agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.
This report presents the forensic synthetic code analysis of kubernetes-sigs/agent-sandbox, a Go project with 3,153 GitHub stars. SynthScan v2.0 examined 172,719 lines of code across 835 source files, recording 1634 pattern matches distributed across 22 syntactic categories. The overall adjusted score of 10.8 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1634 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 127 | def test_suspend_resume_new_sandbox(client, warmpool_name: str, namespace: str) -> None: | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 174 | def test_timestamp_based_listing_and_deletion(sandbox, creation_time, suspend_third_snapshot_uid): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 238 | def test_restore_from_snapshot(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 257 | def test_restore_fails_on_running_sandbox(sandbox, snapshot_uid: str): | CODE |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 268 | def test_suspend_resume_restore_cycle(sandbox) -> tuple[str, str]: | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 133 | def test_agent_without_api_key(self): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 165 | def test_explicit_close_connection_and_persistence(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 189 | def test_creation_get_and_list_sandboxes(client: SandboxClient, warmpool_name: str, namespace: str) -> tuple[Sandbox, Sa | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 221 | def test_termination_and_deletion(client: SandboxClient, sandbox: Sandbox, sandbox2: Sandbox, namespace: str): | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 287 | def test_volume_claim_templates(client: SandboxClient, warmpool_name: str, namespace: str): | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 364 | def get_sandbox_claim_warmpool_name(self, claim_name: str, namespace: str) -> str: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 39 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 22 | def construct_sandbox_claim_lifecycle_spec(shutdown_after_seconds: int) -> dict[str, str]: | CODE |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 123 | def is_valid_gateway_hostname(s: str) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 42 | def _router_timeout_header_value(timeout) -> str | None: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 79 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 96 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 133 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 231 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 276 | def should_inject_router_headers(self) -> bool: | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 46 | def test_connect_returns_correct_dns_url(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 50 | def test_connect_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 55 | def test_connect_is_idempotent(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 58 | def test_does_not_inject_router_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 61 | def test_verify_connection_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 64 | def test_close_does_not_raise(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 67 | def test_connect_uses_pod_ip_when_callable_provided(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 72 | def test_connect_falls_back_to_dns_when_callable_returns_none(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 77 | def test_connect_uses_dns_when_no_callable(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 82 | def test_connect_pod_ip_uses_custom_port(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 87 | def test_connect_caches_pod_ip_until_close(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 129 | def test_direct_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 133 | def test_gateway_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 140 | def test_local_tunnel_injects_headers(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 157 | def test_selects_in_cluster_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 162 | def test_selects_direct_strategy(self): | CODE |
| LOW⚡ | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 167 | def test_raises_on_unknown_config_type(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 178 | def _make_connector_with_strategy(self, strategy, config): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 225 | def test_timeout_header_is_sent_for_router_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 237 | def test_timeout_tuple_uses_last_value_for_router_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 249 | def test_timeout_tuple_without_read_timeout_does_not_send_header(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 261 | def test_unsupported_timeout_does_not_send_header(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 273 | def test_timeout_header_is_not_sent_for_in_cluster_requests(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 285 | def test_in_cluster_url_is_pod_dns(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 297 | def test_allow_redirects_is_false(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 308 | def test_allow_redirects_in_kwargs_popped(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 319 | def test_redirect_raises_error(self): | CODE |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_lifecycle.py | 25 | def test_builds_correct_lifecycle_dict(self, mock_datetime): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 28 | def test_labels_and_annotations_coexist_in_manifest(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 44 | def test_labels_only_no_annotations(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 58 | def test_no_labels_no_annotations(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 69 | def test_created_by_label_override_rejected(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 82 | def test_lifecycle_included_in_manifest(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 99 | def test_no_lifecycle_omits_key(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 109 | def test_pod_metadata_included_in_manifest(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 124 | def test_no_pod_metadata_omits_key(self, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 141 | def test_resolve_sandbox_name_template_not_found(self, mock_watch_class, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 170 | def test_resolve_sandbox_name_deleted_event(self, mock_watch_class, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 222 | def test_wait_for_gateway_ip_valid_ip(self, mock_watch_class, mock_config, mock_api_cls, mock_core_cls): | CODE |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 241 | def test_wait_for_gateway_ip_valid_hostname(self, mock_watch_class, mock_config, mock_api_cls, mock_core_cls): | CODE |
| 540 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | codegen.go | 1 | // Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | codegen.go | 21 | //go:generate go tool -modfile=tools.mod sigs.k8s.io/controller-tools/cmd/controller-gen object crd:maxDescLen=0 paths=. | COMMENT |
| LOW | clients/go/sandbox/tracing_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/gateway.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/tracing.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/options.go | 81 | COMMENT | |
| LOW | clients/go/sandbox/options.go | 121 | // RestConfig overrides the Kubernetes REST config. If nil, the client first | COMMENT |
| LOW | clients/go/sandbox/tunnel.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/types.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/strategy.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/connector.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/testmain_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/files_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/connector_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/ip_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/sandbox.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/integration_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/client_test.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/commands.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/sandbox/k8s.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/basic/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | clients/go/examples/gateway/main.go | 1 | // Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/metrics.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …hon/agentic-sandbox-client/k8s_agent_sandbox/models.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/constants.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …entic-sandbox-client/k8s_agent_sandbox/pod_metadata.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/exceptions.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_connector.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …x-client/k8s_agent_sandbox/test/unit/test_lifecycle.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …8s_agent_sandbox/test/unit/test_async_sandboxclient.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …sandbox-client/k8s_agent_sandbox/test/unit/__init__.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …-client/k8s_agent_sandbox/test/unit/test_filesystem.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …t/k8s_agent_sandbox/test/unit/test_command_executor.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …t/k8s_agent_sandbox/test/unit/test_async_k8s_helper.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_sandbox.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …_agent_sandbox/test/unit/test_lifecycle_integration.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 1 | # Copyright 2026 The Kubernetes Authors. | COMMENT |
| LOW | …andbox-client/k8s_agent_sandbox/extensions/__init__.py | 1 | # Copyright 2025 The Kubernetes Authors. | COMMENT |
| 482 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 381 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 36 | except Exception as e: | CODE |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 432 | except Exception as e: | STRING |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 511 | except Exception as e: | STRING |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 177 | except Exception: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 217 | except Exception as e: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 296 | except Exception as e: | CODE |
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 313 | except Exception as e: | CODE |
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 199 | except Exception as e: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/async_sandbox.py | 135 | except Exception as e: | CODE |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 144 | except Exception: | CODE |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 184 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 120 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 201 | except Exception: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 217 | except Exception as e: | CODE |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 399 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 136 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 292 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 353 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 366 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 388 | except Exception as e: | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 402 | except Exception as e: | CODE |
| MEDIUM | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 124 | def __aexit__(self, exc_type, exc_val, exc_tb) -> None: | CODE |
| MEDIUM | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 385 | def _delete_one(ns, claim_name): | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 140 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 188 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 224 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 236 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 266 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 277 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 351 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 372 | except Exception as e: | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 456 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 136 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 204 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 264 | except Exception as e: | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 351 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 209 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 251 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 385 | except Exception as e: | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 500 | except Exception as e: | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 137 | except Exception as e: | CODE |
| LOW | …box-client/k8s_agent_sandbox/files/async_filesystem.py | 109 | except Exception as e: | CODE |
| LOW | …-client/k8s_agent_sandbox/commands/command_executor.py | 58 | except Exception as e: | CODE |
| LOW | …t/k8s_agent_sandbox/commands/async_command_executor.py | 62 | except Exception as e: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 603 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 612 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 626 | except Exception: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 702 | except Exception as exc: | CODE |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 786 | except Exception as e: | CODE |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 171 | except Exception as e: | CODE |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 192 | except Exception as e: | CODE |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 216 | except Exception as e: | CODE |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 245 | except Exception as e: | CODE |
| LOW⚡ | test/e2e/clients/python/framework/context.py | 150 | except Exception as e: | CODE |
| MEDIUM⚡ | test/e2e/clients/python/framework/context.py | 151 | print(f"Error during watch: {e}") | CODE |
| LOW | test/e2e/clients/python/framework/context.py | 240 | except Exception as e: | CODE |
| MEDIUM | test/e2e/clients/python/framework/context.py | 241 | print(f"An error occurred: {e}") | CODE |
| LOW | examples/langchain/coding_agent.py | 80 | except Exception as e: | CODE |
| LOW | examples/langchain/coding_agent.py | 419 | except Exception as e: | CODE |
| 84 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/api-migration-guide.md | 237 | ### Step 1: Disable Conversion Webhooks | COMMENT |
| LOW⚡ | docs/api-migration-guide.md | 248 | ### Step 2: Scale down the controller deployment | COMMENT |
| LOW⚡ | docs/api-migration-guide.md | 255 | ### Step 3: Delete upgraded resources | COMMENT |
| LOW⚡ | docs/api-migration-guide.md | 261 | ### Step 4: Delete shadow pools (optional) | COMMENT |
| LOW⚡ | docs/api-migration-guide.md | 269 | ### Step 5: Reset CRD storedVersions to v1alpha1 | COMMENT |
| LOW | docs/api-migration-guide.md | 281 | ### Step 6: Revert the CRD manifests and Controller | COMMENT |
| LOW | docs/api-migration-guide.md | 296 | ### Step 7: Restore Data from Backup | COMMENT |
| LOW | docs/prowjob_manual_run.md | 46 | #### Step 1: Trigger the Job | COMMENT |
| LOW | docs/prowjob_manual_run.md | 55 | #### Step 2: Identify the Pod | COMMENT |
| LOW | docs/prowjob_manual_run.md | 66 | #### Step 3: Monitor Execution | COMMENT |
| LOW | docs/prowjob_manual_run.md | 75 | #### Step 4: Verify Results | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3381 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3385 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3387 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3391 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 4249 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 4285 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 27 | ## Step 1: Run the Setup Script | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 34 | ## Step 2: Install the Agent Sandbox Controller | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/README.md | 38 | ## Step 3: Deploy an Agent Sandbox | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 67 | ## Step 4: Verify the Sandbox is Running | COMMENT |
| LOW | examples/kata-gke-sandbox/README.md | 83 | ## Step 5: Verify the Isolation | COMMENT |
| LOW | examples/ray-integration/README.md | 162 | ### Step 1: Deploy the GKE Gateway | COMMENT |
| LOW | examples/ray-integration/README.md | 173 | ### Step 2: Wait for the Public IP | COMMENT |
| LOW | examples/ray-integration/README.md | 186 | ### Step 3: Upgrade the Python Code | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 48 | ### Step 1: Prepare and Push the Sandbox Image | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 67 | ### Step 2: Deploy Infrastructure | COMMENT |
| LOW | examples/ray-integration/direct-proxy/README.md | 81 | ### Step 3: Initialize KubeRay Operator | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 95 | ### Step 4: Apply RBAC Permissions for the Ray Workers | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 105 | ### Step 5: Deploy Sandbox WarmPool Infrastructure | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 114 | ### Step 6: Create the RL Training Source ConfigMap | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 121 | ### Step 7: Submit the Production RayJob | COMMENT |
| LOW⚡ | examples/ray-integration/direct-proxy/README.md | 129 | ### Step 8: Verify the E2E Execution Logs | COMMENT |
| LOW | examples/quickstart/gvisor.md | 11 | ## Step 1: Install gVisor Runtime | COMMENT |
| LOW | examples/quickstart/gvisor.md | 15 | ## Step 2: Create KIND Cluster with gVisor | COMMENT |
| LOW | examples/quickstart/README.md | 26 | ## Step 1: Clone the Agent Sandbox Repository | COMMENT |
| LOW | examples/quickstart/README.md | 43 | ## Step 2: Create Kubernetes Cluster | COMMENT |
| LOW | examples/quickstart/README.md | 56 | ## Step 3: Install Agent Sandbox Controller | COMMENT |
| LOW | examples/quickstart/README.md | 76 | ## Step 4: Apply SandboxTemplate | COMMENT |
| LOW | examples/quickstart/README.md | 90 | ## Step 5: Create SandboxWarmPool | COMMENT |
| LOW | examples/quickstart/README.md | 147 | ## Step 6: Build and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 161 | ## Step 7: Load Router Image and Deploy Router | COMMENT |
| LOW | examples/quickstart/README.md | 226 | ## Step 8: Install Python SDK | COMMENT |
| LOW | examples/quickstart/README.md | 238 | ## Step 9: Test the Setup | COMMENT |
| LOW | examples/quickstart/README.md | 276 | ## Step 10: Cleanup | COMMENT |
| LOW | examples/quickstart/kata-containers.md | 18 | ## Step 1: Start minikube with Containerd | COMMENT |
| LOW | examples/quickstart/kata-containers.md | 32 | ## Step 2: Install Kata Containers using Helm | COMMENT |
| LOW | examples/gke-swap/README.md | 63 | ### Step 1: GKE Swap Configuration | COMMENT |
| LOW | examples/gke-swap/README.md | 83 | ### Step 2: Deploy the GKE Cluster | COMMENT |
| LOW | examples/gke-swap/README.md | 94 | ### Step 3: Configure the Sandbox Workloads | COMMENT |
| LOW | examples/gke-swap/README.md | 124 | ### Step 4: Run the Performance/Density Tests | COMMENT |
| LOW | examples/jupyterlab/jupyterlab.yaml | 106 | # WARNING: The following configuration disables critical security features: | COMMENT |
| LOW | examples/jupyterlab/jupyterlab-full.yaml | 231 | # WARNING: The following configuration disables critical security features: | COMMENT |
| LOW⚡ | examples/manual-pdb/README.md | 28 | ### Step 1: Apply the Template | COMMENT |
| LOW⚡ | examples/manual-pdb/README.md | 34 | ### Step 2: Apply the WarmPool | COMMENT |
| LOW⚡ | examples/manual-pdb/README.md | 40 | ### Step 3: Apply the Shared PDB (Once per Namespace) | COMMENT |
| LOW⚡ | examples/manual-pdb/README.md | 48 | ### Step 4: Create Sandbox Claims | COMMENT |
| 23 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/agentic-sandbox-client/test_computer_use_extension.py | 17 | CODE | |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 22 | CODE | |
| LOW | clients/python/agentic-sandbox-client/test_client.py | 24 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 15 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 16 | CODE | |
| LOW | …n/agentic-sandbox-client/k8s_agent_sandbox/__init__.py | 28 | CODE | |
| LOW | …ntic-sandbox-client/k8s_agent_sandbox/trace_manager.py | 30 | CODE | |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 15 | CODE | |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 17 | CODE | |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 18 | CODE | |
| LOW | …on/agentic-sandbox-client/k8s_agent_sandbox/sandbox.py | 18 | CODE | |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 35 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 17 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 18 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 19 | CODE | |
| LOW | …box-client/k8s_agent_sandbox/test/unit/test_metrics.py | 23 | CODE | |
| LOW | …t/k8s_agent_sandbox/test/unit/test_command_executor.py | 20 | CODE | |
| LOW | …k8s_agent_sandbox/gke_extensions/snapshots/__init__.py | 15 | CODE | |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 21 | CODE | |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 30 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/files/filesystem.py | 17 | CODE | |
| LOW | …-client/k8s_agent_sandbox/commands/command_executor.py | 15 | CODE | |
| LOW | test/e2e/clients/python/test_e2e_python_sdk.py | 19 | CODE | |
| LOW | examples/agent-sandbox-rl/tests/loadtest.py | 33 | CODE | |
| LOW | examples/agent-sandbox-rl/tests/test_observability.py | 19 | CODE | |
| LOW | …/agent-sandbox-rl/tests/run_full_swebench_benchmark.py | 39 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 17 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/handles.py | 27 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/capacity.py | 33 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/config.py | 21 | CODE | |
| LOW | …amples/agent-sandbox-rl/agent_sandbox_rl/strategies.py | 23 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 24 | CODE | |
| LOW | …/agent-sandbox-rl/agent_sandbox_rl/registry_rewrite.py | 24 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 27 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 28 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 28 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 28 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 29 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 29 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 29 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 29 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 29 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 36 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 36 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 36 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 37 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 37 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 37 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 37 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 37 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 44 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 44 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 44 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 44 | CODE | |
| 47 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 81 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | clients/python/agentic-sandbox-client/README.md | 81 | pip install "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clients/python/age | CODE |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 52 | //+kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | cmd/agent-sandbox-controller/main.go | 395 | //+kubebuilder:scaffold:builder | COMMENT |
| MEDIUM | .agents/skills/triage-issues/evals/eval_runner.py | 137 | # Default P3 (Nice-to-have, cleanup, refactor, test scaffolding) | COMMENT |
| MEDIUM | docs/keps/359-refactor-python-sdk/README.md | 129 | 2. Sandbox Manager POC: https://github.com/SHRUTI6991/agent-sandbox-initial-playing/tree/two-clients/clients/python/agen | CODE |
| MEDIUM | extensions/examples/kata-aks/router.yaml | 83 | # See clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | examples/code-interpreter-agent-on-adk/README.md | 20 | pip install google-adk==1.19.0 "git+https://github.com/kubernetes-sigs/agent-sandbox.git@${VERSION}#subdirectory=clie | CODE |
| MEDIUM | examples/agent-sandbox-rl/docs/design.md | 1 | # Design: `agent-sandbox-rl` — generic, multi-cluster batch orchestration for RL on Agent Sandbox | COMMENT |
| MEDIUM | …emo-cilium-egress/manifests/router/sandbox-router.yaml | 2 | # Adapted from clients/python/agentic-sandbox-client/sandbox-router/sandbox_router.yaml | COMMENT |
| MEDIUM | examples/ray-integration/README.md | 54 | (Note: Ensure you have built and replaced the IMAGE_PLACEHOLDER in sandbox_router.yaml as per the [router documentation] | CODE |
| MEDIUM | examples/ray-integration/direct-proxy/README.md | 30 | # We use e2-standard-4 (4 vCPU, 16GB RAM) to ensure the Ray orchestration processes have enough headroom. | COMMENT |
| MEDIUM | examples/quickstart/README.md | 317 | - [Python SDK Source](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/) | CODE |
| MEDIUM | examples/sandboxed-tools/main.go | 150 | // Session represents an agentic "chat" session (a stream of messages / tools calls etc). | COMMENT |
| MEDIUM | site/content/docs/filesystem/_index.md | 16 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/_index.md | 52 | The full template (with isolation runtime options) lives at [`clients/python/agentic-sandbox-client/python-sandbox-templ | CODE |
| MEDIUM | site/content/docs/filesystem/upload-download/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/list-files/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/filesystem/read-write/_index.md | 12 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ent/docs/use-cases/kata-containers-isolation/_index.md | 73 | With Kata runtimes, direct pod port-forwarding is not compatible. Use the [Sandbox Router](https://github.com/kubernetes | CODE |
| MEDIUM | site/content/docs/use-cases/gvisor-isolation/_index.md | 62 | With gVisor or Kata runtimes, direct pod port-forwarding is not compatible. Use the [Sandbox Router](https://github.com/ | CODE |
| MEDIUM | site/content/docs/use-cases/computer-use/_index.md | 35 | 3. **Programmatic control** — use the [`agent-sandbox` Python SDK](https://github.com/agent-infra/sandbox/tree/main/sdk/ | CODE |
| MEDIUM | site/content/docs/sandbox/metrics/_index.md | 17 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | site/content/docs/sandbox/snapshots/_index.md | 21 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 17 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …te/content/docs/sandbox/custom_sandbox/image/_index.md | 11 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 14 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …ntent/docs/getting_started/go-sdk-quickstart/_index.md | 15 | - A `SandboxWarmPool` in the target namespace (for example `python-sandbox-pool` backed by `python-sandbox-template`). S | CODE |
| MEDIUM | …content/docs/getting_started/troubleshooting/_index.md | 20 | - The [Sandbox Router](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/ | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 47 | curl -sSL https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | …t/docs/getting_started/install_prerequisites/_index.md | 56 | curl -sSLO http://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/refs/tags/${VERSION}/clients/python/agentic | CODE |
| MEDIUM | site/data/link_replacements.yaml | 8 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM | site/data/link_replacements.yaml | 23 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/)' | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 38 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 43 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/REA | CODE |
| MEDIUM⚡ | site/data/link_replacements.yaml | 48 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/tes | CODE |
| MEDIUM | site/data/link_replacements.yaml | 68 | replacement: '](https://github.com/kubernetes-sigs/agent-sandbox/blob/main/clients/python/agentic-sandbox-client/GCP | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | examples/analytics-tool/analytics-tool/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/gemini-cu-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | examples/python-runtime-sandbox/main.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/snapshots/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | site/content/docs/sandbox/lifecycle/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …cs/sandbox/custom_sandbox/custom_environment/_index.md | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …nt/docs/volumes/volume-claim-template/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| HIGH | …/docs/getting_started/troubleshooting/source/server.py | 0 | a simple health check endpoint to confirm the server is running. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 144 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 121 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 182 | CODE | |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 308 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 52 | CODE | |
| LOW | …thon/agentic-sandbox-client/k8s_agent_sandbox/utils.py | 123 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 316 | CODE | |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 341 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 102 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 161 | CODE | |
| LOW | …agentic-sandbox-client/k8s_agent_sandbox/k8s_helper.py | 285 | CODE | |
| LOW | …ient/k8s_agent_sandbox/test/unit/test_sandboxclient.py | 523 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 83 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 147 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 215 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 299 | CODE | |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 325 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 222 | CODE | |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 269 | CODE | |
| LOW | …c-sandbox-client/sandbox-router/test_sandbox_router.py | 960 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 507 | CODE | |
| LOW | …gentic-sandbox-client/sandbox-router/sandbox_router.py | 524 | CODE | |
| LOW | examples/langchain/coding_agent.py | 365 | CODE | |
| LOW | examples/hpa-swp-scaling/create-claim.py | 36 | CODE | |
| LOW | examples/agent-sandbox-rl/tests/loadtest.py | 128 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/fleet.py | 587 | CODE | |
| LOW | …les/agent-sandbox-rl/agent_sandbox_rl/observability.py | 247 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/sources.py | 105 | CODE | |
| LOW | …mples/agent-sandbox-rl/agent_sandbox_rl/async_fleet.py | 339 | CODE | |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/resources.py | 237 | CODE | |
| LOW | …s/agent-sandbox-rl/agent_sandbox_rl/adapters/r2egym.py | 91 | CODE | |
| LOW | dev/tools/test-migration.py | 283 | CODE | |
| LOW | dev/tools/test-migration.py | 377 | CODE | |
| LOW | dev/tools/test-migration.py | 841 | CODE | |
| LOW | dev/tools/shared/headers.py | 161 | CODE | |
| LOW | dev/tools/shared/headers.py | 202 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 86 | !object.spec.podTemplate.spec.volumes.exists(v, | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 97 | !object.spec.podTemplate.spec.volumes.exists(v, has(v.hostPath)) | CODE |
| CRITICAL | examples/policy/vap/secure-sandbox-policy.yaml | 157 | object.spec.podTemplate.spec.tolerations.exists(t, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | examples/ray-integration/rl_poc_local.py | 84 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_local.py | 86 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 83 | # ========================================== | COMMENT |
| MEDIUM | examples/ray-integration/rl_poc_prod.py | 85 | # ========================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 77 | # ============================================================================== | COMMENT |
| MEDIUM | …/ray-integration/direct-proxy/ray-autopilot-setup.yaml | 80 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 19 | # ============================================================================== | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 26 | # ============================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 134 | # Create the initial sandbox to take the snapshot from | COMMENT |
| MEDIUM | …n/agentic-sandbox-client/test_podsnapshot_extension.py | 375 | # Create a fresh sandbox to test suspend-resume flow on a brand new instance | COMMENT |
| MEDIUM | …amples/demo-cilium-egress/scripts/01-create-cluster.sh | 16 | # Create a GKE Standard cluster WITHOUT Dataplane V2 so we can install upstream Cilium. | COMMENT |
| MEDIUM | …les/ray-integration/direct-proxy/rl_production_loop.py | 218 | # Define the scale of the distributed job. | COMMENT |
| MEDIUM | examples/gemini-cu-sandbox/run-test-kind.sh | 64 | # Create a temporary kubeconfig file for kind | COMMENT |
| MEDIUM | examples/policy/vap/secure-sandbox-policy.yaml | 14 | # Define a variable to check ALL container types: containers, initContainers, and ephemeralContainers. | COMMENT |
| MEDIUM | helm/files/migrate.sh | 277 | # Create the deduped shadow pools. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tic-sandbox-client/k8s_agent_sandbox/sandbox_client.py | 211 | # Check if the sandbox actually exists in Kubernetes | COMMENT |
| LOW | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 378 | # Verify if the connection is active before sending the request | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 167 | # Check if Snapshot UID is present in the condition.message | COMMENT |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 223 | # Check if already deleted | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 69 | # Check if the cluster already exists | COMMENT |
| LOW | …ples/vscode-sandbox/overlays/kata-mshv/patch-kata.yaml | 8 | # Set runtimeClassName to use kata mshv runtime class | COMMENT |
| LOW | …mples/vscode-sandbox/overlays/gvisor/patch-gvisor.yaml | 8 | # Set runtimeClassName to use gVisor | COMMENT |
| LOW | examples/vscode-sandbox/overlays/kata/patch-kata.yaml | 8 | # Set runtimeClassName to use kata qemu class | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …policy/policy-controller/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 39 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | …es/policy/opa-gatekeeper/template-sandbox-binding.yaml | 62 | # Check if this pod is controlled by a Sandbox CR | COMMENT |
| LOW | .github/workflows/check-api-docs.yml | 48 | # Check if there are any differences | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3381 | // Step 1: CreateFunc → entry added | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3385 | // Step 2: First reconcile → Not-Ready → Ready transition → entry cleaned. | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3387 | // Step 3: Post-Ready UpdateFunc | COMMENT |
| LOW⚡ | extensions/controllers/sandboxclaim_controller_test.go | 3391 | // Step 4: Reconcile with old=Ready, new=Ready | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 4249 | // Step 1: Reconcile without template | COMMENT |
| LOW | extensions/controllers/sandboxclaim_controller_test.go | 4285 | // Step 2: Create template and reconcile again | COMMENT |
| LOW⚡ | examples/kata-gke-sandbox/setup.sh | 67 | echo "### Step 1: Creating/Checking GKE Cluster ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 97 | echo "### Step 2: Installing the Kata Infrastructure ###" | CODE |
| LOW | examples/kata-gke-sandbox/setup.sh | 119 | echo "### Step 3: Registering the RuntimeClass ###" | CODE |
| LOW⚡ | dev/tools/test-migration.py | 851 | # Step 1: Disable conversion webhook | STRING |
| LOW⚡ | dev/tools/test-migration.py | 865 | # Step 2: Delete upgraded resources while upgraded CRD spec (v1beta1) is still installed | STRING |
| LOW⚡ | dev/tools/test-migration.py | 869 | # Step 3: Delete shadow warm pools | STRING |
| LOW⚡ | dev/tools/test-migration.py | 878 | # Step 4: Reset storedVersions to v1alpha1 in CRD status | STRING |
| LOW⚡ | dev/tools/test-migration.py | 884 | # Step 5: Downgrade controller and CRDs to v1alpha1 | STRING |
| LOW | dev/tools/test-migration.py | 974 | # Step 6: Restore data from backup | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/agent-sandbox-rl/tests/run_full_swebench_benchmark.py | 168 | # general load-test harness for repeated-tasks-per-image batches. | COMMENT |
| MEDIUM | examples/agent-sandbox-rl/examples/plan_capacity.py | 145 | sys.path.insert(0, tests_dir) # robust to cwd | CODE |
| MEDIUM | examples/sandboxed-tools/pkg/tools/write_file.go | 69 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/list_files.go | 59 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| MEDIUM | examples/sandboxed-tools/pkg/tools/read_file.go | 61 | // The -- separator makes execution more robust e.g. if path is "--help" | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 145 | Sends an HTTP request asynchronously to the sandbox with standard parameters. This method automatically resolve | STRING |
| HIGH | …/agentic-sandbox-client/k8s_agent_sandbox/connector.py | 342 | Sends an HTTP request to the sandbox with standard parameters. This method automatically resolves the gateway o | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | extensions/examples/kata-aks/README.md | 168 | --from-literal=OPENAI_API_KEY="<your-api-key>" \ | CODE |
| HIGH | examples/sandboxed-tools/README.md | 56 | export GEMINI_API_KEY="your-api-key-here" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ic-sandbox-client/k8s_agent_sandbox/async_connector.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …c-sandbox-client/k8s_agent_sandbox/async_k8s_helper.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ndbox-client/k8s_agent_sandbox/async_sandbox_client.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_extensions/snapshots/sandbox_with_snapshot_support.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt/k8s_agent_sandbox/gke_extensions/snapshots/utils.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt_sandbox/gke_extensions/snapshots/snapshot_engine.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …pshots/test/unit/test_sandbox_with_snapshot_support.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ensions/snapshots/test/unit/test_podsnapshot_client.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/__init__.py | 75 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …agent-sandbox-rl/agent_sandbox_rl/adapters/swebench.py | 36 | " || ls -d /testbed 2>/dev/null || ls /", | CODE |
| HIGH⚡ | dev/tools/test-migration.py | 854 | patch = '{"spec":{"conversion":{"strategy":"None","webhook":null}}}' | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sandbox-router/authz/authorizer_test.go | 39 | Username: "user@example.com", | CODE |
| LOW | sandbox-router/authz/authorizer_test.go | 48 | Username: "user@example.com", | CODE |
| LOW | examples/openclaw-sandbox/run-test-kind.sh | 39 | sed "s/dummy-token-for-sandbox/$OPENCLAW_GATEWAY_TOKEN/g" openclaw-sandbox.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-sandbox/README.md | 27 | sed "s/dummy-token-for-sandbox/$OPENCLAW_GATEWAY_TOKEN/g" openclaw-sandbox.yaml | kubectl apply -f - | CODE |
| LOW | examples/openclaw-sandbox/openclaw-sandbox.yaml | 31 | value: "dummy-token-for-sandbox" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/pull_request_template.md | 19 | Note: Automated release notes are generated by Gemini using the PR description in the first section. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sandbox-router/dev/smoke-test/run.sh | 27 | # Usage: | COMMENT |
| LOW | helm/files/migrate.sh | 41 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/agent-sandbox-rl/agent_sandbox_rl/prepull.py | 67 | CODE | |
| LOW | dev/ci/shared/runner.py | 72 | CODE |