Aspire is the tool for code-first, extensible, observable dev and deploy.
This report presents the forensic synthetic code analysis of microsoft/aspire, a C# project with 6,163 GitHub stars. SynthScan v2.0 examined 1,433,982 lines of code across 8065 source files, recording 7089 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 7.0 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 7089 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | localhive.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | localhive.sh | 541 | COMMENT | |
| LOW | eng/clipack/npm/aspire.js | 281 | const source = fs.statSync(sourcePath); | COMMENT |
| LOW | eng/clipack/npm/aspire.js | 321 | COMMENT | |
| LOW | eng/homebrew/validate-cask-artifact.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/homebrew/validate-cask-artifact.sh | 161 | # | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 221 | # ---------------------------------------------------------------- | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 261 | # ---------------------------------------------------------------- | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 321 | steps: | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 361 | # Upload the packed managed Shipping artifacts so the downstream | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 481 | # validation signal, not a shipping dependency — running it in | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 501 | # between `build` and `build_sign_native` is preserved. The Assemble | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 541 | COMMENT | |
| LOW | eng/pipelines/azure-pipelines.yml | 581 | # limited to native CLI staged content at sign time avoids that. | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 621 | - pwsh: | | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 661 | artifact: managed_dashboard_artifacts | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 681 | # | COMMENT |
| LOW | eng/pipelines/azure-pipelines.yml | 741 | # Generate installer packages (WinGet + Homebrew) and validate npm install. | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1 | # Release Pipeline: Publish Aspire Release Artifacts | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 181 | os: windows | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 281 | # parameters.ReleaseVersion, we honor it but log a loud warning when | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 821 | # Validate ESRP owner/approver configuration on dry runs as well | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1261 | exit 1 | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 1721 | # below: npm CDN propagation of 7 freshly-published scoped | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2341 | targetPath: '$(Pipeline.Workspace)/winget/winget-manifests-stable' | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2361 | # dispatch job just created. | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2381 | # SkipNixPackageUpdate / SkipHomebrewValidation) so partial-failure | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2561 | # name as a path prefix (e.g. 'BlobArtifacts/aspire-cli-...'), so | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2621 | # Get-AspireBotInstallationToken.ps1, which uses RSA.ImportFromPem | COMMENT |
| LOW | eng/pipelines/release-publish-nuget.yml | 2721 | # `brew install`/`brew uninstall` against the cask file produced by | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 1 | parameters: | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 81 | ${{ if eq(parameters.agentOs, 'macos') }}: | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 141 | # binary that refuses to boot. pr-<N> is intentionally excluded | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 161 | $channel = "pr-$prNumber" | COMMENT |
| LOW | eng/pipelines/templates/build_sign_native.yml | 361 | COMMENT | |
| LOW | eng/pipelines/templates/build_sign_native.yml | 381 | # empty string on PRs and public/test-signed runs (where | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 61 | expectedVersion="$(NpmExpectedVersion)" | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 161 | fi | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 201 | if ! command -v aspire >/dev/null 2>&1; then | COMMENT |
| LOW | eng/pipelines/templates/prepare-npm-cli-packages.yml | 221 | # npm SemVer (npm/semver) doesn't honor it for equality. | COMMENT |
| LOW | eng/pipelines/templates/BuildAndTest.yml | 41 | # / publish to a separate parallel stage (build_extension). The managed | COMMENT |
| LOW | eng/pipelines/templates/download_native_symbols.yml | 1 | parameters: [] | COMMENT |
| LOW | eng/pipelines/templates/build_extension.yml | 1 | # Builds, signs, and publishes the VS Code extension VSIX as a standalone | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/common/vmr-sync.sh | 1 | #!/bin/bash | COMMENT |
| LOW | eng/common/vmr-sync.sh | 21 | ### | COMMENT |
| LOW | eng/common/native/init-distro-rid.sh | 1 | #!/bin/sh | COMMENT |
| LOW | eng/common/native/init-distro-rid.sh | 61 | COMMENT | |
| LOW | …common/templates-official/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool | COMMENT |
| LOW | eng/common/templates/vmr-build-pr.yml | 1 | # This pipeline is used for running the VMR verification of the PR changes in repo-level PRs. | COMMENT |
| LOW | eng/common/templates/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool | COMMENT |
| LOW | eng/common/core-templates/job/source-build.yml | 1 | parameters: | COMMENT |
| LOW | eng/common/core-templates/job/source-build.yml | 21 | # published by source-build. | COMMENT |
| LOW | eng/scripts/debug-staging.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 21 | # - flip <SuppressFinalPackageVersion>true</...> on Aspire.Hosting.Foo (ship it as preview), or | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 41 | # pulled in by the template (Microsoft.Extensions.*, OpenTelemetry.*, etc.) are routed to the | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 141 | # * aspire's --output (and other path-based) flags resolve relative paths against | COMMENT |
| LOW | eng/scripts/stabilization-smoke-init-restore.sh | 221 | # baked into run_aspire): | COMMENT |
| LOW | eng/scripts/debug-aspire-channel.sh | 1 | #!/usr/bin/env bash | COMMENT |
| 4031 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 189 | # Step 1: dotnet publish produces the self-contained single-file binary. | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 190 | # Step 2: build.sh -sign runs Arcade's signing (only when codeSign is enabled). | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 191 | # Step 3: Bundle.proj creates the bundle layout and archive using the signed binary. | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 32 | #### Step 1: Start with API Changes Diff to Identify What's New | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 38 | #### Step 2: Use Uber File Only for Writing Accurate Usage Examples | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 44 | #### Step 3: Extract Complete API Signatures for Code Samples | COMMENT |
| LOW⚡ | tools/ReleaseNotes/docs/api-documentation.md | 52 | #### Step 4: Write Usage Example with Correct API Signatures | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 16 | ### Step 1: Read Commit Messages for Context | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 26 | ### Step 2: Look Up GitHub Issues and Pull Requests for Additional Context | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 171 | ### Step 3: Identify Feature Types by Commit Message Patterns | COMMENT |
| LOW | tools/ReleaseNotes/docs/commit-analysis.md | 179 | ### Step 4: Extract User-Facing Impact | COMMENT |
| LOW | extension/gulpfile.js | 41 | // Step 1: Export strings from source files to bundle.l10n.json | COMMENT |
| LOW | extension/gulpfile.js | 54 | // Step 2: Generate XLF file from package.nls.json using library function | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 43 | ### Step 1: AppHost Registers the WASM App and Gateway | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 71 | ### Step 2: Gateway Exposes Configuration Endpoint | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 92 | ### Step 3: JavaScript Initializer Injects Environment Variables | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 115 | ### Step 4: WASM Client Bridges Environment Variables into IConfiguration | COMMENT |
| LOW | playground/BlazorStandalone/README.md | 136 | ### Step 5: Telemetry Flows to Aspire Dashboard | COMMENT |
| LOW | playground/BlazorHosted/README.md | 42 | ### Step 1: AppHost Registers the Hosted App | COMMENT |
| LOW | playground/BlazorHosted/README.md | 61 | ### Step 2: Server Embeds Configuration in DOM Comment | COMMENT |
| LOW | playground/BlazorHosted/README.md | 87 | ### Step 3: JavaScript Initializer Reads DOM Comment | COMMENT |
| LOW | playground/BlazorHosted/README.md | 111 | ### Step 4: WASM Client Bridges Environment Variables into IConfiguration | COMMENT |
| LOW | playground/BlazorHosted/README.md | 131 | ### Step 5: Server Configures YARP for Proxying | COMMENT |
| LOW | playground/BlazorHosted/README.md | 164 | ### Step 6: Telemetry Flows Through Server to Dashboard | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 486 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 494 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 572 | // Step 3: Enter the project name. The CLI resolves the selected template's version against | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 585 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 592 | // Step 5: URLs prompt (all templates have this). The CLI may spend time | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 608 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 626 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 636 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 383 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 388 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 446 | // Step 3: Enter project name | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 451 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 455 | // Step 5: URLs prompt (all templates have this) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 459 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 476 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 485 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 75 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 79 | // Step 2: Set up CLI | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 82 | // Step 3: Create single-file AppHost | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 86 | // Step 4: Add Azure Container Apps package | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 93 | // Step 5: Modify apphost.cs to add Azure Container App Environment | COMMENT |
| LOW | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 109 | // Step 6: Set environment variables with an INVALID Azure location to induce failure. | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 120 | // Step 7: Deploy (expecting failure) and capture output to a file | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 127 | // Step 8: Exit terminal | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 133 | // Step 9: Read captured output and verify error messages are clean | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 66 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 70 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 73 | // Step 3: Create single-file AppHost using aspire init | COMMENT |
| LOW | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 98 | // Step 5: Modify apphost.cs to add VNet + PE infrastructure | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 134 | // Step 6: Set environment variables for deployment | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 139 | // Step 7: Deploy to Azure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 146 | // Step 8: Verify VNet infrastructure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 154 | // Step 9: Clean up Azure resources using aspire destroy | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 158 | // Step 10: Exit terminal | STRING |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 74 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 78 | // Step 2: Set up CLI environment | COMMENT |
| 766 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/Aspire.Hosting.Yarp/api/Aspire.Hosting.Yarp.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ion.Python/api/Aspire.Hosting.CodeGeneration.Python.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Registry/api/Aspire.Hosting.Azure.ContainerRegistry.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …c/Aspire.Hosting.MongoDB/api/Aspire.Hosting.MongoDB.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Python/api/Aspire.Hosting.Python.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Azure.FrontDoor/api/Aspire.Hosting.Azure.FrontDoor.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Azure.WebPubSub/api/Aspire.Hosting.Azure.WebPubSub.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.GitHub.Models/api/Aspire.Hosting.GitHub.Models.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Hosting.Keycloak/api/Aspire.Hosting.Keycloak.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …c/Aspire.Hosting.AppHost/api/Aspire.Hosting.AppHost.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Docker/api/Aspire.Hosting.Docker.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …pire.Hosting.SqlServer/api/Aspire.Hosting.SqlServer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 280 | /// <para>Azure AI Content Safety is a safety system for monitoring content generated by both foundation model | COMMENT |
| HIGH | …c/Aspire.Hosting.Foundry/api/Aspire.Hosting.Foundry.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Hosting.Azure.Kusto/api/Aspire.Hosting.Azure.Kusto.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.MySql/api/Aspire.Hosting.MySql.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Oracle/api/Aspire.Hosting.Oracle.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Garnet/api/Aspire.Hosting.Garnet.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …zure.Kubernetes/api/Aspire.Hosting.Azure.Kubernetes.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.TypeSystem/api/Aspire.TypeSystem.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Kafka/api/Aspire.Hosting.Kafka.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Valkey/api/Aspire.Hosting.Valkey.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …eration.Java/api/Aspire.Hosting.CodeGeneration.Java.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ppContainers/api/Aspire.Hosting.Azure.AppContainers.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.Storage/api/Aspire.Hosting.Azure.Storage.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/ConsoleLogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Traces.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Dialogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/TraceDetail.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Dashboard/Resources/ControlsStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Dashboard/Resources/StructuredFiltering.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Reconnect.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Columns.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Resources.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Login.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Layout.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …spire.Dashboard/Resources/KnownUrlsDisplay.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …/Aspire.Dashboard/Resources/StructuredLogs.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Routes.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Resources/Metrics.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Dashboard/Utils/MimeTypeHelpers.cs | 45 | // AI generated list of extensions. | COMMENT |
| HIGH | …eGeneration.Go/api/Aspire.Hosting.CodeGeneration.Go.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …spire.Hosting/Resources/InteractionStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/Resources/MessageStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/Resources/CommandStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ire.Hosting/Resources/LaunchProfileStrings.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting/api/Aspire.Hosting.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Script/api/Aspire.Hosting.CodeGeneration.TypeScript.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.SignalR/api/Aspire.Hosting.Azure.SignalR.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …eration.Rust/api/Aspire.Hosting.CodeGeneration.Rust.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Seq/api/Aspire.Hosting.Seq.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ng.Azure.CosmosDB/api/Aspire.Hosting.Azure.CosmosDB.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Nats/api/Aspire.Hosting.Nats.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | src/Aspire.Hosting.Maui/api/Aspire.Hosting.Maui.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | ….Hosting.Azure.Redis/api/Aspire.Hosting.Azure.Redis.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Hosting.JavaScript/api/Aspire.Hosting.JavaScript.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.ProjectTemplates/api/Aspire.ProjectTemplates.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …ting.Azure.Network/api/Aspire.Hosting.Azure.Network.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …re.Hosting.Kubernetes/api/Aspire.Hosting.Kubernetes.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …Aspire.Hosting.Browsers/api/Aspire.Hosting.Browsers.cs | 3 | // This code was generated by a tool. | COMMENT |
| 108 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/pipelines/azure-pipelines-unofficial.yml | 113 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines-unofficial.yml | 115 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 213 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 221 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | eng/pipelines/azure-pipelines.yml | 230 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 241 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 261 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 268 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 398 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 405 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 475 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 483 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 740 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/azure-pipelines.yml | 753 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/templates/public-pipeline-template.yml | 64 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/pipelines/templates/public-pipeline-template.yml | 66 | # ---------------------------------------------------------------- | COMMENT |
| MEDIUM | eng/scripts/stabilization-smoke-init-restore.sh | 49 | # ------------- | COMMENT |
| MEDIUM | eng/scripts/stabilization-smoke-init-restore.sh | 56 | # ----------- | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 302 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 304 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 623 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 625 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 764 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 766 | # ============================================================================= | COMMENT |
| MEDIUM | eng/scripts/debug-aspire-channel.sh | 30 | # ------------------------ | COMMENT |
| MEDIUM | extension/src/test/parsers.test.ts | 1283 | '// ── Python Player ──────────────', | CODE |
| MEDIUM | extension/src/dcp/DashboardTelemetryPassthrough.ts | 7 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/dcp/DashboardTelemetryPassthrough.ts | 42 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 1 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 29 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 51 | // ── Extension-emitted events ──────────────────────────────────────────── | COMMENT |
| MEDIUM | extension/src/utils/telemetryRegistry.ts | 105 | // ── Dashboard passthrough events ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | extension/src/utils/telemetry.ts | 285 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | extension/src/utils/telemetry.ts | 287 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 28 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 30 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 115 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 117 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 165 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/Aspire.Acquisition.Tests/Scripts/PipedInstallTests.cs | 167 | // ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 177 | # =================================================================== | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 318 | # =================================================================== | COMMENT |
| MEDIUM | tests/PolyglotAppHosts/Aspire.Hosting/Python/apphost.py | 329 | # =================================================================== | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 15 | // ── 1. AddAzureServiceBus ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 21 | // ── 2. RunAsEmulator — with ConfigureContainer callback ──────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 33 | // ── 3. AddServiceBusQueue — factory method returns Queue type ────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 41 | // ── 4. AddServiceBusTopic — factory method returns Topic type ────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 64 | // ── DTO types ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 80 | // ── 6. WithProperties — callbacks on Queue, Topic, Subscription ──────────── | COMMENT |
| MEDIUM | …AppHosts/Aspire.Hosting.Azure.ServiceBus/Go/apphost.go | 154 | // ── 8. Fluent chaining — verify correct return types enable chaining ─────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 8 | # ── 1. addAzureServiceBus ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 10 | # ── 2. runAsEmulator — with configureContainer callback ──────────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 12 | # ── 3. addServiceBusQueue — factory method returns Queue type ────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 14 | # ── 4. addServiceBusTopic — factory method returns Topic type ────────────── | COMMENT |
| MEDIUM⚡ | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 18 | # ── DTO types ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …osts/Aspire.Hosting.Azure.ServiceBus/Python/apphost.py | 31 | # ── 8. Verify enum values are accessible ──────────────────────────────────── | COMMENT |
| MEDIUM | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 15 | // ── 1. AddAzureKeyVault ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 28 | // ── 2. WithKeyVaultRoleAssignments ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 34 | // ── 3. AddSecret ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …otAppHosts/Aspire.Hosting.Azure.KeyVault/Go/apphost.go | 37 | // ── 4. AddSecret (expression value) ─────────────────────────────────────── | COMMENT |
| 314 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 189 | # Step 1: dotnet publish produces the self-contained single-file binary. | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 190 | # Step 2: build.sh -sign runs Arcade's signing (only when codeSign is enabled). | COMMENT |
| LOW⚡ | eng/pipelines/templates/build_sign_native.yml | 191 | # Step 3: Bundle.proj creates the bundle layout and archive using the signed binary. | COMMENT |
| LOW | extension/gulpfile.js | 41 | // Step 1: Export strings from source files to bundle.l10n.json | COMMENT |
| LOW | extension/gulpfile.js | 54 | // Step 2: Generate XLF file from package.nls.json using library function | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 486 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 494 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 572 | // Step 3: Enter the project name. The CLI resolves the selected template's version against | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 585 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 592 | // Step 5: URLs prompt (all templates have this). The CLI may spend time | COMMENT |
| LOW | tests/Shared/Hex1bAutomatorTestHelpers.cs | 608 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 626 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bAutomatorTestHelpers.cs | 636 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 383 | // Step 1: Type aspire new and wait for the template list | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 388 | // Step 2: Navigate to and select the desired template | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 446 | // Step 3: Enter project name | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 451 | // Step 4: Accept default output path | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 455 | // Step 5: URLs prompt (all templates have this) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 459 | // Step 6: Redis prompt (only Starter, JsReact, PythonReact) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 476 | // Step 7: Test project prompt (only Starter) | COMMENT |
| LOW⚡ | tests/Shared/Hex1bTestHelpers.cs | 485 | // Step 8: Decline the agent init prompt and wait for success | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 75 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 79 | // Step 2: Set up CLI | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 82 | // Step 3: Create single-file AppHost | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 86 | // Step 4: Add Azure Container Apps package | COMMENT |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 93 | // Step 5: Modify apphost.cs to add Azure Container App Environment | COMMENT |
| LOW | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 109 | // Step 6: Set environment variables with an INVALID Azure location to induce failure. | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 120 | // Step 7: Deploy (expecting failure) and capture output to a file | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 127 | // Step 8: Exit terminal | STRING |
| LOW⚡ | …oyment.EndToEnd.Tests/AcaDeploymentErrorOutputTests.cs | 133 | // Step 9: Read captured output and verify error messages are clean | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 66 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 70 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 73 | // Step 3: Create single-file AppHost using aspire init | COMMENT |
| LOW | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 98 | // Step 5: Modify apphost.cs to add VNet + PE infrastructure | COMMENT |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 134 | // Step 6: Set environment variables for deployment | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 139 | // Step 7: Deploy to Azure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 146 | // Step 8: Verify VNet infrastructure | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 154 | // Step 9: Clean up Azure resources using aspire destroy | STRING |
| LOW⚡ | ….EndToEnd.Tests/VnetStorageBlobInfraDeploymentTests.cs | 158 | // Step 10: Exit terminal | STRING |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 74 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 78 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 83 | // Step 3: Create Python FastAPI project using aspire new with interactive prompts | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 87 | // Step 4: Navigate to project directory | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 93 | // Step 5: Add Aspire.Hosting.Azure.AppContainers package | COMMENT |
| LOW | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 110 | // Step 6: Modify apphost.mts to add Azure Container App Environment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 135 | // Step 7: Set environment for deployment | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 143 | // Step 9: Deploy to Azure Container Apps using aspire deploy | COMMENT |
| LOW⚡ | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 151 | // Step 10: Extract deployment URLs and verify endpoints with retry | COMMENT |
| LOW | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 175 | // Step 11: Exit terminal | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 72 | // Step 1: Prepare environment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 76 | // Step 2: Set up CLI environment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 81 | // Step 3: Create Python FastAPI project using aspire new | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 85 | // Step 4: Navigate to project directory | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 91 | // Step 5: Add Aspire.Hosting.Azure.AppContainers package | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 131 | // Step 7: Set environment variables for deployment | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 136 | // Step 8: First deployment to Azure | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 143 | // Step 9: Get the ACR name and count tags before second deploy | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 195 | // Step 13: Run the purge task manually to trigger image cleanup | COMMENT |
| LOW⚡ | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 204 | // Step 14: Verify images were purged - only 1 tag should remain per repo | COMMENT |
| LOW | …ployment.EndToEnd.Tests/AcrPurgeTaskDeploymentTests.cs | 105 | // Step 6: Modify apphost.mts to add ACA environment with purge task | COMMENT |
| 648 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/clipack/npm/aspire.js | 128 | function optionalDependenciesInstallMessage(pointerPackageName) { | CODE |
| LOW | eng/clipack/npm/aspire.js | 133 | function isUnsupportedPlatformError(error) { | CODE |
| LOW | eng/common/cross/install-debs.py | 49 | async def download_deb_files_parallel(mirror, packages, tmp_dir): | CODE |
| LOW | eng/common/cross/install-debs.py | 65 | async def download_package_index_parallel(mirror, arch, suites, check_sig, keyring): | CODE |
| LOW | eng/common/cross/install-debs.py | 337 | def _rootfs_extraction_filter(member, dest_path): | CODE |
| LOW⚡ | extension/scripts/run-e2e.js | 148 | function getSetupDownloadRetryOptions() { | CODE |
| LOW⚡ | extension/scripts/run-e2e.js | 157 | function getPositiveIntegerEnvironmentVariable(name, defaultValue) { | CODE |
| LOW⚡ | extension/scripts/run-e2e.js | 166 | function redactStateFileForArtifacts() { | CODE |
| LOW | extension/scripts/run-e2e.js | 63 | function runWithProcessTreeTimeout(command, args, extraEnv, timeout) { | CODE |
| LOW | extension/scripts/run-e2e.js | 198 | function redactDebugSessionForDiagnostics(session) { | CODE |
| LOW | extension/scripts/run-e2e.js | 205 | function sanitizeDashboardUrlForDiagnostics(url) { | CODE |
| LOW | extension/scripts/run-e2e.js | 737 | function patchExtesterLaunchLocale() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1001 | function writeNuGetConfigIfLocalPackageSourcesExist() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1024 | function getApprovedFallbackPackageSources() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1034 | function getAvailablePackageVersions(packageId) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1050 | function getAvailableAppHostSdkVersions() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1057 | function getLocalPackageSourceDirectories() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1090 | function getDirectoriesContainingPackages(directory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1103 | function comparePackageVersionsDescending(left, right) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1174 | function quoteWindowsShellArgument(value) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1204 | function assertWorkspaceRootSafeForDeletion() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1231 | function resolveExistingPathForSafety(value) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1273 | function cleanPartialExtesterDownloads() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1320 | function copyWorkspaceProjectSources() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1338 | function redactTextFilesForArtifacts(directory) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1367 | function redactSensitiveArtifactText(value) { | CODE |
| LOW | extension/scripts/run-e2e.js | 1375 | function printSuccessDiagnosticsSummary() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1386 | function printFailureDiagnosticsSummary() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1450 | function findLatestExtensionLogPath() { | CODE |
| LOW | extension/scripts/run-e2e.js | 1502 | function isRetryableWindowsFileLock(error) { | CODE |
| LOW | extension/src/extension.ts | 129 | function registerInstrumentedCommand( | CODE |
| LOW | extension/src/extension.ts | 425 | function getExtensionModeForTelemetry(mode: vscode.ExtensionMode): string { | CODE |
| LOW | extension/src/extension.ts | 438 | function getCurrentResourceCommand(dataRepository: AppHostDataRepository, resourceName: string, commandName: string, app | CODE |
| LOW | extension/src/capabilities.ts | 49 | export function isAzureFunctionsExtensionInstalled() { | CODE |
| LOW | extension/src/vscode.proposed.mcpServerDefinitions.d.ts | 38 | export function registerMcpServerDefinitionProvider(id: string, provider: McpServerDefinitionProvider): Disposab | CODE |
| LOW | …sion/src/test/aspireDebugConfigurationProvider.test.ts | 233 | function createAppHostDiscoveryService(resolvedPath: string, candidatePath: string | null = resolvedPath, language = 'cs | CODE |
| LOW | …sion/src/test/aspireDebugConfigurationProvider.test.ts | 247 | function createFailingAppHostDiscoveryService(): AppHostDiscoveryService { | CODE |
| LOW | extension/src/test/telemetryInventory.test.ts | 23 | function readTelemetryRegistryEvents(): TelemetryRegistryEvent[] { | CODE |
| LOW | extension/src/test/telemetryInventory.test.ts | 47 | function readCommonTelemetryProperties(): string[] { | CODE |
| LOW | extension/src/test/aspireEditorCommandProvider.test.ts | 180 | function createAppHostDiscoveryService(resolvedPath: string, language = 'csharp'): AppHostDiscoveryService { | CODE |
| LOW | extension/src/test/aspireEditorCommandProvider.test.ts | 196 | function createFailingAppHostDiscoveryService(): AppHostDiscoveryService { | CODE |
| LOW | extension/src/test/appHostTargetVersion.test.ts | 41 | function writeProjectWithSdkVersion(directory: string, fileName: string, version: string): string { | CODE |
| LOW | extension/src/test/common.ts | 3 | export async function getAndActivateExtension() { | CODE |
| LOW | extension/src/test/workspace.test.ts | 234 | function createAppHostDiscoveryService(candidates: Awaited<ReturnType<AppHostDiscoveryService['discover']>>): AppHostDis | CODE |
| LOW | extension/src/test/e2eLaunchProfile.test.ts | 474 | assert.ok(fixtures.includes('async function waitForNoRunningAppHostPathOrStopKnownProcess(appHostPath: string, t | CODE |
| LOW | extension/src/test/aspireTerminalProvider.test.ts | 63 | function restoreEnvironmentVariable(name: string, value: string | undefined): void { | CODE |
| LOW | extension/src/test/appHostTreeView.test.ts | 94 | function makeTreeProviderWithLaunchService(appHosts: readonly AppHostDisplayInfo[], launchService: AppHostLaunchService) | CODE |
| LOW | extension/src/test/appHostTreeView.test.ts | 110 | function makeWorkspaceTreeProvider(workspaceAppHostDescription: string): AspireAppHostTreeProvider { | CODE |
| LOW | extension/src/test/appHostTreeView.test.ts | 179 | function getPowerShellForShellProof(): string | undefined { | CODE |
| LOW | extension/src/test/appHostTreeView.test.ts | 199 | function makeProofTerminalProvider(sandbox: sinon.SinonSandbox, proof: ShellProof, commandLines: string[]): { terminalPr | CODE |
| LOW | extension/src/test/mauiDebugger.test.ts | 1644 | function installNoMauiExtensionStub(): void { | CODE |
| LOW | extension/src/test/mauiDebugger.test.ts | 1648 | function installMauiRunStartWrapperStubs(): void { | CODE |
| LOW | extension/src/test/mauiDebugger.test.ts | 1674 | function assertNoMsBuildProperties(debugConfig: AspireResourceExtendedDebugConfiguration): void { | CODE |
| LOW | extension/src/test/rpc/interactionServiceTests.test.ts | 810 | function normalizePathForComparison(value: string) { | CODE |
| LOW | extension/src/test/rpc/interactionServiceTests.test.ts | 816 | function createAspireConfiguration(values: Record<string, unknown> = {}): vscode.WorkspaceConfiguration { | CODE |
| LOW | extension/src/test/rpc/interactionServiceTests.test.ts | 846 | function restoreEnvironmentVariable(name: string, value: string | undefined): void { | CODE |
| LOW | extension/src/dcp/DashboardTelemetryPassthrough.ts | 567 | function applyBundleAndCorrelations( | CODE |
| LOW | extension/src/dcp/DashboardTelemetryPassthrough.ts | 967 | function isAllowedDashboardProperty(rawKey: string, value: unknown): boolean { | CODE |
| LOW | extension/src/dcp/DashboardTelemetryPassthrough.ts | 1066 | function scrubFreeformDiagnosticText(text: unknown): string { | CODE |
| LOW | extension/src/dcp/AspireDcpServer.ts | 212 | function respondWithTelemetryAuthError(res: Response, statusCode: number, code: string, message: string): vo | CODE |
| 437 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/pipelines/azure-pipelines.yml | 334 | # was extension-build scaffolding. It moved to the parallel | COMMENT |
| MEDIUM | eng/scripts/smoke-installed-cli.sh | 2 | # Smoke-tests the already-installed `aspire` CLI by scaffolding a starter | COMMENT |
| MEDIUM | eng/scripts/smoke-installed-cli.sh | 43 | # Always scaffold into a fresh subdirectory created with mktemp under | COMMENT |
| MEDIUM | extension/src/debugger/languages/bun.ts | 66 | // "program" is normally already set upstream (scaffold default or user override); only fall | COMMENT |
| MEDIUM | …spireWithJavaScript/AspireJavaScript.Angular/README.md | 9 | ## Code scaffolding | COMMENT |
| MEDIUM⚡ | …nt.EndToEnd.Tests/FoundryHostedAgentDeploymentTests.cs | 81 | // Step 3: Create starter project using aspire new (for basic AppHost scaffold) | COMMENT |
| MEDIUM | …eration.TypeScript.JsTests/tests/eslint-config.test.ts | 1 | // Regression coverage for the TypeScript AppHost scaffold's eslint.config.mjs. | COMMENT |
| MEDIUM | …eration.TypeScript.JsTests/tests/eslint-config.test.ts | 90 | // Confirm the scaffold source files actually exist before we promise | COMMENT |
| MEDIUM | …ion.TypeScript.Tests/TypeScriptLanguageSupportTests.cs | 278 | // The scaffold emits the embedded eslint.config.mjs verbatim. Asserting | STRING |
| MEDIUM | …ion.TypeScript.Tests/TypeScriptLanguageSupportTests.cs | 298 | // The scaffold emits the embedded tsconfig.apphost.json verbatim. See | STRING |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 29 | /// them because C# and TypeScript AppHosts scaffold through different code paths and have diverged in | COMMENT |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 29 | /// them because C# and TypeScript AppHosts scaffold through different code paths and have diverged in | COMMENT |
| MEDIUM | …e.Cli.EndToEnd.Tests/EmulatedLocalReleaseBuildTests.cs | 123 | /// AppHosts scaffold through different code paths and have historically diverged. The TS starter | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 24 | /// than collapsing them: C# and TypeScript AppHosts scaffold through different code paths and have | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 24 | /// than collapsing them: C# and TypeScript AppHosts scaffold through different code paths and have | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 94 | /// because the C# and TypeScript AppHosts go through <em>different</em> scaffolding code paths and | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 134 | // the matrix: C# and TypeScript scaffold through different code and have diverged before. | COMMENT |
| MEDIUM | …spire.Cli.EndToEnd.Tests/EmulatedReleasedBuildTests.cs | 134 | // the matrix: C# and TypeScript scaffold through different code and have diverged before. | COMMENT |
| MEDIUM | …ndToEnd.Tests/UpdateChannelNuGetConfigOrderingTests.cs | 87 | // Run aspire init non-interactively to scaffold a single-file C# AppHost. We'll | COMMENT |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 60 | // Conflicting scaffold scripts get aspire: prefix | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 64 | // Non-conflicting scaffold script added directly | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 96 | // All scaffold scripts added directly (no conflicts) | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 326 | // Not in scaffold — preserved | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 375 | // engines.node overwritten by scaffold (Aspire requires specific Node versions) | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 378 | // Script from scaffold is added | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 585 | // Conflicting scaffold scripts added under aspire: prefix | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 590 | // Non-conflicting scaffold script added directly | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 709 | // Even scaffold-generated commands with special chars must be written faithfully | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 999 | // EnsureObject replaces the array with a proper object containing scaffold deps | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1017 | // Can't merge into an array — returns scaffold as-is | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1174 | // node overwritten by scaffold | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1238 | // and the scaffold produces only Aspire-desired entries (no echo of existing content). | STRING |
| MEDIUM | …Aspire.Cli.Tests/Scaffolding/PackageJsonMergerTests.cs | 1409 | // Simulates the full brownfield flow where the scaffold only contains | STRING |
| MEDIUM | …Cli.Tests/Commands/NewCommandChannelResolutionTests.cs | 224 | /// so a developer on a daily CLI can still scaffold a stable-channel project for reproduction | COMMENT |
| MEDIUM | tests/Aspire.Cli.Tests/Commands/NewCommandTests.cs | 1988 | // The warning is only meaningful when the scaffold succeeded — surfacing it on a failed | STRING |
| MEDIUM | …s/Commands/NewCommandTemplateConfigPersistenceTests.cs | 236 | /// template that consumes Aspire packages must scaffold from that channel/source. | COMMENT |
| MEDIUM | .agents/skills/pr-testing/ci-infra-testing.md | 329 | ### C. gh-aw agentic workflows (`.md` → `.lock.yml`) | COMMENT |
| MEDIUM | .agents/skills/cli-e2e-testing/SKILL.md | 206 | channel-emulation matrix (one test per language because C# and TypeScript scaffold through different | CODE |
| MEDIUM | .agents/skills/fix-flaky-test/SKILL.md | 509 | # Avoid `gh run watch` — it produces excessive output that floods the context window. | COMMENT |
| MEDIUM | docs/dogfooding-pull-requests.md | 283 | ## C# AppHost scaffolding | COMMENT |
| MEDIUM | docs/plans/project-v2-csharpprogram-watch.md | 245 | ## 6. Work breakdown — agentic coding sessions | COMMENT |
| MEDIUM | docs/specs/cli-identity-sidecar.md | 421 | **Emulated channel matrix E2E** (AppHost-language × channel-emulation; one test per language because C# and TypeScript s | CODE |
| MEDIUM | .github/workflows/tests-outerloop.yml | 21 | # orchestrate this pipeline. Changes to downstream workflows (e.g. | COMMENT |
| MEDIUM | .github/workflows/extension-release.yml | 352 | # deterministic commit list. A separate agentic workflow | COMMENT |
| MEDIUM | .github/workflows/extension-release.yml | 356 | # keeps AI generation in an agentic workflow (read-only agent + safe | COMMENT |
| MEDIUM | .github/workflows/extension-release.yml | 591 | # agentic workflow fire on the `labeled` event (workflows are not | COMMENT |
| MEDIUM | .github/workflows/auto-rerun-outerloop-failures.yml | 28 | # narrow pull_request paths filter (CI-orchestration files); those PR runs have a | COMMENT |
| MEDIUM | .github/workflows/tests-quarantine.yml | 22 | # orchestrate this pipeline. Changes to downstream workflows (e.g. | COMMENT |
| MEDIUM | .github/workflows/release-github-tasks.yml | 286 | # asynchronously by the release-notes-generate agentic workflow, | COMMENT |
| MEDIUM | …orkflows/agentics-maintenance-microsoft-aspire.dev.yml | 24 | # This file is the agentic maintenance workflow for the SideRepoOps target | COMMENT |
| MEDIUM | .github/workflows/extension-changelog.lock.yml | 28 | # applies the `vscode-extension-release` label. This agentic workflow detects | COMMENT |
| MEDIUM | .github/agents/agentic-workflows.agent.md | 33 | - Configuration: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/github-agentic-workflows.md | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.agent.md | 55 | **Prompt file**: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/create-agentic-workflow.md | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.agent.md | 65 | **Prompt file**: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/update-agentic-workflow.md | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.agent.md | 75 | **Prompt file**: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/debug-agentic-workflow.md | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.agent.md | 85 | **Prompt file**: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/upgrade-agentic-workflows.md | CODE |
| MEDIUM | .github/agents/agentic-workflows.agent.md | 105 | **Prompt file**: https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/create-shared-agentic-workflow.md | CODE |
| MEDIUM | .github/agents/agentic-workflows.agent.md | 144 | # Initialize repository for agentic workflows | COMMENT |
| MEDIUM | .github/agents/agentic-workflows.agent.md | 172 | - Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.72.0/.github/aw/github-agentic-workf | CODE |
| MEDIUM | …Hosting.CodeGeneration.Python/PythonLanguageSupport.cs | 53 | /// Generates the initial scaffold files for a new Python AppHost project. | COMMENT |
| 49 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …sts/Aspire.Hosting.Sdk.Tests/AppHostSdkTargetsTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | …re.Cli.EndToEnd.Tests/CentralPackageManagementTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | tests/Aspire.Cli.Tests/Projects/ProjectLocatorTests.cs | 0 | var builder = distributedapplication.createbuilder(args); builder.build().run(); | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | { "aspire": { "azure": { "security": { "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": true, "disabl | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "your_uri"}}}}} | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "disablehealthchecks": "true"}}}}} | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"mode": "f | STRING |
| HIGH | …ecurity.KeyVault.Tests/SecretClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …e.Security.KeyVault.Tests/KeyClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …ty.KeyVault.Tests/CertificateClientConformanceTests.cs | 0 | {"aspire": { "azure": { "security":{ "keyvault": { "vaulturi": "http://your_uri", "clientoptions": {"retry": {"networkti | STRING |
| HIGH | …tityFrameworkCore.PostgreSQL.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | …tityFrameworkCore.PostgreSQL.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | tests/Aspire.Npgsql.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | tests/Aspire.Azure.Npgsql.Tests/ConformanceTests.cs | 0 | { "aspire": { "npgsql": { "connectionstring": "your_connection_string", "disablehealthchecks": true, "disabletracing": f | STRING |
| HIGH | …loyment.EndToEnd.Tests/PythonFastApiDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …ent.EndToEnd.Tests/TypeScriptExpressDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …yment.EndToEnd.Tests/AcaManagedRedisDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | …Deployment.EndToEnd.Tests/AcaStarterDeploymentTests.cs | 0 | // add azure container app environment for deployment builder.addazurecontainerappenvironment("infra"); builder.build(). | STRING |
| HIGH | ….Cli.EndToEnd.Tests/KubernetesDeployWithValkeyTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …li.EndToEnd.Tests/KubernetesDeployWithPostgresTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …Cli.EndToEnd.Tests/KubernetesDeployWithMongoDBTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …EndToEnd.Tests/KubernetesDeployBasicApiServiceTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …e.Cli.EndToEnd.Tests/KubernetesDeployWithRedisTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …re.Cli.EndToEnd.Tests/KubernetesDeployWithNatsTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | ….Cli.EndToEnd.Tests/KubernetesDeployWithGarnetTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …li.EndToEnd.Tests/KubernetesDeployWithRabbitMQTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …e.Cli.EndToEnd.Tests/KubernetesDeployWithMySqlTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …i.EndToEnd.Tests/KubernetesDeployWithSqlServerTests.cs | 0 | #pragma warning disable aspirecompute003 using aspire.hosting; using aspire.hosting.kubernetes; var builder = distribute | STRING |
| HIGH | …re.Cli.EndToEnd.Tests/TypeScriptMigrateAppHostTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …ire.Cli.EndToEnd.Tests/TypeScriptLegacyAppHostTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …spire.Cli.EndToEnd.Tests/ChannelUpdateWorkflowTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …Cli.EndToEnd.Tests/TypeScriptCodegenValidationTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …sts/Aspire.Cli.EndToEnd.Tests/ProjectReferenceTests.cs | 0 | import { createbuilder } from './.aspire/modules/aspire.mjs'; const builder = await createbuilder(); await builder.addmy | STRING |
| HIGH | …Hosting.CodeGeneration.Python/PythonLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …ire.Hosting.CodeGeneration.Java/JavaLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …/Aspire.Hosting.CodeGeneration.Go/GoLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| HIGH | …ire.Hosting.CodeGeneration.Rust/RustLanguageSupport.cs | 0 | { "profiles": { "https": { "applicationurl": "https://localhost:{{httpsport}};http://localhost:{{httpport}}", "environme | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …on.TypeScript.Tests/AtsTypeScriptCodeGeneratorTests.cs | 39 | var packageJson = System.Text.Json.Nodes.JsonNode.Parse(content)!.AsObject(); | CODE |
| CRITICAL | src/Aspire.Dashboard/wwwroot/js/xterm/xterm.min.js | 7 | !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define | CODE |
| CRITICAL⚡ | …hboard/Components/Interactions/InteractionsProvider.cs | 206 | content.Icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size24.CheckmarkCir | CODE |
| CRITICAL⚡ | …hboard/Components/Interactions/InteractionsProvider.cs | 210 | content.Icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size24.Warning(); | CODE |
| CRITICAL⚡ | …hboard/Components/Interactions/InteractionsProvider.cs | 214 | content.Icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size24.DismissCircl | CODE |
| CRITICAL⚡ | …hboard/Components/Interactions/InteractionsProvider.cs | 218 | content.Icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size24.Info(); | CODE |
| CRITICAL⚡ | …hboard/Components/Interactions/InteractionsProvider.cs | 222 | content.Icon = new Microsoft.FluentUI.AspNetCore.Components.Icons.Filled.Size24.QuestionCirc | CODE |
| CRITICAL | src/Aspire.Dashboard/Model/StructuredLogsViewModel.cs | 159 | filters.Add(new FieldTelemetryFilter { Field = nameof(OtlpLogEntry.Severity), Condition = FilterCondition.Greate | CODE |
| CRITICAL | src/Aspire.Dashboard/ServiceClient/DashboardClient.cs | 132 | _client = new Aspire.DashboardService.Proto.V1.DashboardService.DashboardServiceClient(_channel); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 1926 | metadataNode["annotations"] = System.Text.Json.Nodes.JsonNode.Parse(annotations.GetRawText()); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 1931 | metadataNode["labels"] = System.Text.Json.Nodes.JsonNode.Parse(labels.GetRawText()); | CODE |
| CRITICAL | …re.Hosting.Kubernetes/KubernetesEnvironmentResource.cs | 1945 | minimal["spec"] = System.Text.Json.Nodes.JsonNode.Parse(spec.GetRawText()); | CODE |
| CRITICAL | …ire.Azure.Messaging.EventHubs/ConfigurationSchema.json | 89 | "description": "The total number of events that can be buffered for publishing at a given | CODE |
| CRITICAL | …/Aspire.Cli/Utils/EnvironmentChecker/DotNetSdkCheck.cs | 62 | var architecture = System.Runtime.InteropServices.RuntimeInformation.ProcessArchitecture.ToString().ToLowerI | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | .config/CredScanSuppressions.json | 5 | "placeholder": "postgres", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 9 | "placeholder": "fake", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 13 | "placeholder": "TestKey123!", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 17 | "placeholder": "!321yeKtseT", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 21 | "placeholder": "p@ssw0rd1", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 25 | "placeholder": "p@ssw0rd2", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 29 | "placeholder": "thisIsAFakeSecret", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 33 | "placeholder": "password", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 37 | "placeholder": "pass", | CODE |
| LOW⚡ | .config/CredScanSuppressions.json | 41 | "placeholder": "mypass", | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 39 | email: { value: 'user@example.com', propertyType: PropertyType.Pii }, | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 94 | email: { value: 'user@example.com', propertyType: PropertyType.Pii }, | CODE |
| LOW | …tension/src/test/dashboardTelemetryPassthrough.test.ts | 310 | email: { value: 'user@example.com', propertyType: '0' as unknown as 0 }, | CODE |
| LOW | playground/Stress/Stress.ApiService/Program.cs | 330 | // From https://microsoftedge.github.io/Demos/json-dummy-data/ | COMMENT |
| LOW⚡ | playground/Stress/Stress.ApiService/Program.cs | 587 | "content": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBBB | CODE |
| LOW⚡ | playground/Stress/Stress.ApiService/Program.cs | 587 | "content": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBBB | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 286 | "bio": "Duis commodo orci ut dolor iaculis facilisis. Ut viverra quis eros eu tincidunt. Lorem ipsum dolor sit amet, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 286 | "bio": "Duis commodo orci ut dolor iaculis facilisis. Ut viverra quis eros eu tincidunt. Lorem ipsum dolor sit amet, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 440 | "bio": "Vivamus id faucibus velit, id posuere leo. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Lor | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 440 | "bio": "Vivamus id faucibus velit, id posuere leo. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Lor | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 489 | "bio": "In sed ultricies lorem. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Quisque mauris ligula, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 489 | "bio": "In sed ultricies lorem. Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Quisque mauris ligula, | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 510 | "bio": "Donec congue sapien vel euismod interdum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce con | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 510 | "bio": "Donec congue sapien vel euismod interdum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce con | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 566 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc aliquet sodales nunc a pulvinar. Morbi vitae n | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 566 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc aliquet sodales nunc a pulvinar. Morbi vitae n | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 650 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus massa at viverra facilisis.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 650 | "bio": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus massa at viverra facilisis.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 888 | "bio": "Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Ut viverra quis eros eu tincidunt. Lorem ipsum | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 888 | "bio": "Sed eu libero maximus nunc lacinia lobortis et sit amet nisi. Ut viverra quis eros eu tincidunt. Lorem ipsum | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1056 | "bio": "Maecenas tempus neque ut porttitor malesuada. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curab | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1056 | "bio": "Maecenas tempus neque ut porttitor malesuada. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curab | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1084 | "bio": "Morbi ultricies consequat ligula posuere eleifend. Donec pellentesque ultrices mi, non consectetur eros luct | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1084 | "bio": "Morbi ultricies consequat ligula posuere eleifend. Donec pellentesque ultrices mi, non consectetur eros luct | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1161 | "bio": "Quisque efficitur vel sapien ut imperdiet. Nam semper gravida nunc, sit amet elementum ipsum. Donec pellente | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1161 | "bio": "Quisque efficitur vel sapien ut imperdiet. Nam semper gravida nunc, sit amet elementum ipsum. Donec pellente | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1210 | "bio": "Etiam malesuada blandit erat, nec ultricies leo maximus sed. Quisque maximus sodales mauris ut elementum. Lo | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1210 | "bio": "Etiam malesuada blandit erat, nec ultricies leo maximus sed. Quisque maximus sodales mauris ut elementum. Lo | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1231 | "bio": "Maecenas non arcu nulla. Lorem ipsum dolor sit amet, consectetur adipiscing elit.", | CODE |
| LOW | …ayground/Stress/Stress.ApiService/content/example.json | 1231 | "bio": "Maecenas non arcu nulla. Lorem ipsum dolor sit amet, consectetur adipiscing elit.", | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 59 | var inputNoMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType = | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 59 | var inputNoMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType = | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 60 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 60 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 62 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 62 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 63 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 63 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name. L | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 64 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name.\r | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 64 | _ = await interactionService.PromptInputAsync("Text <strong>request</strong>", "Provide **your** name.\r | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 72 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 72 | var inputHasMarkdown = new InteractionInput { Name = "Name", Label = "<strong>Name</strong>", InputType | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 78 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 78 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 80 | KeyValuePair.Create("option1", "Option 1 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 80 | KeyValuePair.Create("option1", "Option 1 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 81 | KeyValuePair.Create("option2", "Option 2 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 81 | KeyValuePair.Create("option2", "Option 2 - Lorem ipsum dolor sit amet, consectetur adipiscing el | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 90 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| LOW⚡ | playground/Stress/Stress.AppHost/InteractionCommands.cs | 90 | Placeholder = "Select a value. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce id mas | CODE |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/common/cross/install-debs.py | 126 | # keyboxd, which makes it robust on hosts running GnuPG 2.4+ (e.g. Azure | COMMENT |
| LOW | …ommon/core-templates/steps/enable-internal-sources.yml | 24 | # If running on dnceng (internal project), just use the default behavior for NuGetAuthenticate. | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 739 | # Extract version from package name using a more robust two-step approach | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 744 | # Look for semantic version pattern with PR suffix (more specific and robust) | COMMENT |
| MEDIUM | tools/SelectTests/TriggerMap.cs | 192 | // non-.NET jobs, and is more robust: it follows the graph's transitive closure rather than literal | COMMENT |
| MEDIUM | playground/AspireEventHub/EventHubsConsumer/Consumer.cs | 11 | /// production scenario, as it offers a much more robust experience with higher throughput. | COMMENT |
| MEDIUM⚡ | playground/Stress/Stress.ApiService/Program.cs | 591 | "content": "# 📝 Markdown Feature Showcase\n\nWelcome to a **comprehensive example** of markdown in a | CODE |
| MEDIUM | ….Tests/WorkflowScripts/select-tests-comment.harness.js | 7 | // C# test extracts the *shipped* script text from the workflow and hands it here, and this harness | COMMENT |
| MEDIUM | tests/Aspire.Cli.Tests/Commands/AddCommandTests.cs | 896 | // `== N` keeps the test robust to PackagingService adding additional explicit channels | STRING |
| MEDIUM | .github/workflows/run-tests.yml | 621 | # reached) — because quarantined tests are flaky by definition. But a broken harness must still fail | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 1961 | # actionable by CI automation and would just add noise. | COMMENT |
| MEDIUM | …spire.Hosting.Docker/Resources/ComposeNodes/Service.cs | 513 | /// that the service can utilize at runtime. | COMMENT |
| MEDIUM | …sting.Docker/Resources/ServiceNodes/Swarm/Resources.cs | 14 | /// a service can utilize, while reservations define the minimum guaranteed resources. | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 1417 | /// <para>Phi-3 Vision is a lightweight, state-of-the-art open multimodal model built upon datasets which incl | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 1678 | /// <para>Limited Scope for Code: Majority of Phi-3 training data is based in Python and use common pack | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 1953 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2422 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2565 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2697 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | src/Aspire.Hosting.Foundry/FoundryModel.Generated.cs | 2829 | /// <para>Streamlined operations: Benefit from unified billing, governance, and seamless PTU portability | COMMENT |
| MEDIUM | …Hosting.Foundry/Project/ConnectionBuilderExtensions.cs | 247 | /// can leverage the Key Vault connection for secret storage. | COMMENT |
| MEDIUM | src/Aspire.Hosting/Dcp/DcpModelUtilities.cs | 271 | // but leverage its endpoints via container tunnel, we want to add allocated endpoint info for them as well. | COMMENT |
| MEDIUM | src/Aspire.Hosting/Cli/CliOrphanDetector.cs | 40 | // Try to get the CLI process start time for robust orphan detection. | COMMENT |
| MEDIUM | …pire.Hosting.JavaScript/JavaScriptHostingExtensions.cs | 532 | // we want to remain robust if a future refactor changes that. | STRING |
| MEDIUM | src/Aspire.Hosting.Kubernetes/Resources/NamespaceV1.cs | 14 | /// class to leverage shared properties such as ApiVersion, Kind, and Metadata. This class | COMMENT |
| MEDIUM | …e.Hosting.Kubernetes/Resources/PodSecurityContextV1.cs | 123 | /// container processes can utilize beyond the primary group. | COMMENT |
| MEDIUM | …emoteHost/Ats/PolyglotCapabilityInvocationException.cs | 565 | // is more robust than search/replacing pieces of the original message because it | COMMENT |
| MEDIUM | src/Aspire.Hosting.Go/GoHostingExtensions.cs | 695 | .WithRequiredCommand("dlv", "https://github.com/go-delve/delve"); | CODE |
| MEDIUM | src/Aspire.Cli/Projects/PrebuiltAppHostServer.cs | 749 | // Keying on the resolved channel.Name (rather than the input requestedChannel) is robust | STRING |
| MEDIUM | …Cli/Agents/OpenCode/OpenCodeAgentEnvironmentScanner.cs | 149 | // This is a simplified approach - a full JSONC parser would be more robust | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/find-missing-packages.sh | 109 | # Create a temporary file with the proper multi-line structure | COMMENT |
| MEDIUM | eng/common/cross/build-rootfs.sh | 636 | # Create the symlink in the same directory | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli.sh | 658 | # Create the config file | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli.sh | 1063 | # Create a temporary directory for downloads | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 418 | # Create a temporary directory with a prefix. Honors DRY_RUN | COMMENT |
| MEDIUM | eng/scripts/get-aspire-cli-pr.sh | 1869 | # Create a temporary directory for downloads | COMMENT |
| MEDIUM | tools/ReleaseNotes/extract-api-changes.sh | 226 | # Create a simple summary report | COMMENT |
| MEDIUM | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1210 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1239 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 1210 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 1239 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …ts/Aspire.Cli.EndToEnd.Tests/JavaScriptPublishTests.cs | 236 | # This file is generated by running "yarn install" inside your project. | COMMENT |
| MEDIUM | .github/workflows/deployment-tests.yml | 153 | # Create a clean artifact directory with the native CLI and packages. | COMMENT |
| MEDIUM | .github/workflows/analyze-ci-failure.lock.yml | 1301 | # Create a structured summary of the failure data for the agent | COMMENT |
| MEDIUM | .github/workflows/analyze-ci-failure.lock.yml | 2145 | # Create a new issue for this cause | COMMENT |
| MEDIUM | …orkflows/agentics-maintenance-microsoft-aspire.dev.yml | 24 | # This file is the agentic maintenance workflow for the SideRepoOps target | COMMENT |
| MEDIUM | .github/actions/create-pull-request/action.yml | 146 | # Create the pull request without eval — all args are properly quoted | COMMENT |
| MEDIUM | …Hosting.CodeGeneration.Python/PythonLanguageSupport.cs | 99 | # This file is used when uv is not available and pip is used instead. | COMMENT |
| MEDIUM | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1445 | # Create a reference expression using named placeholders | STRING |
| MEDIUM | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1474 | # Create a conditional expression based on an environment variable | STRING |
| MEDIUM | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 31 | # Create a global to store the Redis client. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/find-missing-packages.sh | 28 | # Set trap to cleanup on exit | COMMENT |
| LOW | eng/find-missing-packages.sh | 92 | # Check if the package is already mapped to avoid duplicates | COMMENT |
| LOW | eng/find-missing-packages.sh | 174 | # Check if we've already processed this package | COMMENT |
| LOW | eng/find-missing-packages.sh | 200 | # Check if we still have NU1102 errors even if no new packages were found | COMMENT |
| LOW | eng/build.sh | 65 | # Check if an action is passed in | COMMENT |
| LOW | eng/restore-toolset.sh | 7 | # Check if we're on macOS | COMMENT |
| LOW | eng/homebrew/generate-cask.sh | 116 | # Check if a URL is accessible (HEAD request) | COMMENT |
| LOW | eng/common/tools.sh | 309 | # Check if the script is older than 30 days using timestamp file | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 60 | # Check if disabledPackageSources section exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 66 | # Check if this source name is disabled | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 86 | # Check if source already exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 116 | # Check if disabledPackageSources section exists | COMMENT |
| LOW | eng/common/SetupNugetSources.sh | 198 | # Check if there is no existing credential for this FeedName | COMMENT |
| LOW | eng/common/core-templates/steps/source-build.yml | 31 | # Check if AzDO substitutes in a build config from a variable, and use it if so. | COMMENT |
| LOW | eng/common/core-templates/steps/install-microbuild.yml | 60 | # Check if ESRP is disabled while SignType is real | COMMENT |
| LOW | eng/scripts/get-aspire-cli.sh | 200 | # Check if it's musl-based (Alpine, etc.) | COMMENT |
| LOW | eng/scripts/get-aspire-cli.sh | 343 | # Check if response suggests HTML content (error page) | COMMENT |
| LOW | eng/scripts/get-aspire-cli-pr.sh | 338 | # Check if it's musl-based (Alpine, etc.) | COMMENT |
| LOW | eng/scripts/get-cli-e2e-recording.sh | 134 | # Check if artifact exists | COMMENT |
| LOW | tools/ReleaseNotes/analyze-all-components.sh | 26 | # Check if jq is available for JSON processing | COMMENT |
| LOW | tools/ReleaseNotes/analyze-all-components.sh | 90 | # Check if there are any changes in this component first | COMMENT |
| LOW | tools/ReleaseNotes/extract-api-changes.sh | 84 | # Check if the API files list was generated | COMMENT |
| LOW | .github/workflows/specialized-test-runner.yml | 186 | # Check if there were no tests to run | COMMENT |
| LOW | .github/workflows/backmerge-release.yml | 74 | # Check if a PR already exists for this branch | COMMENT |
| LOW | .github/workflows/run-tests.yml | 667 | # Check if the XML is valid and non-empty | COMMENT |
| LOW | .github/workflows/deployment-cleanup.yml | 116 | # Check if RG has the first-seen tag | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 2069 | # Check if the stored cause file already has a linked issue | COMMENT |
| LOW | .github/workflows/analyze-ci-failure.lock.yml | 2110 | # Check if the stored issue is closed (may need reopening) | COMMENT |
| LOW | .github/actions/check-changed-files/action.yml | 61 | # Check if jq is available | COMMENT |
| LOW | .github/actions/check-changed-files/action.yml | 118 | # Check if we have any valid patterns | COMMENT |
| LOW | .github/actions/create-pull-request/action.yml | 100 | # Check if a PR already exists for this branch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/pr-docs-check/compute_signals.py | 160 | # `- public static IResourceBuilder<FooResource> AddFoo(...) { throw null; }` | COMMENT |
| HIGH⚡ | .github/workflows/pr-docs-check/test_compute_signals.py | 124 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| HIGH⚡ | .github/workflows/pr-docs-check/test_compute_signals.py | 127 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| HIGH | .github/workflows/pr-docs-check/test_compute_signals.py | 220 | "this IDistributedApplicationBuilder builder) { throw null; }\n" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | eng/common/cross/install-debs.py | 42 | print(f"Error downloading {url}: {type(e).__name__} - {e}. Retrying...") | CODE |
| MEDIUM | eng/common/cross/install-debs.py | 206 | print(f"Error: Package '{current}' was not found in the available packages.") | CODE |
| LOW | playground/deployers/Deployers.Dockerfile/app.py | 81 | except Exception as e: | CODE |
| LOW | playground/FoundryAgents/app/main.py | 45 | except Exception as e: | CODE |
| LOW | playground/FoundryAgentBasic/app/main.py | 49 | except Exception: # pragma: no cover | CODE |
| LOW | playground/FoundryAgentBasic/app/main.py | 323 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 42 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 67 | except Exception as exc: | CODE |
| LOW | playground/PythonAppHost/app/main.py | 98 | except Exception as exc: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 588 | except Exception: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 625 | except Exception: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 746 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 757 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 807 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 842 | except Exception as e: | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 969 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 588 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 625 | except Exception: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 746 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 757 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 807 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 842 | except Exception as e: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 969 | except Exception: | CODE |
| LOW | …ls/cli-channel-debugging/get-aspire-channel-version.sh | 97 | except Exception as e: # noqa: BLE001 - surface any network/parse failure to the caller | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 823 | except Exception: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 860 | except Exception: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 981 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 992 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1042 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1077 | except Exception as e: | CODE |
| LOW | …e.Hosting.CodeGeneration.Python/PythonModuleBuilder.cs | 1204 | except Exception: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 48 | except Exception as e: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 82 | except Exception as e: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 121 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 77 | Obtains connection information from Entra authentication for Azure PostgreSQL. Parameters: credential (Toke | STRING |
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 102 | Obtains connection information from Entra authentication for Azure PostgreSQL. Parameters: credential (Toke | STRING |
| HIGH | …End/PostgresEndToEnd.PythonService/entra_connection.py | 129 | Establishes an asynchronous PostgreSQL connection using Entra authentication. The method checks for provided cr | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | localhive.sh | 5 | # Usage: | COMMENT |
| LOW | eng/homebrew/dogfood.sh | 7 | # Usage: | COMMENT |
| LOW | eng/common/native/install-dependencies.sh | 7 | # Usage: | COMMENT |
| LOW | …common/templates-official/variables/pool-providers.yml | 12 | # How to use: | COMMENT |
| LOW | eng/common/templates/variables/pool-providers.yml | 12 | # How to use: | COMMENT |
| LOW | eng/scripts/get-cli-e2e-recording.sh | 4 | # Usage: | COMMENT |
| LOW | …ls/cli-channel-debugging/get-aspire-channel-version.sh | 16 | # Usage: | COMMENT |
| LOW | .github/workflows/polyglot-validation/Dockerfile.java | 4 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/Aspire.Cli.Tests/Mcp/Docs/LlmsTxtParserTests.cs | 834 | In Aspire, eventing allows you to publish and subscribe to events during various AppHost life cycles. Eventing is mo | CODE |
| HIGH | docs/specs/dashboard-http-api.md | 44 | "PrimaryApiKey": "your-api-key" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | playground/python/uvicorn_app/app.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | …End/PostgresEndToEnd.PythonService/entra_connection.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | playground/PythonAppHost/app/main.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | playground/FoundryAgentEnterprise/app/main.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | ….Python.Tests/Snapshots/AtsGeneratedAspire.verified.py | 1918 | def set_value(self, value: str) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 3333 | def update_task(self, status_text: str, *, timeout: int | None = None) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 3344 | def update_task_markdown(self, markdown_string: str, *, timeout: int | None = None) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 5916 | def set_choice_options(self, choices: typing.Iterable[InteractionChoiceOption]) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 5925 | def set_value(self, value: str) -> None: | CODE |
| LOW | …s/Snapshots/TwoPassScanningGeneratedAspire.verified.py | 7255 | def set_value(self, value: str) -> None: | CODE |
| LOW | …Aspire.Cli/Templating/Templates/py-starter/app/main.py | 59 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 20 | CODE | |
| LOW | eng/common/cross/install-debs.py | 196 | CODE | |
| LOW | eng/common/cross/install-debs.py | 221 | CODE | |
| LOW | eng/common/cross/install-debs.py | 259 | CODE | |
| LOW | eng/common/cross/install-debs.py | 293 | CODE | |
| LOW | eng/common/cross/install-debs.py | 348 | CODE | |
| LOW | playground/deployers/Deployers.Dockerfile/app.py | 49 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_signals.py | 441 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 18 | CODE | |
| LOW | playground/FoundryAgentBasic/app/main.py | 4 | CODE | |
| LOW | playground/aspireify-eval/polyglot/api-weather/main.py | 5 | CODE | |
| LOW | .github/workflows/pr-docs-check/resolve_sme.py | 34 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_signals.py | 44 | CODE | |
| LOW | .github/workflows/pr-docs-check/test_compute_signals.py | 12 | CODE | |
| LOW | .github/workflows/pr-docs-check/compute_pr_context.py | 31 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | playground/Stress/Stress.ApiService/Program.cs | 565 | "content": "I'm sorry, but I cannot provide medical advice. Please consult a licensed healthcare pro | CODE |
| MEDIUM | playground/Stress/Stress.ApiService/Program.cs | 620 | "content": "I cannot provide a long-term climate forecast as that requires specialized meteorologica | CODE |
| MEDIUM | tests/Aspire.Cli.Tests/Mcp/Docs/LlmsTxtParserTests.cs | 834 | In Aspire, eventing allows you to publish and subscribe to events during various AppHost life cycles. Eventing is mo | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | playground/FoundryAgentBasic/app/main.py | 345 | CODE |