Keep passwords and other sensitive information out of your chat logs and inboxes.
This report summarizes scanner evidence for onetimesecret/onetimesecret, a Ruby project with 2,958 GitHub stars. SynthScan examined 1,628,589 lines of code across 6056 source files, recording 13466 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 15.0 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 7920 finding(s).
Are imports declared and package/API names verified? 614 finding(s).
Are wrappers, guards, and repeated structures necessary? 5793 finding(s).
Which changes need focused human review? 13466 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 13466 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/testsuite/aggregate-test-results-test.sh | 61 | # ── Every file readable: the totals, and nothing flagged ────────────────── | COMMENT |
| MEDIUM | tools/testsuite/aggregate-test-results-test.sh | 78 | # ── An empty file and a truncated one beside a readable one ─────────────── | COMMENT |
| MEDIUM | tools/testsuite/aggregate-test-results-test.sh | 105 | # ── Nothing readable at all ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | tools/testsuite/aggregate-test-results-test.sh | 122 | # ── No results files ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tools/testsuite/aggregate-test-results-test.sh | 135 | # ── A path with a space ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tools/envref/src/envref/docsgen.py | 123 | # # ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tools/envref/src/envref/docsgen.py | 125 | # # ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tools/setup/setup.sh | 41 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 43 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 253 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 255 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 373 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 375 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 581 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 583 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 709 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 711 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 1409 | # ======================================================================= | COMMENT |
| MEDIUM | tools/setup/setup.sh | 1411 | # ======================================================================= | COMMENT |
| MEDIUM | docker/bake.hcl | 23 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 25 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 73 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 102 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 104 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 118 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/bake.hcl | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/tests/conftest.py | 76 | # ============================================================================ | COMMENT |
| MEDIUM | locales/tests/conftest.py | 78 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 20 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 40 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 49 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 51 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/review-locale-branches.sh | 136 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/review-locale-branches.sh | 140 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/review-locale-branches.sh | 167 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/review-locale-branches.sh | 169 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/pr-per-locale.sh | 456 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/pr-per-locale.sh | 458 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/pr-per-locale.sh | 466 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | locales/scripts/pr-per-locale.sh | 468 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 65 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 67 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 119 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 121 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 155 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 158 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 190 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 194 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 214 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 217 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 250 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 253 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/i18n/io.py | 20 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/i18n/io.py | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | locales/scripts/i18n/tokens.py | 29 | # --------------------------------------------------------------------------- | COMMENT |
| 4823 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 1 | ## | COMMENT |
| LOW | .pre-commit-config.yaml | 21 | # $ pre-commit autoupdate | COMMENT |
| LOW | .pre-commit-config.yaml | 101 | # so `feature/ENG-123` yields no prefix. GitHub issue numbers are the | COMMENT |
| LOW | .pre-push-config.yaml | 1 | ## | COMMENT |
| LOW | .pre-push-config.yaml | 21 | # | COMMENT |
| LOW | eslint.config.ts | 481 | COMMENT | |
| LOW | eslint.config.ts | 501 | // tags/whitelist/removeDuplicates) were dropped; `attributes` now | COMMENT |
| LOW | compose.e2e.yml | 1 | # compose.e2e.yml — services needed only by the full-auth E2E lane. | COMMENT |
| LOW | compose.e2e.yml | 21 | # rule would map them onto the same 2125. The HTTP one takes the runner-only | COMMENT |
| LOW | compose.test.yml | 1 | # compose.test.yml — service dependencies for the test lanes. | COMMENT |
| LOW | compose.test.yml | 21 | # valkey 2163 (canonical 6379; grandfathered, not 2179) | COMMENT |
| LOW | .rubocop.yml | 1 | inherit_from: .rubocop_todo.yml | COMMENT |
| LOW | .rubocop.yml | 281 | Enabled: true | COMMENT |
| LOW | tsconfig.json | 1 | // TypeScript Project Configuration | COMMENT |
| LOW | docker-compose.yml | 1 | ## | COMMENT |
| LOW | vite.config.ts | 161 | // compositionOnly: true | COMMENT |
| LOW | vite.config.ts | 181 | // - Trade-off: Larger bundle vs. complete i18n functionality | COMMENT |
| LOW | vite.config.ts | 261 | // | COMMENT |
| LOW | vitest.config.ts | 1 | // vitest.config.ts | COMMENT |
| LOW | vitest.config.ts | 21 | // Use vitest snapshots, inline snapshots. vitest -u to update snapshots. | COMMENT |
| LOW | vitest.config.ts | 101 | // again, and the fonts/images/css/json landed in the report as empty | COMMENT |
| LOW | pnpm-workspace.yaml | 21 | '@babel/core': '>=7.29.6 <8' | COMMENT |
| LOW | pnpm-workspace.yaml | 41 | 'brace-expansion@2': '^2.1.7' | COMMENT |
| LOW | tools/testsuite/ci-metrics-breakdown-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-status-render-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/ci-verdict-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-components-drift-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-components-drift-test.sh | 21 | # expected list, so a step that dies before reporting under the new name is | COMMENT |
| LOW | tools/testsuite/run-test-lane-action-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/run.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/ruby4-step-outcomes-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-preflight-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-preflight-test.sh | 21 | # wording of the detail: the messages are operator-facing prose that should | COMMENT |
| LOW | tools/testsuite/verify-sentry-build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/pin-ruby-version-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-status-sanitize-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/sentry-status-sanitize-test.sh | 21 | # md_code the summary is GFM. A live link or a Camo-proxied <img> planted | COMMENT |
| LOW | tools/testsuite/aggregate-test-results-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/testsuite/lib/assert.sh | 1 | # tools/testsuite/lib/assert.sh | COMMENT |
| LOW | tools/testsuite/lib/assert.sh | 21 | # | COMMENT |
| LOW | tools/testsuite/lib/assert.sh | 201 | # SENTRY_AUTH_TOKEN and SELF_HOSTED_SENTRY_TOKEN. Every one of these scripts | COMMENT |
| LOW | tools/envref/src/envref/cli.py | 161 | # own. 1 is "drift" to every caller in this family, and CI runs | COMMENT |
| LOW | tools/envref/src/envref/versionmap.py | 881 | rows = proved | COMMENT |
| LOW | tools/envref/src/envref/versionmap.py | 961 | # reachable and was previously a traceback — the one command on the | COMMENT |
| LOW | …ls/envref/src/envref/sh/resolve-unreleased-versions.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …ls/envref/src/envref/sh/resolve-unreleased-versions.sh | 81 | # `#`, and check-config-versions.sh matches it with [[:blank:]], so writing | COMMENT |
| LOW | …ls/envref/src/envref/sh/resolve-unreleased-versions.sh | 121 | COMMENT | |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 21 | # The one sanctioned change is `unreleased` -> a real version, which the | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 41 | # | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 81 | # a URL fragment is the shape that occurs — reads as a marker attempt. That | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 101 | # that trap has cost this file twice — and a bracket expression holding a | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 321 | # workspace_links entries. Wrapping a FIELD of an entry rather than a | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 341 | # wrong-shipped-version shape, not a crash. No file in etc/defaults/ | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 401 | # key a leaf that the map generator calls a parent, so rule 1 demands | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 461 | local path="$1" kind="$2" decl_re | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 501 | # | COMMENT |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 581 | COMMENT | |
| LOW | tools/envref/src/envref/sh/check-config-versions.sh | 681 | # no YAML line — so it yielded zero sites, every rule passed vacuously, and | COMMENT |
| LOW | …ols/envref/src/envref/sh/config-version-archaeology.sh | 1 | #!/usr/bin/env bash | COMMENT |
| 5823 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 315 | def test_client_ip_equals_remote_ip_omitted(self, sample): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 320 | def test_unix_milli_timestamp(self, sample): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 325 | def test_float_duration_seconds(self, sample): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 340 | def test_plain_mode_ignores_json(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 347 | def test_non_json_line_in_json_mode_falls_through(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 351 | def test_ansi_colored_line_in_metadata_mode(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 358 | def test_semantic_logger_json_metadata_mode(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 720 | def test_control_char_newline_escaped(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 724 | def test_control_char_cr_escaped(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 728 | def test_control_char_tab_escaped(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 732 | def test_raw_low_control_char_hex_escaped(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 736 | def test_del_char_hex_escaped(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 740 | def test_no_double_escape_literal_backslash_n(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 749 | def test_no_double_escape_when_control_and_backslash_coexist(self): | CODE |
| LOW⚡ | tools/testsuite/test_logtide_ship.py | 755 | def test_space_regression_not_hex_escaped(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 111 | def test_never_contains_full_key(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 173 | def test_malformed_returns_zero(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 178 | def test_composite_not_supported_returns_zero(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 200 | def test_both_forms_equivalent(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 225 | def test_full_json_as_message(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 266 | def test_no_metadata_key_when_empty(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 371 | def test_caddy_mode_routes_to_caddy_builder(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 420 | def test_sends_correct_headers_and_body(self, monkeypatch): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 467 | def test_connection_error_warns_but_continues( | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 501 | def test_auth_failure_emits_event(self, monkeypatch, diag_caplog): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 515 | def test_skips_empty_lines_and_ships(self, monkeypatch): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 541 | def test_bounded_queue_constant(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 575 | def test_flushes_on_batch_size(self, monkeypatch): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 626 | def test_whitespace_only_exits(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 660 | def test_happy_https_with_port_and_path(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 684 | def test_preflight_invokes_url_validation(self, monkeypatch, diag_caplog): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 709 | def test_escapes_embedded_quote(self): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 769 | def _install_nondraining_shipper(self, monkeypatch): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 791 | def test_drop_oldest_keeps_newest(self, monkeypatch, diag_caplog): | CODE |
| LOW | tools/testsuite/test_logtide_ship.py | 854 | def test_queue_recovered_resets_counters(self, monkeypatch, diag_caplog): | CODE |
| LOW | tools/testsuite/test_caddy_log_redaction.py | 38 | def test_example_and_live_logs(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 67 | def test_all_three_resolve_the_same_paths(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 95 | def test_all_three_classify_the_same_paths_as_annotation_sites(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 128 | def test_every_target_file_resolves_identically(self): | CODE |
| LOW⚡ | tools/envref/tests/test_yaml_walkers.py | 166 | def test_tab_before_the_colon_is_a_key_to_both(self): | CODE |
| LOW⚡ | tools/envref/tests/test_yaml_walkers.py | 172 | def test_tab_before_the_colon_still_parents_its_children(self): | CODE |
| LOW⚡ | tools/envref/tests/test_yaml_walkers.py | 179 | def test_tab_indentation_is_not_a_key_line(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 190 | def test_control_lines_do_not_become_paths(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 197 | def test_output_tags_are_left_alone_as_values(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 245 | def test_a_document_marker_after_keys_resets_the_stack(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 259 | def test_a_leading_document_marker_is_still_harmless(self): | CODE |
| LOW | tools/envref/tests/test_yaml_walkers.py | 262 | def test_an_end_of_document_marker_resets_too(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 169 | def test_an_unchanged_tree_passes(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 173 | def test_an_untagged_env_marker_can_be_redated(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 177 | def test_an_untagged_yaml_marker_can_be_redated(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 181 | def test_an_untagged_marker_can_return_to_unreleased(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 190 | def test_a_tagged_env_marker_cannot_change(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 196 | def test_a_tagged_yaml_marker_cannot_change(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 202 | def test_a_tagged_marker_cannot_be_removed(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 209 | def test_a_marker_is_frozen_once_its_tag_exists(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 217 | def test_a_prerelease_tag_does_not_freeze_the_marker(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 224 | def test_no_visible_tags_fails_when_the_base_is_required(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 229 | def test_only_prerelease_tags_counts_as_no_visible_tags(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 234 | def test_no_visible_tags_locally_freezes_every_concrete_marker(self): | CODE |
| LOW⚡ | tools/envref/tests/test_untagged_markers.py | 306 | def test_a_tag_visible_only_on_origin_freezes_a_guessed_marker(self): | CODE |
| 800 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compose.test.yml | 33 | # This file is where test-service images are pinned. The one remaining | COMMENT |
| MEDIUM | spec/unit/onetime/boot/initializer_spec.rb | 289 | # Define a new class - should NOT be in registry | COMMENT |
| MEDIUM | spec/unit/onetime/logic/guest_route_gating_spec.rb | 16 | # Create a test class that includes the module | COMMENT |
| MEDIUM | spec/unit/onetime/logic/require_entitlement_spec.rb | 9 | # This method is defined in Onetime::Logic::Base and is used to gate | COMMENT |
| MEDIUM | …/models/organization/chores/standardize_planid_spec.rb | 21 | # Create a mock logger that accepts SemanticLogger's (message, hash) signature | COMMENT |
| MEDIUM | spec/unit/onetime/operations/domains/remove_spec.rb | 237 | # Create a real, fully-persisted canonical domain and register it for cleanup. | COMMENT |
| MEDIUM | …ain_validation/sender_strategies/base_strategy_spec.rb | 9 | # Create a concrete subclass for testing since BaseStrategy has abstract methods | COMMENT |
| MEDIUM | spec/unit/onetime/jobs/trace_propagation_spec.rb | 30 | # Define a minimal Sentry stub for tests that need it. | COMMENT |
| MEDIUM | spec/unit/onetime/jobs/scheduled_job_spec.rb | 284 | # Define a proper subclass | COMMENT |
| MEDIUM | …ec/unit/onetime/initializers/setup_diagnostics_spec.rb | 33 | # Define a minimal Sentry constant if it doesn't exist to satisfy verify_partial_doubles | COMMENT |
| MEDIUM | spec/unit/billing/plan_validator_spec.rb | 7 | # This module implements catalog-first plan_id validation with fail-closed behavior. | COMMENT |
| MEDIUM | spec/integration/full/postgres_infrastructure_spec.rb | 154 | # Create a test account using elevated connection | COMMENT |
| MEDIUM⚡ | spec/integration/full/password_migration_spec.rb | 151 | # Create a Rodauth account WITHOUT password hash | COMMENT |
| MEDIUM | spec/integration/full/admin_interface_spec.rb | 314 | # Create an admin user | COMMENT |
| MEDIUM | spec/integration/full/admin_interface_spec.rb | 487 | # Create a secret as a regular user | COMMENT |
| MEDIUM | spec/integration/full/admin_interface_spec.rb | 503 | # Create a secret | COMMENT |
| MEDIUM | spec/integration/full/hooks/account_lifecycle_spec.rb | 253 | # Define the methods on the module so verify_partial_doubles is satisfied | COMMENT |
| MEDIUM | …ec/integration/full/database_triggers/postgres_spec.rb | 517 | # Create an active session | COMMENT |
| MEDIUM | spec/integration/all/lazy_organization_creation_spec.rb | 160 | # Create a new customer | COMMENT |
| MEDIUM | spec/integration/all/entitlement_preview_spec.rb | 30 | # Create a mock colonel customer | COMMENT |
| MEDIUM | spec/integration/all/entitlement_preview_spec.rb | 41 | # Create a mock organization | COMMENT |
| MEDIUM | spec/integration/all/config/after_load_spec.rb | 584 | # Define a let block for a base configuration object. | COMMENT |
| MEDIUM | spec/integration/all/jobs/rabbitmq_publishing_spec.rb | 72 | # Create a real connection pool for tests | COMMENT |
| MEDIUM | spec/integration/all/jobs/rabbitmq_publishing_spec.rb | 247 | # Create a pool that will fail | COMMENT |
| MEDIUM | spec/integration/all/jobs/workers/base_worker_spec.rb | 48 | # Create a test worker class that includes both Sneakers::Worker and BaseWorker | COMMENT |
| MEDIUM | …/integration/all/jobs/workers/sneakers_harness_spec.rb | 235 | # Create a test worker class for isolated testing | COMMENT |
| MEDIUM | spec/cli/worker_command_spec.rb | 350 | # Create a mock worker class for testing | COMMENT |
| MEDIUM | spec/cli/cli_spec_helper.rb | 217 | # Create a migration class with methods that can be mocked | COMMENT |
| MEDIUM | spec/support/auth_route_failure_codes.rb | 37 | # This file is shared support (loaded by every lane) and must stay boot-free: | COMMENT |
| MEDIUM | spec/support/factories/auth_account_factory.rb | 51 | # Create a verified account with password | COMMENT |
| MEDIUM | spec/support/factories/auth_account_factory.rb | 81 | # Create an unverified account (pending email verification) | COMMENT |
| MEDIUM | spec/support/factories/auth_account_factory.rb | 152 | # Create an active session for an account | COMMENT |
| MEDIUM | spec/support/helpers/migration_test_helpers.rb | 31 | # Create a fresh database connection for testing migrations | COMMENT |
| MEDIUM | spec/support/helpers/migration_test_helpers.rb | 133 | # Create a database with partial migration state (migrated to specific version) | COMMENT |
| MEDIUM | spec/api/v2/entitlement_enforcement_spec.rb | 156 | # Create a test secret | COMMENT |
| MEDIUM | spec/api/account/get_permissions_spec.rb | 64 | # Create a custom domain for the organization | COMMENT |
| MEDIUM | try/unit/error_handler_try.rb | 90 | # Create a new test key for this test | COMMENT |
| MEDIUM | try/unit/v3_feedback_try.rb | 31 | # Create a customer with anonymous role for testing | COMMENT |
| MEDIUM | try/unit/signup_validation_try.rb | 58 | ## Create a SignupConfig and verify it persists | COMMENT |
| MEDIUM | try/unit/boot/setup_i18n_security_try.rb | 57 | # Create a test class that includes JsonBackend for isolated testing | COMMENT |
| MEDIUM | try/unit/boot/setup_i18n_security_try.rb | 65 | # Create a valid test locale file | COMMENT |
| MEDIUM | …unit/config/config_serializer_tenant_resolution_try.rb | 87 | # Create a test CustomDomain + CustomDomain::SsoConfig for tenant resolution tests. | COMMENT |
| MEDIUM | try/unit/config/passphrase_validation_try.rb | 11 | # Create a mock secret action for testing | COMMENT |
| MEDIUM | try/unit/security/invite_token_validation_try.rb | 37 | # Create a valid pending invitation | COMMENT |
| MEDIUM⚡ | try/unit/auth/organization_header_try.rb | 44 | # Create a third organization the owner is NOT a member of | COMMENT |
| MEDIUM | try/unit/auth/organization_loader_readonly_try.rb | 38 | # Create a second customer WITH an organization (for contrast tests) | COMMENT |
| MEDIUM | try/unit/auth/organization_loader_fallthrough_try.rb | 28 | # Create a custom domain and register it in the display_domain_index index | COMMENT |
| MEDIUM | try/unit/auth/organization_loader_fallthrough_try.rb | 31 | # Create a domain-scoped member who can only access a *different* domain | COMMENT |
| MEDIUM | try/unit/logic/base_try.rb | 29 | # Create a concrete test class since Base is abstract | COMMENT |
| MEDIUM | try/unit/logic/guest_route_gating_try.rb | 43 | # Create a mutable copy of the config | COMMENT |
| MEDIUM | try/unit/logic/guest_route_gating_behavior_try.rb | 46 | # Create a mutable copy of the config | COMMENT |
| MEDIUM | try/unit/logic/secrets/reveal_secret_try.rb | 24 | # Define a lambda to create and return a new receipt instance | COMMENT |
| MEDIUM | try/unit/logic/secrets/generate_secret_try.rb | 64 | ## Create a secret for viewing tests | COMMENT |
| MEDIUM | try/unit/logic/secrets/show_receipt_try.rb | 24 | # Define a lambda to create and return a new receipt instance | COMMENT |
| MEDIUM | try/unit/logic/secrets/show_secret_try.rb | 24 | # Define a lambda to create and return a new receipt instance | COMMENT |
| MEDIUM | try/unit/logic/secrets/show_secret_try.rb | 257 | # Create an unverified owner for verification flow | COMMENT |
| MEDIUM | try/unit/logic/secrets/show_secret_try.rb | 262 | # Create a verification secret | COMMENT |
| MEDIUM | try/unit/logic/account/account_operations_try.rb | 35 | # Create a customer for update tests | COMMENT |
| MEDIUM | try/unit/logic/account/get_permissions_try.rb | 197 | # Create a mock org that returns 0 for limit_for | COMMENT |
| MEDIUM | try/unit/utils/domain_parser_try.rb | 7 | # This module provides centralized hostname parsing and comparison utilities | COMMENT |
| 153 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | locales/scripts/tests/test_i18n_cli.py | 1966 | "placeholder": "{count}", | CODE |
| LOW | locales/db/schema.sql | 91 | 'placeholder', -- Variable/placeholder problems | CODE |
| LOW | spec/unit/onetime/sso_provider/registry_spec.rb | 114 | expect(value).to eq('placeholder'), | CODE |
| LOW | spec/unit/onetime/sso_provider/registry_spec.rb | 115 | "definition #{defn[:key].inspect} placeholder option #{opt} must be 'placeholder'" | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 161 | to_email: { to: 'user@example.com', from: global_from, subject: 'Test', text_body: 'body' }, | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 183 | described_class.deliver(:secret_link, { recipient: 'user@example.com' }, sender_config: mock_sender_config) | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 189 | described_class.deliver(:secret_link, { recipient: 'user@example.com' }) | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 205 | { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' } | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 216 | { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' } | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 227 | { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' } | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 252 | { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' } | CODE |
| LOW | spec/unit/onetime/mail/mailer_spec.rb | 277 | { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' } | CODE |
| LOW | spec/unit/onetime/mail/templates_i18n_spec.rb | 84 | recipient: 'user@example.com', | CODE |
| LOW | spec/unit/onetime/mail/templates_i18n_spec.rb | 121 | let(:data) { { recipient: 'user@example.com' } } | CODE |
| LOW | spec/unit/onetime/mail/templates_i18n_spec.rb | 207 | expect(context.recipient).to eq('user@example.com') | CODE |
| LOW | spec/unit/onetime/mail/templates_i18n_spec.rb | 379 | email_address: 'user@example.com', | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 118 | { 'value' => 'user@example.com', 'reason' => 'hard_bounce' }, | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 120 | { 'value' => '@example.org', 'reason' => 'manual' }, # extension-ish, has @ | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 127 | expect(emails).to include('user@example.com') | CODE |
| LOW | spec/unit/onetime/mail/feedback_spec.rb | 191 | { 'email_address' => 'user@example.com', 'reason' => 'bounce' }, | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 236 | '/suppression/view', { 'email_address' => 'user@example.com' }, | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 242 | { 'email_address' => 'user@example.com', 'reason' => 'spam', | CODE |
| LOW⚡ | spec/unit/onetime/mail/feedback_spec.rb | 248 | result = fetcher.lookup('user@example.com') | CODE |
| LOW | spec/unit/onetime/mail/feedback_spec.rb | 263 | expect(fetcher.lookup('user@example.com')).to eq( | CODE |
| LOW | spec/unit/onetime/mail/feedback_spec.rb | 271 | expect(fetcher.lookup('user@example.com')).to eq( | CODE |
| LOW | spec/unit/onetime/models/sso_link_verification_spec.rb | 20 | email: overrides.fetch(:email, 'user@example.com'), | CODE |
| LOW | spec/unit/onetime/models/sso_link_verification_spec.rb | 57 | expect(loaded.email).to eq('user@example.com') | CODE |
| LOW | spec/unit/onetime/models/sso_link_verification_spec.rb | 84 | expect(issue.to_display).to eq(provider: 'google', email: 'user@example.com') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 29 | stored['user@example.com'] = 'org-a' | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 31 | claims = Onetime::Organization.find_contact_email_claims('user@example.com') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 33 | expect(claims).to eq('user@example.com' => 'org-a') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 40 | claims = Onetime::Organization.find_contact_email_claims('user@example.com') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 47 | stored['user@example.com'] = 'org-a' | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 51 | claims = Onetime::Organization.find_contact_email_claims('user@example.com', exhaustive: true) | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 53 | expect(claims).to eq('user@example.com' => 'org-a', 'User@Example.com' => 'org-b') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 58 | stored['user@example.com'] = 'org-a' | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 61 | claims = Onetime::Organization.find_contact_email_claims('user@example.com') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 63 | expect(claims).to eq('user@example.com' => 'org-a') | CODE |
| LOW⚡ | …etime/models/organization/contact_email_claims_spec.rb | 69 | expect(Onetime::Organization.find_contact_email_holder_id('user@example.com')).to eq('org-a') | CODE |
| LOW | …main/chores/migrate_incoming_secrets_to_config_spec.rb | 206 | { 'email' => 'admin@example.com', 'name' => 'Admin' }, | CODE |
| LOW | spec/unit/onetime/operations/domains/remove_spec.rb | 52 | let(:org) { double('Organization', display_name: 'Acme Inc', remove_domain: nil) } | CODE |
| LOW | spec/unit/onetime/operations/domains/remove_spec.rb | 81 | expect(result.org_name).to eq('Acme Inc') | CODE |
| LOW | …ain_validation/sender_strategies/base_strategy_spec.rb | 1220 | config = double('mailer_config', from_address: 'user@example.com', domain_id: 'cd:1') | CODE |
| LOW | spec/unit/onetime/jobs/publisher_spec.rb | 483 | raw_email = { to: 'user@example.com', from: 'noreply@example.com', subject: 'Test', body: 'Body' } | CODE |
| LOW | spec/unit/onetime/jobs/publisher_spec.rb | 545 | raw_email = { to: 'user@example.com', from: 'noreply@example.com', subject: 'Test', body: 'Body' } | CODE |
| LOW | …netime/jobs/enqueue_email_locale_normalization_spec.rb | 79 | operation.instance_variable_set(:@email, 'user@example.com') | CODE |
| LOW | …netime/jobs/enqueue_email_locale_normalization_spec.rb | 139 | customer = double('Customer', anonymous?: false, email: 'user@example.com', extid: 'ur_user_extid', organization_i | CODE |
| LOW | …netime/jobs/enqueue_email_locale_normalization_spec.rb | 149 | logic.send(:send_feedback, 'admin@example.com', customer, 'hello world') | CODE |
| LOW | spec/integration/full/admin_interface_spec.rb | 51 | email: "user@example.com", | CODE |
| LOW | spec/integration/full/admin_interface_spec.rb | 316 | email: "admin@example.com", | CODE |
| LOW | spec/integration/all/entitlement_preview_spec.rb | 364 | custid: 'user@example.com', | CODE |
| LOW | spec/integration/all/authentication_security_spec.rb | 310 | { login: 'user@example.com', password: nil }, | CODE |
| LOW | spec/integration/all/colonel_host_allowlist_spec.rb | 1201 | [:trusted_peer, 'example.com', { 'HTTP_X_FORWARDED_HOST' => 'user@example.com' }, 404], | CODE |
| LOW | spec/integration/all/colonel_host_allowlist_spec.rb | 1211 | [:heuristic_peer, 'example.com', { 'HTTP_X_ORIGINAL_HOST' => 'user@example.com' }, 404], | CODE |
| LOW⚡ | spec/integration/all/mail/template_rendering_spec.rb | 922 | organization_name: 'Acme Inc', | CODE |
| LOW⚡ | spec/integration/all/mail/template_rendering_spec.rb | 928 | organization_name: 'Acme Inc', | CODE |
| LOW⚡ | spec/integration/all/mail/template_rendering_spec.rb | 929 | removed_by: 'admin@example.com', | CODE |
| LOW⚡ | spec/integration/all/mail/template_rendering_spec.rb | 933 | organization_name: 'Acme Inc', | CODE |
| LOW⚡ | spec/integration/all/mail/template_rendering_spec.rb | 934 | deleted_by: 'admin@example.com', | CODE |
| LOW | …tegration/all/operations/dispatch_notification_spec.rb | 60 | email: 'user@example.com', | CODE |
| 527 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/testsuite/verify-sentry-build.sh | 59 | # Check if we're in the project root | COMMENT |
| LOW | docker/entrypoints/entrypoint.sh | 35 | # Set PORT to the existing value or default to 3000 | COMMENT |
| LOW | docker/entrypoints/entrypoint.sh | 79 | # Check if BUNDLE_INSTALL is set to "true" (case-insensitive) | COMMENT |
| LOW | docker/entrypoints/entrypoint.sh | 130 | # Check if no arguments were provided to the script | COMMENT |
| LOW | locales/scripts/export-and-commit.sh | 74 | # Check if there are actual changes | COMMENT |
| LOW | locales/scripts/branch-per-locale.sh | 80 | # Check if branch already exists | COMMENT |
| LOW | locales/scripts/i18n/commands/store.py | 318 | # Check if this is a SELECT query | STRING |
| LOW⚡ | locales/scripts/i18n/commands/validate.py | 604 | # Print results | COMMENT |
| LOW | locales/scripts/i18n/commands/validate.py | 379 | # Check if English file exists | COMMENT |
| LOW | locales/scripts/i18n/commands/validate.py | 1030 | # Output results | COMMENT |
| LOW | etc/defaults/config.defaults.yaml | 896 | # Set either to 0 to disable that bound. enabled:false disables both. | COMMENT |
| LOW | spec/integration/full/advanced_auth_mode_spec.rb | 298 | # Check if session cookie is set | COMMENT |
| LOW | spec/integration/full/password_migration_spec.rb | 166 | # Check if password hash exists for account | COMMENT |
| LOW | spec/integration/full/pending_federation_spec.rb | 198 | # Set subscription_period_end to past (expired) | COMMENT |
| LOW | spec/integration/full/hooks/account_deletion_spec.rb | 172 | # Check if we have active sessions (may not always be created) | COMMENT |
| LOW | spec/integration/all/jobs/rabbitmq_publishing_spec.rb | 45 | # Check if RabbitMQ is available before running tests | COMMENT |
| LOW | spec/support/auth_mode_helpers.rb | 414 | # Check if a mock is currently installed | COMMENT |
| LOW | spec/support/postgres_mode_suite_database.rb | 60 | # Check if PostgreSQL is available for testing | COMMENT |
| LOW | spec/support/postgres_mode_suite_database.rb | 89 | # Check if PostgreSQL is available - return early if not (specs will be skipped) | COMMENT |
| LOW | spec/support/postgres_mode_suite_database.rb | 288 | # Check if we need elevated privileges for migrations | COMMENT |
| LOW | spec/support/helpers/migration_test_helpers.rb | 100 | # Check if a table exists in the database | COMMENT |
| LOW | spec/support/helpers/migration_test_helpers.rb | 363 | # Check if PostgreSQL functions exist (migration 003) | COMMENT |
| LOW | spec/support/helpers/migration_test_helpers.rb | 376 | # Check if PostgreSQL triggers exist (migration 004) | COMMENT |
| LOW | spec/support/helpers/migration_test_helpers.rb | 389 | # Check if PostgreSQL views exist (migration 005) | COMMENT |
| LOW | scripts/corporate-branch-report.sh | 98 | # Check if merge base matches a branch tip (like develop) | COMMENT |
| LOW | scripts/corporate-branch-report.sh | 142 | # Check if we have any branches to show | COMMENT |
| LOW | scripts/corporate-branch-report.sh | 176 | # Check if b1's commits are a prefix of b2's commits (b1 is subsumed by b2) | COMMENT |
| LOW | scripts/validate_display_domain_index.rb | 102 | # Check if domain object exists | COMMENT |
| LOW | scripts/validate_display_domain_index.rb | 145 | # Check if this domain has a corresponding index entry | COMMENT |
| LOW | scripts/validate_org_domain_membership.rb | 108 | # Check if domain hash exists at all | COMMENT |
| LOW | scripts/validate_org_domain_membership.rb | 155 | # Check if the referenced organization actually exists | COMMENT |
| LOW | scripts/validate_org_domain_membership.rb | 162 | # Check if domain is in the org's ZSET | COMMENT |
| LOW | scripts/build-and-deploy.py | 546 | # Check if this revision has a build config | COMMENT |
| LOW | scripts/corporate-branch-report.py | 151 | # Check if any branch points to this commit | COMMENT |
| LOW | .github/workflows/debug-oci.yml | 129 | # Check if container is still running | COMMENT |
| LOW | .github/scripts/detect-ci-flags.sh | 40 | # Output results | COMMENT |
| LOW | .github/scripts/update-version.sh | 88 | # Check if jq is available | COMMENT |
| LOW | .github/scripts/compute-path-filter-outputs.sh | 84 | # Output results | COMMENT |
| LOW | .github/actions/wait-for-http-service/action.yml | 135 | # Check if status matches expectation | COMMENT |
| LOW | try/unit/error_handler_try.rb | 67 | @redis.expire(@test_key, 1000) # Set TTL to 1000 seconds | CODE |
| LOW | try/unit/config/passphrase_validation_try.rb | 43 | # Check if passphrase is required | COMMENT |
| LOW | try/unit/config/passphrase_options_try.rb | 12 | ## Check if site config exists | COMMENT |
| LOW | try/unit/config/passphrase_options_try.rb | 20 | ## Check if passphrase config exists | COMMENT |
| LOW | try/unit/mail/templates/subscription_changed_try.rb | 18 | # Check if billing is enabled - tests require it | COMMENT |
| LOW | try/unit/mail/templates/trial_expiring_try.rb | 18 | # Check if billing is enabled - tests require it | COMMENT |
| LOW⚡ | try/unit/models/organization/member_debug_try.rb | 32 | ## Check if customer was added to org.members | COMMENT |
| LOW⚡ | try/unit/models/organization/member_debug_try.rb | 36 | ## Check if customer.objid is in org.members (using wrapper that handles serialization) | COMMENT |
| LOW⚡ | try/unit/models/organization/member_debug_try.rb | 40 | ## Check if org has add_members_instance method | COMMENT |
| LOW | try/integration/check_jobqueue_live_try.rb | 25 | # Check if RabbitMQ is available | COMMENT |
| LOW | try/integration/auth/internal_request_hook_proof_try.rb | 43 | # Check if account was created in SQL | COMMENT |
| LOW | try/integration/auth/internal_request_hook_proof_try.rb | 53 | # Check if Customer was created in Redis (by the hook) | COMMENT |
| LOW | try/integration/api/invite/show_invite_enriched_try.rb | 190 | # Set invited_at to 8 days ago to trigger expiration (default TTL is 7 days) | COMMENT |
| LOW⚡ | try/support/test_helpers.rb | 267 | # Check if the request has an authenticated user in session | COMMENT |
| LOW⚡ | try/support/test_helpers.rb | 272 | # Check if authentication strategy just executed and succeeded | COMMENT |
| LOW⚡ | try/support/test_helpers.rb | 277 | # Check if the request is anonymous (no user in session) | COMMENT |
| LOW⚡ | try/support/test_helpers.rb | 282 | # Check if the user has a specific role | COMMENT |
| LOW | try/support/test_helpers.rb | 299 | # Check if the user has a specific permission | COMMENT |
| LOW | try/support/test_helpers.rb | 319 | # Check if the user has any of the specified roles | COMMENT |
| LOW | try/support/test_helpers.rb | 324 | # Check if the user has any of the specified permissions | COMMENT |
| LOW⚡ | try/support/auth_mode_config.rb | 24 | # Check if authentication is completely disabled | COMMENT |
| 263 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 13 | # Usage: | COMMENT |
| LOW | .pre-push-config.yaml | 15 | # Usage: | COMMENT |
| LOW | tools/testsuite/run.sh | 8 | # Usage: | COMMENT |
| LOW | tools/testsuite/verify-sentry-build.sh | 13 | # Usage: | COMMENT |
| LOW | tools/testsuite/lib/assert.sh | 28 | # Usage: | COMMENT |
| LOW | …ols/envref/src/envref/sh/config-version-archaeology.sh | 42 | # Usage: | COMMENT |
| LOW | tools/testsuite-installer/proof-of-life.sh | 26 | # Usage: | COMMENT |
| LOW | tools/testsuite-installer/run.sh | 23 | # Usage: | COMMENT |
| LOW | tools/testsuite-installer/secret-rotation.sh | 24 | # Usage: | COMMENT |
| LOW | tools/testsuite-installer/baremetal-boot.sh | 31 | # Usage: | COMMENT |
| LOW | tools/host-seam/release-sweep.sh | 25 | # Usage: | COMMENT |
| LOW | tools/host-seam/host-seam.sh | 5 | # Usage: | COMMENT |
| LOW | tools/host-seam/topology-probe.sh | 40 | # Usage: | COMMENT |
| LOW | docker/bake.hcl | 4 | # Usage: | COMMENT |
| LOW | docker/s6/build.sh | 5 | # Usage: | COMMENT |
| LOW | docker/entrypoints/entrypoint.sh | 6 | # Usage: | COMMENT |
| LOW | locales/scripts/derive-governance.sh | 16 | # Usage: | COMMENT |
| LOW | locales/scripts/export-and-commit.sh | 8 | # Usage: | COMMENT |
| LOW | locales/scripts/export-all.sh | 36 | # Usage: | COMMENT |
| LOW⚡ | locales/scripts/review-locale-branches.sh | 12 | # Usage: | COMMENT |
| LOW | locales/scripts/pr-per-locale.sh | 23 | # Usage: | COMMENT |
| LOW | locales/scripts/branch-per-locale.sh | 6 | # Usage: | COMMENT |
| LOW | locales/scripts/create-all.sh | 33 | # Usage: | COMMENT |
| LOW | spec/integration/integration_spec_helper.rb | 103 | # Usage: | COMMENT |
| LOW | spec/support/postgres_setup_check.rb | 10 | # Usage: | COMMENT |
| LOW | spec/support/postgres_mode_suite_database.rb | 27 | # Usage: | COMMENT |
| LOW | spec/support/full_mode_suite_database.rb | 21 | # Usage: | COMMENT |
| LOW | spec/support/amqp_stubs.rb | 11 | # Usage: | COMMENT |
| LOW | spec/support/shared_contexts/rack_test_context.rb | 8 | # Usage: | COMMENT |
| LOW | spec/support/shared_contexts/clean_auth_state.rb | 24 | # Usage: | COMMENT |
| LOW | spec/support/shared_contexts/auth_rack_test_context.rb | 10 | # Usage: | COMMENT |
| LOW | spec/support/shared_contexts/view_test_context.rb | 8 | # Usage: | COMMENT |
| LOW | spec/support/factories/auth_account_factory.rb | 13 | # Usage: | COMMENT |
| LOW | spec/support/helpers/migration_test_helpers.rb | 19 | # Usage: | COMMENT |
| LOW | spec/support/shared_examples/auth_routes_examples.rb | 7 | # Usage: | COMMENT |
| LOW | spec/support/puma_integration/server_helper.rb | 8 | # Usage: | COMMENT |
| LOW | scripts/check-shell-lint.sh | 23 | # Usage: | COMMENT |
| LOW | scripts/validate_display_domain_index.rb | 18 | # Usage: | COMMENT |
| LOW | scripts/validate_org_domain_membership.rb | 19 | # Usage: | COMMENT |
| LOW | scripts/update-file-headers.rb | 8 | # Usage: | COMMENT |
| LOW | scripts/favicon_gen.rb | 12 | # Usage: | COMMENT |
| LOW | scripts/adr-lint.rb | 6 | # Usage: | COMMENT |
| LOW | scripts/detect_phantom_receipts.rb | 26 | # Usage: | COMMENT |
| LOW | scripts/validate_orphan_domain_zset_leaks.rb | 17 | # Usage: | COMMENT |
| LOW | .github/scripts/aggregate-test-results.sh | 8 | # Usage: | COMMENT |
| LOW | .github/scripts/detect-ci-flags.sh | 9 | # Usage: | COMMENT |
| LOW | .github/scripts/clean_databases.rb | 7 | # Usage: | COMMENT |
| LOW | .github/scripts/update-version.sh | 5 | # Usage: | COMMENT |
| LOW | .github/scripts/generate-test-summary.sh | 8 | # Usage: | COMMENT |
| LOW | .github/actions/generate-test-secrets/action.yml | 31 | # Usage: | COMMENT |
| LOW⚡ | .github/actions/test-docker-container/action.yml | 12 | # Usage: | COMMENT |
| LOW | .github/actions/run-test-lane/action.yml | 21 | # Usage: | COMMENT |
| LOW | .github/actions/setup-node-env/action.yml | 24 | # Usage: | COMMENT |
| LOW⚡ | .github/actions/download-frontend-assets/action.yml | 13 | # Usage: | COMMENT |
| LOW⚡ | .github/actions/wait-for-http-service/action.yml | 13 | # Usage: | COMMENT |
| LOW | .github/actions/setup-ruby-test-env/action.yml | 28 | # Usage: | COMMENT |
| LOW | .github/actions/build-and-publish-oci-image/action.yml | 16 | # Usage: | COMMENT |
| LOW | try/scripts/lettermint_api_explore.rb | 12 | # Usage: | COMMENT |
| LOW | try/disabled/experimental/approximated_try_manually.rb | 12 | # Usage: | COMMENT |
| LOW | lib/middleware/i18n_locale.rb | 19 | # Usage: | COMMENT |
| 158 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .pre-commit-config.yaml | 49 | # Use 'system' to leverage existing rbenv/nvm installations from PATH, | COMMENT |
| MEDIUM | tools/testsuite/sentry-preflight-test.sh | 100 | # The negative control for the scrub itself. If the harness leaked an ambient | COMMENT |
| MEDIUM | tools/setup/lib.sh | 242 | # @playwright/test for executablePath() exactly as the harness does. | COMMENT |
| MEDIUM | tools/testsuite-installer/run.sh | 5 | # Tier-1 clean-room harness (install-onboarding testing-strategy §2). Runs a | COMMENT |
| MEDIUM | tools/testsuite-installer/run.sh | 30 | # needs no container); this is the installer-matrix harness. | COMMENT |
| MEDIUM | tools/testsuite-installer/secret-rotation.sh | 5 | # SECRET-rotation harness lane (install-onboarding C10 §5). Proves the | COMMENT |
| MEDIUM | tests/browser/saml_callback_spec.rb | 43 | # A normally completed harness has already closed its whole group. | COMMENT |
| MEDIUM | tests/browser/saml_callback_spec.rb | 121 | # rubocop:disable-next RSpec/SpecFilePathFormat -- The browser lane owns this named transport harness. | COMMENT |
| MEDIUM | tests/browser/saml_callback_spec.rb | 133 | config.request_validation_phase = nil # Initiation CSRF is outside this transport harness. | CODE |
| MEDIUM | etc/defaults/config.defaults.yaml | 459 | # deployment (and the e2e test harness) that genuinely serves plain HTTP in | COMMENT |
| MEDIUM | etc/defaults/config.defaults.yaml | 773 | # colonel may elevate with factor=recent_auth and no credential. DEFAULT 0 = | COMMENT |
| MEDIUM | spec/spec_helper.rb | 35 | # Test harness for Onetime. | COMMENT |
| MEDIUM | spec/unit/auth/password_modification_gate_spec.rb | 21 | # Onetime::Customer, and only this harness connects Familia for unit specs. | COMMENT |
| MEDIUM | spec/unit/lanes/codegen_phase_spec.rb | 10 | # Regression harness for the runner-owned codegen phase in tests/lanes/run. | COMMENT |
| MEDIUM | spec/unit/lanes/isolation_key_spec.rb | 12 | # Regression harness for the datastore isolation key in tests/lanes/run. | COMMENT |
| MEDIUM | spec/unit/lanes/run_all_spec.rb | 32 | # whatever the harness happens to carry. | COMMENT |
| MEDIUM | spec/unit/lanes/hermetic_boundary_spec.rb | 10 | # Regression harness for the hermetic boundary in tests/lanes/run. | COMMENT |
| MEDIUM | spec/unit/lanes/hermetic_boundary_spec.rb | 387 | # cleared SHLVL, so a runner whose stdin is a socket (an agent harness, an | COMMENT |
| MEDIUM | spec/unit/lanes/quiet_log_floor_spec.rb | 8 | # Regression harness for the app-log floor `tests/lanes/run --quiet` sets. | COMMENT |
| MEDIUM | spec/unit/lanes/ownership_spec.rb | 123 | # harness lane has none, so this is the serial command of every task). | COMMENT |
| MEDIUM | spec/unit/onetime/mail/provider_registry_spec.rb | 162 | # empty hash, but the key-level check must stay robust to a builder | COMMENT |
| MEDIUM | …/models/organization/with_organization_billing_spec.rb | 18 | # The predicate harness: the smallest object the status predicates read. | COMMENT |
| MEDIUM | …ime/models/custom_domain/update_display_domain_spec.rb | 46 | # Sanity checks — expected GREEN (proves the harness works) | COMMENT |
| LOW | …t/onetime/jobs/workers/dns_record_check_worker_spec.rb | 16 | # reject! are Sneakers methods that just return symbols; asserting on the | COMMENT |
| MEDIUM | …/onetime/jobs/workers/domain_validation_worker_spec.rb | 170 | # empty hash, but the key-level guard must stay robust to a builder | COMMENT |
| MEDIUM | spec/integration/integration_spec_helper.rb | 27 | # Parse Redis URI once at configuration time for robust port checking | COMMENT |
| MEDIUM⚡ | spec/integration/full/hooks/account_lifecycle_spec.rb | 422 | # sweep (this rack-test harness commits for real, so after_commit fires | COMMENT |
| MEDIUM | spec/integration/all/config/after_load_spec.rb | 593 | # `config` object. This helps make tests more robust against | COMMENT |
| MEDIUM | spec/integration/all/initializers/boot_part1_spec.rb | 93 | # If not, ensure test config for :dbs is comprehensive or mock Familia.members. | COMMENT |
| MEDIUM | spec/cli/billing/sync_org_command_spec.rb | 230 | # Containment scope decision (PR #3924 review): sweep robust, single-org | COMMENT |
| MEDIUM | spec/support/auth_mode_helpers.rb | 169 | # NoMethodError that reads as a harness break rather than a config error. | COMMENT |
| MEDIUM | spec/api/v1/auth_status_header_spec.rb | 19 | # test harness that simulates the controller context. | COMMENT |
| MEDIUM⚡ | .github/workflows/installer.yml | 4 | # Runs the Tier-1 clean-room harness (bin/testsuite-installer run) in CI — the | COMMENT |
| MEDIUM | .github/workflows/installer.yml | 62 | # Docker is preinstalled on ubuntu runners; the harness does the rest | COMMENT |
| MEDIUM | .github/workflows/installer.yml | 164 | # macOS ships bash 3.2. The setup entrypoint and the harness scripts | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 136 | # The lane runner's own specs (the harness lane, a second step of | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 224 | # The lane runner's own specs, spec/unit/lanes (the harness lane, | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 582 | # The lane runner's own specs (spec/unit/lanes, tests/lanes/harness): | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 585 | # only when a path they exercise changed (the harness filter in the | COMMENT |
| MEDIUM | .github/scripts/compute-path-filter-outputs.sh | 31 | # ruby, typescript, frontend, oci, harness, auth, billing_nightly, ga_workflow_files | COMMENT |
| MEDIUM | try/unit/error_handler_try.rb | 6 | # The ErrorHandler provides robust error handling for non-critical operations | COMMENT |
| MEDIUM | try/unit/middleware/admin_network_isolation_try.rb | 540 | ## harness writes otto.client_ip by hand and no closure — a shape the otto mount | COMMENT |
| MEDIUM | try/unit/middleware/admin_network_isolation_try.rb | 542 | ## precision only because the harness wrote it that way. In a real no-middleware | COMMENT |
| MEDIUM | try/unit/auth/auth_org_immutability_try.rb | 54 | # A thin harness that includes OrganizationContext the same way | COMMENT |
| MEDIUM | try/unit/auth/organization_loader_fallthrough_try.rb | 16 | # Build a test harness that includes OrganizationLoader so we can call | COMMENT |
| MEDIUM | …models/organization/pending_invitations_cleanup_try.rb | 216 | # If comprehensive cleanup is needed, a separate issue should address cleanup | COMMENT |
| LOW | try/unit/models/custom_domain/migration_setup_try.rb | 5 | # Minimal test - just create customers and orgs, no domains | COMMENT |
| MEDIUM | try/unit/cli/billing/sync_org_command_try.rb | 184 | # Containment scope decision (PR #3924 review): sweep robust, single-org | COMMENT |
| MEDIUM | try/integration/api/domains/put_signin_config_try.rb | 8 | # Uses the same harness pattern as update_domain_brand_validate_try.rb. | COMMENT |
| MEDIUM | try/integration/api/colonel/elevation_try.rb | 12 | # verb with nothing but a colonel session, get 403 elevation_required, elevate | COMMENT |
| MEDIUM | try/integration/api/colonel/elevation_try.rb | 196 | ## Exactly one colonel.elevate event, carrying the FACTOR so the weaker path | COMMENT |
| MEDIUM | try/integration/api/colonel/elevation_try.rb | 200 | #=> [1, "colonel.elevate", "#{@colonel.extid}", "#{@colonel.extid}"] | COMMENT |
| MEDIUM | try/integration/api/colonel/bfla_colonel_authz_try.rb | 109 | # middleware try to read a nil rack.input (a harness artifact, not an app authz | COMMENT |
| MEDIUM | try/support/test_helpers.rb | 507 | # Print test harness banner showing billing and auth state | COMMENT |
| MEDIUM | lib/onetime/error_handler.rb | 7 | # Provides robust error handling for non-critical operations, particularly | COMMENT |
| LOW | lib/onetime/session.rb | 990 | # The TTL is the one this method just set, not a second read of it. | COMMENT |
| MEDIUM | lib/onetime/security/colonel_rate_limiter.rb | 46 | # only, no elevation — so a peer need not elevate to free you. | COMMENT |
| MEDIUM | lib/onetime/utils/strings.rb | 148 | # mail gem's Address parser for robust email handling. | COMMENT |
| LOW | lib/onetime/refinements/stripe_refinements.rb | 76 | # on it, otherwise we'll just return the value as-is. | COMMENT |
| LOW | lib/onetime/models/custom_domain.rb | 508 | # we can simply call `fobj.to_s`. In both cases the result is the unqiue | COMMENT |
| 57 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 189 | # Step 2: Create Rodauth account WITHOUT password hash | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 198 | # Step 3: POST to /auth/login with Redis password | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 204 | # Step 4: Verify login succeeds (200 or 3xx redirect) | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 208 | # Step 5: Verify password hash now exists in account_password_hashes | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 620 | # Step 1: GET the signin page to establish a session and receive HTML | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 629 | # Step 2: Parse the HTML to extract shrimp from __BOOTSTRAP_ME__ | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 639 | # Step 3: POST /signin with session cookie + extracted shrimp | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 649 | # Step 4: Assert NOT 403 -- the token from the page must be accepted | COMMENT |
| LOW | …specs/custom-mail-sender/custom-mail-sender-smtp2go.md | 196 | ### Step 1: Add a Sender Domain | COMMENT |
| LOW | …specs/custom-mail-sender/custom-mail-sender-smtp2go.md | 233 | ### Step 2: Verify the Sender Domain | COMMENT |
| LOW | …specs/custom-mail-sender/custom-mail-sender-smtp2go.md | 275 | # Step 1: Add the sender domain | COMMENT |
| LOW | …specs/custom-mail-sender/custom-mail-sender-smtp2go.md | 286 | # Step 2: Verify the domain (once DNS propagated) | COMMENT |
| LOW⚡ | docs/runbooks/duplicate-plans-on-plans-page.md | 43 | ### Step 1: Verify Stripe product metadata | COMMENT |
| LOW⚡ | docs/runbooks/duplicate-plans-on-plans-page.md | 50 | ### Step 2: Re-sync with --clear | COMMENT |
| LOW⚡ | docs/runbooks/duplicate-plans-on-plans-page.md | 58 | ### Step 3: Verify | COMMENT |
| LOW | docs/runbooks/raw-email-field-serialization.md | 49 | ### Step 1: Repair the 10 records | COMMENT |
| LOW | docs/runbooks/raw-email-field-serialization.md | 57 | ### Step 2: Verify | COMMENT |
| LOW⚡ | scripts/validate_orphan_domain_zset_leaks.rb | 57 | # Step 1: Find all domains with nil/empty org_id | COMMENT |
| LOW⚡ | scripts/validate_orphan_domain_zset_leaks.rb | 60 | # Step 2: Scan all org domain ZSETs for leaked orphans | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 385 | # Step 1: Request email change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 391 | # Step 2: Retrieve the token from pending_email_change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 394 | # Step 3: Confirm email change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 622 | # Step 1: request phase in simple mode (no Rodauth dependency) | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 629 | # Step 2: confirm phase with full mode + stubbed SQLite DB | COMMENT |
| LOW⚡ | try/api/v1/receipt_hsh_state_translation_try.rb | 133 | # Step 1: initial state after creation (new) | COMMENT |
| LOW⚡ | try/api/v1/receipt_hsh_state_translation_try.rb | 135 | # Step 2: after revealed! transition | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 863 | # Step 1: Serialize session data to JSON | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 873 | # Step 2: Encrypt with AES-256-GCM | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 883 | # Step 3: Base64 encode (for safe storage of binary encrypted data) | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 892 | # Step 4: Compute HMAC signature for integrity verification | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 905 | # Step 5: Get or create StringKey for this session | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 908 | # Step 6: Save to Redis | COMMENT |
| LOW | lib/onetime/session.rb | 919 | # Step 7: Update expiration if configured. StringKey#set has already | COMMENT |
| LOW | …e/mail/sender_strategies/lettermint_sender_strategy.rb | 389 | # WARNING: This implementation does not handle pagination. If the account | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 66 | # Step 1: the credential watermark, via the same single-field fast-writer | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 81 | # Step 2: durable async full sweep (#3810). The worker honors the | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 96 | # Step 3: immediate guaranteed kill of every OTHER tracked session blob — | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 82 | # Step 1: Create vhost via Management API | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 85 | # Step 2: Set permissions | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 88 | # Step 3: Declare exchanges and queues via AMQP | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 91 | # Step 4: Apply DLQ policies via Management API | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 90 | # Step 2: Verify provider supports provisioning | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 98 | # Step 3: Load platform credentials | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 102 | # Step 4: Select strategy | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 105 | # Step 5: Call strategy.provision_dns_records | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 125 | # Step 6: Handle strategy result | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 134 | # Step 7: Extract and normalize DNS records | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 138 | # Step 8: Store result in mailer_config and save if persist enabled | COMMENT |
| LOW | lib/onetime/operations/provision_sender_domain.rb | 77 | # Step 1: Validate mailer_config has required fields | COMMENT |
| LOW | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 78 | # Step 1: Collect all existing hash keys for this prefix. | COMMENT |
| LOW⚡ | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 90 | # Step 2: Collect all current instances members | COMMENT |
| LOW⚡ | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 96 | # Step 3: Compute diff | COMMENT |
| LOW⚡ | lib/onetime/session/rotation.rb | 228 | # Step 1: end the old id before touching anything. A marker that cannot | COMMENT |
| LOW⚡ | lib/onetime/session/rotation.rb | 236 | # Step 2: the completed hand-off fields, remembered so they can be put | COMMENT |
| LOW | lib/onetime/session/rotation.rb | 253 | # Step 3: the old id must be marked and its blob gone. | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 264 | // Step 1: Navigate to Default Workspace dashboard | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 278 | // Step 2: Navigate to A Second Organization's page via URL | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 309 | // Step 3: Navigate back to Default Workspace dashboard | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 364 | // Step 1: Navigate to Default Workspace's organization page (domains tab is default) | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 383 | // Step 2: Navigate directly to A Second Organization's page via URL (domains tab is default) | COMMENT |
| 61 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 189 | # Step 2: Create Rodauth account WITHOUT password hash | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 198 | # Step 3: POST to /auth/login with Redis password | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 204 | # Step 4: Verify login succeeds (200 or 3xx redirect) | COMMENT |
| LOW⚡ | spec/integration/full/password_migration_spec.rb | 208 | # Step 5: Verify password hash now exists in account_password_hashes | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 620 | # Step 1: GET the signin page to establish a session and receive HTML | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 629 | # Step 2: Parse the HTML to extract shrimp from __BOOTSTRAP_ME__ | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 639 | # Step 3: POST /signin with session cookie + extracted shrimp | COMMENT |
| LOW⚡ | spec/integration/all/csrf_enforcement_spec.rb | 649 | # Step 4: Assert NOT 403 -- the token from the page must be accepted | COMMENT |
| LOW⚡ | scripts/validate_orphan_domain_zset_leaks.rb | 57 | # Step 1: Find all domains with nil/empty org_id | COMMENT |
| LOW⚡ | scripts/validate_orphan_domain_zset_leaks.rb | 60 | # Step 2: Scan all org domain ZSETs for leaked orphans | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 385 | # Step 1: Request email change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 391 | # Step 2: Retrieve the token from pending_email_change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 394 | # Step 3: Confirm email change | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 622 | # Step 1: request phase in simple mode (no Rodauth dependency) | COMMENT |
| LOW⚡ | try/unit/logic/account/email_change_try.rb | 629 | # Step 2: confirm phase with full mode + stubbed SQLite DB | COMMENT |
| LOW⚡ | try/api/v1/receipt_hsh_state_translation_try.rb | 133 | # Step 1: initial state after creation (new) | COMMENT |
| LOW⚡ | try/api/v1/receipt_hsh_state_translation_try.rb | 135 | # Step 2: after revealed! transition | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 863 | # Step 1: Serialize session data to JSON | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 873 | # Step 2: Encrypt with AES-256-GCM | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 883 | # Step 3: Base64 encode (for safe storage of binary encrypted data) | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 892 | # Step 4: Compute HMAC signature for integrity verification | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 905 | # Step 5: Get or create StringKey for this session | COMMENT |
| LOW⚡ | lib/onetime/session.rb | 908 | # Step 6: Save to Redis | COMMENT |
| LOW | lib/onetime/session.rb | 919 | # Step 7: Update expiration if configured. StringKey#set has already | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 66 | # Step 1: the credential watermark, via the same single-field fast-writer | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 81 | # Step 2: durable async full sweep (#3810). The worker honors the | COMMENT |
| LOW⚡ | …/onetime/logic/credential_change_session_revocation.rb | 96 | # Step 3: immediate guaranteed kill of every OTHER tracked session blob — | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 82 | # Step 1: Create vhost via Management API | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 85 | # Step 2: Set permissions | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 88 | # Step 3: Declare exchanges and queues via AMQP | COMMENT |
| LOW⚡ | lib/onetime/cli/queue/init_command.rb | 91 | # Step 4: Apply DLQ policies via Management API | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 90 | # Step 2: Verify provider supports provisioning | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 98 | # Step 3: Load platform credentials | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 102 | # Step 4: Select strategy | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 105 | # Step 5: Call strategy.provision_dns_records | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 125 | # Step 6: Handle strategy result | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 134 | # Step 7: Extract and normalize DNS records | COMMENT |
| LOW⚡ | lib/onetime/operations/provision_sender_domain.rb | 138 | # Step 8: Store result in mailer_config and save if persist enabled | COMMENT |
| LOW | lib/onetime/operations/provision_sender_domain.rb | 77 | # Step 1: Validate mailer_config has required fields | COMMENT |
| LOW | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 78 | # Step 1: Collect all existing hash keys for this prefix. | COMMENT |
| LOW⚡ | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 90 | # Step 2: Collect all current instances members | COMMENT |
| LOW⚡ | …me/jobs/scheduled/maintenance/instances_rebuild_job.rb | 96 | # Step 3: Compute diff | COMMENT |
| LOW⚡ | lib/onetime/session/rotation.rb | 228 | # Step 1: end the old id before touching anything. A marker that cannot | COMMENT |
| LOW⚡ | lib/onetime/session/rotation.rb | 236 | # Step 2: the completed hand-off fields, remembered so they can be put | COMMENT |
| LOW | lib/onetime/session/rotation.rb | 253 | # Step 3: the old id must be marked and its blob gone. | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 264 | // Step 1: Navigate to Default Workspace dashboard | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 278 | // Step 2: Navigate to A Second Organization's page via URL | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 309 | // Step 3: Navigate back to Default Workspace dashboard | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 364 | // Step 1: Navigate to Default Workspace's organization page (domains tab is default) | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 383 | // Step 2: Navigate directly to A Second Organization's page via URL (domains tab is default) | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 469 | // Step 1: Navigate to Default Workspace dashboard | COMMENT |
| LOW | e2e/full/domains-store-org-cache.spec.ts | 485 | // Step 2: Navigate to A Second Organization | COMMENT |
| LOW⚡ | e2e/full/domain-sso-multi-provider.spec.ts | 361 | // Step 1: Open SSO modal for domain A and configure Entra ID | COMMENT |
| LOW⚡ | e2e/full/domain-sso-multi-provider.spec.ts | 367 | // Step 2: Open SSO modal for domain B and configure Generic OIDC | COMMENT |
| LOW⚡ | e2e/full/domain-sso-multi-provider.spec.ts | 373 | // Step 3: Verify both domains appear in org SSO hub | COMMENT |
| LOW⚡ | e2e/full/cross-org-domain-isolation.spec.ts | 375 | // Step 1: Navigate to OrgA (domains tab is default) | COMMENT |
| LOW⚡ | e2e/full/cross-org-domain-isolation.spec.ts | 385 | // Step 2: Navigate to OrgB via URL (domains tab is default) | COMMENT |
| LOW | e2e/full/cross-org-domain-isolation.spec.ts | 403 | // Step 3: Navigate back to OrgA (domains tab is default) | COMMENT |
| LOW⚡ | e2e/full/domain-sso-config.spec.ts | 896 | // Step 1: Open SSO modal for domain A | COMMENT |
| LOW⚡ | e2e/full/domain-sso-config.spec.ts | 899 | // Step 2: Configure Entra ID for domain A | COMMENT |
| 46 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | locales/scripts/derive-governance.sh | 8 | # generated/i18n/ — never committed. The translation orchestration reads | COMMENT |
| MEDIUM⚡ | locales/scripts/review-locale-branches.sh | 9 | # The agent orchestration and triage stages live in the slash command | COMMENT |
| MEDIUM | locales/scripts/pr-per-locale.sh | 337 | # Cap the diff so a huge export can't blow up the context window. | COMMENT |
| MEDIUM | etc/defaults/logging.defaults.yaml | 24 | # Workers - RabbitMQ worker message processing and orchestration | COMMENT |
| MEDIUM | etc/defaults/logging.defaults.yaml | 81 | Workers: info # RabbitMQ worker message processing and orchestration # Since v0.24.0 | CODE |
| MEDIUM | spec/unit/auth/confirm_sso_link_spec.rb | 9 | # Unit tests for Auth::Operations::ConfirmSsoLink — the orchestration step of the | COMMENT |
| MEDIUM | …els/features/with_plan_entitlements_standalone_spec.rb | 13 | # These tests reuse the FakeSet/FakeHashKey scaffold from | COMMENT |
| MEDIUM | …netime/operations/email/sync_provider_feedback_spec.rb | 8 | # Unit tests for the sync orchestration: provider selection, the fetch -> | COMMENT |
| MEDIUM | spec/cli/org_delete_command_spec.rb | 11 | # guardrails themselves and the audit event are the op's job and are covered | COMMENT |
| MEDIUM | …install-onboarding/install-onboarding-problem-space.md | 114 | | Onboarding empty-state dashboard | `DashboardEmpty.vue` (#2088) | CODE |
| MEDIUM | docs/specs/colonel-ui/spec-session-performance.md | 96 | The expectations spec's stated precondition is already satisfied. Revocation is authoritative server-side — blob deletio | CODE |
| MEDIUM | scripts/build-and-deploy.py | 359 | # ─── Build orchestration ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/migration-tests.yml | 19 | # - The concurrent-boot job is deliberately NOT a lane: it orchestrates five | COMMENT |
| MEDIUM⚡ | .github/workflows/migration-tests.yml | 171 | # processes against a scratch database — gating/orchestration policy that | COMMENT |
| MEDIUM | lib/onetime/audited_failure.rb | 287 | # failure to mask the original exception. Bulk orchestration uses this to | COMMENT |
| MEDIUM | lib/onetime/mail/feedback/base.rb | 21 | # Fetchers are read-only and provider-specific; the orchestration (which | COMMENT |
| MEDIUM | lib/onetime/cli/worker_command.rb | 32 | # Semantic exit codes for scripting and orchestration | COMMENT |
| MEDIUM | lib/onetime/cli/customers/doctor_command.rb | 28 | # this command owns orchestration (scan-all, output formatting, exit codes). The | COMMENT |
| MEDIUM | lib/onetime/operations/validate_sender_domain.rb | 14 | # This operation orchestrates the verification flow: | COMMENT |
| MEDIUM | lib/onetime/operations/org/delete.rb | 574 | # Domain and subscription guardrails above remain independent and cannot | COMMENT |
| MEDIUM | apps/web/auth/README-roda.md | 138 | ├── commands/ # Command objects (validation + orchestration) | CODE |
| MEDIUM | apps/web/auth/README-rodauth.md | 78 | ├── config.rb # 150 lines - Core config + orchestration | CODE |
| MEDIUM | apps/web/auth/operations/confirm_sso_link.rb | 12 | # (#3840 Phase 4). This is the orchestration step for the passwordless linking | COMMENT |
| MEDIUM | apps/web/auth/operations/customers/doctor.rb | 19 | # thin adapter: it owns orchestration (scan-all, output formatting, exit | COMMENT |
| MEDIUM | apps/web/auth/operations/customers/purge_preflight.rb | 73 | # bypass the default/last-org guardrails. | COMMENT |
| MEDIUM | apps/web/billing/spec/cli/catalog_sync_command_spec.rb | 8 | # These specs verify step orchestration, option forwarding, abort-on-failure, | COMMENT |
| MEDIUM | …/billing/spec/operations/process_webhook_event_spec.rb | 7 | # This file tests orchestration behavior: unhandled events, context options. | COMMENT |
| MEDIUM | …s/spec/logic/organizations/delete_organization_spec.rb | 18 | # The teardown itself, the guardrails and the audit event belong to the op and | COMMENT |
| MEDIUM | …ganizations/logic/organizations/delete_organization.rb | 26 | # The op's guardrails now apply to customers too, and two of them are new | COMMENT |
| MEDIUM | …colonel/spec/logic/colonel/delete_organization_spec.rb | 9 | # Adapter-layer coverage only. The teardown, the guardrails and the single | COMMENT |
| MEDIUM | apps/api/colonel/logic/colonel/delete_organization.rb | 23 | # guardrails, the teardown, the `default_org_id` repair, the member | COMMENT |
| MEDIUM | …ps/workspace/account/settings/OrganizationSettings.vue | 324 | // Delete guardrails mirrored from Onetime::Operations::Org::Delete. The | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/testsuite/run-test-lane-action-test.sh | 203 | except Exception as error: # noqa: BLE001 - report every case | CODE |
| MEDIUM | tools/testsuite/run-test-lane-action-test.sh | 199 | def register(function): | CODE |
| MEDIUM | locales/scripts/interpolate-product-name.py | 162 | print(f"Error: locale directory not found: {locale_dirs[0]}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 170 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 173 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 182 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 185 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 194 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 197 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 206 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 209 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 218 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | locales/scripts/i18n/commands/store.py | 221 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | locales/scripts/i18n/commands/store.py | 237 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | locales/scripts/i18n/commands/store.py | 240 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | locales/scripts/i18n/commands/store.py | 252 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | locales/scripts/i18n/commands/store.py | 255 | print(f"Error: {e}", file=sys.stderr) | STRING |
| MEDIUM | locales/scripts/i18n/commands/store.py | 566 | print(f"Error importing {sql_file.name}: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/tasks.py | 1140 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/tasks.py | 1367 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/tasks.py | 1370 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/tasks.py | 1590 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | locales/scripts/i18n/commands/tasks.py | 1593 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/tasks.py | 516 | print(f"Error: English directory not found: {EN_DIR}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/tasks.py | 1297 | print(f"Error reading file: {e}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/tasks.py | 1321 | print(f"Error: Task {args.task_id} not found", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/tasks.py | 2134 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/tasks.py | 1070 | def _next_handler(args) -> int: | CODE |
| LOW⚡ | locales/scripts/i18n/commands/tasks.py | 1592 | except Exception as e: | CODE |
| LOW | locales/scripts/i18n/commands/tasks.py | 1296 | except Exception as e: | CODE |
| MEDIUM | locales/scripts/i18n/commands/validate.py | 160 | print(f"Error running git diff: {e}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/validate.py | 1002 | print(f"Error: Source locale not found: {source_dir}", file=sys.stderr) | CODE |
| MEDIUM | locales/scripts/i18n/commands/validate.py | 1009 | print(f"Error: Locale not found: {args.locale}", file=sys.stderr) | CODE |
| LOW | locales/scripts/i18n/commands/validate.py | 176 | except Exception as e: | CODE |
| LOW | locales/scripts/i18n/commands/validate.py | 405 | except Exception as e: | CODE |
| MEDIUM | locales/scripts/i18n/commands/content.py | 454 | print(f"Error in {locale}: {e}", file=sys.stderr) | CODE |
| LOW | docs/architecture/build-architecture.md | 200 | except Exception: | CODE |
| LOW | scripts/logtide-ship.py | 87 | except Exception: | CODE |
| LOW | scripts/logtide-ship.py | 703 | except Exception as e: | CODE |
| LOW | scripts/logtide-ship.py | 764 | except Exception: | CODE |
| LOW | scripts/logtide-ship.py | 779 | except Exception: | CODE |
| LOW | scripts/logtide-ship.py | 807 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/testsuite/test_caddy_log_redaction.py | 38 | CODE | |
| LOW | tools/envref/tests/test_untagged_markers.py | 555 | CODE | |
| LOW | tools/envref/tests/test_untagged_markers.py | 640 | CODE | |
| LOW | tools/envref/tests/test_untagged_markers.py | 711 | CODE | |
| LOW | tools/envref/tests/test_untagged_markers.py | 736 | CODE | |
| LOW | tools/envref/tests/test_cli.py | 48 | CODE | |
| LOW | tools/envref/tests/test_cli.py | 96 | CODE | |
| LOW | tools/envref/src/envref/annotate.py | 453 | CODE | |
| LOW | tools/envref/src/envref/cli.py | 43 | CODE | |
| LOW | tools/envref/src/envref/versionmap.py | 336 | CODE | |
| LOW | tools/envref/src/envref/versionmap.py | 448 | CODE | |
| LOW | tools/envref/src/envref/docsgen.py | 388 | CODE | |
| LOW | tools/host-seam/proxy-wire.py | 112 | CODE | |
| LOW | tools/host-seam/proxy-wire.py | 161 | CODE | |
| LOW | locales/scripts/interpolate-product-name.py | 90 | CODE | |
| LOW | locales/scripts/i18n/io.py | 76 | CODE | |
| LOW | locales/scripts/i18n/io.py | 238 | CODE | |
| LOW | locales/scripts/i18n/commands/store.py | 338 | CODE | |
| LOW | locales/scripts/i18n/commands/store.py | 495 | CODE | |
| LOW | locales/scripts/i18n/commands/tasks.py | 494 | CODE | |
| LOW | locales/scripts/i18n/commands/tasks.py | 1070 | CODE | |
| LOW | locales/scripts/i18n/commands/tasks.py | 1278 | CODE | |
| LOW | locales/scripts/i18n/commands/tasks.py | 1427 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 131 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 180 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 483 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 705 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 895 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 943 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 1059 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 1112 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 1228 | CODE | |
| LOW | locales/scripts/i18n/commands/content.py | 603 | CODE | |
| LOW | locales/scripts/i18n/commands/content.py | 849 | CODE | |
| LOW | locales/scripts/i18n/commands/content.py | 917 | CODE | |
| LOW | scripts/build-and-deploy.py | 530 | CODE | |
| LOW | scripts/corporate-branch-report.py | 238 | CODE | |
| LOW | scripts/corporate-branch-report.py | 305 | CODE | |
| LOW | scripts/logtide-ship.py | 661 | CODE | |
| LOW | scripts/logtide-ship.py | 720 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/envref/tests/test_untagged_markers.py | 527 | except ProcessLookupError: | CODE |
| HIGH | tools/envref/tests/test_untagged_markers.py | 614 | except ProcessLookupError: | CODE |
| HIGH | tools/envref/src/envref/cli.py | 77 | except ProcessLookupError: | CODE |
| HIGH | scripts/logtide-ship.py | 685 | except Empty: | CODE |
| HIGH | scripts/logtide-ship.py | 779 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/envref/src/envref/versionmap.py | 735 | log(" Run: git fetch --unshallow && git fetch --tags") | CODE |
| HIGH | locales/scripts/interpolate-product-name.py | 346 | print(" cd locales/scripts && python build/compile.py --all --merged --output-dir ../../generated/locales") | CODE |
| HIGH | locales/scripts/i18n/commands/content.py | 221 | # Null value (field present, value is null) | COMMENT |
| HIGH | scripts/build-and-deploy.py | 11 | mkdir -p /opt/builds && chown <hook-user>:<hook-user> /opt/builds | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/testsuite/test_logtide_ship.py | 13 | CODE | |
| LOW | tools/envref/tests/test_marker_contract.py | 18 | CODE | |
| LOW | locales/tests/test_generate_tasks.py | 8 | CODE | |
| LOW | locales/tests/test_generate_tasks.py | 13 | CODE | |
| LOW | locales/tests/test_generate_tasks.py | 13 | CODE | |
| LOW | locales/scripts/register-coverage.py | 45 | CODE | |
| LOW | locales/scripts/tests/test_derive_governance.py | 23 | CODE | |
| LOW | locales/scripts/tests/test_register_coverage.py | 26 | CODE | |
| LOW | locales/scripts/tests/test_i18n_cli.py | 24 | CODE | |
| LOW | locales/scripts/i18n/console.py | 14 | CODE | |
| LOW | locales/scripts/i18n/db.py | 23 | CODE | |
| LOW | locales/scripts/i18n/config.py | 21 | CODE | |
| LOW | locales/scripts/i18n/io.py | 10 | CODE | |
| LOW | locales/scripts/i18n/tokens.py | 23 | CODE | |
| LOW | locales/scripts/i18n/cli.py | 10 | CODE | |
| LOW | locales/scripts/i18n/commands/store.py | 14 | CODE | |
| LOW | locales/scripts/i18n/commands/tasks.py | 18 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 19 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 34 | CODE | |
| LOW | locales/scripts/i18n/commands/validate.py | 34 | CODE | |
| LOW | locales/scripts/i18n/commands/content.py | 22 | CODE | |
| LOW | scripts/build-and-deploy.py | 72 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …m_domain/chores/remove_orphaned_approximated_vhosts.rb | 288 | proxy_host = features.proxy_host.to_s.strip.downcase.chomp('.') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | eslint.config.ts | 526 | // uncomment the next line to enable it (don't forget to import it at the | COMMENT |
| MEDIUM | apps/web/billing/cli/webhooks_command.rb | 163 | # This is a basic implementation - in production you'd want a secondary index | COMMENT |
| LOW | apps/web/billing/cli/prices_generate_command.rb | 88 | puts '# Make sure to replace PRODUCT_ID with actual Stripe product ID' | CODE |
| MEDIUM | src/shared/components/ui/MovingGlobules.vue | 11 | [`clipPath`]() value with a transition. Here's how you can modify the code: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | lib/onetime/models/features/right_to_be_forgotten.rb | 23 | # Marks the customer account as requested for destruction. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/envref/src/envref/textio.py | 23 | __all__ = ["read_text"] | CODE |
| LOW | tools/envref/src/envref/__init__.py | 9 | __all__ = ["UsageError"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/testsuite/test_logtide_ship.py | 63 | def handle_request(self, request): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | locales/scripts/i18n/tokens.py | 125 | CODE |