Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.
This report presents the forensic synthetic code analysis of harness/harness, a Go project with 37,301 GitHub stars. SynthScan v2.0 examined 664,552 lines of code across 5778 source files, recording 3090 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 4.8 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3090 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/gitness/wire.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/driver_sqlite.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/driver_pq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | cmd/gitness/main.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/infra_provider_factory.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_client_factory.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_client_factory_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/wire.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/infra_provider.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_provider.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | infraprovider/docker_config.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | crypto/crypto.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | crypto/crypto_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/webhook.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_settings.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/usergroup.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_suggestion.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/config.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/config.go | 61 | // have to satisfy at least one of the following two conditions: | COMMENT |
| LOW | types/config.go | 81 | COMMENT | |
| LOW | types/config.go | 161 | // CI defines configuration related to build executions. | COMMENT |
| LOW | types/check.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/PackageTag.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/ai_agent_auth.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/execution.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/token.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_activity_metadata.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/git.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/image_data.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/multireader_closer.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/service.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/githook.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/user.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/codeowners.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/principal.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/platform_connector.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/path_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/rebase.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/types_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/stream.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_error.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/lfs.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/resolved_feature.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/resolved_feature.go | 41 | COMMENT | |
| LOW | types/branch.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_test.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/linked_pullreq.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/repo_activity_payload.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/commit.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/fork.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/repo_activity.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/github_connector_data.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/code_comment.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/infrastructure.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/jetbrains.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/autolink.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/service_account.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/pullreq_reviewer_suggestion.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| LOW | types/gitspace_event.go | 1 | // Copyright 2023 Harness, Inc. | COMMENT |
| 2733 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/cypress/utils/getRequestBodies.ts | 19 | export function getRandomCreateRegistryBody(name: string, packageType: PACKAGE_TYPE, type: REGISTRY_TYPE) { | CODE |
| LOW | …nfra/MachineLocationContent/MachineLocationContent.tsx | 112 | function CustomPersistentDiskColumn(row: Unknown) { | CODE |
| LOW | web/src/utils/Utils.ts | 686 | export function removeSpecificTextOptimized( | CODE |
| LOW | web/src/utils/Utils.ts | 1056 | export function combineAndNormalizePrincipalsAndGroups( | CODE |
| LOW | web/src/utils/FileUtils.ts | 50 | export function useFileContentViewerDecision({ | CODE |
| LOW | web/src/utils/timePopoverLocal/TimePopoverWithLocal.tsx | 40 | export function DateTimeWithLocalContentInline({ time }: { time: number }): JSX.Element { | CODE |
| LOW | …ponents/CommitModalButton/useCommitSuggestionModal.tsx | 52 | export function useCommitSuggestionsModal({ | CODE |
| LOW | …ponents/CommitModalButton/useCommitSuggestionModal.tsx | 141 | export function useCommitPullReqSuggestions() { | CODE |
| LOW | …arkdownEditorWithPreview/MarkdownEditorWithPreview.tsx | 151 | export function MarkdownEditorWithPreview({ | CODE |
| LOW | …arkdownEditorWithPreview/MarkdownEditorWithPreview.tsx | 762 | function scrollToAndSetCursorToEnd( | CODE |
| LOW | web/src/components/SourceCodeEditor/EditorUtils.ts | 56 | export function generateDefaultStepInsertionPath(stageIndex = 0): string { | CODE |
| LOW | web/src/components/Changes/CommitRange.tsx | 69 | function updatePageWhenCommitRangeIsChanged() { | CODE |
| LOW | web/src/components/Changes/CommitRange.tsx | 91 | function updateCommitRangeForCaller() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 166 | function updateInternalRefsOnReadOnlyMode() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 227 | function updateCacheWhenDiffDataArrives() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 332 | function updatePageWhenCommitRangeIsChanged() { | CODE |
| LOW | web/src/components/Changes/Changes.tsx | 433 | function jumpToSelectedPathFromURL() { | CODE |
| LOW | web/src/components/CommentBox/CommentBox.tsx | 465 | function renderToggleCommentsButton() { | CODE |
| LOW | web/src/components/CommitsView/CommitsView.tsx | 287 | function renderPullRequestLinkFromCommitMessage( | CODE |
| LOW | web/src/components/CommitInfo/CommitInfo.tsx | 55 | function renderPullRequestLinkFromCommitMessage( | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 255 | function alwaysExpandDiffIfChangedSinceLastView() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 287 | function renderDiffAndCommentsIfInViewportOrSchedule() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 321 | function serializeDeserializeContent() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewer.tsx | 417 | function adjustScrollPositionWhenCollapsingFile() { | CODE |
| LOW | web/src/components/DiffViewer/usePullReqComments.tsx | 943 | function bindClickEventToStartNewCommentThread() { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewerUtils.tsx | 206 | export function createCommentOppositePlaceHolder(lineNumber: number, isNewCommentThread = false): HTMLTableRowElement { | CODE |
| LOW | web/src/components/DiffViewer/DiffViewerUtils.tsx | 236 | export function activitiesToDiffCommentItems( | CODE |
| LOW | web/src/hooks/useSetPageContainerWidthVar.tsx | 33 | export function useSetPageContainerWidthVar({ domRef }: { domRef: React.RefObject<HTMLElement> }) { | CODE |
| LOW | …/src/ar/__mocks__/hooks/useGovernanceMetaDataModal.tsx | 33 | export function useGovernanceMetaDataModal(_props: UseGovernanceModalProps): UseConnectorGovernanceModalPayload { | CODE |
| LOW | …loadRequestsProvider/AsyncDownloadRequestsProvider.tsx | 40 | function AsyncDownloadRequestsProvider({ children }: { children: React.ReactNode }) { | CODE |
| LOW | …AsyncDownloadRequestsProvider/AsyncDownloadRequest.tsx | 35 | function AsyncDownloadRequestStatusIcon(props: AsyncDownloadRequestStatusIconProps) { | CODE |
| LOW | …ents/IncludeExcludePatterns/IncludeExcludePatterns.tsx | 48 | function shouldShowIncludeExcludeList(values: FormData): boolean { | CODE |
| LOW | web/src/ar/components/CleanupPolicyList/utils.tsx | 21 | export function getFormattedFormDataForCleanupPolicy(values: RepositoryRequest): RepositoryRequest { | CODE |
| LOW | web/src/ar/components/CleanupPolicyList/utils.tsx | 29 | export function getFormattedIntialValuesForCleanupPolicy(values: RepositoryRequest): RepositoryRequest { | CODE |
| LOW | …s/MetadataFilterSelector/useMetadataFilterFromQuery.ts | 29 | export default function useMetadatadataFilterFromQuery() { | CODE |
| LOW | …/src/ar/components/Badge/RepositoryVisibilityBadge.tsx | 31 | export default function RepositoryVisibilityBadge(props: RepositoryVisibilityBadgeProps): JSX.Element { | CODE |
| LOW | web/src/ar/common/utils.ts | 34 | export function getIdentifierStringForBreadcrumb(label: string, value: string): string { | CODE |
| LOW | web/src/ar/common/utils.ts | 43 | export function getPackageTypesForApiQueryParams(packageTypes: RepositoryPackageType[]): string | undefined { | CODE |
| LOW | web/src/ar/hooks/useGetRepositoryListViewType.ts | 21 | export function useGetRepositoryListViewType() { | CODE |
| LOW | …c/ar/frameworks/Version/ArtifactTreeNodeViewWidget.tsx | 32 | export default function ArtifactTreeNodeViewWidget(props: ArtifactTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …ar/frameworks/Version/VersionTreeNodeDetailsWidget.tsx | 32 | export default function VersionTreeNodeDetailsWidget(props: VersionTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | …r/frameworks/Version/ArtifactTreeNodeDetailsWidget.tsx | 31 | export default function ArtifactTreeNodeDetailsWidget(props: ArtifactTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | …rc/ar/frameworks/Version/VersionTreeNodeViewWidget.tsx | 32 | export default function VersionTreeNodeViewWidget(props: VersionTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …r/frameworks/Version/ArtifactRowSubComponentWidget.tsx | 32 | export default function ArtifactRowSubComponentWidget(props: ArtifactRowSubComponentWidgetProps): JSX.Element { | CODE |
| LOW | …eworks/RepositoryStep/RepositoryTreeNodeViewWidget.tsx | 32 | export default function RepositoryTreeNodeViewWidget(props: RepositoryTreeNodeViewWidgetProps): JSX.Element { | CODE |
| LOW | …meworks/RepositoryStep/RepositorySetupClientWidget.tsx | 34 | export default function RepositorySetupClientWidget(props: RepositorySetupClientWidgetProps): JSX.Element { | CODE |
| LOW | …rks/RepositoryStep/RepositoryTreeNodeDetailsWidget.tsx | 31 | export default function RepositoryTreeNodeDetailsWidget(props: RepositoryTreeNodeDetailsWidgetProps): JSX.Element { | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 30 | function convertSecretInputToFormFields( | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 41 | export function transformFormValuesToSubmitValues( | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 61 | function convertFormFieldsToSecreteInput(formData: Webhook, secretField: string, secretSpacePathField: string) { | CODE |
| LOW | web/src/ar/pages/webhook-list/components/Forms/utils.ts | 71 | export function transformWebhookDataToFormValues(data: Webhook, parent: Parent): WebhookRequestUI { | CODE |
| LOW | …list/components/ExemptionForm/ExemptionFormContent.tsx | 34 | function CreateExemptionFormContent(props: CreateExemptionFormContentProps) { | CODE |
| LOW | …onForm/ExemptionDetailsAndJustificationFormContent.tsx | 27 | export default function ExemptionDetailsAndJustificationFormContent( | CODE |
| LOW | …mponents/ExemptionForm/BasicInformationFormContent.tsx | 33 | export default function BasicInformationFormContent(props: BasicInformationFormContentProps) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 48 | function SecurityPolicyFailureDetailsItem({ | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 93 | function LicensePolicyFailureDetailItem({ data }: { data: LicensePolicyFailureDetailConfigV3 }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 114 | function PackageAgeViolationPolicyFailureDetailItem({ | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 139 | function OssRiskLevelViolationPolicyFailureDetailItem({ data }: { data: OssRiskLevelPolicyFailureDetailConfigV3 }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 154 | function GenericPolicyFailureDetailItem({ data }: { data: KVO }) { | CODE |
| LOW | …ts/ViolationDetailsContent/ViolationFailureDetails.tsx | 168 | function ViolationFailureDetailsItem(props: ViolationFailureDetailsItemProps) { | CODE |
| 129 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/api/request/pullreq.go | 123 | // TODO: Remove the "includeGitStats := true" line and uncomment the following code block. | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 119 | // Step 1: Validate access key | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 125 | // Step 2: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 135 | // Step 3: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 141 | // Step 4: Handle different container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 287 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 294 | // Step 2: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 300 | // Step 3: Handle container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 345 | // Step 4: Create log stream for stopping the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 352 | // Step 5: Stop the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 378 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 385 | // Step 4: Create logger stream for stopping and removing the container | COMMENT |
| LOW | …or/container/embedded_docker_container_orchestrator.go | 177 | // Step 5: Retrieve container information and return response | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 51 | // Step 1: Get orphan manifest IDs (lightweight query). | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 63 | // Step 2: Process in smaller sub-batches. | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 12 | // Step 1: Split by newline to get each JSON string | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 15 | // Step 2: Parse each line and clean up escaped strings inside 'out' key | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 163 | // Step 1: Authenticate | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 173 | // Step 2: Import repository from github.com/google/uuid | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 182 | // Step 3: Wait for import to complete | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 189 | // Step 4: Fetch a file from the repository (README.md) | COMMENT |
| LOW | registry/app/dist_temp/dcontext/http.go | 183 | // We need to check if that's intentional (could be a bug). | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 66 | // Step 1: Read first 4 bytes to get JSON length | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 72 | // Step 2: Read the JSON metadata | COMMENT |
| LOW | registry/app/store/database/artifact.go | 894 | // Step 1: Find the latest artifact ID | COMMENT |
| LOW | registry/app/store/database/artifact.go | 918 | // Step 2: Fetch full metadata for this specific artifact. | COMMENT |
| LOW | registry/app/store/database/registry.go | 360 | // Step 1: Fetch base registry data. | COMMENT |
| LOW | git/api/diff.go | 341 | // The purpose of this function is to get data based on which code comments could be repositioned. | COMMENT |
| LOW | git/api/diff.go | 393 | // The purpose of this function is to get diff data with which code comments could be generated. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | types/check.go | 94 | // CheckPayloadInternal is for internal use for more seamless integration for | COMMENT |
| MEDIUM | types/enum/pullreq.go | 88 | // Essentially, the Type determines the structure of the pull request activity's Payload structure. | COMMENT |
| MEDIUM | app/services/codeowners/service_test.go | 206 | \ \ \# user2@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 294 | a #user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 295 | b # user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 298 | e# user1@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 299 | f user1@harness.io#user2@harness.io | CODE |
| MEDIUM⚡ | app/services/codeowners/service_test.go | 300 | g user1@harness.io # user2@harness.io | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| MEDIUM | stream/redis_consumer.go | 204 | // NOTE: for the first call ever we want to get the history of the consumer (to allow for seamless restarts) | COMMENT |
| MEDIUM | .engops/pr_source_code_changes.sh | 9 | # The purpose of this script is to facilitate auto-tagging of | COMMENT |
| MEDIUM | .engops/pr_source_code_changes.sh | 29 | # Called by https://harness0.harness.io/ng/account/l7B_kbSEQD2wjrM7PShm5w/all/orgs/Audit/projects/Engops_Audit/pipelines | COMMENT |
| MEDIUM | registry/types/digest.go | 247 | // These functions allow seamless conversion between types.Digest and digest.Digest. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 119 | // Step 1: Validate access key | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 125 | // Step 2: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 135 | // Step 3: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 141 | // Step 4: Handle different container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 287 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 294 | // Step 2: Check the current state of the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 300 | // Step 3: Handle container states | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 345 | // Step 4: Create log stream for stopping the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 352 | // Step 5: Stop the container | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 378 | // Step 1: Get Docker client | COMMENT |
| LOW⚡ | …or/container/embedded_docker_container_orchestrator.go | 385 | // Step 4: Create logger stream for stopping and removing the container | COMMENT |
| LOW | …or/container/embedded_docker_container_orchestrator.go | 177 | // Step 5: Retrieve container information and return response | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 51 | // Step 1: Get orphan manifest IDs (lightweight query). | COMMENT |
| LOW | …ore/database/migrate/migrate_0151_migrate_artifacts.go | 63 | // Step 2: Process in smaller sub-batches. | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 12 | // Step 1: Split by newline to get each JSON string | COMMENT |
| LOW⚡ | …rc/cde-gitness/pages/GitspaceDetails/Logger/Logger.tsx | 15 | // Step 2: Parse each line and clean up escaped strings inside 'out' key | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 163 | // Step 1: Authenticate | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 173 | // Step 2: Import repository from github.com/google/uuid | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 182 | // Step 3: Wait for import to complete | COMMENT |
| LOW⚡ | tests/load/usage_metrics_test.go | 189 | // Step 4: Fetch a file from the repository (README.md) | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 66 | // Step 1: Read first 4 bytes to get JSON length | COMMENT |
| LOW⚡ | registry/app/api/handler/cargo/upload.go | 72 | // Step 2: Read the JSON metadata | COMMENT |
| LOW | registry/app/store/database/artifact.go | 894 | // Step 1: Find the latest artifact ID | COMMENT |
| LOW | registry/app/store/database/artifact.go | 918 | // Step 2: Fetch full metadata for this specific artifact. | COMMENT |
| LOW | registry/app/store/database/registry.go | 360 | // Step 1: Fetch base registry data. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 116 | // ─── stubs ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 185 | // ─── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/linkedpr/handlers/github/check_test.go | 223 | // ─── tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/services/linkedpr/handlers/github/pullrequest_test.go | 85 | // ─── mock harnesses ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/services/linkedpr/handlers/github/pullrequest_test.go | 363 | // ─── fixtures ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/services/linkedpr/handlers/github/pullrequest_test.go | 454 | // ─── tests ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/services/linkedpr/handlers/github/pullrequest_test.go | 1096 | // ─── repository counter assertions ─────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 31 | // ─── stubs ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 130 | // ─── helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/services/merge/tx_ref_and_database_update_test.go | 168 | // ─── tests ──────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …itspace/orchestrator/utils/script_templates/set_env.sh | 18 | # Create the export statement | COMMENT |
| MEDIUM | registry/tests/conformance_test.sh | 24 | # Define the URL and request payload | COMMENT |
| MEDIUM | registry/tests/conformance_test.sh | 49 | # Define the URL and request payload | COMMENT |
| MEDIUM | registry/tests/maven/generate_junit_report.sh | 15 | # Create a timestamp for the report | COMMENT |
| MEDIUM | registry/tests/scripts/generate_report.sh | 47 | # Create a timestamp | COMMENT |
| MEDIUM | registry/tests/scripts/generate_report.sh | 50 | # Create a JSON report | COMMENT |
| MEDIUM | registry/tests/scripts/maven_tests.sh | 6 | # Create a Maven registry with timestamp to ensure uniqueness | COMMENT |
| MEDIUM | registry/tests/scripts/npm_tests.sh | 12 | # Create an NPM registry with timestamp to ensure uniqueness | COMMENT |
| MEDIUM | registry/tests/scripts/oci_tests.sh | 19 | # Create a temporary directory to run tests outside of the module | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …or/utils/script_templates/install_tools_vs_code_web.sh | 7 | # Check if curl is installed | COMMENT |
| LOW | …ace/orchestrator/utils/script_templates/manage_user.sh | 8 | # Check if the user's home directory exists | COMMENT |
| LOW | …/orchestrator/utils/script_templates/run_vscode_web.sh | 33 | # Check if the process is still running | COMMENT |
| LOW | …pace/orchestrator/utils/script_templates/clone_code.sh | 57 | # Check if .devcontainer/devcontainer.json exists | COMMENT |
| LOW | …itspace/orchestrator/utils/script_templates/set_env.sh | 21 | # Check if the variable is already present in /etc/profile | COMMENT |
| LOW | …ace/orchestrator/utils/script_templates/install_git.sh | 9 | # Check if Git is installed | COMMENT |
| LOW | registry/tests/conformance_test.sh | 37 | # Check if jq command succeeded | COMMENT |
| LOW | registry/tests/conformance_test.sh | 59 | # Check if jq command succeeded | COMMENT |
| LOW | registry/tests/gopkg/scripts/setup_test.sh | 132 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/cargo/scripts/setup_test.sh | 132 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/maven/generate_junit_report.sh | 5 | # Check if the JSON report exists | COMMENT |
| LOW | registry/tests/maven/scripts/setup_test.sh | 114 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| LOW | registry/tests/npm/scripts/setup_test.sh | 114 | # Set namespace to just the space name to avoid duplicate registry in path | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …details/NpmVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| LOW⚡ | …ails/PythonVersion/pages/artifact-dertails/mockData.ts | 18 | "[](http://expressjs.com/)\n\n**Fast, unopinionated, mi | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | registry/app/pkg/docker/local.go | 936 | // TODO: implement this | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | blob/gcs_test.go | 51 | KeyPath: "/tmp/fake-key.json", | CODE |