPlaceholder.tsx	146	function VisualizeAccessPathsPanel(props: StepComponentProps) {	CODE
LOW	…port/src/Roles/RoleEditor/StandardEditor/validation.ts	145	function validateResourceAccessList(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	752	export function supportsKubernetesCustomResources(roleVersion: RoleVersion) {	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	762	export function newKubernetesResourceModel(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1093	function kubernetesResourcesToModel(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1110	function kubernetesResourceToModel(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1210	export function gitHubOrganizationsToModel(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1334	export function allowedVerbsForResourceKinds(resourceKinds: string[]): Verb[] {	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1515	export function portForwardingOptionsToModel(	CODE
LOW	…t/src/Roles/RoleEditor/StandardEditor/standardmodel.ts	1721	function optionsModelToRoleOptions(	CODE
LOW	…teleport/src/Roles/RoleEditor/StandardEditor/errors.ts	84	export function unsupportedFieldErrorsFromObject(	CODE
LOW	…teleport/src/Roles/RoleEditor/StandardEditor/errors.ts	109	export function unsupportedValueWithReplacement(	CODE
LOW	…teleport/src/Roles/RoleEditor/StandardEditor/errors.ts	160	export function groupAndSortConversionErrors(	CODE
279 more matches not shown…

Decorative Section Separators75 hits · 274 pts

Severity	File	Line	Snippet	Context
MEDIUM	…b/packages/teleport/src/SessionRecordings/list/mock.ts	134	svg: '\u003csvg xmlns="http://www.w3.org/2000/svg" width="2149" height="2066" font-size="14" class="terminal"\u003e\	CODE
MEDIUM	…b/packages/teleport/src/SessionRecordings/list/mock.ts	134	svg: '\u003csvg xmlns="http://www.w3.org/2000/svg" width="2149" height="2066" font-size="14" class="terminal"\u003e\	CODE
MEDIUM	…egrations/terraform/protoc-gen-terraform-teleport.yaml	321	#------------------------------------	COMMENT
MEDIUM	…egrations/terraform/protoc-gen-terraform-teleport.yaml	334	#------------------------------------	COMMENT
MEDIUM	rfd/0207-vnet-ssh.md	215	# ---------------------------------------------------------------------	COMMENT
MEDIUM	rfd/0207-vnet-ssh.md	218	# ---------------------------------------------------------------------	COMMENT
MEDIUM⚡	mobile/Verify/Verify/App Lifecycle/VerifyApp.swift	45	/// ┌─────────────┐ ┌──────────────────┐	COMMENT
MEDIUM⚡	mobile/Verify/Verify/App Lifecycle/VerifyApp.swift	46	/// │ VerifyApp │───────Owns────────▶│ VerifyAppModel │	COMMENT
MEDIUM⚡	mobile/Verify/Verify/App Lifecycle/VerifyApp.swift	47	/// └─────────────┘ └──────────────────┘	COMMENT
MEDIUM⚡	mobile/Verify/Verify/App Lifecycle/VerifyApp.swift	57	/// ┌───────────────┐ ┌────────────────────┐	COMMENT
MEDIUM⚡	mobile/Verify/Verify/App Lifecycle/VerifyApp.swift	59	/// └───────────────┘ └────────────────────┘	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	1	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	3	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	28	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	30	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	40	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	42	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	48	# ========================================	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	50	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	73	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	75	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	110	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	112	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	134	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	136	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	169	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	171	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	194	# ========================================	COMMENT
MEDIUM	examples/identity-activity-center/policy.tf	196	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	1	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	3	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	25	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	27	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	35	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	37	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	271	# ========================================	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	273	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	75	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	77	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	126	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	128	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	195	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	197	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	489	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	491	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	532	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	534	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	569	# ========================================	COMMENT
MEDIUM	…s/identity-activity-center/identity_activity_center.tf	571	# ========================================	COMMENT
MEDIUM⚡	lib/web/app/https_tunnel.go	58	// ┌─────────────────────────────────────────────────────────────────┐	COMMENT
MEDIUM⚡	lib/web/app/https_tunnel.go	60	// │ ┌───────────────────────────────────────────────────────────┐ │	COMMENT
MEDIUM⚡	lib/web/app/https_tunnel.go	62	// │ └───────────────────────────────────────────────────────────┘ │	COMMENT
MEDIUM⚡	lib/web/app/https_tunnel.go	63	// └─────────────────────────────────────────────────────────────────┘	COMMENT
MEDIUM	lib/vnet/opensshconfig.go	269	const generatedFileHeader = `# ---------------------------------------------------------------------	CODE
MEDIUM	lib/vnet/opensshconfig.go	272	# ---------------------------------------------------------------------	COMMENT
MEDIUM⚡	lib/srv/alpnproxy/aws_local_proxy.go	90	// ├────────────────────────►│ forward │ │	COMMENT
MEDIUM⚡	lib/srv/alpnproxy/aws_local_proxy.go	91	// │ ├───────────────────►│ re-sign │	COMMENT
MEDIUM⚡	lib/srv/alpnproxy/aws_local_proxy.go	92	// │ │ ├──────────────────────►│	COMMENT
MEDIUM⚡	lib/srv/alpnproxy/aws_local_proxy.go	94	// │ │ │◄──────────────────────┤	COMMENT
MEDIUM⚡	lib/srv/alpnproxy/aws_local_proxy.go	95	// │ │◄───────────────────┤ │	COMMENT
15 more matches not shown…

Fake / Example Data232 hits · 262 pts

Severity	File	Line	Snippet	Context
LOW	web/packages/design/src/Tooltip/IconTooltip.story.tsx	89	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do	CODE
LOW	web/packages/design/src/Tooltip/IconTooltip.story.tsx	89	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do	CODE
LOW	web/packages/design/src/Tooltip/IconTooltip.story.tsx	110	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/Tooltip/IconTooltip.story.tsx	110	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/Card/Card.story.tsx	54	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus ligula leo, dictum ac bibendum ut, dapibus sed ex. M	CODE
LOW	web/packages/design/src/Card/Card.story.tsx	54	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus ligula leo, dictum ac bibendum ut, dapibus sed ex. M	CODE
LOW	web/packages/design/src/CardTile/CardTile.story.tsx	57	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus ligula leo, dictum ac bibendum ut, dapibus sed ex. M	CODE
LOW	web/packages/design/src/CardTile/CardTile.story.tsx	57	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus ligula leo, dictum ac bibendum ut, dapibus sed ex. M	CODE
LOW	web/packages/design/src/Alert/Alert.controls.story.tsx	57	children: 'Lorem ipsum dolor sit amet',	CODE
LOW	web/packages/design/src/Alert/Alert.controls.story.tsx	57	children: 'Lorem ipsum dolor sit amet',	CODE
LOW	web/packages/design/src/Mark/Mark.story.tsx	31	Some texts to demonstrate word <M>markings</M>. Lorem ipsum dolor sit amet{' '}	CODE
LOW	web/packages/design/src/Mark/Mark.story.tsx	31	Some texts to demonstrate word <M>markings</M>. Lorem ipsum dolor sit amet{' '}	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	104	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	104	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	139	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	139	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	200	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	200	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	268	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	268	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	306	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	web/packages/design/src/StepSlider/StepSlider.story.tsx	306	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	277	<MenuItem onClick={() => alert('Lorem ipsum dolor sit amet')}>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	277	<MenuItem onClick={() => alert('Lorem ipsum dolor sit amet')}>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	278	Lorem ipsum dolor sit amet	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	278	Lorem ipsum dolor sit amet	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	299	<Button>Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	300	<Button>Dolor Sit Amet</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	303	<Button>Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	304	<Button>Dolor Sit Amet</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	322	<Button>Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	323	<Button>Dolor Sit Amet</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	333	<Button>Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	334	<Button>Dolor Sit Amet</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	343	<Button minWidth="fit-content">Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	344	<Button minWidth="fit-content">Dolor Sit Amet</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	347	<Button minWidth="fit-content">Lorem Ipsum</Button>	CODE
LOW⚡	web/packages/design/src/Button/buttons.story.tsx	348	<Button minWidth="fit-content">Dolor Sit Amet</Button>	CODE
LOW	web/packages/design/src/theme/typography.story.jsx	223	const sample = `Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the indu	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	102	<MenuItem>Lorem ipsum</MenuItem>	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	103	<MenuItem>Dolor sit amet</MenuItem>	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	114	<MenuItem>Lorem ipsum</MenuItem>	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	115	<MenuItem>Dolor sit amet</MenuItem>	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	127	<MenuItem>Lorem ipsum</MenuItem>	CODE
LOW	web/packages/design/src/Menu/Menu.story.tsx	128	<MenuItem>Dolor sit amet</MenuItem>	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	68	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	68	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	72	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	72	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	76	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	76	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	82	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	82	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	86	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	86	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	90	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW⚡	web/packages/design/src/Text/Text.story.tsx	90	Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod	CODE
LOW	…/design/src/DataTable/InputSearch/InputSearch.test.tsx	45	await user.paste('Lorem ipsum delor sit amet.');	CODE
LOW	…/design/src/DataTable/InputSearch/InputSearch.test.tsx	50	'Lorem ipsum delor sit amet.'	CODE
LOW	web/packages/teleport/src/config.test.ts	167	loginHint: 'user@example.com',	CODE
172 more matches not shown…

AI Slop Vocabulary45 hits · 134 pts

Severity	File	Line	Snippet	Context
MEDIUM	web/packages/teleport/src/Navigation/Navigation.tsx	311	// can utilize `safePolygon` w/ `requireIntent` for `handleClose` here instead of `restMs`,	COMMENT
MEDIUM	…egrations/terraform/protoc-gen-terraform-teleport.yaml	377	# host-based dialing and IP-based dialing) which is more robust than its	COMMENT
MEDIUM	…form/provider/internal/legacy/resource_teleport_bot.go	51	// In order to make migration as seamless as possible, and to avoid breaking the	COMMENT
MEDIUM	…rraform/examples/resources/teleport_server/resource.tf	8	// host-based dialing and IP-based dialing) which is more robust than its	COMMENT
MEDIUM	…rraform/examples/resources/teleport_server/resource.tf	24	// robust than host-based and IP-based dialing (because several server	COMMENT
MEDIUM	…ations/terraform/testlib/client_ip_restriction_test.go	147	// used so the test is robust to leftover state from earlier steps.	COMMENT
MEDIUM	integrations/access/common/bot.go	27	// Implementing this interface allows to leverage BaseApp logic without customization.	COMMENT
MEDIUM	…port/discovery/azure/examples/management-group/main.tf	30	# See https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin	COMMENT
MEDIUM	examples/chart/teleport-cluster/values.yaml	200	# Default mode will not utilize TLS routing and operate in backwards-compatibility mode.	COMMENT
MEDIUM	examples/chart/teleport-kube-agent/values.yaml	48	# Teleport Enterprise clusters to allow the agent to leverage enterprise features.	COMMENT
MEDIUM	examples/chart/teleport-proxy/values.yaml	155	# The "separate" mode will not utilize TLS routing and operate in	COMMENT
MEDIUM	examples/chart/teleport-relay/values.yaml	37	# clusters to allow the agent to leverage enterprise features.	COMMENT
MEDIUM⚡	examples/identity-activity-center/policy.tf	5	# This Terraform configuration creates comprehensive IAM policies for the Identity	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	5	# This Terraform configuration provisions a comprehensive Identity Activity Center	COMMENT
MEDIUM⚡	…s/identity-activity-center/identity_activity_center.tf	283	# Glue table definition for identity events with comprehensive schema	COMMENT
MEDIUM	lib/tbot/internal/carotation/service.go	106	// We can leverage the existing renewal system to fetch new certificates and	COMMENT
MEDIUM	lib/tbot/workloadidentity/trust_bundle_cache.go	237	// can leverage the main bot identity.	COMMENT
MEDIUM	lib/join/genericoidc/validator_test.go	231	// Essentially the same as the handler above, but without HTTP. Not quite	COMMENT
MEDIUM	lib/multiplexer/wrappers.go	192	mux, err := New(cfg) // Creating Mux to leverage protocol detection with PROXY headers	CODE
MEDIUM	lib/auth/auth_with_roles.go	108	// underlying unscoped access checker is unwrapped in order to leverage specific features not yet ported over	COMMENT
MEDIUM	lib/auth/auth_with_roles.go	117	// scoped permissions. This method may be useful if an unscoped API needs to leverage functionality that	COMMENT
MEDIUM	lib/auth/authtest/authtest.go	1097	// use multiplexer to leverage support for proxy protocol.	COMMENT
MEDIUM	lib/auth/storage/storage.go	24	// that cgo is enbaled in order to leverage sqlite.	COMMENT
MEDIUM	lib/web/machineid.go	69	// listBots returns a list of bots for a given cluster site. It does not leverage pagination from the UI. Due to the	COMMENT
LOW	lib/web/scripts/node-join/install.sh	426	# for MacOS (and Linux without procfs, if that ever happens), we just use the original behaviour	COMMENT
MEDIUM	lib/autoupdate/agent/setup.go	647	// configurable until a more robust escaping mechanism is shipped.	COMMENT
MEDIUM	lib/utils/genmap/genmap.go	181	// reason a robust 'cleanup' strategy should also include providing a generator that returns errors when called for keys	COMMENT
MEDIUM	lib/sshutils/sftp/sftp.go	483	// assertStreamsType checks if reader or writer implements correct interface to utilize concurrent SFTP streams.	COMMENT
MEDIUM	lib/kube/proxy/forwarder.go	2193	// Otherwise, use kube-teleport-proxy-alpn.teleport.cluster.local to pass TLS handshake and leverage TLS Routing.	COMMENT
MEDIUM	lib/kube/proxy/utils_test.go	766	// and ResumeAuditStream methods to use a events.TeeStreamer to leverage the StreamEmitter	COMMENT
MEDIUM	lib/kube/grpc/utils_test.go	658	// and ResumeAuditStream methods to use a events.TeeStreamer to leverage the StreamEmitter	COMMENT
MEDIUM	lib/service/service.go	2846	// use multiplexer to leverage support for proxy protocol.	COMMENT
MEDIUM	lib/service/service.go	3927	// Use multiplexer to leverage support for signed PROXY protocol headers.	COMMENT
MEDIUM	lib/scopes/access/compat.go	194	// different and less robust feature than the source ip pinning of classic teleport roles. In classic teleport	COMMENT
MEDIUM	lib/scopes/access/compat.go	197	// equivalent feature would ever be so robust. In light of that, it may be more desirable either to never	COMMENT
MEDIUM	lib/scopes/access/access.go	160	// StrongValidateRole performs robust validation of a role to ensure it complies with all expected constraints. Prefer	COMMENT
MEDIUM	lib/scopes/access/access.go	416	// StrongValidateAssignment performs robust validation of an assignment to ensure it complies with all expected constrai	COMMENT
MEDIUM	lib/client/api.go	1250	// GetKubeTLSServerName returns k8s server name used in KUBECONFIG to leverage TLS Routing.	COMMENT
MEDIUM	lib/services/access_request_cache.go	162	// stale cache state causes spurious errors due to users trying to utilize an access request immediately after it gets	COMMENT
MEDIUM	lib/services/local/workload_identity.go	255	// For scoped wids, we need to leverage a "skeleton" rather than the	COMMENT
MEDIUM	lib/services/local/access_list.go	2046	// leverage its own internal chunking to write items to the backend in smaller batches.	COMMENT
MEDIUM	lib/services/local/access_list.go	2119	// leverage its own internal chunking to write items to the backend in smaller batches.	COMMENT
MEDIUM	lib/services/local/generic/generic_test.go	130	// Mimic the behavior of resources that utilize protojson such as `PluginStaticCredentials` which	COMMENT
LOW	build.assets/changelog.sh	112	# If BASE_BRANCH is set, just use that. Otherwise try to figure it out.	COMMENT
LOW	build.assets/changelog.sh	151	# If BASE_TAG is set, just use that, otherwise figure out the last version	COMMENT

Self-Referential Comments17 hits · 50 pts

Severity	File	Line	Snippet	Context
MEDIUM	…es/teleport/src/Bots/Add/GitHubActionsK8s/templates.ts	35	const GHA_WORKFLOW = `# This file contains a GitHub Actions workflow which enrolls with Teleport in	CODE
MEDIUM	docs/pages/includes/config-reference/proxy-service.yaml	196	# Define a new version channel with a static version	COMMENT
MEDIUM	docs/pages/includes/config-reference/proxy-service.yaml	200	# Define a new version channel forwarding requests to an upstream version server	COMMENT
MEDIUM	…orm/examples/resources/teleport_bot/scoped-resource.tf	8	# Create the bot role	COMMENT
MEDIUM	…orm/examples/resources/teleport_bot/scoped-resource.tf	31	# Create the bot	COMMENT
MEDIUM	…rm-modules/teleport/discovery/aws/aws_oidc_provider.tf	27	# Create an AWS OIDC Provider, so that the Teleport Discovery Service can use	COMMENT
MEDIUM	examples/chart/teleport-cluster/values.yaml	581	# Create the secret in the same namespace as Teleport using `kubectl create secret tls my-tls-secret --cert=/path/to/c	COMMENT
MEDIUM	examples/chart/teleport-cluster/values.yaml	587	# Create the secret with `kubectl create secret generic --from-file=ca.pem=/path/to/root-ca.pem	COMMENT
MEDIUM	examples/chart/teleport-proxy/values.yaml	347	# Create the secret in the same namespace as Teleport using:	COMMENT
MEDIUM	examples/chart/teleport-proxy/values.yaml	357	# Create the secret with:	COMMENT
MEDIUM	examples/k8s-auth/get-kubeconfig.sh	113	# Create the secret and bind it to the desired SA	COMMENT
MEDIUM	lib/web/scripts/node-join/install.sh	472	# This file is processed by `shellschek` as part of the lint step	COMMENT
MEDIUM	lib/web/scripts/node-join/install.sh	513	# This file is processed by `shellschek` as part of the lint step	COMMENT
MEDIUM	lib/web/scripts/node-join/install.sh	552	# This file is processed by `shellschek` as part of the lint step	COMMENT
MEDIUM	build.assets/please-run.sh	27	# Create a GitHub error	COMMENT
MEDIUM	build.assets/keychain-setup.sh	61	# Create a keychain ($1) with a password ($2) and put it on the user keychain	COMMENT
MEDIUM	assets/loadtest/azure/.terraform.lock.hcl	1	# This file is maintained automatically by "tofu init".	COMMENT

Structural Annotation Overuse28 hits · 49 pts

Severity	File	Line	Snippet	Context
LOW	integration/helpers/timeouts.go	30	// NOTE: This function modifies global values for timeouts, etc. If your tests	COMMENT
LOW	integrations/terraform/testlib/bot_test.go	308	// Step 1: Create bot with scope	COMMENT
LOW	integrations/terraform/testlib/bot_test.go	339	// Step 3: Change bot scope (should force replacement)	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1003	// Step 1: Obtain a start token.	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1007	// Step 2: Obtain an approval token using the start token.	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1017	// Step 3: Complete recovery with the obtained approved token.	COMMENT
LOW⚡	lib/auth/authclient/api.go	1363	// NOTE: This method is intentionally available only for the auth server	COMMENT
LOW⚡	lib/auth/authclient/api.go	1370	// NOTE: This method is intentionally available only for the auth server	COMMENT
LOW⚡	lib/auth/authclient/api.go	1376	// NOTE: This method is intentionally available only for the auth server	COMMENT
LOW⚡	lib/auth/authclient/api.go	1382	// NOTE: This method is intentionally available only for the auth server	COMMENT
LOW	lib/services/access_list.go	417	// Step 1: Check owner filter if provided	COMMENT
LOW	lib/services/access_list.go	429	// Step 2: Check role filter if provided	COMMENT
LOW⚡	lib/services/access_list.go	441	// Step 3: check the origin	COMMENT
LOW⚡	lib/services/access_list.go	446	// Step 4: Check search filter if provided	COMMENT
LOW	lib/services/resource.go	877	// NOTE: This function only supports the subset of resources which may be imported/exported	COMMENT
LOW	lib/services/resource.go	902	// NOTE: This function only supports the subset of resources which may be imported/exported	COMMENT
LOW	lib/services/local/resource.go	41	// NOTE: This function is non-atomic and performs no internal synchronization;	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	27	## Step 1: Gather Details for Access Lists Due for Review	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	42	## Step 2: Assess Risk for Each List	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	64	## Step 3: Present Findings Table	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	78	## Step 4: Ask for Confirmation	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	89	## Step 5: Submit Auto-Reviews	COMMENT
LOW	skills/teleport-acl-review/SKILL.md	106	## Step 6: Show Manual Review URLs	COMMENT
LOW	skills/teleport-session-review/SKILL.md	52	## Step 1: Choose the Right Command	COMMENT
LOW	skills/teleport-session-review/SKILL.md	73	## Step 2: List Recent Recordings	COMMENT
LOW	skills/teleport-session-review/SKILL.md	94	## Step 3: Search Recordings	COMMENT
LOW	skills/teleport-session-review/SKILL.md	219	## Step 4: Present the Findings Table	COMMENT
LOW	skills/teleport-session-review/SKILL.md	245	## Step 5: Offer Next Actions (Confirm First)	COMMENT

Synthetic Comment Markers6 hits · 45 pts

Severity	File	Line	Snippet	Context
HIGH	…b/packages/teleport/src/services/agents/agents.test.ts	44	// Test all fields gets set as requested.	COMMENT
HIGH	lib/usagereporter/teleport/aggregating/reporter.go	333	// sessionSummariesGenerated tracks AI-generated session summaries with token usage	COMMENT
HIGH	lib/events/athena/querier.go	903	// We have the same amount of results as requested, return keyset	COMMENT
HIGH	lib/services/access_request.go	2661	// the underlying resources are the same as requested. If the resource requested	COMMENT
HIGH	lib/srv/desktop/rdp/rdpclient/src/rdpdr/tdp.rs	345	/// with the data as requested by a SharedDirectoryReadRequest.	COMMENT
HIGH	tool/tctl/common/recordings/tui.go	34	// SummaryGetter fetches the AI-generated summary for a recorded session.	COMMENT

Slop Phrases10 hits · 25 pts

Severity	File	Line	Snippet	Context
LOW	…ort/src/Bots/Add/GitHubActionsSsh/AddBotToWorkflow.tsx	99	${includeNameComment ? '# if you added a workflow name in the previous step, make sure you use the same value here'	CODE
LOW	docs/pages/includes/config-reference/jamf-service.yaml	9	# If you have multiple Jamf sources, make sure to give them distinct,	COMMENT
MEDIUM	docs/pages/includes/config-reference/auth-service.yaml	125	# To change the name of an existing cluster, you can use	COMMENT
MEDIUM	…Verify/Features/Enrollment/EnrollDeviceViewModel.swift	67	// The code that follows in this function is for demonstration purposes only.	COMMENT
MEDIUM	examples/chart/teleport-kube-agent/values.yaml	203	# After configuring a role, you can use an `eks.amazonaws.com/role-arn` annotation with the `annotations.serviceAccoun	COMMENT
MEDIUM	examples/chart/teleport-kube-agent/values.yaml	1065	# To create your own join token secret, you can use a command like this:	COMMENT
MEDIUM	examples/chart/event-handler/values.yaml	268	# Alternatively, you can use `ClusterIssuer` for a cluster-wide issuer.	COMMENT
MEDIUM	examples/chart/teleport-relay/values.yaml	106	# To create your own join token secret, you can use a command like this:	COMMENT
MEDIUM	lib/tbot/internal/sds/handler.go	241	// It's worth noting that we'll receive an IOF/Canceled error	COMMENT
LOW	lib/authz/middleware.go	140	// when turning intermediaries on, don't forget to verify	COMMENT

Verbosity Indicators13 hits · 23 pts

Severity	File	Line	Snippet	Context
LOW	integrations/terraform/testlib/bot_test.go	308	// Step 1: Create bot with scope	COMMENT
LOW	integrations/terraform/testlib/bot_test.go	339	// Step 3: Change bot scope (should force replacement)	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1003	// Step 1: Obtain a start token.	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1007	// Step 2: Obtain an approval token using the start token.	COMMENT
LOW⚡	lib/auth/accountrecovery_test.go	1017	// Step 3: Complete recovery with the obtained approved token.	COMMENT
LOW	lib/web/apiserver.go	1533	// but the purpose of this function is specifically to discover	COMMENT
LOW	lib/kube/proxy/forwarder.go	1383	// If we were not granted access to any kube users or groups, we need to check if we should bypass auth for a	COMMENT
LOW	lib/services/access_list.go	417	// Step 1: Check owner filter if provided	COMMENT
LOW	lib/services/access_list.go	429	// Step 2: Check role filter if provided	COMMENT
LOW⚡	lib/services/access_list.go	441	// Step 3: check the origin	COMMENT
LOW⚡	lib/services/access_list.go	446	// Step 4: Check search filter if provided	COMMENT
LOW	lib/services/local/users.go	372	// if the user has no local auth, we need to check if the user	COMMENT
LOW	lib/srv/db/redis/cmds.go	168	// Redis sets "default" as a default username. Here we need to check if the "implicit" username	COMMENT

Redundant / Tautological Comments10 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	…s/pages/includes/config-reference/database-config.yaml	234	# Set is_flexi_server to true when using an Azure flexible server.	COMMENT
LOW	examples/chart/index.html	13	# Set clusterName to a unique hostname, for example teleport.example.com	COMMENT
LOW	examples/chart/index.html	14	# Set acmeEmail to receive correspondence from Letsencrypt certificate authority.	COMMENT
LOW	examples/chart/teleport-cluster/values.yaml	270	# Set enterprise to true to use enterprise image	COMMENT
LOW	examples/chart/teleport-cluster/values.yaml	282	# Set enabled to true to add the Kubernetes Teleport Operator	COMMENT
LOW	build.assets/build-fido2-macos.sh	17	# Set C_ARCH to $(uname -m) if unset, and validate supported architecture	COMMENT
LOW	build.assets/build-fido2-macos.sh	78	# Check if another builder beat us. Builds _should_ be equivalent.	COMMENT
LOW	assets/install-scripts/license-check.sh	32	# Check if OpenSSL is installed	COMMENT
LOW	assets/install-scripts/license-check.sh	51	# Check if the license is issued before Jan 01 2024	COMMENT
LOW	assets/install-scripts/license-check.sh	61	# Check if the license validity exceeds four years and was issued before the cutoff	COMMENT

Example Usage Blocks7 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW⚡	examples/identity-activity-center/policy.tf	15	# Usage:	COMMENT
LOW	lib/tfgen/transform/machineid.go	35	// Example usage:	COMMENT
LOW	lib/limiter/limiter.go	90	// Example usage:	COMMENT
LOW	lib/observability/metrics/registry.go	56	// Example usage:	COMMENT
LOW	lib/observability/metrics/registry.go	83	// Example usage:	COMMENT
LOW	lib/itertools/iterator.go	38	// Example usage:	COMMENT
LOW	api/observability/tracing/tracing.go	62	// Example usage:	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	integrations/operator/main.go	196	//+kubebuilder:scaffold:builder	COMMENT
MEDIUM	tool/tctl/common/accesslist/command.go	465	// This is useful for agentic workflows to get all high signal information about	COMMENT

Cross-Language Confusion (JS/TS)1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…packages/shared/components/Markdown/Markdown.story.tsx	158	print("Here's a code block")	CODE

Excessive Try-Catch Wrapping3 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW⚡	…amples/mcp-servers/verify-teleport-jwt-fastmcp/main.py	40	except Exception as e:	CODE
LOW⚡	…amples/mcp-servers/verify-teleport-jwt-fastmcp/main.py	49	except Exception as e:	CODE
MEDIUM	…amples/mcp-servers/verify-teleport-jwt-fastmcp/main.py	37	def get_teleport_cluster_name() -> str:	CODE

gravitational/teleport

Open-Source Code Quality, Security and Technical Debt Review