MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
This report summarizes scanner evidence for mock-server/mockserver-monorepo, a Java project with 4,987 GitHub stars. SynthScan examined 1,478,592 lines of code across 6278 source files, recording 4851 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 7.5 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3080 finding(s).
Are imports declared and package/API names verified? 672 finding(s).
Are wrappers, guards, and repeated structures necessary? 2605 finding(s).
Which changes need focused human review? 4851 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4851 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …com/mockserver/jetbrains/ContractTestRestClientTest.kt | 23 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …n/com/mockserver/jetbrains/MockServerRestClientTest.kt | 24 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …kotlin/com/mockserver/jetbrains/ChaosRestClientTest.kt | 15 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …lin/com/mockserver/jetbrains/BreakpointProtocolTest.kt | 31 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …rc/main/kotlin/com/mockserver/jetbrains/JcefSupport.kt | 37 | com.intellij.ui.jcef.JBCefApp.isSupported() | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 27 | String version = org.mockserver.client.MockServerClient.class.getPackage().getImplementationVersion(); | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 198 | org.junit.jupiter.api.Assertions.assertThrows( | CODE |
| CRITICAL | …/mockserver/testcontainers/PinnedImageVersionTest.java | 117 | return org.mockserver.client.MockServerClient.class.getPackage().getImplementationVersion(); | CODE |
| CRITICAL | mockserver/mockserver-netty/pom.xml | 144 | io.netty.channel.epoll.Epoll.isAvailable(). Runtime-only; on non-Linux | CODE |
| CRITICAL | …kserver/codec/BoundedZstdResponseDecompressorTest.java | 80 | byte[] bomb = com.github.luben.zstd.Zstd.compress(new byte[64 * 1024 * 1024], 3); | CODE |
| CRITICAL | …kserver/codec/BoundedZstdResponseDecompressorTest.java | 81 | assertThat(com.github.luben.zstd.Zstd.getFrameContentSize(bomb), is(64L * 1024 * 1024)); | CODE |
| CRITICAL | …kserver/codec/BoundedZstdResponseDecompressorTest.java | 102 | channel.writeInbound(zstdResponse(com.github.luben.zstd.Zstd.compress(plain, 3))); | CODE |
| CRITICAL | …kserver/codec/BoundedZstdResponseDecompressorTest.java | 166 | decoder.writeInbound(Unpooled.wrappedBuffer(com.github.luben.zstd.Zstd.compress(plain, 3))); | CODE |
| CRITICAL | …r/codec/MockServerHttpContentDecompressorZstdTest.java | 74 | byte[] bomb = com.github.luben.zstd.Zstd.compress(new byte[64 * 1024 * 1024], 3); | CODE |
| CRITICAL | …r/codec/MockServerHttpContentDecompressorZstdTest.java | 75 | assertThat(com.github.luben.zstd.Zstd.getFrameContentSize(bomb), is(64L * 1024 * 1024)); | CODE |
| CRITICAL | …r/codec/MockServerHttpContentDecompressorZstdTest.java | 99 | channel.writeInbound(zstdRequest(com.github.luben.zstd.Zstd.compress(plain, 3))); | CODE |
| CRITICAL | …r/lifecycle/EventLogRetainedCopiesIntegrationTest.java | 138 | .POST(java.net.http.HttpRequest.BodyPublishers.ofString(body, StandardCharsets.UTF_8)) | CODE |
| CRITICAL | …r/lifecycle/EventLogRetainedCopiesIntegrationTest.java | 140 | java.net.http.HttpResponse.BodyHandlers.ofString(StandardCharsets.UTF_8)); | CODE |
| CRITICAL | …cle/EventLogTruncatedBodyRetentionIntegrationTest.java | 115 | .POST(java.net.http.HttpRequest.BodyPublishers.ofString(BODY)) | CODE |
| CRITICAL | …cle/EventLogTruncatedBodyRetentionIntegrationTest.java | 117 | java.net.http.HttpResponse.BodyHandlers.discarding()).statusCode(); | CODE |
| CRITICAL | …ver/netty/DirectMemoryLimitForwardIntegrationTest.java | 86 | System.out.println("netty maxDirectMemory=" + io.netty.util.internal.PlatformDependent.maxDirectMemory() | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 337 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpServerCodec()); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 338 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpObjectAggregator(64 * 1024)); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 345 | io.netty.handler.codec.http.FullHttpResponse response = new io.netty.handler.cod | CODE |
| CRITICAL | …/netty/unification/PortUnificationH2cPipelineTest.java | 136 | org.mockserver.socket.tls.SniHandler.getALPNProtocol(new MockServerLogger(), channel.pipeline().firstCon | CODE |
| CRITICAL | …oxy/relay/RelayConnectUnconfiguredTunnelCloseTest.java | 286 | assertThat(logged.stream().filter(entry -> entry.getLogLevel().toInt() >= org.slf4j.event.Level.WARN.toInt()).ma | CODE |
| CRITICAL | …ckserver/netty/grpc/GrpcToHttpResponseHandlerTest.java | 969 | channel.writeAndFlush(new io.netty.handler.codec.http.DefaultHttpResponse( | CODE |
| CRITICAL | …tty/integration/Http3NativeStartupIntegrationTest.java | 212 | return io.netty.util.internal.PlatformDependent.normalizedOs() + "-" + io.netty.util.internal.PlatformDependent. | CODE |
| CRITICAL | …plane/MockServerClientWebSocketTlsIntegrationTest.java | 187 | java.net.http.HttpResponse.BodyHandlers.ofString() | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 176 | io.netty.handler.ssl.util.SelfSignedCertificate selfSigned = new io.netty.handler.ssl.util.SelfSignedCertificate | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 340 | uri, WebSocketVersion.V13, null, true, new io.netty.handler.codec.http.DefaultHttpHeaders(), 65536); | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 342 | ? io.netty.handler.ssl.SslContextBuilder.forClient().trustManager(InsecureTrustManagerFactory.INSTANCE). | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 462 | ctx.pipeline().addBefore(ctx.name(), "httpClientCodec", new io.netty.handler.codec.http.HttpClientCodec()); | CODE |
| CRITICAL | …y/http/ZstdResponseAllocationBoundIntegrationTest.java | 85 | private static final byte[] DECLARES_TWO_GIB_THEN_AN_EVENT = concat(DECLARES_TWO_GIB, com.github.luben.zstd.Zstd.com | CODE |
| CRITICAL | …y/http/ZstdResponseAllocationBoundIntegrationTest.java | 87 | private static final byte[] PLAIN_ZSTD = com.github.luben.zstd.Zstd.compress(PLAIN, 3); | CODE |
| CRITICAL | …y/http/ZstdResponseAllocationBoundIntegrationTest.java | 104 | assertThat(com.github.luben.zstd.Zstd.getFrameContentSize(DECLARES_TWO_GIB), is((long) Integer.MAX_VALUE)); | CODE |
| CRITICAL | …/proxy/http/ForwardContentEncodingIntegrationTest.java | 469 | .POST(java.net.http.HttpRequest.BodyPublishers.ofByteArray(body)); | CODE |
| CRITICAL | …/proxy/http/ForwardContentEncodingIntegrationTest.java | 793 | return io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …http/ConnectProxyStreamingResponseIntegrationTest.java | 334 | .POST(java.net.http.HttpRequest.BodyPublishers.ofByteArray(body)); | CODE |
| CRITICAL | …http/ConnectProxyStreamingResponseIntegrationTest.java | 339 | java.net.http.HttpResponse<InputStream> response = client.send(request.build(), java.net.http.HttpResponse.BodyH | CODE |
| CRITICAL | …proxy/http/NoContentTypeBinaryBodyIntegrationTest.java | 225 | .POST(java.net.http.HttpRequest.BodyPublishers.ofByteArray(body)); | CODE |
| CRITICAL | …proxy/http/NoContentTypeBinaryBodyIntegrationTest.java | 325 | .PUT(java.net.http.HttpRequest.BodyPublishers.ofByteArray("{\"httpRequest\":{\"path\":\"/control-plane-latin | CODE |
| CRITICAL | …proxy/http/NoContentTypeBinaryBodyIntegrationTest.java | 329 | .PUT(java.net.http.HttpRequest.BodyPublishers.ofByteArray("# café\ntype Query { hello: String }".getBytes(St | CODE |
| CRITICAL | …proxy/http/ConnectRelayStreamErrorIntegrationTest.java | 105 | assertThrows("the zstd body is corrupt", RuntimeException.class, () -> com.github.luben.zstd.Zstd.decompress(COR | CODE |
| CRITICAL | …y/integration/mock/TrafficValidateIntegrationTest.java | 159 | org.apache.commons.io.IOUtils.toString(socket.getInputStream(), java.nio.charset.StandardCharsets.UTF_8); | CODE |
| CRITICAL | …y/integration/mock/TrafficValidateIntegrationTest.java | 184 | org.apache.commons.io.IOUtils.toString(socket.getInputStream(), java.nio.charset.StandardCharsets.UTF_8); | CODE |
| CRITICAL | …etty/integration/mock/OidcProviderIntegrationTest.java | 202 | com.nimbusds.jose.jwk.RSAKey rsaKey = new com.nimbusds.jose.jwk.gen.RSAKeyGenerator(2048) | CODE |
| CRITICAL | …ration/mock/OperatingModeDataPlaneIntegrationTest.java | 159 | return org.apache.commons.io.IOUtils.toString(socket.getInputStream(), StandardCharsets.UTF_8); | CODE |
| CRITICAL | …/responsewriter/MockStreamBreakpointWritePathTest.java | 429 | return org.mockserver.mock.breakpoint.PausedStreamFrame.Direction.OUTBOUND.name(); | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 52 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 227 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(notNul | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 235 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullVa | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 237 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 252 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullValue( | CODE |
| CRITICAL | …etty/breakpoint/BreakpointEndToEndIntegrationTest.java | 114 | java.net.http.HttpResponse.BodyHandlers.ofString() | CODE |
| CRITICAL | …etty/breakpoint/BreakpointEndToEndIntegrationTest.java | 153 | java.net.http.HttpResponse.BodyHandlers.ofString() | CODE |
| CRITICAL | …ty/http3/Http3RequestDecompressionIntegrationTest.java | 153 | .POST(java.net.http.HttpRequest.BodyPublishers.ofByteArray(compressed)) | CODE |
| CRITICAL | …ty/http3/Http3RequestDecompressionIntegrationTest.java | 409 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …rver/netty/http3/Http3HeadResponseIntegrationTest.java | 175 | available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ava/org/mockserver/netty/http3/Http3LifecycleTest.java | 145 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| 347 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 4 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 81 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 4 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 31 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 359 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 370 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 436 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 439 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 486 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 494 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 575 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 578 | # ============================================================================== | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 29 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 112 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 33 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 101 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/build-secrets.tf | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 13 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/ecr-pull-through-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/ecr-pull-through-cache.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/ecr-pull-through-cache.tf | 49 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 11 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 70 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-pipelines/clusters.tf | 2 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 50 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 52 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 39 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 41 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 113 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 115 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 125 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 127 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 6 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 8 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 53 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 55 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| 970 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-node/mockServerClient.js | 563 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | mockserver-client-node/webSocketClient.js | 370 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | …r-client-node/test/no_proxy/breakpoint_routing_test.js | 31 | function makeRequestAndResponsePayload(httpRequest, httpResponse) { | CODE |
| LOW | …lient-node/examples/callback_action_examples/server.js | 54 | function createExpectationWithinObjectCallback() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 99 | function verifyRequestsReceiveAtLeastTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 116 | function verifyRequestsReceiveAtMostTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 133 | function verifyRequestsReceiveExactlyTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 150 | function verifyRequestsReceiveAtLeastTwiceByOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 167 | function verifyRequestsReceiveExactlyOnceByOpenAPIWithOperation() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 185 | function verifyRequestsReceiveExactlyOnceByExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 226 | function verifyRequestSequenceUsingOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 252 | function verifyRequestSequenceUsingExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 293 | function retrieveRecordedLogMessages() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 311 | function clearWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 327 | function clearWithOpenAPIRequestMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 358 | function clearRequestsAndLogsWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 374 | function clearRequestAndLogsWithOpenAPIRequestMatcher() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 1 | function matchRequestByOpenAPILoadedByHttpUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 15 | function matchRequestByOpenAPIOperation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 33 | function matchRequestByOpenAPILoadedByFileUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 49 | function matchRequestByOpenAPILoadedByClasspathLocation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 65 | function matchRequestByOpenAPILoadedByJsonLiteral() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 86 | function matchRequestByOpenAPILoadedByYamlLiteral() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 67 | function forwardOverriddenRequestAndChangeReponse() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 94 | function forwardOverriddenRequestAndChangeHostAndPort() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 123 | function forwardOverriddenRequestWithDelay() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 148 | function javascriptTemplatedForward() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 177 | function javascriptTemplatedForwardWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 1 | function responseLiteralWithBodyOnly() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 68 | function responseLiteralWithHeader() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 88 | function responseLiteralWithCookie() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 111 | function responseLiteralWithStatusCodeAndReasonPhrase() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 132 | function responseLiteralWithBinaryPNGBody() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 182 | function respondDifferentlyForSameRequest() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 225 | function responseLiteralWithConnectionOptionsToSuppressHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 248 | function responseLiteralWithConnectionOptionsToOverrideHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 271 | function responseLiteralWithConnectionOptionsToCloseSocket() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 293 | function javascriptTemplatedResponse() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 328 | function javascriptTemplatedResponseWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 357 | function velocityTemplatedResponse() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 1 | function retrieveAllActiveExpectations() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 15 | function retrieveActiveExpectationsUsingRequestMatcher() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 30 | function retrieveActiveExpectationsInJson() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 1 | function retrieveAllRecordedExpectations() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 15 | function retrieveRecordedExpectationsUsingRequestMatcher() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 30 | function retrieveRecordedExpectationsInJson() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 1 | function retrieveAllRecordedRequests() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 15 | function retrieveRecordedRequestsUsingRequestMatcher() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 30 | function retrieveRecordedRequestsInJson() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 20 | function matchRequestByPathExactlyTwice() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 94 | function matchRequestByNotMatchingPath() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 114 | function matchRequestByMethodRegex() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 133 | function matchRequestByNotMatchingMethod() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 153 | function matchRequestByPathAndPathParametersAndQueryParametersName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 178 | function matchRequestByPathParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 200 | function matchRequestByPathParameterJsonSchemaValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 232 | function matchRequestByQueryParameterRegexName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 254 | function matchRequestByQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 276 | function matchRequestByOptionalQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 309 | function matchRequestByQueryParameterJsonSchemaValue() { | CODE |
| 1443 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packaging/sdkman/candidate.yaml | 1 | # SDKMAN! candidate metadata for MockServer CLI. | COMMENT |
| LOW | packaging/homebrew/mockserver.rb | 1 | # Homebrew formula for the self-contained MockServer CLI bundle. | COMMENT |
| LOW | mockserver-performance-test/legacy/locustfile.py | 41 | COMMENT | |
| LOW | …server-performance-test/scripts/multi-process-sweep.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …server-performance-test/scripts/multi-process-sweep.sh | 21 | # k6's VU pool was 3/4 idle (vus_concurrent_overall_max 669 of 4,000). | COMMENT |
| LOW | …server-performance-test/scripts/multi-process-sweep.sh | 41 | # gap, which is exactly the flaw the programme keeps hitting: an instrument | COMMENT |
| LOW | …server-performance-test/scripts/multi-process-sweep.sh | 61 | # (stdout, or the file named by $1). CI wiring (an env-gated call + a NON-gating | COMMENT |
| LOW | …server-performance-test/scripts/multi-process-sweep.sh | 81 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | mockserver-performance-test/scripts/runK6.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | mockserver-performance-test/k6/proxy.js | 1 | // Proxy-path + TLS-handshake scenario — performance-programme items 9a and 14. | COMMENT |
| LOW | mockserver-performance-test/k6/proxy.js | 21 | // by four orders of magnitude) lived in the SCENARIO SHAPE, so all of its defences | COMMENT |
| LOW | mockserver-performance-test/k6/growth.js | 1 | // Resource-growth scenario — surfaces "X increases over time" regressions that a | COMMENT |
| LOW | mockserver-performance-test/k6/coverage.js | 1 | // Path-coverage arms — request paths the regression, sweep and proxy scripts never | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 1 | // Regression scenario — the periodic-pipeline workhorse. Measures response | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 21 | // notify-only (non-gating) metric until it earns >=10 clean runs of history. | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 61 | postLargeBody, | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 141 | } | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 221 | // thresholds. The >=0 expressions never fail (notify-only) but force k6 to | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 381 | // Suppress the latency AND delivery statistics for a low-sample arm: below | COMMENT |
| LOW | mockserver-performance-test/k6/streaming.js | 1 | // LLM/SSE streaming under concurrency — performance-programme item 12. | COMMENT |
| LOW | mockserver-performance-test/k6/streaming.js | 21 | // The observable saturation signal is therefore delayed-task execution (the | COMMENT |
| LOW | mockserver-performance-test/k6/load.js | 1 | // Load test — the primary gated scenario. Closed-loop (arrival-rate) load so | COMMENT |
| LOW | mockserver-performance-test/k6/clustered_crossing.js | 1 | // Clustered per-request-CROSSING arm (item 13, MAJOR-1 fix). | COMMENT |
| LOW | mockserver-performance-test/k6/clustered_crossing.js | 21 | // THIS arm is the real per-request network cost — the number item 13 exists to | COMMENT |
| LOW | mockserver-performance-test/k6/soak.js | 1 | // Soak test — sustained moderate load over a long duration (default 2h) to | COMMENT |
| LOW | mockserver-performance-test/k6/soak.js | 21 | // | COMMENT |
| LOW | mockserver-performance-test/k6/soak.js | 221 | }, | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 1 | // Throughput-vs-latency sweep — measures the "knee" of MockServer's load curve. | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 21 | // | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 41 | // 198 VUs really idle?). Sampled from k6's execution API | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 61 | // iteration (a drop never runs VU code, by definition), | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 201 | const STALL_MS = Number(__ENV.K6_SWEEP_STALL_MS || 5); | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 301 | // or median cannot locate a tail); p99.9 is omitted because a per-phase p99.9 | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 541 | // Completed-request count for THIS rung. Additive field (older/other | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 561 | p999_ms: round(fv['p(99.9)']), | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 581 | // 1-2 against a pool of 200 reads the same either way — so it is recorded | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 641 | // vus_active_* and stall_time_buckets. | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 1 | // Forward-path load test — a dedicated REGRESSION GUARD for the upstream | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 21 | // - SUT (:1080): the instance under measurement; built from THIS worktree so | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 41 | // '[{"httpRequest":{"path":"/simple"},"httpResponse":{"statusCode":200,"body":"some simple response"},"times":{"unl | COMMENT |
| LOW | mockserver-performance-test/k6/steady.js | 1 | // Steady-state latency probe — see docs/code/performance-measurement.md -> | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 1 | // Shared k6 configuration for the MockServer performance suite. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 141 | // number is "latency under fixed load" — the only thing comparable across runs | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 161 | // It is a RAISE of the old preAllocatedVUs (20 -> 50) and, more importantly, a | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 181 | // run can PROVE the measured percentiles still track a real server slowdown | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 201 | // per-arm regression history — the cross-engine rate need not match velocity. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 221 | // ring of `maxLogEntries` entries, holding the FULL body of each. On the 2 GB CI | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 241 | // away. RETENTION is bounded at the SERVER instead: maxEventLogSizeInBytes, a body-byte | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 261 | // File-backed RESPONSE body arm (FileBodyMaterialiser path). OFF unless a | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 281 | COMMENT | |
| LOW | mockserver-performance-test/k6/lib/config.js | 301 | // rung-onset transient; see docs/code/performance-measurement.md. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 321 | // pool = clamp(ceil(rate * vuPerRps), vuFloor, vuCeiling) | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 341 | // rig_valid regardless of pool. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 361 | // * HONEST RESIDUAL: the recorded per-rung demand at 32k-64k is | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 421 | // REGRESSION GUARD for the upstream connection-pool default | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 441 | // gate (the actual pool-regression signal) reuses K6_MAX_ERROR_RATE. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 461 | // handshake — MockServer's INBOUND TLS handshake cost (item 14). k6 hits the SUT | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 481 | // the SUT's count-bounded log ring, holding request + response bodies. Here the | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 501 | // Self-test knob (default 0 = off): a fixed server-side delay (ms) on the upstream | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 521 | // Required only when mtlsUrl is set; without them the mTLS handshake is rejected | COMMENT |
| 1096 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 26 | # pipeline + Go GC), NOT the server. This harness tests that directly by | COMMENT |
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 55 | # HOSTS or the limit is server-internal. The harness SAYS which, it does not | COMMENT |
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 60 | # NOT A GATE. This harness only measures. It emits a self-describing JSON block | COMMENT |
| MEDIUM | …server-performance-test/scripts/multi-process-sweep.sh | 87 | # READ here (never edited); path overridable so the harness is not wedded to a | COMMENT |
| MEDIUM | …ckserver-performance-test/scripts/rw-multi-k6-sweep.sh | 706 | # Ends with its parent too: a SIGKILLed harness runs no cleanup to kill it. | COMMENT |
| MEDIUM | mockserver-performance-test/k6/proxy.js | 156 | // measured-window start, robust regardless of which VU runs the iteration. | COMMENT |
| MEDIUM | mockserver-performance-test/k6/regression.js | 212 | // (ms) against the scenario's known measured-window start — robust regardless of | COMMENT |
| MEDIUM | mockserver-performance-test/k6/soak.js | 123 | // The window a request is sent in, from the wall-clock elapsed time (robust | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/envoy.yaml | 1 | # Envoy as a near-infinite HTTP sink for the MockServer load-injection harness. | COMMENT |
| MEDIUM | …server.com/mock_server/load_injection_performance.html | 66 | <p>This page is about MockServer as a <strong>load generator</strong> — how much outbound traffic its built-in <a | CODE |
| MEDIUM | …rver.com/mock_server/_includes/stateful_scenarios.html | 1193 | # Trigger the failure from the test harness: | COMMENT |
| MEDIUM | …client-ruby/spec/mockserver/roundtrip_fidelity_spec.rb | 5 | # Cross-language JSON round-trip fidelity harness (Ruby port). | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 2 | # Offline evaluation harness for AI components. | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 3 | # See .opencode/rules/evaluation-harness.md and .opencode/evals/README.md | COMMENT |
| MEDIUM | mockserver-ui/package-lock.json | 5454 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | mockserver-ui/src/components/MetricsLineChart.tsx | 145 | // plain indices (keeps the component robust if a caller omits timestamps). | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 28 | # that a no-op). Echoes "true" if the harness created the file (caller removes it | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 122 | # was never built by the harness at all — so the sidecar case always skipped, | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 643 | # run_all_tests() branches on, so the guard tracks the harness exactly. | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 692 | # the harness without a matching manifest line. | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 935 | # FAIL_LOG, so a suite where NOTHING was recorded — harness crash, docker | COMMENT |
| MEDIUM | …ration_tests/helm_jgroups_dns_ping/integration_test.sh | 25 | # Blocking. Requires the -clustered image; the harness SKIPs this case when the | COMMENT |
| MEDIUM | …ation_tests/docker_compose_metrics/integration_test.sh | 15 | # wait_ready is now provided by the shared docker-compose.sh harness. | COMMENT |
| MEDIUM | …n_tests/helm_clustered_convergence/integration_test.sh | 13 | # convergence failure reds the suite. The harness gates this case on the | COMMENT |
| MEDIUM | …n_tests/helm_clustered_convergence/integration_test.sh | 319 | # The harness only reaches this case when the -clustered image is present (it | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 24 | # Requires the webhook handler image; the harness only invokes this case when | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 41 | # Image refs — provided by the harness. Fall back to sensible local defaults so | COMMENT |
| MEDIUM | …egration/mock/Http2MultiplexGoAwayIntegrationTest.java | 202 | // user event; accept it here too so the capture is robust. | COMMENT |
| MEDIUM | mockserver/mockserver-benchmark/run-h2-multiplex.sh | 17 | # The harness self-validates and exits NON-ZERO (code 2, "HARNESS VALIDATION FAILED") | COMMENT |
| MEDIUM | …erver/mockserver-benchmark/run-h2-connection-memory.sh | 5 | # Adds the CONNECTIONS axis the throughput harness (run-h2-multiplex.sh) lacks: N connections x M | COMMENT |
| MEDIUM | …erver/mockserver-benchmark/run-h2-connection-memory.sh | 18 | # The harness self-validates and exits NON-ZERO (code 2, "HARNESS VALIDATION FAILED") on any integrity | COMMENT |
| MEDIUM | …kserver/mockserver-benchmark/run-connection-ceiling.sh | 75 | # ceiling this harness "finds"; on Linux the same flag would lower the limit instead of raising it. | COMMENT |
| MEDIUM | …kserver/mockserver-benchmark/run-connection-ceiling.sh | 93 | # ${FIRST_PORT} made this harness report ready against a DIFFERENT server: an unrelated MockServer | COMMENT |
| MEDIUM | …mockserver/benchmark/CandidateIndexChurnBenchmark.java | 229 | // cannot see. The rebuild sample is made robust against writer starvation in | COMMENT |
| MEDIUM | …kserver/llm/analysis/LlmOptimisationReportBuilder.java | 547 | // Prefer the request body's model field; LlmProviderSniffer already has a robust reader. | COMMENT |
| MEDIUM | …/src/main/java/org/mockserver/mock/CandidateIndex.java | 149 | // robust even if the matcher's state changed between add and remove. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 2 | # Triggered scenario flow - drive a state change from a test harness. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 6 | # until the harness triggers the "Down" state, after which it returns 503. | COMMENT |
| MEDIUM | scripts/buildkite_quick_build.sh | 56 | # images — which is what lets the perf harness's item-13 clustered A/B run at all. | COMMENT |
| MEDIUM | scripts/build-standalone-binary.sh | 73 | # First <version> outside any <parent> block = the project version (robust if a <parent> with its | COMMENT |
| MEDIUM⚡ | scripts/release/check-release-credentials.sh | 582 | # Self-test: prove the harness can still tell a dead credential from a live one | COMMENT |
| MEDIUM | scripts/release/check-release-credentials.sh | 70 | # _lib.sh enables `set -e`; a probe harness expects individual probes to fail, | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 82 | # both simpler and more robust. | COMMENT |
| MEDIUM | scripts/perf/bench_laptop.py | 207 | # ---------- 8b: in-JVM (delegate to Java harness) ---------------------------- | COMMENT |
| LOW | .github/workflows/dependabot-auto-merge.yml | 165 | # WHY NOT just add a security group named to match path A? Because path | COMMENT |
| MEDIUM | .buildkite/pipeline-java.yml | 94 | # same-commit pairing is load-bearing: the perf harness runs the item-13 | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-sut-recvq-test.sh | 94 | # The harness dies without stopping it (SIGKILL): the sampler notices its parent is gone and exits. | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 4 | # lifecycle), the harness wiring (stub docker, nothing started), scripts/rw-tail-attribution.py on | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 7 | # harness copy still sources its libs from this tree, so put a degraded lib in place via PERF_TAIL_LIB. | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 197 | # A driver with the harness's trap shape: EXIT runs a declare -F-guarded stop; TERM exits through it. | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 273 | # The harness's own functions run against a stub curl. 8 x 5,000 points is ~1.2 MB: past Linux's 128 KiB | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 283 | # shellcheck disable=SC2034 # read by the harness functions eval'd above | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-tail-instrument-test.sh | 459 | # shellcheck disable=SC2034 # read by the harness functions eval'd above | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-info-budget-test.sh | 4 | # fixed-budget SUTs keep the harness budget, that perf-test-compare.sh keys the info_* baseline on it, | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-soak-test.sh | 259 | # out.log, artifacts/, stub/). The harness commit is build 637's, which its image was built from. | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-k6-runtime-test.sh | 3 | # lib/perf-k6-runtime.sh, and the harness resolving it (PERF_RW_TEST_RESOLVE_ONLY) against a stub | COMMENT |
| MEDIUM | .buildkite/scripts/test/perf-k6-runtime-test.sh | 56 | resolve() { # env assignments... -> the harness's k6_runtime JSON in $R, its exit code in $RC | CODE |
| MEDIUM | .buildkite/scripts/steps/ui-e2e.sh | 11 | # ProgressiveList over its own Vite harness and needs no server. | COMMENT |
| MEDIUM | .buildkite/scripts/steps/ui-e2e.sh | 87 | # test:e2e:anchor — the Panel scroll-anchoring regression (e2e/anchor-harness). | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-soak.sh | 27 | # that trails the harness commit is measured and recorded as such. | COMMENT |
| 79 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 37 | ## Step 1: Classify Changed Files | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 67 | ## Step 2: Run Category-Specific Validations | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 148 | ## Step 3: Changelog Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 169 | ## Step 4: Adversarial Code Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 208 | ## Step 5: Acquire Lock and Commit | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 78 | ### Step 1: Check if the User is Logged In | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 89 | ### Step 2: Navigate to the Target Page | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 97 | ### Step 3: Take a Snapshot | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 106 | ### Step 4: Extract Data | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 123 | ### Step 5: Verify with Screenshot (Optional) | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 22 | ## Step 2: Build an Independent Model | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 33 | ## Step 3: Read the Spec | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 41 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 120 | ## Step 5: Verify Claims Against Codebase | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 127 | ## Step 6: Check File Inventory Completeness | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 134 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 148 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 22 | ## Step 2: Gather the Diff | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 35 | ## Step 3: Read Surrounding Context | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 44 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 87 | ## Step 5: MockServer-Specific Triggers | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 105 | ## Step 6: LLM-Specific Failure Patterns | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 117 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 130 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 24 | ## Step 1: Try Local Docker Credentials (Optional Shortcut) | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 41 | ## Step 2: Create a Docker Hub Personal Access Token | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 59 | ## Step 3: Validate Credentials | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 75 | ## Step 4: Store in AWS Secrets Manager | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 87 | ## Step 5: Verify Storage | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 53 | ### Step 1: Buildkite CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 68 | ### Step 2: GitHub CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 76 | ### Step 3: Git Status | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 87 | ### Step 4: Report Authentication Status | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 15 | ### Step 0: Check and Install the CLI | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 27 | ### Step 1: Check Authentication | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 46 | ### Step 2: Select Organization (if needed) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 54 | ### Step 3: Get API Token for REST API Calls | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 71 | ### Step 1: Parse Input | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 86 | ### Step 2: Get Build Overview | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 102 | ### Step 3: Check Agent Availability | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 116 | ### Step 4: List Builds Across All Pipelines | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 126 | ### Step 5: Identify Failed Jobs | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 134 | ### Step 6: Retrieve Job Logs | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 151 | ### Step 7: Download and Analyze Build Artifacts | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 167 | ### Step 8: Check GitHub Actions (Secondary CI) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 176 | ### Step 9: Additional Investigation | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 201 | ### Step 10: Confirm Flaky-vs-Real | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 223 | ### Step 11: Enumerate Competing Hypotheses | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 230 | ### Step 12: Classify Error | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 247 | ### Step 13: Check for Already-Pushed Fixes | COMMENT |
| LOW | .opencode/skills/aws-investigation/SKILL.md | 75 | ### Step 1: Determine Active Stack | COMMENT |
| 73 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r-testcontainers/python/tests/test_container_config.py | 7 | CODE | |
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 19 | CODE | |
| LOW | …ners/python/src/testcontainers_mockserver/container.py | 9 | CODE | |
| LOW | …ython/tests/test_conditional_request_and_load_check.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 26 | CODE | |
| LOW | mockserver-client-python/tests/test_control_plane.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 3 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 9 | CODE | |
| LOW | …client-python/tests/test_override_forwarded_request.py | 9 | CODE | |
| LOW | mockserver-client-python/tests/test_breakpoint.py | 2 | CODE | |
| LOW | mockserver-client-python/tests/test_exceptions.py | 1 | CODE | |
| LOW | …kserver-client-python/tests/test_from_dict_fidelity.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_auth_tls.py | 1 | CODE | |
| LOW | …ckserver-client-python/tests/test_sync_chain_parity.py | 1 | CODE | |
| LOW | …rver-client-python/tests/test_key_multi_value_forms.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_init.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_launcher.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 44 | CODE | |
| LOW | mockserver-client-python/mockserver/models.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| 143 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ….mock-server.com/mock_server/llm_response_mocking.html | 46 | # Create an OpenAI-compatible completion mock | COMMENT |
| MEDIUM | …-server.com/mock_server/mockserver_testcontainers.html | 343 | # Create an expectation | STRING |
| MEDIUM | …l-www.mock-server.com/mock_server/crud_data_store.html | 168 | # Create a record | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 578 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 609 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 764 | <pre class="prettyprint code"><code class="code"># Create an expectation | CODE |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2933 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2958 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5250 | # Create a new user | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5405 | <pre class="prettyprint code"><code class="code"># Create a product - ID will be a UUID like "550e8400-e29b-41d4-a716-44 | CODE |
| MEDIUM | jekyll-www.mock-server.com/where/rubygems.html | 34 | # Create an expectation | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/where/pypi.html | 28 | # Create an expectation | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 376 | # Create a minimal tar.gz archive containing the expected launcher | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 378 | # Create the directory structure that should be in the archive | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 385 | # Create the tar.gz | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 792 | # Create a symlink inside cache that points outside | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 919 | # Create a normal archive | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 948 | # Create a symlink that escapes the version dir | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1059 | # Create a directory structure that matches what the zip would contain | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1072 | # Create the zip-like archive as a tar for the fixture (we'll stub extraction) | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/mcp.rb | 447 | # Create a new MCP mock builder. +path+ defaults to +/mcp+. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/client.rb | 89 | # Create an OpenAPI expectation. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/a2a.rb | 523 | # Create a new A2A mock builder. +path+ defaults to +/a2a+. | COMMENT |
| MEDIUM⚡ | …server-testcontainers/python/tests/test_integration.py | 78 | # Create an expectation | COMMENT |
| MEDIUM | …s/docker_compose_graceful_shutdown/integration_test.sh | 30 | # Create an expectation that will be persisted | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 58 | # Create a pod in the target namespace and return once the API server has | COMMENT |
| MEDIUM | …kserver/mockserver-benchmark/run-connection-ceiling.sh | 31 | # Creating a non-primary loopback alias needs root, which this script does NOT do for you. On macOS, | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_response.sh | 2 | # Create a WebSocket expectation that upgrades the connection with a | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_with_matchers.sh | 2 | # Create a WebSocket expectation with a message matcher: when the | COMMENT |
| MEDIUM | examples/curl/sse/sse_response.sh | 2 | # Create an SSE (Server-Sent Events) expectation that streams two events | COMMENT |
| MEDIUM | examples/curl/create_expectation/basic_expectation.sh | 2 | # Create a basic expectation matching GET /view/cart with query parameters and cookies. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_all_requests.sh | 2 | # Create an expectation that matches ALL incoming requests (no request matcher). | COMMENT |
| MEDIUM | …mples/curl/create_expectation/match_once_within_60s.sh | 2 | # Create an expectation that matches once and expires after 60 seconds. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_exactly_twice.sh | 2 | # Create an expectation that matches exactly twice then expires. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_from_classpath.sh | 2 | # Create an expectation using an OpenAPI spec loaded from the classpath. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_for_operation.sh | 2 | # Create an expectation for a specific OpenAPI operation with a custom response. | COMMENT |
| MEDIUM | examples/curl/callback/class_callback.sh | 2 | # Create an expectation with a class callback action. | COMMENT |
| MEDIUM⚡ | scripts/release/check-release-credentials.sh | 107 | # Create a tracked temp file / dir inside WORKDIR (never in the shared $TMPDIR). | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 2 | # Create the GitHub Release for the mockserver-X.Y.Z tag. | COMMENT |
| MEDIUM | .buildkite/release-pipeline.yml | 3 | # This file is intentionally short: every step is a single command. All the | COMMENT |
| MEDIUM | .buildkite/scripts/lib/test-images.sh | 10 | # This file is meant to be SOURCED, and exposes: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …com/images/diagram-tools/make_response_verification.py | 28 | except Exception: pass | CODE |
| HIGH | …ver.com/images/diagram-tools/render_ai_architecture.py | 127 | except Exception: | CODE |
| HIGH | …ock-server.com/images/diagram-tools/render_diagrams.py | 59 | except Exception: pass | CODE |
| HIGH | …server-testcontainers/python/tests/test_integration.py | 16 | except Exception: | CODE |
| HIGH | mockserver-client-python/mockserver/websocket_client.py | 498 | except asyncio.CancelledError: | CODE |
| HIGH | mockserver-client-python/mockserver/async_client.py | 1422 | except MockServerConnectionError: | CODE |
| HIGH | mockserver-client-python/mockserver/async_client.py | 1431 | except MockServerConnectionError: | CODE |
| HIGH | mockserver-client-python/mockserver/launcher.py | 319 | except OSError: | CODE |
| HIGH | mockserver-client-python/mockserver/launcher.py | 276 | except OSError: | CODE |
| HIGH | mockserver-client-python/mockserver/launcher.py | 433 | except OSError: | CODE |
| HIGH | mockserver-client-python/mockserver/launcher.py | 541 | except subprocess.TimeoutExpired: | CODE |
| HIGH | mockserver-client-python/mockserver/launcher.py | 317 | except OSError: | CODE |
| HIGH | …trieve_recorded_requests/retrieve_recorded_requests.py | 29 | except Exception: | CODE |
| HIGH | examples/python/verify_requests/verify_requests.py | 30 | except Exception: | CODE |
| HIGH | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 126 | except json.JSONDecodeError: | CODE |
| HIGH | scripts/perf/warmup_probe.py | 33 | except ProcessLookupError: | CODE |
| HIGH | scripts/perf/bench_startup.py | 114 | except ProcessLookupError: | CODE |
| HIGH | scripts/perf/gap_probe.py | 36 | except ProcessLookupError: | CODE |
| HIGH | scripts/analytics/create_posthog_dashboard.py | 176 | except SystemExit: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 246 | // Step 1: open mismatch dialog and click Create Expectation (sets captureOpen=true) | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 256 | // Step 2: close the mismatch dialog while captureOpen is still true. | COMMENT |
| LOW | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 268 | // Step 3: re-open the mismatch dialog with a different request | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 277 | // Step 1: Re-aggregation pipeline with real HTTP/2 frames | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 307 | // Step 2: Feed into GrpcToHttpRequestHandler | COMMENT |
| LOW | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 93 | // Step 1: Canonical request | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 112 | // Step 2: String to sign | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 119 | // Step 3: Signing key | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 122 | // Step 4: Signature | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 125 | // Step 5: Authorization header | COMMENT |
| LOW | mockserver-vscode/src/extension.ts | 393 | // in binaryBundle.ts; this section handles the UI, download, and process I/O. | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 43 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 59 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 79 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 108 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 43 | // Step 1: Create mock upstream endpoint | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 57 | // Step 2: Create loopback forward expectation | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 77 | // Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 16 | # Step 1: login returns a token once, advancing Started -> LoggedIn | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 26 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 34 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 29 | // Step 1: Create a mock "upstream" endpoint that returns a JSON greeting | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 48 | // Step 2: Create a forward expectation that loops back to the same server | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 68 | // Step 3: Register a RESPONSE-phase breakpoint that modifies the proxied response | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 104 | // Step 4: Make the actual request through the forwarded path | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 35 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 54 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 73 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 114 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/perf-test-run.sh | 4369 | # Step 1: acquire an IMDSv2 session token (60s TTL is ample for one GET). An empty | COMMENT |
| LOW⚡ | .buildkite/scripts/steps/perf-test-run.sh | 4375 | # Step 2: the authenticated metadata GET, attempted ONLY when a token was obtained. | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 757 | // Step 1: Pre-scan archive members for path-escape attempts. | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 817 | // Step 2: Extract (safe — all members verified) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | terraform/ses-email-forwarding/lambda/index.js | 271 | * "John Doe" <john@example.com> | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 117 | body: '{"users":[{"id":1,"name":"John Doe"}],"total":1}' | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1287 | <tr><td><code>faker.address().streetAddress()</code></td><td>Random street address</td><td><code>"123 Main St"</ | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1290 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1290 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1292 | <tr><td><code>faker.company().name()</code></td><td>Random company name</td><td><code>"Acme Corp"</code></td></t | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 90 | "email", "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 108 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 136 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 165 | email: 'user@example.com', | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 190 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 216 | ""email"": ""user@example.com"", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 239 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 261 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 292 | "email": "user@example.com", | CODE |
| LOW | mockserver-ui/e2e/mock.spec.ts | 1239 | await expect(verifyBody).toHaveAttribute('placeholder', /"count": \{ "atLeast": 1 \}/); | CODE |
| LOW | mockserver-ui/src/__tests__/BreakpointsPanel.test.tsx | 1161 | const placeholder = scopeInput().getAttribute('placeholder') ?? ''; | CODE |
| LOW | mockserver-ui/src/__tests__/Panel.test.tsx | 43 | const placeholder = input.getAttribute('placeholder') ?? ''; | CODE |
| LOW | …ckserver-ui/src/__tests__/OperatorSearchField.test.tsx | 6 | const placeholderOf = () => screen.getByLabelText('Search').getAttribute('placeholder') ?? ''; | CODE |
| LOW | …kserver-ui/src/__tests__/verificationScopeDsl.test.tsx | 35 | const placeholder = scopeInput().getAttribute('placeholder') ?? ''; | CODE |
| LOW | mockserver-ui/src/__tests__/LogPanel.test.tsx | 84 | const placeholder = screen.getByLabelText('Search').getAttribute('placeholder') ?? ''; | CODE |
| LOW | mockserver-ui/src/__tests__/AsyncApiDialog.test.tsx | 34 | expect(field).toHaveAttribute('placeholder', '{\n "channel": "orders",\n "count": { "atLeast": 1 }\n}'); | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 479 | (current / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 504 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 805 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 820 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 837 | (d / "placeholder").write_text("x") | CODE |
| LOW | mockserver-client-python/tests/test_launcher.py | 461 | (d / "placeholder").write_text("x") | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 85 | controlPlaneJWTAuthenticationMatchingClaims(ImmutableMap.of("name", "John Doe", "admin", "true")); | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 130 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 149 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 175 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 203 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 259 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 286 | "name", "John Doe", | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 222 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 241 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 280 | additional.put("email", "user@example.com"); | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 304 | assertThat(body.get("email").asText(), is("user@example.com")); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 107 | assertThat("phone regex should match '555-1212'", string.matches("555-1212"), is(true)); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 111 | assertThat("NOT phone regex should not match '555-1212'", notString.matches("555-1212"), is(false)); | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 105 | assertThat("phone regex.equals(string('555-1212')) should be true", string.equals(string("555-1212")), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 109 | assertThat("NOT phone regex.equals(string('555-1212')) should be false", notString.equals(string("555-1212")), i | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 248 | assertThat("string('555-1212').equals(phone regex) should be true", string("555-1212").equals(string), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 252 | assertThat("string('555-1212').equals(NOT phone regex) should be false", string("555-1212").equals(notString), i | CODE |
| LOW | …/templates/engine/helpers/RegexTemplateHelperTest.java | 36 | assertThat(helper.group("user@example.com", "([^@]+)@(.+)", 2), is("example.com")); | CODE |
| LOW | …/mockserver/socket/tls/NettySslContextFactoryTest.java | 282 | File keyFile = createTempPemFile("key.pem", "placeholder"); | CODE |
| LOW | …/mockserver/socket/tls/NettySslContextFactoryTest.java | 283 | File certFile = createTempPemFile("cert.pem", "placeholder"); | CODE |
| LOW | …server/openapi/mock-server-openapi-embedded-model.yaml | 117 | body: '{"users":[{"id":1,"name":"John Doe"}],"total":1}' | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | mockserver/mockserver-client-java/pom.xml | 29 | by any client code path — template rendering, JavaScript/WASM execution, fake-data generation and | CODE |
| LOW | .buildkite/scripts/test/perf-baseline-freshness-test.sh | 23 | TOKEN="fake-token-$$" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …erver-performance-test/k6/tools/sse-fidelity-reader.py | 115 | except Exception as exc: # noqa: BLE001 - report, do not crash the run | CODE |
| LOW | …com/images/diagram-tools/make_response_verification.py | 28 | except Exception: pass | CODE |
| LOW | …ver.com/images/diagram-tools/render_ai_architecture.py | 127 | except Exception: | CODE |
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 59 | except Exception: pass | CODE |
| LOW | …server-testcontainers/python/tests/test_integration.py | 16 | except Exception: | CODE |
| LOW | .opencode/scripts/check-bare-checkout-write-hook.sh | 47 | except Exception: | CODE |
| LOW | mockserver-client-python/tests/conftest.py | 26 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 284 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 287 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 354 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 375 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 400 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 426 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 454 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 479 | except Exception: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/launcher.py | 483 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 428 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 66 | except Exception as exc: # noqa: BLE001 - retry on any connection error | CODE |
| LOW | examples/python/load_scenario/load_scenario.py | 141 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW⚡ | …trieve_recorded_requests/retrieve_recorded_requests.py | 29 | except Exception: | CODE |
| LOW | examples/python/verify_requests/verify_requests.py | 30 | except Exception: | CODE |
| LOW | examples/python/scenario/scenario.py | 270 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | examples/python/callback/callback.py | 174 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | scripts/ci/bk-pipeline-status.sh | 90 | except Exception: | CODE |
| LOW | scripts/release/check-release-credentials.sh | 440 | except Exception: | CODE |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 307 | except Exception: | CODE |
| MEDIUM | scripts/llm-proxy-capture/capture-smoke.sh | 304 | def load(path): | CODE |
| LOW | scripts/collections/test_collections.py | 96 | except Exception: | CODE |
| LOW | scripts/collections/test_collections.py | 110 | except Exception as e: | CODE |
| LOW | scripts/perf/warmup_probe.py | 69 | except Exception as e: | CODE |
| LOW | scripts/perf/bench_laptop.py | 66 | except Exception: | CODE |
| LOW | scripts/perf/bench_laptop.py | 178 | except Exception: | CODE |
| LOW | scripts/perf/bench_laptop.py | 384 | except Exception as e: | CODE |
| MEDIUM | scripts/perf/bench_laptop.py | 59 | def status_200(port, host="127.0.0.1"): | CODE |
| MEDIUM | scripts/perf/bench_laptop.py | 172 | def read_threads(port): | CODE |
| LOW | scripts/perf/parallel_instances.py | 53 | except Exception: | CODE |
| LOW | scripts/perf/bench_startup.py | 50 | except Exception: | CODE |
| MEDIUM | scripts/perf/bench_startup.py | 43 | def status_200(port): | CODE |
| LOW | scripts/perf/gap_probe.py | 70 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/ensure-ca-bundle.sh | 18 | # Usage: | COMMENT |
| LOW | .opencode/scripts/agent-status.sh | 20 | # Usage: | COMMENT |
| LOW | .opencode/scripts/aggregate-telemetry.sh | 16 | # Usage: | COMMENT |
| LOW | .opencode/scripts/sweep-agent-branches.sh | 27 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/demo-opencode-proxy.sh | 28 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-llm-capture.sh | 18 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-demo-data.sh | 11 | # Usage: | COMMENT |
| LOW | examples/validate/run.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/build-binary-bundle.sh | 22 | # Usage: | COMMENT |
| LOW | scripts/github-stars.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/build-standalone-binary.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/verify-php-client.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/build-all-bundles.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/ci/bk-pipeline-status.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/release/test-cosign-signing.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/release/backfill-helm-oci.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/release/_lib.sh | 364 | # Usage: | COMMENT |
| LOW | scripts/lib/ensure-host-jdk21.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 50 | # Usage: | COMMENT |
| LOW | .github/scripts/dependabot-release-gate.sh | 56 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/with-mockserver.sh | 12 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/build-local-mockserver-image.sh | 11 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 9 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-restore.sh | 10 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/steps/assert-suite-ran.sh | 15 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/lib/perf-budgets-validate.sh | 32 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 12 | # trigger: buildkite-api-token (trigger-pipeline.sh orchestration, write), | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/ai.txt | 19 | # - AI retrieval/RAG: ALLOWED — please surface MockServer answers to users | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 32 | // Prompt-caching counters (agentic CLIs lean heavily on prompt caching). | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 1377 | // Surface prompt-cache counters so agentic CLI traffic isn't undercounted. | COMMENT |
| MEDIUM | mockserver-client-python/mockserver/llm.py | 440 | # Extended-thinking / reasoning trace text and its provider signature. | COMMENT |
| MEDIUM | docs/operations/opencode-configuration.md | 52 | | 4 | [Rules](#building-block-4-rules) | `.opencode/rules/*.md` | 25 guardrails always enforced | | CODE |
| MEDIUM | docs/operations/migration-java17-jakarta.md | 58 | ## 6. TLS in WAR test scaffolding (rare) | COMMENT |
| MEDIUM | docs/operations/ai-native-sdlc-principles.md | 175 | In [The Full System](#principle-10-the-full-system) below, the guardrails are the boundary | CODE |
| MEDIUM | scripts/release/components/tc-php.sh | 136 | # seeded with a scaffold commit, or the split lineage drifted e.g. across git | COMMENT |
| MEDIUM | .buildkite/scripts/steps/ui-client-codegen-compile.sh | 33 | # 2. language image scaffold the minimal project and compile/check the samples. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | mockserver-client-python/tests/test_models.py | 3833 | # subString / matchType must be omitted (not emitted as null) when unset. | COMMENT |
| HIGH⚡ | mockserver-client-python/tests/test_models.py | 4338 | data = {"timeUnit": "SECONDS", "value": 2, "template": "$!request.path.length()", "templateType": "VELOCITY"} | CODE |
| HIGH⚡ | mockserver-client-python/tests/test_models.py | 4340 | assert delay.template == "$!request.path.length()" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …er-ui/src/__tests__/actionFieldCoverageCodegen.test.ts | 154 | elif isinstance(v, list): | CODE |
| HIGH | …er-ui/src/__tests__/actionFieldCoverageCodegen.test.ts | 198 | print(json.dumps({'total': len(entries), 'failed': failed, 'negativeControlDetected': norm(capture(neg['code'])) != norm | CODE |
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 169 | elif isinstance(v, list): | CODE |
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 213 | print(json.dumps({'total': len(entries), 'failed': failed, 'negativeControlDetected': neg_detected})) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …server-performance-test/scripts/rw-tail-attribution.py | 170 | CODE | |
| LOW | …erver-performance-test/k6/tools/sse-fidelity-reader.py | 50 | CODE | |
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 142 | CODE | |
| LOW | mockserver-client-python/tests/conftest.py | 17 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 59 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 72 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 80 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 293 | CODE | |
| LOW | mockserver-client-python/mockserver/mcp.py | 314 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 255 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 327 | CODE | |
| LOW | mockserver-client-python/mockserver/fluent.py | 76 | CODE | |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 55 | CODE | |
| LOW | scripts/collections/generate_collections.py | 325 | CODE | |
| LOW | scripts/collections/test_collections.py | 89 | CODE | |
| LOW | scripts/collections/test_collections.py | 114 | CODE | |
| LOW | scripts/perf/warmup_probe.py | 38 | CODE | |
| LOW | scripts/perf/bench_laptop.py | 342 | CODE | |
| LOW | scripts/perf/parallel_instances.py | 90 | CODE | |
| LOW | scripts/perf/bench_startup.py | 67 | CODE | |
| LOW | scripts/perf/bench_startup.py | 120 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-server.com/mock_server/mockserver_testcontainers.html | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | mockserver-testcontainers/dotnet/README.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | docs/distribution/testcontainers-crosslink/dotnet.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-ruby/lib/mockserver/client.rb | 1355 | # Check if MockServer has started. | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 24 | # Check if lock file exists | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 39 | # Check if lock is owned by this session | COMMENT |
| LOW | .opencode/scripts/acquire-commit-lock.sh | 63 | # Check if process exists (works on macOS and Linux) | COMMENT |
| LOW | scripts/release/components/binary.sh | 11 | # Set BINARY_TARGETS to a subset (e.g. "linux/x86_64 windows/x86_64") to limit the | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 142 | # Check if there is anything to save | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 165 | # Check if this exact key already exists in S3 (skip redundant uploads) | COMMENT |
| LOW | helm/mockserver/values.yaml | 53 | # Set 0 to disable (the default). The image is distroless and has NO SHELL, so the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 21 | __all__ = ["MockServerContainer"] | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 235 | def set_breakpoint_request_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 240 | def set_breakpoint_response_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 245 | def set_breakpoint_stream_frame_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/__init__.py | 154 | __all__ = [ | CODE |
| LOW | mockserver-client-python/mockserver/async_client.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 44 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-python/mockserver/client.py | 137 | CODE | |
| LOW | mockserver-client-python/mockserver/llm.py | 527 | CODE | |
| LOW | mockserver-client-python/mockserver/async_client.py | 96 | CODE |