Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.
This report presents the forensic synthetic code analysis of maximhq/bifrost, a Go project with 7,627 GitHub stars. SynthScan v2.0 examined 1,145,972 lines of code across 3002 source files, recording 3239 pattern matches distributed across 21 syntactic categories. The overall adjusted score of 4.4 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3239 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | terraform/modules/bifrost/variables.tf | 180 | # ----------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/modules/bifrost/variables.tf | 183 | #----------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 34 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 36 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 50 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 52 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 72 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 74 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 101 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/main.tf | 103 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/main.tf | 153 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/main.tf | 155 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/main.tf | 164 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/main.tf | 166 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/services/aci/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/services/aci/main.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/services/aci/main.tf | 13 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | terraform/modules/bifrost/azure/services/aci/main.tf | 15 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 16 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 18 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 53 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 55 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 68 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 70 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 85 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 87 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 151 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 153 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 289 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 291 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 318 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 320 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 364 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/azure/services/aks/main.tf | 366 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/gcp_cloudrun.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/gcp_cloudrun.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | …raform/modules/bifrost/tests/config_merging.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | …raform/modules/bifrost/tests/config_merging.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/azure_aks.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/azure_aks.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/azure_aci.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/azure_aci.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_shared.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_shared.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_eks.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_eks.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/kubernetes.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/kubernetes.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/gcp_gke.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/gcp_gke.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_ecs.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/aws_ecs.tftest.hcl | 3 | # ============================================================================= | COMMENT |
| MEDIUM | …aform/modules/bifrost/tests/root_validation.tftest.hcl | 1 | # ============================================================================= | COMMENT |
| MEDIUM | …aform/modules/bifrost/tests/root_validation.tftest.hcl | 7 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/setup/main.tf | 1 | # ============================================================================= | COMMENT |
| MEDIUM | terraform/modules/bifrost/tests/setup/main.tf | 10 | # ============================================================================= | COMMENT |
| 548 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …aform/modules/bifrost/tests/root_validation.tftest.hcl | 141 | COMMENT | |
| LOW | terraform/modules/bifrost/aws/services/eks/main.tf | 1 | # ============================================================================= | COMMENT |
| LOW | ui/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | ui/app/clientLayout.tsx | 41 | } | COMMENT |
| LOW | ui/app/oauth/consent/layout.tsx | 1 | import TempTokenScope from "@/components/tempTokenScope"; | COMMENT |
| LOW | …/components/load-balancer/loadBalancerSettingsView.tsx | 1 | // On OSS, the adaptive routing settings page shows the same enterprise upsell as the | COMMENT |
| LOW | …/_fallbacks/enterprise/lib/registrations/userPicker.ts | 1 | // OSS-build fallback for the enterprise user picker registration. | COMMENT |
| LOW | …backs/enterprise/lib/registrations/modelLimitScopes.ts | 1 | // OSS-build fallback for the enterprise scope registrations. | COMMENT |
| LOW | …kspace/oauth-grants/views/oauthGrantsFilterSidebar.tsx | 401 | ); | COMMENT |
| LOW | ui/app/workspace/mcp-registry/views/mcpClientSheet.tsx | 401 | // empty array clears them. Only send either when the user | COMMENT |
| LOW | ui/app/workspace/mcp-sessions/auth/page.tsx | 1 | // Auth landing route for inline-401 URLs returned by the inference path. | COMMENT |
| LOW | ui/app/workspace/mcp-sessions/views/sessionsTable.tsx | 1 | // Base sessions table: renders token rows + pending flow rows + per-user | COMMENT |
| LOW | ui/components/headersForm.tsx | 1 | // Reusable form for the MCP per-user-headers flow. | COMMENT |
| LOW | ui/components/headersForm.tsx | 21 | import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip"; | COMMENT |
| LOW | ui/components/headersForm.tsx | 41 | onSubmit: (values: Record<string, string>) => Promise<void> | void; | COMMENT |
| LOW | ui/components/tempTokenScope.tsx | 1 | // TempTokenScope wraps a page that authenticates via a short-lived temp token | COMMENT |
| LOW | ui/components/tempTokenScope.tsx | 21 | import { useEffect, useState } from "react"; | COMMENT |
| LOW | ui/components/entitySelectors/teamSelector.tsx | 1 | // Unified async team selector — the single way to pick a governance team | COMMENT |
| LOW | ui/components/entitySelectors/entitySelector.tsx | 1 | // Shared shell behind every async entity selector (virtual keys, users, | COMMENT |
| LOW | ui/lib/types/mcp.ts | 41 | } | COMMENT |
| LOW | ui/lib/types/mcp.ts | 61 | // SSO login flow always requests a token self-audienced to itself, so a | COMMENT |
| LOW | ui/lib/types/mcp.ts | 121 | // per_user_header_keys: admin-declared header *names* that each caller | COMMENT |
| LOW | ui/lib/types/mcpPerUserHeaders.ts | 1 | // Types for the MCP per-user headers credential flow. | COMMENT |
| LOW | ui/lib/types/mcpSessions.ts | 1 | // Types for the MCP Auth Sessions tab + auth landing flow. | COMMENT |
| LOW | ui/lib/types/mcpSessions.ts | 61 | created_at: string; | COMMENT |
| LOW | ui/lib/registries/modelLimitScopes.tsx | 1 | // Runtime registry of model_config scopes available to the UI. | COMMENT |
| LOW | ui/lib/registries/userPicker.tsx | 1 | // Runtime registry for the governance user picker. | COMMENT |
| LOW | ui/lib/store/apis/tempToken.ts | 1 | // Module-level state for the temp-token scope wrapper. | COMMENT |
| LOW | cmd/e2eseed/seed/seed.go | 301 | "e2e_seed_team_tiggings": prefix + "-team-tiggings", | COMMENT |
| LOW | core/encryptedreasoning.go | 21 | // reaches each provider as a different field, so each provider refuses it in its own | COMMENT |
| LOW | core/encryptedreasoning.go | 41 | // item id. That is the exact refusal a fallback from Azure to Bedrock Mantle earns on | COMMENT |
| LOW | core/encryptedreasoning.go | 121 | // replayed encrypted reasoning content. | COMMENT |
| LOW | core/encryptedreasoning.go | 161 | COMMENT | |
| LOW | core/encryptedreasoning.go | 201 | // retry loop, so both are handled here: | COMMENT |
| LOW | core/encryptedreasoning.go | 221 | } | COMMENT |
| LOW | core/encryptedreasoning.go | 241 | // | COMMENT |
| LOW | core/encryptedreasoning.go | 321 | var contentBlockReasoningCarriers = []string{"signature", "encrypted_content"} | COMMENT |
| LOW | core/encryptedreasoning.go | 461 | // in a Responses-shaped request, reporting whether anything changed. Reasoning items | COMMENT |
| LOW | core/utils_test.go | 221 | } | COMMENT |
| LOW | core/bifrost_test.go | 1761 | // TestProviderQueue_SendOnClosedChannel_Race demonstrates the TOCTOU race that | COMMENT |
| LOW | core/bifrost_test.go | 2161 | // can transparently re-route to newPq when it later detects isClosing(). | COMMENT |
| LOW | core/encryptedreasoning_test.go | 301 | if err == nil { | COMMENT |
| LOW | core/encryptedreasoning_test.go | 841 | // This case expected false while the strip only cleared encrypted_content | COMMENT |
| LOW | core/encryptedreasoning_test.go | 921 | // "message": "encrypted content missing recognized prefix (expected `rsn_` or `smry_`)"} | COMMENT |
| LOW | core/encryptedreasoning_test.go | 941 | // Mantle serves OpenAI-family models over an OpenAI-compatible /v1/responses endpoint, | COMMENT |
| LOW | core/encryptedreasoning_test.go | 1021 | account.configs[provider].NetworkConfig.RetryBackoffInitial = time.Millisecond | COMMENT |
| LOW | core/utils.go | 361 | ctx.ClearValue(schemas.BifrostContextKeyAttemptTrail) | COMMENT |
| LOW | core/utils.go | 381 | // streaming state, plus caller-forwarded extra headers and the caller's | COMMENT |
| LOW | core/bifrost.go | 101 | } | COMMENT |
| LOW | core/bifrost.go | 121 | // | COMMENT |
| LOW | core/bifrost.go | 3761 | schemas.UnregisterKnownProvider(providerKey) | COMMENT |
| LOW | core/bifrost.go | 4041 | // MCP PUBLIC API | COMMENT |
| LOW | core/bifrost.go | 4061 | // | COMMENT |
| LOW | core/bifrost.go | 4161 | func (bifrost *Bifrost) GetAvailableMCPTools(ctx *schemas.BifrostContext) []schemas.ChatTool { | COMMENT |
| LOW | core/bifrost.go | 4221 | } | COMMENT |
| LOW | core/bifrost.go | 4281 | // Parameters: | COMMENT |
| LOW | core/bifrost.go | 6041 | // Do NOT releaseChannelMessage here — see the identical note in tryRequest. | COMMENT |
| LOW | core/bifrost.go | 6061 | // executeRequestWithRetries is a generic function that handles common request processing logic. | COMMENT |
| LOW | core/bifrost.go | 6121 | // after a 429 pool reset, the selector can legitimately re-pick the same key. | COMMENT |
| LOW | core/bifrost.go | 6181 | // Propagate the span context so subsequent spans (llm.call / retry.attempt.N) | COMMENT |
| 1071 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 88 | # Step 1: Initialize OpenAI client with Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 94 | # Step 2: Send chat request | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 100 | # Step 3: Check for tool calls | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 104 | # Step 4: Execute tool via Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 117 | # Step 5: Continue conversation with results | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 129 | // Step 1: Initialize OpenAI client with Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 135 | // Step 2: Send chat request | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 143 | // Step 3: Check for tool calls | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 146 | // Step 4: Execute tool via Bifrost | COMMENT |
| LOW | ui/app/workspace/mcp-logs/views/emptyState.tsx | 160 | // Step 5: Continue conversation with results | COMMENT |
| LOW | core/bifrost_test.go | 1811 | // Step 1: isClosing() passes — queue is open. | COMMENT |
| LOW | core/bifrost_test.go | 1824 | // Step 2: enter the exact select guard used in production. | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2194 | // Step 2: atomically replace — new producers now get newPq | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2196 | // Step 4: signal old closing — stale producers will detect this | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2432 | // Step 2: expose newPq first so stale producers can re-route to it | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2436 | // Step 3: transfer buffered messages oldPq → newPq. | COMMENT |
| LOW | core/bifrost_test.go | 2452 | // Step 4: signal closing — producers holding a stale oldPq ref now | COMMENT |
| LOW⚡ | core/bifrost.go | 3712 | // Step 1: Load the ProviderQueue and verify provider exists | COMMENT |
| LOW⚡ | core/bifrost.go | 3719 | // Step 2: Signal closing. Blocks new producers (isClosing() returns true) and | COMMENT |
| LOW⚡ | core/bifrost.go | 3724 | // Step 3: Wait for all workers to finish in-flight requests and exit. | COMMENT |
| LOW⚡ | core/bifrost.go | 3743 | // Step 4: Remove the provider from the request queues. | COMMENT |
| LOW⚡ | core/bifrost.go | 3746 | // Step 5: Remove the provider from the wait groups. | COMMENT |
| LOW⚡ | core/bifrost.go | 3749 | // Step 6: Remove the provider from the providers slice. | COMMENT |
| LOW⚡ | core/bifrost.go | 3824 | // Step 1: Create provider instance before touching live routing state. If | COMMENT |
| LOW⚡ | core/bifrost.go | 3831 | // Step 2: Create new ProviderQueue and wait group with updated settings. | COMMENT |
| LOW⚡ | core/bifrost.go | 3839 | // Step 3: Atomically replace the provider in the providers slice before new | COMMENT |
| LOW⚡ | core/bifrost.go | 3955 | // Step 6: Register cleanup before signalling the old queue. Otherwise | COMMENT |
| LOW⚡ | core/bifrost.go | 3965 | // Step 7: Signal the old queue is closing. Stale producers that still hold a | COMMENT |
| LOW⚡ | core/bifrost.go | 3970 | // Step 8: Cleanup old workers asynchronously. Waiting here under the provider | COMMENT |
| LOW⚡ | core/bifrost.go | 6772 | // Step 2: derive per-side capture and strip flags. | COMMENT |
| LOW⚡ | core/bifrost.go | 6780 | // Step 3: write all internal signals explicitly (never touch the user override keys). | COMMENT |
| LOW | core/bifrost.go | 3882 | // Step 4: Publish the new queue/wait group and start new workers before old | COMMENT |
| LOW | core/bifrost.go | 3898 | // Step 5: Transfer buffered requests from the old queue to the new queue BEFORE | COMMENT |
| LOW | core/bifrost.go | 6748 | // Step 1: compute effective value for each flag (provider config ← per-request override). | COMMENT |
| LOW⚡ | core/providers/utils/models.go | 274 | // Step 1: resolve name — collect all alias matches (or the raw ID if none match). | COMMENT |
| LOW⚡ | core/providers/utils/models.go | 281 | // Step 2: allowlist check. | COMMENT |
| LOW | core/providers/utils/models.go | 297 | // Step 3: blacklist check — blacklist always wins regardless of allowlist or aliases. | COMMENT |
| LOW | core/providers/utils/utils_test.go | 353 | // Step 1: Parse the error (like ParseOpenAIError does) | COMMENT |
| LOW | core/providers/utils/utils_test.go | 366 | // Step 2: Enrich with request (like providers do) | COMMENT |
| LOW⚡ | core/providers/bedrock/bedrock_test.go | 2527 | // Step 1: BedrockConverseRequest → BifrostResponsesRequest | COMMENT |
| LOW⚡ | core/providers/bedrock/bedrock_test.go | 2535 | // Step 2: BifrostResponsesRequest → BedrockConverseRequest | COMMENT |
| LOW | core/providers/anthropic/serversidefallback_test.go | 134 | // Step 1: Anthropic -> Bifrost | COMMENT |
| LOW | core/providers/anthropic/serversidefallback_test.go | 155 | // Step 2: Bifrost -> Anthropic | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 183 | // Step 1: output_item.added | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 199 | // Step 2: FunctionCallArgumentsDelta events (should be skipped) | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 211 | // Step 3: output_item.done with full accumulated arguments | COMMENT |
| LOW | core/providers/anthropic/compaction_test.go | 598 | // Step 1: Anthropic → Bifrost | COMMENT |
| LOW | core/providers/anthropic/compaction_test.go | 629 | // Step 2: Bifrost → Anthropic | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 759 | // Step 1: Parse the client event (same path as wsrealtime.go). | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 768 | // Step 2: Convert back to provider format. | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 775 | // Step 3: Verify the output JSON contains the audio field with correct value. | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 626 | // Step 1: List tool files (returns a tree structure as text) | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 646 | // Step 2: Read a tool file using readToolFile | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 666 | // Step 3: Execute code that uses the tools | COMMENT |
| LOW | core/internal/llmtests/transcription_stream.go | 71 | // Step 1: Generate TTS audio | COMMENT |
| LOW | core/internal/llmtests/transcription_stream.go | 138 | // Step 2: Test streaming transcription | COMMENT |
| LOW | core/internal/llmtests/transcription.go | 98 | // Step 1: Generate TTS audio | COMMENT |
| LOW | core/internal/llmtests/transcription.go | 164 | // Step 2: Transcribe the generated audio | COMMENT |
| LOW⚡ | core/internal/llmtests/provider_feature_support_test.go | 901 | // Step 1: Validate tools for provider | COMMENT |
| LOW⚡ | core/internal/llmtests/provider_feature_support_test.go | 911 | // Step 2: Convert bifrost request → anthropic request | COMMENT |
| 256 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 88 | # Step 1: Initialize OpenAI client with Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 94 | # Step 2: Send chat request | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 100 | # Step 3: Check for tool calls | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 104 | # Step 4: Execute tool via Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 117 | # Step 5: Continue conversation with results | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 129 | // Step 1: Initialize OpenAI client with Bifrost | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 135 | // Step 2: Send chat request | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 143 | // Step 3: Check for tool calls | COMMENT |
| LOW⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 146 | // Step 4: Execute tool via Bifrost | COMMENT |
| LOW | ui/app/workspace/mcp-logs/views/emptyState.tsx | 160 | // Step 5: Continue conversation with results | COMMENT |
| LOW | core/bifrost_test.go | 1811 | // Step 1: isClosing() passes — queue is open. | COMMENT |
| LOW | core/bifrost_test.go | 1824 | // Step 2: enter the exact select guard used in production. | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2194 | // Step 2: atomically replace — new producers now get newPq | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2196 | // Step 4: signal old closing — stale producers will detect this | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2432 | // Step 2: expose newPq first so stale producers can re-route to it | COMMENT |
| LOW⚡ | core/bifrost_test.go | 2436 | // Step 3: transfer buffered messages oldPq → newPq. | COMMENT |
| LOW | core/bifrost_test.go | 2452 | // Step 4: signal closing — producers holding a stale oldPq ref now | COMMENT |
| LOW⚡ | core/bifrost.go | 3712 | // Step 1: Load the ProviderQueue and verify provider exists | COMMENT |
| LOW⚡ | core/bifrost.go | 3719 | // Step 2: Signal closing. Blocks new producers (isClosing() returns true) and | COMMENT |
| LOW⚡ | core/bifrost.go | 3724 | // Step 3: Wait for all workers to finish in-flight requests and exit. | COMMENT |
| LOW⚡ | core/bifrost.go | 3743 | // Step 4: Remove the provider from the request queues. | COMMENT |
| LOW⚡ | core/bifrost.go | 3746 | // Step 5: Remove the provider from the wait groups. | COMMENT |
| LOW⚡ | core/bifrost.go | 3749 | // Step 6: Remove the provider from the providers slice. | COMMENT |
| LOW⚡ | core/bifrost.go | 3824 | // Step 1: Create provider instance before touching live routing state. If | COMMENT |
| LOW⚡ | core/bifrost.go | 3831 | // Step 2: Create new ProviderQueue and wait group with updated settings. | COMMENT |
| LOW⚡ | core/bifrost.go | 3839 | // Step 3: Atomically replace the provider in the providers slice before new | COMMENT |
| LOW⚡ | core/bifrost.go | 3955 | // Step 6: Register cleanup before signalling the old queue. Otherwise | COMMENT |
| LOW⚡ | core/bifrost.go | 3965 | // Step 7: Signal the old queue is closing. Stale producers that still hold a | COMMENT |
| LOW⚡ | core/bifrost.go | 3970 | // Step 8: Cleanup old workers asynchronously. Waiting here under the provider | COMMENT |
| LOW⚡ | core/bifrost.go | 6772 | // Step 2: derive per-side capture and strip flags. | COMMENT |
| LOW⚡ | core/bifrost.go | 6780 | // Step 3: write all internal signals explicitly (never touch the user override keys). | COMMENT |
| LOW | core/bifrost.go | 3882 | // Step 4: Publish the new queue/wait group and start new workers before old | COMMENT |
| LOW | core/bifrost.go | 3898 | // Step 5: Transfer buffered requests from the old queue to the new queue BEFORE | COMMENT |
| LOW | core/bifrost.go | 6748 | // Step 1: compute effective value for each flag (provider config ← per-request override). | COMMENT |
| LOW⚡ | core/providers/utils/models.go | 274 | // Step 1: resolve name — collect all alias matches (or the raw ID if none match). | COMMENT |
| LOW⚡ | core/providers/utils/models.go | 281 | // Step 2: allowlist check. | COMMENT |
| LOW | core/providers/utils/models.go | 297 | // Step 3: blacklist check — blacklist always wins regardless of allowlist or aliases. | COMMENT |
| LOW | core/providers/utils/utils_test.go | 353 | // Step 1: Parse the error (like ParseOpenAIError does) | COMMENT |
| LOW | core/providers/utils/utils_test.go | 366 | // Step 2: Enrich with request (like providers do) | COMMENT |
| LOW⚡ | core/providers/bedrock/bedrock_test.go | 2527 | // Step 1: BedrockConverseRequest → BifrostResponsesRequest | COMMENT |
| LOW⚡ | core/providers/bedrock/bedrock_test.go | 2535 | // Step 2: BifrostResponsesRequest → BedrockConverseRequest | COMMENT |
| LOW | core/providers/anthropic/serversidefallback_test.go | 134 | // Step 1: Anthropic -> Bifrost | COMMENT |
| LOW | core/providers/anthropic/serversidefallback_test.go | 155 | // Step 2: Bifrost -> Anthropic | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 183 | // Step 1: output_item.added | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 199 | // Step 2: FunctionCallArgumentsDelta events (should be skipped) | COMMENT |
| LOW | core/providers/anthropic/websearch_test.go | 211 | // Step 3: output_item.done with full accumulated arguments | COMMENT |
| LOW | core/providers/anthropic/compaction_test.go | 598 | // Step 1: Anthropic → Bifrost | COMMENT |
| LOW | core/providers/anthropic/compaction_test.go | 629 | // Step 2: Bifrost → Anthropic | COMMENT |
| LOW | core/providers/anthropic/anthropic.go | 1065 | // So we need to check if the response.Usage is nil and then if usage != nil | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 759 | // Step 1: Parse the client event (same path as wsrealtime.go). | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 768 | // Step 2: Convert back to provider format. | COMMENT |
| LOW⚡ | core/providers/openai/realtime_test.go | 775 | // Step 3: Verify the output JSON contains the audio field with correct value. | COMMENT |
| LOW | core/providers/openai/openai.go | 685 | // So we need to check if the response.Usage is nil and then if usage != nil | COMMENT |
| LOW | core/providers/openai/openai.go | 1405 | // So we need to check if the response.Usage is nil and then if usage != nil | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 626 | // Step 1: List tool files (returns a tree structure as text) | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 646 | // Step 2: Read a tool file using readToolFile | COMMENT |
| LOW | core/internal/mcptests/codemode_files_test.go | 666 | // Step 3: Execute code that uses the tools | COMMENT |
| LOW | core/internal/llmtests/transcription_stream.go | 71 | // Step 1: Generate TTS audio | COMMENT |
| LOW | core/internal/llmtests/transcription_stream.go | 138 | // Step 2: Test streaming transcription | COMMENT |
| LOW | core/internal/llmtests/transcription.go | 98 | // Step 1: Generate TTS audio | COMMENT |
| 165 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ui/app/workspace/logs/views/logsVolumeChart.tsx | 264 | // This is more robust than exact timestamp matching | COMMENT |
| MEDIUM | core/providers/gemini/types.go | 882 | // Live API, if `store_context` bool is specified, Gemini will leverage it to automatically | COMMENT |
| MEDIUM | core/providers/openai/openai.go | 3601 | // Determine image index with robust tracking for interleaved chunks | COMMENT |
| MEDIUM | core/providers/openai/openai.go | 5207 | // Determine image index with robust tracking for interleaved chunks | COMMENT |
| MEDIUM | core/network/http.go | 315 | // RetryIfErr normally sees raw io.EOF; we match both to stay robust across versions. | COMMENT |
| MEDIUM | core/internal/llmtests/test_retry_conditions.go | 37 | // Check for textual content using the already robust GetResultContent function | COMMENT |
| MEDIUM | core/schemas/plugin.go | 211 | // Plugin authors should ensure their hooks are robust to both response and error being nil, and should not assume eithe | COMMENT |
| MEDIUM | framework/logstore/rdb.go | 371 | // Use array overlap operator which can leverage the GIN index on | COMMENT |
| MEDIUM | framework/logstore/rdb.go | 488 | // Use @> containment operator to leverage GIN index on metadata::jsonb. | COMMENT |
| MEDIUM | plugins/semanticcache/plugin_embedding_test.go | 182 | // minimum margin that's robust to seconds-level rounding + a slow CI. | COMMENT |
| MEDIUM | transports/bifrost-http/.air.debug.toml | 29 | # Run binary via delve debugger in headless mode on port 2345 | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_google.py | 3633 | # Generate one source image and reuse it to keep test robust/lightweight. | COMMENT |
| MEDIUM | tests/e2e/features/dashboard/pages/dashboard.page.ts | 36 | // Chart cards - using data-testid for robust selectors | COMMENT |
| MEDIUM | scripts/bifrost-migration-cli/scripts/seed_models.sh | 3 | # seed_models.sh - seed the comprehensive model fixture into a running LiteLLM | COMMENT |
| MEDIUM | .github/workflows/run-core-tests.yml | 76 | # job log, corrupting the harness counters. | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 272 | # core build, then runs the provider harness (tests/e2e/api/collections/provider-harness.json) | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 274 | # .github/workflows/scripts/test-provider-harness.sh. The harness runs on the | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 279 | # Gated on core alone. The provider harness only exercises core's provider | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 284 | # harness. Every downstream release job already accepts | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 287 | # test-api-integrations and test-migrations. Matches test-cli-harness. | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 772 | # test-cli-harness's matrix below. | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 780 | # Must track test-cli-harness's gate exactly - this job exists only to build | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 781 | # that matrix, so running it when the harness is skipped resolves versions | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 854 | # tmp/cli-harness-<cli>.log and uploaded with the reports below. | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 857 | # Gated on core alone, matching test-core. What this harness actually covers | COMMENT |
| MEDIUM⚡ | .github/workflows/release-pipeline.yml | 860 | # accept `needs.test-cli-harness.result == 'skipped'`. | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 55 | # upstream provider: test-core (the ~90 minute provider harness) and | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 70 | # nothing to do with that provider - not to get a red harness out the door. | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 175 | # cli-harness leg: `make build-ui` ~54s, `go build` on bifrost-http ~2m30s - | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 178 | # every build helper honours (harness-gateway.sh, test-api-integrations.sh, | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 302 | # 127.0.0.1:8080 is the bifrost-http binary the harness drives. | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 449 | # Additional vars the provider harness forwards to newman: | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 460 | # harness prints, turning "fail 141" into "fail ***4***". Not | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 486 | # Publishes the provider harness's failure breakdown to R2 for the release | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 503 | # cli-harness reports the changelog links alongside it. | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 734 | # test-provider-harness.sh), so reaching this job means three attempts failed | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 827 | # CLI harness - installs the real Claude Code, Codex and OpenCode CLIs and | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 830 | # narrow: one model per CLI and a core scenario set. See test-cli-harness.sh | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 871 | # The five run_cases invocations in test-cli-harness.sh each pass | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 875 | # harness artifacts too. Raised twice: 90 -> 120 when the opencode suite was | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 894 | # under XDG_CACHE_HOME - which the harness points at a fresh temp dir | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 987 | # Bedrock, for the opencode-responses suite. The harness gateway seeds | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 1018 | # in test-cli-harness.sh only apply if that job had to fall back. | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 3455 | # test-cli-harness publish their reports to. Unset means the changelog | COMMENT |
| MEDIUM | .github/workflows/release-pipeline.yml | 3459 | # The CLI harness legs that actually ran. Normally latest/latest-1/ | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/push-mintlify-changelog.sh | 51 | # The URLs are derived from the version alone - test-core and test-cli-harness | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/push-mintlify-changelog.sh | 60 | # One row per CLI harness leg that actually ran. | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/push-mintlify-changelog.sh | 64 | # test-cli-harness then publishes to test-reports/v<version>/cli-harness-pinned/. | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 4 | # CI runner for the Bifrost provider harness (tests/e2e/api/collections/provider-harness.json). | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 6 | # Local developers run `make run-provider-harness-test`, which auto-starts Bifrost | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 10 | # 1. builds the UI + the bifrost-http binary (the harness needs a live gateway), | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 16 | # 5. delegates to `make run-provider-harness-test CI=1 USE_INFISICAL=0`, which | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 18 | # runs harness-monitor.mjs in append-only --ci mode. | COMMENT |
| MEDIUM⚡ | .github/workflows/scripts/test-provider-harness.sh | 20 | # Exit code is the harness exit code, so a provider failure fails the job. | COMMENT |
| MEDIUM | .github/workflows/scripts/test-provider-harness.sh | 48 | # shellcheck source=./harness-gateway.sh | COMMENT |
| MEDIUM | .github/workflows/scripts/test-provider-harness.sh | 186 | # without this, the provider harness ships no HTML at all while the CLI harness | COMMENT |
| MEDIUM | .github/workflows/scripts/test-provider-harness.sh | 187 | # does. harness-viewer.mjs already renders exactly this JSON for local use, so | COMMENT |
| MEDIUM | .github/workflows/scripts/test-provider-harness.sh | 203 | # points at provider-harness/index.html unconditionally, and the upload step | COMMENT |
| MEDIUM | .github/workflows/scripts/test-provider-harness.sh | 226 | echo "## Provider harness failure breakdown" | CODE |
| MEDIUM | .github/workflows/scripts/resolve-cli-versions.sh | 4 | # Resolves the last three published versions of each coding CLI the harness | COMMENT |
| 38 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ui/app/pprof/page.tsx | 78 | function loadSkippedGoroutineFiles(): Set<string> { | CODE |
| LOW | ui/app/pprof/page.tsx | 88 | function saveSkippedGoroutineFiles(skipped: Set<string>): void { | CODE |
| LOW | …/components/guardrails/guardrailsConfigurationView.tsx | 4 | export default function GuardrailsConfigurationView() { | CODE |
| LOW | …ponents/large-payload/largePayloadSettingsFragment.tsx | 9 | export default function LargePayloadSettingsFragment(_props: LargePayloadSettingsFragmentProps) { | CODE |
| LOW | …/prompt-deployments/promptDeploymentsAccordionItem.tsx | 8 | export function PromptDeploymentsAccordionItem({ activeSection }: { activeSection: SettingsSidebarSection | undefined }) | CODE |
| LOW | …cks/enterprise/lib/store/utils/baseQueryWithRefresh.ts | 10 | export function createBaseQueryWithRefresh(baseQuery: BaseQueryFn): BaseQueryFn { | CODE |
| LOW | ui/app/workspace/scim/oauth-discover-callback/page.tsx | 3 | export default function OAuthDiscoverCallbackPage() { | CODE |
| LOW⚡ | ui/app/workspace/complexity-router/page.tsx | 157 | function preventNegativeBoundaryKey(event: KeyboardEvent<HTMLInputElement>) { | CODE |
| LOW⚡ | ui/app/workspace/complexity-router/page.tsx | 163 | function preventNegativeBoundaryPaste(event: ClipboardEvent<HTMLInputElement>) { | CODE |
| LOW⚡ | ui/app/workspace/complexity-router/page.tsx | 169 | function preventNegativeBoundaryDrop(event: DragEvent<HTMLInputElement>) { | CODE |
| LOW | ui/app/workspace/guardrails/configuration/page.tsx | 3 | export default function GuardrailsConfigurationPage() { | CODE |
| LOW | …orkspace/plugins/dialogs/confirmDeletePluginDialog.tsx | 22 | export default function ConfirmDeletePluginDialog({ show, onCancel, onDelete, plugin }: Props) { | CODE |
| LOW | …app/workspace/providers/fragments/deploymentsTable.tsx | 340 | function UseAnthropicEndpointsToggleSection({ config, onChange, disabled, providerName }: ProviderSectionProps & { provi | CODE |
| LOW | ui/app/workspace/providers/routing-rules/page.tsx | 3 | export default function ProvidersRoutingRulesPage() { | CODE |
| LOW | …kspace/providers/dialogs/addNewCustomProviderSheet.tsx | 42 | export function AddCustomProviderSheetContent({ show = true, onClose, onSave }: AddCustomProviderSheetContentProps) { | CODE |
| LOW | …pace/providers/dialogs/confirmDeleteProviderDialog.tsx | 23 | export default function ConfirmDeleteProviderDialog({ show, onCancel, onDelete, provider }: Props) { | CODE |
| LOW | …rkspace/providers/views/modelProviderKeysTableView.tsx | 91 | export default function ModelProviderKeysTableView({ provider, className, headerActions, isKeyless }: Props) { | CODE |
| LOW | …rkspace/providers/views/modelProviderKeysTableView.tsx | 120 | async function handleRefreshProviderModels() { | CODE |
| LOW | ui/app/workspace/adaptive-routing/settings/page.tsx | 3 | export default function AdaptiveRoutingSettingsPage() { | CODE |
| LOW | …ustom-pricing/overrides/scopedPricingOverridesView.tsx | 33 | function PricingOverrideActionsMenu({ | CODE |
| LOW | …ustom-pricing/overrides/scopedPricingOverridesView.tsx | 178 | export default function ScopedPricingOverridesView() { | CODE |
| LOW | …ustom-pricing/overrides/pricingOverridesEmptyState.tsx | 10 | export function PricingOverridesEmptyState({ onCreateClick }: PricingOverridesEmptyStateProps) { | CODE |
| LOW | ui/app/workspace/custom-pricing/overrides/page.tsx | 3 | export default function ScopedPricingOverridesPage() { | CODE |
| LOW | …ard/components/charts/externalCacheTokenMeterChart.tsx | 16 | function ExternalCacheTokenMeterChartImpl({ data }: ExternalCacheTokenMeterChartProps) { | CODE |
| LOW | …ashboard/components/charts/providerThroughputChart.tsx | 81 | function ProviderThroughputChartImpl({ data, chartType, startTime, endTime, selectedProvider }: ProviderThroughputChartP | CODE |
| LOW | …hboard/components/charts/localCacheTokenMeterChart.tsx | 13 | function LocalCacheTokenMeterChartImpl({ data }: LocalCacheTokenMeterChartProps) { | CODE |
| LOW | …/mcp-registry/library/views/mcpLibraryServersTable.tsx | 190 | export function MCPLibraryServersTableSkeleton({ rows = 8 }: { rows?: number }) { | CODE |
| LOW | …ce/mcp-registry/library/views/mcpLibraryServerCard.tsx | 228 | export function MCPLibraryServerCardSkeleton() { | CODE |
| LOW | …p/workspace/mcp-registry/views/mcpClientFormFields.tsx | 87 | export function useMCPClientFormSatellites(): MCPClientFormSatellites { | CODE |
| LOW | …p/workspace/mcp-registry/views/mcpClientFormFields.tsx | 153 | export function getHeadersValidationError( | CODE |
| LOW | ui/app/workspace/mcp-registry/views/mcpClientSheet.tsx | 60 | function toolSyncIntervalToMinutes(v: number | undefined | null): number { | CODE |
| LOW | ui/app/workspace/mcp-registry/views/mcpClientSheet.tsx | 69 | function toolExecutionTimeoutToSeconds(v: string | number | undefined | null): number { | CODE |
| LOW | …pp/workspace/mcp-registry/views/mcpUsageGuide/utils.ts | 68 | export function isClientAllowedForVirtualKey(client: MCPClient, virtualKey: VirtualKey): boolean { | CODE |
| LOW | …/mcpUsageGuide/harnesses/antigravityHarnessInstall.tsx | 13 | export function AntigravityHarnessInstall({ | CODE |
| LOW | ui/app/workspace/mcp-registry/oauth-callback/page.tsx | 15 | export default function MCPRegistryOAuthCallbackPage() { | CODE |
| LOW | ui/app/workspace/logs/sheets/logDetailView.utils.ts | 15 | export function resolveRawJsonNoticeState({ | CODE |
| LOW | …p/workspace/logs/sheets/observabilitySettingsSheet.tsx | 9 | export function ObservabilitySettingsSheet({ open, onOpenChange }: ObservabilitySettingsSheetProps) { | CODE |
| LOW | ui/app/workspace/logs/views/logsHeaderView.tsx | 448 | function parseRecalculateCostStreamError(data: string): Error { | CODE |
| LOW | ui/app/workspace/logs/views/columns.tsx | 86 | function getAssistantToolCallSummary(log?: LogEntry): string { | CODE |
| LOW | ui/app/workspace/governance/business-units/page.tsx | 3 | export default function GovernanceBusinessUnitsPage() { | CODE |
| LOW | ui/app/workspace/governance/virtual-keys/page.tsx | 14 | export default function GovernanceVirtualKeysPage() { | CODE |
| LOW | ui/app/workspace/mcp-sessions/auth-success/page.tsx | 3 | export default function MCPSessionsAuthSuccessPage() { | CODE |
| LOW | ui/app/workspace/mcp-sessions/auth-failed/page.tsx | 4 | export default function MCPSessionsAuthFailedPage() { | CODE |
| LOW | ui/components/devProfiler.tsx | 85 | function loadSkippedGoroutineFiles(): Set<string> { | CODE |
| LOW | ui/components/devProfiler.tsx | 96 | function saveSkippedGoroutineFiles(skipped: Set<string>): void { | CODE |
| LOW | ui/components/budgetOverrideManagerDialog.tsx | 45 | export function BudgetOverrideManagerDialog({ | CODE |
| LOW | ui/components/notificationCenter.utils.ts | 11 | export function isNotificationsUnavailable(error: unknown): boolean { | CODE |
| LOW | ui/components/notificationCenter.utils.ts | 27 | export function shouldHideNotificationTrigger({ open, isLoading }: { open: boolean; isLoading: boolean }): boolean { | CODE |
| LOW | ui/lib/budgetOutline.ts | 69 | export function hasDuplicateBudgetPeriods(lines: { reset_duration?: string }[] | undefined): boolean { | CODE |
| LOW | ui/lib/message/variables.ts | 26 | export function extractVariablesFromMessages(messages: Message[]): string[] { | CODE |
| LOW | ui/lib/message/variables.ts | 56 | export function replaceVariablesInMessages(messages: Message[], variables: VariableMap): Message[] { | CODE |
| LOW | ui/lib/utils/governance.ts | 73 | function snapToCalendarPeriodStart(date: Date, unit: string): void { | CODE |
| LOW | ui/lib/utils/governance.ts | 97 | export function getBudgetOverrideValidUntil( | CODE |
| LOW | ui/lib/utils/validation.ts | 208 | export function getPasswordPolicyFailures(password?: string, isUnchanged = false): string[] { | CODE |
| LOW | ui/lib/utils/validation.ts | 232 | export function isValidVertexAuthCredentials(value: string): boolean { | CODE |
| LOW | ui/lib/utils/celConverterRouting.ts | 332 | export function validateRateLimitAndBudgetRules(ruleGroup: RuleGroupType | undefined): string[] { | CODE |
| LOW | ui/lib/utils/responsesItems.ts | 59 | export function extractResponsesItemPayload(msg: ResponsesMessage): Record<string, unknown> | undefined { | CODE |
| LOW | ui/lib/utils/responsesItems.ts | 71 | export function summarizeResponsesToolCall(msg: ResponsesMessage, mapping?: Record<string, string>): string | undefined | CODE |
| LOW | ui/lib/utils/routingRuleGroupQuery.ts | 20 | export function normalizeRoutingRuleGroupQuery(q: unknown): RuleGroupType { | CODE |
| LOW | ui/lib/utils/versionSkew.ts | 204 | export function installVersionSkewListeners(): void { | CODE |
| 173 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/load_test_parameter_ordering.sh | 635 | except Exception as e: | CODE |
| LOW | tests/integrations/python/README.md | 1019 | except Exception as e: | CODE |
| LOW⚡ | tests/integrations/python/README.md | 1384 | except Exception as e: | CODE |
| MEDIUM⚡ | tests/integrations/python/README.md | 1385 | print(f"Error extracting tool calls: {e}") | CODE |
| LOW | tests/integrations/python/README.md | 1494 | except Exception as e: | CODE |
| LOW | tests/integrations/python/run_integration_tests.py | 101 | except Exception as e: | CODE |
| LOW | tests/integrations/python/run_all_tests.py | 155 | except Exception as e: | CODE |
| LOW | tests/integrations/python/run_all_tests.py | 207 | except Exception as e: | CODE |
| MEDIUM | tests/integrations/python/run_all_tests.py | 318 | print(f"Error: Unknown integration '{args.integration}'") | STRING |
| MEDIUM | tests/integrations/python/tests/test_anthropic.py | 4299 | def test_11_file_upload_and_container_upload(self, files_beta_client): | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 975 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 978 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1040 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1043 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1097 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1167 | except Exception as download_error: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1185 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1188 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1245 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1323 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1371 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1415 | except Exception as results_error: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1430 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1433 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1509 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2763 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 4325 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_anthropic.py | 4327 | except Exception as e: | CODE |
| LOW⚡ | tests/integrations/python/tests/test_openai.py | 3159 | except Exception as e: | CODE |
| LOW⚡ | tests/integrations/python/tests/test_openai.py | 3686 | except Exception: | CODE |
| LOW⚡ | tests/integrations/python/tests/test_openai.py | 3853 | except Exception as e: | CODE |
| LOW⚡ | tests/integrations/python/tests/test_openai.py | 3944 | except Exception as e: | CODE |
| LOW⚡ | tests/integrations/python/tests/test_openai.py | 3950 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 357 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 843 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1011 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1178 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1223 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1265 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1299 | except Exception as base64_error: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1302 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 1764 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 2348 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 2485 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 2961 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3014 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3061 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3221 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3259 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3263 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3338 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3343 | except Exception as e: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3417 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3455 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3460 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3529 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3534 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3580 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3617 | except Exception: | CODE |
| LOW | tests/integrations/python/tests/test_openai.py | 3762 | except Exception as e: | CODE |
| 146 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/internal/mcptests/codemode_files_test.go | 422 | # Check if TestCodeModeServer exists and has methods | COMMENT |
| LOW | tests/integrations/python/run_integration_tests.py | 49 | # Check if test file exists | COMMENT |
| LOW | tests/integrations/python/run_integration_tests.py | 83 | # Print results | COMMENT |
| LOW | tests/integrations/python/tests/test_anthropic.py | 611 | # Check if response is approximately 5 words (allow some flexibility) | COMMENT |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2675 | # Check if cache was written | COMMENT |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2708 | # Check if cache was read | COMMENT |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3541 | # Check if compaction triggered a pause | COMMENT |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3671 | # Check if compaction occurred | COMMENT |
| LOW | tests/integrations/python/tests/test_openai.py | 684 | # Check if response is approximately 5 words (allow some flexibility) | COMMENT |
| LOW | tests/integrations/python/tests/test_openai.py | 2389 | # Check if we have a reasoning message type | COMMENT |
| LOW | tests/integrations/python/tests/test_langchain.py | 1308 | # Check if usage metadata is available (Gemini-specific) | COMMENT |
| LOW | tests/integrations/python/tests/test_bedrock.py | 476 | # Check if response has content | COMMENT |
| LOW | tests/integrations/python/tests/test_bedrock.py | 790 | # Check if response has content | COMMENT |
| LOW | tests/integrations/python/tests/test_bedrock.py | 915 | # Check if response is approximately 5 words (allow some flexibility) | COMMENT |
| LOW | tests/integrations/python/tests/test_azure.py | 568 | # Check if response is approximately 5 words (allow some flexibility) | COMMENT |
| LOW | tests/integrations/python/tests/test_azure.py | 1545 | # Check if we have a reasoning message type | COMMENT |
| LOW | tests/integrations/python/tests/test_google.py | 609 | # Check if function call was made (Google GenAI might return function calls) | COMMENT |
| LOW | tests/integrations/python/tests/test_google.py | 633 | # Check if function calls were made | COMMENT |
| LOW | tests/integrations/python/tests/test_google.py | 658 | # Check if function call was made | COMMENT |
| LOW | tests/integrations/python/tests/test_google.py | 696 | # Check if function calls were made | COMMENT |
| LOW⚡ | tests/integrations/python/tests/utils/common.py | 3411 | # Check if domain matches any blocked pattern | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 1514 | # Check if it's an OpenAI-style response object | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 1530 | # Check if usage information is present | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 1548 | # Check if it's a direct list (embedding vector) | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 1570 | # Check if it's an OpenAI-style response object | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 1600 | # Check if it's a direct list of embeddings | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 2711 | # Check if this is a LangChain AIMessage object | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 2753 | # Check if we have a reasoning message type | COMMENT |
| LOW | tests/integrations/python/tests/utils/common.py | 3396 | # Check if domain matches any allowed pattern | COMMENT |
| LOW | tests/e2e/api/setup-mcp.sh | 14 | # Check if MCP server is already listening on 3001 (e.g. from a previous run) | COMMENT |
| LOW | tests/e2e/api/setup-plugin.sh | 15 | # Check if plugin source exists | COMMENT |
| LOW | tests/e2e/api/runners/run-newman-api-tests.sh | 40 | # Check if Newman is installed | COMMENT |
| LOW | tests/e2e/api/runners/run-newman-api-tests.sh | 47 | # Check if collection exists | COMMENT |
| LOW | tests/e2e/api/runners/run-newman-inference-tests.sh | 56 | # Check if Newman is installed | COMMENT |
| LOW | tests/e2e/api/runners/run-newman-inference-tests.sh | 63 | # Check if collection exists | COMMENT |
| LOW | …e/api/runners/individual/run-newman-vk-expiry-tests.sh | 69 | # Check if Newman is installed | COMMENT |
| LOW | …e/api/runners/individual/run-newman-vk-expiry-tests.sh | 76 | # Check if collection exists | COMMENT |
| LOW⚡ | …i/runners/individual/run-newman-bedrock-integration.sh | 55 | # Check if Newman is installed | COMMENT |
| LOW⚡ | …i/runners/individual/run-newman-bedrock-integration.sh | 62 | # Check if collection exists | COMMENT |
| LOW⚡ | …i/runners/individual/run-newman-bedrock-integration.sh | 68 | # Check if environment exists | COMMENT |
| LOW | …i/runners/individual/run-newman-bedrock-integration.sh | 273 | # Check if we're entering a JSON block | COMMENT |
| LOW | …i/runners/individual/run-newman-bedrock-integration.sh | 287 | # Check if we're exiting a JSON block | COMMENT |
| LOW⚡ | …pi/runners/individual/run-newman-openai-integration.sh | 57 | # Check if Newman is installed | COMMENT |
| LOW⚡ | …pi/runners/individual/run-newman-openai-integration.sh | 64 | # Check if collection exists | COMMENT |
| LOW⚡ | …pi/runners/individual/run-newman-openai-integration.sh | 70 | # Check if environment exists | COMMENT |
| LOW | …pi/runners/individual/run-newman-openai-integration.sh | 276 | # Check if we're entering a JSON block | COMMENT |
| LOW | …pi/runners/individual/run-newman-openai-integration.sh | 290 | # Check if we're exiting a JSON block | COMMENT |
| LOW⚡ | …runners/individual/run-newman-composite-integration.sh | 56 | # Check if Newman is installed | COMMENT |
| LOW⚡ | …runners/individual/run-newman-composite-integration.sh | 63 | # Check if collection exists | COMMENT |
| LOW⚡ | …runners/individual/run-newman-composite-integration.sh | 69 | # Check if environment exists | COMMENT |
| LOW | …runners/individual/run-newman-composite-integration.sh | 259 | # Check if we're entering a JSON block | COMMENT |
| LOW | …runners/individual/run-newman-composite-integration.sh | 273 | # Check if we're exiting a JSON block | COMMENT |
| LOW⚡ | …runners/individual/run-newman-anthropic-integration.sh | 55 | # Check if Newman is installed | COMMENT |
| LOW⚡ | …runners/individual/run-newman-anthropic-integration.sh | 62 | # Check if collection exists | COMMENT |
| LOW⚡ | …runners/individual/run-newman-anthropic-integration.sh | 68 | # Check if environment exists | COMMENT |
| LOW | …runners/individual/run-newman-anthropic-integration.sh | 259 | # Check if we're entering a JSON block | COMMENT |
| LOW | …runners/individual/run-newman-anthropic-integration.sh | 273 | # Check if we're exiting a JSON block | COMMENT |
| LOW | …e2e/api/runners/individual/run-newman-vk-auth-tests.sh | 76 | # Check if Newman is installed | COMMENT |
| LOW | …e2e/api/runners/individual/run-newman-vk-auth-tests.sh | 83 | # Check if collection exists | COMMENT |
| LOW | docs/openapi/bundle.py | 175 | # Check if this resolves to a registered component | COMMENT |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/integrations/python/tests/test_anthropic.py | 0 | test case 1: simple chat interaction - runs across all available providers | STRING |
| HIGH | tests/integrations/python/tests/test_openai.py | 0 | test case 1: simple chat interaction - runs across all available providers | STRING |
| HIGH | tests/integrations/python/tests/test_google.py | 0 | test case 1: simple chat interaction - runs across all available providers | STRING |
| HIGH | tests/integrations/python/tests/test_anthropic.py | 0 | test case 4: multiple tool calls in one response - auto-skips providers without tool model | STRING |
| HIGH | tests/integrations/python/tests/test_openai.py | 0 | test case 4: multiple tool calls in one response - auto-skips providers without tool model | STRING |
| HIGH | tests/integrations/python/tests/test_google.py | 0 | test case 4: multiple tool calls in one response - auto-skips providers without tool model | STRING |
| HIGH | tests/integrations/python/tests/test_anthropic.py | 0 | test case 5: complete tool calling flow with responses | STRING |
| HIGH | tests/integrations/python/tests/test_openai.py | 0 | test case 5: complete tool calling flow with responses | STRING |
| HIGH | tests/integrations/python/tests/test_litellm.py | 0 | test case 5: complete tool calling flow with responses | STRING |
| HIGH | tests/integrations/python/tests/test_google.py | 0 | test case 5: complete tool calling flow with responses | STRING |
| HIGH | tests/integrations/python/tests/test_anthropic.py | 0 | test case 10: complex end-to-end with conversation, images, and tools | STRING |
| HIGH | tests/integrations/python/tests/test_openai.py | 0 | test case 10: complex end-to-end with conversation, images, and tools | STRING |
| HIGH | tests/integrations/python/tests/test_litellm.py | 0 | test case 10: complex end-to-end with conversation, images, and tools | STRING |
| HIGH | tests/integrations/python/tests/test_azure.py | 0 | test case 10: complex end-to-end with conversation, images, and tools | STRING |
| HIGH | tests/integrations/python/tests/test_google.py | 0 | test case 10: complex end-to-end with conversation, images, and tools | STRING |
| HIGH | …i/runners/individual/run-newman-bedrock-integration.sh | 0 | format json using jq if available, otherwise use python's json module | STRING |
| HIGH | …pi/runners/individual/run-newman-openai-integration.sh | 0 | format json using jq if available, otherwise use python's json module | STRING |
| HIGH | …runners/individual/run-newman-composite-integration.sh | 0 | format json using jq if available, otherwise use python's json module | STRING |
| HIGH | …runners/individual/run-newman-anthropic-integration.sh | 0 | format json using jq if available, otherwise use python's json module | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ui/lib/notifications/preferences.test.ts | 18 | expect(notificationPreferenceKey("user@example.com")).toContain("user%40example.com"); | CODE |
| LOW | …re/providers/gemini/list_models_single_payload_test.go | 50 | key := schemas.Key{Value: *schemas.NewSecretVar("dummy-key")} | CODE |
| LOW | core/providers/gemini/fileupload_test.go | 29 | if got := r.Header.Get("x-goog-api-key"); got != "dummy-key" { | CODE |
| LOW | core/providers/gemini/fileupload_test.go | 109 | key := schemas.Key{Value: *schemas.NewSecretVar("dummy-key")} | CODE |
| LOW | core/providers/gemini/passthrough_test.go | 51 | key := schemas.Key{Value: *schemas.NewSecretVar("dummy-key")} | CODE |
| LOW | core/providers/gemini/passthrough_test.go | 67 | assert.Equal(t, "dummy-key", sawAPIKeyOnRedirect, "api key must survive onto the redirect hop") | CODE |
| LOW | core/providers/bedrock/bedrock_test.go | 6341 | Input: json.RawMessage(`{"name":"John Doe","age":28,"city":"Pune"}`), | CODE |
| LOW | core/providers/bedrock/bedrock_test.go | 6376 | Input: json.RawMessage(`{"name":"John Doe","age":28,"city":"Pune"}`), | CODE |
| LOW | framework/encrypt/encrypt_test.go | 41 | plaintext: "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do | CODE |
| LOW | framework/encrypt/encrypt_test.go | 41 | plaintext: "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do | CODE |
| LOW | transports/bifrost-http/lib/validator_test.go | 476 | "name": "Acme Corp" | CODE |
| LOW | transports/bifrost-http/lib/validator_test.go | 494 | "name": "Acme Corp" | CODE |
| LOW | tests/integrations/python/dummy-gcp-credentials.json | 4 | "private_key_id": "dummy-key-id-12345", | CODE |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 517 | api_key="dummy-key" | CODE |
| LOW | tests/integrations/python/tests/test_cohere.py | 48 | api_key=os.getenv("COHERE_API_KEY", "dummy-key"), | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 991 | api_key="dummy-key", # Keys managed by Bifrost | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1021 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1169 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1205 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1255 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1293 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1402 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1433 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1468 | api_key="dummy-key", | CODE |
| LOW | tests/integrations/python/tests/test_langchain.py | 1738 | cohere_api_key=os.getenv("COHERE_API_KEY", "dummy-key"), | CODE |
| LOW | tests/integrations/typescript/tests/test-azure.test.ts | 132 | const apiKey = hasApiKey('azure') ? getApiKey('azure') : 'dummy-key' | CODE |
| LOW | tests/integrations/typescript/tests/test-openai.test.ts | 129 | const apiKey = hasApiKey('openai') ? getApiKey('openai') : 'dummy-key' | CODE |
| LOW | tests/integrations/typescript/tests/test-google.test.ts | 81 | const apiKey = hasApiKey('gemini') ? getApiKey('gemini') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-anthropic.test.ts | 102 | const apiKey = hasApiKey('anthropic') ? getApiKey('anthropic') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 53 | const apiKey = hasApiKey('openai') ? getApiKey('openai') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 70 | const apiKey = hasApiKey('anthropic') ? getApiKey('anthropic') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 84 | const apiKey = hasApiKey('gemini') ? getApiKey('gemini') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 213 | const apiKey = hasApiKey('openai') ? getApiKey('openai') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 383 | const apiKey = hasApiKey('anthropic') ? getApiKey('anthropic') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 735 | const apiKey = hasApiKey('openai') ? getApiKey('openai') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 777 | const apiKey = hasApiKey('anthropic') ? getApiKey('anthropic') : 'dummy-key' | CODE |
| LOW | …s/integrations/typescript/tests/test-langchain.test.ts | 817 | const apiKey = hasApiKey('gemini') ? getApiKey('gemini') : 'dummy-key' | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 76 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 76 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 82 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 82 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 166 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 166 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 172 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/providerbudget_test.go | 172 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/teambudget_test.go | 85 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/teambudget_test.go | 85 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/teambudget_test.go | 91 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/teambudget_test.go | 91 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 85 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 85 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 91 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 91 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 261 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 261 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 267 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/customerbudget_test.go | 267 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/edgecases_test.go | 115 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/edgecases_test.go | 115 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| LOW⚡ | tests/governance/edgecases_test.go | 121 | "Mollit anim id est laborum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. " + | CODE |
| 23 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | AGENTS.md | 46 | │ │ ├── agent.go # Agent orchestration loop (multi-turn tool calling) | CODE |
| MEDIUM | AGENTS.md | 270 | ├── <name>.go # Controller: constructor, interface methods, HTTP orchestration | CODE |
| MEDIUM | …/components/guardrails/guardrailsConfigurationView.tsx | 12 | readmeLink="https://docs.getbifrost.ai/enterprise/guardrails" | CODE |
| MEDIUM | …prise/components/guardrails/guardrailsProviderView.tsx | 12 | readmeLink="https://docs.getbifrost.ai/enterprise/guardrails" | CODE |
| MEDIUM | core/providers/bedrock/types.go | 205 | GuardContent *BedrockGuardContent `json:"guardContent,omitempty"` // Guard content for guardrails | CODE |
| MEDIUM | core/providers/bedrock/types.go | 229 | // Guard content (for guardrails) | COMMENT |
| MEDIUM | core/providers/bedrock/types.go | 349 | // BedrockGuardContent represents guard content for guardrails | COMMENT |
| MEDIUM | core/providers/bedrock/types.go | 363 | // BedrockGuardContentText represents text content for guardrails | COMMENT |
| MEDIUM | core/providers/anthropic/types.go | 376 | // AnthropicTaskBudget represents an advisory token budget for a full agentic loop (output_config.task_budget). | COMMENT |
| MEDIUM | core/providers/anthropic/types.go | 382 | Total int `json:"total"` // total advisory token budget across the agentic loop | CODE |
| MEDIUM | core/providers/anthropic/types.go | 1171 | // AnthropicToolCallerType identifies which agentic caller produced a tool | COMMENT |
| MEDIUM | core/network/http.go | 30 | // ClientPurposeAPI is used for general API requests (guardrails, etc.) | COMMENT |
| MEDIUM | core/schemas/responses.go | 1968 | // server_tool_use / *_tool_result blocks. It links a tool call to the agentic | COMMENT |
| MEDIUM | core/schemas/responses.go | 2030 | // Caller links this call to the agentic caller that produced it (programmatic | COMMENT |
| MEDIUM | core/schemas/redaction.go | 19 | // RedactionData carries request-scoped redaction data from guardrails to log and trace sinks. | COMMENT |
| MEDIUM | core/schemas/bifrost.go | 352 | BifrostContextKeyGuardrailDebug BifrostContextKey = "bifrost-guardrail-debug" | CODE |
| MEDIUM | core/schemas/bifrost.go | 354 | BifrostContextKeyRedactionData BifrostContextKey = "bifrost-redaction-data" | CODE |
| MEDIUM | tests/integrations/python/config.yml | 893 | max_tokens: 32000 # 32k token context window for TTS | CODE |
| MEDIUM | tests/integrations/python/config.yml | 907 | max_tokens: 32000 # 32k token context window for TTS | CODE |
| MEDIUM | tests/integrations/python/tests/test_anthropic.py | 740 | max_tokens=4000, # Reduced to prevent token limit errors for smaller context window models | CODE |
| MEDIUM | tests/integrations/typescript/config.yml | 893 | max_tokens: 32000 # 32k token context window for TTS | CODE |
| MEDIUM | tests/integrations/typescript/config.yml | 907 | max_tokens: 32000 # 32k token context window for TTS | CODE |
| MEDIUM | examples/k8s/enterprise/values-guardrails.yaml | 1 | # Enterprise overlay: guardrails documentation sample. | COMMENT |
| MEDIUM | examples/k8s/enterprise/values-guardrails.yaml | 99 | endpoint: "https://example-guardrails.cognitiveservices.azure.com/" | CODE |
| MEDIUM | examples/k8s/enterprise/values-guardrails.yaml | 115 | endpoint: "https://example-guardrails.cognitiveservices.azure.com/" | CODE |
| MEDIUM | examples/k8s/enterprise/values-guardrails.yaml | 133 | endpoint: "https://example-guardrails.cognitiveservices.azure.com/" | CODE |
| MEDIUM | examples/k8s/enterprise/values-guardrails.yaml | 227 | endpoint: "https://example-guardrails.cognitiveservices.azure.com/" | CODE |
| MEDIUM | examples/k8s/enterprise/README.md | 34 | ## Add enterprise guardrails overlay | COMMENT |
| MEDIUM | …s/bifrost-migration-cli/scripts/create_virtual_keys.sh | 245 | # --- Case 26: guardrails --------------------------------------------------- | COMMENT |
| MEDIUM | scripts/bifrost-migration-cli/scripts/create_teams.sh | 211 | # --- Case 18: guardrails (enterprise) -------------------------------------- | COMMENT |
| MEDIUM | helm-charts/bifrost/values.yaml | 1203 | # provider_config_ids: [1] # Links this rule to guardrails.providers[].id above | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/mcp/codemode/starlark/getdocs.go | 153 | sb.WriteString("# This file contains Python documentation for a specific tool on this MCP server.\n") | CODE |
| MEDIUM | core/mcp/codemode/starlark/getdocs.go | 155 | sb.WriteString("# This file contains Python documentation for all tools available on this MCP server.\n") | CODE |
| MEDIUM | tests/integrations/python/tests/test_pydanticai.py | 390 | # Define a tool that we'll manually execute | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_bedrock.py | 1514 | # Create a job to cancel | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_google.py | 262 | # Create a function declaration dictionary with lowercase types | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_google.py | 279 | # Create a Tool object containing the function declaration | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_google.py | 314 | # Create a white background | COMMENT |
| MEDIUM | tests/integrations/python/tests/test_google.py | 1953 | # Define a Pydantic model for structured output | COMMENT |
| MEDIUM | tests/integrations/python/tests/utils/common.py | 51 | # Create a simple red image | COMMENT |
| MEDIUM | examples/k8s/enterprise/values-scim.yaml | 2 | # This file is SAFE-BY-DEFAULT (scim.enabled=false) so placeholder values | COMMENT |
| MEDIUM | .github/workflows/scripts/test-bifrost-http.sh | 199 | # Create a temporary log file for server output | COMMENT |
| MEDIUM | …-charts/bifrost/values-examples/postgres-weaviate.yaml | 68 | # Create the secret with: kubectl create secret generic bifrost-semantic-cache --from-literal=openai-key=sk-YOUR_O | COMMENT |
| MEDIUM | helm-charts/bifrost/values-examples/production-ha.yaml | 91 | # Create the secret with: kubectl create secret generic bifrost-encryption --from-literal=key=YOUR_ENCRYPTION_KEY | COMMENT |
| MEDIUM | helm-charts/bifrost/values-examples/production-ha.yaml | 126 | # Create the secret with: kubectl create secret generic bifrost-semantic-cache --from-literal=openai-key=sk-YOUR_O | COMMENT |
| MEDIUM | helm-charts/bifrost/values-examples/sqlite-qdrant.yaml | 55 | # Create the secret with: kubectl create secret generic bifrost-semantic-cache --from-literal=openai-key=sk-YOUR_O | COMMENT |
| MEDIUM | …lm-charts/bifrost/values-examples/sqlite-weaviate.yaml | 56 | # Create the secret with: kubectl create secret generic bifrost-semantic-cache --from-literal=openai-key=sk-YOUR_O | COMMENT |
| MEDIUM | helm-charts/bifrost/values-examples/postgres-redis.yaml | 71 | # Create the secret with: kubectl create secret generic bifrost-semantic-cache --from-literal=openai-key=sk-YOUR_O | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integrations/python/run_all_tests.py | 210 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 161 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3080 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3108 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 514 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 730 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 818 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 1974 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2164 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2247 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2375 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2432 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2547 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2597 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2722 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2773 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 2827 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3314 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3422 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 3782 | CODE | |
| LOW | tests/integrations/python/tests/test_anthropic.py | 4051 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 1882 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 1929 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 1965 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 2012 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 2219 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 2358 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 2611 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 2680 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 3174 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 3371 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 3540 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 3697 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 4030 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 4148 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 4296 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 4351 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 4404 | CODE | |
| LOW | tests/integrations/python/tests/conftest.py | 32 | CODE | |
| LOW | tests/integrations/python/tests/conftest.py | 93 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 187 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 1043 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 1198 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 1285 | CODE | |
| LOW | tests/integrations/python/tests/test_bedrock.py | 293 | CODE | |
| LOW | tests/integrations/python/tests/test_bedrock.py | 574 | CODE | |
| LOW | tests/integrations/python/tests/test_bedrock.py | 671 | CODE | |
| LOW | tests/integrations/python/tests/test_bedrock.py | 3076 | CODE | |
| LOW | tests/integrations/python/tests/test_bedrock.py | 3258 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 1239 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 1278 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 1316 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 1515 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 238 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 367 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 980 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 1423 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 2301 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 3443 | CODE | |
| LOW | tests/integrations/python/tests/utils/config_loader.py | 90 | CODE | |
| 31 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integrations/python/run_all_tests.py | 23 | CODE | |
| LOW | tests/integrations/python/run_all_tests.py | 23 | CODE | |
| LOW | tests/integrations/python/tests/test_openai.py | 101 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 41 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 41 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 81 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 96 | CODE | |
| LOW | tests/integrations/python/tests/test_pydanticai.py | 97 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 56 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 56 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 59 | CODE | |
| LOW | tests/integrations/python/tests/test_langchain.py | 113 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 40 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 40 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 40 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 40 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 40 | CODE | |
| LOW | tests/integrations/python/tests/test_litellm.py | 121 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 76 | CODE | |
| LOW | tests/integrations/python/tests/test_azure.py | 76 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 72 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 72 | CODE | |
| LOW | tests/integrations/python/tests/test_google.py | 72 | CODE | |
| LOW | tests/integrations/python/tests/utils/parametrize.py | 8 | CODE | |
| LOW | docs/openapi/bundle.py | 32 | CODE | |
| LOW | docs/openapi/spec_invariants_test.py | 11 | CODE | |
| LOW | docs/openapi/sync_mintlify_navigation.py | 4 | CODE | |
| LOW | docs/api/procuring-api-keys_test.py | 13 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/telemetry/docker-compose.pushgateway.yml | 3 | # Usage: | COMMENT |
| LOW | transports/bifrost-http/main.go | 30 | // Example usage: | COMMENT |
| LOW | recipes/values-local-k8s.yaml | 4 | # Usage: | COMMENT |
| LOW | …ripts/bifrost-migration-cli/scripts/delete_entities.sh | 11 | # Usage: | COMMENT |
| LOW | …s/bifrost-migration-cli/scripts/create_virtual_keys.sh | 5 | # Usage: | COMMENT |
| LOW | …frost-migration-cli/scripts/delete_bifrost_entities.sh | 12 | # Usage: | COMMENT |
| LOW | scripts/bifrost-migration-cli/scripts/create_teams.sh | 5 | # Usage: | COMMENT |
| LOW | …/bifrost-migration-cli/scripts/create_organizations.sh | 5 | # Usage: | COMMENT |
| LOW | scripts/bifrost-migration-cli/scripts/seed_models.sh | 9 | # Usage: | COMMENT |
| LOW | .github/workflows/scripts/test-e2e-api.sh | 5 | # Usage: | COMMENT |
| LOW⚡ | .github/workflows/scripts/harness-gateway.sh | 6 | # Usage: | COMMENT |
| LOW | …ost/values-examples/semantic-cache-secret-example.yaml | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | ui/app/workspace/mcp-logs/views/emptyState.tsx | 126 | print(final_response.choices[0].message.content)`, | CODE |
| HIGH | ui/app/workspace/mcp-logs/views/emptyState.tsx | 200 | print(response.choices[0].message.content) | CODE |
| HIGH | ui/app/workspace/mcp-logs/views/emptyState.tsx | 204 | print("Pending tools requiring approval:", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | core/internal/mcptests/fixtures.go | 772 | // Return the error as requested | COMMENT |
| HIGH | core/internal/llmtests/image_generation.go | 129 | // Validate dimensions are 1024x1024 as requested | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/integrations/python/tests/test_pydanticai.py | 188 | Factory function to create a Pydantic AI model for a given provider. This is the cross-provider equivalent | STRING |
| HIGH | tests/integrations/python/tests/utils/config_loader.py | 115 | Get the complete URL for a integration Args: integration: Integration name (openai, anthropic, goog | STRING |
| HIGH | tests/integrations/python/tests/utils/common.py | 687 | Safely evaluate arithmetic expressions using AST parsing. Only allows basic arithmetic operations: +, -, *, /, | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tests/integrations/python/README.md | 1393 | export YOUR_INTEGRATION_API_KEY="your-api-key" | CODE |
| HIGH | tests/integrations/typescript/README.md | 195 | apiKey: 'your-api-key', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/internal/llmtests/test_retry_conditions.go | 448 | "as a language model", | CODE |
| MEDIUM | core/internal/llmtests/test_retry_conditions.go | 1124 | "as a language model", | CODE |
| LOW | plugins/telemetry/prometheus.yml | 8 | # Make sure to replace "bifrost-api" and "8080" with your actual docker container name and port if different | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/integrations/python/tests/test_langchain.py | 1875 | The parameter is omitted rather than sent as null, so this also pins that each | STRING |