2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.2K

Stars

Language

106.1K

Lines of Code

719

Files

156

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 148 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 1.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 8 finding(s).

PR Review Velocity Impact 8.9/100 · LOW

Which changes need focused human review? 156 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 21LOW 135

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 156 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block111 hits · 110 pts

Severity	File	Line	Snippet	Context
LOW	cmd/bind_diff_flags.go	1	package cmd	COMMENT
LOW	cmd/doctor_test.go	1	package cmd	COMMENT
LOW	cmd/doctor_test.go	41	t.Fatalf("flag --%s: failed to set %q: %v", flagName, value, err)	COMMENT
LOW	cmd/doctor.go	1	package cmd	COMMENT
LOW	…ation/test-cases/issue-2424-sequential-values-paths.sh	1	# Issue #2424: Test that --sequential-helmfiles resolves relative values file paths correctly	COMMENT
LOW	…ion/test-cases/issue-2596-local-deps-multiple-files.sh	1	# Integration test for issue #2596: Local dependencies with multiple release files	COMMENT
LOW	…tegration/test-cases/issue-2712-rollback-on-failure.sh	1	# Issue #2712: Support Helm 4 --rollback-on-failure alongside deprecated --atomic	COMMENT
LOW	test/integration/test-cases/issue-2269.sh	1	# Issue #2269: helmDefaults.skipDeps and helmDefaults.skipRefresh should be respected	COMMENT
LOW	…ration/test-cases/issue-2409-sequential-kubecontext.sh	1	# Issue #2409: Test that --sequential-helmfiles works with kubeContext from bases	COMMENT
LOW	…ntegration/test-cases/issue-821-adhoc-dep-go-getter.sh	1	# Integration test for issue #821: go-getter URL in ad-hoc dependencies	COMMENT
LOW	…st-cases/issue-2515/input/helm-plugin-filter/filter.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…-2596-local-deps-multiple-files/input/chart/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	…-2596-local-deps-multiple-files/input/chart/Chart.yaml	21	# incremented each time you make changes to the application. Versions are not expected to	COMMENT
LOW	test/integration/charts/raw/values.yaml	1	templates: []	COMMENT
LOW	test/integration/charts/raw/values.yaml	21	# namespace: {{ .Release.Namespace }}	COMMENT
LOW	test/integration/charts/raw/values.yaml	41	# # Source: raw/templates/resources.yaml	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.1.0/values.yaml	1	templates: []	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.1.0/values.yaml	21	# namespace: {{ .Release.Namespace }}	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.1.0/values.yaml	41	# # Source: raw/templates/resources.yaml	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.0.1/values.yaml	1	templates: []	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.0.1/values.yaml	21	# namespace: {{ .Release.Namespace }}	COMMENT
LOW	…emplate/helmfile/testdata/charts/raw-0.0.1/values.yaml	41	# # Source: raw/templates/resources.yaml	COMMENT
LOW	docs/values-and-merging.md	541	# monitoring:	COMMENT
LOW	docs/configuration.md	101	- "--labels=app.kubernetes.io/managed-by=helmfile"	COMMENT
LOW	docs/configuration.md	121	# performs pods restart for the resource if applicable (default false).	COMMENT
LOW	docs/configuration.md	141	# up on the next run instead of the previously-resolved (now stale) version.	COMMENT
LOW	docs/configuration.md	201	# Values files used for rendering the chart	COMMENT
LOW	docs/configuration.md	261	force: false	COMMENT
LOW	docs/configuration.md	281	# It may be helpful to deploy charts with helm api v1 CRDS	COMMENT
LOW	docs/configuration.md	341	# Label selector used for filtering releases in the nested state.	COMMENT
LOW	docs/configuration.md	361	- # By default git repositories aren't updated unless the ref is updated.	COMMENT
LOW	docs/configuration.md	381	# - `{{ .Values }}` being empty	COMMENT
LOW	docs/configuration.md	401	- myChartVer: 1.0.0	COMMENT
LOW	docs/configuration.md	421	# precedence over it.	COMMENT
LOW	docs/configuration.md	441	# When a chart queries for a specific CRD or the Kubernetes version, this can lead to unexpected results.	COMMENT
LOW	docs/proposals/otel-tracing.md	161	// context the one returned by CommandContext. No-op when disabled.	COMMENT
LOW	.github/workflows/lock.yaml	1	# Copyright 2022 The Helmfile Authors	COMMENT
LOW	pkg/maputil/maputil.go	321	ArrayMergeStrategyReplace	COMMENT
LOW	pkg/envvar/const.go	41	// - "standard": Log retries and requests (previous default behavior)	COMMENT
LOW	pkg/app/create.go	21	# repositories:	COMMENT
LOW	pkg/app/create.go	41		COMMENT
LOW	pkg/app/issue_2741_test.go	61	// issue #2741, exercising the real production wiring rather than a hand	COMMENT
LOW	pkg/app/doctor_test.go	21	reportFmt string	COMMENT
LOW	pkg/app/doctor_test.go	201	// deadlock that existed when captureStdout ran `<-done` after a failed	COMMENT
LOW	pkg/app/doctor.go	21	// helm-diff's plugin output format).	COMMENT
LOW	pkg/app/doctor.go	101	return nil	COMMENT
LOW	pkg/app/doctor.go	141	//	COMMENT
LOW	pkg/app/doctor.go	161	// ShowSecrets is forced to false. This propagates through App.Diff →	COMMENT
LOW	pkg/app/doctor.go	201	return yamlLLM, releases, err	COMMENT
LOW	pkg/kubedog/watchdog.go	41		COMMENT
LOW	pkg/kubedog/tracker.go	621	// the live API. It's used as a safety valve in the parallel-tracking flow:	COMMENT
LOW	pkg/kubedog/printer.go	801	p.logger.Info(sb.String())	COMMENT
LOW	pkg/config/global.go	41	StripArgsValuesOnExitError bool	COMMENT
LOW	pkg/config/doctor.go	21	// LLMTimeout is the per-request timeout. Parsed from a duration string	COMMENT
LOW	pkg/plugins/vals.go	121	// Configure AWS SDK logging via HELMFILE_AWS_SDK_LOG_LEVEL environment variable	COMMENT
LOW	pkg/agent/llm/prompt_test.go	1	package llm	COMMENT
LOW	pkg/agent/llm/prompt_test.go	121	t.Errorf("user prompt was not truncated: got len=%d, input len=%d", len(got), len(big))	COMMENT
LOW	pkg/agent/llm/types.go	1	package llm	COMMENT
LOW	pkg/agent/llm/types.go	61	if out.MaxTokens == 0 {	COMMENT
LOW	pkg/agent/llm/openai.go	141	return Analysis{	COMMENT
51 more matches not shown…

Decorative Section Separators8 hits · 36 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	test/integration/test-cases/issue-2097.sh	12	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2097.sh	14	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2097.sh	65	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2097.sh	67	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2247.sh	12	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2247.sh	14	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2247.sh	60	# ==============================================================================================================	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2247.sh	62	# ==============================================================================================================	COMMENT

Modern AI Meta-Vocabulary8 hits · 23 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/cli.md	511	# Overwrite existing scaffold files	COMMENT
MEDIUM	skills/helmfile/SKILL.md	183	helmfile create # Create a helmfile deployment project scaffold	CODE
MEDIUM	pkg/app/create.go	80	// Preflight: when --force is not set, check all scaffold paths before	COMMENT
MEDIUM	pkg/app/create.go	105	// Write scaffold files.	COMMENT
MEDIUM	pkg/app/create_test.go	44	// Verify all scaffold files were created.	COMMENT
MEDIUM	pkg/app/create_test.go	123	// scaffold file exists (e.g. environments/default.yaml but not helmfile.yaml),	COMMENT
MEDIUM	pkg/app/create_test.go	146	// Pre-create all scaffold files with different content.	COMMENT
MEDIUM	pkg/app/create_test.go	160	// Verify scaffold files were overwritten with the template content.	COMMENT

Redundant / Tautological Comments12 hits · 21 pts

Severity	File	Line	Snippet	Context
LOW	test/integration/test-cases/issue-2355.sh	20	# Check if it's the specific mutual exclusion error we're fixing	COMMENT
LOW	test/integration/test-cases/issue-2271.sh	56	# Check if the diff contains the preserved value (not "initial-value")	COMMENT
LOW	test/integration/test-cases/issue-2431.sh	28	# Check if the failure is due to "no cached repository" or "no repository definition" error	COMMENT
LOW	test/integration/test-cases/oci-parallel-pull.sh	101	# Check if this is a registry error (rate limit, network issue, etc.)	COMMENT
LOW⚡	test/integration/test-cases/issue-2097.sh	69	# Check if Docker is available	COMMENT
LOW⚡	test/integration/test-cases/issue-2097.sh	78	# Check if Docker daemon is running	COMMENT
LOW	test/integration/test-cases/issue-2291.sh	75	# Check if diff shows CRD being removed (the bug we're fixing).	COMMENT
LOW	test/integration/test-cases/issue-2418.sh	25	# Check if the failure is due to "no repositories found" error	COMMENT
LOW⚡	test/integration/test-cases/issue-2247.sh	64	# Check if Docker is available	COMMENT
LOW⚡	test/integration/test-cases/issue-2247.sh	73	# Check if Docker daemon is running	COMMENT
LOW	test/integration/test-cases/issue-2247.sh	209	# Check if it failed for a reason other than our validation	COMMENT
LOW	test/integration/test-cases/issue-2280.sh	52	# Check if it's a diff-related error (not the color mode error)	COMMENT

Structural Annotation Overuse11 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW⚡	docs/values-and-merging.md	635	// Step 1: Decrypt non-HCL secrets first	COMMENT
LOW⚡	docs/values-and-merging.md	638	// Step 2: Load environment values (yaml/gotmpl + HCL + non-HCL secrets)	COMMENT
LOW⚡	docs/values-and-merging.md	642	// Step 3: Merge secrets into valuesVals (highest priority among env values)	COMMENT
LOW⚡	docs/values-and-merging.md	647	// Step 4: Create Environment with merged values	COMMENT
LOW⚡	docs/values-and-merging.md	655	// Step 5: Merge from ctxEnv and overrodeEnv (for multi-part helmfiles and CLI overrides)	COMMENT
LOW	docs/index.md	89	### Step 1: Install Helmfile	COMMENT
LOW	docs/index.md	106	### Step 2: Create your first helmfile.yaml	COMMENT
LOW	docs/index.md	142	### Step 3: Initialize and deploy	COMMENT
LOW	docs/index.md	157	### Step 4: Make changes and re-apply	COMMENT
LOW	docs/index.md	183	### Step 5: Clean up	COMMENT
LOW	pkg/state/state.go	4048	// Step 1: merge user-provided args first so dedup checks below see them.	COMMENT

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/integration/test-cases/oci-parallel-pull.sh	23	# Create a temporary cache directory for this test	COMMENT
MEDIUM	test/integration/test-cases/oci-parallel-pull.sh	27	# Create a temporary output directory for test outputs	COMMENT
MEDIUM	…chart-transformers/input/helmfile.d/other-release.yaml	3	# This file represents another release that doesn't use transformers	COMMENT

AI Slop Vocabulary2 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	test/integration/test-cases/issue-2097.sh	4	# This test combines validation tests (fast) with registry tests (comprehensive)	COMMENT
MEDIUM⚡	test/integration/test-cases/issue-2247.sh	4	# This test combines validation tests (fast) with registry tests (comprehensive)	COMMENT

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/state/state.go	4048	// Step 1: merge user-provided args first so dedup checks below see them.	COMMENT

helmfile/helmfile

Open-Source Code Quality, Security and Technical Debt Review