agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).
This report presents the forensic synthetic code analysis of kubernetes-sigs/agent-sandbox, a Go project with 3,672 GitHub stars. SynthScan v2.0 examined 233,366 lines of code across 1176 source files, recording 2494 pattern matches distributed across 22 syntactic categories. The overall adjusted score of 12.5 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 2494 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 127 | def test_suspend_resume_new_sandbox(client, warmpool_name: str, namespace: str) -> None: | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 174 | def test_timestamp_based_listing_and_deletion(sandbox, creation_time, suspend_third_snapshot_uid): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 238 | def test_restore_from_snapshot(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 257 | def test_restore_fails_on_running_sandbox(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 268 | def test_suspend_resume_restore_cycle(sandbox) -> tuple[str, str]: | CODE |
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 395 | def display_prometheus_latency_metrics(): | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 133 | def test_agent_without_api_key(self): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 165 | def test_explicit_close_connection_and_persistence(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 189 | def test_creation_get_and_list_sandboxes(client: SandboxClient, warmpool_name: str, namespace: str) -> tuple[Sandbox, Sa | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 221 | def test_termination_and_deletion(client: SandboxClient, sandbox: Sandbox, sandbox2: Sandbox, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 336 | def test_volume_claim_templates(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 378 | def get_sandbox_claim_warmpool_name(self, claim_name: str, namespace: str) -> str: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 43 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 56 | def construct_sandbox_claim_lifecycle_spec(shutdown_after_seconds: int) -> dict[str, str]: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 157 | def is_valid_gateway_hostname(s: str) -> bool: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 185 | def extract_sandbox_name_hash(sandbox_object: dict[str, Any]) -> str | None: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 196 | def construct_sandbox_claim_env_spec(env: Mapping[str, str] | None) -> list[SandboxClaimEnvVar]: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 46 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 83 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 100 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 137 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 238 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 354 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 400 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 46 | def test_connect_returns_correct_dns_url(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 50 | def test_connect_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 55 | def test_connect_is_idempotent(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 58 | def test_does_not_inject_router_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 61 | def test_verify_connection_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 64 | def test_close_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 67 | def test_connect_uses_pod_ip_when_callable_provided(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 72 | def test_connect_falls_back_to_dns_when_callable_returns_none(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 77 | def test_connect_uses_dns_when_no_callable(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 82 | def test_connect_pod_ip_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 87 | def test_connect_caches_pod_ip_until_close(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 129 | def test_direct_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 133 | def test_gateway_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 140 | def test_local_tunnel_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 157 | def test_post_requests_are_not_retried(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 167 | def test_selects_in_cluster_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 172 | def test_selects_direct_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 177 | def test_raises_on_unknown_config_type(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 188 | def _make_connector_with_strategy(self, strategy, config): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 235 | def test_timeout_header_is_sent_for_router_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 247 | def test_timeout_tuple_uses_last_value_for_router_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 259 | def test_timeout_tuple_without_read_timeout_does_not_send_header(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 271 | def test_unsupported_timeout_does_not_send_header(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 283 | def test_timeout_header_is_not_sent_for_in_cluster_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 295 | def test_in_cluster_url_is_pod_dns(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 307 | def test_allow_redirects_is_false(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 318 | def test_allow_redirects_in_kwargs_popped(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 329 | def test_redirect_raises_error(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 21 | def test_extract_sandbox_name_hash_empty(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 30 | def test_extract_sandbox_name_hash_single(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 39 | def test_extract_sandbox_name_hash_multi(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 48 | def test_extract_sandbox_name_hash_extra_whitespace(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 57 | def test_extract_sandbox_name_hash_not_included(self): | CODE |
| LOW⚡ | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 66 | def test_extract_sandbox_name_hash_no_status(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_lifecycle.py | 25 | def test_builds_correct_lifecycle_dict(self, mock_datetime): | CODE |
| LOW⚡ | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 31 | def test_env_var_model_serializes_container_name_alias(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| 885 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | codegen.go | 1 | // Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | codegen.go | 21 | //go:generate go tool -modfile=tools.mod sigs.k8s.io/controller-tools/cmd/controller-gen object crd:maxDescLen=0 paths=. | COMMENT |
| LOW | clients/go/sandbox/tracing_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/podtunnel.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandboxd_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/gateway.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files.go | 161 | COMMENT | |
| LOW | clients/go/sandbox/tracing.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 61 | COMMENT | |
| LOW | clients/go/sandbox/options.go | 81 | // SandboxdGRPCPort is the pod port of sandboxd's gRPC ProcessService. | COMMENT |
| LOW | clients/go/sandbox/options.go | 121 | COMMENT | |
| LOW | clients/go/sandbox/options.go | 141 | MaxDownloadSize int64 | COMMENT |
| LOW | clients/go/sandbox/options.go | 161 | COMMENT | |
| LOW | clients/go/sandbox/tunnel.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/types.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/strategy.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client.go | 161 | // trackOrAdoptRace resolves the registry race that both CreateSandbox and | COMMENT |
| LOW | clients/go/sandbox/connector.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/testmain_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/connector_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/integration_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client_test.go | 421 | c.mu.Unlock() | COMMENT |
| LOW | clients/go/sandbox/commands.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands.go | 41 | log logr.Logger | COMMENT |
| LOW | clients/go/sandbox/k8s.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/basic/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/gateway/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/metrics.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …hon/agentic-sandbox-client/k8s_agent_sandbox/models.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/constants.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …entic-sandbox-client/k8s_agent_sandbox/pod_metadata.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/metrics_utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/exceptions.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ndbox-client/k8s_agent_sandbox/test/unit/test_utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_lifecycle.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| 751 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 381 | except Exception as e: | CODE |
| LOW⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 386 | except Exception as metrics_err: | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 36 | except Exception as e: | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 484 | except Exception as e: | STRING |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 563 | except Exception as e: | STRING |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 184 | except Exception: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 224 | except Exception as e: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 303 | except Exception as e: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 320 | except Exception as e: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 209 | except Exception as e: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 182 | except Exception as e: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 144 | except Exception: | CODE |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 185 | except Exception as e: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 42 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 124 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 208 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 224 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 325 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 341 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 485 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 509 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 580 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 135 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 301 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 362 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 375 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 397 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 411 | except Exception as e: | CODE |
| MEDIUM | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 123 | def __aexit__(self, exc_type, exc_val, exc_tb) -> None: | CODE |
| MEDIUM | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 394 | def _delete_one(ns, claim_name): | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 146 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 196 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 232 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 244 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 273 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 284 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 360 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 381 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 467 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 136 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 204 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 264 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 351 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 209 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 251 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 385 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 500 | except Exception as e: | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 169 | except Exception as ex: | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 181 | except Exception as e: | CODE |
| LOW | …box-client/k8s_agent_sandbox/files/async_filesystem.py | 109 | except Exception as e: | CODE |
| LOW | …-client/k8s_agent_sandbox/commands/command_executor.py | 64 | except Exception as e: | CODE |
| LOW | …t/k8s_agent_sandbox/commands/async_command_executor.py | 62 | except Exception as e: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 635 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 644 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 658 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 735 | except Exception as exc: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 820 | except Exception as e: | CODE |
| LOW | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 148 | except Exception as exc: | CODE |
| LOW | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 189 | except Exception as e: | CODE |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/provider.py | 469 | except Exception as e: | CODE |
| 157 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/prowjob_manual_run.md | 46 | #### Step 1: Trigger the Job | COMMENT |
| LOW | docs/prowjob_manual_run.md | 55 | #### Step 2: Identify the Pod | COMMENT |
| LOW | docs/prowjob_manual_run.md | 66 | #### Step 3: Monitor Execution | COMMENT |
| LOW | docs/prowjob_manual_run.md | 75 | #### Step 4: Verify Results | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3563 | // Step 1: First Ready transition. Metrics recorded, Patch fails. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3575 | // Step 2: Mid-flap — claim went not-Ready, but was previously Ready. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3591 | // Step 3: Flap back to Ready — newReady=True, oldReady=False. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4379 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4383 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4385 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4389 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5403 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5439 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 27 | ## Step 1: Run the Setup Script | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 34 | ## Step 2: Install the Agent Sandbox Controller | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 38 | ## Step 3: Deploy an Agent Sandbox | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 67 | ## Step 4: Verify the Sandbox is Running | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 83 | ## Step 5: Verify the Isolation | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 62 | # Step 1: Verify KVM support | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 92 | # Step 2: Install Kata Containers with Firecracker via kata-deploy | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 115 | # Step 3: Register the kata-fc RuntimeClass | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 134 | # Step 4: Label nodes | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 156 | # Step 5: Verify installation | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 64 | echo "### Step 1: Verifying KVM support ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 87 | echo "### Step 1: Skipped (--skip-kvm-check) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 95 | echo "### Step 2: Installing Kata Containers (kata-deploy) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 111 | echo "### Step 2: Skipped (--no-install) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 117 | echo "### Step 3: Registering RuntimeClass '${RUNTIME_CLASS_NAME}' ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 137 | echo "### Step 4: Labeling all Linux nodes with ${NODE_LABEL_KEY}=${NODE_LABEL_VALUE} ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 152 | echo "### Step 4: Skipped (--no-label) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 158 | echo "### Step 5: Verifying installation ###" | CODE |
| LOW | examples/ray-integration/README.md | 162 | ### Step 1: Deploy the GKE Gateway | COMMENT |
| LOW | examples/ray-integration/README.md | 173 | ### Step 2: Wait for the Public IP | COMMENT |
| LOW | examples/ray-integration/README.md | 186 | ### Step 3: Upgrade the Python Code | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 48 | ### Step 1: Prepare and Push the Sandbox Image | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 67 | ### Step 2: Deploy Infrastructure | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 81 | ### Step 3: Initialize KubeRay Operator | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 95 | ### Step 4: Apply RBAC Permissions for the Ray Workers | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 105 | ### Step 5: Deploy Sandbox WarmPool Infrastructure | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 114 | ### Step 6: Create the RL Training Source ConfigMap | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 121 | ### Step 7: Submit the Production RayJob | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 129 | ### Step 8: Verify the E2E Execution Logs | COMMENT |
| LOW | examples/quickstart/gvisor.md | 11 | ## Step 1: Install gVisor Runtime | COMMENT |
| LOW | examples/quickstart/gvisor.md | 15 | ## Step 2: Create KIND Cluster with gVisor | COMMENT |
| LOW | examples/quickstart/README.md | 26 | ## Step 1: Clone the Agent Sandbox Repository | COMMENT |
| LOW | examples/quickstart/README.md | 43 | ## Step 2: Create Kubernetes Cluster | COMMENT |
| LOW | examples/quickstart/README.md | 56 | ## Step 3: Install Agent Sandbox Controller | COMMENT |
| LOW | examples/quickstart/README.md | 76 | ## Step 4: Apply SandboxTemplate | COMMENT |
| LOW | examples/quickstart/README.md | 90 | ## Step 5: Create SandboxWarmPool | COMMENT |
| LOW | examples/quickstart/README.md | 145 | ## Step 6: Build and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 159 | ## Step 7: Load Router Image and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 224 | ## Step 8: Install Python SDK | COMMENT |
| LOW | examples/quickstart/README.md | 236 | ## Step 9: Test the Setup | COMMENT |
| LOW | examples/quickstart/README.md | 274 | ## Step 10: Cleanup | COMMENT |
| LOW | examples/quickstart/kata-containers.md | 18 | ## Step 1: Start minikube with Containerd | COMMENT |
| LOW | examples/quickstart/kata-containers.md | 32 | ## Step 2: Install Kata Containers using Helm | COMMENT |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 60 | echo "### Step 1: Creating/Checking the Resource Group ###" | CODE |
| 59 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 17 | CODE | |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 22 | CODE | |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 24 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 15 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 17 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 30 | CODE | |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 30 | CODE | |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 34 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 17 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 18 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 19 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 23 | CODE | |
| LOW | …t/k8s_agent_sandbox/test/unit/test_command_executor.py | 20 | CODE | |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 21 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/test/unit/test_sandboxd.py | 169 | CODE | |
| LOW | …ent/k8s_agent_sandbox/_proto/process/v1/process_pb2.py | 39 | CODE | |
| LOW | …k8s_agent_sandbox/gke_extensions/snapshots/__init__.py | 15 | CODE | |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 22 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 17 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 35 | CODE | |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 35 | CODE | |
| LOW | …-client/k8s_agent_sandbox/commands/command_executor.py | 15 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 15 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 16 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 17 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 23 | CODE | |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 24 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/provider.py | 84 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | clients/integrations/mcp-server/tests/unit/conftest.py | 15 | CODE | |
| LOW | …-server/tests/unit/test_settings/test_env_variables.py | 15 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 15 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 16 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 17 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 18 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 19 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 20 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 21 | CODE | |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 22 | CODE | |
| LOW | …ver/k8s_agent_sandbox_mcp_server/resources/__init__.py | 15 | CODE | |
| 92 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 101 | # ── Gymnasium API ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 183 | # ── Internals ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 41 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 43 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/firecracker-sandbox/test_client.py | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/firecracker-sandbox/test_client.py | 65 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 136 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/test_client.py | 138 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 62 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 148 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/firecracker-sandbox/main.py | 150 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_local.py | 84 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_local.py | 86 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 83 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 85 | # ========================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 77 | # ============================================================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 80 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 19 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 26 | # ============================================================================== | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 34 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/envd-sandbox/test_client.py | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | examples/envd-sandbox/test_client.py | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/envd-sandbox/test_client.py | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 57 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 59 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 260 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | dev/tools/push_images_test.py | 262 | # --------------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 80 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 80 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | …erver/k8s_agent_sandbox_mcp_server/tools/list_files.py | 36 | # thousands of entries being serialized into an LLM's context window, | COMMENT |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 48 | //+kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 467 | //+kubebuilder:scaffold:builder | COMMENT |
| MEDIUM | .agents/skills/triage-issues/evals/eval_runner.py | 137 | # Default P3 (Nice-to-have, cleanup, refactor, test scaffolding) | COMMENT |
| MEDIUM | olm/config/scorecard/kustomization.yaml | 18 | # +kubebuilder:scaffold:patches | COMMENT |
| MEDIUM | docs/keps/359-refactor-python-sdk/README.md | 129 | 2. Sandbox Manager POC: https://github.com/SHRUTI6991/agent-sandbox-initial-playing/tree/two-clients/clients/python/agen | CODE |
| MEDIUM | examples/kata-aks/router.yaml | 85 | # See clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | examples/agent-sandbox-rl/docs/design.md | 1 | # Design: `agent-sandbox-rl` — generic, multi-cluster batch orchestration for RL on Agent Sandbox | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/examples/rl_integration.md | 186 | ### Training loop (agentic GRPO): warm + recycle env | COMMENT |
| MEDIUM | …emo-cilium-egress/manifests/router/sandbox-router.yaml | 2 | # Adapted from clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/ray-integration/README.md | 54 | (Note: Ensure you have built and replaced the IMAGE_PLACEHOLDER in sandbox_router.yaml as per the [router documentation] | CODE |
| MEDIUM | examples/ray-integration/direct-proxy/README.md | 30 | # We use e2-standard-4 (4 vCPU, 16GB RAM) to ensure the Ray orchestration processes have enough headroom. | COMMENT |
| MEDIUM | examples/quickstart/README.md | 315 | - [Python SDK Source](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/) | CODE |
| MEDIUM | examples/sandboxed-tools/main.go | 156 | // Session represents an agentic "chat" session (a stream of messages / tools calls etc). | COMMENT |
| MEDIUM | site/content/docs/filesystem/_index.md | 16 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/_index.md | 52 | The full template (with isolation runtime options) lives at [`clients/python/agentic-sandbox-client/python-sandbox-templ | CODE |
| MEDIUM | site/content/docs/filesystem/upload-download/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/list-files/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/read-write/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ent/docs/use-cases/kata-containers-isolation/_index.md | 73 | With Kata runtimes, direct pod port-forwarding is not compatible. Use the [Sandbox Router](https://github.com/kubernetes | CODE |
| MEDIUM | site/content/docs/use-cases/gvisor-isolation/_index.md | 62 | With gVisor or Kata runtimes, direct pod port-forwarding is not compatible. Use the [Sandbox Router](https://github.com/ | CODE |
| MEDIUM | site/content/docs/use-cases/computer-use/_index.md | 35 | 3. **Programmatic control** — use the [`agent-sandbox` Python SDK](https://github.com/agent-infra/sandbox/tree/main/sdk/ | CODE |
| MEDIUM | site/content/docs/sandbox/metrics/_index.md | 17 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/sandbox/snapshots/_index.md | 21 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 17 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …te/content/docs/sandbox/custom_sandbox/image/_index.md | 11 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 14 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 15 | - A `SandboxWarmPool` in the target namespace (for example `python-sandbox-pool` backed by `python-sandbox-template`). S | CODE |
| MEDIUM | …content/docs/getting_started/troubleshooting/_index.md | 20 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 51 | curl -sSL https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 59 | curl -sSL https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | site/data/link_replacements.yaml | 8 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM | site/data/link_replacements.yaml | 23 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/)' | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 38 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 43 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 48 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/tes | CODE |
| MEDIUM | site/data/link_replacements.yaml | 68 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/GCP | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/analytics-tool/analytics-tool/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/gemini-cu-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/agent-sandbox-gymnasium/gymnasium-env/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/python-runtime-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/n8n-mcp/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/snapshots/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/lifecycle/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …nt/docs/volumes/volume-claim-template/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …/docs/getting_started/troubleshooting/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/analytics-tool/analytics-tool/main.py | 0 | executes a shell command inside the sandbox and returns its output. uses shlex.split for security to prevent shell injec | STRING |
| HIGH | examples/python-runtime-sandbox/main.py | 0 | executes a shell command inside the sandbox and returns its output. uses shlex.split for security to prevent shell injec | STRING |
| HIGH | examples/n8n-mcp/source/server.py | 0 | executes a shell command inside the sandbox and returns its output. uses shlex.split for security to prevent shell injec | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3563 | // Step 1: First Ready transition. Metrics recorded, Patch fails. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3575 | // Step 2: Mid-flap — claim went not-Ready, but was previously Ready. | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 3591 | // Step 3: Flap back to Ready — newReady=True, oldReady=False. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4379 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4383 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4385 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 4389 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5403 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 5439 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 62 | # Step 1: Verify KVM support | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 92 | # Step 2: Install Kata Containers with Firecracker via kata-deploy | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 115 | # Step 3: Register the kata-fc RuntimeClass | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 134 | # Step 4: Label nodes | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 156 | # Step 5: Verify installation | COMMENT |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 64 | echo "### Step 1: Verifying KVM support ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 87 | echo "### Step 1: Skipped (--skip-kvm-check) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 95 | echo "### Step 2: Installing Kata Containers (kata-deploy) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 111 | echo "### Step 2: Skipped (--no-install) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 117 | echo "### Step 3: Registering RuntimeClass '${RUNTIME_CLASS_NAME}' ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 137 | echo "### Step 4: Labeling all Linux nodes with ${NODE_LABEL_KEY}=${NODE_LABEL_VALUE} ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 152 | echo "### Step 4: Skipped (--no-label) ###" | CODE |
| LOW⚡ | examples/firecracker-sandbox/setup.sh | 158 | echo "### Step 5: Verifying installation ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 60 | echo "### Step 1: Creating/Checking the Resource Group ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 66 | echo "### Step 2: Creating/Checking the AKS Cluster ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 97 | echo "### Step 3: Getting Cluster Credentials ###" | CODE |
| LOW⚡ | examples/kata-aks-sandbox/setup.sh | 100 | echo "### Step 4: Verifying the Kata RuntimeClass ###" | CODE |
| LOW | …-swap/python-density/run_pythonsandbox_density_test.sh | 50 | # Step 1: Pre-stage MovieLens dataset ONCE on all target nodes under /tmp/movielens | COMMENT |
| LOW | …-swap/python-density/run_pythonsandbox_density_test.sh | 84 | # Step 2: Execute multi-density benchmark matrix across target node pools | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 395 | CODE | |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 154 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 173 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 285 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 411 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 86 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 157 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 444 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 517 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 152 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 261 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 385 | CODE | |
| LOW | …8s_agent_sandbox/test/unit/test_async_sandboxclient.py | 596 | CODE | |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 577 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 83 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 147 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 215 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 299 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 325 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 222 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 269 | CODE | |
| LOW | …c-sandbox-client/sandbox-router/test_sandbox_router.py | 1019 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 539 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 556 | CODE | |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 65 | CODE | |
| LOW | test/stress/generate-report/generate_report.py | 163 | CODE | |
| LOW | test/stress/generate-report/download_results.py | 98 | CODE | |
| LOW | examples/langchain/coding_agent.py | 365 | CODE | |
| LOW | examples/hpa-swp-scaling/create-claim.py | 36 | CODE | |
| LOW | examples/firecracker-sandbox/main.py | 111 | CODE | |
| LOW | examples/agent-sandbox-rl/tests/loadtest.py | 136 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 906 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 968 | CODE | |
| LOW | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 248 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/sources.py | 105 | CODE | |
| LOW | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 344 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 36 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 124 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 350 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 238 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 382 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 300 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 456 | CODE | |
| LOW | …s/agent-sandbox-rl/agent_sandbox_rl/adapters/r2egym.py | 91 | CODE | |
| LOW | examples/hermes-agents-as-a-service/gateway/gateway.py | 243 | CODE | |
| LOW | examples/hermes-agents-as-a-service/gateway/gateway.py | 318 | CODE | |
| LOW | examples/gke-swap/python-density/parse_telemetry.py | 23 | CODE | |
| LOW | dev/tools/mutate_yaml.py | 35 | CODE | |
| LOW | dev/tools/shared/headers.py | 161 | CODE | |
| LOW | dev/tools/shared/headers.py | 202 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …ents/integrations/nemo-gym/tests/unit/test_provider.py | 357 | f"cd /work || exit {SANDBOX_RUNTIME_RETURN_CODE}", | CODE |
| HIGH | …ents/integrations/nemo-gym/tests/unit/test_provider.py | 449 | assert script == f"mkdir -p /data/out && cp {staging} /data/out/artifact.bin && rm -f {staging}" | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 99 | self.run("stty -echo 2>/dev/null; PS1=''; PROMPT_COMMAND=''; true", | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 106 | f'echo "PRISTINE=$(git -C {tb} rev-parse pristine 2>/dev/null)"', | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 107 | f'echo "HEAD=$(git -C {tb} rev-parse HEAD 2>/dev/null)"', | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 118 | f'echo "H:$(basename "$f")" && cat "$f"; done 2>/dev/null) ' | CODE |
| HIGH | examples/agent-sandbox-rl/agent_sandbox_rl/recycle.py | 185 | 'kill -9 "$p" 2>/dev/null; done; ') | CODE |
| HIGH | …agent-sandbox-rl/agent_sandbox_rl/adapters/swebench.py | 36 | " || ls -d /testbed 2>/dev/null || ls /", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | examples/python-runtime-sandbox/test_main.py | 96 | mock_popen.return_value.__enter__.return_value.communicate.assert_called_once_with(timeout=300.0) | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 86 | !object.spec.podTemplate.spec.volumes.exists(v, | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 97 | !object.spec.podTemplate.spec.volumes.exists(v, has(v.hostPath)) | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 157 | object.spec.podTemplate.spec.tolerations.exists(t, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 134 | # Create the initial sandbox to take the snapshot from | COMMENT |
| MEDIUM⚡ | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 375 | # Create a fresh sandbox to test suspend-resume flow on a brand new instance | COMMENT |
| MEDIUM | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 140 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | examples/aider-sandbox/template.yaml | 32 | # Define the repository URL you want to automatically download here | COMMENT |
| MEDIUM | …amples/demo-cilium-egress/scripts/01-create-cluster.sh | 16 | # Create a GKE Standard cluster WITHOUT Dataplane V2 so we can install upstream Cilium. | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 218 | # Define the scale of the distributed job. | COMMENT |
| MEDIUM | examples/gemini-cu-sandbox/run-test-kind.sh | 64 | # Create a temporary kubeconfig file for kind | COMMENT |
| MEDIUM | examples/policy/vap/secure-sandbox-policy.yaml | 14 | # Define a variable to check ALL container types: containers, initContainers, and ephemeralContainers. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ensions/snapshots/test/unit/test_podsnapshot_client.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ox-client/k8s_agent_sandbox/commands/_process_stubs.py | 37 | __all__ = ["process_pb2", "process_pb2_grpc"] | CODE |
| LOW | …ions/gymnasium/k8s_agent_sandbox_gymnasium/__init__.py | 26 | __all__ = [ | CODE |
| LOW | …gymnasium/k8s_agent_sandbox_gymnasium/gymnasium_env.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ations/nemo-gym/nemo_gym_k8s_agent_sandbox/__init__.py | 28 | __all__ = [ | CODE |
| LOW | …ions/mcp-server/k8s_agent_sandbox_mcp_server/server.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-server/k8s_agent_sandbox_mcp_server/tools/__init__.py | 24 | __all__ = [ | CODE |
| LOW | …ver/k8s_agent_sandbox_mcp_server/resources/__init__.py | 17 | __all__ = [ | CODE |
| LOW | …ents/deepagents_k8s_agent_sandbox/lifecycle_manager.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ns/deepagents/deepagents_k8s_agent_sandbox/__init__.py | 19 | __all__ = [ | CODE |
| LOW | …ons/deepagents/deepagents_k8s_agent_sandbox/sandbox.py | 47 | logger = logging.getLogger(__name__) | CODE |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 743 | def set_pool_replicas(self, image: str, replicas: int) -> None: | CODE |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 85 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 218 | # Check if the sandbox actually exists in Kubernetes | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 559 | # Verify if the connection is active before sending the request | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 167 | # Check if Snapshot UID is present in the condition.message | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 223 | # Check if already deleted | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 69 | # Check if the cluster already exists | COMMENT |
| LOW | …ples/vscode-sandbox/overlays/kata-mshv/patch-kata.yaml | 8 | # Set runtimeClassName to use kata mshv runtime class | COMMENT |
| LOW | …mples/vscode-sandbox/overlays/gvisor/patch-gvisor.yaml | 8 | # Set runtimeClassName to use gVisor | COMMENT |
| LOW | examples/vscode-sandbox/overlays/kata/patch-kata.yaml | 8 | # Set runtimeClassName to use kata qemu class | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/agent-sandbox-rl/tests/run_full_swebench_benchmark.py | 168 | # general load-test harness for repeated-tasks-per-image batches. | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/examples/plan_capacity.py | 145 | sys.path.insert(0, tests_dir) # robust to cwd | CODE |
| MEDIUM | examples/sandboxed-tools/pkg/tools/write_file.go | 69 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/list_files.go | 59 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/read_file.go | 61 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 93 | CODE | |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 140 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 146 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 173 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 200 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 227 | CODE | |
| LOW | …8s_agent_sandbox/_proto/process/v1/process_pb2_grpc.py | 254 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 968 | CODE | |
| LOW | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 344 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/prepull.py | 67 | CODE | |
| LOW | dev/ci/shared/runner.py | 102 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 155 | Sends an HTTP request asynchronously to the sandbox with standard parameters. This method automatically resolve | STRING |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 518 | Sends an HTTP request to the sandbox with standard parameters. This method automatically resolves the gateway o | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/kata-aks/README.md | 168 | --from-literal=OPENAI_API_KEY="<your-api-key>" \ | CODE |
| HIGH | examples/sandboxed-tools/README.md | 68 | export GEMINI_API_KEY="your-api-key-here" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | clients/go/sandbox/client_test.go | 376 | setupWatchWithReactor(agentsCS, extensionsCS, readySandbox("placeholder")) | CODE |
| LOW | sandbox-router/authz/authorizer_test.go | 39 | Username: "user@example.com", | CODE |
| LOW | sandbox-router/authz/authorizer_test.go | 48 | Username: "user@example.com", | CODE |
| LOW⚡ | examples/openclaw-kata-aks-sandbox/README.md | 39 | Then open `http://localhost:18789/#token=dummy-token-for-sandbox`. The token fragment is required — the gateway rejects | CODE |
| LOW | …enclaw-kata-aks-sandbox/openclaw-sandbox-kata-aks.yaml | 62 | value: "dummy-token-for-sandbox" | CODE |
| LOW | examples/openclaw-gvisor-sandbox/run-test-kind.sh | 71 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/README.md | 66 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/README.md | 252 | sed "s/dummy-token-for-sandbox/${TOKEN}/g" openclaw-template.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-gvisor-sandbox/openclaw-template.yaml | 50 | value: "dummy-token-for-sandbox" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/pull_request_template.md | 19 | Note: Automated release notes are generated by Gemini using the PR description in the first section. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sandbox-router/dev/smoke-test/run.sh | 27 | # Usage: | COMMENT |