1.6

Adjusted Signal

1.6

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

128.6K

Stars

Language

5.0M

Lines of Code

21.9K

Files

8.0K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 7849 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 146 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 17 finding(s).

PR Review Velocity Impact 8.4/100 · LOW

Which changes need focused human review? 8010 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 13HIGH 17MEDIUM 237LOW 7743

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 8010 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block7395 hits · 6507 pts

Severity	File	Line	Snippet	Context
LOW	cmd/kube-controller-manager/names/controller_names.go	21	// NAMING CONVENTIONS	COMMENT
LOW	cmd/kube-controller-manager/app/controllermanager.go	481	// and dynamic resources by their metadata. All generic controllers currently use	COMMENT
LOW	cmd/kube-controller-manager/app/controllermanager.go	721	// Always start the SA token controller first using a full-power client, since it needs to mint tokens for the rest	COMMENT
LOW	cmd/importverifier/importverifier.go	41		COMMENT
LOW	cmd/cloud-controller-manager/providers.go	21		COMMENT
LOW	cmd/kubeadm/app/componentconfigs/fakeconfig_test.go	41	kubeadmutil "k8s.io/kubernetes/cmd/kubeadm/app/util"	COMMENT
LOW	cmd/kubeadm/app/cmd/util/documentation.go	21	)	COMMENT
LOW	cmd/kubeadm/app/cmd/phases/workflow/runner.go	61	// more than one time)	COMMENT
LOW	cmd/kubeadm/app/cmd/phases/workflow/phase.go	61	// RunIf define a function that implements a condition that should be checked	COMMENT
LOW	cmd/kubeadm/app/apis/bootstraptoken/v1/types.go	21	)	COMMENT
LOW	cmd/kubeadm/app/apis/bootstraptoken/v1/types.go	41	// Usages describes the ways in which this token can be used. Can by default be used	COMMENT
LOW	cmd/kubeadm/app/apis/output/doc.go	21	// The purpose of the kubeadm structured output is to have a well	COMMENT
LOW	cmd/kubeadm/app/apis/output/v1alpha3/doc.go	21	// Package v1alpha3 defines the v1alpha3 version of the kubeadm data structures	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	41	// BootstrapTokens is respected at "kubeadm init" time and describes a set of Bootstrap Tokens to create.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	101	// can be a valid IP address or a RFC-1123 DNS subdomain, both with optional TCP port.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	241	// node, set this field to an empty slice, i.e. `taints: []` in the YAML file. This field is solely used for Node regis	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	281		COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	301	// default arguments. Duplicate extra arguments are allowed.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	321	// and HTTP traffic (metrics, health checks). However, if HTTPEndpoints is configured,	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	401	// TLSBootstrapToken is a token used for TLS bootstrapping.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	421	// SHA-256 hash of the Subject Public Key Info (SPKI) object in DER-encoded	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/types.go	461	// PathType is the type of the HostPath.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	41		COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	61	// The certificate key is a hex encoded string that is an AES key of size 32 bytes.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	101	// In case the ControlPlaneEndpoint is not specified, the AdvertiseAddress + BindPort	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	121	// Scheduler contains extra settings for the scheduler control plane component	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	141	ImageRepository string `json:"imageRepository,omitempty"`	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	161	CertificateValidityPeriod *metav1.Duration `json:"certificateValidityPeriod,omitempty"`	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	261	// KubeletExtraArgs passes through extra arguments to the kubelet. The arguments here are passed to the kubelet command	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	281	// ImagePullSerial specifies if image pulling performed by kubeadm must be done serially or in parallel.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	321	// Defaults to "/var/lib/etcd".	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	341	// PeerCertSANs sets extra Subject Alternative Names for the etcd peer signing cert.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	401		COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	421	}	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	461	// APIServerEndpoint is an IP or domain name to the API server from which info will be fetched.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	501	// PathType is the type of the HostPath.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	541		COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	601	type Timeouts struct {	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	621	// the etcd cluster.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	641	}	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	661	// Defaults to true.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	721	// Defaults to true.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	741	// +optional	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go	761	type UpgradePlanConfiguration struct {	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	21		COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	41	// should be displayed.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	61	// and will be ignored when passing `--config` to upgrade subcommands.	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	81	// configuration options defined in the kubeadm config file are also available as command line flags, but only	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	101	// kind: JoinConfiguration	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	121	// cluster-cidr flag on controller manager and clusterCIDR on kube-proxy).	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	141	//	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	161	// ...	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	181	//	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	201	// apiVersion: kubeadm.k8s.io/v1beta4	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	221	// kubeletExtraArgs:	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	241	// # one of local or external	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	261	// # certFile: "/etcd/kubernetes/pki/etcd/etcd.crt"	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	281	// pathType: File	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	301	// hostPath: "/etc/some-path"	COMMENT
LOW	cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go	321	//	COMMENT
7335 more matches not shown…

Self-Referential Comments170 hits · 616 pts

Severity	File	Line	Snippet	Context
MEDIUM	cluster/gce/util.sh	3373	# Create a single firewall rule for all minions.	COMMENT
MEDIUM	cluster/gce/gci/configure-helper.sh	863	# Create a static Bearer token and kubeconfig for extra, comma-separated components.	COMMENT
MEDIUM	cluster/gce/gci/configure-helper.sh	1653	# Create the log file and set its properties.	COMMENT
MEDIUM	cluster/gce/gci/configure-helper.sh	2846	# Create a new directory for the DNS addon and prepend a "0" on the name.	COMMENT
MEDIUM	cluster/gce/gci/configure-helper.sh	3252	# This function is adapted from the detect_client_info function in cluster/get-kube-binaries.sh	COMMENT
MEDIUM	cluster/gce/gci/configure.sh	787	# This function is adapted from the detect_client_info function in cluster/get-kube-binaries.sh	STRING
MEDIUM	cluster/gce/gci/configure-kubeapiserver.sh	146	# Create the audit policy file, and mount it into the apiserver pod.	COMMENT
MEDIUM	cluster/gce/gci/configure-kubeapiserver.sh	191	# Create the audit webhook config file, and mount it into the apiserver pod.	COMMENT
MEDIUM	cluster/gce/gci/configure-kubeapiserver.sh	285	# Create the ABAC file if it doesn't exist yet, or if we have a KUBE_USER set (to ensure the right user is given per	COMMENT
MEDIUM	cluster/gce/gci/configure-kubeapiserver.sh	322	# Create the EgressSelectorConfiguration yaml file to control the Egress Selector.	COMMENT
MEDIUM	cluster/log-dump/log-dump.sh	560	# Create the logexporter namespace, service-account secret and the logexporter daemonset within that namespace.	COMMENT
MEDIUM⚡	…io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh	49	# Create a certificate authority	COMMENT
MEDIUM⚡	…io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh	53	# Create a second certificate authority	COMMENT
MEDIUM⚡	…io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh	57	# Create a server certiticate	COMMENT
MEDIUM⚡	…io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh	62	# Create a client certiticate	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	74	# Create a certificate authority	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	78	# Create a second certificate authority	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	82	# Create an intermediate certificate authority	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	87	# Create an intermediate certificate authority with sha1 signature	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	91	# Create a server certiticate	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	96	# Create a server certiticate w/o SAN	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	100	# Create a server certiticate with SHA1 signature signed by OK intermediate CA	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	104	# Create a server certiticate signed by SHA1-signed intermediate CA	COMMENT
MEDIUM⚡	…ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh	108	# Create a client certiticate	COMMENT
MEDIUM⚡	…ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh	56	# Create a certificate authority	COMMENT
MEDIUM⚡	…ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh	60	# Create a second certificate authority	COMMENT
MEDIUM⚡	…ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh	64	# Create a server certiticate	COMMENT
MEDIUM⚡	…ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh	69	# Create a client certiticate	COMMENT
MEDIUM	staging/src/k8s.io/kubectl/pkg/cmd/kuberc/kuberc.go	40	# Create an alias for a command	COMMENT
MEDIUM	staging/src/k8s.io/kubectl/pkg/cmd/kuberc/set.go	66	# Create an alias 'getn' for 'get' command with prepended 'nodes' resource	COMMENT
MEDIUM	staging/src/k8s.io/kubectl/pkg/cmd/kuberc/set.go	69	# Create an alias 'runx' for 'run' command with appended arguments	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	67	# Create a service for a replicated nginx, which serves on port 80 and connects to the containers on port 8000	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	70	# Create a service for a replication controller identified by type and name specified in "nginx-controller.yaml", whic	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	73	# Create a service for a pod valid-pod, which serves on port 444 with the name "frontend"	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	76	# Create a second service based on the above service, exposing the container port 8443 as port 443 with the name "ngin	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	79	# Create a service for a replicated streaming application on port 4100 balancing UDP traffic and named 'video-stream'.	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	82	# Create a service for a replicated nginx using replica set, which serves on port 80 and connects to the containers on	COMMENT
MEDIUM⚡	staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go	85	# Create a service for an nginx deployment, which serves on port 80 and connects to the containers on port 8000	COMMENT
MEDIUM	…ging/src/k8s.io/kubectl/pkg/cmd/create/create_quota.go	45	# Create a new resource quota named my-quota	COMMENT
MEDIUM	…ging/src/k8s.io/kubectl/pkg/cmd/create/create_quota.go	48	# Create a new resource quota named best-effort	COMMENT
MEDIUM	…k8s.io/kubectl/pkg/cmd/create/create_serviceaccount.go	44	# Create a new service account named my-service-account	COMMENT
MEDIUM	staging/src/k8s.io/kubectl/pkg/cmd/create/create.go	72	# Create a pod using the data in pod.json	COMMENT
MEDIUM	staging/src/k8s.io/kubectl/pkg/cmd/create/create.go	75	# Create a pod based on the JSON passed into stdin	COMMENT
MEDIUM⚡	…/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go	44	# Create a priority class named high-priority	COMMENT
MEDIUM⚡	…/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go	47	# Create a priority class named default-priority that is considered as the global default priority	COMMENT
MEDIUM⚡	…/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go	50	# Create a priority class named high-priority that cannot preempt pods with lower priority	COMMENT
MEDIUM	…src/k8s.io/kubectl/pkg/cmd/create/create_secret_tls.go	48	# Create a new TLS secret named tls-secret with the given key pair	COMMENT
MEDIUM	…ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go	236	# Create a new ClusterIP service named my-cs	COMMENT
MEDIUM	…ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go	239	# Create a new ClusterIP service named my-cs (in headless mode)	COMMENT
MEDIUM	…ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go	277	# Create a new NodePort service named my-ns	COMMENT
MEDIUM	…ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go	314	# Create a new LoadBalancer service named my-lbs	COMMENT
MEDIUM	…ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go	354	# Create a new ExternalName service named my-ns	COMMENT
MEDIUM⚡	…aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go	47	# Create a role named "pod-reader" that allows user to perform "get", "watch" and "list" on pods	COMMENT
MEDIUM⚡	…aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go	50	# Create a role named "pod-reader" with ResourceName specified	COMMENT
MEDIUM⚡	…aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go	53	# Create a role named "foo" with API Group specified	COMMENT
MEDIUM⚡	…aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go	56	# Create a role named "foo" with SubResource specified	COMMENT
MEDIUM⚡	…ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go	84	# Create a new secret named my-secret with keys for each file in folder bar	COMMENT
MEDIUM⚡	…ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go	87	# Create a new secret named my-secret with specified keys instead of names on disk	COMMENT
MEDIUM⚡	…ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go	90	# Create a new secret named my-secret with key1=supersecret and key2=topsecret	COMMENT
MEDIUM⚡	…ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go	93	# Create a new secret named my-secret using a combination of a file and a literal	COMMENT
110 more matches not shown…

AI Slop Vocabulary59 hits · 172 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/cloud-controller-manager/main.go	23	// The current file demonstrate how other cloud provider should leverage CCM and it uses fake parameters. Please modify	COMMENT
MEDIUM	cluster/gce/util.sh	2381	# TODO(zmerlynn): To make this really robust, we need to parse the output and	COMMENT
MEDIUM	staging/src/k8s.io/client-go/example_test.go	187	// have more robust logic and a workqueue.	COMMENT
MEDIUM	staging/src/k8s.io/client-go/doc.go	91	// found or already exists. This allows controllers to implement robust,	COMMENT
MEDIUM	staging/src/k8s.io/client-go/tools/cache/reflector.go	898	// we utilize the temporaryStore to ensure independence from the current store implementation.	COMMENT
MEDIUM	…igurations/core/v1/nodeallocatableoverheadresources.go	34	// Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cgro	COMMENT
MEDIUM	…lient-go/applyconfigurations/core/v1/endpointsubset.go	39	// should be considered safe for load balancers and clients to utilize.	COMMENT
MEDIUM	…o/applyconfigurations/resource/v1/celdeviceselector.go	66	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	…lyconfigurations/resource/v1/devicederivedattribute.go	58	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	…lyconfigurations/resource/v1beta2/celdeviceselector.go	66	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	…figurations/resource/v1beta2/devicederivedattribute.go	58	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	…lyconfigurations/resource/v1beta1/celdeviceselector.go	66	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	…figurations/resource/v1beta1/devicederivedattribute.go	58	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	…aging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.pb.go	2157	// sandbox, and the runtime should leverage this to ensure correct	COMMENT
MEDIUM	…aging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.pb.go	5903	// container, and the runtime should leverage this to ensure correct	COMMENT
MEDIUM	…8s.io/dynamic-resource-allocation/kubeletplugin/doc.go	61	// https://github.com/kubernetes/kubernetes/blob/v1.33.0/pkg/kubelet/pluginmanager/pluginwatcher/README.md#seamless-upgr	COMMENT
MEDIUM	…8s.io/dynamic-resource-allocation/kubeletplugin/doc.go	61	// https://github.com/kubernetes/kubernetes/blob/v1.33.0/pkg/kubelet/pluginmanager/pluginwatcher/README.md#seamless-upgr	COMMENT
MEDIUM	staging/src/k8s.io/api/core/v1/types.go	6903	// should be considered safe for load balancers and clients to utilize.	COMMENT
MEDIUM	staging/src/k8s.io/api/core/v1/types.go	9115	// Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cgro	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1/types.go	1750	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1/types.go	1819	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1beta2/types.go	1702	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1beta2/types.go	1790	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1alpha3/types.go	73	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1beta1/types.go	1553	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	staging/src/k8s.io/api/resource/v1beta1/types.go	1644	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	…ng/src/k8s.io/apiserver/pkg/apis/apiserver/v1/types.go	185	// For more nuanced audience validation, use claimValidationRules.	COMMENT
MEDIUM	…c/k8s.io/apiserver/pkg/apis/apiserver/v1beta1/types.go	269	// For more nuanced audience validation, use claimValidationRules.	COMMENT
MEDIUM	…/k8s.io/apiserver/pkg/apis/apiserver/v1alpha1/types.go	298	// For more nuanced audience validation, use claimValidationRules.	COMMENT
MEDIUM	…ging/src/k8s.io/apimachinery/pkg/labels/labels_test.go	34	// TODO: Make our label representation robust enough to handle labels	COMMENT
MEDIUM	…aging/src/k8s.io/component-base/zpages/features/doc.go	20	// New zpages added to Kubernetes components should utilize this feature set	COMMENT
MEDIUM	test/cmd/apps.sh	620	# TODO: test robust scaling in an e2e.	COMMENT
MEDIUM	test/e2e_node/cgroup_reconciliation_test.go	520	altManualValue: "0-0", // More robust alternative for various environments	CODE
MEDIUM	test/e2e_node/podresources_test.go	1905	// for more robust check, also do a Consistently check	COMMENT
MEDIUM	test/e2e_node/remote/remote.go	266	// journald nodes. We should have a more robust way to collect logs.	COMMENT
MEDIUM	test/integration/controlplane/kube_apiserver_test.go	664	// TODO(roycaihw): expose response header in rest client and utilize etag here	COMMENT
MEDIUM	test/integration/storageversionmigrator/util.go	632	// We utilize the LastSyncResourceVersion of the Garbage Collector (GC) to ensure that the cache is up-to-date before	COMMENT
MEDIUM	test/utils/crd/crd_util.go	73	// Be robust about making the crd creation call.	COMMENT
MEDIUM	test/utils/image/manifest.go	108	// Essentially curl url \| writer	COMMENT
MEDIUM	test/e2e/framework/util.go	342	// Be robust about making the namespace creation call.	COMMENT
MEDIUM	test/e2e/network/conntrack.go	681	// Proxy implementations (which leverage conntrack) can either drop packets	COMMENT
MEDIUM	test/e2e/network/netpol/kubemanager.go	55	// kubeManager provides a convenience interface to kube functionality that we leverage for polling NetworkPolicy connect	COMMENT
MEDIUM	test/e2e/storage/static_pods.go	44	// Kind runs its API server as a static Pod, and we leverage it here	COMMENT
MEDIUM	test/e2e/storage/drivers/in_tree.go	1208	// During end-to-end (e2e) testing, we utilize the `/tmp` directory for volume creation.	COMMENT
MEDIUM	test/e2e/dra/utils/deploy.go	400	// for different pods and thus seamless upgrades. Must be supported by the kubelet!	COMMENT
MEDIUM	hack/ginkgo-e2e.sh	48	# - `dlv exec` if set to "delve"	COMMENT
MEDIUM	hack/make-rules/test-e2e-node.sh	61	# - `dlv exec` if set to "delve"	COMMENT
LOW	hack/lib/golang.sh	582	# * We can't just set GOBIN because that does not work on cross-compiles.	COMMENT
LOW	hack/lib/golang.sh	632	# Ideally this wouldn't be necessary and we could just set GOBIN to	COMMENT
LOW	third_party/forked/shell2junit/sh2ju.sh	177	# file exists. Need to append to it. If we remove the testsuite end tag, we can just add it in after.	COMMENT
MEDIUM	pkg/apis/core/types.go	7602	// Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cgro	COMMENT
MEDIUM	pkg/apis/resource/types.go	1462	// A robust expression should check for the existence of attributes	COMMENT
MEDIUM	pkg/apis/resource/types.go	1520	// extremely hard to detect. A robust expression should, for example, check	COMMENT
MEDIUM	pkg/scheduler/backend/queue/backoff_queue.go	83	// providing seamless access as if it were one queue.	COMMENT
MEDIUM	pkg/controller/resourceclaim/controller.go	1474	// Check if the ReservedFor entries are all still valid. Essentially we are	COMMENT
MEDIUM	pkg/controller/job/job_scheduling_manager.go	365	// by a more robust mechanism before beta.	COMMENT
MEDIUM	pkg/kubelet/stats/cadvisor_stats_provider.go	493	// creation time. However, to make the logic here robust, we break the	COMMENT
MEDIUM	pkg/volume/plugins.go	496	// not necessarily all plugins. The preference is to leverage strong typing	COMMENT
MEDIUM	pkg/volume/util/subpath/subpath_linux.go	271	// The original traversal method here was ReadDir, which was not so robust to handle some error such as "stale NFS fil	COMMENT

Fake / Example Data132 hits · 150 pts

Severity	File	Line	Snippet	Context
LOW	cmd/kubeadm/app/util/crypto/crypto_test.go	36	testData := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit.")	CODE
LOW	cmd/kubeadm/app/util/crypto/crypto_test.go	36	testData := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit.")	CODE
LOW	cmd/kubeadm/app/util/apiclient/dryrun_test.go	56	"fake-token",	CODE
LOW	staging/src/k8s.io/kms/pkg/service/grpc_service_test.go	47	plaintext := []byte("lorem ipsum dolor sit amet")	CODE
LOW	staging/src/k8s.io/kms/pkg/service/grpc_service_test.go	47	plaintext := []byte("lorem ipsum dolor sit amet")	CODE
LOW	…k8s.io/client-go/tools/clientcmd/client_config_test.go	1256	if err := os.WriteFile(keyFile.Name(), []byte("dummy-key-content"), 0600); err != nil {	CODE
LOW	…g/admission/plugin/policy/validating/validator_test.go	78	return matchconditions.MatchResult{Matches: f.matches, FailedConditionName: "placeholder", Error: f.error}	CODE
LOW	….io/apiserver/pkg/admission/plugin/cel/compile_test.go	95	"request.name == 'fake-name'",	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	226	context.AuthInfo = "fake-user"	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	229	args: []string{"set", "contexts.new-context.user", "fake-user"},	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	266	fakeData := []byte("fake-data")	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	285	fakeData := []byte("fake-data")	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	327	fakeData := []byte("fake-data")	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/cmd/config/config_test.go	370	fakeData := []byte("fake-data")	CODE
LOW	…ng/src/k8s.io/kubectl/pkg/cmd/get/customcolumn_test.go	396	Name: "fake-name",	CODE
LOW	…bectl/pkg/cmd/create/create_clusterrolebinding_test.go	36	Users: []string{"fake-user"},	CODE
LOW	…bectl/pkg/cmd/create/create_clusterrolebinding_test.go	58	Name: "fake-user",	CODE
LOW	…io/kubectl/pkg/cmd/create/create_secret_docker_test.go	33	username, password, email, server := "test-user", "test-password", "test-user@example.org", "https://index.docker.io/v1	CODE
LOW	…io/kubectl/pkg/cmd/create/create_secret_docker_test.go	193	username, password, email, server := "test-user", "test-password", "test-user@example.org", "https://index.docker.io/v1	CODE
LOW	…s.io/kubectl/pkg/cmd/create/create_rolebinding_test.go	36	Users: []string{"fake-user"},	CODE
LOW	…s.io/kubectl/pkg/cmd/create/create_rolebinding_test.go	58	Name: "fake-user",	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/explain/test-swagger.json	19	"description": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac enim vulputate impe	CODE
LOW	…aging/src/k8s.io/kubectl/pkg/explain/test-swagger.json	19	"description": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac enim vulputate impe	CODE
LOW	…g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go	53	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW	…g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go	53	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW	…g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go	75	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW	…g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go	75	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW	…/src/k8s.io/kubectl/pkg/explain/fields_printer_test.go	37	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW	…/src/k8s.io/kubectl/pkg/explain/fields_printer_test.go	37	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	32	f.Write("Lorem ipsum dolor sit amet, consectetur adipiscing elit.")	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	32	f.Write("Lorem ipsum dolor sit amet, consectetur adipiscing elit.")	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	38	want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit.	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	38	want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit.	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	55	f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	55	f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	56	f.Indent(10).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida d	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	56	f.Indent(10).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida d	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	58	f.Indent(20).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ThisIsAVeryLongWordThatDoesn'tFitOn	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	58	f.Indent(20).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ThisIsAVeryLongWordThatDoesn'tFitOn	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	84	want := `Lorem ipsum dolor sit amet, consectetur adipiscing	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	84	want := `Lorem ipsum dolor sit amet, consectetur adipiscing	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	87	Lorem ipsum dolor sit amet, consectetur	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	87	Lorem ipsum dolor sit amet, consectetur	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	91	Lorem ipsum dolor sit amet,	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	91	Lorem ipsum dolor sit amet,	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	127	f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	127	f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	128	want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fringilla	CODE
LOW⚡	…aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go	128	want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fringilla	CODE
LOW	staging/src/k8s.io/kubectl/pkg/kuberc/kuberc_test.go	2999	args := []string{"placeholder", "two"}	CODE
LOW	…/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go	139	Street: "123 Main St",	CODE
LOW	…/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go	155	{Type: "phone", Value: "555-1234"},	CODE
LOW⚡	…/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go	175	Street: "123 Main St",	CODE
LOW⚡	…/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go	185	{Type: "phone", Value: "555-1234"},	CODE
LOW⚡	…/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go	186	{Type: "fax", Value: "555-5678"}, // Additional	CODE
LOW	…t/integration/metrics/nativehistograms/metrics_test.go	146	token: fake-token	CODE
LOW	…on/replicationcontroller/replicationcontroller_test.go	77	Name: "fake-name",	CODE
LOW	…on/replicationcontroller/replicationcontroller_test.go	101	Name: "fake-name",	CODE
LOW	test/integration/endpoints/endpoints_test.go	82	Name: "fake-name",	CODE
LOW	test/integration/endpoints/endpoints_test.go	208	Name: "fake-name",	CODE
72 more matches not shown…

Hallucination Indicators13 hits · 130 pts

Severity	File	Line	Snippet	Context
CRITICAL	…pkg/apiserver/schema/cel/compilation_benchmark_test.go	35	Rule: "self.spec.replicas > 0 && self.spec.template.spec.containers.all(c, c.image != '')",	CODE
CRITICAL	…n/plugin/policy/validating/validator_benchmark_test.go	33	&ValidationCondition{Expression: "object.spec.replicas > 0 && object.spec.template.spec.containers.all(c, c.image != '	CODE
CRITICAL	…ission/plugin/policy/mutating/policy_benchmark_test.go	60	containers: object.spec.template.spec.containers.map(c,	CODE
CRITICAL	…ission/plugin/policy/mutating/policy_benchmark_test.go	68	value: object.spec.template.spec.containers.map(c,	CODE
CRITICAL	test/integration/auth/rbac_test.go	91	storageConfig, err := getter.config.ControlPlane.Extra.StorageFactory.NewConfig(resource, example)	CODE
CRITICAL	test/integration/apiserver/cel/typeresolution_test.go	204	"self.spec.template.spec.containers.all(c, c.ports.all(p, p.containerPort < 1024))",	CODE
CRITICAL	test/e2e/storage/testsuites/snapshot_metadata_stress.go	417	ClaimSize: volume.Pvc.Spec.Resources.Requests.Storage().String(),	CODE
CRITICAL	pkg/controller/job/backoff_utils.go	211	containerState.State.Terminated.FinishedAt.Time.IsZero() {	CODE
CRITICAL	pkg/controller/evictionrequest/target_info.go	231	containerState.State.Terminated.FinishedAt.Time.IsZero() {	CODE
CRITICAL	pkg/kubelet/allocation/allocation_manager_test.go	2292	cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value()	CODE
CRITICAL	pkg/kubelet/allocation/allocation_manager_test.go	2315	cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value()	CODE
CRITICAL	pkg/kubelet/allocation/allocation_manager_test.go	2367	cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value()	CODE
CRITICAL	pkg/kubelet/allocation/allocation_manager_test.go	2392	cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value()	CODE

Verbosity Indicators71 hits · 117 pts

Severity	File	Line	Snippet	Context
LOW	cmd/kubeadm/app/util/etcd/etcd.go	721	// Step 1: get the cluster status first	COMMENT
LOW	cmd/kubeadm/app/util/etcd/etcd.go	754	// Step 2: evaluate the cluster status	COMMENT
LOW⚡	cluster/gce/util.sh	3203	# Step 1: Detach master IP address and attach ephemeral address to the existing master	COMMENT
LOW⚡	cluster/gce/util.sh	3206	# Step 2: Create target pool.	COMMENT
LOW⚡	cluster/gce/util.sh	3211	# Step 3: Create forwarding rule.	COMMENT
LOW	cluster/gce/util.sh	3188	# Step 0: Return early if LB is already configured.	COMMENT
LOW	…aging/src/k8s.io/client-go/tools/watch/retrywatcher.go	101	// and we need to check if stop wasn't requested while doing so.	COMMENT
LOW	…controllers/nodelifecycle/node_lifecycle_controller.go	171	// At this point the node has NotReady status, we need to check if the node has been removed	COMMENT
LOW	…/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go	314	// Step 0:	COMMENT
LOW	…/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go	329	// Step 1:	COMMENT
LOW	…/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go	345	// Step 2:	COMMENT
LOW	…/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go	401	// Step 3:	COMMENT
LOW	…erver/pkg/admission/plugin/resourcequota/controller.go	373	// if a resource is consumed, we need to check if it matches on the limited resource list.	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3409	// Step 1: add N objects to the store foo-{1 ... n}	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3467	// Step 1: create 7 objects, where even-numbered ones are corrupt	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3481	// Step 2: list all objects, expect no error before corruption	COMMENT
LOW⚡	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3495	// Step 3: corrupt the transformer so even-numbered objects fail to decode	COMMENT
LOW⚡	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3504	// Step 4: list again, expect GetList to abort on the first corrupt object	COMMENT
LOW	test/integration/framework/util.go	117	// For NodeReady we need to check if Taints are gone as well	COMMENT
LOW	test/integration/job/job_test.go	3428	// Step 0: create job.	COMMENT
LOW⚡	test/integration/job/job_test.go	3450	// Step 2: Delete the Job while the controller is stopped.	COMMENT
LOW⚡	test/integration/job/job_test.go	3459	// Step 3: Restart controller.	COMMENT
LOW	test/e2e/framework/node/resource.go	100	// For NodeReady we need to check if Taints are gone as well	COMMENT
LOW⚡	test/e2e/network/networking_perf.go	160	// Step 1: set up iperf2 server -- a single pod on any node	COMMENT
LOW⚡	test/e2e/network/networking_perf.go	167	// Step 2: set up iperf2 client daemonset	COMMENT
LOW	test/e2e/network/networking_perf.go	232	// Step 3: iterate through the client pods one by one, running iperf2 in client mode to transfer	COMMENT
LOW	test/e2e/network/networking_perf.go	266	// Step 4: after collecting all the client<->server data, compile and present the results	COMMENT
LOW	plugin/pkg/auth/authorizer/node/graph_populator_test.go	39	// Step 1: Pod 1 (UID 1) on node1 with secret1 is in the graph.	COMMENT
LOW	plugin/pkg/auth/authorizer/node/graph_populator_test.go	79	// Step 2: Simulate pod1 deletion event and pod2 creation event queued together.	COMMENT
LOW⚡	plugin/pkg/auth/authorizer/node/graph_populator_test.go	113	// Step 3: Run processNextWorkItem once.	COMMENT
LOW⚡	plugin/pkg/auth/authorizer/node/graph_populator_test.go	122	// Step 4: Assert graph state.	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2279	// Step 3: Add svc3 with a local endpoint at IP-B (same IP as the remote endpoint).	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2346	// Step 4: Remove endpoint slices for svc1 and svc2 (IPs A and B disappear).	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2561	// Step 3: Inject LB delete failure and transition endpoints from	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2630	// Step 4: Assert the results.	COMMENT
LOW	…framework/plugins/dynamicresources/dynamicresources.go	1690	// We need to check if the device is attached to the node.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2009	// Step 1: the node was added into cache successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2034	// Step 2: dump cached nodes successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2052	// Step 3: update node attribute successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2082	// Step 4: the node can be removed even if it still has pods.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2116	// Step 5: removing pods for the removed node still succeeds.	COMMENT
LOW	pkg/scheduler/backend/queue/scheduling_queue.go	671	// We need to check if those plugins return Queue or not and if they do, we return queueImmediately.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	358	// Step 1: Aggregate pool data from ResourceSlices.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	472	// Step 2: Count allocated devices from ResourceClaims.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	516	// Step 3: Build pool status list, marking incomplete pools with a validation error	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1637	// Step 1: Compute sandbox and container changes.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1652	// Step 2: Kill the pod if the sandbox has changed.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1671	// Step 3: kill any running containers in this pod which are not to keep.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1730	// Step 4: Create a sandbox for the pod if necessary.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1831	// Step 5: invoke the sandbox ready callback before image pulling .	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1850	// Step 6: Resize pod & running containers (if necessary).	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1954	// Step 7: start ephemeral containers	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1967	// Step 8: start init containers.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	2004	// Step 9: start containers in podContainerChanges.ContainersToStart.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	216	// Step 1: pull the image.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	234	// Step 2: create the container.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	303	// Step 3: start the container.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	331	// Step 4: execute the post start hook.	COMMENT
LOW	…/kubelet/pluginmanager/cache/desired_state_of_world.go	141	// because in the reconciler, we need to check if the plugin in the actual state of world is the same	COMMENT
LOW⚡	pkg/kubelet/cm/devicemanager/manager_test.go	3167	// Step 1: register e1 at socketA via the real connect path.	COMMENT
11 more matches not shown…

Structural Annotation Overuse65 hits · 108 pts

Severity	File	Line	Snippet	Context
LOW	cmd/kubeadm/app/util/etcd/etcd.go	721	// Step 1: get the cluster status first	COMMENT
LOW	cmd/kubeadm/app/util/etcd/etcd.go	754	// Step 2: evaluate the cluster status	COMMENT
LOW⚡	cluster/gce/util.sh	3203	# Step 1: Detach master IP address and attach ephemeral address to the existing master	COMMENT
LOW⚡	cluster/gce/util.sh	3206	# Step 2: Create target pool.	COMMENT
LOW⚡	cluster/gce/util.sh	3211	# Step 3: Create forwarding rule.	COMMENT
LOW	cluster/gce/util.sh	3188	# Step 0: Return early if LB is already configured.	COMMENT
LOW	staging/src/k8s.io/client-go/tools/cache/fifo_test.go	83	// NOTE: This function is deprecated and may be removed in the future without	COMMENT
LOW	…ing/src/k8s.io/client-go/discovery/discovery_client.go	763	// NOTE: This function is resilient to the ordering of the	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3409	// Step 1: add N objects to the store foo-{1 ... n}	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3467	// Step 1: create 7 objects, where even-numbered ones are corrupt	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3481	// Step 2: list all objects, expect no error before corruption	COMMENT
LOW⚡	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3495	// Step 3: corrupt the transformer so even-numbered objects fail to decode	COMMENT
LOW⚡	…rc/k8s.io/apiserver/pkg/storage/testing/store_tests.go	3504	// Step 4: list again, expect GetList to abort on the first corrupt object	COMMENT
LOW	…r/pkg/registry/generic/registry/corrupt_obj_deleter.go	81	// NOTE: This function should NEVER be used for any normal deletion	COMMENT
LOW	…ing/src/k8s.io/apiserver/pkg/registry/rest/validate.go	375	// NOTE: This function is intended for testing purposes only and should not be used in production code.	COMMENT
LOW	…ing/src/k8s.io/apimachinery/pkg/api/validate/errors.go	34	// NOTE: This function is intended for testing purposes only and should not be used in production code.	COMMENT
LOW	…c/k8s.io/apimachinery/pkg/api/validation/objectmeta.go	147	// NOTE: This method should be used in the types for which declarative validation is not enabled yet or cannot be enable	COMMENT
LOW	test/integration/job/job_test.go	3428	// Step 0: create job.	COMMENT
LOW⚡	test/integration/job/job_test.go	3450	// Step 2: Delete the Job while the controller is stopped.	COMMENT
LOW⚡	test/integration/job/job_test.go	3459	// Step 3: Restart controller.	COMMENT
LOW	test/e2e/framework/framework.go	629	// NOTE: This function is not used at any places yet, but we are in progress for https://github.com/kubernetes/kubernete	COMMENT
LOW⚡	test/e2e/network/networking_perf.go	160	// Step 1: set up iperf2 server -- a single pod on any node	COMMENT
LOW⚡	test/e2e/network/networking_perf.go	167	// Step 2: set up iperf2 client daemonset	COMMENT
LOW	test/e2e/network/networking_perf.go	232	// Step 3: iterate through the client pods one by one, running iperf2 in client mode to transfer	COMMENT
LOW	test/e2e/network/networking_perf.go	266	// Step 4: after collecting all the client<->server data, compile and present the results	COMMENT
LOW	plugin/pkg/auth/authorizer/node/graph_populator_test.go	39	// Step 1: Pod 1 (UID 1) on node1 with secret1 is in the graph.	COMMENT
LOW	plugin/pkg/auth/authorizer/node/graph_populator_test.go	79	// Step 2: Simulate pod1 deletion event and pod2 creation event queued together.	COMMENT
LOW⚡	plugin/pkg/auth/authorizer/node/graph_populator_test.go	113	// Step 3: Run processNextWorkItem once.	COMMENT
LOW⚡	plugin/pkg/auth/authorizer/node/graph_populator_test.go	122	// Step 4: Assert graph state.	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2279	// Step 3: Add svc3 with a local endpoint at IP-B (same IP as the remote endpoint).	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2346	// Step 4: Remove endpoint slices for svc1 and svc2 (IPs A and B disappear).	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2561	// Step 3: Inject LB delete failure and transition endpoints from	COMMENT
LOW	pkg/proxy/winkernel/proxier_test.go	2630	// Step 4: Assert the results.	COMMENT
LOW	pkg/scheduler/framework/preemption/preemption.go	312	// NOTE: This method is exported for easier testing in default preemption.	COMMENT
LOW	pkg/scheduler/framework/preemption/preemption.go	444	// NOTE: This method is exported for easier testing in default preemption.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2009	// Step 1: the node was added into cache successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2034	// Step 2: dump cached nodes successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2052	// Step 3: update node attribute successfully.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2082	// Step 4: the node can be removed even if it still has pods.	COMMENT
LOW	pkg/scheduler/backend/cache/cache_test.go	2116	// Step 5: removing pods for the removed node still succeeds.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	358	// Step 1: Aggregate pool data from ResourceSlices.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	472	// Step 2: Count allocated devices from ResourceClaims.	COMMENT
LOW	pkg/controller/resourcepoolstatusrequest/controller.go	516	// Step 3: Build pool status list, marking incomplete pools with a validation error	COMMENT
LOW	pkg/kubelet/pod_workers.go	607	// NOTE: This function has to be thread-safe - it can be called for	COMMENT
LOW	pkg/kubelet/server/server.go	484	// NOTE: This method is maintained for backwards compatibility, but no new endpoints should be added	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1637	// Step 1: Compute sandbox and container changes.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1652	// Step 2: Kill the pod if the sandbox has changed.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1671	// Step 3: kill any running containers in this pod which are not to keep.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1730	// Step 4: Create a sandbox for the pod if necessary.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1831	// Step 5: invoke the sandbox ready callback before image pulling .	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1850	// Step 6: Resize pod & running containers (if necessary).	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1954	// Step 7: start ephemeral containers	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	1967	// Step 8: start init containers.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_manager.go	2004	// Step 9: start containers in podContainerChanges.ContainersToStart.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	216	// Step 1: pull the image.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	234	// Step 2: create the container.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	303	// Step 3: start the container.	COMMENT
LOW	pkg/kubelet/kuberuntime/kuberuntime_container.go	331	// Step 4: execute the post start hook.	COMMENT
LOW⚡	pkg/kubelet/cm/devicemanager/manager_test.go	3167	// Step 1: register e1 at socketA via the real connect path.	COMMENT
LOW⚡	pkg/kubelet/cm/devicemanager/manager_test.go	3172	// Step 2: disconnect e1 — this is the last endpoint so the resource	COMMENT
5 more matches not shown…

Redundant / Tautological Comments46 hits · 85 pts

Severity	File	Line	Snippet	Context
LOW⚡	cluster/get-kube.sh	24	# Set KUBERNETES_PROVIDER to choose between different providers:	COMMENT
LOW⚡	cluster/get-kube.sh	28	# Set KUBERNETES_RELEASE to choose a specific release instead of the current	COMMENT
LOW⚡	cluster/get-kube.sh	31	# Set KUBERNETES_RELEASE_URL to choose where to download binaries from.	COMMENT
LOW⚡	cluster/get-kube.sh	34	# Set KUBERNETES_SERVER_ARCH to choose the server (Kubernetes cluster)	COMMENT
LOW⚡	cluster/get-kube.sh	41	# Set KUBERNETES_NODE_PLATFORM to choose the platform for which to download	COMMENT
LOW⚡	cluster/get-kube.sh	49	# Set KUBERNETES_NODE_ARCH to choose the node architecture to download the	COMMENT
LOW⚡	cluster/get-kube.sh	59	# Set KUBERNETES_SKIP_DOWNLOAD to skip downloading a release.	COMMENT
LOW⚡	cluster/get-kube.sh	60	# Set KUBERNETES_SKIP_CONFIRM to skip the installation confirmation prompt.	COMMENT
LOW⚡	cluster/get-kube.sh	61	# Set KUBERNETES_SKIP_CREATE_CLUSTER to skip starting a cluster.	COMMENT
LOW⚡	cluster/get-kube.sh	62	# Set KUBERNETES_SKIP_RELEASE_VALIDATION to skip trying to validate the	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	24	# Set KUBERNETES_SERVER_ARCH to choose the server (Kubernetes cluster)	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	32	# Set KUBERNETES_CLIENT_OS to choose the client OS to download:	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	38	# Set KUBERNETES_CLIENT_ARCH to choose the client architecture to download:	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	47	# Set KUBERNETES_SKIP_CONFIRM to skip the installation confirmation prompt.	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	48	# Set KUBERNETES_RELEASE_URL to choose where to download binaries from.	COMMENT
LOW⚡	cluster/get-kube-binaries.sh	50	# Set KUBERNETES_DOWNLOAD_TESTS to additionally download and extract the test	COMMENT
LOW	cluster/addons/addon-manager/kube-addons-main.sh	56	# Check if the configuration has changed recently - in case the user	COMMENT
LOW	cluster/addons/addon-manager/kube-addons.sh	121	# Check if $resource isn't composed just of whitespaces by replacing ' '	COMMENT
LOW	cluster/gce/config-test.sh	330	# Set CLUSTER_DNS_CORE_DNS to 'false' to install kube-dns instead of CoreDNS.	COMMENT
LOW	cluster/gce/config-default.sh	289	# Set CLUSTER_DNS_CORE_DNS to 'false' to install kube-dns instead of CoreDNS.	COMMENT
LOW	cluster/gce/util.sh	3958	# Check if this are any remaining master replicas.	COMMENT
LOW	cluster/gce/gci/kube-master-internal-route.sh	22	# Check if route is already set if not set it	COMMENT
LOW	cluster/gce/gci/configure-helper.sh	444	# Check if NVMe SSD specified.	COMMENT
LOW	cluster/gce/gci/configure-helper.sh	1388	# Set REGISTER_MASTER_KUBELET to true if kubelet on the master node	COMMENT
LOW	staging/src/k8s.io/kubectl/pkg/cmd/set/set_resources.go	61	# Print the result (in yaml format) of updating nginx container limits from a local, without hitting the server	COMMENT
LOW	staging/src/k8s.io/kubectl/pkg/cmd/set/set_image.go	97	# Print result (in yaml format) of updating nginx container image from local file, without hitting the server	COMMENT
LOW	staging/src/k8s.io/kubectl/pkg/cmd/set/set_subject.go	52	# Print the result (in YAML format) of updating rolebinding subjects from a local, without hitting the server	COMMENT
LOW	…g/src/k8s.io/kubectl/pkg/cmd/set/set_serviceaccount.go	56	# Print the result (in YAML format) of updated nginx deployment with the service account from local file, without hitti	COMMENT
LOW	test/cmd/legacy-script.sh	23	# Set locale to ensure english responses from kubectl commands	COMMENT
LOW	test/cmd/core.sh	1020	# Set command to change the selector.	COMMENT
LOW	test/cmd/core.sh	1024	# Set command to reset the selector back to the original one.	COMMENT
LOW	test/e2e_node/gubernator.sh	55	# Check if the bucket exists	COMMENT
LOW	test/e2e_node/gubernator.sh	99	# Check if folder for same logs already exists	COMMENT
LOW	hack/lint-dependencies.sh	49	# Check if unwanted dependencies are removed	COMMENT
LOW⚡	hack/local-up-cluster.sh	494	# Check if the API server is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	498	# Check if the controller-manager is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	502	# Check if the cloud-controller-manager is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	506	# Check if the kubelet is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	510	# Check if the proxy is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	514	# Check if the scheduler is still running	COMMENT
LOW⚡	hack/local-up-cluster.sh	518	# Check if the etcd is still running	COMMENT
LOW	hack/local-up-cluster.sh	530	# Check if all processes are still running. Prints a warning once each time	COMMENT
LOW	hack/make-rules/test-e2e-node.sh	159	# Check if any of the images specified already have running instances. If so reuse those instances	COMMENT
LOW	hack/lib/version.sh	60	# Check if the tree is dirty. default to dirty	COMMENT
LOW	hack/lib/util.sh	703	# Check if we have "docker buildx" commands available	COMMENT
LOW	hack/lib/util.sh	716	# Check if we are using a supported bash version	COMMENT

Synthetic Comment Markers11 hits · 82 pts

Severity	File	Line	Snippet	Context
HIGH	cmd/kubeadm/app/cmd/phases/reset/cleanupnode_test.go	200	// Verify the files as requested by the test:	COMMENT
HIGH	cmd/kubeadm/app/constants/constants.go	173	// NodesUserPrefix defines the user name prefix as requested by the Node authorizer.	COMMENT
HIGH	…o/client-go/applyconfigurations/apps/v1/statefulset.go	36	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	…ent-go/applyconfigurations/apps/v1beta2/statefulset.go	38	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	…ent-go/applyconfigurations/apps/v1beta1/statefulset.go	38	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	staging/src/k8s.io/api/apps/v1/types.go	45	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	staging/src/k8s.io/api/apps/v1beta2/types.go	108	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	staging/src/k8s.io/api/apps/v1beta1/types.go	99	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	…aging/src/k8s.io/apimachinery/pkg/api/errors/errors.go	673	// be completed as requested.	COMMENT
HIGH	pkg/apis/apps/types.go	31	// - Storage: As many VolumeClaims as requested.	COMMENT
HIGH	pkg/registry/resource/devicetaintrule/strategy_test.go	244	// Stored as requested.	COMMENT

Decorative Section Separators8 hits · 30 pts

Severity	File	Line	Snippet	Context
MEDIUM	cluster/gce/util.sh	4283	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	hack/lib/golang.sh	141	# ------------	COMMENT
MEDIUM	hack/lib/golang.sh	150	# ------------	COMMENT
MEDIUM	hack/lib/version.sh	17	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	pkg/kubelet/podcertificate/podcertificatemanager.go	147	// ┌─────────────────┐	COMMENT
MEDIUM⚡	pkg/kubelet/podcertificate/podcertificatemanager.go	149	// fresh ────► wait ────► fresh ──────► waitrefresh	COMMENT
MEDIUM⚡	pkg/kubelet/podcertificate/podcertificatemanager.go	151	// ├──────► denied ◄───────────┤	COMMENT
MEDIUM⚡	pkg/kubelet/podcertificate/podcertificatemanager.go	153	// └──────► failed ◄───────────┘	COMMENT

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	hack/golangci.yaml	path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field (	STRING
HIGH	hack/golangci-hints.yaml	path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field (	STRING
HIGH	hack/kube-api-linter/exceptions.yaml	path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field (	STRING
HIGH	hack/golangci.yaml	path: "staging/src/k8s.io/api/events/(v1\|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field	STRING
HIGH	hack/golangci-hints.yaml	path: "staging/src/k8s.io/api/events/(v1\|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field	STRING
HIGH	hack/kube-api-linter/exceptions.yaml	path: "staging/src/k8s.io/api/events/(v1\|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field	STRING

TODO Padding11 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	…aging/src/k8s.io/client-go/dynamic/fake/simple_test.go	307	// TODO: Add tests for strategic merge using v1.Pod for example to ensure the test cases	COMMENT
LOW	…ging/src/k8s.io/client-go/metadata/fake/simple_test.go	200	// TODO: Add tests for strategic merge using v1.Pod for example to ensure the test cases	COMMENT
LOW	staging/src/k8s.io/client-go/rest/request.go	1189	// TODO: Add test for this. Steps may be:	COMMENT
LOW	staging/src/k8s.io/apiserver/pkg/cel/types.go	493	// TODO: implement for OpenAPI types to enable CEL object instantiation, which is needed	COMMENT
LOW	test/e2e/testing-manifests/auth/encrypt/run-e2e.sh	159	# TODO: consider using specific versions to avoid surprise breaking changes	COMMENT
LOW	plugin/pkg/admission/antiaffinity/admission_test.go	31	// TODO: Add test case "invalid topologyKey in requiredDuringSchedulingRequiredDuringExecution then admission fails"	COMMENT
LOW	…eduler/apis/config/validation/validation_pluginargs.go	254	// TODO: Add validation for requiredDuringSchedulingRequiredDuringExecution when it gets added to the API.	COMMENT
LOW	…r/framework/plugins/nodeaffinity/node_affinity_test.go	41	// TODO: Add test case for RequiredDuringSchedulingRequiredDuringExecution after it's implemented.	COMMENT
LOW	…/kubelet/pluginmanager/pluginwatcher/plugin_watcher.go	76	//TODO: Handle errors by taking corrective measures	COMMENT
LOW	…/kubelet/pluginmanager/pluginwatcher/plugin_watcher.go	148	//TODO: Handle errors by taking corrective measures	COMMENT
LOW	pkg/volume/fc/disk_manager.go	95	// TODO: Handle error returned here properly.	COMMENT

Example Usage Blocks9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW⚡	cluster/get-kube.sh	18	# Usage:	COMMENT
LOW	…rc/k8s.io/apiserver/pkg/util/compatibility/registry.go	26	// Example usage:	COMMENT
LOW	staging/src/k8s.io/component-base/tracing/utils.go	114	// Example usage:	COMMENT
LOW	test/utils/harness/harness.go	29	// Example usage:	COMMENT
LOW	hack/update-vendor-licenses.sh	19	# Usage:	COMMENT
LOW	hack/_update-generated-protobuf-dockerized.sh	18	# Usage:	COMMENT
LOW	hack/dev-push-conformance.sh	19	# Example usage:	COMMENT
LOW	hack/lib/util.sh	815	# Example usage:	COMMENT
LOW	third_party/forked/shell2junit/sh2ju.sh	12	### Usage:	COMMENT

Slop Phrases5 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	cluster/common.sh	34	# make sure to remove these vars when not used anymore	COMMENT
LOW	cluster/common.sh	43	# make sure to remove these vars when not used anymore	COMMENT
MEDIUM	test/e2e_node/cpu_manager_test.go	97	* Context # you can add more context, but please try hard to avoid nesting them	COMMENT
LOW	hack/update-vendor.sh	346	kube::log::status "NOTE: don't forget to handle vendor/* and LICENSE/* files that were added or removed" >&11	CODE
MEDIUM	hack/verify-prometheus-imports.sh	85	# somewhere else that actually isn't an import, you can use backticks / a raw	COMMENT

Deep Nesting3 hits · 3 pts

Severity	File	Line	Context
LOW	…/images/node-perf/pytorch-wide-deep/train_wide_deep.py	109	CODE
LOW	hack/verify-flags-underscore.py	27	CODE
LOW	hack/boilerplate/boilerplate.py	158	CODE

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	CHANGELOG/CHANGELOG-1.9.md	1691	* A new priority function ResourceLimitsPriorityMap (disabled by default and behind alpha feature gate and not part of	COMMENT
LOW	hack/verify-flags-underscore.py	71	def check_underscore_in_flags(rootdir, files):	CODE

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	cluster/addons/dns/nodelocaldns/README.md	55	The `denial` cache TTL has been reduced to the minimum of 5 seconds [here](https://github.com/kubernetes/kubernetes/blob	CODE

Excessive Try-Catch Wrapping1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	cluster/gce/gci/configure-helper.sh	1792	except Exception as e:	CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…/images/node-perf/pytorch-wide-deep/train_wide_deep.py	134	def process_data(train_data, test_data):	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/boilerplate/boilerplate.py	18		CODE

kubernetes/kubernetes

Open-Source Code Quality, Security and Technical Debt Review