Home / minio / minio
Repository Analysis

minio/minio

MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license.

2.6 Likely human-written View on GitHub
2.6
Adjusted Score
2.6
Raw Score
100%
Time Factor
2026-04-24
Last Push
61,034
Stars
Go
Language
391,826
Lines of Code
1130
Files
979
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 2HIGH 0MEDIUM 15LOW 962

Pattern Findings

979 matches across 10 categories. Click a row to expand file-level details.

Over-Commented Block946 hits · 946 pts
SeverityFileLineSnippet
LOWmain.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/warm-backend.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/background-newdisks-heal-ops.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/xl-storage-errors.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/streaming-signature-v4.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/streaming-signature-v4.go241func (cr *s3ChunkedReader) Close() (err error) {
LOWcmd/batch-expire_test.go1// Copyright (c) 2015-2023 MinIO, Inc.
LOWcmd/bucket-policy.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/bucket-lifecycle.go1// Copyright (c) 2015-2024 MinIO, Inc.
LOWcmd/erasure-metadata.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/admin-heal-ops.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/admin-heal-ops.go601func (h *healSequence) stop() {
LOWcmd/admin-heal-ops.go821// according to settings. At each "safe" point it also checks if an
LOWcmd/xl-storage-meta-inline.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/bucket-replication_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/namespace-lock_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/endpoint-ellipses_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/signature-v4.go1// Copyright (c) 2015-2023 MinIO, Inc.
LOWcmd/signature-v4.go161}
LOWcmd/metacache-entries_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/bucket-quota.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/data-scanner.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/data-scanner.go261
LOWcmd/data-scanner.go281// When selected there is a one in healObjectSelectProb that any object will be chosen for heal scan.
LOWcmd/iam.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/iam.go741 if nerr.Err != nil {
LOWcmd/iam.go761// where the parent user is the DN of the actual LDAP user. The parent user
LOWcmd/iam.go1441
LOWcmd/iam.go2401 // includes `null`, `{}` and `{"Statement": null}`. In fact, MinIO Console
LOWcmd/iam.go2461 // must be restricted by it. So, we set `.IsOwner` to false here
LOWcmd/metacache-stream.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/metacache-stream.go41//
LOWcmd/config.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/site-replication-metrics.go1// Copyright (c) 2015-2023 MinIO, Inc.
LOWcmd/http-stats.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/metacache-server-pool.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/rebalance-admin.go1// Copyright (c) 2022 MinIO, Inc.
LOWcmd/erasure-metadata-utils.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/utils_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/os-dirent_ino.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/object-api-multipart_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/object-api-multipart_test.go241 {
LOWcmd/object-api-multipart_test.go261 // But the uploadID is invalid.
LOWcmd/object-api-multipart_test.go461 },
LOWcmd/object-api-multipart_test.go1101 // {bucketNames[0], "", "min", "", "", -1, listMultipartResults[7], nil, true},
LOWcmd/object-api-multipart_test.go1121 {bucketNames[1], "", "minio-object-1.txt", uploadIDs[1], "", 100, listMultipartResults[16], nil, true},
LOWcmd/object-api-multipart_test.go1141 // Objects used: `objectNames[1-5]`.
LOWcmd/metrics-v3-bucket-replication.go1// Copyright (c) 2015-2024 MinIO, Inc.
LOWcmd/config-migrate.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/object-handlers-common_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/postpolicyform.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/xl-storage_windows_test.go1//go:build windows
LOWcmd/metrics-v3-ilm.go1// Copyright (c) 2024 MinIO, Inc.
LOWcmd/erasure-sets_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/bucket-object-lock.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/bucket-object-lock.go121 return ObjectLocked{}
LOWcmd/object-api-listobjects_test.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/lock-rest-server.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/admin-router.go1// Copyright (c) 2015-2021 MinIO, Inc.
LOWcmd/admin-router.go61)
886 more matches not shown…
Self-Referential Comments11 hits · 33 pts
SeverityFileLineSnippet
MEDIUMcmd/metrics-v3-ilm.go3// # This file is part of MinIO Object Storage stack
MEDIUMcmd/metrics-v3-system-cpu.go3// # This file is part of MinIO Object Storage stack
MEDIUMcmd/metrics-v3-system-memory.go3// # This file is part of MinIO Object Storage stack
MEDIUMcmd/metrics-v3-system-process.go3// # This file is part of MinIO Object Storage stack
MEDIUMcmd/metrics-v3-cluster-notification.go3// # This file is part of MinIO Object Storage stack
MEDIUMinternal/kms/config_test.go3// # This file is part of MinIO Object Storage stack
MEDIUMinternal/config/browser/help.go3// # This file is part of MinIO Object Storage stack
MEDIUMdocs/bucket/replication/setup_replication.sh7#### Create a replication admin on source alias
MEDIUMdocs/bucket/replication/setup_replication.sh48# Create a replication user : repluser on dest alias
MEDIUMhelm/minio/values.yaml130 ## Create a secret with private.key and public.crt files and pass that here. Ref: https://github.com/minio/minio/tree/
MEDIUMhelm/minio/values.yaml529## The following section documents environment variables for enabling external identity management using an OpenID Conne
Hallucination Indicators2 hits · 20 pts
SeverityFileLineSnippet
CRITICALcmd/data-scanner.go431 if !f.oldCache.Info.replication.Empty() && f.oldCache.Info.replication.Config.HasActiveRules(prefix, true) {
CRITICALinternal/s3select/sql/statement.go73 if selectAST.Expression.Expressions[0].Expression.And[0].Condition[0].Operand.Operand.Left.Left.Primary.JPathExpr.Stri
AI Slop Vocabulary4 hits · 12 pts
SeverityFileLineSnippet
MEDIUMcmd/bucket-lifecycle.go837 // Essentially the same as S3Select barring the xml name.
MEDIUMcmd/server_test.go1055 // Run the test with -race flag to utilize this
MEDIUMcmd/veeam-sos-api.go81// - The object should be present in all buckets accessed by Veeam products that want to leverage the SOSAPI functionali
MEDIUMhelm/minio/values.yaml518 ## Please refer for comprehensive list https://docs.min.io/community/minio-object-store/reference/minio-server/minio-s
Verbosity Indicators5 hits · 8 pts
SeverityFileLineSnippet
LOWcmd/erasure-object_test.go1225 // Step 1: create a bucket
LOWcmd/erasure-object_test.go1231 // Step 2: Upload an object with a random content
LOWcmd/erasure-object_test.go1242 // Step 3: Upload the object with some disks offline
LOWcmd/erasure-object_test.go1258 // Step 4: Try to read the object back and check its md5sum
LOWcmd/admin-handlers-idp-config.go172 // target, we need to check if a configuration value has been set previously
Redundant / Tautological Comments5 hits · 8 pts
SeverityFileLineSnippet
LOWdocs/distributed/iam-import-with-openid.sh51# Verify if buckets / objects accessible using service account
LOWdocs/resiliency/resiliency-verify-script.sh41# Check if check sums match for source and destination directories
LOWdocs/bucket/replication/setup_ilm_expiry_replication.sh112## Check if ILM expiry rules replicated
LOWdocs/bucket/replication/setup_ilm_expiry_replication.sh204## Check if latest updated rules get replicated to all sites post re-enable of ILM expiry rules replication
LOWbuildscripts/verify-healing-empty-erasure-set.sh57 # Check if we should retry
Slop Phrases3 hits · 4 pts
SeverityFileLineSnippet
LOWdocker-buildx.sh6 ## All binaries are static make sure to disable CGO.
LOWbuildscripts/cross-compile.sh8 ## All binaries are static make sure to disable CGO.
LOWhelm/minio/values.yaml374 ## make sure to disable this if you are using LDAP.
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippet
LOWcmd/test-utils_test.go310// Example usage:
Fake / Example Data1 hit · 1 pts
SeverityFileLineSnippet
LOWdocs/sts/dex.yaml74 - email: "admin@example.com"
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOWdocs/sts/client_grants/__init__.py63 def _create_credentials_fetcher(self):