Aspire is the tool for code-first, extensible, observable dev and deploy.
This report summarizes scanner evidence for microsoft/aspire, a C# project with 6,359 GitHub stars. SynthScan examined 1,932,031 lines of code across 9540 source files, recording 8427 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 6.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 7815 finding(s).
Are imports declared and package/API names verified? 141 finding(s).
Are wrappers, guards, and repeated structures necessary? 1520 finding(s).
Which changes need focused human review? 8427 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 8427 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | localhive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | localhive.sh | 541 | COMMENT | |
| LOW | AGENTS.md | 281 | COMMENT | |
| LOW | eng/nix/update-versions.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/clipack/npm/aspire.js | 281 | const source = fs.statSync(sourcePath); | COMMENT |
| LOW | eng/clipack/npm/aspire.js | 321 | COMMENT | |
| LOW | eng/homebrew/validate-cask-artifact.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/homebrew/validate-cask-artifact.sh | 161 | echo "" | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 281 | - checkout: self | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 361 | # npm tgz files staged from per-RID native artifacts (see "Sign npm | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 441 | # packages. SignToolTask walks every container under | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 481 | SYSTEM_ACCESSTOKEN: $(System.AccessToken) # Needed for the signing task | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 541 | } | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 561 | # | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 621 | # Generate installer packages (WinGet + Homebrew) and validate npm install. | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1 | # Release Pipeline: Publish Aspire Release Artifacts | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 181 | # CFSClean is intentionally omitted here because it blocks all NuGet endpoints | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 281 | # escape hatch for re-shipping under a corrected tag. | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 821 | # dry run instead of only surfacing on the real release. The | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1261 | COMMENT | |
| LOW | eng/pipelines/release-publish-nuget.yml | 1641 | displayName: 'Wait for npm RID Package Propagation' | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1721 | # wait, especially across multiple regions. A single-shot | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2341 | artifactName: winget-manifests-stable | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2361 | # and uploads them as assets on the draft GitHub release that the | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2381 | # happen before publish. | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2561 | # name as a path prefix (e.g. 'BlobArtifacts/aspire-cli-...'), so | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2621 | # Get-AspireBotInstallationToken.ps1, which uses RSA.ImportFromPem | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 1 | parameters: | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 81 | ${{ if eq(parameters.agentOs, 'macos') }}: | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 141 | # binary that refuses to boot. pr-<N> is intentionally excluded | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 161 | $channel = "pr-$prNumber" | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 501 | COMMENT | |
| LOW | eng/pipelines/templates/build_sign_native.yml | 521 | # this point (the heavy build steps above have run), so each | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 61 | expectedVersion="$(NpmExpectedVersion)" | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 161 | fi | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 201 | if ! command -v aspire >/dev/null 2>&1; then | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 221 | # npm SemVer (npm/semver) doesn't honor it for equality. | COMMENT |
| LOW | eng/pipelines/templates/BuildAndTest.yml | 41 | # / publish to a separate parallel stage (build_extension). The managed | COMMENT |
| LOW | eng/pipelines/templates/download_native_symbols.yml | 1 | parameters: [] | COMMENT |
| LOW | eng/pipelines/templates/build_extension.yml | 1 | # Builds, signs, and publishes the VS Code extension VSIX as a standalone | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/common/vmr-sync.sh | 1 | #!/bin/bash | COMMENT |
| LOW | eng/common/vmr-sync.sh | 21 | ### | COMMENT |
| LOW | eng/common/native/init-distro-rid.sh | 1 | #!/bin/sh | COMMENT |
| LOW | eng/common/native/init-distro-rid.sh | 61 | COMMENT | |
| LOW | …common/templates-official/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool | COMMENT |
| LOW | eng/common/templates/vmr-build-pr.yml | 1 | # This pipeline is used for running the VMR verification of the PR changes in repo-level PRs. | COMMENT |
| LOW | eng/common/templates/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool | COMMENT |
| LOW | …g/common/core-templates/steps/get-github-app-token.yml | 1 | # Mints a short-lived GitHub App installation access token by signing a JWT | COMMENT |
| LOW | eng/common/core-templates/job/source-build.yml | 1 | parameters: | COMMENT |
| LOW | eng/common/core-templates/job/source-build.yml | 21 | # published by source-build. | COMMENT |
| LOW | eng/common/core-templates/job/helix-job-monitor.yml | 121 | # nupkg. When set, the artifact is downloaded and the tool is installed from the nupkg into | COMMENT |
| LOW | eng/scripts/debug-staging.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 21 | # - flip <SuppressFinalPackageVersion>true</...> on Aspire.Hosting.Foo (ship it as preview), or | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 41 | # pulled in by the template (Microsoft.Extensions.*, OpenTelemetry.*, etc.) are routed to the | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 141 | # * aspire's --output (and other path-based) flags resolve relative paths against | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 221 | # baked into run_aspire): | COMMENT |
| LOW | eng/scripts/debug-aspire-channel.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/scripts/debug-aspire-channel.sh | 21 | # `13.4.0-preview.1.x+<sha>`. | COMMENT |
| 4766 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/Aspire.Hosting.Yarp/api/Aspire.Hosting.Yarp.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ion.Python/api/Aspire.Hosting.CodeGeneration.Python.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Registry/api/Aspire.Hosting.Azure.ContainerRegistry.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …c/Aspire.Hosting.MongoDB/api/Aspire.Hosting.MongoDB.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Python/api/Aspire.Hosting.Python.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Azure.FrontDoor/api/Aspire.Hosting.Azure.FrontDoor.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Azure.WebPubSub/api/Aspire.Hosting.Azure.WebPubSub.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Hosting.Keycloak/api/Aspire.Hosting.Keycloak.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …c/Aspire.Hosting.AppHost/api/Aspire.Hosting.AppHost.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Docker/api/Aspire.Hosting.Docker.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …pire.Hosting.SqlServer/api/Aspire.Hosting.SqlServer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 292 | /// <para>Azure AI Content Safety is a safety system for monitoring content generated by both foundation model | COMMENT |
| HIGH | …c/Aspire.Hosting.Foundry/api/Aspire.Hosting.Foundry.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Hosting.Azure.Kusto/api/Aspire.Hosting.Azure.Kusto.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.MySql/api/Aspire.Hosting.MySql.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Oracle/api/Aspire.Hosting.Oracle.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Garnet/api/Aspire.Hosting.Garnet.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …zure.Kubernetes/api/Aspire.Hosting.Azure.Kubernetes.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.TypeSystem/api/Aspire.TypeSystem.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Kafka/api/Aspire.Hosting.Kafka.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Valkey/api/Aspire.Hosting.Valkey.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …eration.Java/api/Aspire.Hosting.CodeGeneration.Java.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ppContainers/api/Aspire.Hosting.Azure.AppContainers.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.Storage/api/Aspire.Hosting.Azure.Storage.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/ConsoleLogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Traces.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Dialogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/TraceDetail.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Dashboard/Resources/ControlsStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Dashboard/Resources/StructuredFiltering.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Reconnect.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Columns.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Resources.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Login.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Layout.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …spire.Dashboard/Resources/KnownUrlsDisplay.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …/Aspire.Dashboard/Resources/StructuredLogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Routes.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Dashboard/Resources/TerminalStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Metrics.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Utils/MimeTypeHelpers.cs | 45 | // AI generated list of extensions. | COMMENT |
| HIGH | …eGeneration.Go/api/Aspire.Hosting.CodeGeneration.Go.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …spire.Hosting/Resources/InteractionStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/Resources/MessageStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/Resources/CommandStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ire.Hosting/Resources/LaunchProfileStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/api/Aspire.Hosting.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Script/api/Aspire.Hosting.CodeGeneration.TypeScript.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.SignalR/api/Aspire.Hosting.Azure.SignalR.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …eration.Rust/api/Aspire.Hosting.CodeGeneration.Rust.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Azure.Sandboxes/api/Aspire.Hosting.Azure.Sandboxes.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Seq/api/Aspire.Hosting.Seq.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ng.Azure.CosmosDB/api/Aspire.Hosting.Azure.CosmosDB.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Nats/api/Aspire.Hosting.Nats.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Maui/api/Aspire.Hosting.Maui.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Hosting.Azure.Redis/api/Aspire.Hosting.Azure.Redis.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Hosting.JavaScript/api/Aspire.Hosting.JavaScript.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.ProjectTemplates/api/Aspire.ProjectTemplates.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.Network/api/Aspire.Hosting.Azure.Network.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Hosting.Kubernetes/api/Aspire.Hosting.Kubernetes.cs | 3 | // This code was generated by a tool. | COMMENT |
| 114 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 189 | # Step 1: dotnet publish produces the self-contained single-file binary. | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 190 | # Step 2: build.sh -sign runs Arcade's signing (only when codeSign is enabled). | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 191 | # Step 3: Bundle.proj creates the bundle layout and archive using the signed binary. | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 32 | #### Step 1: Start with API Changes Diff to Identify What's New | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 38 | #### Step 2: Use Uber File Only for Writing Accurate Usage Examples | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 44 | #### Step 3: Extract Complete API Signatures for Code Samples | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 52 | #### Step 4: Write Usage Example with Correct API Signatures | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 16 | ### Step 1: Read Commit Messages for Context | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 26 | ### Step 2: Look Up GitHub Issues and Pull Requests for Additional Context | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 171 | ### Step 3: Identify Feature Types by Commit Message Patterns | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 179 | ### Step 4: Extract User-Facing Impact | COMMENT |
| LOW | extension/gulpfile.js | 41 | // Step 1: Export strings from source files to bundle.l10n.json | COMMENT |
| LOW | extension/gulpfile.js | 54 | // Step 2: Generate XLF file from package.nls.json using library function | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 51 | ### Step 1: AppHost Registers the WASM App and Gateway | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 79 | ### Step 2: Gateway Exposes Configuration Endpoint | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 100 | ### Step 3: JavaScript Initializer Injects Environment Variables | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 123 | ### Step 4: WASM Client Bridges Environment Variables into IConfiguration | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 144 | ### Step 5: Telemetry Flows to Aspire Dashboard | COMMENT |
| LOW | playground/BlazorHosted/README.md | 42 | ### Step 1: AppHost Registers the Hosted App | COMMENT |
| LOW | playground/BlazorHosted/README.md | 61 | ### Step 2: Server Embeds Configuration in DOM Comment | COMMENT |
| LOW | playground/BlazorHosted/README.md | 87 | ### Step 3: JavaScript Initializer Reads DOM Comment | COMMENT |
| LOW | playground/BlazorHosted/README.md | 111 | ### Step 4: WASM Client Bridges Environment Variables into IConfiguration | COMMENT |
| LOW | playground/BlazorHosted/README.md | 131 | ### Step 5: Server Configures YARP for Proxying | COMMENT |
| LOW | playground/BlazorHosted/README.md | 164 | ### Step 6: Telemetry Flows Through Server to Dashboard | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 542 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 550 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 628 | // Step 3: Enter the project name. The CLI resolves the selected template's version against | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 641 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 648 | // Step 5: URLs prompt (all templates have this). The CLI may spend time | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 664 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 682 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 383 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 388 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 446 | // Step 3: Enter project name | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 451 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 455 | // Step 5: URLs prompt (all templates have this) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 459 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 476 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 485 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 75 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 79 | // Step 2: Set up CLI | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 82 | // Step 3: Create single-file AppHost | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 86 | // Step 4: Add Azure Container Apps package | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 93 | // Step 5: Modify apphost.cs to add Azure Container App Environment | COMMENT |
| LOW | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 109 | // Step 6: Set environment variables with an INVALID Azure location to induce failure. | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 120 | // Step 7: Deploy (expecting failure) and capture output to a file | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 127 | // Step 8: Exit terminal | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 133 | // Step 9: Read captured output and verify error messages are clean | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 66 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 70 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 73 | // Step 3: Create single-file AppHost using aspire init | COMMENT |
| LOW | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 98 | // Step 5: Modify apphost.cs to add VNet + PE infrastructure | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 134 | // Step 6: Set environment variables for deployment | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 139 | // Step 7: Deploy to Azure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 146 | // Step 8: Verify VNet infrastructure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 154 | // Step 9: Clean up Azure resources using aspire destroy | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 158 | // Step 10: Exit terminal | STRING |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 74 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 78 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 83 | // Step 3: Create Python FastAPI project using aspire new with interactive prompts | COMMENT |
| 761 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/pipelines/azure-pipelines-unofficial.yml | 113 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines-unofficial.yml | 115 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 213 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 221 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 230 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 237 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 345 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 350 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 620 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 633 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/templates/public-pipeline-template.yml | 64 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/templates/public-pipeline-template.yml | 66 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/scripts/stabilization-smoke-init-restore.sh | 49 | # ------------- | COMMENT |
| MEDIUM | eng/scripts/stabilization-smoke-init-restore.sh | 56 | # ----------- | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 313 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 315 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 743 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 745 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 884 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 886 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/debug-aspire-channel.sh | 30 | # ------------------------ | COMMENT |
| MEDIUM | extension/src/test/parsers.test.ts | 1275 | '// ── Python Player ──────────────', | CODE |
| MEDIUM | extension/src/dcp/DashboardTelemetryPassthrough.ts | 8 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/dcp/DashboardTelemetryPassthrough.ts | 37 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 3 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 42 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 79 | // ── Extension-emitted events ──────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 154 | // ── Dashboard passthrough events ──────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 295 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 312 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | extension/src/utils/telemetry.ts | 469 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | extension/src/utils/telemetry.ts | 471 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 28 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 30 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 115 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 117 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 165 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 167 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 229 | # =================================================================== | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 378 | # =================================================================== | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 392 | # =================================================================== | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 15 | // ── 1. AddAzureServiceBus ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 25 | // ── 2. RunAsEmulator — with ConfigureContainer callback ──────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 37 | // ── 3. AddServiceBusQueue — factory method returns Queue type ────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 45 | // ── 4. AddServiceBusTopic — factory method returns Topic type ────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 68 | // ── DTO types ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 84 | // ── 6. WithProperties — callbacks on Queue, Topic, Subscription ──────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 158 | // ── 8. Fluent chaining — verify correct return types enable chaining ─────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 13 | # ── 1. addAzureServiceBus ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 16 | # ── 2. runAsEmulator — with configureContainer callback ──────────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 18 | # ── 3. addServiceBusQueue — factory method returns Queue type ────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 20 | # ── 4. addServiceBusTopic — factory method returns Topic type ────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 24 | # ── DTO types ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 37 | # ── 8. Verify enum values are accessible ──────────────────────────────────── | COMMENT |
| MEDIUM | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 15 | // ── 1. AddAzureKeyVault ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 40 | // ── 2. WithKeyVaultRoleAssignments ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 46 | // ── 3. AddSecret ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 49 | // ── 4. AddSecret (expression value) ─────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 52 | // ── 5. AddSecret (custom secret name) ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 56 | // ── 6. AddSecret (custom secret name and expression value) ──────────────── | COMMENT |
| 321 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 189 | # Step 1: dotnet publish produces the self-contained single-file binary. | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 190 | # Step 2: build.sh -sign runs Arcade's signing (only when codeSign is enabled). | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 191 | # Step 3: Bundle.proj creates the bundle layout and archive using the signed binary. | COMMENT |
| LOW | extension/gulpfile.js | 41 | // Step 1: Export strings from source files to bundle.l10n.json | COMMENT |
| LOW | extension/gulpfile.js | 54 | // Step 2: Generate XLF file from package.nls.json using library function | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 542 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 550 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 628 | // Step 3: Enter the project name. The CLI resolves the selected template's version against | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 641 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 648 | // Step 5: URLs prompt (all templates have this). The CLI may spend time | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 664 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 682 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 383 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 388 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 446 | // Step 3: Enter project name | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 451 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 455 | // Step 5: URLs prompt (all templates have this) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 459 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 476 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 485 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | …ture.Tests/WorkflowScripts/PrDocsCheckWorkflowTests.cs | 20 | var skillStep = GetSection(workflow, "^## Step 7: [^\r\n]*", "^## Step 8:"); | CODE |
| LOW⚡ | …ture.Tests/WorkflowScripts/PrDocsCheckWorkflowTests.cs | 21 | var notificationStep = GetSection(workflow, "^## Step 10: [^\r\n]*", "^## Step 11:"); | CODE |
| LOW⚡ | …ture.Tests/WorkflowScripts/PrDocsCheckWorkflowTests.cs | 22 | var finalStep = GetSection(workflow, "^## Step 11: [^\r\n]*", "\\z"); | CODE |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 75 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 79 | // Step 2: Set up CLI | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 82 | // Step 3: Create single-file AppHost | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 86 | // Step 4: Add Azure Container Apps package | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 93 | // Step 5: Modify apphost.cs to add Azure Container App Environment | COMMENT |
| LOW | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 109 | // Step 6: Set environment variables with an INVALID Azure location to induce failure. | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 120 | // Step 7: Deploy (expecting failure) and capture output to a file | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 127 | // Step 8: Exit terminal | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 133 | // Step 9: Read captured output and verify error messages are clean | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 66 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 70 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 73 | // Step 3: Create single-file AppHost using aspire init | COMMENT |
| LOW | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 98 | // Step 5: Modify apphost.cs to add VNet + PE infrastructure | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 134 | // Step 6: Set environment variables for deployment | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 139 | // Step 7: Deploy to Azure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 146 | // Step 8: Verify VNet infrastructure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 154 | // Step 9: Clean up Azure resources using aspire destroy | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 158 | // Step 10: Exit terminal | STRING |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 74 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 78 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 83 | // Step 3: Create Python FastAPI project using aspire new with interactive prompts | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 87 | // Step 4: Navigate to project directory | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 93 | // Step 5: Add Aspire.Hosting.Azure.AppContainers package | COMMENT |
| LOW | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 110 | // Step 6: Modify apphost.mts to add Azure Container App Environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 135 | // Step 7: Set environment for deployment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 143 | // Step 9: Deploy to Azure Container Apps using aspire deploy | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 151 | // Step 10: Extract deployment URLs and verify endpoints with retry | COMMENT |
| LOW | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 175 | // Step 11: Exit terminal | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 72 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 76 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 81 | // Step 3: Create Python FastAPI project using aspire new | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 85 | // Step 4: Navigate to project directory | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 91 | // Step 5: Add Aspire.Hosting.Azure.AppContainers package | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 131 | // Step 7: Set environment variables for deployment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 136 | // Step 8: First deployment to Azure | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 143 | // Step 9: Get the ACR name and count tags before second deploy | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 195 | // Step 13: Run the purge task manually to trigger image cleanup | COMMENT |
| 643 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/clipack/npm/aspire.js | 128 | function optionalDependenciesInstallMessage(pointerPackageName) { | CODE |
| LOW | eng/clipack/npm/aspire.js | 133 | function isUnsupportedPlatformError(error) { | CODE |
| LOW | eng/common/cross/install-debs.py | 49 | async def download_deb_files_parallel(mirror, packages, tmp_dir): | CODE |
| LOW | eng/common/cross/install-debs.py | 65 | async def download_package_index_parallel(mirror, arch, suites, check_sig, keyring): | CODE |
| LOW | eng/common/cross/install-debs.py | 337 | def _rootfs_extraction_filter(member, dest_path): | CODE |
| LOW | extension/scripts/e2e-download-retry.js | 59 | function terminateOrphanedDescendants(storagePath) { | CODE |
| LOW | extension/scripts/e2e-download-retry.js | 106 | function listProcessesWorkingUnder(storagePath) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 78 | function getDownloadCacheEntryGroupDirectory(cacheRoot, { platform, architecture, vscodeVersion, extesterVersion }) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 180 | function publishCacheEntryCandidate(groupDirectory, candidateDirectory, expectedManifest, { cacheRoot }) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 226 | function assertCanPublishAnotherCacheEntry(groupDirectory, reservedGenerationCount) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 298 | function createCacheEntryCandidate(cacheRoot, groupDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 329 | function ensureTrustedCacheEntryGroupDirectory(cacheRoot, groupDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 342 | function isTrustedCacheEntryGroupDirectory(cacheRoot, groupDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 351 | function detachUntrustedCacheEntryGroupDirectory(groupDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 463 | function sweepAbandonedGroupChildren(groupDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 519 | function isCandidateOwnedByLiveProcess(name) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 538 | function isUnreadableDirectoryError(error) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 542 | function removeDirectoryBestEffort(directoryPath) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 569 | function removePathWithoutFollowingLinks(targetPath, options = {}) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 607 | function removeDirectoryContentsAndSelf(directoryPath, options) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 714 | function normalizeEnsureDownloadCacheOptions(options) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 753 | function getExpectedManifestIdentity(options) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 864 | function assertCacheEntryTreeIsContained(cacheDirectory, realCacheDirectory = resolveRealPath(cacheDirectory)) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 956 | function assertTrustedEntryAncestry(cacheRoot, cacheDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1000 | function assertTrustedCacheEntryDirectory(cacheDirectory, trustBoundaryRootDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1053 | function normalizeManifestRelativePath(value, fieldName) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1081 | function assertOrdinaryRelativePath(rootDirectory, realRootDirectory, relativePath, fieldName, expectedType) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1162 | function resolveTrustBoundaryRootDirectory(rootDirectory) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1175 | function assertOrdinaryFileWithSingleLink(filePath, description) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1270 | function getVsCodeExecutableRelativePaths(platform, architecture) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1302 | function getChromeDriverBinaryName(platform) { | CODE |
| LOW | extension/scripts/e2e-download-cache.js | 1334 | function pathExistsWithoutFollowingLinks(candidatePath) { | CODE |
| LOW | extension/scripts/run-e2e.js | 230 | function projectCommandSafeStagingDirectory(stagingDirectory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 245 | function getSetupDownloadRetryOptions(stagingDirectory, downloadDirectory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 257 | function getPositiveIntegerEnvironmentVariable(name, defaultValue) { | CODE |
| LOW | extension/scripts/run-e2e.js | 266 | function redactStateFileForArtifacts() { | CODE |
| LOW | extension/scripts/run-e2e.js | 298 | function redactDebugSessionForDiagnostics(session) { | CODE |
| LOW | extension/scripts/run-e2e.js | 305 | function sanitizeDashboardUrlForDiagnostics(url) { | CODE |
| LOW | extension/scripts/run-e2e.js | 944 | function copyJavaPlaygroundIntoWorkspace(bundledCliPath) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1073 | function assertWorkspaceRootIsNotGitIgnored() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1098 | function ensureJavaAppHostSdkGenerated(bundledCliPath, appHostDirectory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1188 | function copyLocallyInstalledJavaExtensions() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1248 | function assertJavaExtensionsRegistered() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1288 | function assertExtensionSupportsVsCodeVersion(extensionDirectory, directoryName) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1328 | function validateAzureFunctionsCoreTools() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1400 | function patchExtesterLaunchLocale() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1517 | function generateBrowserDebuggerProjects() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1577 | function assertGeneratedProjectTargetsFramework(projectPath) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1585 | function configureStandaloneBasePath(standaloneDirectory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1629 | function writeBrowserDebuggerAppHostProject(projectName, resolvedAppHostSdkVersion) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1938 | function writeAzureFunctionsProject(projectName) { | CODE |
| LOW | extension/scripts/run-e2e.js | 2081 | function resolveCachedVsCodeVersion(requestedVersion) { | CODE |
| LOW | extension/scripts/run-e2e.js | 2090 | function assertVsCodeVersionCompatibleWithExtester(vscodeVersion, extesterVersion) { | CODE |
| LOW | extension/scripts/run-e2e.js | 2145 | function writeNuGetConfigIfLocalPackageSourcesExist() { | CODE |
| LOW | extension/scripts/run-e2e.js | 2183 | function getApprovedFallbackPackageSources() { | CODE |
| LOW | extension/scripts/run-e2e.js | 2193 | function getAvailablePackageVersions(packageId) { | CODE |
| LOW | extension/scripts/run-e2e.js | 2209 | function getAvailableAppHostSdkVersions() { | CODE |
| LOW | extension/scripts/run-e2e.js | 2216 | function getLocalPackageSourceDirectories() { | CODE |
| LOW | extension/scripts/run-e2e.js | 2249 | function getDirectoriesContainingPackages(directory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 2262 | function comparePackageVersionsDescending(left, right) { | CODE |
| 988 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/pipelines/azure-pipelines.yml | 298 | # was extension-build scaffolding. It moved to the parallel | COMMENT |
| MEDIUM | eng/scripts/smoke-installed-cli.sh | 2 | # Smoke-tests the already-installed `aspire` CLI by scaffolding a starter | COMMENT |
| MEDIUM | eng/scripts/smoke-installed-cli.sh | 43 | # Always scaffold into a fresh subdirectory created with mktemp under | COMMENT |
| MEDIUM | eng/scripts/debug-aspire-channel.sh | 238 | # enough to reach package discovery without scaffolding a complete project. | COMMENT |
| MEDIUM | extension/src/debugger/languages/bun.ts | 66 | // "program" is normally already set upstream (scaffold default or user override); only fall | COMMENT |
| MEDIUM | …spireWithJavaScript/AspireJavaScript.Angular/README.md | 13 | ## Code scaffolding | COMMENT |
| MEDIUM | …avaSpringBoot/JavaSpringBoot.AppHost.Java/AppHost.java | 3 | // The same three services the C# AppHost next door orchestrates, written in Java. Running either one | COMMENT |
| MEDIUM | tests/Shared/CliInstallStrategy.cs | 71 | // archive builds stamped as daily still scaffold projects from the local package directory. | COMMENT |
| MEDIUM⚡ | …nt.EndToEnd.Tests/FoundryHostedAgentDeploymentTests.cs | 736 | // Step 3: Create starter project using aspire new (for basic AppHost scaffold) | COMMENT |
| MEDIUM | tests/Aspire.Hosting.Tests/Dcp/DcpExecutorTests.cs | 9209 | // DotnetProjectResource suppresses its `dotnet run` scaffold when a custom launch configuration owns the | COMMENT |
| MEDIUM | …eration.TypeScript.JsTests/tests/eslint-config.test.ts | 1 | // Regression coverage for the TypeScript AppHost scaffold's eslint.config.mjs. | COMMENT |
| MEDIUM | …eration.TypeScript.JsTests/tests/eslint-config.test.ts | 90 | // Confirm the scaffold source files actually exist before we promise | COMMENT |
| MEDIUM | …ion.TypeScript.Tests/TypeScriptLanguageSupportTests.cs | 331 | // The scaffold emits the embedded eslint.config.mjs verbatim. Asserting | STRING |
| MEDIUM | …ion.TypeScript.Tests/TypeScriptLanguageSupportTests.cs | 351 | // The scaffold emits the embedded tsconfig.apphost.json verbatim. See | STRING |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 29 | /// them because C# and TypeScript AppHosts scaffold through different code paths and have diverged in | COMMENT |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 29 | /// them because C# and TypeScript AppHosts scaffold through different code paths and have diverged in | COMMENT |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 123 | /// AppHosts scaffold through different code paths and have historically diverged. The TS starter | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 24 | /// than collapsing them: C# and TypeScript AppHosts scaffold through different code paths and have | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 24 | /// than collapsing them: C# and TypeScript AppHosts scaffold through different code paths and have | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 94 | /// because the C# and TypeScript AppHosts go through <em>different</em> scaffolding code paths and | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 134 | // the matrix: C# and TypeScript scaffold through different code and have diverged before. | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 134 | // the matrix: C# and TypeScript scaffold through different code and have diverged before. | COMMENT |
| MEDIUM | …ndToEnd.Tests/UpdateChannelNuGetConfigOrderingTests.cs | 87 | // Run aspire init non-interactively to scaffold a single-file C# AppHost. We'll | COMMENT |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 60 | // Conflicting scaffold scripts get aspire: prefix | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 64 | // Non-conflicting scaffold script added directly | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 96 | // All scaffold scripts added directly (no conflicts) | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 352 | // Not in scaffold — preserved | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 401 | // engines.node overwritten by scaffold (Aspire requires specific Node versions) | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 404 | // Script from scaffold is added | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 611 | // Conflicting scaffold scripts added under aspire: prefix | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 616 | // Non-conflicting scaffold script added directly | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 735 | // Even scaffold-generated commands with special chars must be written faithfully | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1025 | // EnsureObject replaces the array with a proper object containing scaffold deps | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1043 | // Can't merge into an array — returns scaffold as-is | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1200 | // node overwritten by scaffold | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1264 | // and the scaffold produces only Aspire-desired entries (no echo of existing content). | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1435 | // Simulates the full brownfield flow where the scaffold only contains | STRING |
| MEDIUM | …spire.Cli.Tests/Scaffolding/ScaffoldingServiceTests.cs | 285 | // and the Java scaffold writes one. Reporting it as a conflict aborts init entirely. | STRING |
| MEDIUM | …spire.Cli.Tests/Scaffolding/ScaffoldingServiceTests.cs | 325 | // A setting the developer chose is theirs, so the scaffold does not overwrite it. | STRING |
| MEDIUM | …spire.Cli.Tests/Scaffolding/ScaffoldingServiceTests.cs | 420 | // Preferring the scaffold here would silently discard the developer's whole settings file. | STRING |
| MEDIUM | …Projects/DotNetBasedAppHostServerScaffoldCacheTests.cs | 14 | /// Guards the scaffold fingerprint cache on <see cref="DotNetBasedAppHostServerProject"/>. | COMMENT |
| MEDIUM | …Projects/DotNetBasedAppHostServerScaffoldCacheTests.cs | 17 | /// <c>aspire run</c>. The scaffold is now rewritten only when its generated content actually | COMMENT |
| MEDIUM | …Projects/DotNetBasedAppHostServerScaffoldCacheTests.cs | 80 | // Simulate a hand-deleted or half-written scaffold. The fingerprint still matches, so only | COMMENT |
| MEDIUM | …Projects/DotNetBasedAppHostServerScaffoldCacheTests.cs | 119 | // earlier target, so retargeting the reference has to rewrite the scaffold. | COMMENT |
| MEDIUM | …spire.Cli.Tests/Templating/JavaAppHostTemplateTests.cs | 127 | /// distribution and its checksum keeps every scaffold on the same verified Gradle version. | COMMENT |
| MEDIUM | …spire.Cli.Tests/Templating/JavaStarterScaffoldTests.cs | 50 | /// The Java service, its wrapper, and the frontend all have to survive the scaffold together. | COMMENT |
| MEDIUM | …Cli.Tests/Commands/NewCommandChannelResolutionTests.cs | 292 | /// so a developer on a daily CLI can still scaffold a stable-channel project for reproduction | COMMENT |
| MEDIUM | tests/Aspire.Cli.Tests/Commands/NewCommandTests.cs | 2188 | // The warning is only meaningful when the scaffold succeeded — surfacing it on a failed | STRING |
| MEDIUM | …s/Commands/NewCommandTemplateConfigPersistenceTests.cs | 239 | /// template that consumes Aspire packages must scaffold from that channel/source. | COMMENT |
| MEDIUM | .agents/skills/pr-testing/ci-infra-testing.md | 329 | ### C. gh-aw agentic workflows (`.md` → `.lock.yml`) | COMMENT |
| MEDIUM | .agents/skills/cli-e2e-testing/SKILL.md | 206 | channel-emulation matrix (one test per language because C# and TypeScript scaffold through different | CODE |
| MEDIUM | .agents/skills/fix-flaky-test/SKILL.md | 509 | # Avoid `gh run watch` — it produces excessive output that floods the context window. | COMMENT |
| MEDIUM | docs/dogfooding-pull-requests.md | 283 | ## C# AppHost scaffolding | COMMENT |
| MEDIUM | docs/plans/project-v2-csharpprogram-watch.md | 261 | ## 6. Work breakdown — agentic coding sessions | COMMENT |
| MEDIUM | docs/specs/cli-identity-sidecar.md | 465 | **Emulated channel matrix E2E** (AppHost-language × channel-emulation; one test per language because C# and TypeScript s | CODE |
| MEDIUM⚡ | .github/workflows/extension-e2e-tests.yml | 852 | # shard running without the orchestration component and failing minutes later with a debug | COMMENT |
| MEDIUM⚡ | .github/workflows/extension-e2e-tests.yml | 853 | # startup timeout instead of the real reason - "The Aspire orchestration component is not | COMMENT |
| MEDIUM⚡ | .github/workflows/extension-e2e-tests.yml | 857 | # A zero exit code only means setup ran, not that it produced an orchestration component. The | COMMENT |
| MEDIUM | .github/workflows/tests-outerloop.yml | 21 | # orchestrate this pipeline. Changes to downstream workflows (e.g. | COMMENT |
| MEDIUM | .github/workflows/validate-agentic-workflows.yml | 8 | # trait-scoped agentic contracts in Infrastructure.Tests. See | COMMENT |
| 78 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | extension/src/test/e2eStateFileBridge.test.ts | 480 | assert.deepStrictEqual(harness.cdpSocket.send.firstCall.args.slice(0, 1), [ | CODE |
| CRITICAL | …hboard.Components.Tests/Controls/TerminalTitleTests.cs | 180 | var icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Regular.Size16.Database(); | CODE |
| CRITICAL | …shboard.Components.Tests/Controls/TerminalViewTests.cs | 201 | .Add(p => p.ResourceIcon, new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size16.Database())); | CODE |
| CRITICAL | …shboard.Components.Tests/Controls/TerminalViewTests.cs | 212 | cut.Render(builder => builder.Add(p => p.ResourceIcon, new Microsoft.FluentUI.AspNetCore.Components.Icons.Regula | CODE |
| CRITICAL | …spire.Hosting.Tests/Dashboard/DashboardServiceTests.cs | 681 | var input = Aspire.DashboardService.Proto.V1.InteractionInput.Descriptor.ToProto(); | CODE |
| CRITICAL | …spire.Hosting.Tests/Dashboard/DashboardServiceTests.cs | 684 | Assert.Null(Aspire.DashboardService.Proto.V1.InteractionInput.Descriptor.FindFieldByName("terminal_id")); | CODE |
| CRITICAL | …on.TypeScript.Tests/AtsTypeScriptCodeGeneratorTests.cs | 44 | var packageJson = System.Text.Json.Nodes.JsonNode.Parse(content)!.AsObject(); | CODE |
| CRITICAL | src/Aspire.Dashboard/GlobalSuppressions.cs | 12 | Target = "M:Aspire.Dashboard.Components.Controls.GridValue.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering | CODE |
| CRITICAL | src/Aspire.Dashboard/GlobalSuppressions.cs | 18 | Target = "M:Aspire.Dashboard.Components.Controls.GridValue.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 29 | Target = "M:Aspire.Dashboard.Components.Pages.Metrics.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering.Rend | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 32 | Target = "M:Aspire.Dashboard.Components.Controls.ResourceDetails.BuildRenderTree(Microsoft.AspNetCore.Components.Ren | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 35 | Target = "M:Aspire.Dashboard.Components.Controls.SpanDetails.BuildRenderTree(Microsoft.AspNetCore.Components.Renderi | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 38 | Target = "M:Aspire.Dashboard.Components.Dialogs.ExemplarsDialog.BuildRenderTree(Microsoft.AspNetCore.Components.Rend | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 41 | Target = "M:Aspire.Dashboard.Components.Dialogs.ManageDataDialog.BuildRenderTree(Microsoft.AspNetCore.Components.Ren | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 44 | Target = "M:Aspire.Dashboard.Components.Pages.Resources.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering.Re | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 47 | Target = "M:Aspire.Dashboard.Components.Pages.StructuredLogs.BuildRenderTree(Microsoft.AspNetCore.Components.Renderi | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 50 | Target = "M:Aspire.Dashboard.Components.Pages.TraceDetail.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering. | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 53 | Target = "M:Aspire.Dashboard.Components.Pages.Traces.BuildRenderTree(Microsoft.AspNetCore.Components.Rendering.Rende | CODE |
| CRITICAL⚡ | src/Aspire.Dashboard/GlobalSuppressions.cs | 56 | Target = "M:Aspire.Dashboard.Components.Dialogs.SettingsDialog.BuildRenderTree(Microsoft.AspNetCore.Components.Rende | CODE |
| CRITICAL | …e.Dashboard/Components/Controls/TerminalTitle.razor.cs | 17 | private static readonly Icon s_terminalIcon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Regular.Size20.Wind | CODE |
| CRITICAL | src/Aspire.Dashboard/ServiceClient/DashboardClient.cs | 139 | _client = new Aspire.DashboardService.Proto.V1.DashboardService.DashboardServiceClient(_channel); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 2122 | metadataNode["annotations"] = System.Text.Json.Nodes.JsonNode.Parse(annotations.GetRawText()); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 2127 | metadataNode["labels"] = System.Text.Json.Nodes.JsonNode.Parse(labels.GetRawText()); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 2141 | minimal["spec"] = System.Text.Json.Nodes.JsonNode.Parse(spec.GetRawText()); | CODE |
| CRITICAL | …ire.Azure.Messaging.EventHubs/ConfigurationSchema.json | 89 | "description": "The total number of events that can be buffered for publishing at a given | CODE |
| CRITICAL | …/Aspire.Cli/Utils/EnvironmentChecker/DotNetSdkCheck.cs | 62 | var architecture = System.Runtime.InteropServices.RuntimeInformation.ProcessArchitecture.ToString().ToLowerI | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …sts/Aspire.Hosting.Sdk.Tests/AppHostSdkTargetsTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | …re.Cli.EndToEnd.Tests/CentralPackageManagementTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | tests/Aspire.Cli.Tests/Projects/ProjectLocatorTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …tityFrameworkCore.PostgreSQL.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | …tityFrameworkCore.PostgreSQL.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | tests/Aspire.Npgsql.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | tests/Aspire.Azure.Npgsql.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | …ing.Dotnet.Tests/DotnetProjectBuildCoordinatorTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | tests/Aspire.Hosting.Tests/MSBuildTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | tests/Aspire.Cli.EndToEnd.Tests/CSharpInitTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | …Aspire.Cli.Tests/Projects/DotNetAppHostProjectTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | …spire.Cli.Tests/Projects/PrebuiltAppHostServerTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | …Tests/Commands/IntegrationAssemblyNameResolverTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | tests/Aspire.Cli.Tests/Commands/SdkInstallerTests.cs | 0 | <project sdk="microsoft.net.sdk"> <propertygroup> <targetframework>net10.0</targetframework> <assemblyname>custom.integr | STRING |
| HIGH | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …ent.EndToEnd.Tests/TypeScriptExpressDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …yment.EndToEnd.Tests/AcaManagedRedisDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …Deployment.EndToEnd.Tests/AcaStarterDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | ….Cli.EndToEnd.Tests/KubernetesDeployWithValkeyTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …e.Cli.EndToEnd.Tests/KubernetesDeployWithRedisTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | ….Cli.EndToEnd.Tests/KubernetesDeployWithGarnetTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …re.Cli.EndToEnd.Tests/TypeScriptMigrateAppHostTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …ire.Cli.EndToEnd.Tests/TypeScriptLegacyAppHostTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …spire.Cli.EndToEnd.Tests/ChannelUpdateWorkflowTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …Cli.EndToEnd.Tests/TypeScriptCodegenValidationTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …sts/Aspire.Cli.EndToEnd.Tests/ProjectReferenceTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …Hosting.CodeGeneration.Python/PythonLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …ire.Hosting.CodeGeneration.Java/JavaLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …/Aspire.Hosting.CodeGeneration.Go/GoLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …ire.Hosting.CodeGeneration.Rust/RustLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | .config/CredScanSuppressions.json | 5 | "placeholder": "postgres", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 9 | "placeholder": "fake", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 13 | "placeholder": "TestKey123!", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 17 | "placeholder": "!321yeKtseT", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 21 | "placeholder": "p@ssw0rd1", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 25 | "placeholder": "p@ssw0rd2", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 29 | "placeholder": "thisIsAFakeSecret", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 33 | "placeholder": "password", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 37 | "placeholder": "pass", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 41 | "placeholder": "mypass", | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 39 | email: { value: 'user@example.com', propertyType: PropertyType.Pii }, | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 94 | email: { value: 'user@example.com', propertyType: PropertyType.Pii }, | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 354 | email: { value: 'user@example.com', propertyType: '0' as unknown as 0 }, | CODE |
| LOW | playground/Stress/Stress.ApiService/Program.cs | 400 | // From https://microsoftedge.github.io/Demos/json-dummy-data/ | COMMENT |
| LOW⚡ | playground/Stress/Stress.ApiService/Program.cs | 657 | "content": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBBB | CODE |
| LOW⚡ | playground/Stress/Stress.ApiService/Program.cs | 657 | "content": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBBB | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 286 | "bio": "Duis commodo orci ut dolor iaculis facilisis. Ut viverra quis eros eu tincidunt. Lorem ipsum dolor sit amet, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 286 | "bio": "Duis commodo orci ut dolor iaculis facilisis. Ut viverra quis eros eu tincidunt. Lorem ipsum dolor sit amet, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 440 | "bio": "Vivamus id faucibus velit, id posuere leo. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Lor | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 440 | "bio": "Vivamus id faucibus velit, id posuere leo. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Lor | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 489 | "bio": "In sed ultricies lorem. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Quisque mauris ligula, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 489 | "bio": "In sed ultricies lorem. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Quisque mauris ligula, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 510 | "bio": "Donec congue sapien vel euismod interdum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce con | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 510 | "bio": "Donec congue sapien vel euismod interdum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce con | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 566 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc aliquet sodales nunc a pulvinar. Morbi vitae n | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 566 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc aliquet sodales nunc a pulvinar. Morbi vitae n | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 650 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus massa at viverra facilisis.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 650 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus massa at viverra facilisis.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 888 | "bio": "Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Ut viverra quis eros eu tincidunt. Lorem ipsum | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 888 | "bio": "Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Ut viverra quis eros eu tincidunt. Lorem ipsum | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1056 | "bio": "Maecenas tempus neque ut porttitor malesuada. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curab | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1056 | "bio": "Maecenas tempus neque ut porttitor malesuada. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curab | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1084 | "bio": "Morbi ultricies consequat ligula posuere eleifend. Donec pellentesque ultrices mi, non consectetur eros luct | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1084 | "bio": "Morbi ultricies consequat ligula posuere eleifend. Donec pellentesque ultrices mi, non consectetur eros luct | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1161 | "bio": "Quisque efficitur vel sapien ut imperdiet. Nam semper gravida nunc, sit amet elementum ipsum. Donec pellente | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1161 | "bio": "Quisque efficitur vel sapien ut imperdiet. Nam semper gravida nunc, sit amet elementum ipsum. Donec pellente | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1210 | "bio": "Etiam malesuada blandit erat, nec ultricies leo maximus sed. Quisque maximus sodales mauris ut elementum. Lo | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1210 | "bio": "Etiam malesuada blandit erat, nec ultricies leo maximus sed. Quisque maximus sodales mauris ut elementum. Lo | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1231 | "bio": "Maecenas non arcu nulla. Lorem ipsum dolor sit amet, consectetur adipiscing elit.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1231 | "bio": "Maecenas non arcu nulla. Lorem ipsum dolor sit amet, consectetur adipiscing elit.", | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 59 | var inputNoMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType = | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 59 | var inputNoMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType = | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 60 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 60 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 62 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 62 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 63 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 63 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 64 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name.\r | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 64 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name.\r | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 72 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 72 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 78 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 78 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 80 | KeyValuePair.Create("option1", "Option 1 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 80 | KeyValuePair.Create("option1", "Option 1 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 81 | KeyValuePair.Create("option2", "Option 2 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 81 | KeyValuePair.Create("option2", "Option 2 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 90 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 90 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| 36 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/common/cross/install-debs.py | 126 | # keyboxd, which makes it robust on hosts running GnuPG 2.4+ (e.g. Azure | COMMENT |
| LOW | …ommon/core-templates/steps/enable-internal-sources.yml | 24 | # If running on dnceng (internal project), just use the default behavior for NuGetAuthenticate. | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 859 | # Extract version from package name using a more robust two-step approach | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 864 | # Look for semantic version pattern with PR suffix (more specific and robust) | COMMENT |
| MEDIUM | tools/SelectTests/TriggerMap.cs | 192 | // non-.NET jobs, and is more robust: it follows the graph's transitive closure rather than literal | COMMENT |
| MEDIUM | playground/AspireEventHub/EventHubsConsumer/Consumer.cs | 11 | /// production scenario, as it offers a much more robust experience with higher throughput. | COMMENT |
| MEDIUM⚡ | playground/Stress/Stress.ApiService/Program.cs | 661 | "content": "# 📝 Markdown Feature Showcase\n\nWelcome to a **comprehensive example** of markdown in a | CODE |
| MEDIUM | ….Tests/WorkflowScripts/select-tests-comment.harness.js | 7 | // C# test extracts the *shipped* script text from the workflow and hands it here, and this harness | COMMENT |
| MEDIUM | tests/Aspire.Cli.Tests/Commands/AddCommandTests.cs | 896 | // `== N` keeps the test robust to PackagingService adding additional explicit channels | STRING |
| MEDIUM | .github/workflows/run-tests.yml | 659 | # reached) — because quarantined tests are flaky by definition. But a broken harness must still fail | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 2488 | # actionable by CI automation and would just add noise. | COMMENT |
| MEDIUM | …spire.Hosting.Docker/Resources/ComposeNodes/Service.cs | 513 | /// that the service can utilize at runtime. | COMMENT |
| MEDIUM | …sting.Docker/Resources/ServiceNodes/Swarm/Resources.cs | 14 | /// a service can utilize, while reservations define the minimum guaranteed resources. | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 1441 | /// <para>Phi-3 Vision is a lightweight, state-of-the-art open multimodal model built upon datasets which incl | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 1702 | /// <para>Limited Scope for Code: Majority of Phi-3 training data is based in Python and use common pack | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2331 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2474 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2606 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2738 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | …Hosting.Foundry/Project/ConnectionBuilderExtensions.cs | 300 | /// can leverage the Key Vault connection for secret storage. | COMMENT |
| MEDIUM | src/Aspire.Hosting/Dcp/DcpModelUtilities.cs | 285 | // but leverage its endpoints via container tunnel, we want to add allocated endpoint info for them as well. | COMMENT |
| MEDIUM | src/Aspire.Hosting/Cli/CliOrphanDetector.cs | 40 | // Try to get the CLI process start time for robust orphan detection. | COMMENT |
| MEDIUM | …pire.Hosting.JavaScript/JavaScriptHostingExtensions.cs | 530 | // we want to remain robust if a future refactor changes that. | STRING |
| MEDIUM | src/Aspire.Hosting.Kubernetes/Resources/NamespaceV1.cs | 14 | /// class to leverage shared properties such as ApiVersion, Kind, and Metadata. This class | COMMENT |
| MEDIUM | …e.Hosting.Kubernetes/Resources/PodSecurityContextV1.cs | 123 | /// container processes can utilize beyond the primary group. | COMMENT |
| MEDIUM | …emoteHost/Ats/PolyglotCapabilityInvocationException.cs | 565 | // is more robust than search/replacing pieces of the original message because it | COMMENT |
| MEDIUM | src/Aspire.Hosting.Go/GoHostingExtensions.cs | 724 | .WithRequiredCommand("dlv", "https://github.com/go-delve/delve"); | CODE |
| MEDIUM | src/Aspire.Cli/Projects/PrebuiltAppHostServer.cs | 1144 | // Keying on the resolved channel.Name (rather than the input requestedChannel) is robust | STRING |
| MEDIUM | …Cli/Agents/OpenCode/OpenCodeAgentEnvironmentScanner.cs | 149 | // This is a simplified approach - a full JSONC parser would be more robust | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/find-missing-packages.sh | 109 | # Create a temporary file with the proper multi-line structure | COMMENT |
| MEDIUM | eng/common/cross/build-rootfs.sh | 636 | # Create the symlink in the same directory | COMMENT |
| MEDIUM | eng/common/core-templates/job/helix-job-monitor.yml | 223 | # Create a minimal NuGet.config that only references the local nupkg directory. | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli.sh | 895 | # Create the config file | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli.sh | 1342 | # Create a temporary directory for downloads | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 429 | # Create a temporary directory with a prefix. Honors DRY_RUN | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 1989 | # Create a temporary directory for downloads | COMMENT |
| MEDIUM | tools/ReleaseNotes/extract-api-changes.sh | 226 | # Create a simple summary report | COMMENT |
| MEDIUM | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1235 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1264 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 1235 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 1264 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …ts/Aspire.Cli.EndToEnd.Tests/JavaScriptPublishTests.cs | 236 | # This file is generated by running "yarn install" inside your project. | COMMENT |
| MEDIUM | .github/workflows/deployment-tests.yml | 158 | # Create a clean artifact directory with the native CLI and packages. | COMMENT |
| MEDIUM | .github/workflows/analyze-ci-failure.lock.yml | 1654 | # Create a structured summary of the failure data for the agent | COMMENT |
| MEDIUM | .github/workflows/analyze-ci-failure.lock.yml | 2799 | # Create a new issue for this cause | COMMENT |
| MEDIUM | …orkflows/agentics-maintenance-microsoft-aspire.dev.yml | 24 | # This file is the agentic maintenance workflow for the SideRepoOps target | COMMENT |
| MEDIUM | .github/actions/create-pull-request/action.yml | 156 | # Create the pull request without eval — all args are properly quoted | COMMENT |
| MEDIUM | …Hosting.CodeGeneration.Python/PythonLanguageSupport.cs | 99 | # This file is used when uv is not available and pip is used instead. | COMMENT |
| MEDIUM | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1470 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1499 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 31 | # Create a global to store the Redis client. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/find-missing-packages.sh | 28 | # Set trap to cleanup on exit | COMMENT |
| LOW | eng/find-missing-packages.sh | 92 | # Check if the package is already mapped to avoid duplicates | COMMENT |
| LOW | eng/find-missing-packages.sh | 174 | # Check if we've already processed this package | COMMENT |
| LOW | eng/find-missing-packages.sh | 200 | # Check if we still have NU1102 errors even if no new packages were found | COMMENT |
| LOW | eng/build.sh | 70 | # Check if an action is passed in | COMMENT |
| LOW | eng/restore-toolset.sh | 7 | # Check if we're on macOS | COMMENT |
| LOW | eng/homebrew/generate-cask.sh | 116 | # Check if a URL is accessible (HEAD request) | COMMENT |
| LOW | eng/common/tools.sh | 312 | # Check if the script is older than 30 days using timestamp file | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 60 | # Check if disabledPackageSources section exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 66 | # Check if this source name is disabled | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 86 | # Check if source already exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 116 | # Check if disabledPackageSources section exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 198 | # Check if there is no existing credential for this FeedName | COMMENT |
| LOW | eng/common/core-templates/steps/source-build.yml | 31 | # Check if AzDO substitutes in a build config from a variable, and use it if so. | COMMENT |
| LOW | eng/common/core-templates/steps/install-microbuild.yml | 60 | # Check if ESRP is disabled while SignType is real | COMMENT |
| LOW | eng/scripts/get-aspire-cli.sh | 217 | # Check if it's musl-based (Alpine, etc.) | COMMENT |
| LOW | eng/scripts/get-aspire-cli.sh | 360 | # Check if response suggests HTML content (error page) | COMMENT |
| LOW | eng/scripts/get-aspire-cli-pr.sh | 349 | # Check if it's musl-based (Alpine, etc.) | COMMENT |
| LOW | eng/scripts/get-cli-e2e-recording.sh | 134 | # Check if artifact exists | COMMENT |
| LOW | tools/ReleaseNotes/analyze-all-components.sh | 26 | # Check if jq is available for JSON processing | COMMENT |
| LOW | tools/ReleaseNotes/analyze-all-components.sh | 90 | # Check if there are any changes in this component first | COMMENT |
| LOW | tools/ReleaseNotes/extract-api-changes.sh | 84 | # Check if the API files list was generated | COMMENT |
| LOW | .github/workflows/specialized-test-runner.yml | 174 | # Check if there were no tests to run | COMMENT |
| LOW | .github/workflows/backmerge-release.yml | 79 | # Check if a PR already exists for this branch | COMMENT |
| LOW | .github/workflows/run-tests.yml | 706 | # Check if the XML is valid and non-empty | COMMENT |
| LOW | .github/workflows/deployment-cleanup.yml | 120 | # Check if RG has the first-seen tag | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 2608 | # Check if the stored cause file already has a linked issue | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 2695 | # Check if the stored issue is closed (may need reopening) | COMMENT |
| LOW | .github/actions/check-changed-files/action.yml | 61 | # Check if jq is available | COMMENT |
| LOW | .github/actions/check-changed-files/action.yml | 118 | # Check if we have any valid patterns | COMMENT |
| LOW | .github/actions/create-pull-request/action.yml | 105 | # Check if a PR already exists for this branch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/pr-docs-check/compute_signals.py | 178 | # `- public static IResourceBuilder<FooResource> AddFoo(...) { throw null; }` | COMMENT |
| HIGH⚡ | .github/workflows/pr-docs-check/test_compute_signals.py | 135 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| HIGH⚡ | .github/workflows/pr-docs-check/test_compute_signals.py | 138 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| HIGH | .github/workflows/pr-docs-check/test_compute_signals.py | 231 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/common/cross/install-debs.py | 42 | print(f"Error downloading {url}: {type(e).__name__} - {e}. Retrying...") | CODE |
| MEDIUM | eng/common/cross/install-debs.py | 206 | print(f"Error: Package '{current}' was not found in the available packages.") | CODE |
| LOW | playground/deployers/Deployers.Dockerfile/app.py | 81 | except Exception as e: | CODE |
| LOW | playground/FoundryAgents/app/main.py | 45 | except Exception as e: | CODE |
| LOW | playground/FoundryAgentBasic/app/main.py | 49 | except Exception: # pragma: no cover | CODE |
| LOW | playground/FoundryAgentBasic/app/main.py | 323 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 42 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 67 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 98 | except Exception as exc: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 600 | except Exception: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 637 | except Exception: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 758 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 769 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 819 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 854 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 981 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 600 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 637 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 758 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 769 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 819 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 854 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 981 | except Exception: | CODE |
| LOW | …ls/cli-channel-debugging/get-aspire-channel-version.sh | 97 | except Exception as e: # noqa: BLE001 - surface any network/parse failure to the caller | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 835 | except Exception: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 872 | except Exception: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 993 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1004 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1054 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1089 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1216 | except Exception: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 48 | except Exception as e: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 82 | except Exception as e: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 121 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 77 | Obtains connection information from Entra authentication for Azure PostgreSQL. Parameters: credential (Toke | STRING |
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 102 | Obtains connection information from Entra authentication for Azure PostgreSQL. Parameters: credential (Toke | STRING |
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 129 | Establishes an asynchronous PostgreSQL connection using Entra authentication. The method checks for provided cr | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | localhive.sh | 5 | # Usage: | COMMENT |
| LOW | eng/homebrew/dogfood.sh | 7 | # Usage: | COMMENT |
| LOW | eng/common/native/install-dependencies.sh | 7 | # Usage: | COMMENT |
| LOW | …common/templates-official/variables/pool-providers.yml | 12 | # How to use: | COMMENT |
| LOW | eng/common/templates/variables/pool-providers.yml | 12 | # How to use: | COMMENT |
| LOW | eng/scripts/get-cli-e2e-recording.sh | 4 | # Usage: | COMMENT |
| LOW | …ls/cli-channel-debugging/get-aspire-channel-version.sh | 16 | # Usage: | COMMENT |
| LOW | .github/workflows/polyglot-validation/Dockerfile.java | 4 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 18 | CODE | |
| LOW | playground/FoundryAgentBasic/app/main.py | 4 | CODE | |
| LOW | playground/aspireify-eval/polyglot/api-weather/main.py | 5 | CODE | |
| LOW | …workflows/extension-release/validate_github_pr_body.py | 3 | CODE | |
| LOW | …ension-release/generate_deterministic_release_notes.py | 3 | CODE | |
| LOW | .github/workflows/pr-docs-check/resolve_sme.py | 34 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_signals.py | 44 | CODE | |
| LOW | .github/workflows/pr-docs-check/checkout_target.py | 3 | CODE | |
| LOW | …/workflows/pr-docs-check/enumerate_release_branches.py | 3 | CODE | |
| LOW | …flows/pr-docs-check/test_enumerate_release_branches.py | 3 | CODE | |
| LOW | .github/workflows/pr-docs-check/test_checkout_target.py | 3 | CODE | |
| LOW | .github/workflows/pr-docs-check/test_compute_signals.py | 12 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_pr_context.py | 31 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/Aspire.Cli.Tests/Mcp/Docs/LlmsTxtParserTests.cs | 834 | In Aspire, eventing allows you to publish and subscribe to events during various AppHost life cycles. Eventing is mo | CODE |
| HIGH | docs/specs/dashboard-http-api.md | 44 | "PrimaryApiKey": "your-api-key" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | playground/python/uvicorn_app/app.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | …End/PostgresEndToEnd.PythonService/entra_connection.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | playground/PythonAppHost/app/main.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | playground/FoundryAgentEnterprise/app/main.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1942 | def set_value(self, value: str) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 3381 | def update_task(self, status_text: str, *, timeout: int | None = None) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 3392 | def update_task_markdown(self, markdown_string: str, *, timeout: int | None = None) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 5989 | def set_choice_options(self, choices: typing.Iterable[InteractionChoiceOption]) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 5998 | def set_value(self, value: str) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 7328 | def set_value(self, value: str) -> None: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 59 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 20 | CODE | |
| LOW | eng/common/cross/install-debs.py | 196 | CODE | |
| LOW | eng/common/cross/install-debs.py | 221 | CODE | |
| LOW | eng/common/cross/install-debs.py | 259 | CODE | |
| LOW | eng/common/cross/install-debs.py | 293 | CODE | |
| LOW | eng/common/cross/install-debs.py | 348 | CODE | |
| LOW | playground/deployers/Deployers.Dockerfile/app.py | 49 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_signals.py | 459 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | playground/Stress/Stress.ApiService/Program.cs | 635 | "content": "I'm sorry, but I cannot provide medical advice. Please consult a licensed healthcare pro | CODE |
| MEDIUM | playground/Stress/Stress.ApiService/Program.cs | 690 | "content": "I cannot provide a long-term climate forecast as that requires specialized meteorologica | CODE |
| MEDIUM | tests/Aspire.Cli.Tests/Mcp/Docs/LlmsTxtParserTests.cs | 834 | In Aspire, eventing allows you to publish and subscribe to events during various AppHost life cycles. Eventing is mo | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | playground/FoundryAgentBasic/app/main.py | 345 | CODE |