Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.
This report summarizes scanner evidence for harness/harness, a Go project with 38,513 GitHub stars. SynthScan examined 684,451 lines of code across 5880 source files, recording 3178 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 4.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3167 finding(s).
Are imports declared and package/API names verified? 1 finding(s).
Are wrappers, guards, and repeated structures necessary? 199 finding(s).
Which changes need focused human review? 3178 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3178 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/gitness/wire.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/driver_sqlite.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/driver_pq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/main.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/infra_provider_factory.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_client_factory.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_client_factory_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/wire.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/infra_provider.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_provider.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_config.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | crypto/crypto.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | crypto/crypto_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/webhook.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_settings.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/usergroup.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_suggestion.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/config.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/config.go | 61 | // have to satisfy at least one of the following two conditions: | COMMENT |
| LOW | types/config.go | 81 | COMMENT | |
| LOW | types/config.go | 161 | // CI defines configuration related to build executions. | COMMENT |
| LOW | types/check.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/PackageTag.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/ai_agent_auth.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/execution.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/token.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_activity_metadata.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/git.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/image_data.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/multireader_closer.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/service.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/githook.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/user.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/codeowners.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/principal.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/platform_connector.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/path_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/rebase.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/types_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/stream.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_error.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/lfs.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/resolved_feature.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/resolved_feature.go | 41 | COMMENT | |
| LOW | types/branch.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/linked_pullreq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/repo_activity_payload.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/commit.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/fork.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/repo_activity.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/github_connector_data.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/code_comment.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/infrastructure.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/jetbrains.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/autolink.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/service_account.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_reviewer_suggestion.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_event.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| 2820 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/cypress/utils/getRequestBodies.ts | 19 | export function getRandomCreateRegistryBody(name: string, packageType: PACKAGE_TYPE, type: REGISTRY_TYPE) { | CODE |
| LOW | …nfra/MachineLocationContent/MachineLocationContent.tsx | 112 | function CustomPersistentDiskColumn(row: Unknown) { | CODE |
| LOW | web/src/utils/Utils.ts | 686 | export function removeSpecificTextOptimized( | CODE |
| LOW | web/src/utils/Utils.ts | 1056 | export function combineAndNormalizePrincipalsAndGroups( | CODE |
| LOW | web/src/utils/FileUtils.ts | 50 | export function useFileContentViewerDecision({ | CODE |
| LOW | web/src/utils/timePopoverLocal/TimePopoverWithLocal.tsx | 40 | export function DateTimeWithLocalContentInline({ time }: { time: number }): JSX.Element { | CODE |
| LOW | …ponents/CommitModalButton/useCommitSuggestionModal.tsx | 52 | export function useCommitSuggestionsModal({ | CODE |
| LOW | …ponents/CommitModalButton/useCommitSuggestionModal.tsx | 141 | export function useCommitPullReqSuggestions() { | CODE |
| LOW | …arkdownEditorWithPreview/MarkdownEditorWithPreview.tsx | 151 | export function MarkdownEditorWithPreview({ | CODE |
| LOW | …arkdownEditorWithPreview/MarkdownEditorWithPreview.tsx | 762 | function scrollToAndSetCursorToEnd( | CODE |
| LOW | web/src/components/SourceCodeEditor/EditorUtils.ts | 56 | export function generateDefaultStepInsertionPath(stageIndex = 0): string { | CODE |
| LOW | web/src/components/Changes/CommitRange.tsx | 69 | function updatePageWhenCommitRangeIsChanged() { | CODE |
| LOW | web/src/components/Changes/CommitRange.tsx | 91 | function updateCommitRangeForCaller() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 166 | function updateInternalRefsOnReadOnlyMode() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 227 | function updateCacheWhenDiffDataArrives() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 332 | function updatePageWhenCommitRangeIsChanged() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 433 | function jumpToSelectedPathFromURL() { | CODE |
| LOW | web/src/components/CommentBox/CommentBox.tsx | 465 | function renderToggleCommentsButton() { | CODE |
| LOW | web/src/components/CommitsView/CommitsView.tsx | 287 | function renderPullRequestLinkFromCommitMessage( | CODE |
| LOW | web/src/components/CommitInfo/CommitInfo.tsx | 55 | function renderPullRequestLinkFromCommitMessage( | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 255 | function alwaysExpandDiffIfChangedSinceLastView() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 287 | function renderDiffAndCommentsIfInViewportOrSchedule() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 321 | function serializeDeserializeContent() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 417 | function adjustScrollPositionWhenCollapsingFile() { | CODE |
| LOW | web/src/components/DiffViewer/usePullReqComments.tsx | 943 | function bindClickEventToStartNewCommentThread() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewerUtils.tsx | 206 | export function createCommentOppositePlaceHolder(lineNumber: number, isNewCommentThread = false): HTMLTableRowElement { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewerUtils.tsx | 236 | export function activitiesToDiffCommentItems( | CODE |
| LOW | web/src/hooks/useSetPageContainerWidthVar.tsx | 33 | export function useSetPageContainerWidthVar({ domRef }: { domRef: React.RefObject<HTMLElement> }) { | CODE |
| LOW | …/src/ar/__mocks__/hooks/useGovernanceMetaDataModal.tsx | 33 | export function useGovernanceMetaDataModal(_props: UseGovernanceModalProps): UseConnectorGovernanceModalPayload { | CODE |
| LOW | …loadRequestsProvider/AsyncDownloadRequestsProvider.tsx | 40 | function AsyncDownloadRequestsProvider({ children }: { children: React.ReactNode }) { | CODE |
| LOW | …AsyncDownloadRequestsProvider/AsyncDownloadRequest.tsx | 35 | function AsyncDownloadRequestStatusIcon(props: AsyncDownloadRequestStatusIconProps) { | CODE |
| LOW | …ents/IncludeExcludePatterns/IncludeExcludePatterns.tsx | 48 | function shouldShowIncludeExcludeList(values: FormData): boolean { | CODE |
| LOW | web/src/ar/components/CleanupPolicyList/utils.tsx | 21 | export function getFormattedFormDataForCleanupPolicy(values: RepositoryRequest): RepositoryRequest { | CODE |
| LOW | web/src/ar/components/CleanupPolicyList/utils.tsx | 29 | export function getFormattedIntialValuesForCleanupPolicy(values: RepositoryRequest): RepositoryRequest { | CODE |
| LOW | …s/MetadataFilterSelector/useMetadataFilterFromQuery.ts | 29 | export default function useMetadatadataFilterFromQuery() { | CODE |
| LOW | …/src/ar/components/Badge/RepositoryVisibilityBadge.tsx | 31 | export default function RepositoryVisibilityBadge(props: RepositoryVisibilityBadgeProps): JSX.Element { | CODE |
| LOW | web/src/ar/common/utils.ts | 34 | export function getIdentifierStringForBreadcrumb(label: string, value: string): string { | CODE |
| LOW | web/src/ar/common/utils.ts | 43 | export function getPackageTypesForApiQueryParams(packageTypes: RepositoryPackageType[]): string | undefined { | CODE |
| LOW | web/src/ar/hooks/useGetRepositoryListViewType.ts | 21 | export function useGetRepositoryListViewType() { | CODE |
| LOW | …c/ar/frameworks/Version/ArtifactTreeNodeViewWidget.tsx | 32 | export default function ArtifactTreeNodeViewWidget(props: ArtifactTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …ar/frameworks/Version/VersionTreeNodeDetailsWidget.tsx | 32 | export default function VersionTreeNodeDetailsWidget(props: VersionTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | …r/frameworks/Version/ArtifactTreeNodeDetailsWidget.tsx | 31 | export default function ArtifactTreeNodeDetailsWidget(props: ArtifactTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | …rc/ar/frameworks/Version/VersionTreeNodeViewWidget.tsx | 32 | export default function VersionTreeNodeViewWidget(props: VersionTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …r/frameworks/Version/ArtifactRowSubComponentWidget.tsx | 32 | export default function ArtifactRowSubComponentWidget(props: ArtifactRowSubComponentWidgetProps): JSX.Element { | CODE |
| LOW | …eworks/RepositoryStep/RepositoryTreeNodeViewWidget.tsx | 32 | export default function RepositoryTreeNodeViewWidget(props: RepositoryTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …meworks/RepositoryStep/RepositorySetupClientWidget.tsx | 34 | export default function RepositorySetupClientWidget(props: RepositorySetupClientWidgetProps): JSX.Element { | CODE |
| LOW | …rks/RepositoryStep/RepositoryTreeNodeDetailsWidget.tsx | 31 | export default function RepositoryTreeNodeDetailsWidget(props: RepositoryTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 30 | function convertSecretInputToFormFields( | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 41 | export function transformFormValuesToSubmitValues( | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 61 | function convertFormFieldsToSecreteInput(formData: Webhook, secretField: string, secretSpacePathField: string) { | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 71 | export function transformWebhookDataToFormValues(data: Webhook, parent: Parent): WebhookRequestUI { | CODE |
| LOW | …list/components/ExemptionForm/ExemptionFormContent.tsx | 34 | function CreateExemptionFormContent(props: CreateExemptionFormContentProps) { | CODE |
| LOW | …onForm/ExemptionDetailsAndJustificationFormContent.tsx | 27 | export default function ExemptionDetailsAndJustificationFormContent( | CODE |
| LOW | …mponents/ExemptionForm/BasicInformationFormContent.tsx | 33 | export default function BasicInformationFormContent(props: BasicInformationFormContentProps) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 48 | function SecurityPolicyFailureDetailsItem({ | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 93 | function LicensePolicyFailureDetailItem({ data }: { data: LicensePolicyFailureDetailConfigV3 }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 114 | function PackageAgeViolationPolicyFailureDetailItem({ | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 139 | function OssRiskLevelViolationPolicyFailureDetailItem({ data }: { data: OssRiskLevelPolicyFailureDetailConfigV3 }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 154 | function GenericPolicyFailureDetailItem({ data }: { data: KVO }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 168 | function ViolationFailureDetailsItem(props: ViolationFailureDetailsItemProps) { | CODE |
| 129 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/api/request/pullreq.go | 123 | // TODO: Remove the "includeGitStats := true" line and uncomment the following code block. | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 119 | // Step 1: Validate access key | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 125 | // Step 2: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 135 | // Step 3: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 141 | // Step 4: Handle different container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 287 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 294 | // Step 2: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 300 | // Step 3: Handle container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 345 | // Step 4: Create log stream for stopping the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 352 | // Step 5: Stop the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 378 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 385 | // Step 4: Create logger stream for stopping and removing the container | COMMENT |
| LOW | …or/container/embedded_docker_container_orchestrator.go | 177 | // Step 5: Retrieve container information and return response | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 51 | // Step 1: Get orphan manifest IDs (lightweight query). | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 63 | // Step 2: Process in smaller sub-batches. | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 12 | // Step 1: Split by newline to get each JSON string | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 15 | // Step 2: Parse each line and clean up escaped strings inside 'out' key | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 163 | // Step 1: Authenticate | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 173 | // Step 2: Import repository from github.com/google/uuid | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 182 | // Step 3: Wait for import to complete | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 189 | // Step 4: Fetch a file from the repository (README.md) | COMMENT |
| LOW | registry/app/dist_temp/dcontext/http.go | 183 | // We need to check if that's intentional (could be a bug). | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 66 | // Step 1: Read first 4 bytes to get JSON length | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 72 | // Step 2: Read the JSON metadata | COMMENT |
| LOW | registry/app/store/database/artifact.go | 894 | // Step 1: Find the latest artifact ID | COMMENT |
| LOW | registry/app/store/database/artifact.go | 918 | // Step 2: Fetch full metadata for this specific artifact. | COMMENT |
| LOW | registry/app/store/database/registry.go | 360 | // Step 1: Fetch base registry data. | COMMENT |
| LOW | git/api/diff.go | 341 | // The purpose of this function is to get data based on which code comments could be repositioned. | COMMENT |
| LOW | git/api/diff.go | 393 | // The purpose of this function is to get diff data with which code comments could be generated. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | types/check.go | 99 | // CheckPayloadInternal is for internal use for more seamless integration for | COMMENT |
| MEDIUM | types/enum/pullreq.go | 88 | // Essentially, the Type determines the structure of the pull request activity's Payload structure. | COMMENT |
| MEDIUM | app/services/codeowners/service_test.go | 206 | \ \ \# user2@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 294 | a #user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 295 | b # user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 298 | e# user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 299 | f user1@harness.io#user2@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 300 | g user1@harness.io # user2@harness.io | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM | stream/redis_consumer.go | 198 | // NOTE: for the first call ever we want to get the history of the consumer (to allow for seamless restarts) | COMMENT |
| MEDIUM | .engops/pr_source_code_changes.sh | 9 | # The purpose of this script is to facilitate auto-tagging of | COMMENT |
| MEDIUM | .engops/pr_source_code_changes.sh | 29 | # Called by https://harness0.harness.io/ng/account/l7B_kbSEQD2wjrM7PShm5w/all/orgs/Audit/projects/Engops_Audit/pipelines | COMMENT |
| MEDIUM | registry/types/digest.go | 247 | // These functions allow seamless conversion between types.Digest and digest.Digest. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 119 | // Step 1: Validate access key | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 125 | // Step 2: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 135 | // Step 3: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 141 | // Step 4: Handle different container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 287 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 294 | // Step 2: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 300 | // Step 3: Handle container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 345 | // Step 4: Create log stream for stopping the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 352 | // Step 5: Stop the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 378 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 385 | // Step 4: Create logger stream for stopping and removing the container | COMMENT |
| LOW | …or/container/embedded_docker_container_orchestrator.go | 177 | // Step 5: Retrieve container information and return response | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 51 | // Step 1: Get orphan manifest IDs (lightweight query). | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 63 | // Step 2: Process in smaller sub-batches. | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 12 | // Step 1: Split by newline to get each JSON string | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 15 | // Step 2: Parse each line and clean up escaped strings inside 'out' key | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 163 | // Step 1: Authenticate | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 173 | // Step 2: Import repository from github.com/google/uuid | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 182 | // Step 3: Wait for import to complete | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 189 | // Step 4: Fetch a file from the repository (README.md) | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 66 | // Step 1: Read first 4 bytes to get JSON length | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 72 | // Step 2: Read the JSON metadata | COMMENT |
| LOW | registry/app/store/database/artifact.go | 894 | // Step 1: Find the latest artifact ID | COMMENT |
| LOW | registry/app/store/database/artifact.go | 918 | // Step 2: Fetch full metadata for this specific artifact. | COMMENT |
| LOW | registry/app/store/database/registry.go | 360 | // Step 1: Fetch base registry data. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | app/services/linkedpr/handlers/pullrequest_test.go | 85 | // ─── mock harnesses ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/pullrequest_test.go | 363 | // ─── fixtures ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/pullrequest_test.go | 454 | // ─── tests ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/pullrequest_test.go | 1096 | // ─── repository counter assertions ─────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 116 | // ─── stubs ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 185 | // ─── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 223 | // ─── tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 31 | // ─── stubs ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 130 | // ─── helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 172 | // ─── tests ──────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …itspace/orchestrator/utils/script_templates/set_env.sh | 18 | # Create the export statement | COMMENT |
| MEDIUM | registry/tests/conformance_test.sh | 24 | # Define the URL and request payload | COMMENT |
| MEDIUM | registry/tests/conformance_test.sh | 49 | # Define the URL and request payload | COMMENT |
| MEDIUM | registry/tests/maven/generate_junit_report.sh | 15 | # Create a timestamp for the report | COMMENT |
| MEDIUM | registry/tests/scripts/generate_report.sh | 47 | # Create a timestamp | COMMENT |
| MEDIUM | registry/tests/scripts/generate_report.sh | 50 | # Create a JSON report | COMMENT |
| MEDIUM | registry/tests/scripts/maven_tests.sh | 6 | # Create a Maven registry with timestamp to ensure uniqueness | COMMENT |
| MEDIUM | registry/tests/scripts/npm_tests.sh | 12 | # Create an NPM registry with timestamp to ensure uniqueness | COMMENT |
| MEDIUM | registry/tests/scripts/oci_tests.sh | 19 | # Create a temporary directory to run tests outside of the module | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …or/utils/script_templates/install_tools_vs_code_web.sh | 7 | # Check if curl is installed | COMMENT |
| LOW | …ace/orchestrator/utils/script_templates/manage_user.sh | 8 | # Check if the user's home directory exists | COMMENT |
| LOW | …/orchestrator/utils/script_templates/run_vscode_web.sh | 33 | # Check if the process is still running | COMMENT |
| LOW | …pace/orchestrator/utils/script_templates/clone_code.sh | 57 | # Check if .devcontainer/devcontainer.json exists | COMMENT |
| LOW | …itspace/orchestrator/utils/script_templates/set_env.sh | 21 | # Check if the variable is already present in /etc/profile | COMMENT |
| LOW | …ace/orchestrator/utils/script_templates/install_git.sh | 9 | # Check if Git is installed | COMMENT |
| LOW | registry/tests/conformance_test.sh | 37 | # Check if jq command succeeded | COMMENT |
| LOW | registry/tests/conformance_test.sh | 59 | # Check if jq command succeeded | COMMENT |
| LOW | registry/tests/gopkg/scripts/setup_test.sh | 132 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/cargo/scripts/setup_test.sh | 132 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/maven/generate_junit_report.sh | 5 | # Check if the JSON report exists | COMMENT |
| LOW | registry/tests/maven/scripts/setup_test.sh | 114 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/npm/scripts/setup_test.sh | 114 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| LOW⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/security/govulncheck-version.sh | 19 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | registry/app/pkg/docker/local.go | 936 | // TODO: implement this | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | blob/gcs_test.go | 51 | KeyPath: "/tmp/fake-key.json", | CODE |