agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).
This report summarizes scanner evidence for kubernetes-sigs/agent-sandbox, a Go project with 4,218 GitHub stars. SynthScan examined 331,835 lines of code across 1557 source files, recording 4329 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 15.1 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3607 finding(s).
Are imports declared and package/API names verified? 262 finding(s).
Are wrappers, guards, and repeated structures necessary? 2461 finding(s).
Which changes need focused human review? 4329 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4329 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 127 | def test_suspend_resume_new_sandbox(client, warmpool_name: str, namespace: str) -> None: | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 174 | def test_timestamp_based_listing_and_deletion(sandbox, creation_time, suspend_third_snapshot_uid): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 238 | def test_restore_from_snapshot(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 257 | def test_restore_fails_on_running_sandbox(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 268 | def test_suspend_resume_restore_cycle(sandbox) -> tuple[str, str]: | CODE |
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 395 | def display_prometheus_latency_metrics(): | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 132 | def test_agent_without_api_key(self): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 163 | def test_explicit_close_connection_and_persistence(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 187 | def test_creation_get_and_list_sandboxes(client: SandboxClient, warmpool_name: str, namespace: str) -> tuple[Sandbox, Sa | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 219 | def test_termination_and_deletion(client: SandboxClient, sandbox: Sandbox, sandbox2: Sandbox, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 334 | def test_volume_claim_templates(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/claim_adoption.py | 42 | def validate_claim_for_adoption(claim: dict | None, claim_name: str, warmpool: str) -> None: | CODE |
| LOW⚡ | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 382 | def _delete_automatic_sandboxes(self) -> None: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 447 | def get_sandbox_claim_warmpool_name(self, claim_name: str, namespace: str) -> str: | CODE |
| LOW | …hon/agentic-sandbox-client/k8s_agent_sandbox/models.py | 119 | def validate_tls_requires_https(self) -> "SandboxDirectConnectionConfig": | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 63 | async def _capture_streamed_error_body(response: httpx.Response) -> None: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 87 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 508 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 550 | async def invalidate_sandboxd_transport( | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 73 | def construct_sandbox_claim_lifecycle_spec(shutdown_after_seconds: int) -> dict[str, str]: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 174 | def is_valid_gateway_hostname(s: str) -> bool: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 202 | def extract_sandbox_name_hash(sandbox_object: dict[str, Any]) -> str | None: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 213 | def construct_sandbox_claim_env_spec(env: Mapping[str, str] | None) -> list[SandboxClaimEnvVar]: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 224 | def kubeconfig_from_configuration( | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 324 | async def async_kubectl_kubeconfig_args(api_client: Any | None) -> AsyncIterator[list[str]]: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 64 | def _capture_streamed_error_body(response: requests.Response) -> None: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 89 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 126 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 148 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 187 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 221 | def _preflight_check_router_service(self, kube_args: list[str] | None = None) -> None: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 372 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 509 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 565 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 615 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 759 | def invalidate_sandboxd_transport( | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 64 | def _sync_configuration_from_async(async_configuration) -> sync_client.Configuration: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 87 | def _refresh_api_key_for_atexit(refresh_api_key_hook, sync_configuration) -> None: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 514 | async def _delete_automatic_sandboxes(self) -> None: | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 71 | def test_connect_returns_correct_dns_url(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 75 | def test_connect_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 80 | def test_connect_is_idempotent(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 83 | def test_does_not_inject_router_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 86 | def test_verify_connection_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 89 | def test_close_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 92 | def test_connect_uses_pod_ip_when_callable_provided(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 97 | def test_connect_falls_back_to_dns_when_callable_returns_none(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 102 | def test_connect_uses_dns_when_no_callable(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 107 | def test_connect_pod_ip_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 112 | def test_connect_caches_pod_ip_until_close(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 189 | def test_pod_mode_missing_ip_never_falls_back(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 198 | def test_pod_status_read_error_does_not_reuse_old_target(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 208 | def test_rest_request_uses_direct_endpoint_without_router_headers(self, popen): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 371 | def test_direct_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 375 | def test_gateway_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 382 | def test_local_tunnel_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 391 | def test_local_tunnel_retains_process_when_terminate_fails(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 569 | def test_selects_in_cluster_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 574 | def test_selects_direct_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 579 | def test_raises_on_unknown_config_type(self): | CODE |
| 1926 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | codegen.go | 1 | // Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | codegen.go | 21 | //go:generate go tool -modfile=tools.mod sigs.k8s.io/controller-tools/cmd/controller-gen object crd:maxDescLen=0 paths=. | COMMENT |
| LOW | clients/go/sandbox/tracing_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/podtunnel.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandboxd_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/gateway.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files.go | 181 | } | COMMENT |
| LOW | clients/go/sandbox/tracing.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 61 | // or over a port-forward (default), see Connectivity. | COMMENT |
| LOW | clients/go/sandbox/options.go | 81 | // and, for RuntimeLegacyPython, the sandbox-router, off the data path. | COMMENT |
| LOW | clients/go/sandbox/options.go | 121 | // Runtime selects the in-sandbox runtime API. Default: RuntimeLegacyPython. | COMMENT |
| LOW | clients/go/sandbox/options.go | 161 | // bypassing gateway discovery. Takes precedence over GatewayName. | COMMENT |
| LOW | clients/go/sandbox/options.go | 201 | COMMENT | |
| LOW | clients/go/sandbox/options.go | 221 | COMMENT | |
| LOW | clients/go/sandbox/options.go | 241 | // TraceServiceName is the OpenTelemetry service name used for the tracer's | COMMENT |
| LOW | clients/go/sandbox/tunnel.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/types.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/strategy.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/incluster_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client.go | 161 | // trackOrAdoptRace resolves the registry race that both CreateSandbox and | COMMENT |
| LOW | clients/go/sandbox/incluster.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/incluster.go | 21 | "strconv" | COMMENT |
| LOW | clients/go/sandbox/connector.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/testmain_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/connector_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/integration_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands.go | 41 | log logr.Logger | COMMENT |
| LOW | clients/go/sandbox/k8s.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/basic/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/gateway/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/claim_adoption.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/metrics.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …hon/agentic-sandbox-client/k8s_agent_sandbox/models.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/constants.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …entic-sandbox-client/k8s_agent_sandbox/pod_metadata.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/metrics_utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/exceptions.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| 1174 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 381 | except Exception as e: | CODE |
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 386 | except Exception as metrics_err: | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 35 | except Exception as e: | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 482 | except Exception as e: | STRING |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 561 | except Exception as e: | STRING |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 232 | except Exception: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 238 | except Exception as cleanup_error: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 280 | except Exception as e: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 360 | except Exception as e: | CODE |
| LOW⚡ | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 377 | except Exception as e: | CODE |
| LOW⚡ | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 390 | except Exception as e: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 82 | except Exception: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 228 | except Exception: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 355 | except Exception as e: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 574 | except Exception: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 198 | except Exception as e: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 151 | except Exception: | CODE |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 193 | except Exception as e: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 59 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 84 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 174 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 261 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 337 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 358 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 475 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 496 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 744 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 782 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 792 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 813 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 897 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 97 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 222 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 363 | except Exception as cleanup_error: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 437 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 498 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 511 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 544 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 571 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 578 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 168 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 224 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 268 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 280 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 331 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 344 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 432 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 451 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 551 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 141 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 209 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 269 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 367 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 215 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 257 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 397 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 512 | except Exception as e: | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 377 | except Exception as ex: | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 389 | except Exception as e: | CODE |
| LOW | …box-client/k8s_agent_sandbox/files/async_filesystem.py | 305 | except Exception as e: | CODE |
| 252 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ypescript/agentic-sandbox-client/src/sandbox-client.ts | 1638 | // Step 1: Resolve actual sandbox name from claim status | COMMENT |
| LOW | …ypescript/agentic-sandbox-client/src/sandbox-client.ts | 1654 | // Step 2: Watch sandbox with remaining budget | COMMENT |
| LOW | docs/prowjob_manual_run.md | 46 | #### Step 1: Trigger the Job | COMMENT |
| LOW | docs/prowjob_manual_run.md | 55 | #### Step 2: Identify the Pod | COMMENT |
| LOW | docs/prowjob_manual_run.md | 66 | #### Step 3: Monitor Execution | COMMENT |
| LOW | docs/prowjob_manual_run.md | 75 | #### Step 4: Verify Results | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3588 | // Step 1: First Ready transition. Metrics recorded, Patch fails. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3600 | // Step 2: Mid-flap — claim went not-Ready, but was previously Ready. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3616 | // Step 3: Flap back to Ready — newReady=True, oldReady=False. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4404 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4408 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4410 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4414 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5428 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5464 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 27 | ## Step 1: Run the Setup Script | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 34 | ## Step 2: Install the Agent Sandbox Controller | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 38 | ## Step 3: Deploy an Agent Sandbox | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 67 | ## Step 4: Verify the Sandbox is Running | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 83 | ## Step 5: Verify the Isolation | COMMENT |
| LOW⚡ | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 411 | # Step 3: split global budget across CHOSEN clusters, weighted | COMMENT |
| LOW⚡ | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 417 | # Step 4: size each pool | COMMENT |
| LOW | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 319 | # Step 1: pick placement mode. | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 62 | # Step 1: Verify KVM support | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 92 | # Step 2: Install Kata Containers with Firecracker via kata-deploy | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 115 | # Step 3: Register the kata-fc RuntimeClass | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 134 | # Step 4: Label nodes | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 156 | # Step 5: Verify installation | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 64 | echo "### Step 1: Verifying KVM support ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 87 | echo "### Step 1: Skipped (--skip-kvm-check) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 95 | echo "### Step 2: Installing Kata Containers (kata-deploy) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 111 | echo "### Step 2: Skipped (--no-install) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 117 | echo "### Step 3: Registering RuntimeClass '${RUNTIME_CLASS_NAME}' ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 137 | echo "### Step 4: Labeling all Linux nodes with ${NODE_LABEL_KEY}=${NODE_LABEL_VALUE} ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 152 | echo "### Step 4: Skipped (--no-label) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 158 | echo "### Step 5: Verifying installation ###" | CODE |
| LOW | examples/ray-integration/README.md | 162 | ### Step 1: Deploy the Gateway | COMMENT |
| LOW | examples/ray-integration/README.md | 181 | ### Step 2: Wait for the Public IP | COMMENT |
| LOW | examples/ray-integration/README.md | 194 | ### Step 3: Upgrade the Python Code | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 48 | ### Step 1: Prepare and Push the Sandbox Image | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 67 | ### Step 2: Deploy Infrastructure | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 81 | ### Step 3: Initialize KubeRay Operator | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 95 | ### Step 4: Apply RBAC Permissions for the Ray Workers | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 105 | ### Step 5: Deploy Sandbox WarmPool Infrastructure | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 114 | ### Step 6: Create the RL Training Source ConfigMap | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 121 | ### Step 7: Submit the Production RayJob | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 129 | ### Step 8: Verify the E2E Execution Logs | COMMENT |
| LOW | examples/quickstart/gvisor.md | 11 | ## Step 1: Install gVisor Runtime | COMMENT |
| LOW | examples/quickstart/gvisor.md | 15 | ## Step 2: Create KIND Cluster with gVisor | COMMENT |
| LOW | examples/quickstart/README.md | 26 | ## Step 1: Clone the Agent Sandbox Repository | COMMENT |
| LOW | examples/quickstart/README.md | 43 | ## Step 2: Create Kubernetes Cluster | COMMENT |
| LOW | examples/quickstart/README.md | 56 | ## Step 3: Install Agent Sandbox Controller | COMMENT |
| LOW | examples/quickstart/README.md | 76 | ## Step 4: Apply SandboxTemplate | COMMENT |
| LOW | examples/quickstart/README.md | 90 | ## Step 5: Create SandboxWarmPool | COMMENT |
| LOW | examples/quickstart/README.md | 146 | ## Step 6: Build and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 160 | ## Step 7: Load Router Image and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 225 | ## Step 8: Install Python SDK | COMMENT |
| 88 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 794 | except (OSError, ProcessLookupError): | CODE |
| HIGH | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 799 | except (OSError, ProcessLookupError): | CODE |
| HIGH | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 151 | except Exception: | CODE |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 744 | except Exception: | CODE |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 782 | except Exception: | CODE |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 813 | except Exception: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 584 | except ConnectionClosed: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 618 | except asyncio.CancelledError: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 625 | except (WebSocketDisconnect, ConnectionClosed): | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 631 | except RuntimeError: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 635 | except Exception: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 640 | except RuntimeError: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 644 | except Exception: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 652 | except RuntimeError: | CODE |
| HIGH | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 658 | except Exception: | CODE |
| HIGH | …ons/deepagents/deepagents_k8s_agent_sandbox/sandbox.py | 246 | except FileNotFoundError: | CODE |
| HIGH | clients/integrations/openai/tests/fake_k8s.py | 272 | except Exception: | CODE |
| HIGH | test/stress/generate-report/download_results.py | 62 | except ImportError: | CODE |
| HIGH | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 894 | except ValueError: | CODE |
| HIGH | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 748 | except k8s_config.ConfigException: | CODE |
| HIGH | examples/langchain/coding_agent.py | 86 | except OSError: | CODE |
| HIGH | examples/langchain/coding_agent.py | 76 | except ProcessLookupError: | CODE |
| HIGH | examples/firecracker-sandbox/main.py | 131 | except ValueError: | CODE |
| HIGH | examples/firecracker-sandbox/main.py | 138 | except ValueError: | CODE |
| HIGH | examples/firecracker-sandbox/main.py | 123 | except ValueError: | CODE |
| HIGH | examples/firecracker-sandbox/main.py | 240 | except (ProcessLookupError, OSError): | CODE |
| HIGH | …/agent-sandbox-rl/tests/run_full_swebench_benchmark.py | 190 | except Exception: # noqa: BLE001 — best-effort | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 152 | except Exception: # noqa: BLE001 | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 156 | except Exception: # noqa: BLE001 | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 210 | except Exception: # noqa: BLE001 (SDK without tracing support) | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 590 | except Exception: # noqa: BLE001 — diagnostics only | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 160 | except Exception: # noqa: BLE001 — a non-standard registry may differ; best-effort | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1638 | except Exception: # noqa: BLE001 | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1655 | except Exception: # noqa: BLE001 | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 173 | except Exception: # noqa: BLE001 — best-effort, as above | CODE |
| HIGH | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 127 | except Exception: # pragma: no cover | CODE |
| HIGH | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 284 | except Exception: # pragma: no cover | CODE |
| HIGH | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 257 | except Exception: # pragma: no cover | CODE |
| HIGH | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 105 | except Exception: # pragma: no cover - best-effort at finalization | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 722 | except Exception: # noqa: BLE001 — diagnostics only | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 233 | except ValueError: | CODE |
| HIGH | …les/ray-integration/direct-proxy/rl_production_loop.py | 95 | except (TypeError, ValueError): | CODE |
| HIGH | examples/python-runtime-sandbox/main.py | 111 | except (ProcessLookupError, OSError): | CODE |
| HIGH | dev/tools/shared/utils.py | 112 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 15 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 18 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 33 | CODE | |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 31 | CODE | |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 21 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/test/unit/test_sandboxd.py | 222 | CODE | |
| LOW | …ent/k8s_agent_sandbox/_proto/process/v1/process_pb2.py | 39 | CODE | |
| LOW | …k8s_agent_sandbox/gke_extensions/snapshots/__init__.py | 15 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 35 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 35 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 15 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 16 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 23 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 24 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/provider.py | 84 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | clients/integrations/mcp-server/tests/unit/conftest.py | 15 | CODE | |
| LOW | …-server/tests/unit/test_settings/test_env_variables.py | 15 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 15 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 16 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 17 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 18 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 20 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 21 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 22 | CODE | |
| LOW | …ver/k8s_agent_sandbox_mcp_server/resources/__init__.py | 15 | CODE | |
| LOW | clients/integrations/openhands/example.py | 103 | CODE | |
| LOW | …ions/openhands/openhands_k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …ons/openhands/openhands_k8s_agent_sandbox/workspace.py | 30 | CODE | |
| LOW | …ns/deepagents/deepagents_k8s_agent_sandbox/__init__.py | 15 | CODE | |
| LOW | clients/integrations/openai/tests/fake_k8s.py | 40 | CODE | |
| LOW | clients/integrations/openai/tests/conftest.py | 17 | CODE | |
| LOW | clients/integrations/openai/tests/support.py | 17 | CODE | |
| LOW | clients/integrations/openai/tests/test_prototype.py | 22 | CODE | |
| LOW | clients/integrations/openai/tests/test_file_transfer.py | 22 | CODE | |
| 170 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 100 | # ── Gymnasium API ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 182 | # ── Internals ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 205 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 207 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 276 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 278 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …mples/multi-cluster-fleet/python/tests/test_planner.py | 639 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …mples/multi-cluster-fleet/python/tests/test_planner.py | 641 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 73 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 77 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 116 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 119 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 222 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 224 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 998 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 1001 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 1059 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 1061 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 64 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 66 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 96 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 98 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 141 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 143 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 443 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 445 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 41 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 43 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/firecracker-sandbox/test_client.py | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/firecracker-sandbox/test_client.py | 65 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 136 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 138 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 62 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 150 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_local.py | 84 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_local.py | 86 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 83 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 85 | # ========================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 77 | # ============================================================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 80 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 19 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 26 | # ============================================================================== | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 34 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/envd-sandbox/test_client.py | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/envd-sandbox/test_client.py | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 57 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 59 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 312 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 314 | # --------------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | clients/go/examples/gateway/main.go | 31 | // See clients/python/agentic-sandbox-client/sandbox-router/gateway.yaml for | COMMENT |
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 80 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 80 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | …erver/k8s_agent_sandbox_mcp_server/tools/list_files.py | 36 | # thousands of entries being serialized into an LLM's context window, | COMMENT |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 50 | //+kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 569 | //+kubebuilder:scaffold:builder | COMMENT |
| MEDIUM | .agents/skills/triage-issues/evals/eval_runner.py | 137 | # Default P3 (Nice-to-have, cleanup, refactor, test scaffolding) | COMMENT |
| MEDIUM | olm/config/scorecard/kustomization.yaml | 18 | # +kubebuilder:scaffold:patches | COMMENT |
| MEDIUM | docs/keps/359-refactor-python-sdk/README.md | 129 | 2. Sandbox Manager POC: https://github.com/SHRUTI6991/agent-sandbox-initial-playing/tree/two-clients/clients/python/agen | CODE |
| MEDIUM | examples/kata-aks/router.yaml | 85 | # See clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | …/podsnapshot-golden-warmpool/05-podsnapshotpolicy.yaml | 4 | # clients/python/agentic-sandbox-client/k8s_agent_sandbox/gke_extensions/snapshots/README.md: | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/docs/design.md | 1 | # Design: `agent-sandbox-rl` — generic, multi-cluster batch orchestration for RL on Agent Sandbox | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/examples/rl_integration.md | 186 | ### Training loop (agentic GRPO): warm + recycle env | COMMENT |
| MEDIUM | …emo-cilium-egress/manifests/router/sandbox-router.yaml | 2 | # Adapted from clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/ray-integration/README.md | 54 | (Note: Ensure you have built and replaced the `${ROUTER_IMAGE}` placeholder in sandbox_router.yaml as per the [router do | CODE |
| MEDIUM | examples/ray-integration/direct-proxy/README.md | 30 | # We use e2-standard-4 (4 vCPU, 16GB RAM) to ensure the Ray orchestration processes have enough headroom. | COMMENT |
| MEDIUM | examples/quickstart/README.md | 330 | - [Python SDK Source](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/) | CODE |
| MEDIUM | examples/sandboxed-tools/cmd/acp-server/main.go | 16 | // exposes the agentic loop over the Agent Client Protocol (ACP), speaking | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/agent/agent.go | 15 | // Package agent implements the agentic loop of the sandboxed-tools example: | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/agent/agent.go | 115 | // Session represents an agentic "chat" session (a stream of messages / tools calls etc). | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/agent/agent.go | 675 | // into an agentic loop. | COMMENT |
| MEDIUM | site/content/docs/filesystem/_index.md | 16 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/_index.md | 52 | The full template (with isolation runtime options) lives at [`clients/python/agentic-sandbox-client/python-sandbox-templ | CODE |
| MEDIUM | site/content/docs/filesystem/upload-download/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/list-files/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/read-write/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/use-cases/computer-use/_index.md | 35 | 3. **Programmatic control** — use the [`agent-sandbox` Python SDK](https://github.com/agent-infra/sandbox/tree/main/sdk/ | CODE |
| MEDIUM | site/content/docs/sandbox/metrics/_index.md | 19 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/sandbox/snapshots/_index.md | 21 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 17 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …te/content/docs/sandbox/custom_sandbox/image/_index.md | 11 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 14 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 15 | - A `SandboxWarmPool` in the target namespace (for example `python-sandbox-pool` backed by `python-sandbox-template`). S | CODE |
| MEDIUM | …content/docs/getting_started/troubleshooting/_index.md | 20 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 51 | curl -sSL https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 59 | curl -sSL https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | site/data/link_replacements.yaml | 25 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM | site/data/link_replacements.yaml | 40 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/)' | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 55 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 60 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 65 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/tes | CODE |
| MEDIUM | site/data/link_replacements.yaml | 85 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/GCP | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …ents/integrations/nemo-gym/tests/unit/test_provider.py | 357 | f"cd /work || exit {SANDBOX_RUNTIME_RETURN_CODE}", | CODE |
| HIGH | …ents/integrations/nemo-gym/tests/unit/test_provider.py | 449 | assert script == f"mkdir -p /data/out && cp {staging} /data/out/artifact.bin && rm -f {staging}" | CODE |
| HIGH | clients/integrations/openhands/example.py | 46 | result = workspace.execute_command("echo hello from a warm pod && uname -a") | CODE |
| HIGH⚡ | examples/firecracker-sandbox/test_main.py | 233 | response = client.post("/exec", json={"cmd": "echo hi && echo bye"}) | CODE |
| HIGH⚡ | examples/firecracker-sandbox/test_main.py | 237 | assert called_args[0] == "echo hi && echo bye" | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 99 | self.run("stty -echo 2>/dev/null; PS1=''; PROMPT_COMMAND=''; true", | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 106 | f'echo "PRISTINE=$(git -C {tb} rev-parse pristine 2>/dev/null)"', | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 107 | f'echo "HEAD=$(git -C {tb} rev-parse HEAD 2>/dev/null)"', | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 118 | f'echo "H:$(basename "$f")" && cat "$f"; done 2>/dev/null) ' | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 185 | 'kill -9 "$p" 2>/dev/null; done; ') | CODE |
| HIGH | …agent-sandbox-rl/agent_sandbox_rl/adapters/swebench.py | 36 | " || ls -d /testbed 2>/dev/null || ls /", | CODE |
| HIGH | …mples/agent-sandbox-rl/examples/run_openhands_fleet.py | 137 | result = workspace.execute_command("echo ready && uname -m") | CODE |
| HIGH | examples/python-runtime-sandbox/main.py | 130 | being interpreted, which does not fail loudly: e.g. "mkdir -p a && echo | STRING |
| HIGH⚡ | examples/python-runtime-sandbox/test_main.py | 270 | json={"command": "mkdir -p a && echo hi > a/f.txt"}, | CODE |
| HIGH⚡ | examples/policy/command-governance/test_governed_run.py | 87 | "echo ok && rm -rf /", | CODE |
| HIGH⚡ | examples/policy/command-governance/test_governed_run.py | 89 | "cd /tmp && rm -rf ./build", | CODE |
| HIGH | examples/policy/command-governance/governed_run.py | 372 | independently — so `echo hi && rm -rf /`, `$(rm -rf /)`, and | STRING |
| HIGH⚡ | dev/tools/latest_published_tag_test.py | 114 | # A valid OCI response may carry "tags": null; it must not crash. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ypescript/agentic-sandbox-client/src/sandbox-client.ts | 1638 | // Step 1: Resolve actual sandbox name from claim status | COMMENT |
| LOW | …ypescript/agentic-sandbox-client/src/sandbox-client.ts | 1654 | // Step 2: Watch sandbox with remaining budget | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3588 | // Step 1: First Ready transition. Metrics recorded, Patch fails. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3600 | // Step 2: Mid-flap — claim went not-Ready, but was previously Ready. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3616 | // Step 3: Flap back to Ready — newReady=True, oldReady=False. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4404 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4408 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4410 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4414 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5428 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5464 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 411 | # Step 3: split global budget across CHOSEN clusters, weighted | COMMENT |
| LOW⚡ | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 417 | # Step 4: size each pool | COMMENT |
| LOW | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 319 | # Step 1: pick placement mode. | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 62 | # Step 1: Verify KVM support | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 92 | # Step 2: Install Kata Containers with Firecracker via kata-deploy | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 115 | # Step 3: Register the kata-fc RuntimeClass | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 134 | # Step 4: Label nodes | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 156 | # Step 5: Verify installation | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 64 | echo "### Step 1: Verifying KVM support ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 87 | echo "### Step 1: Skipped (--skip-kvm-check) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 95 | echo "### Step 2: Installing Kata Containers (kata-deploy) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 111 | echo "### Step 2: Skipped (--no-install) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 117 | echo "### Step 3: Registering RuntimeClass '${RUNTIME_CLASS_NAME}' ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 137 | echo "### Step 4: Labeling all Linux nodes with ${NODE_LABEL_KEY}=${NODE_LABEL_VALUE} ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 152 | echo "### Step 4: Skipped (--no-label) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 158 | echo "### Step 5: Verifying installation ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 60 | echo "### Step 1: Creating/Checking the Resource Group ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 66 | echo "### Step 2: Creating/Checking the AKS Cluster ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 97 | echo "### Step 3: Getting Cluster Credentials ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 100 | echo "### Step 4: Verifying the Kata RuntimeClass ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 181 | # Step 1: Verify KVM support | COMMENT |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 205 | # Step 2: Install urunc via urunc-deploy | COMMENT |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 227 | # Step 3: Register the urunc RuntimeClass | COMMENT |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 247 | # Step 4: Verify installation | COMMENT |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 183 | echo "### Step 1: Verifying KVM support ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 200 | echo "### Step 1: Skipped (--skip-kvm-check) ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 208 | echo "### Step 2: Installing urunc (urunc-deploy) ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 222 | echo "### Step 2: Skipped (--no-install) ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 229 | echo "### Step 3: Registering RuntimeClass '${RUNTIME_CLASS_NAME}' ###" | CODE |
| LOW⚡ | examples/urunc-sandbox/setup.sh | 249 | echo "### Step 4: Verifying installation ###" | CODE |
| LOW | …-swap/python-density/run_pythonsandbox_density_test.sh | 50 | # Step 1: Pre-stage MovieLens dataset ONCE on all target nodes under /tmp/movielens | COMMENT |
| LOW | …-swap/python-density/run_pythonsandbox_density_test.sh | 84 | # Step 2: Execute multi-density benchmark matrix across target node pools | COMMENT |
| LOW⚡ | examples/openclaw-fleet-gke/setup/provision-gke.sh | 73 | echo "### Step 1: Enabling required Google Cloud APIs ###" | CODE |
| LOW⚡ | examples/openclaw-fleet-gke/setup/provision-gke.sh | 80 | echo "### Step 2: Creating GKE Standard cluster '${CLUSTER_NAME}' ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/provision-gke.sh | 107 | echo "### Step 3: Creating gVisor node pool ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/provision-gke.sh | 128 | echo "### Step 4: Creating snapshot bucket gs://${SNAPSHOT_BUCKET} ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/provision-gke.sh | 143 | echo "### Step 5: Installing agent-sandbox controller + extensions ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/provision-gke.sh | 160 | echo "### Step 6: Creating namespace '${NAMESPACE}' ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/teardown-gke.sh | 54 | echo "### Step 1: Deleting GKE cluster '${CLUSTER_NAME}' ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/teardown-gke.sh | 67 | echo "### Step 2: Deleting Filestore instances provisioned for the example ###" | CODE |
| LOW | examples/openclaw-fleet-gke/setup/teardown-gke.sh | 94 | echo "### Step 3: Deleting snapshot bucket gs://${SNAPSHOT_BUCKET} ###" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 395 | CODE | |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 220 | CODE | |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 281 | CODE | |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 584 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 195 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 336 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 494 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 103 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 174 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 684 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 823 | CODE | |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 521 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 166 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 296 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 450 | CODE | |
| LOW | …8s_agent_sandbox/test/unit/test_async_sandboxclient.py | 881 | CODE | |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 584 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 88 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 152 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 220 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 306 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 332 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 228 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 275 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 265 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/files/async_filesystem.py | 186 | CODE | |
| LOW | …c-sandbox-client/sandbox-router/test_sandbox_router.py | 1019 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 539 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 556 | CODE | |
| LOW | …ons/openhands/openhands_k8s_agent_sandbox/workspace.py | 310 | CODE | |
| LOW | test/e2e/clients/python/conftest.py | 103 | CODE | |
| LOW | test/e2e/clients/python/test_client.py | 553 | CODE | |
| LOW | test/stress/generate-report/generate_report.py | 163 | CODE | |
| LOW | test/stress/generate-report/download_results.py | 98 | CODE | |
| LOW | examples/multi-cluster-fleet/demo/claim-bench.py | 94 | CODE | |
| LOW | examples/multi-cluster-fleet/demo/claim-bench.py | 202 | CODE | |
| LOW | …multi-cluster-fleet/demo/watch-clusterprofile-drift.py | 288 | CODE | |
| LOW | examples/multi-cluster-fleet/demo/stress-e2e.py | 131 | CODE | |
| LOW | examples/multi-cluster-fleet/demo/stress-e2e.py | 280 | CODE | |
| LOW | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 238 | CODE | |
| LOW | …ti-cluster-fleet/python/agent_sandbox_fleet/planner.py | 566 | CODE | |
| LOW | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 409 | CODE | |
| LOW | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 923 | CODE | |
| LOW | examples/langchain/coding_agent.py | 365 | CODE | |
| LOW | examples/hpa-swp-scaling/create-claim.py | 36 | CODE | |
| LOW | examples/firecracker-sandbox/main.py | 111 | CODE | |
| LOW | examples/agent-sandbox-rl/tests/loadtest.py | 136 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1278 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1442 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1557 | CODE | |
| LOW | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 248 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/sources.py | 105 | CODE | |
| LOW | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 345 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 54 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 171 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 358 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 439 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 556 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 238 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 382 | CODE | |
| 18 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/analytics-tool/analytics-tool/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/gemini-cu-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/agent-sandbox-gymnasium/gymnasium-env/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/python-runtime-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/n8n-mcp/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/snapshots/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/lifecycle/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …nt/docs/volumes/volume-claim-template/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …/docs/getting_started/troubleshooting/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | examples/multi-cluster-fleet/demo/stress-e2e.py | 428 | # tick, dispatch stops at the deadline, and then the harness sits through | COMMENT |
| MEDIUM | …i-cluster-fleet/python/agent_sandbox_fleet/resolver.py | 413 | # Contexts already warned about, so a multi-cluster harness logs once per | COMMENT |
| MEDIUM | …/agent-sandbox-rl/tests/run_full_swebench_benchmark.py | 168 | # general load-test harness for repeated-tasks-per-image batches. | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/agent_sandbox_rl/config.py | 158 | # detail: whoever provisioned a warm pool chose its name, and a harness that | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1308 | # which is the failure the warning is for: a harness pointed at a cluster | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/examples/plan_capacity.py | 145 | sys.path.insert(0, tests_dir) # robust to cwd | CODE |
| MEDIUM | …amples/openclaw-fleet-gke/tools/fio-workspace-job.yaml | 1 | # I/O performance harness for the shared Filestore volume (test-checklist | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/write_file.go | 69 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/list_files.go | 59 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/read_file.go | 61 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | packages/sandboxd/pkg/server/process_test.go | 500 | // entry). Polling is robust to CI scheduling delays. | COMMENT |
| MEDIUM⚡ | dev/tools/flake_report_test.py | 145 | # Live dashboards emit '\ue000<build-id>', but be robust to a | COMMENT |
| MEDIUM | dev/tools/flake_report_test.py | 634 | # harness broke, not the tests. | COMMENT |
| MEDIUM | dev/tools/flake_report_test.py | 677 | # 4242 touched the harness: excluded. 4343 did not: counted. One | COMMENT |
| MEDIUM | dev/tools/flake_report_test.py | 684 | # Both PRs touching the harness: everything is PR-local. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | examples/python-runtime-sandbox/test_main.py | 104 | mock_popen.return_value.__enter__.return_value.communicate.assert_called_once_with(timeout=300.0) | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 86 | !object.spec.podTemplate.spec.volumes.exists(v, | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 97 | !object.spec.podTemplate.spec.volumes.exists(v, has(v.hostPath)) | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 157 | object.spec.podTemplate.spec.tolerations.exists(t, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 134 | # Create the initial sandbox to take the snapshot from | COMMENT |
| MEDIUM⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 375 | # Create a fresh sandbox to test suspend-resume flow on a brand new instance | COMMENT |
| MEDIUM | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 140 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | examples/multi-cluster-fleet/demo/run-xs-e2e.sh | 12 | # Create the GCS bucket + Workload Identity binding. | COMMENT |
| MEDIUM | examples/aider-sandbox/template.yaml | 33 | # Define the repository URL you want to automatically download here | COMMENT |
| MEDIUM | …etwork-policy-api-sandbox/scripts/01-create-cluster.sh | 16 | # Create the kind cluster with the default CNI (kube-network-policies runs | COMMENT |
| MEDIUM | …amples/demo-cilium-egress/scripts/01-create-cluster.sh | 16 | # Create a GKE Standard cluster WITHOUT Dataplane V2 so we can install upstream Cilium. | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 217 | # Define the scale of the distributed job. | COMMENT |
| MEDIUM | examples/gemini-cu-sandbox/run-test-kind.sh | 64 | # Create a temporary kubeconfig file for kind | COMMENT |
| MEDIUM | examples/policy/vap/secure-sandbox-policy.yaml | 14 | # Define a variable to check ALL container types: containers, initContainers, and ephemeralContainers. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 54 | def set_attribute(self, key: str, value: Any) -> None: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 79 | def set_tracer_provider(_: Any) -> None: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 87 | def set_span_in_context(span: Any, context: Any = None) -> None: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 44 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 49 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 174 | def _set_operating_mode(self, operating_mode: str) -> None: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ensions/snapshots/test/unit/test_podsnapshot_client.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 37 | __all__ = ["process_pb2", "process_pb2_grpc"] | CODE |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 26 | __all__ = [ | CODE |
| LOW | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 28 | __all__ = [ | CODE |
| LOW | …ions/mcp-server/k8s_agent_sandbox_mcp_server/server.py | 41 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ions/mcp-server/k8s_agent_sandbox_mcp_server/probes.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 24 | __all__ = [ | CODE |
| LOW | …ver/k8s_agent_sandbox_mcp_server/resources/__init__.py | 17 | __all__ = [ | CODE |
| LOW | …ions/openhands/openhands_k8s_agent_sandbox/__init__.py | 20 | __all__ = ["AgentSandboxWorkspace"] | CODE |
| LOW | …ents/deepagents_k8s_agent_sandbox/lifecycle_manager.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ns/deepagents/deepagents_k8s_agent_sandbox/__init__.py | 19 | __all__ = [ | CODE |
| LOW | …ions/openai/src/openai_agents_k8s_sandbox/transport.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rations/openai/src/openai_agents_k8s_sandbox/client.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ations/openai/src/openai_agents_k8s_sandbox/session.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | …tions/openai/src/openai_agents_k8s_sandbox/__init__.py | 26 | __all__ = [ | CODE |
| LOW | …ples/multi-cluster-fleet/python/tests/test_resolver.py | 53 | def set_assignments(self, data: dict[str, Any]) -> None: | CODE |
| LOW | …i-cluster-fleet/python/agent_sandbox_fleet/__init__.py | 44 | __all__ = [ | CODE |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1170 | def set_pool_replicas(self, image: str, replicas: int) -> None: | CODE |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 86 | __all__ = [ | CODE |
| LOW | examples/webmcp-bridge-sandbox/bridge.py | 42 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 274 | # Check if the sandbox actually exists in Kubernetes | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 869 | # Verify if the connection is active before sending the request | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 172 | # Check if Snapshot UID is present in the condition.message | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 228 | # Check if already deleted | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 69 | # Check if the cluster already exists | COMMENT |
| LOW | …ples/vscode-sandbox/overlays/kata-mshv/patch-kata.yaml | 8 | # Set runtimeClassName to use kata mshv runtime class | COMMENT |
| LOW | …mples/vscode-sandbox/overlays/gvisor/patch-gvisor.yaml | 8 | # Set runtimeClassName to use gVisor | COMMENT |
| LOW | examples/vscode-sandbox/overlays/kata/patch-kata.yaml | 8 | # Set runtimeClassName to use kata qemu class | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | dev/tools/shared/node.py | 172 | # Check if npm is already available in PATH | COMMENT |
| LOW | dev/tools/shared/node.py | 181 | # Check if we already have a local installation | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 103 | CODE | |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 228 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 146 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 173 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 200 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 227 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 254 | CODE | |
| LOW | …uster-fleet/python/agent_sandbox_fleet/fleet_member.py | 232 | CODE | |
| LOW | …-cluster-fleet/python/agent_sandbox_fleet/publisher.py | 86 | CODE | |
| LOW | …-cluster-fleet/python/agent_sandbox_fleet/inventory.py | 606 | CODE | |
| LOW | …-cluster-fleet/python/agent_sandbox_fleet/inventory.py | 322 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 1557 | CODE | |
| LOW | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 345 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/prepull.py | 67 | CODE | |
| LOW | dev/ci/shared/runner.py | 102 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 284 | Sends an HTTP request asynchronously to the sandbox with standard parameters. This method automatically resolve | STRING |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 824 | Sends an HTTP request to the sandbox with standard parameters. This method automatically resolves the gateway o | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/kata-aks/README.md | 168 | --from-literal=OPENAI_API_KEY="<your-api-key>" \ | CODE |
| HIGH | examples/sandboxed-tools/README.md | 201 | export GEMINI_API_KEY="your-api-key-here" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | clients/go/sandbox/client_test.go | 406 | setupWatchWithReactor(agentsCS, extensionsCS, readySandbox("placeholder")) | CODE |
| LOW⚡ | examples/openclaw-kata-aks-sandbox/README.md | 39 | Then open `http://localhost:18789/#token=dummy-token-for-sandbox`. The token fragment is required — the gateway rejects | CODE |
| LOW | …enclaw-kata-aks-sandbox/openclaw-sandbox-kata-aks.yaml | 62 | value: "dummy-token-for-sandbox" | CODE |
| LOW | examples/openclaw-fleet-gke/20-openclaw-template.yaml | 99 | value: "dummy-token-for-sandbox" | CODE |
| LOW | examples/openclaw-gvisor-sandbox/run-test-kind.sh | 71 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/README.md | 66 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/README.md | 252 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/openclaw-template.yaml | 50 | value: "dummy-token-for-sandbox" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …pi-sandbox/manifests/80-cnp-baseline-default-deny.yaml | 7 | # In this example that is a plain Sandbox created without a SandboxTemplate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sandbox-router/dev/smoke-test/run.sh | 27 | # Usage: | COMMENT |
| LOW | examples/multi-cluster-fleet/demo/run-xs-e2e.sh | 18 | # Usage: | COMMENT |
| LOW | examples/openclaw-fleet-gke/run-test-gke.sh | 30 | # Usage: | COMMENT |
| LOW | examples/openclaw-fleet-gke/70-rolling-update.sh | 33 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/pull_request_template.md | 19 | Note: Automated release notes are generated by Gemini using the PR description in the first section. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …8s_agent_sandbox/test/unit/test_async_sandboxclient.py | 1510 | CODE | |
| MEDIUM | …t/k8s_agent_sandbox/test/unit/test_async_k8s_helper.py | 405 | CODE |