0.5

Adjusted Signal

0.5

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

5.0K

Stars

Language

1.6M

Lines of Code

9.5K

Files

326

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 184 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.2/100 · LOW

Are imports declared and package/API names verified? 76 finding(s).

Agent Over-Engineering Ratio 0.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 66 finding(s).

PR Review Velocity Impact 2.4/100 · LOW

Which changes need focused human review? 326 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 33HIGH 5MEDIUM 55LOW 233

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 326 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators33 hits · 330 pts

Severity	File	Line	Snippet	Context
CRITICAL	…vices/appservice/windows_function_app_slot_resource.go	371	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…vices/appservice/windows_function_app_slot_resource.go	871	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…nal/services/appservice/linux_function_app_resource.go	389	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…nal/services/appservice/linux_function_app_resource.go	886	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…ervices/appservice/linux_function_app_slot_resource.go	363	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…ervices/appservice/linux_function_app_slot_resource.go	851	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…l/services/appservice/windows_function_app_resource.go	381	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…l/services/appservice/windows_function_app_resource.go	885	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…s/appservice/function_app_flex_consumption_resource.go	357	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…s/appservice/function_app_flex_consumption_resource.go	775	storageDomainSuffix, ok := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…us_database_cross_region_disaster_recovery_resource.go	358	resp, err := metadata.Client.Oracle.OracleClient.AutonomousDatabases.Get(ctx, *id)	CODE
CRITICAL	…onfiguration/resources/app_configuration_key/r_read.go	34	domainSuffix, ok := metadata.Client.Account.Environment.AppConfiguration.DomainSuffix()	CODE
CRITICAL	…guration/resources/app_configuration_feature/r_read.go	35	domainSuffix, ok := metadata.Client.Account.Environment.AppConfiguration.DomainSuffix()	CODE
CRITICAL	…ervices/logic/resources/logic_app_standard/r_create.go	433	suffix, _ := metadata.Client.Account.Environment.Storage.DomainSuffix()	CODE
CRITICAL	…g/machine_learning_datastore_datalake_gen2_resource.go	190	resourceId, ok := metadata.Client.Account.Environment.DataLake.ResourceIdentifier()	CODE
CRITICAL	…g/machine_learning_datastore_datalake_gen2_resource.go	255	resourceId, ok := metadata.Client.Account.Environment.DataLake.ResourceIdentifier()	CODE
CRITICAL	…rdware_security_module_key_rotation_policy_resource.go	93	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…rdware_security_module_key_rotation_policy_resource.go	150	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…rdware_security_module_key_rotation_policy_resource.go	180	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…rdware_security_module_key_rotation_policy_resource.go	222	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…ardware_security_module_role_definition_data_source.go	138	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…vault_managed_hardware_security_module_key_resource.go	189	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…vault_managed_hardware_security_module_key_resource.go	305	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…vault_managed_hardware_security_module_key_resource.go	371	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…vault_managed_hardware_security_module_key_resource.go	469	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_assignment_resource.go	113	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_assignment_resource.go	184	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_assignment_resource.go	243	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_definition_resource.go	176	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_definition_resource.go	265	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_definition_resource.go	326	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…d_hardware_security_module_role_definition_resource.go	385	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE
CRITICAL	…lt_managed_hardware_security_module_key_data_source.go	113	domainSuffix, ok := metadata.Client.Account.Environment.ManagedHSM.DomainSuffix()	CODE

Self-Referential Comments28 hits · 111 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	…kubernetes_cluster_extension/testdata/install_agent.py	131	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	…kubernetes_cluster_extension/testdata/install_agent.py	149	# Creating the compressed helm binaries	COMMENT
MEDIUM⚡	…ubernetes_flux_configuration/testdata/install_agent.py	131	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	…ubernetes_flux_configuration/testdata/install_agent.py	149	# Creating the compressed helm binaries	COMMENT
MEDIUM⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	131	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	149	# Creating the compressed helm binaries	COMMENT
MEDIUM⚡	…al/services/extendedlocation/testdata/install_agent.py	134	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	…al/services/extendedlocation/testdata/install_agent.py	152	# Creating the compressed helm binaries	COMMENT
MEDIUM⚡	…ded_location_custom_location/testdata/install_agent.py	134	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	…ded_location_custom_location/testdata/install_agent.py	152	# Creating the compressed helm binaries	COMMENT
MEDIUM	…resources/cdn_frontdoor_custom_domain/resource_test.go	316	# Create a delegated child zone inside the test RG.	COMMENT
MEDIUM	…resources/cdn_frontdoor_custom_domain/resource_test.go	376	# Create a delegated child zone inside the test RG.	COMMENT
MEDIUM	…sources/cdn_frontdoor_security_policy/resource_test.go	186	# Create a delegated child zone inside the test RG.	COMMENT
MEDIUM	…n_frontdoor_custom_domain_association/resource_test.go	195	# Create a delegated child zone inside the test RG.	COMMENT
MEDIUM	…dn/actions/azure_front_door_cache_purge/action_test.go	142	# Create a delegated child zone inside the test RG.	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	14	# Create the resource group	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	23	# Create the virtual network	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	31	# Create the subnet	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	48	# Create the NetApp account	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	55	# Create the NetApp pool	COMMENT
MEDIUM⚡	examples/netapp/protocol_conversion/main.tf	65	# Create a NetApp volume with NFSv3 protocol (initial state)	COMMENT
MEDIUM⚡	examples/arckubernetes/testdata/install_agent.py	131	# Creating the helm folder if it doesn't exist	COMMENT
MEDIUM⚡	examples/arckubernetes/testdata/install_agent.py	149	# Creating the compressed helm binaries	COMMENT
MEDIUM	examples/virtual-networks/azure-firewall/main.tf	8	# Create a resource group	COMMENT
MEDIUM	.github/workflows/pr-comment-failure.yaml	9	# This file is reused, and called from other workflows	COMMENT
MEDIUM	.github/workflows/pr-comment-failure-outdated.yaml	9	# This file is reused, and called from other workflows	COMMENT
MEDIUM	.github/workflows/pr-save-artifacts.yaml	14	# This file is reused, and called from other workflows	COMMENT
MEDIUM	.github/workflows/issue-remove-label.yaml	12	# This file is reused, and called from other workflows	COMMENT

Over-Commented Block74 hits · 74 pts

Severity	File	Line	Snippet	Context
LOW	contributing/topics/guide-new-resource.md	281	// update the Resource Group	COMMENT
LOW	contributing/topics/guide-new-resource.md	361		COMMENT
LOW	contributing/topics/guide-new-data-source.md	221		COMMENT
LOW	…ternal/tools/preview-api-version-linter/exceptions.yml	1	# Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/tools/pr-guide-suggestions/main.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…al/tools/pr-guide-suggestions/schematree/schematree.go	41	Schema *SchemaLit	COMMENT
LOW	internal/tools/pr-guide-suggestions/rules/rules.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/tools/teamcity-test-reporter/main.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/features/six_point_oh.go	21		COMMENT
LOW	internal/features/dynamic_test_locations.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/acceptance/plugin_sdk_aliases.go	61	// TestMatchOutput is a wrapper to enable builds to continue	COMMENT
LOW	internal/sdk/resource.go	61		COMMENT
LOW	internal/sdk/resource.go	121	// IdentityType returns the type of resource ID, this is used to influence schema generation behaviours	COMMENT
LOW	internal/sdk/service_registration.go	41	SupportedResources() map[string]*pluginsdk.Resource	COMMENT
LOW	internal/services/springcloud/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/mssqlmanagedinstance/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/domainservices/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…urces/active_directory_domain_service/resource_test.go	21	// To generate a suitable cert for AADDS:	COMMENT
LOW	internal/services/securitycenter/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/keyvault/key_vault_resource.go	361	meta.(*clients.Client).KeyVault.AddToCache(id, vaultUri)	COMMENT
LOW	internal/services/keyvault/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/keyvault/migration/key_vault.go	441	// The Azure API force-upgraded all Key Vaults so that Soft Delete was enabled on 2020-12-15	COMMENT
LOW	internal/services/keyvault/client/populate_cache.go	21	// Whilst we've historically used the Resources API to query the single Key Vault in question	COMMENT
LOW	internal/services/web/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/frontdoor/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/datafactory/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/networkgateway/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/network/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/cosmos/cosmosdb_account_resource.go	981	// Incident : #383341730	COMMENT
LOW	…bricks/resources/databricks_workspace/resource_test.go	581	Config: r.enhancedSecurityCompliance(data, "premium", true, false, []string{"PCI_DSS", "HIPAA"}, true),	COMMENT
LOW	internal/services/appgateway/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/appgateway/resourceids.go	21	//go:generate go run ../../tools/generator-resource-id/main.go -path=./ -name=SslProfile -id=/subscriptions/12345678-123	COMMENT
LOW	internal/services/iothub/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/loadbalancer/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/storage/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/firewall/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/applicationinsights/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/cdn/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…ervices/cdn/resources/cdn_frontdoor_origin/r_delete.go	21	id, err := afdorigins.ParseOriginGroupOriginID(d.Id())	COMMENT
LOW	…resources/cdn_frontdoor_custom_domain/resource_test.go	161	},	COMMENT
LOW	…resources/cdn_frontdoor_custom_domain/resource_test.go	281	// TODO: Add test case that uses pre_validated_custom_domain_resource_id	COMMENT
LOW	…resources/cdn_frontdoor_custom_domain/resource_test.go	701	// dns_zone_id = azurerm_dns_zone.child.id	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	341	},	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	361	// func TestAccOrchestratedVirtualMachineScaleSet_basicWindows_managedDisk_resize(t *testing.T) {	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	481	})	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	501	// data := acceptance.BuildTestData(t, "azurerm_orchestrated_virtual_machine_scale_set", "test")	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	521	// {	COMMENT
LOW	…rchestrated_virtual_machine_scale_set/resource_test.go	541	// check.That(data.ResourceName).Key("rolling_upgrade_policy.0.max_unhealthy_upgraded_instance_percent").HasValue("2	COMMENT
LOW	internal/services/managedhsm/client/helpers.go	121	func (c *Client) cacheKeyForManagedHSM(name string) string {	COMMENT
LOW	…services/containers/helpers/kubernetes_version_diff.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…omanage/resources/automanage_configuration/r_schema.go	121	},	COMMENT
LOW	internal/services/synapse/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/synapse/resourceids.go	21	//go:generate go run ../../tools/generator-resource-id/main.go -path=./ -name=WorkspaceExtendedAuditingPolicy -id=/subsc	COMMENT
LOW	internal/services/mssql/mssql_database_resource.go	841	}	COMMENT
LOW	internal/services/mssql/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/policy/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/services/costmanagement/resourceids.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…vices/managedredis/resources/managed_redis/resource.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	…rnal/services/managedredis/databaselink/link_unlink.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
LOW	internal/resourceproviders/required.go	1	// Copyright IBM Corp. 2014, 2026	COMMENT
14 more matches not shown…

Excessive Try-Catch Wrapping48 hits · 60 pts

Severity	File	Line	Snippet	Context
LOW	…kubernetes_cluster_extension/testdata/install_agent.py	30	except Exception as e:	CODE
LOW	…kubernetes_cluster_extension/testdata/install_agent.py	35	except Exception as e:	CODE
LOW⚡	…kubernetes_cluster_extension/testdata/install_agent.py	135	except Exception as e:	CODE
LOW⚡	…kubernetes_cluster_extension/testdata/install_agent.py	143	except Exception as e:	CODE
LOW⚡	…kubernetes_cluster_extension/testdata/install_agent.py	153	except Exception as e:	CODE
LOW⚡	…kubernetes_cluster_extension/testdata/install_agent.py	162	except Exception as e:	CODE
LOW	…kubernetes_cluster_extension/testdata/install_agent.py	217	except Exception as e:	CODE
LOW	…kubernetes_cluster_extension/testdata/install_agent.py	223	except Exception as e:	CODE
LOW	…ubernetes_flux_configuration/testdata/install_agent.py	30	except Exception as e:	CODE
LOW	…ubernetes_flux_configuration/testdata/install_agent.py	35	except Exception as e:	CODE
LOW⚡	…ubernetes_flux_configuration/testdata/install_agent.py	135	except Exception as e:	CODE
LOW⚡	…ubernetes_flux_configuration/testdata/install_agent.py	143	except Exception as e:	CODE
LOW⚡	…ubernetes_flux_configuration/testdata/install_agent.py	153	except Exception as e:	CODE
LOW⚡	…ubernetes_flux_configuration/testdata/install_agent.py	162	except Exception as e:	CODE
LOW	…ubernetes_flux_configuration/testdata/install_agent.py	217	except Exception as e:	CODE
LOW	…ubernetes_flux_configuration/testdata/install_agent.py	223	except Exception as e:	CODE
LOW	…urces/arc_kubernetes_cluster/testdata/install_agent.py	30	except Exception as e:	CODE
LOW	…urces/arc_kubernetes_cluster/testdata/install_agent.py	35	except Exception as e:	CODE
LOW⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	135	except Exception as e:	CODE
LOW⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	143	except Exception as e:	CODE
LOW⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	153	except Exception as e:	CODE
LOW⚡	…urces/arc_kubernetes_cluster/testdata/install_agent.py	162	except Exception as e:	CODE
LOW	…urces/arc_kubernetes_cluster/testdata/install_agent.py	217	except Exception as e:	CODE
LOW	…urces/arc_kubernetes_cluster/testdata/install_agent.py	223	except Exception as e:	CODE
LOW	…al/services/extendedlocation/testdata/install_agent.py	33	except Exception as e:	CODE
LOW	…al/services/extendedlocation/testdata/install_agent.py	38	except Exception as e:	CODE
LOW⚡	…al/services/extendedlocation/testdata/install_agent.py	138	except Exception as e:	CODE
LOW⚡	…al/services/extendedlocation/testdata/install_agent.py	146	except Exception as e:	CODE
LOW⚡	…al/services/extendedlocation/testdata/install_agent.py	156	except Exception as e:	CODE
LOW⚡	…al/services/extendedlocation/testdata/install_agent.py	165	except Exception as e:	CODE
LOW	…al/services/extendedlocation/testdata/install_agent.py	225	except Exception as e:	CODE
LOW	…al/services/extendedlocation/testdata/install_agent.py	231	except Exception as e:	CODE
LOW	…ded_location_custom_location/testdata/install_agent.py	33	except Exception as e:	CODE
LOW	…ded_location_custom_location/testdata/install_agent.py	38	except Exception as e:	CODE
LOW⚡	…ded_location_custom_location/testdata/install_agent.py	138	except Exception as e:	CODE
LOW⚡	…ded_location_custom_location/testdata/install_agent.py	146	except Exception as e:	CODE
LOW⚡	…ded_location_custom_location/testdata/install_agent.py	156	except Exception as e:	CODE
LOW⚡	…ded_location_custom_location/testdata/install_agent.py	165	except Exception as e:	CODE
LOW	…ded_location_custom_location/testdata/install_agent.py	225	except Exception as e:	CODE
LOW	…ded_location_custom_location/testdata/install_agent.py	231	except Exception as e:	CODE
LOW	examples/arckubernetes/testdata/install_agent.py	30	except Exception as e:	CODE
LOW	examples/arckubernetes/testdata/install_agent.py	35	except Exception as e:	CODE
LOW⚡	examples/arckubernetes/testdata/install_agent.py	135	except Exception as e:	CODE
LOW⚡	examples/arckubernetes/testdata/install_agent.py	143	except Exception as e:	CODE
LOW⚡	examples/arckubernetes/testdata/install_agent.py	153	except Exception as e:	CODE
LOW⚡	examples/arckubernetes/testdata/install_agent.py	162	except Exception as e:	CODE
LOW	examples/arckubernetes/testdata/install_agent.py	217	except Exception as e:	CODE
LOW	examples/arckubernetes/testdata/install_agent.py	223	except Exception as e:	CODE

Decorative Section Separators17 hits · 51 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/pr-checks-combined.yaml	25	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	27	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	42	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	78	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	80	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	128	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	174	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	223	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	269	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	314	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	363	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	408	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	410	# ==========================================	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	463	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	530	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	583	# ------------------------------------------	COMMENT
MEDIUM	.github/workflows/pr-checks-combined.yaml	652	# ------------------------------------------	COMMENT

TODO Padding32 hits · 48 pts

Severity	File	Line	Snippet	Context
LOW	…ools/document-fmt/rule/rule_s005_attributes_heading.go	53	// TODO: implement templating of new section when validating/templating properties has been added.	COMMENT
LOW	…tools/document-fmt/rule/rule_s004_arguments_heading.go	53	// TODO: implement templating of new section when validating/templating of all properties has been added.	COMMENT
LOW	…s/kusto/kusto_cluster_customer_managed_key_resource.go	196	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…ed_instance_active_directory_administrator_resource.go	129	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…naged_instance_transparent_data_encryption_resource.go	140	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…apimanagement/api_management_custom_domain_resource.go	151	// TODO: implement callback, requires migrating to an ID implementing `resourceids.ResourceId`	COMMENT
LOW	…/resources/active_directory_domain_service/r_create.go	119	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…rces/active_directory_domain_service_trust/r_create.go	88	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…l/services/network/virtual_network_peering_resource.go	190	// TODO: implement `CallbackThenPoll`, rework to remove StateChangeConf	COMMENT
LOW	…int_application_security_group_association_resource.go	146	// TODO: implement callback, requires migrating to an ID implementing `resourceids.ResourceId`	COMMENT
LOW	internal/services/network/private_endpoint_resource.go	383	// TODO: implement callback	COMMENT
LOW	internal/services/network/ip_group_cidr_resource.go	113	// TODO: implement callback, requires migrating to an ID implementing `resourceids.ResourceId`	COMMENT
LOW	…rvices/network/virtual_network_dns_servers_resource.go	98	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…/resources/lb_backend_address_pool_address/r_create.go	123	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…ervices/loadbalancer/resources/lb_nat_pool/r_create.go	77	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…al/services/storage/storage_account_sas_data_source.go	231	// TODO: implement support for signedEncryptionScope	COMMENT
LOW	…all/resources/firewall_nat_rule_collection/r_create.go	105	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…resources/firewall_network_rule_collection/r_create.go	106	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…urces/firewall_application_rule_collection/r_create.go	104	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…resources/cdn_frontdoor_custom_domain/resource_test.go	281	// TODO: Add test case that uses pre_validated_custom_domain_resource_id	COMMENT
LOW	…resources/cdn_frontdoor_custom_domain/resource_test.go	292	// TODO: Add test case that uses CMK, this cannot be a test cert or a self	COMMENT
LOW	…ces/cdn/resources/cdn_frontdoor_route/resource_test.go	21	// TODO: Add test with real custom domain once I figure out how to do that	COMMENT
LOW	…urces/virtual_machine_data_disk_attachment/r_create.go	127	// TODO: implement `CallbackThenPoll` on Create, requires updated resource ID implementing `resourceids.ResourceId`	COMMENT
LOW	…ual_machine_gallery_application_assignment/r_create.go	91	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…ual_machine_implicit_data_disk_from_source/r_create.go	96	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…ible_server_active_directory_administrator_resource.go	121	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…eamanalytics/stream_analytics_job_schedule_resource.go	131	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…esources/container_registry_token_password/r_create.go	55	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…s/mssql/mssql_server_security_alert_policy_resource.go	175	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…l_server_microsoft_support_auditing_policy_resource.go	135	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…l/mssql_server_transparent_data_encryption_resource.go	138	// TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT
LOW	…s/virtualwan/virtual_hub_route_table_route_resource.go	156	// // TODO: implement `CallbackThenPoll`, requires migrating to an ID that implements `resourceids.ResourceId`	COMMENT

Fake / Example Data43 hits · 43 pts

Severity	File	Line	Snippet	Context
LOW	internal/provider/provider_schema_test.go	334	allowsPlaceholderValue := runInputForValidateFunction(field.ValidateFunc, "placeholder")	CODE
LOW	…nagement_notification_recipient_email_resource_test.go	89	email = "foo@bar.com"	CODE
LOW	…services/apimanagement/api_management_resource_test.go	1343	text = "Lorem Ipsum Dolor Morty"	CODE
LOW	…ices/apimanagement/api_management_api_resource_test.go	821	email = "test@test.com"	CODE
LOW	…ices/apimanagement/api_management_api_resource_test.go	1110	email = "test@test.com"	CODE
LOW	…ices/apimanagement/api_management_api_resource_test.go	1139	email = "test@test.com"	CODE
LOW	…anagement_notification_recipient_user_resource_test.go	93	email = "foo@bar.com"	CODE
LOW	…urces/active_directory_domain_service/resource_test.go	350	additional_recipients = ["notifyA@example.net", "notifyB@example.org"]	CODE
LOW	…al/services/qumulo/qumulo_file_system_resource_test.go	120	email = "test@test.com"	CODE
LOW	…al/services/qumulo/qumulo_file_system_resource_test.go	138	email = "test@test.com"	CODE
LOW	…al/services/qumulo/qumulo_file_system_resource_test.go	179	email = "test@test.com"	CODE
LOW	…tabase_cross_region_disaster_recovery_resource_test.go	49	check.That(data.ResourceName).Key("customer_contacts.0").HasValue("test@test.com"),	CODE
LOW	…tabase_cross_region_disaster_recovery_resource_test.go	236	customer_contacts = ["test@test.com"]	CODE
LOW	…autonomous_database_clone_from_backup_resource_test.go	176	customer_contacts = ["test@test.com"]	CODE
LOW	…/oracle/oracle_exadata_infrastructure_resource_test.go	171	customer_contacts = ["test@test.com"]	CODE
LOW	…ces/oracle/oracle_autonomous_database_resource_test.go	215	customer_contacts = ["test@test.com"]	CODE
LOW	…ase_cross_region_disaster_recovery_data_source_test.go	30	check.That(data.ResourceName).Key("customer_contacts.0").HasValue("test@test.com"),	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	44	check.That(data.ResourceName).Key("email").HasValue("test@test.com"),	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	207	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	245	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	285	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	331	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	448	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	519	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	557	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	590	email = "test@test.com"	CODE
LOW	…ernal/services/nginx/nginx_deployment_resource_test.go	750	email = "test@test.com"	CODE
LOW	…/services/hdinsight/hdinsight_cluster_resource_test.go	189	additional_recipients = ["notifyA@example.net", "notifyB@example.org"]	CODE
LOW	…nagement/resources/cost_anomaly_alert/resource_test.go	121	email_addresses = ["test@test.com", "test@hashicorp.developer"]	CODE
LOW	…nagement/resources/cost_anomaly_alert/resource_test.go	137	email_addresses = ["test@test.com", "test@hashicorp.developer"]	CODE
LOW	…nagement/resources/cost_anomaly_alert/resource_test.go	156	email_addresses = ["test@test.com", "test@hashicorp.developer"]	CODE
LOW	…nagement/resources/cost_anomaly_alert/resource_test.go	205	email_addresses = ["tester@test.com", "test2@hashicorp.developer", "test@test.com"]	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	108	Config: r.emailAddressSender(data, "test@test.com"),	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	156	email_addresses = ["test@test.com", "hashicorp@test.com"]	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	157	email_address_sender = "test@test.com"	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	185	email_addresses = ["test@test.com", "hashicorp@test.com"]	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	186	email_address_sender = "test@test.com"	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	216	email_addresses = ["test@test.com", "hashicorp@test.com"]	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	217	email_address_sender = "test@test.com"	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	247	email_addresses = ["test@test.com", "hashicorp@test.com"]	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	248	email_address_sender = "test@test.com"	CODE
LOW	…rces/cost_management_scheduled_action/resource_test.go	299	email_addresses = ["test@test.com", "hashicorp@test.com"]	CODE
LOW	examples/hdinsight/enterprise-security-package/main.tf	156	additional_recipients = ["notifyA@example.net", "notifyB@example.org"]	CODE

Structural Annotation Overuse22 hits · 35 pts

Severity	File	Line	Snippet	Context
LOW	contributing/topics/guide-new-resource.md	32	### Step 1: Ensure the Tools are installed	COMMENT
LOW	contributing/topics/guide-new-resource.md	36	### Step 2: Add an SDK Client (if required)	COMMENT
LOW	contributing/topics/guide-new-resource.md	89	### Step 3: Define the Resource ID	COMMENT
LOW	contributing/topics/guide-new-resource.md	95	### Step 4: Scaffold an empty/new Resource	COMMENT
LOW⚡	contributing/topics/guide-new-resource.md	705	### Step 5: Adding Resource Identity (Required)	COMMENT
LOW⚡	contributing/topics/guide-new-resource.md	709	### Step 6: Adding a List Resource (Required)	COMMENT
LOW⚡	contributing/topics/guide-new-resource.md	713	### Step 7: Register the new Resource	COMMENT
LOW	contributing/topics/guide-new-resource.md	797	### Step 8: Add Acceptance Test(s) for this Resource	COMMENT
LOW	contributing/topics/guide-new-resource.md	955	### Step 9: Run the Acceptance Test(s)	COMMENT
LOW	contributing/topics/guide-new-resource.md	988	### Step 10: Add Documentation for this Resource	COMMENT
LOW	contributing/topics/guide-new-resource.md	1058	### Step 11: Send the Pull Request	COMMENT
LOW	contributing/topics/guide-new-data-source.md	28	### Step 1: Ensure the Tools are installed	COMMENT
LOW	contributing/topics/guide-new-data-source.md	32	### Step 2: Add an SDK Client (if required)	COMMENT
LOW	contributing/topics/guide-new-data-source.md	87	### Step 3: Define the Resource ID	COMMENT
LOW	contributing/topics/guide-new-data-source.md	93	### Step 4: Scaffold an empty/new Data Source	COMMENT
LOW	contributing/topics/guide-new-data-source.md	350	### Step 5: Register the new Data Source	COMMENT
LOW	contributing/topics/guide-new-data-source.md	433	### Step 6: Add Acceptance Test(s) for this Data Source	COMMENT
LOW	contributing/topics/guide-new-data-source.md	500	### Step 7: Run the Acceptance Test(s)	COMMENT
LOW	contributing/topics/guide-new-data-source.md	523	### Step 8: Add Documentation for this Data Source	COMMENT
LOW	contributing/topics/guide-new-data-source.md	583	### Step 9: Send the Pull Request	COMMENT
LOW	…services/oracle/oracle_autonomous_database_resource.go	356	// Step 1: Handle general updates (everything except backup schedule)	COMMENT
LOW	…services/oracle/oracle_autonomous_database_resource.go	411	// Step 2: Handle backup schedule update separately	COMMENT

Synthetic Comment Markers3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/automation/pr-close-failing-ci.sh	226	echo "Run \`make generate\` to regenerate any auto-generated code, then commit the changes."	CODE
HIGH	.github/workflows/pr-comment-failure.yaml	51	'Generation Check': 'Run `make generate` locally to regenerate any auto-generated code, then commit the re	CODE
HIGH	.github/workflows/pr-checks-combined.yaml	555	echo "Run 'make generate' locally to regenerate auto-generated code, then commit the changes."	CODE

Verbosity Indicators9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	…services/oracle/oracle_autonomous_database_resource.go	356	// Step 1: Handle general updates (everything except backup schedule)	COMMENT
LOW	…services/oracle/oracle_autonomous_database_resource.go	411	// Step 2: Handle backup schedule update separately	COMMENT
LOW	…sources/cdn_frontdoor_firewall_policy/resource_test.go	264	// from the config we need to check if the reset to default	COMMENT
LOW	…sources/cdn_frontdoor_firewall_policy/resource_test.go	307	// from the config we need to check if the reset to default	COMMENT
LOW	…es/container_app_environment_custom_domain/r_update.go	40	// We need to check if a log analytic is attached and must get the shared key if it does	COMMENT
LOW	…es/container_app_environment_custom_domain/r_delete.go	34	// We need to check if a log analytic is attached and must get the shared key if it does	COMMENT
LOW	…es/container_app_environment_custom_domain/r_create.go	52	// We need to check if a log analytic is attached and must get the shared key if it does	COMMENT
LOW	…ices/containers/helpers/kubernetes_cluster_validate.go	73	// if it's an existing cluster, we need to check if there's currently a SP used on this cluster that isn't	COMMENT
LOW	…/management_group_subscription_association_resource.go	121	// There is no "read" function on the appropriate client so we need to check if the Subscription is in the Management G	COMMENT

Modern AI Meta-Vocabulary5 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	contributing/topics/guide-new-fields-to-data-source.md	19	The location of the new property within this list is determined based on the order found in [adding a new data source](g	CODE
MEDIUM	contributing/topics/guide-new-fields-to-resource.md	17	The position of the new property is determined based on the order found in [adding a new resource](guide-new-resource.md	CODE
MEDIUM	internal/tools/document-fmt/cmd/flags.go	26	// FlagsScaffold should contain the flags required by `website-scaffold` once that functionality	COMMENT
MEDIUM	…rchestrated_virtual_machine_scale_set/resource_test.go	906	# Flexible orchestration mode allows for heterogeneous VMs and more flexibility	COMMENT
MEDIUM	scripts/website-scaffold.sh	47	# Temporary - `website-scaffold` tool should be merged into the `document-fmt` tool	COMMENT

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ers/resources/kubernetes_cluster_node_pool/r_update.go	275	// to provide a seamless updating experience for the node pool we need to cycle it by provisioning a temporary one,	COMMENT
MEDIUM	…es/containers/resources/kubernetes_cluster/r_update.go	656	// to provide a seamless updating experience for the vm size of the default node pool we need to cycle the default	COMMENT
MEDIUM	internal/resourceproviders/required.go	106	// All is intended to be a complete set of RPs that might be needed to utilize any functionality in the provider.	COMMENT

AI Response Leakage1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	internal/services/storage/storage_account_resource.go	1699	// to fix this, I have added this code to explicitly to set the value to true if is nil to workaround the Portal UI bu	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	scripts/checks/gradually-deprecated.sh	39	# Check if the line itself contains lintignore:<rule> (allowing optional spaces)	COMMENT
LOW	scripts/checks/gradually-deprecated.sh	44	# Check if the preceding line exists and contains lintignore:<rule>	COMMENT
LOW	scripts/checks/enforce-list-for-new-resources.sh	39	# Check if the list file exists in the repo (already present or added in this PR)	COMMENT
LOW	scripts/automation/pr-close-failing-ci.sh	304	# Check if we already left a warning comment (uses a hidden HTML marker)	COMMENT
LOW	.teamcity/scripts/post_github_comment.sh	491	# Check if minimization was successful	COMMENT

Slop Phrases2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	internal/services/keyvault/client/populate_cache.go	36	// Finally, it's worth noting that we intentionally List ALL the Key Vaults within a Subscription	COMMENT
MEDIUM	internal/services/managedhsm/client/helpers.go	142	// Finally, it's worth noting that we intentionally List ALL the Managed HSMs within a Subscription	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…/function-python/SampleApp/PythonSampleApp/__init__.py	16	except ValueError:	CODE

hashicorp/terraform-provider-azurerm

Open-Source Code Quality, Security and Technical Debt Review