:vertical_traffic_light: Kubernetes-native Job Queueing and Scheduling
This report summarizes scanner evidence for kubernetes-sigs/kueue, a Go project with 3,128 GitHub stars. SynthScan examined 944,580 lines of code across 3621 source files, recording 1003 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 1.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 926 finding(s).
Are imports declared and package/API names verified? 34 finding(s).
Are wrappers, guards, and repeated structures necessary? 82 finding(s).
Which changes need focused human review? 1003 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1003 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/experimental/webhook-conversion-repro/repro.sh | 1 | #!/bin/bash | COMMENT |
| LOW | cmd/experimental/kueue-populator/run-e2e.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …rimental/kueue-populator/test/verify-helm-lifecycle.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …tal/kueue-populator/charts/kueue-populator/values.yaml | 1 | # Configuration for the Kueue Populator component | COMMENT |
| LOW | …tal/kueue-populator/charts/kueue-populator/values.yaml | 41 | # levels: | COMMENT |
| LOW | cmd/experimental/skills/.skillsaw.yaml | 61 | # warn: 6000 | COMMENT |
| LOW | cmd/experimental/skills/.skillsaw.yaml | 81 | # rule: | COMMENT |
| LOW | …perimental/kueue-priority-booster/pkg/config/config.go | 41 | // Defaults to 100000. | COMMENT |
| LOW | cmd/kueueviz/backend/middleware/auth.go | 121 | cache: utilcache.NewLRUExpireCacheWithClock(size, clock), | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 41 | Namespace *string `json:"namespace,omitempty"` | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 61 | // never be managed by Kueue, even if they have a kueue.x-k8s.io/queue-name label. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 101 | // FeatureGates is a map of feature names to bools that allows to override the | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 121 | COMMENT | |
| LOW | apis/config/v1beta2/configuration_types.go | 161 | // Host is the hostname that the webhook server binds to. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 181 | MetricsAccessControlModeDelegated MetricsAccessControlMode = "Delegated" | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 201 | // for serving prometheus metrics. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 241 | COMMENT | |
| LOW | apis/config/v1beta2/configuration_types.go | 261 | // - ClusterQueue | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 281 | // LocalQueueSelector can be used to choose the local queues that need metrics to be collected. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 301 | } | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 321 | // Defaults to 2 minutes if not set. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 341 | // RequeuingStrategy defines the strategy for requeuing a Workload. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 361 | // a late observation does not restart the timeout. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 381 | // Defaults to 1min. If 0, the garbage collection is disabled. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 401 | // - If specified, the workload will be handled by the named dispatcher. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 441 | // MultiKueueDispatcherModeAllAtOnce is the name of dispatcher mode where all worker clusters are considered at once | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 461 | // Once the number is reached, the workload is deactivated (`.spec.activate`=`false`). | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 501 | // Enable controls the use of internal cert management for the webhook, | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 521 | } | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 541 | // See https://pkg.go.dev/crypto/tls#CurveID for values supported by the current Go version. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 581 | Burst *int32 `json:"burst,omitempty"` | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 601 | // - "pod" | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 661 | const Replace ResourceTransformationStrategy = "Replace" | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 681 | // "strategy" is Retain. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 701 | // DeviceClassMapping holds device class to logical resource mappings | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 721 | // followed by a slash and a DNS label, or just a DNS label. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 741 | // Counter configures counter-based quota for partitionable devices. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 761 | // for a given driver without requiring one mapping per device. | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 781 | } | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 821 | // AlmostLCA(preemptee, preemptor). These are the shares of ClusterQueues themselves | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 841 | // - ["LessThanInitialShare"] | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 861 | } | COMMENT |
| LOW | apis/config/v1beta2/configuration_types.go | 881 | // AfterDeactivatedByKueue is the duration to wait after *any* Kueue-managed Workload | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 21 | COMMENT | |
| LOW | apis/kueue/v1beta2/workload_types.go | 41 | // queueName is the name of the LocalQueue the Workload is associated with. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 61 | // Possible values are: | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 81 | // The gates are closed by default. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 101 | // If both this field and the cluster-wide WaitForPodsReady.Timeout are set, | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 161 | // PriorityClassRef references a PriorityClass in a specific API group. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 181 | // keywords which indicate the highest priorities with the former being | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 201 | // +kubebuilder:validation:MaxLength=63 | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 221 | // podIndexLabel indicates the name of the label indexing the pods. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 241 | // +optional | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 261 | // in `kueue.x-k8s.io/podset-slice-required-topology` annotation. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 281 | COMMENT | |
| LOW | apis/kueue/v1beta2/workload_types.go | 321 | // name is the name of the podSet. It should match one of the names in .spec.podSets. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 341 | // in that case spec.podSets[*].count value will be used. | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 361 | // (aimed to optimize the total bytesize for very large number of domains; see examples below): | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 381 | // topologyAssignment: | COMMENT |
| LOW | apis/kueue/v1beta2/workload_types.go | 401 | // - cloud.provider.com/topology-block | COMMENT |
| 636 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …tic/v0.19/examples/sample-enforce-requests-policy.yaml | 19 | object.spec.template.spec.containers.all(c, | CODE |
| CRITICAL | …tic/v0.20/examples/sample-enforce-requests-policy.yaml | 19 | object.spec.template.spec.containers.all(c, | CODE |
| CRITICAL | …te/static/examples/sample-enforce-requests-policy.yaml | 19 | object.spec.template.spec.containers.all(c, | CODE |
| CRITICAL | pkg/config/validation.go | 748 | c.ObjectRetentionPolicies.Workloads.AfterDeactivatedByKueue.Duration.String(), apimachineryvalidation.IsNegativeError | CODE |
| CRITICAL | pkg/controller/core/localqueue_controller.go | 370 | seeded = lq.Status.FairSharing.AdmissionFairSharingStatus.ConsumedResources.DeepCopy() | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 77 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 173 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 231 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 283 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 327 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 384 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 432 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 496 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 547 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 589 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | pkg/controller/jobs/rayjob/rayjob_controller_test.go | 650 | PodSpec(*rayJob.Spec.RayClusterSpec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 97 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 148 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 206 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 258 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 302 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| CRITICAL | …ntroller/jobs/raycluster/raycluster_controller_test.go | 366 | PodSpec(*rayJob.Spec.HeadGroupSpec.Template.Spec.DeepCopy()). | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 17 | ## Step 1 - Confirm platform and build the Kueue image | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 31 | ## Step 2 - Pick the target suite | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 48 | ## Step 3 - Bring up the cluster in dev mode | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 76 | ## Step 4 - Optional: use a released or staging image instead of building | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 90 | ## Step 5 - Verify the cluster is ready | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 100 | ## Step 6 - Iterate | COMMENT |
| LOW | …mental/skills/kueue-e2e-cluster-singlecluster/SKILL.md | 114 | ## Step 7 - Clean up when done | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 16 | ### Step 1 - identify the Prow build and download the primary log | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 73 | ### Step 2 - inspect the CI Pod and distinguish OOM from ordinary failure | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 101 | ### Step 3 - query Prow Prometheus for resource evidence | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 108 | ### Step 4 - inspect envtest parallelism and lifecycle | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 135 | ### Step 5 - enable and collect apiserver logs when they are missing | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 156 | ### Step 6 - analyze control-plane and node artifacts | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 191 | ### Step 7 - match the failure to test and framework code | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 207 | ### Step 8 - reason about retries and resource changes | COMMENT |
| LOW | cmd/experimental/skills/kueue-flake-debugger/SKILL.md | 226 | ### Step 9 - recommendations and final report | COMMENT |
| LOW | cmd/experimental/skills/was-cluster/SKILL.md | 21 | ### Step 1: Build the kind node image from k8s main | COMMENT |
| LOW | cmd/experimental/skills/was-cluster/SKILL.md | 29 | ### Step 2: Stand up the cluster with Kueue deployed, no tests | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 17 | ## Step 1 - Confirm platform and build the Kueue image | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 29 | ## Step 2 - Pick the target suite | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 41 | ## Step 3 - Bring up the clusters in dev mode | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 80 | ## Step 4 - Optional: use a released or staging image instead of building | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 87 | ## Step 5 - Verify the clusters and contexts | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 100 | ## Step 6 - Iterate | COMMENT |
| LOW | …erimental/skills/kueue-e2e-cluster-multikueue/SKILL.md | 108 | ## Step 7 - Clean up when done | COMMENT |
| LOW | cmd/experimental/skills/kueue-lineage/SKILL.md | 26 | ### Step 0: Find the Workload (skip if user already provided a workload name) | COMMENT |
| LOW | cmd/experimental/skills/kueue-lineage/SKILL.md | 69 | ### Step 1: Get the workload's parent job | COMMENT |
| LOW | cmd/experimental/skills/kueue-lineage/SKILL.md | 78 | ### Step 2: Fetch intermediate resources and pods by job type | COMMENT |
| LOW | cmd/experimental/skills/kueue-lineage/SKILL.md | 207 | ### Step 3: Display the lineage tree | COMMENT |
| LOW | hack/testing/e2e-kueueviz-rbac-bypass.sh | 81 | # Step 1: Create a "victim" namespace with a Pod containing a secret environment variable. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 99 | # Step 2: Create an "attacker" namespace with an unprivileged ServiceAccount. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 106 | # Step 3: Verify the attacker ServiceAccount is denied direct API access to the victim Pod. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 128 | # Step 4: Ask the KueueViz backend for the victim Pod using the attacker's token. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 129 | # Step 5: Assert the backend responds with HTTP 401/403 (Forbidden) and not HTTP 200. | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 51 | ### Step 1: Create Kind Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 107 | ### Step 2: Install Kueue on All Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 120 | ### Step 3: Configure Manager for Kind | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 163 | ### Step 4: Configure Worker Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 250 | ### Step 5: Configure Manager Cluster | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 265 | ### Step 6: Validate the Setup | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 287 | ### Step 7: Submit a TAS Job | COMMENT |
| LOW | …/enforce_job_management/opt_in_namespace_management.md | 27 | ### Step 1: Label Namespaces | COMMENT |
| LOW | …/enforce_job_management/opt_in_namespace_management.md | 35 | ### Step 2: Configure the Selector | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 25 | ### Step 1: Configure Cluster Permissions | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 43 | ### Step 2: Generate a Service Account Token | COMMENT |
| LOW⚡ | …itor_pending_workloads/pending_workloads_in_grafana.md | 54 | ### Step 3: Set up port forwarding for Grafana | COMMENT |
| LOW⚡ | …itor_pending_workloads/pending_workloads_in_grafana.md | 64 | ### Step 4: Install the Infinity Plugin | COMMENT |
| LOW⚡ | …itor_pending_workloads/pending_workloads_in_grafana.md | 71 | ### Step 5: Configure the Infinity Data Source | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 82 | ### Step 6: Import the Pending Workloads Dashboard | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 92 | ### Step 7: Set Up ClusterQueue | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 104 | ### Step 8: Create Sample Workloads | COMMENT |
| LOW | …itor_pending_workloads/pending_workloads_in_grafana.md | 116 | ### Step 9: View the Dashboard | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 51 | ### Step 1: Create Kind Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 107 | ### Step 2: Install Kueue on All Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 120 | ### Step 3: Configure Manager for Kind | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 163 | ### Step 4: Configure Worker Clusters | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 250 | ### Step 5: Configure Manager Cluster | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 265 | ### Step 6: Validate the Setup | COMMENT |
| LOW | …/tasks/dev/setup_multikueue_development_environment.md | 287 | ### Step 7: Submit a TAS Job | COMMENT |
| LOW | …n/docs/tasks/manage/setup_topology_aware_scheduling.md | 29 | ## Step 1: A cluster with topology labels | COMMENT |
| 56 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/kueuectl/app/create/create_localqueue.go | 41 | # Create a local queue | COMMENT |
| MEDIUM | cmd/kueuectl/app/create/create_localqueue.go | 44 | # Create a local queue with unknown cluster queue | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_clusterqueue.go | 59 | # Create a ClusterQueue | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_clusterqueue.go | 62 | # Create a ClusterQueue with cohort, namespace selector and other details | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_clusterqueue.go | 70 | # Create a ClusterQueue with nominal quota and one resource flavor named alpha | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_clusterqueue.go | 73 | # Create a ClusterQueue with multiple resource flavors named alpha and beta | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_resourceflavor.go | 45 | # Create a resource flavor | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_resourceflavor.go | 48 | # Create a resource flavor with labels | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_resourceflavor.go | 52 | # Create a resource flavor with node taints | COMMENT |
| MEDIUM⚡ | cmd/kueuectl/app/create/create_resourceflavor.go | 56 | # Create a resource flavor with tolerations | COMMENT |
| MEDIUM | …bility_lifecycle/reference/versioned_feature_list.yaml | 1 | # This file is generated by compatibility_lifecycle tool. | COMMENT |
| MEDIUM | config/components/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM | hack/cherry_pick_pull.sh | 344 | # Create a single commit for the whole PR. '--author' sets the PR author; '-s' | COMMENT |
| MEDIUM | .github/actions/create-draft-release/action.yml | 76 | # Create a draft release. | COMMENT |
| MEDIUM | …19/examples/multikueue/create-multikueue-kubeconfig.sh | 25 | # Creating a restricted MultiKueue role, service account and role binding" | COMMENT |
| MEDIUM | …19/examples/multikueue/create-multikueue-kubeconfig.sh | 330 | # Create the Kubeconfig file | COMMENT |
| MEDIUM | …9/examples/multikueue/dev/setup-kind-multikueue-tas.sh | 161 | # Create a secret bound to the new service account | COMMENT |
| MEDIUM | …20/examples/multikueue/create-multikueue-kubeconfig.sh | 25 | # Creating a restricted MultiKueue role, service account and role binding" | COMMENT |
| MEDIUM | …20/examples/multikueue/create-multikueue-kubeconfig.sh | 330 | # Create the Kubeconfig file | COMMENT |
| MEDIUM | …0/examples/multikueue/dev/setup-kind-multikueue-tas.sh | 161 | # Create a secret bound to the new service account | COMMENT |
| MEDIUM | …ic/examples/multikueue/create-multikueue-kubeconfig.sh | 25 | # Creating a restricted MultiKueue role, service account and role binding" | COMMENT |
| MEDIUM | …ic/examples/multikueue/create-multikueue-kubeconfig.sh | 330 | # Create the Kubeconfig file | COMMENT |
| MEDIUM | …c/examples/multikueue/dev/setup-kind-multikueue-tas.sh | 161 | # Create a secret bound to the new service account | COMMENT |
| MEDIUM | site/data/featuregates/versioned_feature_list.yaml | 1 | # This file is generated by compatibility_lifecycle tool. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | hack/infra/stats/collect_stats.sh | 97 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | hack/testing/shard_test_packages.sh | 17 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | hack/testing/shard_test_packages.sh | 19 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | hack/testing/shard_test_packages.sh | 25 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 47 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 49 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 130 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 132 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 180 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/en.yaml | 182 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 46 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 48 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 129 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 131 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 179 | # ============================================================================== | COMMENT |
| MEDIUM | site/i18n/zh-CN.yaml | 181 | # ============================================================================== | COMMENT |
| MEDIUM | site/data/talks.yaml | 1 | # ===================================================================== | COMMENT |
| MEDIUM | site/data/talks.yaml | 3 | # ===================================================================== | COMMENT |
| MEDIUM | site/data/talks.yaml | 25 | # ===================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …e/static/v0.19/examples/python/install-kueue-queues.py | 0 | install kueue and the queue components. this will error if they are already installed. | STRING |
| HIGH | …e/static/v0.20/examples/python/install-kueue-queues.py | 0 | install kueue and the queue components. this will error if they are already installed. | STRING |
| HIGH | site/static/examples/python/install-kueue-queues.py | 0 | install kueue and the queue components. this will error if they are already installed. | STRING |
| HIGH | …e/static/v0.19/examples/python/install-kueue-queues.py | 0 | get the install version. if a version is specified, use it. otherwise install from the main branch. | STRING |
| HIGH | …e/static/v0.20/examples/python/install-kueue-queues.py | 0 | get the install version. if a version is specified, use it. otherwise install from the main branch. | STRING |
| HIGH | site/static/examples/python/install-kueue-queues.py | 0 | get the install version. if a version is specified, use it. otherwise install from the main branch. | STRING |
| HIGH | site/static/v0.19/examples/python/sample-trainjob.py | 0 | submit a trainjob via the kubeflow sdk. this requires kubeflow trainer to be installed, the selected runtime to exist, a | STRING |
| HIGH | site/static/v0.20/examples/python/sample-trainjob.py | 0 | submit a trainjob via the kubeflow sdk. this requires kubeflow trainer to be installed, the selected runtime to exist, a | STRING |
| HIGH | site/static/examples/python/sample-trainjob.py | 0 | submit a trainjob via the kubeflow sdk. this requires kubeflow trainer to be installed, the selected runtime to exist, a | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/kueueviz/frontend/src/UsageBar.jsx | 58 | export function aggregateResourceForQueue(queue, resourceName) { | CODE |
| LOW | hack/infra/stats/plot.py | 219 | def per_build_cpu_samples_dur(series, min_dur_min=0.0, exclude=None): | CODE |
| LOW | hack/infra/stats/plot.py | 238 | def per_build_cpu_samples_dur_overhead(data, min_dur_min=0.0, exclude=None): | CODE |
| LOW | hack/infra/stats/plot.py | 483 | def per_build_target_peak_cpu(data, min_dur, cfg): | CODE |
| LOW | hack/infra/stats/plot.py | 521 | def cpu_reco_target_duration_improved(data, min_dur, cfg): | CODE |
| LOW | hack/infra/stats/plot.py | 644 | def cpu_reco_target_duration_improved_recursive(data, min_dur, cfg): | CODE |
| LOW | hack/infra/stats/plot.py | 880 | def plot_new_cpu_distribution(data, base_dir, reco, bins=30, min_dur=0.0, | CODE |
| LOW | hack/infra/stats/plot.py | 977 | def plot_duration_distribution(data, base_dir, bins=30, min_dur=0.0, | CODE |
| LOW | hack/infra/stats/plot.py | 999 | def plot_peak_duration_distribution(data, base_dir, bins=30, min_dur=0.0, cfg=None): | CODE |
| LOW | hack/infra/stats/plot.py | 1112 | def plot_throttle_distribution(data, base_dir, threshold=5.0, bins=30): | CODE |
| LOW | hack/tools/prow-runtimes/prow_runtimes.py | 744 | def load_kueue_presubmit_jobs( | CODE |
| LOW | hack/releasing/set_release_note_test.py | 150 | def test_updates_pull_request_body(self) -> None: | CODE |
| LOW | hack/releasing/set_release_note_test.py | 240 | def test_rejects_multiple_release_note_blocks(self) -> None: | CODE |
| LOW | hack/releasing/set_release_note_test.py | 252 | def test_enforces_updated_body_length_limit(self) -> None: | CODE |
| LOW | hack/releasing/set_release_note_test.py | 312 | def test_reports_validation_error(self) -> None: | CODE |
| LOW | hack/releasing/manual_release_submission_test.py | 30 | def test_submission_and_dry_run_control_flow(self): | CODE |
| LOW⚡ | hack/releasing/log_to_issue_test.py | 43 | def test_template_markers_match_workflow_commands(self) -> None: | CODE |
| LOW⚡ | hack/releasing/log_to_issue_test.py | 51 | def test_checks_only_the_item_of_the_command(self) -> None: | CODE |
| LOW⚡ | hack/releasing/log_to_issue_test.py | 59 | def test_release_log_is_not_changed(self) -> None: | CODE |
| LOW | hack/releasing/log_to_issue_test.py | 70 | def test_issue_from_older_template_is_not_changed(self) -> None: | CODE |
| LOW | hack/releasing/log_to_issue_test.py | 76 | def test_only_success_reports_mark_done(self) -> None: | CODE |
| LOW | hack/releasing/log_to_issue_test.py | 115 | def test_latest_entry_is_on_top(self) -> None: | CODE |
| LOW | hack/releasing/set_release_note.py | 119 | def _is_set_release_note_line(line: str) -> bool: | CODE |
| LOW | hack/releasing/create_release_tag_test.py | 165 | def test_tag_step_is_selected_after_a_preceding_step(self): | STRING |
| LOW | hack/releasing/create_release_tag_test.py | 170 | def test_git_wrapper_passes_empty_arguments_to_git(self): | STRING |
| LOW | hack/releasing/create_release_tag_test.py | 181 | def test_lookup_errors_leave_local_and_remote_tags_unchanged(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 192 | def test_invalid_response_stops_before_modifying_tags(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 200 | def test_published_release_is_not_modified(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 206 | def test_empty_changelog_is_rejected(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 210 | def test_remote_lookup_failure_preserves_tags(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 215 | def test_local_creation_failure_preserves_remote_tag(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 219 | def test_rejected_push_preserves_remote_tag(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 232 | def test_concurrent_update_is_not_overwritten(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 237 | def test_concurrent_creation_is_not_overwritten(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 244 | def test_draft_tag_is_updated(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 247 | def test_remote_tag_is_updated_without_local_tag(self): | STRING |
| LOW⚡ | hack/releasing/create_release_tag_test.py | 251 | def test_missing_release_can_create_tag_despite_stale_local_tag(self): | STRING |
| LOW | hack/releasing/authorize_release_actor_test.py | 46 | def test_invalid_configuration(self) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/testing/e2e-kueueviz-rbac-bypass.sh | 81 | # Step 1: Create a "victim" namespace with a Pod containing a secret environment variable. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 99 | # Step 2: Create an "attacker" namespace with an unprivileged ServiceAccount. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 106 | # Step 3: Verify the attacker ServiceAccount is denied direct API access to the victim Pod. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 128 | # Step 4: Ask the KueueViz backend for the victim Pod using the attacker's token. | COMMENT |
| LOW⚡ | hack/testing/e2e-kueueviz-rbac-bypass.sh | 129 | # Step 5: Assert the backend responds with HTTP 401/403 (Forbidden) and not HTTP 200. | COMMENT |
| LOW | pkg/scheduler/flavorassigner/tas_flavorassigner.go | 191 | // PodSet explicitly requires TAS, so we need to check if the flavor supports it. | COMMENT |
| LOW | pkg/controller/core/dqo/distribution.go | 254 | // Step 1: Apply calculated effective quotas to all target ClusterQueues in the subtree. | COMMENT |
| LOW | pkg/controller/core/dqo/distribution.go | 272 | // Step 2: Apply calculated effective quotas to all target Cohorts in the subtree. | COMMENT |
| LOW | pkg/controller/core/dqo/distribution.go | 375 | // Step 1: Determine the resource scale and unit. | COMMENT |
| LOW | pkg/controller/core/dqo/distribution.go | 386 | // Step 2: Calculate floor_i and exact remainder_i = (capacity * specNominal_i) - (floor_i * sumSpecNominal). | COMMENT |
| LOW⚡ | pkg/controller/core/dqo/distribution.go | 401 | // Step 3: Calculate unallocated surplus capacity (diff) and number of surplus units (surplusUnits). | COMMENT |
| LOW⚡ | pkg/controller/core/dqo/distribution.go | 406 | // Step 4: Sort participants by remainder descending, breaking ties deterministically by object UID per KEP-12382. | COMMENT |
| LOW⚡ | pkg/controller/core/dqo/distribution.go | 414 | // Step 5: Assign final allocations, adding +1 capacity unit to each of the top N (surplusUnits) participants, and reco | COMMENT |
| LOW | …controller/admissionchecks/multikueue/workload_test.go | 2355 | // Step 1: worker2 is reconnecting — reconcile should requeue and NOT delete worker2's workload. | COMMENT |
| LOW | …controller/admissionchecks/multikueue/workload_test.go | 2369 | // Step 2: worker2 finishes reconnecting — reconcile should clean up the orphaned workload. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | hack/releasing/authorize_release_actor_test.py | 86 | "aliases: {release-team: null}", | CODE |
| HIGH | …e/static/v0.19/examples/python/install-kueue-queues.py | 29 | help="Version of Kueue to install (if undefined, will install from master branch)", | CODE |
| HIGH | …e/static/v0.20/examples/python/install-kueue-queues.py | 29 | help="Version of Kueue to install (if undefined, will install from master branch)", | CODE |
| HIGH | site/static/examples/python/install-kueue-queues.py | 29 | help="Version of Kueue to install (if undefined, will install from master branch)", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …formance/multikueue/configs/baseline/expectations.yaml | 1 | # Broad regression guardrails for the dedicated MultiKueue performance periodic. | COMMENT |
| MEDIUM | config/components/crd/kustomization.yaml | 16 | #+kubebuilder:scaffold:crdkustomizeresource | COMMENT |
| MEDIUM | config/components/crd/kustomization.yaml | 27 | #+kubebuilder:scaffold:crdkustomizewebhookpatch | COMMENT |
| MEDIUM | config/components/crd/kustomization.yaml | 35 | #+kubebuilder:scaffold:crdkustomizecainjectionpatch | COMMENT |
| MEDIUM | keps/13396-configurable-preemptions/FUTURE_WORK.md | 26 | - [PreemptionLimit (Rate-Limiting Guardrails)](#preemptionlimit-rate-limiting-guardrails) | CODE |
| MEDIUM | keps/13396-configurable-preemptions/README.md | 304 | Rate-limiting guardrails via a separate **PreemptionLimit** cluster-scoped CRD across global, queue, and workload scopes | CODE |
| MEDIUM | keps/13396-configurable-preemptions/README.md | 384 | 3. In future milestones, use a `PreemptionLimit` with 0 allowed preemptions from the hero job's CQ (see [Future Work](FU | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/experimental/skills/.skillsaw.yaml | 106 | # Check if instruction count in a file exceeds LLM instruction budget (~150) | COMMENT |
| LOW | hack/testing/get-build-logs.sh | 34 | # Check if the URL starts with the prefix | COMMENT |
| LOW | hack/testing/e2e-kueueviz-local.sh | 37 | # Set trap to clean up on exit | COMMENT |
| LOW | hack/testing/e2e-kueueviz-backend.sh | 44 | # Set trap to clean up on exit | COMMENT |
| LOW | hack/testing/e2e-kueueviz-backend.sh | 67 | # Check if the container is running | COMMENT |
| LOW | hack/testing/e2e-kueueviz-backend.sh | 74 | # Check if the workspace volume is empty | COMMENT |
| LOW | hack/releasing/promote_pull.sh | 283 | # Check if version matches vMAJOR.MINOR.PATCH | COMMENT |
| LOW | hack/releasing/wait_for_images.sh | 171 | # Verify if a timeout was requested and if we exceeded it | COMMENT |
| LOW | hack/releasing/prepare_pull.sh | 145 | # Check if the branch exists on the remote | COMMENT |
| LOW | .github/workflows/release-utils.yml | 402 | # Check if branch already exists | COMMENT |
| LOW | site/scripts/lsync.sh | 28 | # Check if path exists, and whether it is a directory or a file | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/infra/stats/fetch_prow_metrics.py | 293 | except Exception: | CODE |
| LOW | hack/infra/stats/fetch_prow_metrics.py | 502 | except Exception as e: # keep the batch going | CODE |
| LOW | hack/infra/stats/fetch_prow_metrics.py | 654 | except Exception as err: | CODE |
| MEDIUM | hack/infra/stats/fetch_prow_metrics.py | 499 | def work(job): | CODE |
| LOW | hack/tools/prow-runtimes/prow_runtimes.py | 1107 | except Exception as e: | CODE |
| MEDIUM | hack/releasing/log_to_issue.py | 50 | print("Error: Neither command nor alias was provided.", file=sys.stderr) | CODE |
| MEDIUM | hack/releasing/log_to_issue.py | 93 | print("Error: release-log-start or release-log-end marker is missing or corrupted in the issue body.", file=sys. | CODE |
| LOW | …N/v0.19/docs/tasks/manage/setup_wait_for_pods_ready.md | 232 | except Exception as e: | CODE |
| LOW | …t/zh-CN/docs/tasks/manage/setup_wait_for_pods_ready.md | 232 | except Exception as e: | CODE |
| LOW | …N/v0.20/docs/tasks/manage/setup_wait_for_pods_ready.md | 232 | except Exception as e: | CODE |
| LOW | …n/v0.19/docs/tasks/manage/setup_wait_for_pods_ready.md | 252 | except Exception as e: | CODE |
| LOW | …tent/en/docs/tasks/manage/setup_wait_for_pods_ready.md | 342 | except Exception as e: | CODE |
| LOW | …n/v0.20/docs/tasks/manage/setup_wait_for_pods_ready.md | 342 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | apis/kueue/v1beta2/topology_types.go | 44 | // but want to leverage TAS capabilities improve accuracy of admitting jobs | COMMENT |
| MEDIUM | apis/kueue/v1alpha1/dynamicquotaorchestrator_types.go | 100 | // TODO: once we graduate this API to beta, we should leverage beta API's ResourceFlavorReference type instead of Alpha | COMMENT |
| MEDIUM | hack/testing/get-build-logs.sh | 17 | # This shell script is designed to facilitate the build logs from a Kueue CI/CD (GCS) bucket using the gcloud CLI. | COMMENT |
| MEDIUM | hack/releasing/milestone_pull.sh | 21 | # Resolved without `git rev-parse` so the file stays sourceable from the test harness. | COMMENT |
| MEDIUM | pkg/controller/admissionchecks/multikueue/workload.go | 1080 | // In the future, we may introduce more nuanced remote workload propagation policies, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/config/config_test.go | 1452 | BearerToken: "fake-token", | CODE |
| LOW | pkg/scheduler/scheduler_test.go | 10114 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | pkg/scheduler/scheduler_test.go | 10161 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | pkg/scheduler/scheduler_test.go | 10221 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | pkg/scheduler/scheduler_test.go | 10245 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | pkg/scheduler/scheduler_test.go | 10314 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | pkg/scheduler/scheduler_test.go | 10347 | *utiltestingapi.MakeWorkload("placeholder", "default"). | COMMENT |
| LOW | …r/admissionchecks/multikueue/multikueuecluster_test.go | 1833 | rc := newTestClient(ctx, []byte("placeholder"), nil, nil) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | hack/infra/stats/fetch_prow_metrics.py | 214 | except ValueError: | CODE |
| HIGH | hack/tools/prow-runtimes/prow_runtimes.py | 152 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/infra/stats/fetch_prow_metrics.py | 222 | CODE | |
| LOW | hack/infra/stats/fetch_prow_metrics.py | 368 | CODE | |
| LOW | hack/infra/stats/fetch_prow_metrics.py | 492 | CODE | |
| LOW | hack/infra/stats/fetch_prow_metrics.py | 540 | CODE | |
| LOW | hack/tools/prow-runtimes/prow_runtimes.py | 324 | CODE | |
| LOW | hack/tools/prow-runtimes/prow_runtimes.py | 457 | CODE | |
| LOW | hack/releasing/set_release_note_test.py | 312 | CODE | |
| LOW | hack/releasing/log_to_issue.py | 46 | CODE | |
| LOW | hack/releasing/set_release_note.py | 182 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | keps/3258-delayed-admission-check-retries/README.md | 332 | # In this example, Kueue will wait until 00:10:00Z (the longest delay) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pkg/workload/workload_test.go | 1239 | // Retain keeps gpumem as requested (1024), not the multiplyBy | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/testing/retry.sh | 36 | # Usage: | COMMENT |
| LOW | pkg/controller/jobframework/indexer.go | 39 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/tools/prow-runtimes/prow_runtimes.py | 607 | CODE |