AI Slop Code Risk Monitor

gruntwork-io/terragrunt

SlopCodeMonitor badge for gruntwork-io/terragrunt Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/Terraform to scale.

1.7 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for gruntwork-io/terragrunt, a Go project with 9,909 GitHub stars. SynthScan examined 459,023 lines of code across 1790 source files, recording 462 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 1.7 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.7
Adjusted Signal
1.7
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
9.9K
Stars
Go
Language
459.0K
Lines of Code
1.8K
Files
462
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 425 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 1.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 44 finding(s).

PR Review Velocity Impact 7.5/100 · LOW

Which changes need focused human review? 462 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 127LOW 335

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 462 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Modern AI Meta-Vocabulary89 hits · 289 pts
SeverityFileLineSnippetContext
MEDIUMtest/integration_scaffold_test.go26// scaffoldModuleURL returns the canonical scaffold-module source on theCOMMENT
MEDIUMtest/integration_scaffold_test.go610 // Verify the pre-existing file was not modified by scaffold's formatting step.COMMENT
MEDIUM⚡test/integration_scaffold_ssh_test.go21// sshScaffoldModuleURL is the SSH-form source for scaffold-moduleCOMMENT
MEDIUM⚡test/integration_scaffold_ssh_test.go26 return "git::" + m.SSHURL + "//test/fixtures/scaffold/scaffold-module"CODE
MEDIUM⚡test/integration_scaffold_ssh_test.go29// sshScaffoldTemplateModule is the SSH-form source for the scaffoldCOMMENT
MEDIUM⚡test/integration_scaffold_ssh_test.go34 return "git::" + m.SSHURL + "//test/fixtures/scaffold/module-with-template"CODE
MEDIUM⚡test/integration_scaffold_ssh_test.go38// scaffold external-template/template fixture, which it asks the serverCOMMENT
MEDIUM⚡test/integration_scaffold_ssh_test.go43 return "git::" + m.SSHURL + "//test/fixtures/scaffold/external-template/template"CODE
MEDIUMtest/integration_scaffold_ssh_test.go95// internal/cli/commands/scaffold/source_url_test.go, so thisCOMMENT
MEDIUMtest/integration_scaffold_ssh_test.go96// integration test now just verifies that scaffold runs end-to-endCOMMENT
MEDIUMtest/integration_scaffold_ssh_test.go147// scaffold's source_url_test; this test now just verifies theCOMMENT
MEDIUMtest/integration_scaffold_ssh_test.go148// var-file plumbing reaches scaffold and EnableRootInclude=falseCOMMENT
MEDIUMtest/helpers/git_server.go215// subpaths (e.g. "test/fixtures/scaffold/scaffold-module") andCOMMENT
MEDIUMtest/helpers/git_server.go228// branches at the new HEAD (so a `scaffold` source resolved to theCOMMENT
MEDIUMinternal/runner/run/no_dot_terragrunt_cache_e2e_test.go247// newNoDotTerragruntCacheOpts returns scaffold options with the no-dot-terragrunt-cache experiment enabled.COMMENT
MEDIUMinternal/cli/flags/shared/scaffold.go18// NewScaffoldingFlags creates the flags shared between catalog and scaffold commands.COMMENT
MEDIUMinternal/cli/commands/commands.go103 scaffold.NewCommand(l, opts, v), // scaffoldCODE
MEDIUMinternal/cli/commands/catalog/portal_test.go42// string a scaffold is generated from.COMMENT
MEDIUMinternal/cli/commands/catalog/portal_test.go478// componentSources returns the source strings a scaffold would be generatedCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/model_test.go230// the interactive scaffold key (`s`) on a copyable component transitionsCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/model_test.go276 // Lowercase s = interactive scaffold flow.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/model_test.go389 // placeholder scaffold, no form in between.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/model_test.go581// scaffold finishing with a file list names those files in the exit callout.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/model_test.go729// TestModelScaffoldFailureQuitsWithError verifies that a failed scaffoldCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/scaffold_test.go24// tea.Program, so the tea.Exec scaffold command runs against a local module.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go339 // Discard further input while the scaffold subprocess is running;COMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go399// ScaffoldFinishedMsg is delivered when a scaffold subprocess completes.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go424// scaffold or copy action. action is a verb phrase ("scaffolding component",COMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go566// scaffold run, naming the files that were actually generated. WhenCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go606// scaffoldFileListCap is how many generated paths the post-scaffold calloutCOMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/update.go679// and (for module/template) the prepared scaffold.Plan, or (for unit/stack)COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/update.go689// like a scaffold or copy failure: stash a styled message and quit.COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/update.go695// scaffold from.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go709// parsing variables via scaffold.Prepare; for unit/stack it means readingCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go729// discoverModuleFields prepares the scaffold for a module/template andCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go822// abandonForm releases any prepared scaffold.Plan and clears the formCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/update.go848// scaffoldComponentPlaceholderCmd schedules a planless scaffold run, whichCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/keys.go77// interactive scaffold form; the placeholder-only flow is reachable fromCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/keys.go133 // Run the interactive scaffold flow (s).COMMENT
MEDIUMinternal/cli/commands/catalog/tui/copy.go24// `scaffold` command drives too.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/copy.go101// scaffold emits its output.COMMENT
MEDIUMinternal/cli/commands/catalog/tui/keys_test.go43 // The previous design split scaffold across `s` (validated) and `S`COMMENT
MEDIUMinternal/cli/commands/catalog/tui/scaffold.go15// via the scaffold package. When plan is non-nil the command takes theCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/scaffold.go40// WithPlan attaches a prepared scaffold.Plan and the user-supplied HCLCOMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go67 // work (e.g. scaffold.Prepare downloading sources) propagates theCOMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go76 // and is handed down to the scaffold/copy/form-discovery leaves.COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go82 // the pager and form so scaffold and "view source" know their targetCOMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go86 // scaffold) matched while in the list view.COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go110 // from scaffold-variable discovery.COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go114 // or the scaffold is consumed.COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go119 // terminalErr is the failure that ended the session (a scaffold, copy,COMMENT
MEDIUM⚡internal/cli/commands/catalog/tui/model.go128 // entrypoint, so scaffold and form-discovery leaves run against theCOMMENT
MEDIUMinternal/cli/commands/catalog/tui/model.go147 // State is the current view (list, pager, form, or scaffold).COMMENT
MEDIUMinternal/cli/commands/hcl/format/format.go166// This is used by scaffold to format only the files that were generated by boilerplate.COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold_test.go501 // Apply catalog config settings to options (simulating scaffold.Run behavior)COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go53 // DefaultBoilerplateConfig is the boilerplate config used to scaffold a unit.COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go149// Plan captures the state of a scaffold preparation: the source module hasCOMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go223 // scaffold only in empty directoriesCOMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go349// Generate renders the prepared scaffold into the output directory. WhenCOMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go523// It is the non-interactive entry point used by the CLI scaffold command andCOMMENT
29 more matches not shown…
Over-Commented Block288 hits · 288 pts
SeverityFileLineSnippetContext
LOW.golangci.yml281 text: venv|vfs\.DetectFSKind|process argumentsCOMMENT
LOWtest/integration_provider_cache_lockfile_tf_test.go21// `providers lock -platform=...` and no preexisting lock file) populatesCOMMENT
LOWtest/integration_aws_oidc_test.go221// TestAWSReadTerragruntAuthProviderCmdWithOIDCChainedAssumeRole verifies chained role assumptionCOMMENT
LOWtest/integration_regressions_tf_test.go541// ├── bastion/ <- Run from here, has dependency on module2COMMENT
LOWtest/integration_render_expansion_test.go41}COMMENT
LOWtest/integration_render_expansion_test.go61 skip_outputs = trueCOMMENT
LOWtest/integration_regressions_test.go61// is properly detected even when used in an included config with expose = true.COMMENT
LOWtest/integration_regressions_test.go101// - Exposed include blocks with generate blocksCOMMENT
LOWtest/fuzz_cli_test.go101 "catalog": {},COMMENT
LOWtest/fuzz_cli_test.go121// may be mutated, so the parser also sees broken input.COMMENT
LOWtest/fuzz_cli_test.go221}COMMENT
LOWtest/integration_runner_pool_test.go361 require.NoError(t, err)COMMENT
LOWtest/helpers/package.go81COMMENT
LOWtest/helpers/git_server.go61COMMENT
LOWtest/helpers/git_server_ssh.go41COMMENT
LOWtest/helpers/git_server_ssh.go201COMMENT
LOWtest/helpers/venvtest/venvtest.go41 memConfigDir = Root("/venvtest/config")COMMENT
LOWtest/helpers/venvtest/venvtest.go121// NewOSWithEmptyEnv returns the OS-backed bundle with an empty environment, soCOMMENT
LOWinternal/cas/gitstore.go21COMMENT
LOWinternal/cas/gitstore.go41COMMENT
LOWinternal/cas/gitstore.go61// Each per-URL repository is gated by an exclusive flock because pack-fileCOMMENT
LOWinternal/cas/gitstore.go181// [GitStoreRepo.Hash]. Any rawRef `git rev-parse` accepts works.COMMENT
LOWinternal/cas/gitstore.go341}COMMENT
LOWinternal/cas/store.go41COMMENT
LOWinternal/cas/hcl_rewrite.go41 UpdateSourceWithCAS boolCOMMENT
LOWinternal/cas/telemetry.go21COMMENT
LOWinternal/cas/telemetry.go41COMMENT
LOWinternal/cas/testserver_test.go41// startTestServer returns the URL of a package-shared Git serverCOMMENT
LOWinternal/cas/testserver_test.go61// partition state by URL stay isolated from each other.COMMENT
LOWinternal/cas/local.go21)COMMENT
LOWinternal/cas/local.go101// content-addressed hash over (relpath, mode, file-content-hash) triples. TheCOMMENT
LOWinternal/cas/clone_e2e_test.go121COMMENT
LOWinternal/cas/cas.go41COMMENT
LOWinternal/cas/cas.go141// back while it is fresh, so a later process can resolve a source withoutCOMMENT
LOWinternal/cas/cas.go261// rejects SCP form, so any encoding scheme that round-trips throughCOMMENT
LOWinternal/cas/cas.go301// from the ref git fetch selects rather than the ref that was asked forCOMMENT
LOWinternal/cas/cas.go921 // otherwise. Lets downstream code skip a redundant rev-parse.COMMENT
LOWinternal/cas/probecache.go21 // ProbeModeOnline serves a persisted probe that is still within itsCOMMENT
LOWinternal/cas/probecache.go41// the directory every entry is filed under, so the two cannot drift.COMMENT
LOWinternal/cas/probecache.go61 ProbedAt time.Time `json:"probed_at"`COMMENT
LOWinternal/cas/probecache.go81// store, so a later process can skip the probe for a source whose TTL hasCOMMENT
LOWinternal/cas/stacks.go61 // Cleanup removes the temporary directory when called.COMMENT
LOWinternal/cas/source.go41 // upstream, such as an object version or an exact module version. ACOMMENT
LOWinternal/cas/source.go81// suggestedKey is the probe-derived cache key, or empty when the probeCOMMENT
LOWinternal/cas/source.go101 // answers: concurrent callers coalesce onto one probe, and a recordedCOMMENT
LOWinternal/cas/source.go121 // cas_fetch_source span (e.g. the git path adds "branch").COMMENT
LOWinternal/cas/source.go141// failure is returned as it stands, so a source that can no longer supplyCOMMENT
LOWinternal/cas/source.go521 // (or any persisted answer when offline).COMMENT
LOWinternal/cas/source.go701COMMENT
LOWinternal/cas/errors.go41 // ErrAbsoluteSource is returned when an update_source_with_cas source is an absolute pathCOMMENT
LOWinternal/cas/errors.go161// it means an entry was removed out from under it.COMMENT
LOWinternal/getter/oci.go281type OCINewStoreFunc func(ctx context.Context, registryDomain, repositoryName string) (OCIRepositoryStore, error)COMMENT
LOWinternal/getter/tfr.go21COMMENT
LOWinternal/getter/objectstore.go21)COMMENT
LOWinternal/getter/filecopy.go21COMMENT
LOWinternal/getter/casgetter_forced_test.go21// TestCASGetter_ForcedThreadedToInnerClient pins the wiring fix thatCOMMENT
LOWinternal/getter/defaults.go201// detection.COMMENT
LOWinternal/getter/defaults.go301COMMENT
LOWinternal/getter/doc.go1// Package getter is Terragrunt's single integration point with theCOMMENT
LOWinternal/getter/doc.go21// internal/cas for the CAS getters).COMMENT
228 more matches not shown…
Decorative Section Separators34 hits · 111 pts
SeverityFileLineSnippetContext
MEDIUMinternal/cli/commands/scaffold/scaffold.go77 # --------------------------------------------------------------------------------------------------------------------COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go79 # --------------------------------------------------------------------------------------------------------------------COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go97 # --------------------------------------------------------------------------------------------------------------------COMMENT
MEDIUMinternal/cli/commands/scaffold/scaffold.go100 # --------------------------------------------------------------------------------------------------------------------COMMENT
MEDIUM⚡docs/public/robots.txt5# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt7# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt11# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt13# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt56# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt62# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt76# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt86# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt128# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt132# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt140# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt143# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt148# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt150# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt193# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt196# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt201# ==============================================================COMMENT
MEDIUM⚡docs/public/robots.txt203# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt36# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt42# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt112# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt117# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt226# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt228# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt266# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt268# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt324# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt327# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt344# ==============================================================COMMENT
MEDIUMdocs/public/robots.txt346# ==============================================================COMMENT
Structural Annotation Overuse15 hits · 26 pts
SeverityFileLineSnippetContext
LOWtest/integration_docs_tf_test.go220 // Step 1: Generate the stackCOMMENT
LOWtest/integration_docs_tf_test.go236 // Step 2: Apply the stack to create state filesCOMMENT
LOWtest/integration_docs_tf_test.go279 // Step 3: Clean and regenerate the stackCOMMENT
LOWtest/integration_docs_tf_test.go299 // Step 4: Verify that existing state is recognized after regenerationCOMMENT
LOWtest/integration_docs_tf_test.go310 // Step 5: Destroy resources to clean upCOMMENT
LOW⚡test/integration_tf_test.go4712 // Step 1: Create plan with custom name (no .tfplan extension)COMMENT
LOW⚡test/integration_tf_test.go4719 // Step 2: Apply using the custom plan file nameCOMMENT
LOWinternal/cli/flags/flag_opts.go51// NOTE: This function is currently unused but retained for future flag deprecation needs.COMMENT
LOWinternal/queue/queue_test.go1048 // Step 1: Only C should be ready (it has no dependents)COMMENT
LOW⚡internal/queue/queue_test.go1062 // Step 2: After C is destroyed, B should be ready (but NOT A yet, as A is a dependency of B)COMMENT
LOW⚡internal/queue/queue_test.go1071 // Step 3: After B is destroyed, A should be readyCOMMENT
LOW⚡internal/queue/queue_test.go1080 // Step 4: All entries should be finishedCOMMENT
LOWinternal/queue/queue_test.go1113 // Step 1: Only C should be readyCOMMENT
LOWinternal/queue/queue_test.go1133 // Step 2: B should now be ready even though C failedCOMMENT
LOWinternal/queue/queue_test.go1147 // Step 3: After B succeeds, A should be readyCOMMENT
Verbosity Indicators14 hits · 25 pts
SeverityFileLineSnippetContext
LOWtest/integration_docs_tf_test.go220 // Step 1: Generate the stackCOMMENT
LOWtest/integration_docs_tf_test.go236 // Step 2: Apply the stack to create state filesCOMMENT
LOWtest/integration_docs_tf_test.go279 // Step 3: Clean and regenerate the stackCOMMENT
LOWtest/integration_docs_tf_test.go299 // Step 4: Verify that existing state is recognized after regenerationCOMMENT
LOWtest/integration_docs_tf_test.go310 // Step 5: Destroy resources to clean upCOMMENT
LOW⚡test/integration_tf_test.go4712 // Step 1: Create plan with custom name (no .tfplan extension)COMMENT
LOW⚡test/integration_tf_test.go4719 // Step 2: Apply using the custom plan file nameCOMMENT
LOWinternal/queue/queue_test.go1048 // Step 1: Only C should be ready (it has no dependents)COMMENT
LOW⚡internal/queue/queue_test.go1062 // Step 2: After C is destroyed, B should be ready (but NOT A yet, as A is a dependency of B)COMMENT
LOW⚡internal/queue/queue_test.go1071 // Step 3: After B is destroyed, A should be readyCOMMENT
LOW⚡internal/queue/queue_test.go1080 // Step 4: All entries should be finishedCOMMENT
LOWinternal/queue/queue_test.go1113 // Step 1: Only C should be readyCOMMENT
LOWinternal/queue/queue_test.go1133 // Step 2: B should now be ready even though C failedCOMMENT
LOWinternal/queue/queue_test.go1147 // Step 3: After B succeeds, A should be readyCOMMENT
AI Slop Vocabulary4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUMtest/integration_test.go306 // This makes the test more robust.COMMENT
MEDIUM…rnal/vendored/opentofu/upstream/lang/funcs/datetime.go195 // be robust here.COMMENT
MEDIUMinternal/glob/glob_test.go320 // ElementsMatch ignores order, so the assertion is robust to walkerCOMMENT
MEDIUMpkg/config/dependency.go1831 // To make parsing robust to either, isolate the first JSON object in the buffer.COMMENT
Hyper-Verbose Identifiers10 hits · 10 pts
SeverityFileLineSnippetContext
LOW…/src/components/vendored/starlight/rehype-file-tree.ts187function getFileIconTypeFromExtension(fileName: string) {CODE
LOW…/src/components/vendored/starlight/rehype-file-tree.ts240function throwFileTreeValidationError(message: string): never {CODE
LOWdocs/src/lib/changelog.ts294function transformWithinGuarantees(input: string): string {CODE
LOWdocs/src/lib/changelog.ts306function transformAsidesToGitHubAlerts(input: string): string {CODE
LOWdocs/src/lib/page-to-markdown.ts93 .use(function improveExpressiveCodeHandling() {CODE
LOWdocs/src/lib/page-to-markdown.ts327export async function componentToSimpleMarkdown(CODE
LOWdocs/src/lib/commands/sidebar/index.ts29function organizeCommandsIntoGroups(flatCommandItems: (SidebarItem & { originalPath: string })[]): SidebarItem[] {CODE
LOWdocs/src/lib/commands/sidebar/index.ts60function insertCommandsIntoSidebar(CODE
LOWdocs/src/lib/commands/sidebar/index.ts102async function expandAutogenerateDirectory(directory: string): Promise<SidebarItem[]> {CODE
LOWdocs/src/lib/commands/sidebar/index.ts160async function populateAutogeneratedSections(items: SidebarItem[]): Promise<SidebarItem[]> {CODE
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippetContext
LOW.github/scripts/release/check-release-exists.sh20 # Check if release exists using gh CLI (only care about exit code)COMMENT
LOW.github/scripts/release/lib-release-config.sh94# Check if config file existsCOMMENT
LOW.github/scripts/release/verify-assets-uploaded.sh52 # Check if file exists in releaseCOMMENT
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtest/helpers/git_server_ssh.go231 {key: "user.email", value: "test@test.com"},CODE
LOWtest/helpers/test_helpers.go117 cmd = exec.CommandContext(ctx, "git", "config", "user.email", "test@test.com")CODE
LOWinternal/cli/commands/hcl/validate/validate_test.go124 return vexec.Result{Stdout: []byte(`{"envs":{"AWS_ACCESS_KEY_ID":"fake-key"}}`)}CODE
Example Usage Blocks2 hits · 3 pts
SeverityFileLineSnippetContext
LOWinternal/cli/commands/info/strict/command.go2// Example usage:COMMENT
LOWdocs/tests/install_test.sh4# Usage:COMMENT