Enterprise-grade, commercial-friendly agentic workflow platform for building next-generation SuperAgents.
This report summarizes scanner evidence for iflytek/astron-agent, a Java project with 8,888 GitHub stars. SynthScan examined 669,672 lines of code across 3582 source files, recording 3719 pattern matches distributed across 27 syntactic categories. The legacy adjusted pattern signal is 7.8 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2725 finding(s).
Are imports declared and package/API names verified? 285 finding(s).
Are wrappers, guards, and repeated structures necessary? 2979 finding(s).
Which changes need focused human review? 3719 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3719 distinct pattern matches across 27 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/astronAgent/casdoor/test_certificate_config.py | 9 | def test_templates_use_the_upstream_generated_builtin_certificate(self): | CODE |
| LOW | …astronAgent/casdoor/password-storage/test_passwords.py | 34 | def test_duplicate_or_unexpected_organization_owner_is_rejected(self): | CODE |
| LOW | …astronAgent/casdoor/password-storage/test_passwords.py | 44 | def test_plain_and_inherited_accounts_keep_their_password(self): | CODE |
| LOW⚡ | …astronAgent/casdoor/password-storage/test_passwords.py | 56 | def test_identical_passwords_receive_different_salts(self): | CODE |
| LOW⚡ | …astronAgent/casdoor/password-storage/test_passwords.py | 62 | def test_second_migration_preserves_hashes(self): | CODE |
| LOW⚡ | …astronAgent/casdoor/password-storage/test_passwords.py | 71 | def test_existing_bcrypt_with_inherited_type_is_not_rehashed(self): | CODE |
| LOW⚡ | …astronAgent/casdoor/password-storage/test_passwords.py | 79 | def test_external_only_accounts_are_not_given_a_password(self): | CODE |
| LOW⚡ | …astronAgent/casdoor/password-storage/test_passwords.py | 85 | def test_invalid_and_ambiguous_states_block_migration(self): | CODE |
| LOW | …astronAgent/casdoor/password-storage/test_passwords.py | 97 | def test_master_and_default_passwords_require_operator_review(self): | CODE |
| LOW | …astronAgent/casdoor/password-storage/test_passwords.py | 105 | def test_verifier_rejects_plain_accounts_even_with_strong_org_policy(self): | CODE |
| LOW | …tronAgent/casdoor/password-storage/test_integration.py | 148 | def test_real_initialization_migration_login_and_restart(self): | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 491 | def networked_credential_init( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 496 | def readonly_credential_init_volume( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 501 | def writable_generated_consumer( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 506 | def wrong_generated_file_path( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 513 | def inline_generated_credential( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 518 | def missing_credential_init_dependency( | CODE |
| LOW⚡ | docker/astronAgent/scripts/verify_security_contract.py | 525 | def wrong_credential_init_dependency( | CODE |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 540 | def missing_hub_app_api_binding( | CODE |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 557 | def wrong_hub_healthcheck_endpoint( | CODE |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 696 | def exercise_shell_credential_lifecycle(config: Mapping[str, Any]) -> None: | CODE |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 972 | def exercise_credential_lifecycle(compose_file: Path) -> None: | STRING |
| LOW | core/memory/database/main.py | 63 | async def rep_initialize_extensions() -> None: | CODE |
| LOW | core/memory/database/main.py | 129 | async def global_validation_exception_handler( | CODE |
| LOW | core/memory/database/main.py | 196 | async def _get_host_ip_from_hostname_command() -> str | None: | CODE |
| LOW | core/memory/database/main.py | 212 | def _get_host_ip_from_gethostbyname() -> str | None: | CODE |
| LOW | core/memory/database/main.py | 224 | def _get_host_ip_from_getaddrinfo() -> str | None: | CODE |
| LOW | core/memory/database/repository/middleware/manager.py | 76 | def _validate_service_creation(self, service_name: ServiceType) -> None: | CODE |
| LOW | …/database/repository/middleware/database/db_manager.py | 118 | async def _create_database_if_not_exists(self) -> None: | CODE |
| LOW | …e/repository/middleware/adapters/postgresql_adapter.py | 213 | async def create_database_if_not_exists(self, base_url: str, db_name: str) -> None: | CODE |
| LOW⚡ | …e/repository/middleware/adapters/postgresql_adapter.py | 342 | def get_alembic_version_table_schema(self) -> Optional[str]: | CODE |
| LOW⚡ | …e/repository/middleware/adapters/postgresql_adapter.py | 345 | def get_alembic_include_schemas(self) -> bool: | CODE |
| LOW | …tabase/repository/middleware/adapters/mysql_adapter.py | 156 | async def create_database_if_not_exists(self, base_url: str, db_name: str) -> None: | CODE |
| LOW | …tabase/repository/middleware/adapters/mysql_adapter.py | 268 | def get_alembic_version_table_schema(self) -> Optional[str]: | CODE |
| LOW | …tabase/repository/middleware/adapters/mysql_adapter.py | 272 | def get_alembic_include_schemas(self) -> bool: | CODE |
| LOW | …tabase/repository/middleware/adapters/mysql_adapter.py | 285 | def _validate_mysql_identifier(self, identifier: str) -> str: | CODE |
| LOW | …memory/database/repository/middleware/adapters/base.py | 40 | async def create_database_if_not_exists(self, base_url: str, db_name: str) -> None: | CODE |
| LOW | …memory/database/repository/middleware/adapters/base.py | 88 | def get_alembic_version_table_schema(self) -> Optional[str]: | CODE |
| LOW | …memory/database/repository/middleware/adapters/base.py | 92 | def get_alembic_include_schemas(self) -> bool: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 512 | def test_collect_update_keys_invalid() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 522 | def test_collect_columns_and_keys() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 532 | def test_collect_functions_names() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1167 | def test_is_datetime_type_timestamp() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1172 | def test_is_datetime_type_datetime() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1177 | def test_is_datetime_type_varchar() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1182 | def test_is_datetime_type_empty_string() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1187 | def test_is_datetime_type_none() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1197 | def test_convert_value_if_datetime_matching_format() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1208 | def test_convert_value_if_datetime_no_mapping() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1218 | def test_convert_value_if_datetime_non_datetime_column() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1233 | def test_is_boolean_type_boolean() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1240 | def test_is_boolean_type_tinyint() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1246 | def test_is_boolean_type_non_boolean() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1253 | def test_convert_value_if_boolean_true() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1263 | def test_convert_value_if_boolean_false() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1273 | def test_convert_value_if_boolean_non_boolean_column() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1286 | def test_is_numeric_value_int() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1291 | def test_is_numeric_value_float() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1296 | def test_is_numeric_value_digit_string() -> None: | CODE |
| LOW⚡ | core/memory/database/tests/test_exec_dml.py | 1301 | def test_is_numeric_value_non_numeric_string() -> None: | CODE |
| 2196 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .pre-commit-config.yaml | 1 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 4 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 18 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 25 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 27 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 39 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 41 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 213 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 215 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 232 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 234 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 265 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 267 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 284 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 286 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 293 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | .pre-commit-config.yaml | 295 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 315 | # ============================================================================= | COMMENT |
| MEDIUM | .pre-commit-config.yaml | 317 | # ============================================================================= | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 5 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 7 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 44 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 48 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 131 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 133 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 146 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 148 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 174 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/ragflow/entrypoint.sh | 176 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 2 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 4 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 356 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 358 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 777 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose.yaml | 779 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | docker/astronAgent/docker-compose.yaml | 920 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | docker/astronAgent/docker-compose.yaml | 922 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | docker/astronAgent/docker-compose.yaml | 927 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | docker/astronAgent/docker-compose.yaml | 929 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-auth.yml | 84 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-auth.yml | 86 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth-rpa.yaml | 1 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth-rpa.yaml | 4 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth-rpa.yaml | 28 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth-rpa.yaml | 30 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth.yaml | 1 | # ============================================================================ | COMMENT |
| MEDIUM | docker/astronAgent/docker-compose-with-auth.yaml | 3 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1162 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1164 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1192 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1194 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1228 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1230 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1281 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_exec_dml.py | 1283 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_retry.py | 12 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_retry.py | 14 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_retry.py | 48 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_retry.py | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | core/memory/database/tests/test_db_operator.py | 476 | # --------------------------------------------------------------------------- | COMMENT |
| 80 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | core/agent/tests/test_base_llm_model.py | 97 | model.llm.chat.completions.create.assert_called_once_with( | CODE |
| CRITICAL | core/agent/tests/test_base_llm_model.py | 118 | model.llm.chat.completions.create.assert_awaited_once_with( | CODE |
| CRITICAL | core/agent/tests/test_base_llm_model.py | 139 | model.llm.chat.completions.create.assert_awaited_once_with( | CODE |
| CRITICAL | core/agent/tests/test_base_llm_model.py | 167 | model.llm.chat.completions.create.assert_awaited_once_with( | CODE |
| CRITICAL | core/agent/tests/test_base_llm_model.py | 187 | model.llm.chat.completions.create.assert_awaited_once_with( | CODE |
| CRITICAL | …flytek/astron/console/commons/util/AuthStringUtil.java | 189 | return cn.hutool.core.codec.Base64.encode(rawHmac); | CODE |
| CRITICAL | …sole/hub/service/chat/springai/AgentSseBridgeTest.java | 49 | org.junit.jupiter.api.Assertions.assertTrue(bridge.isManagedSearchTrace()); | CODE |
| CRITICAL | …sole/hub/service/chat/springai/AgentSseBridgeTest.java | 50 | org.junit.jupiter.api.Assertions.assertTrue(bridge.getTraceResult().length() > 0); | CODE |
| CRITICAL | …/publish/impl/McpServiceImplBusinessExceptionTest.java | 57 | new com.iflytek.astron.console.commons.entity.bot.UserLangChainInfo()); | CODE |
| CRITICAL | …b/service/wechat/impl/WechatThirdpartyServiceImpl.java | 173 | Map<String, String> ticketMsg = com.iflytek.astron.console.hub.util.wechat.WXBizMsgParse.parseTicketMsg(decr | CODE |
| CRITICAL | …sole/hub/service/workflow/impl/BotMaasServiceImpl.java | 247 | String uid = com.iflytek.astron.console.commons.util.RequestContextUtil.getUID(); | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1306 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.post( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1320 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.post( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1563 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1598 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1631 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 1665 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2129 | threadMock.when(() -> cn.hutool.core.thread.ThreadUtil.execute(any(Runnable.class))) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2138 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2175 | threadMock.when(() -> cn.hutool.core.thread.ThreadUtil.execute(any(Runnable.class))) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2215 | threadMock.when(() -> cn.hutool.core.thread.ThreadUtil.execute(any(Runnable.class))) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2223 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2272 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2297 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2317 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2324 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.clas | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2348 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.post(anyString(), any(Map.class | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2371 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.post(anyString(), any(Map.class | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2378 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.post(anyString(), any(Map.cla | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2517 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2521 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2551 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2555 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2586 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2596 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2843 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get(anyString(), any(Map.class) | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2891 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2901 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2920 | okHttpMock.when(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …console/toolkit/service/knowledge/RepoServiceTest.java | 2930 | okHttpMock.verify(() -> com.iflytek.astron.console.toolkit.util.OkHttpUtil.get( | CODE |
| CRITICAL | …workflow/WorkflowServiceProtocolAuthorizationTest.java | 208 | new com.iflytek.astron.console.commons.entity.bot.UserLangChainInfo(); | CODE |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 395 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 419 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 443 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 463 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 488 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 515 | new com.iflytek.astron.console.commons.entity.user.UserInfo(); | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 679 | rsa.when(() -> com.iflytek.astron.console.toolkit.util.idata.RSAUtil.loadPrivateKey(anyString())) | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 681 | rsa.when(() -> com.iflytek.astron.console.toolkit.util.idata.RSAUtil.decryptByPrivateKeyBase64(eq("ENCRYPTED | STRING |
| CRITICAL | …on/console/toolkit/service/model/ModelServiceTest.java | 935 | com.iflytek.astron.console.toolkit.entity.table.model.ModelCategory cat = new com.iflytek.astron.console.toolkit | STRING |
| CRITICAL | …va/com/iflytek/astron/console/toolkit/util/S3Util.java | 351 | // Deprecated: use com.iflytek.astron.console.commons.util.S3ClientUtil.generatePresignedPutUrl() | COMMENT |
| CRITICAL | …/console/toolkit/service/workflow/WorkflowService.java | 214 | @org.springframework.beans.factory.annotation.Value("${mcp-server.file-path}") | CODE |
| CRITICAL | …/console/toolkit/service/workflow/WorkflowService.java | 1829 | com.iflytek.astron.console.toolkit.entity.core.workflow.node.Value v = new com.iflytek.astron.console.to | CODE |
| CRITICAL | …/console/toolkit/service/workflow/WorkflowService.java | 1875 | com.iflytek.astron.console.toolkit.entity.core.workflow.node.Value v = new com.iflytek.astron.console.to | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …cker/astronAgent/casdoor/password-storage/passwords.py | 179 | except Exception: | CODE |
| LOW | …cker/astronAgent/casdoor/password-storage/passwords.py | 248 | except Exception: | CODE |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 1141 | except Exception: | STRING |
| LOW | core/memory/database/main.py | 103 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/main.py | 190 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …re/memory/database/repository/middleware/initialize.py | 20 | except Exception as exc: | CODE |
| LOW | …/database/repository/middleware/database/db_manager.py | 154 | except Exception as e: | CODE |
| LOW | …e/repository/middleware/database/database_migration.py | 52 | except Exception as e: # pylint: disable=broad-exception-caught | CODE |
| LOW | …e/repository/middleware/adapters/postgresql_adapter.py | 311 | except Exception as e: | CODE |
| LOW | …e/repository/middleware/adapters/postgresql_adapter.py | 320 | except Exception as e: | CODE |
| LOW⚡ | …e/repository/middleware/adapters/postgresql_adapter.py | 332 | except Exception as restore_error: | CODE |
| LOW | …tabase/repository/middleware/adapters/mysql_adapter.py | 256 | except Exception as restore_error: | CODE |
| LOW | core/memory/database/utils/retry.py | 62 | except Exception as e: | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 805 | except Exception as parse_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 933 | except Exception as col_type_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 1058 | except Exception as unexpected_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 1093 | except Exception as mapping_error: | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 1111 | except Exception as exec_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 1144 | except Exception as schema_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_dml.py | 1205 | except Exception as parse_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/db_operator.py | 118 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/db_operator.py | 173 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/db_operator.py | 240 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/db_operator.py | 264 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/db_operator.py | 360 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_ddl.py | 328 | except Exception as parse_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/exec_ddl.py | 384 | except Exception as error: | CODE |
| LOW | core/memory/database/api/v1/exec_ddl.py | 404 | except Exception as exec_error: | CODE |
| LOW | core/memory/database/api/v1/exec_ddl.py | 484 | except Exception as unexpected_error: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/common.py | 57 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | core/memory/database/api/v1/common.py | 90 | except Exception as db_error: | CODE |
| MEDIUM | core/plugin/rpa/run_tests.py | 35 | print("Error output:") | CODE |
| LOW | core/plugin/rpa/infra/xiaowu/tasks.py | 85 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/infra/xiaowu/tasks.py | 172 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/api/app.py | 57 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/api/v1/execution.py | 58 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/doc/API_EXAMPLES.md | 106 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/doc/API_EXAMPLES.md | 506 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/doc/API_EXAMPLES.md | 565 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/doc/API_EXAMPLES.md | 665 | except Exception as e: | CODE |
| LOW | core/plugin/rpa/doc/API_EXAMPLES.md | 688 | except Exception as e: | CODE |
| LOW | core/plugin/link/infra/kafka_telemetry.py | 61 | except Exception as e: | CODE |
| LOW⚡ | core/plugin/link/infra/tool_exector/process.py | 76 | except Exception: | CODE |
| LOW⚡ | core/plugin/link/infra/tool_exector/process.py | 82 | except Exception: | CODE |
| LOW⚡ | core/plugin/link/infra/tool_exector/process.py | 87 | except Exception: | CODE |
| LOW | core/plugin/link/infra/tool_exector/process.py | 184 | except Exception: | CODE |
| LOW | core/plugin/link/infra/tool_exector/process.py | 262 | except Exception as err: | CODE |
| LOW | core/plugin/link/app/start_server.py | 106 | except Exception as e: | CODE |
| LOW | core/plugin/link/tests/conftest.py | 36 | except Exception: | CODE |
| LOW | core/plugin/link/tests/conftest.py | 46 | except Exception: | CODE |
| LOW | core/plugin/link/tests/test_runner.py | 41 | except Exception as e: | CODE |
| MEDIUM | core/plugin/link/tests/test_runner.py | 42 | print(f"Error running command: {e}") | CODE |
| LOW | core/plugin/link/tests/unit/test_schemas.py | 190 | except Exception: | CODE |
| LOW | core/plugin/link/utils/security/access_interceptor.py | 177 | except Exception: | CODE |
| LOW | core/plugin/link/utils/sid/sid_generator2.py | 58 | except Exception as err: | CODE |
| LOW | …e/plugin/link/utils/open_api_schema/response_filter.py | 49 | except Exception: | CODE |
| LOW | …e/plugin/link/utils/open_api_schema/schema_validate.py | 54 | except Exception as err: | CODE |
| LOW | …e/plugin/link/utils/open_api_schema/schema_validate.py | 79 | except Exception as err: | CODE |
| LOW | …e/plugin/link/utils/open_api_schema/schema_validate.py | 120 | except Exception as err: | CODE |
| LOW | core/plugin/link/exceptions/sparklink_exceptions.py | 105 | except Exception as err: | CODE |
| 323 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/plugin/link/domain/models/utils.py | 0 | retrieve an item from the cache. args: key: the key of the item to retrieve. returns: the value associated with the key, | STRING |
| HIGH | core/common/service/cache/base_cache.py | 0 | retrieve an item from the cache. args: key: the key of the item to retrieve. returns: the value associated with the key, | STRING |
| HIGH | core/common/service/cache/redis_cache.py | 0 | retrieve an item from the cache. args: key: the key of the item to retrieve. returns: the value associated with the key, | STRING |
| HIGH | core/workflow/extensions/middleware/cache/manager.py | 0 | retrieve an item from the cache. args: key: the key of the item to retrieve. returns: the value associated with the key, | STRING |
| HIGH | core/workflow/extensions/middleware/cache/base.py | 0 | retrieve an item from the cache. args: key: the key of the item to retrieve. returns: the value associated with the key, | STRING |
| HIGH | core/plugin/link/domain/models/utils.py | 0 | inserts or updates a value in the cache. if the existing value and the new value are both dictionaries, they are merged. | STRING |
| HIGH | core/common/service/cache/redis_cache.py | 0 | inserts or updates a value in the cache. if the existing value and the new value are both dictionaries, they are merged. | STRING |
| HIGH | core/workflow/extensions/middleware/cache/manager.py | 0 | inserts or updates a value in the cache. if the existing value and the new value are both dictionaries, they are merged. | STRING |
| HIGH | core/plugin/link/domain/models/utils.py | 0 | remove an item from the cache. args: key: the key of the item to remove. | STRING |
| HIGH | core/common/service/cache/base_cache.py | 0 | remove an item from the cache. args: key: the key of the item to remove. | STRING |
| HIGH | core/common/service/cache/redis_cache.py | 0 | remove an item from the cache. args: key: the key of the item to remove. | STRING |
| HIGH | core/workflow/extensions/middleware/cache/manager.py | 0 | remove an item from the cache. args: key: the key of the item to remove. | STRING |
| HIGH | core/workflow/extensions/middleware/cache/base.py | 0 | remove an item from the cache. args: key: the key of the item to remove. | STRING |
| HIGH | core/agent/tests/test_workflow_agent.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_workflow_agent_runner.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_workflow_agent_builder.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_knowledge_plugin.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_base_api.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_base_llm_model.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_plugin_base_link_mcp_workflow.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/agent/tests/test_base_builder.py | 0 | automatically inject environment fixes for all tests. - ensure `sid_generator2` is initialized to avoid `span` construct | STRING |
| HIGH | core/common/service/cache/base_cache.py | 0 | add an item to the cache. args: key: the key of the item. value: the value to cache. | STRING |
| HIGH | core/common/service/cache/redis_cache.py | 0 | add an item to the cache. args: key: the key of the item. value: the value to cache. | STRING |
| HIGH | core/workflow/extensions/middleware/cache/manager.py | 0 | add an item to the cache. args: key: the key of the item. value: the value to cache. | STRING |
| HIGH | core/workflow/extensions/middleware/cache/base.py | 0 | add an item to the cache. args: key: the key of the item. value: the value to cache. | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 0 | execute rag query args: query: query text doc_ids: document id list repo_ids: knowledge base id list top_k: number of re | STRING |
| HIGH | core/knowledge/service/impl/aiui_strategy.py | 0 | execute rag query args: query: query text doc_ids: document id list repo_ids: knowledge base id list top_k: number of re | STRING |
| HIGH | core/knowledge/service/impl/cbg_strategy.py | 0 | execute rag query args: query: query text doc_ids: document id list repo_ids: knowledge base id list top_k: number of re | STRING |
| HIGH | core/workflow/infra/providers/llm/chat_ai.py | 0 | calculate the number of tokens in the given text. :param text: input text to calculate tokens for :return: number of tok | STRING |
| HIGH | …workflow/infra/providers/llm/openai/openai_chat_llm.py | 0 | calculate the number of tokens in the given text. :param text: input text to calculate tokens for :return: number of tok | STRING |
| HIGH | …ow/infra/providers/llm/iflytek_spark/spark_chat_llm.py | 0 | calculate the number of tokens in the given text. :param text: input text to calculate tokens for :return: number of tok | STRING |
| HIGH | core/workflow/infra/audit_system/audit_api/base.py | 0 | in llm content security scenarios, filter, detect and identify user input text, images, videos, documents, etc., and pro | STRING |
| HIGH | …ow/infra/audit_system/audit_api/mock/mock_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify user input text, images, videos, documents, etc., and pro | STRING |
| HIGH | …infra/audit_system/audit_api/iflytek/ifly_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify user input text, images, videos, documents, etc., and pro | STRING |
| HIGH | core/workflow/infra/audit_system/audit_api/base.py | 0 | in llm content security scenarios, filter, detect and identify llm output images, videos, audio, etc., and process and r | STRING |
| HIGH | …ow/infra/audit_system/audit_api/mock/mock_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify llm output images, videos, audio, etc., and process and r | STRING |
| HIGH | …infra/audit_system/audit_api/iflytek/ifly_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify llm output images, videos, audio, etc., and process and r | STRING |
| HIGH | core/workflow/infra/audit_system/audit_api/base.py | 0 | in llm content security scenarios, filter, detect and identify websites, knowledge bases and other data referenced durin | STRING |
| HIGH | …ow/infra/audit_system/audit_api/mock/mock_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify websites, knowledge bases and other data referenced durin | STRING |
| HIGH | …infra/audit_system/audit_api/iflytek/ifly_audit_api.py | 0 | in llm content security scenarios, filter, detect and identify websites, knowledge bases and other data referenced durin | STRING |
| HIGH | core/workflow/engine/nodes/plugin_tool/plugin_node.py | 0 | get the success execution status. :return: succeeded status for successful operations | STRING |
| HIGH | …kflow/engine/nodes/knowledge_pro/knowledge_pro_node.py | 0 | get the success execution status. :return: succeeded status for successful operations | STRING |
| HIGH | core/workflow/engine/nodes/knowledge/knowledge_node.py | 0 | get the success execution status. :return: succeeded status for successful operations | STRING |
| HIGH | …rkflow/engine/nodes/knowledge/knowledge_expert_node.py | 0 | get the success execution status. :return: succeeded status for successful operations | STRING |
| HIGH | core/workflow/engine/nodes/pgsql/pgsql_node.py | 0 | get the success execution status. :return: succeeded status for successful operations | STRING |
| HIGH | core/workflow/engine/nodes/plugin_tool/plugin_node.py | 0 | get the failure execution status. :return: failed status for failed operations | STRING |
| HIGH | …kflow/engine/nodes/knowledge_pro/knowledge_pro_node.py | 0 | get the failure execution status. :return: failed status for failed operations | STRING |
| HIGH | core/workflow/engine/nodes/knowledge/knowledge_node.py | 0 | get the failure execution status. :return: failed status for failed operations | STRING |
| HIGH | …rkflow/engine/nodes/knowledge/knowledge_expert_node.py | 0 | get the failure execution status. :return: failed status for failed operations | STRING |
| HIGH | core/workflow/engine/nodes/pgsql/pgsql_node.py | 0 | get the failure execution status. :return: failed status for failed operations | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/memory/database/main.py | 207 | except (OSError, ValueError): | CODE |
| HIGH | core/memory/database/main.py | 219 | except (OSError, socket.gaierror): | CODE |
| HIGH | core/memory/database/main.py | 233 | except (OSError, socket.gaierror): | CODE |
| HIGH | …e/repository/middleware/adapters/postgresql_adapter.py | 278 | except ImportError: | CODE |
| HIGH | …e/repository/middleware/adapters/postgresql_adapter.py | 300 | except ImportError: | CODE |
| HIGH | core/plugin/rpa/api/app.py | 55 | except (ModuleNotFoundError, ImportError): | CODE |
| HIGH | core/plugin/link/infra/tool_exector/process.py | 184 | except Exception: | CODE |
| HIGH | core/plugin/link/app/start_server.py | 104 | except (ModuleNotFoundError, ImportError): | CODE |
| HIGH | core/plugin/link/tests/conftest.py | 36 | except Exception: | CODE |
| HIGH | core/plugin/link/tests/conftest.py | 46 | except Exception: | CODE |
| HIGH | core/plugin/link/tests/unit/test_schemas.py | 318 | except ValidationError: | CODE |
| HIGH | core/plugin/link/tests/unit/test_schemas.py | 190 | except Exception: | CODE |
| HIGH | core/plugin/aitools/app/start_server.py | 132 | except KeyboardInterrupt: | CODE |
| HIGH | core/plugin/aitools/app/start_server.py | 55 | except (ModuleNotFoundError, ImportError): | CODE |
| HIGH | core/plugin/aitools/utils/config_utils.py | 236 | except asyncio.CancelledError: | CODE |
| HIGH | core/plugin/aitools/common/clients/websockets_client.py | 161 | except asyncio.CancelledError: | CODE |
| HIGH | core/plugin/aitools/common/clients/websockets_client.py | 185 | except asyncio.CancelledError: | CODE |
| HIGH | core/plugin/aitools/service/ise/ise_client.py | 290 | except (ValueError, TypeError): | CODE |
| HIGH | core/agent/main.py | 162 | except (OSError, ValueError): | CODE |
| HIGH | core/agent/main.py | 174 | except (OSError, socket.gaierror): | CODE |
| HIGH | core/agent/main.py | 188 | except (OSError, socket.gaierror): | CODE |
| HIGH | core/agent/infra/credentials.py | 48 | except OSError: | CODE |
| HIGH | core/agent/api/v1/workflow_agent.py | 230 | except asyncio.CancelledError: | CODE |
| HIGH | core/agent/service/plugin/skill_sandbox.py | 392 | except Exception: | CODE |
| HIGH | core/agent/service/plugin/skill_sandbox.py | 458 | except Exception: | CODE |
| HIGH | core/common/otlp/trace/langfuse.py | 921 | except (TypeError, ValueError): | CODE |
| HIGH | …rkflow/tests/engine/callbacks/test_callback_handler.py | 806 | except asyncio.CancelledError: | CODE |
| HIGH | …rkflow/tests/engine/callbacks/test_callback_handler.py | 1148 | except asyncio.CancelledError: | CODE |
| HIGH | …rkflow/tests/engine/callbacks/test_callback_handler.py | 730 | except asyncio.CancelledError: | CODE |
| HIGH | …rkflow/tests/engine/callbacks/test_callback_handler.py | 761 | except asyncio.CancelledError: | CODE |
| HIGH | …rkflow/tests/engine/callbacks/test_callback_handler.py | 945 | except asyncio.CancelledError: | CODE |
| HIGH | core/workflow/utils/credentials.py | 70 | except OSError: | CODE |
| HIGH | core/workflow/service/chat_service.py | 436 | except asyncio.CancelledError: | CODE |
| HIGH | …orkflow/engine/nodes/code/executor/e2b/e2b_executor.py | 380 | except Exception: | CODE |
| HIGH | …orkflow/engine/nodes/code/executor/e2b/e2b_executor.py | 446 | except Exception: | CODE |
| HIGH | core/workflow/engine/nodes/loop/loop_node.py | 213 | except Exception: | CODE |
| HIGH | helm/astron-agent/tests/verify_tenant_bootstrap.py | 372 | except VerificationError: | CODE |
| HIGH | helm/astron-agent/tests/verify_tenant_bootstrap.py | 394 | except VerificationError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/memory/database/repository/middleware/manager.py | 8 | CODE | |
| LOW | core/memory/database/repository/middleware/manager.py | 9 | CODE | |
| LOW | …ry/database/repository/middleware/adapters/__init__.py | 3 | CODE | |
| LOW | core/memory/database/exceptions/e.py | 5 | CODE | |
| LOW | core/memory/database/api/__init__.py | 8 | CODE | |
| LOW | core/memory/database/api/v1/__init__.py | 9 | CODE | |
| LOW | core/memory/database/api/v1/__init__.py | 9 | CODE | |
| LOW | core/memory/database/api/v1/__init__.py | 9 | CODE | |
| LOW | core/memory/database/api/v1/__init__.py | 14 | CODE | |
| LOW | core/memory/database/api/v1/__init__.py | 15 | CODE | |
| LOW | core/memory/database/alembic/env.py | 23 | CODE | |
| LOW | core/memory/database/alembic/env.py | 24 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 7 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 9 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 10 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 11 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 11 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 14 | CODE | |
| LOW | core/plugin/rpa/tests/unit/test_main.py | 15 | CODE | |
| LOW | core/plugin/rpa/tests/unit/utils/urls/test_url_util.py | 9 | CODE | |
| LOW | core/plugin/rpa/tests/unit/utils/log/test_logger.py | 7 | CODE | |
| LOW | core/plugin/rpa/tests/unit/utils/log/test_logger.py | 8 | CODE | |
| LOW | core/plugin/rpa/tests/unit/utils/log/test_logger.py | 12 | CODE | |
| LOW | core/plugin/rpa/tests/unit/api/test_app.py | 7 | CODE | |
| LOW | core/plugin/rpa/tests/unit/api/test_app.py | 8 | CODE | |
| LOW | core/plugin/rpa/tests/unit/api/v1/test_execution.py | 8 | CODE | |
| LOW | core/plugin/rpa/tests/unit/api/v1/test_execution.py | 9 | CODE | |
| LOW | …in/rpa/tests/unit/api/schemas/test_execution_schema.py | 7 | CODE | |
| LOW | …in/rpa/tests/unit/api/schemas/test_execution_schema.py | 7 | CODE | |
| LOW | …e/plugin/rpa/tests/unit/service/xiaowu/test_process.py | 8 | CODE | |
| LOW | …e/plugin/rpa/tests/unit/service/xiaowu/test_process.py | 9 | CODE | |
| LOW | core/plugin/rpa/tests/unit/consts/test_const.py | 7 | CODE | |
| LOW | …e/plugin/rpa/tests/integration/test_api_integration.py | 9 | CODE | |
| LOW | …e/plugin/rpa/tests/integration/test_api_integration.py | 14 | CODE | |
| LOW | core/plugin/link/utils/sid/sid_generator2.py | 7 | CODE | |
| LOW | …e/plugin/link/utils/open_api_schema/response_filter.py | 1 | CODE | |
| LOW | core/plugin/link/alembic/env.py | 7 | CODE | |
| LOW | core/plugin/link/domain/models/utils.py | 25 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 12 | CODE | |
| LOW | core/plugin/link/consts/const.py | 32 | CODE | |
| LOW | core/plugin/link/consts/const.py | 32 | CODE | |
| LOW | core/plugin/link/consts/const.py | 32 | CODE | |
| LOW | core/plugin/link/consts/const.py | 32 | CODE | |
| LOW | core/plugin/link/consts/const.py | 32 | CODE | |
| LOW | core/plugin/link/consts/const.py | 42 | CODE | |
| LOW | core/plugin/link/consts/const.py | 42 | CODE | |
| 123 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/astronAgent/casdoor/test_certificate_config.py | 9 | CODE | |
| LOW | …cker/astronAgent/casdoor/password-storage/passwords.py | 66 | CODE | |
| LOW | …cker/astronAgent/casdoor/password-storage/passwords.py | 143 | CODE | |
| LOW | docker/astronAgent/scripts/verify_security_contract.py | 213 | CODE | |
| LOW | core/memory/database/main.py | 224 | CODE | |
| LOW | …e/repository/middleware/database/database_migration.py | 26 | CODE | |
| LOW | core/memory/database/tests/test_exec_dml.py | 350 | CODE | |
| LOW | core/memory/database/tests/test_db_operator.py | 148 | CODE | |
| LOW | core/memory/database/tests/test_db_operator.py | 221 | CODE | |
| LOW | core/memory/database/tests/test_db_operator.py | 383 | CODE | |
| LOW | core/memory/database/tests/test_exec_ddl.py | 123 | CODE | |
| LOW | core/memory/database/utils/retry.py | 42 | CODE | |
| LOW | core/memory/database/utils/retry.py | 55 | CODE | |
| LOW | core/memory/database/utils/retry.py | 57 | CODE | |
| LOW | core/memory/database/api/v1/exec_dml.py | 637 | CODE | |
| LOW | core/memory/database/api/v1/exec_dml.py | 668 | CODE | |
| LOW | core/memory/database/api/v1/exec_dml.py | 1070 | CODE | |
| LOW | core/memory/database/api/v1/db_operator.py | 280 | CODE | |
| LOW | core/memory/database/api/v1/exec_ddl.py | 44 | CODE | |
| LOW | core/memory/database/api/v1/exec_ddl.py | 120 | CODE | |
| LOW | core/memory/database/api/v1/exec_ddl.py | 180 | CODE | |
| LOW | core/plugin/rpa/main.py | 41 | CODE | |
| LOW | core/plugin/rpa/infra/xiaowu/tasks.py | 93 | CODE | |
| LOW | core/plugin/rpa/tests/test_runner.py | 289 | CODE | |
| LOW | core/plugin/rpa/tests/test_runner.py | 169 | CODE | |
| LOW | core/plugin/rpa/tests/unit/api/v1/test_health_check.py | 83 | CODE | |
| LOW | core/plugin/link/main.py | 45 | CODE | |
| LOW | core/plugin/link/infra/kafka_telemetry.py | 68 | CODE | |
| LOW | core/plugin/link/infra/tool_crud/process.py | 148 | CODE | |
| LOW | core/plugin/link/infra/tool_crud/process.py | 183 | CODE | |
| LOW | core/plugin/link/infra/tool_exector/process.py | 281 | CODE | |
| LOW | core/plugin/link/infra/tool_exector/process.py | 304 | CODE | |
| LOW | core/plugin/link/tests/test_runner.py | 140 | CODE | |
| LOW | core/plugin/link/tests/unit/test_domain_models.py | 249 | CODE | |
| LOW | core/plugin/link/tests/unit/test_domain_models.py | 441 | CODE | |
| LOW | core/plugin/link/tests/unit/test_main.py | 125 | CODE | |
| LOW | core/plugin/link/tests/unit/test_main.py | 148 | CODE | |
| LOW | …e/plugin/link/utils/open_api_schema/schema_validate.py | 96 | CODE | |
| LOW | …e/plugin/link/utils/open_api_schema/schema_validate.py | 135 | CODE | |
| LOW | core/plugin/link/utils/open_api_schema/schema_parser.py | 59 | CODE | |
| LOW | core/plugin/link/service/enterprise/extension.py | 34 | CODE | |
| LOW | …/plugin/link/service/community/tools/mcp/mcp_server.py | 165 | CODE | |
| LOW | …/plugin/link/service/community/tools/mcp/mcp_server.py | 264 | CODE | |
| LOW | …link/service/community/tools/http/management_server.py | 317 | CODE | |
| LOW | …link/service/community/tools/http/management_server.py | 387 | CODE | |
| LOW | …/link/service/community/tools/http/execution_server.py | 230 | CODE | |
| LOW | core/plugin/link/domain/models/utils.py | 341 | CODE | |
| LOW | core/plugin/link/domain/models/utils.py | 373 | CODE | |
| LOW | core/plugin/aitools/platform_account_config.py | 60 | CODE | |
| LOW | core/plugin/aitools/utils/oss_utils.py | 15 | CODE | |
| LOW | …aitools/service/ocr_llm/req_ase_ability_ocr_service.py | 84 | CODE | |
| LOW | …aitools/service/ocr_llm/req_ase_ability_ocr_service.py | 123 | CODE | |
| LOW | …aitools/service/ocr_llm/req_ase_ability_ocr_service.py | 196 | CODE | |
| LOW | core/plugin/aitools/service/ise/ise_client.py | 50 | CODE | |
| LOW | core/plugin/aitools/service/ise/ise_client.py | 89 | CODE | |
| LOW | core/plugin/aitools/service/ise/ise_client.py | 390 | CODE | |
| LOW | core/agent/main.py | 179 | CODE | |
| LOW | core/agent/tests/test_workflow_agent_builder.py | 127 | CODE | |
| LOW | core/agent/tests/test_workflow_agent_builder.py | 172 | CODE | |
| LOW | core/agent/api/v1/base_api.py | 189 | CODE | |
| 112 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/memory/database/domain/entity/general.py | 33 | Safely parse and execute SQL with automatic parameter binding. Args: session: SQLAlchemy AsyncSession | STRING |
| HIGH | core/plugin/link/infra/tool_exector/http_auth.py | 135 | Parse a URL into its components. Args: requset_url (str): The URL to parse Returns: Url: | STRING |
| HIGH | core/plugin/link/infra/tool_exector/process.py | 227 | Execute the HTTP request with proper authentication and validation. Args: span: Tracing span for re | STRING |
| HIGH | core/plugin/link/domain/models/utils.py | 319 | Get a field value from a Redis hash. Args: name: The hash name. key: The field key with | STRING |
| HIGH | core/plugin/link/domain/models/utils.py | 342 | Delete one or more fields from a Redis hash. Args: name: The hash name. *key: Variable | STRING |
| HIGH | core/plugin/link/domain/models/utils.py | 374 | Get all field-value pairs from a Redis hash. Args: name: The hash name. Returns: | STRING |
| HIGH | core/knowledge/infra/desk/sparkdesk.py | 25 | Asynchronously execute SparkDesk knowledge base query. Args: query: Query string repo_ids: Kno | STRING |
| HIGH | core/knowledge/infra/desk/sparkdesk.py | 52 | Asynchronously send request to SparkDesk API (using aiohttp) Args: body: Request body data met | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 27 | Upload file to Xinghuo knowledge base. Args: url: File URL or path wiki_split_extends: Wiki sp | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 79 | Perform chunking processing on documents. Args: file_id: File ID cut_off: Cutoff character lis | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 150 | Get document chunk content. Args: file_id: File ID Returns: List of document chunk conten | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 391 | Send asynchronous request to Xinghuo knowledge base API. Args: body: Request body data url: Re | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 533 | Process form HTTP response Args: resp: HTTP response object url: Request URL span_cont | STRING |
| HIGH | core/knowledge/infra/xinghuo/xinghuo.py | 606 | Send form request to Xinghuo knowledge base API (using native aiohttp). Args: body: Request body data | STRING |
| HIGH | core/knowledge/infra/aiui/aiui.py | 109 | Parse document Args: file_url: File URL resource_type: Resource type **kwargs: Other p | STRING |
| HIGH | core/knowledge/infra/aiui/aiui.py | 257 | Send request to AIUI service Args: post_body: Request body url: URL method: HTTP metho | STRING |
| HIGH | core/knowledge/infra/ragflow/ragflow_client.py | 493 | Upload document to the specified dataset. Resolution strategy: - When ``dataset_id`` is non-empty, resolve | STRING |
| HIGH | core/knowledge/infra/ragflow/ragflow_client.py | 677 | Fetch all chunks for a single document by paginating through the RAGFlow API. Uses the server-reported ``total | STRING |
| HIGH | core/knowledge/infra/ragflow/ragflow_client.py | 1084 | Wait for RAGFlow to reach a terminal document parsing state. RAGFlow exposes ``run`` as the authoritative stat | STRING |
| HIGH | core/knowledge/utils/verification.py | 12 | Check if parameters are non-empty. Args: *args: List of parameters to check Returns: bool | STRING |
| HIGH | core/knowledge/api/v1/api.py | 92 | Unified handling of RAG operations, response logging, metric counting, and exception handling. Args: s | STRING |
| HIGH | core/knowledge/service/rag_strategy_factory.py | 30 | Get the corresponding strategy instance based on ragType. Args: ragType: The RAG type iden | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 52 | Split file into multiple chunks Args: fileUrl: File url length_range: Length r | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 76 | Save chunks to knowledge base Args: doc_id: Document ID group: Group name | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 104 | Update chunks Args: doc_id: Document ID group: Group name uid: Use | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 127 | Delete chunks Args: doc_id: Document ID chunk_ids: Chunk ID list * | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 146 | Query all chunks of a document Args: doc_id: Document ID **kwargs: Other param | STRING |
| HIGH | core/knowledge/service/impl/sparkdesk_strategy.py | 162 | Query document name information Args: doc_id: Document ID **kwargs: Other para | STRING |
| HIGH | core/knowledge/service/impl/ragflow_strategy.py | 1006 | Delete knowledge chunks using RAGFlow. Args: docId: Document ID chunkIds: List | STRING |
| HIGH | core/knowledge/service/impl/cbg_strategy.py | 302 | Delete chunks Args: docId: Document ID chunkIds: Chunk ID list **k | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/memory/database/repository/middleware/base.py | 26 | def set_ready(self) -> None: | CODE |
| LOW | …ry/database/repository/middleware/adapters/__init__.py | 5 | __all__ = ["get_adapter"] | CODE |
| LOW | core/memory/database/api/__init__.py | 10 | __all__ = ["CustomException"] | CODE |
| LOW | core/memory/database/api/v1/__init__.py | 17 | __all__ = [ | CODE |
| LOW | core/memory/database/domain/entity/schema.py | 10 | async def set_search_path_by_schema(session: AsyncSession, schema: str) -> None: | CODE |
| LOW | core/plugin/rpa/utils/log/logger.py | 27 | def set_log(log_level: Optional[str] = None, log_path: Optional[str] = None) -> None: | CODE |
| LOW | core/plugin/rpa/api/app.py | 134 | def set_config() -> None: | CODE |
| LOW | core/plugin/rpa/consts/const.py | 33 | __all__ = [ | CODE |
| LOW | core/plugin/link/infra/tool_crud/process.py | 91 | def update_tools(self, tool_info: List[Dict[str, Any]]) -> None: | CODE |
| LOW | core/plugin/link/consts/const.py | 97 | __all__ = [ | CODE |
| LOW | core/plugin/aitools/utils/otlp_utils.py | 16 | def update_span(response: BaseResponse, span: Optional[SpanLike] = None) -> None: | CODE |
| LOW | core/plugin/aitools/common/clients/adapters.py | 33 | def set_attribute(self, key: str, value: object) -> None: | CODE |
| LOW | core/plugin/aitools/common/clients/adapters.py | 36 | def set_attributes(self, attr: Dict) -> None: | CODE |
| LOW⚡ | core/plugin/aitools/common/clients/adapters.py | 69 | def set_attribute(self, key: str, value: object) -> None: | CODE |
| LOW⚡ | core/plugin/aitools/common/clients/adapters.py | 72 | def set_attributes(self, attr: Dict) -> None: | CODE |
| LOW⚡ | core/plugin/aitools/common/clients/adapters.py | 109 | def set_attribute(self, key: str, value: object) -> None: | CODE |
| LOW⚡ | core/plugin/aitools/common/clients/adapters.py | 113 | def set_attributes(self, attr: Dict) -> None: | CODE |
| LOW | core/plugin/aitools/common/clients/adapters.py | 144 | def set_attribute(self, key: str, value: object) -> None: | CODE |
| LOW | core/plugin/aitools/common/clients/adapters.py | 147 | def set_attributes(self, attr: Dict) -> None: | CODE |
| LOW | core/agent/tests/test_app_auth.py | 43 | def _setup_test_environment(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | core/agent/tests/test_workflow_agent.py | 43 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_skill_plugin.py | 106 | def _setup_test_environment(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | core/agent/tests/test_workflow_agent_runner.py | 30 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_workflow_agent_builder.py | 40 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_knowledge_plugin.py | 33 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_base_api.py | 32 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_base_llm_model.py | 37 | def _setup_test_environment(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | core/agent/tests/test_plugin_base_link_mcp_workflow.py | 38 | def _setup_test_environment(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | core/agent/tests/test_base_builder.py | 49 | def _setup_test_environment() -> None: | CODE |
| LOW | core/agent/tests/test_runner_base_and_chat_cot.py | 48 | def _setup_test_environment(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | core/common/settings/polaris.py | 42 | def _set_cookie(self, session: requests.Session) -> None: | CODE |
| LOW | core/common/settings/polaris.py | 57 | def set_env(configs_content: str) -> None: | CODE |
| LOW | core/common/health/__init__.py | 3 | __all__ = ["create_health_router"] | CODE |
| LOW | core/common/otlp/metrics/meter.py | 52 | def set_label(self, key: str, value: str) -> None: | CODE |
| LOW⚡ | core/common/otlp/log_trace/node_log.py | 102 | def set_next_node_id(self, next_id: str) -> None: | CODE |
| LOW⚡ | core/common/otlp/log_trace/node_log.py | 110 | def set_first_frame_duration(self) -> None: | CODE |
| LOW⚡ | core/common/otlp/log_trace/node_log.py | 119 | def set_node_first_cost_time(self, cost_time: float) -> None: | CODE |
| LOW⚡ | core/common/otlp/log_trace/node_log.py | 127 | def set_start(self) -> None: | CODE |
| LOW⚡ | core/common/otlp/log_trace/node_log.py | 135 | def set_end(self) -> None: | CODE |
| LOW | core/common/otlp/log_trace/node_trace_log.py | 68 | def set_end(self) -> None: | CODE |
| LOW | core/common/otlp/log_trace/node_trace_log.py | 81 | def set_status(self, code: int, message: str) -> None: | CODE |
| LOW | core/common/otlp/trace/span_instance.py | 160 | def set_status(self, status: Status) -> None: | CODE |
| LOW | core/common/otlp/trace/span_instance.py | 185 | def set_code(self, code: int, node_log: Optional[NodeLog] = None) -> None: | CODE |
| LOW | core/common/otlp/trace/langfuse.py | 1083 | __all__ = [ | CODE |
| LOW | core/common/otlp/trace/span.py | 117 | def set_status(self, status: Status) -> None: | CODE |
| LOW | core/common/otlp/trace/span.py | 138 | def set_code(self, code: int, node_log: Optional[NodeLog] = None) -> None: | CODE |
| LOW | core/common/service/base.py | 23 | def set_ready(self) -> None: | CODE |
| LOW | core/knowledge/infra/__init__.py | 10 | __all__ = [ | CODE |
| LOW | core/knowledge/infra/desk/__init__.py | 10 | __all__ = [ | CODE |
| LOW | core/knowledge/infra/xinghuo/__init__.py | 23 | __all__ = [ | CODE |
| LOW | core/knowledge/infra/aiui/__init__.py | 19 | __all__ = [ | CODE |
| LOW | core/knowledge/infra/ragflow/ragflow_utils.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | core/knowledge/infra/ragflow/__init__.py | 26 | __all__ = [ | CODE |
| LOW | core/knowledge/infra/ragflow/ragflow_client.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 39 | def _setup_mock_data(self) -> None: | CODE |
| LOW | core/knowledge/exceptions/__init__.py | 16 | __all__ = [ | CODE |
| LOW | core/knowledge/service/__init__.py | 12 | __all__ = [ | CODE |
| LOW | core/knowledge/service/impl/__init__.py | 12 | __all__ = [ | CODE |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | core/knowledge/domain/__init__.py | 11 | __all__ = [ | CODE |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/ragflow/migration.sh | 80 | # Check if any of our target volumes are used by this container | COMMENT |
| LOW | docker/ragflow/migration.sh | 135 | # Check if any containers are using the volumes | COMMENT |
| LOW⚡ | docker/ragflow/migration.sh | 183 | # Check if any containers are using the volumes | COMMENT |
| LOW⚡ | docker/ragflow/migration.sh | 186 | # Check if backup folder exists | COMMENT |
| LOW⚡ | docker/ragflow/migration.sh | 192 | # Check if all backup files exist | COMMENT |
| LOW | docker/ragflow/migration.sh | 267 | # Check if Docker is available | COMMENT |
| LOW | docker/ragflow/launch_backend_service.sh | 12 | # Check if .env file exists | COMMENT |
| LOW | core/memory/database/repository/middleware/getters.py | 26 | # Set search_path to admin schema each time a session is obtained | COMMENT |
| LOW | core/memory/database/api/v1/exec_dml.py | 729 | # Check if name is empty | COMMENT |
| LOW | core/memory/database/api/v1/exec_ddl.py | 249 | # Check if name is empty | COMMENT |
| LOW⚡ | core/plugin/rpa/tests/unit/api/v1/test_health_check.py | 88 | # Check if the function has been registered with the router | COMMENT |
| LOW⚡ | core/plugin/link/tests/unit/test_infra_fixed.py | 210 | # Check if the instance has expected attributes | COMMENT |
| LOW | core/plugin/link/utils/security/access_interceptor.py | 30 | # Check if any domain in blacklist is present in URL | COMMENT |
| LOW | core/plugin/link/utils/security/access_interceptor.py | 142 | # Check if IP is blacklisted | COMMENT |
| LOW | core/plugin/link/utils/security/access_interceptor.py | 146 | # Check if it's a loopback address | COMMENT |
| LOW | core/plugin/link/utils/security/access_interceptor.py | 171 | # Check if it's a loopback address (IPv4: 127.0.0.0/8, IPv6: ::1/128) | COMMENT |
| LOW | …link/service/community/tools/http/management_server.py | 367 | if tool_info: # Check if tool_info is not None | CODE |
| LOW | …aitools/service/ocr_llm/req_ase_ability_ocr_service.py | 101 | # Check if it is a title row | COMMENT |
| LOW | …e/plugin/aitools/service/dial_test/dial_test_client.py | 179 | # Print results | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 637 | # Check if it's an error return | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 759 | # Check if save was successful | COMMENT |
| LOW | core/knowledge/service/rag_strategy_factory.py | 47 | # Check if the class is abstract | COMMENT |
| LOW | core/knowledge/service/rag_strategy_factory.py | 81 | # Check if the class is abstract | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 596 | # Check if chunk already exists | COMMENT |
| LOW | …flow/infra/providers/llm/iflytek_spark/spark_fc_llm.py | 114 | # Check if it's a quick repair: if the last character of sid is '1', it's a quick repair | COMMENT |
| LOW | …flow/infra/providers/llm/iflytek_spark/spark_fc_llm.py | 170 | # Check if it's a quick repair: if the last character of sid is '1', it's a quick repair | COMMENT |
| LOW | core/workflow/cache/event_registry.py | 273 | # Check if retries field exists | COMMENT |
| LOW | …rkflow/tests/engine/callbacks/test_callback_handler.py | 208 | # Check if response was put in queue | COMMENT |
| LOW | …rkflow/tests/engine/callbacks/test_callback_handler.py | 933 | # Add node to queue | COMMENT |
| LOW | core/workflow/extensions/otlp/trace/span.py | 241 | # Check if content exceeds size limit | COMMENT |
| LOW | core/workflow/extensions/otlp/trace/span.py | 277 | # Check if content exceeds size limit | COMMENT |
| LOW | core/workflow/extensions/otlp/trace/span.py | 311 | # Check if content exceeds size limit | COMMENT |
| LOW | core/workflow/extensions/otlp/trace/span.py | 347 | # Check if content exceeds size limit | COMMENT |
| LOW | core/workflow/extensions/fastapi/middleware/auth.py | 174 | # Check if the path is in the exclude paths | COMMENT |
| LOW | core/workflow/service/license_service.py | 23 | # Check if license already exists for this app and group | COMMENT |
| LOW | core/workflow/service/auth_service.py | 64 | # Check if workflow is published or not taken off from all platforms | COMMENT |
| LOW | core/workflow/service/audit_service.py | 45 | # Check if this is an empty end frame that needs audit | COMMENT |
| LOW | core/workflow/service/audit_service.py | 186 | # Check if this is the final response | COMMENT |
| LOW | core/workflow/service/publish_service.py | 85 | # Check if tenant has permission to publish to target platform | COMMENT |
| LOW | core/workflow/service/publish_service.py | 95 | # Check if tenant has permission for workflow's source platform | COMMENT |
| LOW | core/workflow/service/publish_service.py | 271 | # Check if a workflow with the same group_id and version already exists | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 262 | # Check if first token has been sent | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 930 | # Check if node needs to be executed | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 1034 | # Check if this is a branch type node | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 1161 | # Check if error handling is needed | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 1359 | # Check if node is already being processed | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 1756 | # Check if there are any active chains | COMMENT |
| LOW | core/workflow/engine/dsl_engine.py | 2439 | # Check if normal path exists | COMMENT |
| LOW | core/workflow/engine/callbacks/callback_handler.py | 582 | # Check if queue consumption is complete | COMMENT |
| LOW | …w/engine/nodes/question_answer/question_answer_node.py | 690 | # Return result | COMMENT |
| LOW | core/workflow/engine/nodes/llm/spark_llm_node.py | 215 | # Check if this input is defined as multimodal in the DSL protocol | COMMENT |
| LOW | core/workflow/engine/nodes/plugin_tool/plugin_node.py | 66 | # Check if current key matches the target business input key | COMMENT |
| LOW | core/workflow/engine/nodes/agent/agent_node.py | 632 | # Set has_sent_first_token to True | COMMENT |
| LOW | .github/workflows/release.yml | 62 | # Check if it's a pre-release version (contains -, alpha, beta, rc, etc.) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/memory/database/repository/middleware/manager.py | 72 | # Create the actual service | COMMENT |
| MEDIUM | core/memory/database/tests/test_exec_dml.py | 561 | # Create a parsed SQL with potentially invalid expression | COMMENT |
| MEDIUM | core/memory/database/tests/test_common.py | 160 | # Create a mock DBAPIError | COMMENT |
| MEDIUM | core/memory/database/tests/test_common.py | 204 | # Create a mock general exception | COMMENT |
| MEDIUM | core/plugin/link/tests/unit/test_utils.py | 371 | # Create a more realistic mock record | COMMENT |
| MEDIUM | core/plugin/link/tests/unit/test_infra_fixed.py | 136 | # Create a proper mock span with context manager support | COMMENT |
| MEDIUM | …lugin/aitools/tests/api/routes/test_service_scanner.py | 24 | # Create a mock service function | COMMENT |
| MEDIUM | core/common/tests/test_audit_system.py | 374 | # Create a mock output frame | COMMENT |
| MEDIUM | core/common/tests/test_audit_system.py | 391 | # Create a mock output frame | COMMENT |
| MEDIUM | core/common/tests/test_audit_system.py | 426 | # Create a concrete implementation for testing | COMMENT |
| MEDIUM | core/common/tests/test_service_base.py | 16 | # Create a concrete service class for testing | COMMENT |
| MEDIUM | core/common/tests/test_main.py | 146 | # Create a test service | COMMENT |
| MEDIUM | core/common/service/__init__.py | 68 | # Create the actual service | COMMENT |
| MEDIUM⚡ | core/knowledge/api/v1/api.py | 145 | # Create a CodeEnum-like object for the response | COMMENT |
| MEDIUM⚡ | core/knowledge/api/v1/api.py | 154 | # Create a CodeEnum-like object for the response | COMMENT |
| MEDIUM | core/workflow/main.py | 99 | # Create the FastAPI application instance | COMMENT |
| MEDIUM | …rkflow/tests/engine/callbacks/test_callback_handler.py | 798 | # Create a task that will be cancelled | COMMENT |
| MEDIUM | …rkflow/tests/engine/callbacks/test_callback_handler.py | 863 | # Create a second result to continue loop after exception | COMMENT |
| MEDIUM | core/workflow/extensions/middleware/manager.py | 83 | # Create the actual service | COMMENT |
| MEDIUM | core/workflow/extensions/middleware/database/utils.py | 34 | # Create a new session from the database service engine | COMMENT |
| MEDIUM | core/workflow/extensions/otlp/util/ip.py | 17 | # Create a UDP socket for connection testing | COMMENT |
| MEDIUM | core/workflow/extensions/otlp/metric/metric.py | 89 | # Create a Meter from the global MeterProvider | COMMENT |
| MEDIUM | core/workflow/service/publish_service.py | 278 | # Create a new versioned workflow backup | COMMENT |
| MEDIUM | core/workflow/engine/nodes/llm/spark_llm_node.py | 206 | # Create a mapping from input identifiers to their DSL-defined fileTypes | COMMENT |
| MEDIUM | core/workflow/engine/nodes/message/message_node.py | 59 | # Initialize execution variables | COMMENT |
| MEDIUM | core/workflow/engine/nodes/end/end_node.py | 61 | # Initialize execution variables | COMMENT |
| MEDIUM | helm/astron-agent/examples/external-minio-values.yaml | 3 | # Create the referenced Secret separately. Never commit the literal values: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 1 | # ============================================================================= | COMMENT |
| LOW | docker/ragflow/docker-compose-macos.yml | 61 | # - ./ragflow-logs:/ragflow/logs | COMMENT |
| LOW | docker/ragflow/docker-compose.yml | 1 | include: | COMMENT |
| LOW | docker/ragflow/docker-compose.yml | 61 | # - ./nginx/ragflow.conf:/etc/nginx/conf.d/ragflow.conf | COMMENT |
| LOW | docker/astronAgent/docker-compose.yaml | 201 | # image: elasticsearch:7.16.2 | COMMENT |
| LOW | docker/astronAgent/docker-compose.yaml | 221 | # image: kibana:7.16.2 | COMMENT |
| LOW | docker/astronAgent/docker-compose.yaml | 241 | # KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT | COMMENT |
| LOW | docker/astronAgent/docker-compose.yaml | 341 | timeout: ${HEALTH_CHECK_TIMEOUT:-10s} | COMMENT |
| LOW | docker/astronAgent/docker-compose-with-auth.yaml | 1 | # ============================================================================ | COMMENT |
| LOW | core/memory/database/alembic/alembic.ini | 1 | # A generic, single database configuration. | COMMENT |
| LOW | core/memory/database/alembic/alembic.ini | 21 | # timezone = | COMMENT |
| LOW | core/memory/database/alembic/alembic.ini | 41 | COMMENT | |
| LOW | core/memory/database/alembic/alembic.ini | 61 | COMMENT | |
| LOW | core/plugin/link/alembic.ini | 1 | # A generic, single database configuration. | COMMENT |
| LOW | core/plugin/link/alembic.ini | 21 | # timezone = | COMMENT |
| LOW | core/plugin/link/alembic.ini | 41 | COMMENT | |
| LOW | core/plugin/link/alembic.ini | 61 | # Database URL will be read from config.env file via env.py | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 181 | import jsonschema | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 201 | # "tool_ids": [ | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 221 | # # { | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 241 | # { | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 261 | # "input": "xxxxxxxx" | COMMENT |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 301 | # "description": "xxxxxx", | COMMENT |
| LOW | core/plugin/aitools/tests/const/test_const.py | 321 | assert os.getenv(SERVICE_NAME_KEY) == "test_service" | COMMENT |
| LOW | core/workflow/alembic/alembic.ini | 1 | # A generic, single database configuration. | COMMENT |
| LOW | core/workflow/alembic/alembic.ini | 21 | # timezone = | COMMENT |
| LOW | core/workflow/alembic/alembic.ini | 41 | COMMENT | |
| LOW | core/workflow/alembic/alembic.ini | 61 | COMMENT | |
| LOW | core/workflow/engine/nodes/llm/prompt_ai_personal.py | 1 | # System template for AI personality role-playing | COMMENT |
| LOW | makefiles/parse_localci.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | examples/TEMPLATE/workflow.yml | 1 | # Replace this file with your exported Astron Agent workflow DSL. | COMMENT |
| LOW | .github/workflows/codeql-security-analysis.yml | 1 | # For most projects, this workflow file will not need changing; you simply need | COMMENT |
| LOW | .github/workflows/codeql-security-analysis.yml | 61 | build-mode: none | COMMENT |
| LOW | .github/workflows/codeql-security-analysis.yml | 81 | - name: Initialize CodeQL | COMMENT |
| LOW | console/frontend/src/types/plugin-store.ts | 201 | type: string; | COMMENT |
| LOW | console/frontend/src/constants/index.ts | 101 | // iconAct: promptTabActive, | COMMENT |
| LOW | console/frontend/src/utils/spark-utils.ts | 421 | return output ?? []; | COMMENT |
| LOW | console/frontend/src/utils/spark-utils.ts | 441 | // setQueryString, | COMMENT |
| LOW | console/frontend/src/utils/spark-utils.ts | 461 | // getSourceResultArray, | COMMENT |
| LOW | console/frontend/src/utils/record/recorder-core.js | 701 | // sourceStream:MediaStream Object | COMMENT |
| LOW | console/frontend/src/utils/record/record.js | 181 | this.transferUploadNumberMax, | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 1 | import { | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 21 | // module: ModuleType.SPACE, | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 41 | COMMENT | |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 61 | // path: '/management/evaluation_createTask', | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 81 | // path: '/management/evaluation/dimensions', | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 101 | module: ModuleType.SPACE, | COMMENT |
| LOW | …e/frontend/src/permissions/config/route-permissions.ts | 121 | // { | COMMENT |
| LOW | …/src/components/sidebar/bottom-login/index.module.scss | 81 | flex: 1; | COMMENT |
| LOW | …/src/components/sidebar/bottom-login/index.module.scss | 401 | // background: transparent; | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 101 | // return values; | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 121 | // // }); | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 141 | // }) | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 161 | // setUnBindStatus(false); | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 181 | // botId?: string; | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 201 | // setIsClickMcp(true); | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 261 | }); | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 281 | // return (flag = true); | COMMENT |
| LOW | console/frontend/src/components/wx-modal/index.tsx | 301 | // type: arr?.[0]?.allowedFileType?.[0] ?? '', | COMMENT |
| LOW | …le/frontend/src/components/space/space-modal/index.tsx | 141 | COMMENT | |
| 22 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CONTRIBUTING.md | 128 | │ └── workflow/ # Workflow orchestration (Python) | CODE |
| MEDIUM | core/workflow/engine/nodes/knowledge_pro/consts.py | 18 | AGENTIC_RAG = 1 # Agent-based RAG with deep search capabilities | CODE |
| MEDIUM | core/workflow/engine/nodes/knowledge_pro/consts.py | 19 | LONG_RAG = 2 # Long context RAG for extended document processing | CODE |
| MEDIUM | core/workflow/engine/nodes/knowledge_pro/consts.py | 48 | AIUI_RAG2 = 1 # AIUI RAG version 2 repository | CODE |
| MEDIUM | core/workflow/engine/nodes/knowledge_pro/consts.py | 49 | CBG_RAG = 2 # CBG (Content-Based Generation) RAG repository | CODE |
| MEDIUM | …kflow/engine/nodes/knowledge_pro/knowledge_pro_node.py | 56 | # RAG configuration parameters | COMMENT |
| MEDIUM | …kflow/engine/nodes/knowledge_pro/knowledge_pro_node.py | 57 | ragType: Literal[1, 2] = Field(...) # RAG type (1: AGENTIC_RAG, 2: LONG_RAG) | CODE |
| MEDIUM | …kflow/engine/nodes/knowledge_pro/knowledge_pro_node.py | 133 | # Validate CBG RAG parameters before proceeding | COMMENT |
| MEDIUM | core/workflow/engine/nodes/knowledge/knowledge_node.py | 81 | ) # Type of RAG (Retrieval-Augmented Generation) to use | CODE |
| MEDIUM | …rkflow/engine/nodes/knowledge/knowledge_expert_node.py | 66 | ) # Type of RAG (Retrieval-Augmented Generation) to use | CODE |
| MEDIUM | faq/features.md | 66 | ## 知识库(RAG)引用有问题,无法检索或回答? | COMMENT |
| MEDIUM | faq/features.md | 71 | ## 知识库 (RAG) 如何防止模型幻觉? | COMMENT |
| MEDIUM | faq/features.md | 489 | ## Agent 有几种接入 RAG(知识库)的方式? | COMMENT |
| MEDIUM | docs/DEPLOYMENT_GUIDE.md | 230 | # Create Spark RAG dataset | COMMENT |
| MEDIUM | docs/CONTRIBUTING.md | 128 | │ └── workflow/ # Workflow orchestration (Python) | CODE |
| MEDIUM | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 154 | # Create Spark RAG dataset | COMMENT |
| MEDIUM | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 155 | # Create Spark RAG dataset | COMMENT |
| MEDIUM | …/resources/db/migration/V1.14__insert_config_data2.sql | 2083 | "markdown": "## Purpose\\nIn complex scenarios, use intelligent strategy to query knowledge base and generate su | STRING |
| MEDIUM | …es/db/migration/V1.17__insert_workflow_node_config.sql | 152 | "markdown": "## 用途\\n在复杂的场景下,通过智能策略调用知识库,可以指定知识库进行知识检索和总结回复。\\n## 回答模式\\n选择用于对问题进行拆解以及对召回结果进行总结的大模型。\\n## 策略选择\\ | CODE |
| MEDIUM | …n/resources/db/migration/V1.13__insert_config_data.sql | 1648 | "markdown": "## 用途\\n在复杂的场景下,通过智能策略调用知识库,可以指定知识库进行知识检索和总结回复。\\n## 回答模式\\n选择用于对问题进行拆解以及对召回结果进行总结的大模型。\\n## 策略选择\\ | STRING |
| MEDIUM⚡ | …end/toolkit/src/main/resources/application-toolkit.yml | 46 | # RAG/Search generates maximum character count threshold (too large affects performance) | COMMENT |
| MEDIUM⚡ | …end/toolkit/src/main/resources/application-toolkit.yml | 48 | # CBG RAG compatible source types (sources that have same behavior as CBG-RAG) | COMMENT |
| MEDIUM⚡ | …end/toolkit/src/main/resources/application-toolkit.yml | 52 | # AIUI RAG compatible source types (sources that have same behavior as AIUI-RAG2) | COMMENT |
| MEDIUM⚡ | …end/toolkit/src/main/resources/application-toolkit.yml | 55 | # Spark RAG compatible source types (sources that have same behavior as SparkDesk-RAG) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 713 | # Step 1: Save some chunks for subsequent update | COMMENT |
| LOW⚡ | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 890 | # Step 1: File split | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 771 | # Step 2: Prepare update data | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 909 | # Step 2: Batch save test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 933 | # Step 3: Single chunk update test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 967 | # Step 4: Query interface test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 996 | # Step 5: Validate final state | COMMENT |
| LOW⚡ | core/knowledge/service/impl/ragflow_strategy.py | 449 | # Step 7: Convert to standard format | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 415 | # Step 1: Resolve dataset | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 1083 | # Step 1: Get total count | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 1103 | # Step 2: Get all data | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 92 | # Step 1: Try to split by ending punctuation to find complete sentences | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 99 | # Step 2: If no complete sentences found, split by non-ending punctuation | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 107 | # Step 3: Fallback - return first N characters as a single sentence | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 38 | # Step 1: Classify images and other elements | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 41 | # Step 2: Take the latest image only | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 45 | # Step 3: Group other messages in pairs (one round = 2 messages) | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 50 | # Step 4: Limit by rounds | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 55 | # Step 5: Combine history | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE.md | 27 | ### Step 1: Start Casdoor Identity Authentication Service | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE.md | 46 | ### Step 2: Start RagFlow Knowledge Base Service (Optional) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE.md | 75 | ### Step 3: Integrate Casdoor and Basic Environment Configuration (Configure as needed) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE.md | 154 | ### Step 4: Start astronAgent Core Services (Required Deployment Step) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 27 | ### Step 1: Start RagFlow Knowledge Base Service (Optional, deploy as needed) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 62 | ### Step 2: Configure AstronAgent Environment Variables | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 169 | ### Step 3: Start AstronAgent Core Services (Including Casdoor Authentication Service) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 189 | ### Step 4: Configure Platform Account Management (Optional, configure business capabilities as needed) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH.md | 200 | ### Step 5: Modify Casdoor Authentication (Optional) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 28 | ### Step 1: Start RagFlow Knowledge Base Service (Optional, deploy as needed) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 63 | ### Step 2: Configure AstronAgent Environment Variables | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 170 | ### Step 3: Start AstronAgent Core Services (includes Casdoor authentication service, RPA backend service) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 189 | ### Step 4: Configure Platform Account Management (Optional, configure business capabilities as needed) | COMMENT |
| LOW | docs/DEPLOYMENT_GUIDE_WITH_AUTH_RPA.md | 200 | ### Step 5: Modify Casdoor Authentication (Optional) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/README.md | 76 | or phone numbers. **Remove or replace them with placeholders** (e.g. `YOUR_API_KEY`) before | CODE |
| HIGH | examples/README.md | 118 | - **不含任何密钥**:⚠️ 导出的 DSL 可能内嵌 API Key、token、个人端点、OSS 地址、手机号等,提交前务必删除或替换为占位符(如 `YOUR_API_KEY`)。含真实凭据的 PR 会被拒绝。 | CODE |
| HIGH | examples/TEMPLATE/workflow.yml | 19 | # and replace them with placeholders such as YOUR_API_KEY. | COMMENT |
| HIGH | examples/ai-radio-podcast/workflow.yml | 451 | apiKey: YOUR_API_KEY | CODE |
| HIGH | examples/ai-radio-podcast/workflow.yml | 585 | apiKey: YOUR_API_KEY | CODE |
| HIGH | examples/ai-radio-podcast/workflow.yml | 760 | apiKey: YOUR_API_KEY | CODE |
| HIGH | examples/ai-radio-podcast/workflow.yml | 863 | apiKey: YOUR_API_KEY | CODE |
| HIGH | examples/ai-radio-podcast/workflow.yml | 964 | apiKey: YOUR_API_KEY | CODE |
| HIGH | examples/ai-radio-podcast/README.md | 35 | 2. Replace the `YOUR_API_KEY` / `YOUR_API_SECRET` / `YOUR_APP_ID` placeholders with your own credentials. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 713 | # Step 1: Save some chunks for subsequent update | COMMENT |
| LOW⚡ | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 890 | # Step 1: File split | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 771 | # Step 2: Prepare update data | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 909 | # Step 2: Batch save test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 933 | # Step 3: Single chunk update test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 967 | # Step 4: Query interface test | COMMENT |
| LOW | …/knowledge/tests/service/impl/ragflow_strategy_test.py | 996 | # Step 5: Validate final state | COMMENT |
| LOW⚡ | core/knowledge/service/impl/ragflow_strategy.py | 449 | # Step 7: Convert to standard format | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 415 | # Step 1: Resolve dataset | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 1083 | # Step 1: Get total count | COMMENT |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 1103 | # Step 2: Get all data | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 92 | # Step 1: Try to split by ending punctuation to find complete sentences | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 99 | # Step 2: If no complete sentences found, split by non-ending punctuation | COMMENT |
| LOW⚡ | core/workflow/infra/audit_system/utils.py | 107 | # Step 3: Fallback - return first N characters as a single sentence | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 38 | # Step 1: Classify images and other elements | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 41 | # Step 2: Take the latest image only | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 45 | # Step 3: Group other messages in pairs (one round = 2 messages) | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 50 | # Step 4: Limit by rounds | COMMENT |
| LOW⚡ | core/workflow/engine/entities/history.py | 55 | # Step 5: Combine history | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 842 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 851 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 860 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 869 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 878 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 887 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 896 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 905 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 914 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 923 | "placeholder": "", | CODE |
| LOW⚡ | docker/astronAgent/casdoor/conf/init_data.json | 932 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 713 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 726 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 739 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 752 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 765 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 778 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 791 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 804 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 817 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 830 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1054 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1067 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1080 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1093 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1106 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1119 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1132 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1145 | "placeholder": "", | CODE |
| LOW | docker/astronAgent/casdoor/conf/init_data.json | 1394 | "email": "admin@example.com", | CODE |
| LOW | …re/plugin/link/utils/json_schemas/read_json_schemas.py | 266 | # "placeholder": [ | COMMENT |
| LOW | …utils/json_schemas/schema_files/action_run_schema.json | 265 | "placeholder": { | CODE |
| LOW | …c/components/workflow/modal/knowledge-detail/index.tsx | 1015 | searchRef.current.setAttribute('placeholder', '请输入'); | CODE |
| LOW | …source-management/knowledge-detail/file-page/index.tsx | 253 | // searchRef.current.setAttribute('placeholder', '请输入') | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | docker/astronAgent/scripts/verify_security_contract.py | 939 | safe_token "$workflow_key" 32 128 || exit 22 | CODE |
| HIGH⚡ | docker/astronAgent/scripts/verify_security_contract.py | 940 | safe_token "$tenant_key" 32 50 || exit 23 | CODE |
| HIGH⚡ | docker/astronAgent/scripts/verify_security_contract.py | 941 | safe_token "$tenant_secret" 32 50 || exit 24 | CODE |
| HIGH | …e/agent/engine/nodes/cot_process/cot_process_prompt.py | 37 | "call tool": null, | CODE |
| HIGH | core/workflow/engine/nodes/question_answer/prompt.py | 73 | "<缺失字段名1>": null, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/plugin/link/infra/tool_exector/http_auth.py | 267 | CODE | |
| LOW | core/plugin/aitools/api/decorators/api_service.py | 12 | CODE | |
| LOW | core/agent/infra/app_auth.py | 64 | CODE | |
| LOW | core/knowledge/infra/desk/sparkdesk.py | 46 | CODE | |
| LOW | core/knowledge/infra/xinghuo/xinghuo.py | 70 | CODE | |
| LOW | core/knowledge/infra/xinghuo/xinghuo.py | 249 | CODE | |
| LOW | core/knowledge/infra/xinghuo/xinghuo.py | 325 | CODE | |
| LOW | core/knowledge/infra/xinghuo/xinghuo.py | 355 | CODE | |
| LOW | core/knowledge/infra/xinghuo/xinghuo.py | 385 | CODE | |
| LOW | core/knowledge/api/v1/api.py | 295 | CODE | |
| LOW | core/knowledge/service/impl/ragflow_strategy.py | 342 | CODE | |
| LOW | core/workflow/engine/callbacks/openai_types_sse.py | 199 | CODE | |
| LOW | core/workflow/engine/nodes/base_node.py | 1364 | CODE | |
| LOW | …w/engine/nodes/question_answer/question_answer_node.py | 889 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/plugin/link/tests/unit/test_mcp_server.py | 163 | CODE | |
| MEDIUM | core/plugin/link/tests/unit/test_mcp_transport.py | 394 | CODE | |
| MEDIUM | core/agent/tests/test_skill_resource_security.py | 156 | CODE | |
| MEDIUM | core/agent/tests/test_langfuse_observability.py | 666 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/plugin/rpa/tests/test_runner.py | 1 | """Test runner script for RPA service comprehensive testing. | STRING |
| MEDIUM | core/plugin/rpa/tests/test_runner.py | 263 | """Generate a comprehensive test report.""" | STRING |
| MEDIUM | core/plugin/link/tests/test_runner.py | 124 | """Generate comprehensive test report""" | STRING |
| MEDIUM | core/workflow/tests/engine/dsl/test_engine.py | 530 | """Test comprehensive error handler chain coverage for various exception types. | STRING |
| MEDIUM | core/workflow/tests/engine/dsl/test_engine.py | 582 | """Test comprehensive error scenario coverage for WorkflowEngine. | STRING |
| MEDIUM | …ne/nodes/code/executor/langchain/langchain_executor.py | 143 | # environment here as well keeps the executor robust in tests and when a | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | console/frontend/src/locales/en.js | 61 | 'All content is generated by AI model, and the accuracy and completeness of content cannot be guaranteed. It does no | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/agent/tests/test_plugin_base_link_mcp_workflow.py | 269 | async def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | core/common/otlp/log_trace/node_trace_log.py | 106 | def process_data(data: dict, depth: int = 0) -> Any: | CODE |
| LOW⚡ | core/workflow/tests/engine/nodes/test_code_node.py | 36 | code_node._parser_code_parameter("def helper():\n return {}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/workflow/engine/nodes/base_node.py | 915 | # TODO: Handle error reporting | COMMENT |
| LOW | core/workflow/engine/nodes/plugin_tool/link_client.py | 127 | # TODO: Add validation for required parameters | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/codeql-security-analysis.yml | 68 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | makefiles/parse_localci.sh | 11 | # Usage: | COMMENT |