Kubebuilder - SDK for building Kubernetes APIs using CRDs
This report summarizes scanner evidence for kubernetes-sigs/kubebuilder, a Go project with 9,347 GitHub stars. SynthScan examined 181,223 lines of code across 1258 source files, recording 713 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 8.7 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 710 finding(s).
Are imports declared and package/API names verified? 2 finding(s).
Are wrappers, guards, and repeated structures necessary? 1 finding(s).
Which changes need focused human review? 713 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 713 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | AGENTS.md | 224 | - `Marker` - special comments (e.g., `// +kubebuilder:scaffold:imports`) | CODE |
| MEDIUM | testdata/project-v4-multigroup/AGENTS.md | 47 | Do NOT delete `// +kubebuilder:scaffold:*` comments. CLI injects code at these markers. | CODE |
| MEDIUM | testdata/project-v4-multigroup/AGENTS.md | 80 | ### Deploy Image Plugin (scaffold to deploy/manage ANY container image) | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/cmd/main.go | 70 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/cmd/main.go | 95 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/cmd/main.go | 217 | // In the default scaffold provided, the program ends immediately after | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/cmd/main.go | 398 | // +kubebuilder:scaffold:builder | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/test/e2e/e2e_test.go | 240 | // +kubebuilder:scaffold:e2e-metrics-webhooks-readiness | COMMENT |
| MEDIUM | testdata/project-v4-multigroup/test/e2e/e2e_test.go | 348 | // +kubebuilder:scaffold:e2e-webhooks-checks | COMMENT |
| MEDIUM | …ta/project-v4-multigroup/config/crd/kustomization.yaml | 18 | # +kubebuilder:scaffold:crdkustomizeresource | COMMENT |
| MEDIUM | …ta/project-v4-multigroup/config/crd/kustomization.yaml | 24 | # +kubebuilder:scaffold:crdkustomizewebhookpatch | COMMENT |
| MEDIUM⚡ | …roject-v4-multigroup/config/default/kustomization.yaml | 224 | targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD. | CODE |
| MEDIUM⚡ | …roject-v4-multigroup/config/default/kustomization.yaml | 234 | # +kubebuilder:scaffold:crdkustomizecainjectionns | COMMENT |
| MEDIUM⚡ | …roject-v4-multigroup/config/default/kustomization.yaml | 241 | targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD. | CODE |
| MEDIUM⚡ | …roject-v4-multigroup/config/default/kustomization.yaml | 251 | # +kubebuilder:scaffold:crdkustomizecainjectionname | COMMENT |
| MEDIUM | …roject-v4-multigroup/config/samples/kustomization.yaml | 17 | # +kubebuilder:scaffold:manifestskustomizesamples | COMMENT |
| MEDIUM | …tigroup/internal/webhook/core/v1/webhook_suite_test.go | 42 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …tigroup/internal/webhook/core/v1/webhook_suite_test.go | 71 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …tigroup/internal/webhook/core/v1/webhook_suite_test.go | 114 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …internal/webhook/cert-manager/v1/webhook_suite_test.go | 42 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …internal/webhook/cert-manager/v1/webhook_suite_test.go | 71 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …internal/webhook/cert-manager/v1/webhook_suite_test.go | 114 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …tigroup/internal/webhook/crew/v1/webhook_suite_test.go | 43 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …tigroup/internal/webhook/crew/v1/webhook_suite_test.go | 72 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …tigroup/internal/webhook/crew/v1/webhook_suite_test.go | 115 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …/internal/webhook/example.com/v1/webhook_suite_test.go | 43 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …/internal/webhook/example.com/v1/webhook_suite_test.go | 72 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …/internal/webhook/example.com/v1/webhook_suite_test.go | 115 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …nal/webhook/example.com/v1alpha1/webhook_suite_test.go | 43 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …nal/webhook/example.com/v1alpha1/webhook_suite_test.go | 72 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …nal/webhook/example.com/v1alpha1/webhook_suite_test.go | 115 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …tigroup/internal/webhook/ship/v1/webhook_suite_test.go | 43 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …tigroup/internal/webhook/ship/v1/webhook_suite_test.go | 72 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …tigroup/internal/webhook/ship/v1/webhook_suite_test.go | 115 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …p/internal/webhook/ship/v2alpha1/webhook_suite_test.go | 43 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …p/internal/webhook/ship/v2alpha1/webhook_suite_test.go | 72 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …p/internal/webhook/ship/v2alpha1/webhook_suite_test.go | 115 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …tigroup/internal/webhook/apps/v1/webhook_suite_test.go | 42 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …tigroup/internal/webhook/apps/v1/webhook_suite_test.go | 71 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …tigroup/internal/webhook/apps/v1/webhook_suite_test.go | 114 | // +kubebuilder:scaffold:webhook | COMMENT |
| MEDIUM | …ct-v4-multigroup/internal/controller/fiz/suite_test.go | 36 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …ct-v4-multigroup/internal/controller/fiz/suite_test.go | 65 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …tigroup/internal/controller/cert-manager/suite_test.go | 35 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …tigroup/internal/controller/cert-manager/suite_test.go | 64 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/crew/suite_test.go | 36 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/crew/suite_test.go | 65 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …ltigroup/internal/controller/example.com/suite_test.go | 37 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …ltigroup/internal/controller/example.com/suite_test.go | 69 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …ct-v4-multigroup/internal/controller/foo/suite_test.go | 36 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …ct-v4-multigroup/internal/controller/foo/suite_test.go | 65 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …ultigroup/internal/controller/foo.policy/suite_test.go | 36 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …ultigroup/internal/controller/foo.policy/suite_test.go | 65 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/ship/suite_test.go | 38 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/ship/suite_test.go | 73 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …igroup/internal/controller/sea-creatures/suite_test.go | 38 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …igroup/internal/controller/sea-creatures/suite_test.go | 73 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/apps/suite_test.go | 35 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | …t-v4-multigroup/internal/controller/apps/suite_test.go | 64 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | testdata/project-v4/AGENTS.md | 47 | Do NOT delete `// +kubebuilder:scaffold:*` comments. CLI injects code at these markers. | CODE |
| MEDIUM | testdata/project-v4/AGENTS.md | 80 | ### Deploy Image Plugin (scaffold to deploy/manage ANY container image) | COMMENT |
| 314 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test_e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | testdata/project-v4-multigroup/cmd/main.go | 181 | // These configurations ensure that only authorized users and service accounts | COMMENT |
| LOW | …a/project-v4-multigroup/config/rbac/kustomization.yaml | 1 | resources: | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 1 | # Adds namespace to all resources. | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 21 | # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 41 | kind: Deployment | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 61 | # version: v1 | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 81 | # name: controller-manager-metrics-monitor | COMMENT |
| LOW | …roject-v4-multigroup/config/default/kustomization.yaml | 101 | # - spec.dnsNames.0 | COMMENT |
| LOW | …data/project-v4-multigroup/config/manager/manager.yaml | 41 | # - matchExpressions: | COMMENT |
| LOW | …ect-v4-multigroup/config/prometheus/kustomization.yaml | 1 | resources: | COMMENT |
| LOW | …ultigroup/internal/webhook/core/v1/pod_webhook_test.go | 41 | }) | COMMENT |
| LOW | …ultigroup/internal/webhook/core/v1/pod_webhook_test.go | 61 | // | COMMENT |
| LOW | …-v4-multigroup/internal/webhook/core/v1/pod_webhook.go | 41 | // TODO(user): change verbs to "verbs=create;update;delete" if you want to enable deletion validation. | COMMENT |
| LOW | …nternal/webhook/cert-manager/v1/issuer_webhook_test.go | 41 | }) | COMMENT |
| LOW | …group/internal/webhook/crew/v1/captain_webhook_test.go | 41 | Expect(obj).NotTo(BeNil(), "Expected obj to be initialized") | COMMENT |
| LOW | …group/internal/webhook/crew/v1/captain_webhook_test.go | 61 | }) | COMMENT |
| LOW | …ernal/webhook/example.com/v1/wordpress_webhook_test.go | 41 | // TODO (user): Add any teardown logic common to all tests | COMMENT |
| LOW | …webhook/example.com/v1alpha1/memcached_webhook_test.go | 41 | }) | COMMENT |
| LOW | …webhook/example.com/v1alpha1/memcached_webhook_test.go | 61 | // | COMMENT |
| LOW | …rnal/webhook/example.com/v1alpha1/memcached_webhook.go | 41 | COMMENT | |
| LOW | …oup/internal/webhook/ship/v1/destroyer_webhook_test.go | 41 | }) | COMMENT |
| LOW | …roup/internal/webhook/ship/v2alpha1/cruiser_webhook.go | 41 | COMMENT | |
| LOW | …internal/webhook/ship/v2alpha1/cruiser_webhook_test.go | 41 | }) | COMMENT |
| LOW | …internal/webhook/ship/v2alpha1/cruiser_webhook_test.go | 61 | // | COMMENT |
| LOW | …tigroup/internal/webhook/apps/v1/deployment_webhook.go | 61 | } | COMMENT |
| LOW | …up/internal/webhook/apps/v1/deployment_webhook_test.go | 41 | Expect(obj).NotTo(BeNil(), "Expected obj to be initialized") | COMMENT |
| LOW | …up/internal/webhook/apps/v1/deployment_webhook_test.go | 61 | }) | COMMENT |
| LOW | …nternal/controller/example.com/memcached_controller.go | 61 | // The following markers are used to generate the rules permissions (RBAC) on config/rbac using controller-gen | COMMENT |
| LOW | …nternal/controller/example.com/memcached_controller.go | 341 | // NodeAffinity: &corev1.NodeAffinity{ | COMMENT |
| LOW | …nternal/controller/example.com/memcached_controller.go | 421 | // imageForMemcached gets the Operand image which is managed by this controller | COMMENT |
| LOW | …/internal/controller/example.com/busybox_controller.go | 61 | // The following markers are used to generate the rules permissions (RBAC) on config/rbac using controller-gen | COMMENT |
| LOW | …/internal/controller/example.com/busybox_controller.go | 341 | // NodeAffinity: &corev1.NodeAffinity{ | COMMENT |
| LOW | …/internal/controller/example.com/busybox_controller.go | 421 | return "", fmt.Errorf("unable to find %s environment variable with the image", imageEnvVar) | COMMENT |
| LOW | …oject-v4-multigroup/grafana/custom-metrics/config.yaml | 1 | --- | COMMENT |
| LOW | testdata/project-v4-multigroup/api/fiz/v1/bar_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ata/project-v4-multigroup/api/crew/v1/captain_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ct-v4-multigroup/api/example.com/v1/wordpress_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ct-v4-multigroup/api/example.com/v2/wordpress_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …4-multigroup/api/example.com/v1alpha1/busybox_types.go | 21 | "k8s.io/apimachinery/pkg/runtime" | COMMENT |
| LOW | …4-multigroup/api/example.com/v1alpha1/busybox_types.go | 41 | // BusyboxStatus defines the observed state of Busybox | COMMENT |
| LOW | …multigroup/api/example.com/v1alpha1/memcached_types.go | 21 | "k8s.io/apimachinery/pkg/runtime" | COMMENT |
| LOW | …multigroup/api/example.com/v1alpha1/memcached_types.go | 41 | // +required | COMMENT |
| LOW | testdata/project-v4-multigroup/api/foo/v1/bar_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ultigroup/api/foo.policy/v1/healthcheckpolicy_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …a/project-v4-multigroup/api/ship/v1/destroyer_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …roject-v4-multigroup/api/ship/v1beta1/frigate_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …oject-v4-multigroup/api/ship/v2alpha1/cruiser_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ject-v4-multigroup/api/sea-creatures/v1/prawn_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …ject-v4-multigroup/api/sea-creatures/v1/prawn_types.go | 61 | COMMENT | |
| LOW | …/v1/applyconfiguration/sea-creatures/v1/prawnstatus.go | 21 | metav1 "k8s.io/client-go/applyconfigurations/meta/v1" | COMMENT |
| LOW | …es/v1/applyconfiguration/sea-creatures/v1/prawnspec.go | 21 | // with apply. | COMMENT |
| LOW | …ultigroup/api/sea-creatures/v1beta2/leviathan_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | …4-multigroup/api/sea-creatures/v1beta1/kraken_types.go | 41 | // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster | COMMENT |
| LOW | testdata/project-v4/cmd/main.go | 141 | COMMENT | |
| LOW | testdata/project-v4/config/rbac/kustomization.yaml | 1 | resources: | COMMENT |
| LOW | testdata/project-v4/config/default/kustomization.yaml | 1 | # Adds namespace to all resources. | COMMENT |
| LOW | testdata/project-v4/config/default/kustomization.yaml | 21 | # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in | COMMENT |
| LOW | testdata/project-v4/config/default/kustomization.yaml | 41 | kind: Deployment | COMMENT |
| 214 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/project-v4-multigroup/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | testdata/project-v4/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | …roject-v4-with-plugins/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | test/testdata/generate.sh | 43 | # Create a second controller for the Captain resource to test multiple controllers per API | COMMENT |
| MEDIUM | test/testdata/generate.sh | 79 | # Create a second controller for the Captain resource to test multiple controllers per API | COMMENT |
| MEDIUM | internal/cli/alpha/update.go | 92 | # Create an issue to track the update | COMMENT |
| MEDIUM | internal/cli/alpha/internal/generate_test.go | 123 | # This file is used to track the info used to scaffold your project | COMMENT |
| MEDIUM | docs/book/install-and-build.sh | 19 | # The following code is required to allow the preview works with an upper go version | COMMENT |
| MEDIUM | …orial/testdata/project/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | …arted/testdata/project/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | …orial/testdata/project/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | pkg/config/store/yaml/store.go | 39 | # This file is used to track the info used to scaffold your project | COMMENT |
| MEDIUM | pkg/plugins/golang/deploy-image/v1alpha1/api.go | 75 | subcmdMeta.Examples = fmt.Sprintf(` # Create a frigates API with Group: ship, Version: v1beta1, Kind: Frigate to repre | CODE |
| MEDIUM⚡ | pkg/plugins/golang/v4/api.go | 69 | subcmdMeta.Examples = fmt.Sprintf(` # Create a namespaced API resource and controller | CODE |
| MEDIUM⚡ | pkg/plugins/golang/v4/api.go | 72 | # Create a cluster-scoped API resource without a controller | COMMENT |
| MEDIUM⚡ | pkg/plugins/golang/v4/api.go | 75 | # Create an API resource scaffolded with Server-Side Apply support (alpha) | COMMENT |
| MEDIUM⚡ | pkg/plugins/golang/v4/api.go | 78 | # Create a controller for an external API type | COMMENT |
| MEDIUM | …folds/internal/templates/config/crd/kustomizeconfig.go | 45 | const kustomizeConfigTemplate = `# This file is for teaching kustomize how to substitute name and namespace reference in | CODE |
| MEDIUM | pkg/plugin/util/util_test.go | 349 | # This file is used to track the info used to scaffold your project | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | designs/update_action.md | 446 | # Step 1: Create ancestor branch and clean it up | COMMENT |
| LOW⚡ | designs/update_action.md | 456 | # Step 2: Install Kubebuilder v4.5.0 and regenerate scaffold | COMMENT |
| LOW⚡ | designs/update_action.md | 471 | # Step 3: Create original branch with user's code | COMMENT |
| LOW⚡ | designs/update_action.md | 478 | # Step 4: Install Kubebuilder v4.6.0 and scaffold upgrade | COMMENT |
| LOW | designs/update_action.md | 497 | # Step 5: Merge original into upgrade and preserve conflicts | COMMENT |
| LOW | internal/cli/alpha/internal/update/update.go | 662 | // Step 4: Stage and commit | COMMENT |
| LOW | docs/book/src/migration/reorganize-layout.md | 1 | # Step 1: Reorganize to New Layout (Required only for Legacy Layouts) | COMMENT |
| LOW | docs/book/src/migration/port-code.md | 1 | # Step 3: Port Custom Code | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 67 | ### Step 1: Enable multi-group mode | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 92 | ### Step 2: Identify your group name | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 103 | ### Step 3: Move your APIs | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 118 | ### Step 4: Move your controllers | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 129 | ### Step 5: Move your webhooks (if you have any) | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 141 | ### Step 6: Update import paths | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 178 | ### Step 7: Update the PROJECT file | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 223 | ### Step 8: Update test suite CRD paths | COMMENT |
| LOW | docs/book/src/migration/multi-group.md | 259 | ### Step 9: Verify the migration | COMMENT |
| LOW | docs/book/src/migration/discovery-commands.md | 1 | # Step 2: Discovery CLI Commands | COMMENT |
| LOW | docs/book/src/migration/manual-process.md | 122 | ### Step 1: Prepare Your Current Project | COMMENT |
| LOW | docs/book/src/migration/manual-process.md | 147 | ## Step 2: Initialize the New Project | COMMENT |
| LOW | docs/book/src/migration/manual-process.md | 253 | ## Step 3: Re-scaffold APIs and Controllers | COMMENT |
| LOW | docs/book/src/migration/manual-process.md | 461 | ## Step 4: Port Your Custom Code | COMMENT |
| LOW | docs/book/src/migration/manual-process.md | 663 | ## Step 5: Test and Verify | COMMENT |
| LOW⚡ | docs/book/src/reference/commands/alpha_update.md | 37 | ### Step 1: Detect versions | COMMENT |
| LOW⚡ | docs/book/src/reference/commands/alpha_update.md | 43 | ### Step 2: Create scaffolds | COMMENT |
| LOW⚡ | docs/book/src/reference/commands/alpha_update.md | 49 | ### Step 3: Do a 3-way merge | COMMENT |
| LOW⚡ | docs/book/src/reference/commands/alpha_update.md | 57 | ### Step 4: Write the output branch | COMMENT |
| LOW | docs/book/src/reference/commands/alpha_update.md | 70 | ### Step 5: Cleanup | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | netlify.toml | 96 | # on eating every other query parameter, so just use paths instead | COMMENT |
| MEDIUM | …ugin/v1/internal/test/plugins/prometheus/prometheus.go | 89 | # Security best practices | COMMENT |
| MEDIUM | …ins/golang/v4/scaffolds/internal/templates/makefile.go | 67 | // details on the quest for a more robust solution, refer to the issue | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/common.sh | 154 | # Check if a program is previously installed | COMMENT |
| LOW | test/testdata/check.sh | 30 | # Check if there are any changes to files under testdata directory. | COMMENT |
| LOW | hack/docs/fix_note_accessibility.sh | 56 | # Check if we're entering an aside block | COMMENT |
| LOW | hack/docs/fix_note_accessibility.sh | 63 | # Check if we're exiting an aside block | COMMENT |
| LOW | hack/docs/check.sh | 29 | # Check if there are any changes to files under testdata directory. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/testdata/generate.sh | 21 | # Usage: | COMMENT |
| LOW | test/e2e/setup.sh | 26 | # Usage: | COMMENT |
| LOW | test/e2e/setup.sh | 52 | # Usage: | COMMENT |
| LOW | test/e2e/setup.sh | 80 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/book/src/migration/discovery-commands.md | 100 | - zz_generated.*.go (auto-generated code) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …n/v1/internal/test/plugins/prometheus/kustomization.go | 59 | # ============================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ins/golang/v4/scaffolds/internal/templates/makefile.go | 198 | # If you wish to build the manager image targeting other platforms you can use the --platform flag. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …m/v2alpha/scaffolds/test/chart_never_overwrite_test.go | 138 | Expect(string(content)).To(ContainSubstring("John Doe")) | CODE |
| LOW | …m/v2alpha/scaffolds/test/chart_never_overwrite_test.go | 151 | Expect(string(content)).To(ContainSubstring("John Doe")) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/cli/alpha/internal/update/update.go | 662 | // Step 4: Stage and commit | COMMENT |