kubescape/kubescape

Pattern Findings

71 matches across 7 categories. Click a row to expand file-level details.

Over-Commented Block42 hits · 42 pts

Severity	File	Line	Snippet
LOW	core/core/download_test.go	161	// func TestDownloadConfigInputs(t *testing.T) {
LOW	core/core/download_test.go	181	// assert.NotNil(t, err)
LOW	core/core/download_test.go	201	// }
LOW	core/core/download_test.go	221	// Identifier: "id",
LOW	core/core/download_test.go	241	// for _, tt := range tests {
LOW	core/core/download_test.go	261	// downloadInfo: &metav1.DownloadInfo{
LOW	core/core/download_test.go	281	// },
LOW	core/core/download_test.go	301	// isErrNil bool
LOW	core/core/download_test.go	321	// Path: filepath.Join("path", "to"),
LOW	core/core/patch.go	361	// lookPath is exec.LookPath, indirected so the docker-CLI preflight in
LOW	core/core/patch_integration_test.go	1	//go:build integration_patch
LOW	core/cautils/scancoverage.go	41	type NotEvaluatedControl struct {
LOW	…/testdata/kustomize/helm/charts/test-chart/values.yaml	1	# Empty default values for test-chart fixture used by TestKustomizeDirectoryWithHelmCharts.
LOW	core/cautils/getter/doc.go	1	// Package getter provides functionality to retrieve policy objects.
LOW	core/cautils/helmprovenance/helmprovenance.go	1	// Package helmprovenance recovers a best-effort link from a rendered Helm
LOW	core/cautils/helmprovenance/helmprovenance.go	21	"strings"
LOW	core/cautils/helmprovenance/helmprovenance.go	41	// TemplateLine is the 1-based line of the first apiVersion: occurrence
LOW	core/cautils/helmprovenance/helmprovenance.go	81	// .Values.foo.bar — captures the trailing ".foo.bar" segment.
LOW	core/pkg/containerscan/gojayunmarshaller.go	201	return 0
LOW	core/pkg/containerscan/datastructures.go	21	var KnownSeverities = map[string]bool{
LOW	core/pkg/containerscan/datastructures.go	41	// fmt.Println(result) // Output: 1
LOW	core/pkg/policyhandler/cache_bug_test.go	261	//
LOW	core/pkg/securityexception/expires_at_cel_test.go	1	package securityexception
LOW	httphandler/docs/docs.go	1	// Package classification Kubescape Microservice
LOW	httphandler/handlerequests/v1/requestparser.go	21	// Do not delete results after returning (relevant only for synchronous requests)
LOW	httphandler/handlerequests/v1/requestshandler_test.go	61	// Status API
LOW	httphandler/handlerequests/v1/results_handler_test.go	21	// completely uncovered. Those branches govern:
LOW	examples/helm_chart/Chart.yaml	21	# to the chart and its templates, including the app version.
LOW	examples/helm_chart/values.yaml	1	# Default values for kubescape.
LOW	examples/online-boutique/emailservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/checkoutservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/recommendationservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/frontend.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/paymentservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/productcatalogservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/cartservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/loadgenerator.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/currencyservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/shippingservice.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/redis.yaml	1	# Copyright 2018 Google LLC
LOW	examples/online-boutique/adservice.yaml	1	# Copyright 2018 Google LLC
LOW	.github/workflows/scorecard.yml	41	with:

Decorative Section Separators6 hits · 27 pts

Severity	File	Line	Snippet
MEDIUM	examples/helm_chart/values.yaml	6	# ┌────────────── timezone (optional)
MEDIUM	examples/helm_chart/values.yaml	7	# \| ┌───────────── minute (0 - 59)
MEDIUM	examples/helm_chart/values.yaml	8	# \| │ ┌───────────── hour (0 - 23)
MEDIUM	examples/helm_chart/values.yaml	9	# \| │ │ ┌───────────── day of the month (1 - 31)
MEDIUM	examples/helm_chart/values.yaml	10	# \| │ │ │ ┌───────────── month (1 - 12)
MEDIUM	examples/helm_chart/values.yaml	11	# \| │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday;

Redundant / Tautological Comments16 hits · 16 pts

Severity	File	Line	Snippet
LOW	core/cautils/getter/testdata/NSA.json	617	"rule": "package armo_builtins\n\n\n# Check if container has limits\ndeny[msga] {\n \tpods := [pod \| pod = in
LOW	core/cautils/getter/testdata/NSA.json	1687	"rule": "package armo_builtins\n\ndeny[msga] {\n\tdeployment := input[_]\n\tdeployment.kind == \"Deployment\"\
LOW	core/cautils/getter/testdata/NSA.json	1747	"rule": "package armo_builtins\nimport data.cautils as cautils\n\n# Check if audit logs is enabled for GKE\nde
LOW	core/cautils/getter/testdata/NSA.json	1790	"rule": "package armo_builtins\nimport data.cautils as cautils\n\n# Check if audit logs is enabled for native
LOW	core/cautils/getter/testdata/NSA.json	1850	"rule": "package armo_builtins\n\n\n# Check if encryption in etcd in enabled for EKS\ndeny[msga] {\n\tcluster_
LOW	core/cautils/getter/testdata/NSA.json	1893	"rule": "package armo_builtins\n\nimport data.cautils as cautils\n\n# Check if encryption in etcd is enabled f
LOW	core/cautils/getter/testdata/NSA.json	1955	"rule": "package armo_builtins\n\n\n# Check if PSP is enabled for GKE\ndeny[msga] {\n\tcluster_config := input
LOW	core/cautils/getter/testdata/NSA.json	1998	"rule": "package armo_builtins\n\n\n# Check if psp is enabled for native k8s\ndeny[msga] {\n\tapiserverpod :=
LOW	core/cautils/getter/testdata/MITRE.json	2251	"rule": "package armo_builtins\n\ndeny[msga] {\n\tdeployment := input[_]\n\tdeployment.kind == \"Deployment\"\
LOW	core/cautils/getter/testdata/MITRE.json	2311	"rule": "package armo_builtins\nimport data.cautils as cautils\n\n# Check if audit logs is enabled for GKE\nde
LOW	core/cautils/getter/testdata/MITRE.json	2354	"rule": "package armo_builtins\nimport data.cautils as cautils\n\n# Check if audit logs is enabled for native
LOW	core/cautils/getter/testdata/MITRE.json	2414	"rule": "package armo_builtins\n\n\n# Check if encryption in etcd in enabled for EKS\ndeny[msga] {\n\tcluster_
LOW	core/cautils/getter/testdata/MITRE.json	2457	"rule": "package armo_builtins\n\nimport data.cautils as cautils\n\n# Check if encryption in etcd is enabled f
LOW	core/cautils/getter/testdata/MITRE.json	2517	"rule": "package armo_builtins\n\n\n# Check if PSP is enabled for GKE\ndeny[msga] {\n\tcluster_config := input
LOW	core/cautils/getter/testdata/MITRE.json	2560	"rule": "package armo_builtins\n\n\n# Check if psp is enabled for native k8s\ndeny[msga] {\n\tapiserverpod :=
LOW	smoke_testing/test_version.py	24	# Check if RELEASE (with or without 'v' prefix) is in the output

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet
MEDIUM	cmd/vap/vap.go	31	# Create a policy binding by Kubescape control ID
MEDIUM	cmd/vap/vap.go	33	# Create a policy binding by ValidatingAdmissionPolicy name
MEDIUM	examples/cloud-vendor-integration/aws.sh	35	# Create a kubescape policy

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet
MEDIUM	core/pkg/hostsensorutils/utils_test.go	20	// Essentially, unless we hit some extreme edge case, we never get an error to be added to the map.

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet
LOW	smoke_testing/smoke_utils.py	17	except Exception as e:
MEDIUM	smoke_testing/smoke_utils.py	7	def run_command(command, stdin=subprocess.PIPE, stderr=subprocess.STDOUT):

Hyper-Verbose Identifiers1 hit · 1 pts

Severity	File	Line	Snippet
LOW	smoke_testing/test_scan.py	52	def scan_all_format_pretty_printer(kubescape_exec: str):

Score History

Severity Breakdown

Pattern Findings