Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
This report summarizes scanner evidence for hashicorp/consul, a Go project with 30,097 GitHub stars. SynthScan examined 939,733 lines of code across 8742 source files, recording 1153 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 1.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 926 finding(s).
Are imports declared and package/API names verified? 41 finding(s).
Are wrappers, guards, and repeated structures necessary? 187 finding(s).
Which changes need focused human review? 1153 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1153 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scan.hcl | 1 | # Copyright IBM Corp. 2024, 2026 | COMMENT |
| LOW | .pre-commit-config.yaml | 1 | # Copyright IBM Corp. 2024, 2026 | COMMENT |
| LOW | tlsutil/config.go | 81 | // We don't support the raw 0xNNNN values from | COMMENT |
| LOW | tlsutil/config.go | 101 | // servers. This ensures that the certificate presented is valid for | COMMENT |
| LOW | tlsutil/config.go | 201 | // Configurator provides tls.Config and net.Dial wrappers to enable TLS for | COMMENT |
| LOW | tlsutil/config.go | 881 | // OutgoingTLSConfigForCheck creates a client *tls.Config for executing checks. | COMMENT |
| LOW | ui/packages/consul-ui/ember-cli-build.js | 221 | build(`vendor/${item.name}/services-debug.js`, { | COMMENT |
| LOW | ui/packages/consul-ui/blueprints/serializer/index.js | 21 | // afterInstall(options) { | COMMENT |
| LOW | …eprints/serializer/files/__root__/__path__/__name__.js | 21 | // body | COMMENT |
| LOW | ui/packages/consul-ui/blueprints/adapter/index.js | 21 | // afterInstall(options) { | COMMENT |
| LOW | …ackages/consul-ui/app/modifiers/fix-modal-body-role.js | 1 | /** | COMMENT |
| LOW | ui/packages/consul-ui/app/modifiers/fix-alert-aria.js | 1 | /** | COMMENT |
| LOW | …ackages/consul-ui/app/modifiers/fix-code-block-aria.js | 1 | /** | COMMENT |
| LOW | …consul-ui/app/modifiers/fix-dropdown-separator-aria.js | 1 | /** | COMMENT |
| LOW | …ages/consul-ui/app/modifiers/fix-toggle-label-order.js | 1 | /** | COMMENT |
| LOW | …kages/consul-ui/app/modifiers/fix-super-select-aria.js | 101 | // so once the real input exists, demote the trigger to a plain | COMMENT |
| LOW | …kages/consul-ui/app/modifiers/fix-super-select-aria.js | 161 | }); | COMMENT |
| LOW | …kages/consul-ui/app/instance-initializers/container.js | 41 | // find all the services and add their classes to the container so we can | COMMENT |
| LOW | ui/packages/consul-ui/app/utils/form/builder.js | 121 | // is its a child form then use the child form | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 1 | /** | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 21 | @import './cancel-plain/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 41 | @import './deny-default/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 61 | // @import './git-branch/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 81 | // @import './logo-alicloud-color/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 101 | // @import './logo-slack-color/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 121 | // @import './play-outline/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 141 | // @import './source-file/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 161 | // @import './visibility-show/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 181 | // @import './arrow-down/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 201 | // @import './azure-devops-color/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 221 | // @import './boundary/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 241 | // @import './check-diamond-fill/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 261 | // @import './clock/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 281 | // @import './corner-left-up/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 301 | // @import './docs/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 321 | // @import './facebook-color/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 341 | // @import './folder-minus/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 361 | // @import './globe/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 381 | // @import './help/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 401 | // @import './learn/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 421 | // @import './meh/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 441 | // @import './module/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 461 | // @import './outline/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 481 | // @import './plus-circle/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 501 | // @import './scissors/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 521 | // @import './sign-out/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 541 | // @import './star-off/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 561 | // @import './toggle-right/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 581 | // @import './user/index.scss'; | COMMENT |
| LOW | …kages/consul-ui/app/styles/base/icons/icons/index.scss | 601 | // @import './wall/index.scss'; | COMMENT |
| LOW | ui/packages/consul-ui/app/serializers/application.js | 141 | })[primaryKey], | COMMENT |
| LOW | ui/packages/consul-ui/app/controllers/application.js | 41 | // TODO: For the moment e isn't a real event | COMMENT |
| LOW | …ges/consul-ui/app/services/repository/oidc-provider.js | 41 | // the only places where Consul w/namespaces enabled doesn't return a | COMMENT |
| LOW | ui/packages/consul-ui/config/targets.js | 1 | /** | COMMENT |
| LOW | ui/packages/consul-ui/config/targets.js | 21 | /// | COMMENT |
| LOW | ui/packages/consul-ui/config/environment.js | 61 | // | COMMENT |
| LOW | …/acceptance/breadcrumbs/multi-level-navigation-test.js | 1 | /** | COMMENT |
| LOW | …sul-ui/tests/acceptance/breadcrumbs/edge-cases-test.js | 1 | /** | COMMENT |
| LOW | ui/packages/consul-ui/tests/helpers/acceptance.js | 1 | /** | COMMENT |
| LOW | …s/consul-ui/e2e-tests/tests/services/workflows.spec.js | 21 | // 3. Verify initial healthy state | COMMENT |
| 831 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .pre-commit-config.yaml | 10 | # ==================================================================== | COMMENT |
| MEDIUM | ui/packages/consul-ui/app/services/breadcrumbs.js | 31 | // ─── Public API ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | ui/packages/consul-ui/app/services/breadcrumbs.js | 119 | // ─── Private helpers ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 423 | // ─── getBreadcrumbConfig ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 472 | // ─── shouldShowBreadcrumbs ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 495 | // ─── computeBreadcrumbs — basic shape ──────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 524 | // ─── computeBreadcrumbs — 3-level chain ────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 541 | // ─── computeBreadcrumbs — snapshot (TASK-2) ─────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 571 | // ─── Dynamic label resolution ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 585 | // ─── Every top-level route returns exactly 1 item (TASK-2) ─────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 608 | // ─── No undefined labels ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 649 | // ─── ACL 2-level chain (TASK-6) ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 674 | // ─── Instance sub-tab chains ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 724 | // ─── TASK-2: all parent references resolve to existing routes ───────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 756 | // ─── Cycle guard ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 775 | // ─── Performance (NFR1 — AC9) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 788 | // ─── C: Dynamic labels — param value, not literal key name ─────────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 841 | // ─── G: Create page crumb shape — "Create" label, 2-crumb chain ────────── | COMMENT |
| MEDIUM | …ages/consul-ui/tests/unit/services/breadcrumbs-test.js | 935 | // ─── H3: routing-config chain — Services → Routing Config ──────────────── | COMMENT |
| MEDIUM | …onsul-ui/tests/integration/components/app-view-test.js | 40 | // ─── Baseline ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onsul-ui/tests/integration/components/app-view-test.js | 49 | // ─── Explicit <:breadcrumbs> block takes precedence ──────────────────────── | COMMENT |
| MEDIUM | …onsul-ui/tests/integration/components/app-view-test.js | 66 | // ─── Service-driven fallback ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onsul-ui/tests/integration/components/app-view-test.js | 92 | // ─── @showBreadcrumb=false suppresses breadcrumbs ───────────────────────── | COMMENT |
| MEDIUM | …onsul-ui/tests/integration/components/app-view-test.js | 114 | // ─── shouldShowBreadcrumbs=false suppresses fallback ────────────────────── | COMMENT |
| MEDIUM | …ul-ui/tests/integration/components/breadcrumbs-test.js | 39 | // ─── Rendering ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ul-ui/tests/integration/components/breadcrumbs-test.js | 66 | // ─── Links vs current item ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ul-ui/tests/integration/components/breadcrumbs-test.js | 97 | // ─── Ancestor links ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts/acceptance/breadcrumbs/crumb-hidden-routes-test.js | 88 | // ── dc.services.instance (show: false) ────────────────────────────────── | COMMENT |
| MEDIUM | …sts/acceptance/breadcrumbs/crumb-hidden-routes-test.js | 116 | // ── Settings (show: false) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ui/tests/acceptance/breadcrumbs/tab-navigation-test.js | 45 | // ── Node: Health Checks → Lock Sessions ───────────────────────────────── | COMMENT |
| MEDIUM | …ui/tests/acceptance/breadcrumbs/tab-navigation-test.js | 108 | // ── Service: Topology → Routing ───────────────────────────────────────── | COMMENT |
| MEDIUM | …ui/tests/acceptance/breadcrumbs/tab-navigation-test.js | 141 | // ── Service instances: instances tab → health-checks sub-tab ──────────── | COMMENT |
| MEDIUM | …/acceptance/breadcrumbs/multi-level-navigation-test.js | 42 | // ── 4-level chain: Services → <name> → Instances → Health Checks ──────── | COMMENT |
| MEDIUM | …/acceptance/breadcrumbs/multi-level-navigation-test.js | 93 | // ── 3-level chain: Auth Methods → <id> → Auth Method ──────────────────── | COMMENT |
| MEDIUM | …/acceptance/breadcrumbs/multi-level-navigation-test.js | 147 | // ── 3-level chain: Peers → <name> → Imported Services ─────────────────── | COMMENT |
| MEDIUM | …sul-ui/tests/acceptance/breadcrumbs/edge-cases-test.js | 45 | // ── H2: Service name with slashes ──────────────────────────────────────── | COMMENT |
| MEDIUM | …sul-ui/tests/acceptance/breadcrumbs/edge-cases-test.js | 102 | // ── H4: DC switch updates ancestor crumb href ──────────────────────────── | COMMENT |
| MEDIUM | …consul-ui/e2e-tests/tests/admin-partitions/fixtures.js | 125 | // ── Navigation ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …consul-ui/e2e-tests/tests/admin-partitions/fixtures.js | 139 | // ── Form helpers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …consul-ui/e2e-tests/tests/admin-partitions/fixtures.js | 172 | // ── List helpers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …l-ui/e2e-tests/tests/access-controls/roles/fixtures.js | 135 | // ── Navigation ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …l-ui/e2e-tests/tests/access-controls/roles/fixtures.js | 154 | // ── Form helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/e2e-tests/tests/access-controls/policies/fixtures.js | 132 | // ── Navigation ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i/e2e-tests/tests/access-controls/policies/fixtures.js | 151 | // ── Form helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-ui/e2e-tests/tests/access-controls/tokens/fixtures.js | 129 | // ── Navigation ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-ui/e2e-tests/tests/access-controls/tokens/fixtures.js | 146 | // ── Form helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 54 | // ── Step 1: Instance A — generate token via the UI ───────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 73 | // ── Step 2: Instance A — verify Pending state ────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 84 | // ── Step 3: Instance B — establish via the UI ────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 93 | // ── Step 4: Both sides — wait for Active ────────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 111 | // ── Step 5: View peer detail on both sides ───────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 147 | // ── Step 6: Delete from Instance A ───────────────────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 253 | // ── Instance B (importer): Imported Services tab ──────────────────────── | COMMENT |
| MEDIUM | …es/consul-ui/e2e-tests/tests/peering/workflows.spec.js | 278 | // ── Instance A (exporter): Exported Services tab ──────────────────────── | COMMENT |
| MEDIUM | …packages/consul-ui/e2e-tests/tests/peering/fixtures.js | 215 | // ── Navigation ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …packages/consul-ui/e2e-tests/tests/peering/fixtures.js | 236 | // ── List ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …packages/consul-ui/e2e-tests/tests/peering/fixtures.js | 284 | // ── "Add peer connection" modal ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …consul-ui/e2e-tests/tests/namespaces/workflows.spec.js | 72 | // ── 1. Create ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …consul-ui/e2e-tests/tests/namespaces/workflows.spec.js | 88 | // ── 2. Edit ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …consul-ui/e2e-tests/tests/namespaces/workflows.spec.js | 98 | // ── 3. Verify persistence ──────────────────────────────────────────────── | COMMENT |
| 126 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .release/linux/package/etc/consul.d/consul.hcl | 65 | # This cannot be used in conjunction with the legacy -bootstrap flag. This flag requires | COMMENT |
| MEDIUM | proto-public/buf.gen.yaml | 40 | # Generate cloning clients that can be used in conjunction with github.com/fullstorydev/grpchan/inprocgrpc | COMMENT |
| MEDIUM | internal/go-sso/oidcauth/auth.go | 112 | // Use CAP's OIDC provider to leverage its built-in support for | COMMENT |
| MEDIUM | agent/dns.go | 894 | // need to be very familiar with our TLS / SNI / mesh gateways to leverage it. | COMMENT |
| MEDIUM | agent/leafcert/leafcert_test.go | 171 | // done. TO be more robust against timing, we take the value as the | COMMENT |
| MEDIUM | agent/cache/cache.go | 329 | // once. But be robust against panics. | COMMENT |
| MEDIUM | agent/proxycfg/snapshot.go | 880 | // We leverage the test trust domain knowing | COMMENT |
| MEDIUM | agent/consul/server_grpc.go | 139 | // all the Safe variants will utilize the default cloning | COMMENT |
| MEDIUM | agent/structs/connect_ca.go | 52 | // seamless rotation between trust domains thanks to cross-signing. | COMMENT |
| MEDIUM | agent/structs/prepared_query.go | 311 | // struct to make it more robust if it becomes significant. | COMMENT |
| MEDIUM | agent/structs/structs.go | 596 | // utilize streaming RPCs. | COMMENT |
| MEDIUM | agent/structs/structs.go | 823 | // struct to make it more robust if it becomes significant. | COMMENT |
| MEDIUM | agent/connect/ca/provider.go | 171 | // cross-signing an external root to provide a seamless rotation. If the CA | COMMENT |
| MEDIUM | agent/xds/listeners_ingress.go | 277 | // cases shouldn't be possible as we validate them at input but be robust to | COMMENT |
| MEDIUM | api/config_entry_gateways_test.go | 179 | // Set namespace and partition to blank so that CE and ent can utilize the same tests | COMMENT |
| MEDIUM | api/config_entry_gateways_test.go | 198 | // Set namespace and partition to blank so that CE and ent can utilize the same tests | COMMENT |
| MEDIUM | api/config_entry_gateways_test.go | 324 | // Set namespace to blank so that CE and ent can utilize the same tests | COMMENT |
| MEDIUM | api/config_entry_gateways_test.go | 334 | // Set namespace to blank so that CE and ent can utilize the same tests | COMMENT |
| MEDIUM | build-support/scripts/copywrite-exceptions.sh | 4 | # headers and deletes them, then runs the copywrite bot to utilize local subdir config | COMMENT |
| MEDIUM | connect/tls.go | 165 | // PKI or Consul clusters). This allows for seamless migrations between trust | COMMENT |
| MEDIUM | acl/policy_authorizer_test.go | 14 | // Note that many of the policy authorizer tests still live in acl_test.go. These utilize a default policy or layer | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | agent/agent_endpoint.go | 219 | return s.agent.baseDeps.MetricsConfig.Handler.DisplayMetrics(resp, req) | CODE |
| CRITICAL | agent/agent_endpoint.go | 256 | s.agent.baseDeps.MetricsConfig.Handler.Stream(req.Context(), enc) | CODE |
| CRITICAL | agent/consul/prepared_query_endpoint_test.go | 3517 | conn, err := grpc.DialContext(ctx, es.peeringServer.server.config.RPCAddr.String(), | CODE |
| CRITICAL | agent/consul/prepared_query_endpoint_test.go | 3518 | grpc.WithContextDialer(newServerDialer(es.peeringServer.server.config.RPCAddr.String())), | CODE |
| CRITICAL | agent/consul/prepared_query_endpoint_test.go | 3534 | conn, err = grpc.DialContext(ctx, es.server.server.config.RPCAddr.String(), | CODE |
| CRITICAL | agent/consul/prepared_query_endpoint_test.go | 3535 | grpc.WithContextDialer(newServerDialer(es.server.server.config.RPCAddr.String())), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/resource/http/http_test.go | 33 | const fakeToken = "fake-token" | CODE |
| LOW⚡ | …ernal/services/peerstream/subscription_manager_test.go | 1043 | Node: &structs.Node{Node: "placeholder", Address: "10.0.0.1"}, | CODE |
| LOW⚡ | …ernal/services/peerstream/subscription_manager_test.go | 1044 | Service: &structs.NodeService{ID: "placeholder-1", Service: "placeholder", Port: 5000}, | CODE |
| LOW⚡ | …ernal/services/peerstream/subscription_manager_test.go | 1047 | backend.ensureService(t, "placeholder", placeholder.Service) | CODE |
| LOW | agent/blockingquery/blockingquery_test.go | 36 | requestOpts.On("GetToken").Return("fake-token") | CODE |
| LOW | agent/config/runtime_test.go | 6896 | DestinationName: "placeholder", | CODE |
| LOW | agent/config/testdata/full-config.json | 782 | "destination_name": "placeholder", | CODE |
| LOW | agent/config/testdata/full-config.hcl | 657 | destination_name = "placeholder" | CODE |
| LOW | agent/local/state_test.go | 2442 | }, nil, "fake-token-web", false) | CODE |
| LOW | agent/local/state_test.go | 2453 | }, nil, "fake-token-web", false) | CODE |
| LOW | agent/local/state_test.go | 2473 | }, nil, "fake-token-web", false) | CODE |
| LOW | agent/consul/grpc_integration_test.go | 162 | testauth.InstallSessionToken(testSessionID, "fake-token", "default", "demo", "abc123") | CODE |
| LOW | agent/consul/grpc_integration_test.go | 198 | BearerToken: "fake-token", | CODE |
| LOW | agent/consul/acl_replication_test.go | 357 | testauth.InstallSessionToken(testSessionID, "fake-token", "default", "demo", "abc123") | CODE |
| LOW | agent/consul/acl_replication_test.go | 373 | BearerToken: "fake-token", | CODE |
| LOW | agent/consul/acl_endpoint_test.go | 761 | testauth.InstallSessionToken(testSessionID, "fake-token", "default", "demo", "abc123") | CODE |
| LOW | agent/consul/acl_endpoint_test.go | 774 | BearerToken: "fake-token", | CODE |
| LOW | agent/consul/acl_endpoint_test.go | 806 | testauth.InstallSessionToken(testSessionID, "fake-token", "default", "demo", "abc123") | CODE |
| LOW | agent/consul/acl_endpoint_test.go | 818 | BearerToken: "fake-token", | CODE |
| LOW | agent/structs/config_entry_inference_gateway.go | 211 | InferenceGatewayPIIActionPlaceholder InferenceGatewayPIIAction = "placeholder" | CODE |
| LOW | agent/structs/config_entry_test.go | 2719 | default_action = "placeholder" | CODE |
| LOW | agent/structs/config_entry_test.go | 2750 | DefaultAction = "placeholder" | CODE |
| LOW | agent/structs/config_entry_test.go | 2779 | DefaultAction: "placeholder", | CODE |
| LOW | agent/xds/rbac_test.go | 1246 | payloadKey = "dummy-key" | CODE |
| LOW | testing/deployer/sprawl/boot.go | 498 | Name: "placeholder", | CODE |
| LOW | testing/deployer/sprawl/internal/tfgen/agent.go | 184 | // b.add("name", "placeholder") | COMMENT |
| LOW | testing/deployer/sprawl/internal/tfgen/agent.go | 189 | // b.add("name", "placeholder") | COMMENT |
| LOW | api/config_entry_inference_gateway.go | 124 | InferenceGatewayPIIActionPlaceholder InferenceGatewayPIIAction = "placeholder" | CODE |
| LOW | command/helpers/helpers_test.go | 3492 | default_action = "placeholder" | CODE |
| LOW | command/helpers/helpers_test.go | 3535 | DefaultAction = "placeholder" | CODE |
| LOW | command/helpers/helpers_test.go | 3569 | "default_action": "placeholder", | CODE |
| LOW | command/helpers/helpers_test.go | 3596 | "DefaultAction": "placeholder", | CODE |
| LOW | command/helpers/helpers_test.go | 3628 | DefaultAction: "placeholder", | CODE |
| LOW | command/helpers/helpers_test.go | 3661 | DefaultAction: "placeholder", | CODE |
| LOW | command/login/login_test.go | 659 | "-aws-access-key-id", "fake-key-id", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .release/release-scripts/trigger-promotion.sh | 7 | # Usage: | COMMENT |
| LOW | .release/release-scripts/prepare-release-branch.sh | 35 | # Usage: | COMMENT |
| LOW⚡ | .release/release-scripts/verify-release-image.sh | 13 | # Usage: | COMMENT |
| LOW | .github/scripts/check-jira-ids.sh | 25 | # Usage: | COMMENT |
| LOW | .github/scripts/check-ent-content-markers.sh | 20 | # Usage: | COMMENT |
| LOW | .github/scripts/check-forbidden-ent-paths.sh | 10 | # Usage: | COMMENT |
| LOW | connect/certgen/certgen.go | 7 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | agent/proxycfg/snapshot.go | 1168 | // enforced here. In this approach it lives in the xDS layer (agent/xds/delta.go), | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/load/packer/consul-ami/scripts/datadog.yaml | 10 | ## Create a new API key here: https://app.datadoghq.com/account/settings | COMMENT |
| MEDIUM | .github/workflows/ce-merge-trigger.yml | 116 | # Create the JSON payload using jq for safe escaping | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | agent/acl_endpoint.go | 1066 | // 3. Along with #2 you can use the ACL.GetPolicy RPC endpoint which will return a rolled up | COMMENT |
| MEDIUM | agent/consul/state/session.go | 219 | // that here, but it's worth noting that we should never do this in the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | agent/xds/listeners.go | 1377 | // NOTE: This method MUST only be used for connect proxy public listeners, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ui/packages/consul-ui/app/validations/sometimes.js | 12 | function guardValidatorWithCondition(validator) { | CODE |