Open Source AI Platform - AI Chat with advanced features that works with every LLM
This report summarizes scanner evidence for onyx-dot-app/onyx, a Python project with 32,392 GitHub stars. SynthScan examined 1,751,141 lines of code across 8069 source files, recording 25324 pattern matches distributed across 27 syntactic categories. The legacy adjusted pattern signal is 17.9 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 18940 finding(s).
Are imports declared and package/API names verified? 2884 finding(s).
Are wrappers, guards, and repeated structures necessary? 20356 finding(s).
Which changes need focused human review? 25324 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 25324 distinct pattern matches across 27 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 346 | def test_chat_auto_without_knob_answers_directly() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 351 | def test_dr_clarification_always_calls_generate_plan() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 357 | def test_dr_plan_call_is_plain_text() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 363 | def test_dr_orchestrator_first_cycle_spawns_research_agents() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 427 | def test_forced_specific_tool_is_honored() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 436 | def test_max_tokens_caps_answer_length() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_mock_llm.py | 442 | def test_maxctx_rejects_oversized_prompt_with_context_error() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 142 | def assistant_tool_calls_message(name: str, arguments: str = "{}") -> dict[str, Any]: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 156 | def test_plain_chat_no_tools_streams_text_with_stop() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 168 | def test_tool_choice_none_forces_text_even_with_tools() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 175 | def test_query_rephrase_flow_echoes_user_text() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 201 | def test_rephrase_echo_excludes_prompt_scaffolding() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 231 | def test_search_tool_argument_uses_the_question() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 251 | def test_search_tool_argument_survives_message_padding() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 267 | def test_normal_answer_is_filler_not_echo() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 275 | def test_chat_auto_with_tools_knob_emits_internal_search_with_queries_array() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 293 | def test_multi_tool_knob_emits_parallel_retrieval_calls() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 306 | def test_multi_tool_knob_caps_at_offered_retrieval_tools() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 319 | def test_tools_knob_count_is_honored() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 330 | def test_chat_auto_after_tool_result_streams_final_answer() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 377 | def test_dr_orchestrator_second_cycle_generates_report() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 396 | def test_dr_research_agent_searches_then_reports() -> None: | CODE |
| LOW | tools/loadtest/tests/test_mock_llm.py | 460 | def test_maxctx_allows_small_prompt() -> None: | CODE |
| LOW | tools/loadtest/tests/test_exporter.py | 26 | def get_current_response_time_percentile(self, _pct: float) -> float | None: | CODE |
| LOW | tools/loadtest/tests/test_exporter.py | 29 | def get_response_time_percentile(self, pct: float) -> float: | CODE |
| LOW | tools/loadtest/tests/test_exporter.py | 53 | def test_collector_emits_locust_metrics() -> None: | CODE |
| LOW | tools/loadtest/tests/test_exporter.py | 79 | def test_collector_no_runner_is_empty() -> None: | CODE |
| LOW | tools/loadtest/tests/test_stream_parser.py | 21 | def test_captures_reserved_assistant_message_id() -> None: | CODE |
| LOW | tools/loadtest/tests/test_stream_parser.py | 36 | def test_message_id_absent_is_none() -> None: | CODE |
| LOW | tools/loadtest/tests/test_stream_parser.py | 48 | def test_milestones_fire_once_in_order() -> None: | CODE |
| LOW | tools/loadtest/tests/test_stream_parser.py | 61 | def test_error_packet_marks_failure() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_messages.py | 14 | def test_corpus_is_large_and_unique() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_messages.py | 20 | def test_corpus_varies_in_length() -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_messages.py | 28 | def test_messages_file_overrides_corpus(tmp_path, monkeypatch) -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_messages.py | 36 | def test_empty_messages_file_is_an_error(tmp_path, monkeypatch) -> None: | CODE |
| LOW⚡ | tools/loadtest/tests/test_messages.py | 45 | def test_default_corpus_used_without_override(monkeypatch) -> None: | CODE |
| LOW⚡ | tools/i18n/test_check_copy_changes.py | 52 | def test_unchanged_copy_passes(self) -> None: | CODE |
| LOW⚡ | tools/i18n/test_check_copy_changes.py | 55 | def test_requires_the_same_key_in_every_locale(self) -> None: | CODE |
| LOW⚡ | tools/i18n/test_check_copy_changes.py | 64 | def test_updated_translations_pass(self) -> None: | CODE |
| LOW⚡ | tools/i18n/test_check_copy_changes.py | 70 | def test_missing_new_key_fails(self) -> None: | CODE |
| LOW⚡ | tools/i18n/test_check_copy_changes.py | 75 | def test_branch_base_checks_committed_copy(self) -> None: | CODE |
| LOW | tools/i18n/test_check_copy_changes.py | 91 | def test_new_locale_has_no_previous_translation(self) -> None: | CODE |
| LOW | tools/i18n/test_check_copy_changes.py | 98 | def test_push_range_checks_copy_before_an_unrelated_commit(self) -> None: | CODE |
| LOW | tools/i18n/test_check_copy_changes.py | 126 | def test_clean_checkout_with_committed_translations_passes(self) -> None: | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/reflect-method.ts | 28 | export function isGlobalReflectMethodCall( | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 157 | function isEffectivelyEmptyTypeLiteral(type: ESTree.TSTypeLiteral): boolean { | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 163 | function isEffectivelyEmptyInterface( | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 176 | function resolvedSubstitutionArgument( | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 372 | export function classifyUnsafeDictionaryValue( | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 567 | export function isPopulatedObjectExpression( | CODE |
| LOW | web/tools/oxlint/anti-slop/shared/dictionary-types.ts | 582 | export function isKnownEvidenceExpression( | CODE |
| LOW | …ols/oxlint/anti-slop/shared/lexical-type-parameters.ts | 14 | function collectInferTypeParameterNames( | CODE |
| LOW | …ols/oxlint/anti-slop/shared/lexical-type-parameters.ts | 36 | export function lexicalTypeParameterNames( | CODE |
| LOW | …b/tools/oxlint/anti-slop/rules/no-widen-then-assert.ts | 18 | function unwrapExpressionParentheses( | CODE |
| LOW | …b/tools/oxlint/anti-slop/rules/no-widen-then-assert.ts | 163 | function isDefinitelyNarrowerRecordType(type: ESTree.TSType): boolean { | CODE |
| LOW | …b/tools/oxlint/anti-slop/rules/no-widen-then-assert.ts | 195 | function resolvedVariableForIdentifier( | CODE |
| LOW | …s/oxlint/anti-slop/rules/no-chained-type-assertions.ts | 6 | function isTypeAssertionExpression( | CODE |
| LOW | …s/oxlint/anti-slop/rules/no-chained-type-assertions.ts | 12 | function unwrapParenthesizedExpression( | CODE |
| LOW | …s/oxlint/anti-slop/rules/no-chained-type-assertions.ts | 31 | function isOutermostAssertionInChain(node: TypeAssertionExpression): boolean { | CODE |
| LOW | …s/oxlint/anti-slop/rules/no-chained-type-assertions.ts | 46 | function isForbiddenAssertionChain(node: TypeAssertionExpression): boolean { | CODE |
| 16721 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | web/tests/e2e/global-setup.ts | 248 | // ── Preflight check ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/global-setup.ts | 251 | // ── Provision test users via API ───────────────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/global-setup.ts | 270 | // ── Login via API and save storage state ─────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/chat/welcome_page.spec.ts | 28 | // ── Full-page screenshot ────────────────────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/chat/welcome_page.spec.ts | 41 | // ── Input bar element screenshot ────────────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/chat/welcome_page.spec.ts | 52 | // ── Sidebar element screenshot ──────────────────────────────────── | COMMENT |
| MEDIUM | web/tests/e2e/chat/welcome_page.spec.ts | 63 | // ── Content assertions ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/buttons/link-button/LinkButton.stories.tsx | 14 | // ─── Anchor mode ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/buttons/link-button/LinkButton.stories.tsx | 44 | // ─── Button mode ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/buttons/link-button/LinkButton.stories.tsx | 54 | // ─── Disabled ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/buttons/link-button/LinkButton.stories.tsx | 76 | // ─── Tooltip ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/buttons/link-button/LinkButton.stories.tsx | 105 | // ─── Inline in prose ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/lib/opal/src/components/cards/card/Card.stories.tsx | 114 | // ─── Expandable mode ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 76 | // ─── DisplayNameField ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 102 | // ─── APIKeyField ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 140 | // ─── APIBaseField ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 199 | // ─── ModelsAccessField ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 440 | // ─── RefetchButton ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 485 | // ─── ModelsField ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 489 | // ─── Model metadata helpers (Nebius TokenFactory picker) ──────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/shared.tsx | 998 | // ─── ModalWrapper ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/utils.ts | 23 | // ─── useInitialValues ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/utils.ts | 74 | // ─── buildValidationSchema ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/utils.ts | 126 | // ─── Form value types ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/utils.ts | 170 | // ─── mergeFetchedModelConfigurations ────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/utils.ts | 219 | // ─── Misc ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 18 | // ─── Test helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 98 | // ─── Submit provider ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 142 | // ── Test credentials ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 204 | // ── Create/update provider ────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 230 | // ── Set as default ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/svc.ts | 257 | // ── Post-success ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/CustomModal.tsx | 51 | // ─── Model Configuration List ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/CustomModal.tsx | 221 | // ─── Provider Name Select ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/sections/modals/languageModels/CustomModal.tsx | 251 | // ─── Custom Config Processing ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rc/app/craft/v1/apps/admin/ActionPolicyEditorModal.tsx | 267 | // ── Policy editor ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/packetTypes.ts | 18 | // ─── Raw Packet Field Access ───────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/packetTypes.ts | 64 | // ─── Parsed Packet Types (Discriminated Union) ────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 62 | // ── Local dev (sandboxes + sessions) ──────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 88 | // ── Kubernetes (sessions only) ────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 104 | // ── Already relative ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/pathSanitizer.test.ts | 116 | // ── Title field (no leading /) ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/pathSanitizer.test.ts | 126 | // ── Fallback (unknown format, >3 segments) ────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/pathSanitizer.test.ts | 134 | // ── Short paths ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 154 | // ── Bash commands ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 172 | // ── Output listings ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 190 | // ── No paths — passthrough ────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/pathSanitizer.test.ts | 198 | // ── Error messages ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 686 | // ── Command (freeform → sanitizePathsInText) ────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 693 | // ── Description ─────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 703 | // ── Output (freeform → sanitizePathsInText) ─────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 707 | // ── Title ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 710 | // ── Status ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 713 | // ── Todo-specific ───────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 716 | // ── Task-specific ───────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 721 | // ── Skill detection ─────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | web/src/app/craft/utils/parsePacket.ts | 728 | // ── Subagent routing (from ACP _meta) ───────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/parsePacket.ts | 132 | // ─── Skill Detection ────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/parsePacket.ts | 177 | // ─── Tool Name Resolution ───────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/app/craft/utils/parsePacket.ts | 267 | // ─── Shared Helpers ─────────────────────────────────────────────── | COMMENT |
| 1361 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/ods/internal/openapi/openapi_schema.py | 39 | print(f"Error: Failed to import required modules: {e}", file=sys.stderr) | CODE |
| LOW | tools/ods/internal/openapi/openapi_schema.py | 74 | except Exception as e: # noqa: BLE001 | CODE |
| MEDIUM | tools/ods/internal/openapi/openapi_schema.py | 75 | print(f"Error generating OpenAPI schema: {e}", file=sys.stderr) | CODE |
| LOW | tools/loadtest/onyx_client/chat_user.py | 225 | except Exception as exc: | CODE |
| LOW | tools/loadtest/scenarios/health_probe.py | 75 | except Exception as exc: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 112 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 251 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 265 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 312 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 343 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 452 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 629 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/vespa/tasks.py | 93 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 136 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 276 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 312 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 404 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 433 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 581 | except Exception: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 708 | except Exception as e: | CODE |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 817 | except Exception as e: | CODE |
| LOW | …ckground/celery/tasks/sso_domain_revalidation/tasks.py | 32 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/hooks/tasks.py | 34 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 45 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 64 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 120 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 137 | except Exception: | CODE |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 208 | except Exception: | CODE |
| LOW | …e/onyx/background/celery/tasks/ttl_management/tasks.py | 124 | except Exception: | CODE |
| LOW | …e/onyx/background/celery/tasks/ttl_management/tasks.py | 146 | except Exception: | CODE |
| LOW | …e/onyx/background/celery/tasks/ttl_management/tasks.py | 200 | except Exception: | CODE |
| LOW | …/onyx/background/celery/tasks/license_reclaim/tasks.py | 41 | except Exception as e: | CODE |
| LOW | …/onyx/background/celery/tasks/license_reclaim/tasks.py | 57 | except Exception as e: | CODE |
| LOW | …/onyx/background/celery/tasks/license_reclaim/tasks.py | 78 | except Exception as e: | CODE |
| MEDIUM | …/onyx/background/celery/tasks/license_reclaim/tasks.py | 37 | def _idle_rounds() -> int: | CODE |
| LOW⚡ | …x/background/celery/tasks/tenant_provisioning/tasks.py | 103 | except Exception: | CODE |
| LOW⚡ | …x/background/celery/tasks/tenant_provisioning/tasks.py | 113 | except Exception: | CODE |
| LOW⚡ | …x/background/celery/tasks/tenant_provisioning/tasks.py | 119 | except Exception: | CODE |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 164 | except Exception: | CODE |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 245 | except Exception: | CODE |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 253 | except Exception: | CODE |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 266 | except Exception: | CODE |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 272 | except Exception: | CODE |
| LOW | …ee/onyx/background/celery/tasks/query_history/tasks.py | 89 | except Exception: | CODE |
| LOW | …ee/onyx/background/celery/tasks/query_history/tasks.py | 119 | except Exception: | CODE |
| LOW | backend/ee/onyx/feature_flags/posthog_provider.py | 53 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/feature_flags/posthog_provider.py | 71 | except Exception as e: | CODE |
| LOW | …d/ee/onyx/external_permissions/post_query_censoring.py | 72 | except Exception as e: | CODE |
| LOW | …x/external_permissions/microsoft_utils/entra_groups.py | 89 | except Exception as e: | CODE |
| LOW | …x/external_permissions/microsoft_utils/entra_groups.py | 106 | except Exception as e: | CODE |
| LOW | …x/external_permissions/microsoft_utils/entra_groups.py | 125 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/external_permissions/jira/group_sync.py | 102 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/external_permissions/github/doc_sync.py | 62 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/external_permissions/github/doc_sync.py | 78 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/external_permissions/github/doc_sync.py | 132 | except Exception as e: | CODE |
| LOW | backend/ee/onyx/external_permissions/github/utils.py | 63 | except Exception as e: | CODE |
| LOW | …/ee/onyx/external_permissions/confluence/group_sync.py | 119 | except Exception: | CODE |
| LOW | …e/onyx/external_permissions/confluence/space_access.py | 73 | except Exception as e: | CODE |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 108 | except Exception: | CODE |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 131 | except Exception as e: | CODE |
| 1573 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/ods/cmd/release_prefixed_tag_test.go | 101 | gittest.Git(t, work, "config", "user.email", "test@test.com") | CODE |
| LOW | tools/ods/internal/gittest/gittest.go | 77 | Git(t, work, "config", "user.email", "test@test.com") | CODE |
| LOW | tools/ods/internal/git/git_test.go | 30 | r.Git("config", "user.email", "test@test.com") | CODE |
| LOW | tools/loadtest/scenarios/file_attachment.py | 34 | unit = b"Onyx load-test attachment payload. Lorem ipsum dolor sit. " * 18 | CODE |
| LOW | web/tools/oxlint/i18n/rules/no-raw-jsx-text.ts | 6 | "placeholder", | CODE |
| LOW | web/tests/README.md | 225 | await user.type(screen.getByLabelText(/name/i), "John Doe"); | CODE |
| LOW | web/tests/README.md | 540 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | web/tests/README.md | 546 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …e/admin/connector/credentialed_connector_setup.spec.ts | 33 | confluence_access_token: "placeholder", | CODE |
| LOW | …e/admin/connector/credentialed_connector_setup.spec.ts | 98 | confluence_access_token: "placeholder", | CODE |
| LOW | …e/admin/connector/credentialed_connector_setup.spec.ts | 99 | confluence_refresh_token: "placeholder", | CODE |
| LOW | web/lib/opal/src/components/dropdown/types.ts | 169 | | "placeholder" | CODE |
| LOW | …src/components/inputs/input-list/InputList.stories.tsx | 40 | "admin@example.com", | CODE |
| LOW | …src/components/inputs/input-list/InputList.stories.tsx | 41 | "user@example.com", | CODE |
| LOW | web/lib/opal/src/components/inputs/dropdowns/types.ts | 56 | "onChange" | "value" | "placeholder" | "readOnly" | CODE |
| LOW | …b/lib/opal/src/layouts/inputs/InputLayouts.stories.tsx | 47 | <MockInput placeholder="Acme Corp" /> | CODE |
| LOW | …b/lib/opal/src/layouts/inputs/InputLayouts.stories.tsx | 62 | <MockInput placeholder="Acme Corp" /> | CODE |
| LOW | …b/lib/opal/src/layouts/inputs/InputLayouts.stories.tsx | 174 | <MockInput placeholder="Jane Doe" /> | CODE |
| LOW | …/sections/oauth-provider/OAuthProviderConsent.test.tsx | 14 | account_email: "user@example.com", | CODE |
| LOW | …pp/craft/v1/apps/admin/ConfigureProviderModal.test.tsx | 355 | author_email: "admin@example.com", | CODE |
| LOW | …pp/craft/v1/apps/admin/ConfigureProviderModal.test.tsx | 356 | owner: { id: "admin-id", email: "admin@example.com" }, | CODE |
| LOW | …/app/craft/v1/apps/admin/CreateCustomAppModal.test.tsx | 209 | author_email: "admin@example.com", | CODE |
| LOW | …/app/craft/v1/apps/admin/CreateCustomAppModal.test.tsx | 210 | owner: { id: "admin-id", email: "admin@example.com" }, | CODE |
| LOW | …app/craft/components/approvals/PayloadView.stories.tsx | 77 | company: "Acme Corp", | CODE |
| LOW | web/src/refresh-components/Chip.stories.tsx | 22 | children: "John Doe", | CODE |
| LOW | web/src/refresh-components/form/FormField.stories.tsx | 33 | <InputTypeIn placeholder="Jane Doe" /> | CODE |
| LOW | web/src/refresh-components/buttons/Tag.stories.tsx | 85 | label="John Doe" | CODE |
| LOW | …esh-components/texts/ExpandableTextDisplay.stories.tsx | 30 | `Line ${i + 1}: Lorem ipsum dolor sit amet, consectetur adipiscing elit.` | CODE |
| LOW | …esh-components/texts/ExpandableTextDisplay.stories.tsx | 30 | `Line ${i + 1}: Lorem ipsum dolor sit amet, consectetur adipiscing elit.` | CODE |
| LOW | …/lib/languageModels/components/SimpleModelSelector.tsx | 210 | placeholder={t("placeholder")} | CODE |
| LOW | web/src/lib/auth/components.test.tsx | 257 | "user@example.com" | CODE |
| LOW | web/src/lib/skills/__fixtures__/picker.ts | 90 | owner: "admin@example.com", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 3943 | "placeholder": "描述该文档集代表的内容" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 3947 | "placeholder": "搜索联合连接器…" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 3951 | "placeholder": "文档集的名称", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7620 | "placeholder": "客户端 ID" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7625 | "placeholder": "客户端密钥" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7634 | "placeholder": "添加作用域（例如 openid）" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7727 | "placeholder": "IT 工单" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7731 | "placeholder": "使用 Markdown 编写的答案。示例:如需 IT 团队的帮助,请发送邮件至 internalsupport@company.com" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7735 | "placeholder": "工单 问题 故障" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7739 | "placeholder": "输入类别并按 Enter…" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7982 | "placeholder": "聊天页脚内容" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7985 | "placeholder": "聊天页眉内容" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 7988 | "placeholder": "欢迎使用 Acme Chat" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 10313 | "placeholder": "今天 {appName} 能为您做些什么" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 10323 | "placeholder": "输入您的 API 密钥" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 10333 | "placeholder": "输入您的 {field}" | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13670 | "placeholder": "选择有效期", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13674 | "placeholder": "为 token 命名", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13682 | "placeholder": "选择权限", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13950 | "placeholder": "描述您希望系统如何表现，以及应使用的语气。", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13956 | "placeholder": "您的姓名", | CODE |
| LOW⚡ | web/src/i18n/messages/zh.json | 13966 | "placeholder": "您的职位", | CODE |
| LOW | web/src/i18n/messages/zh.json | 140 | "placeholder": "关于该 MCP 服务器的更多详情", | CODE |
| LOW | web/src/i18n/messages/zh.json | 155 | "placeholder": "为 MCP 服务器命名", | CODE |
| LOW | web/src/i18n/messages/zh.json | 199 | "placeholder": "在此输入您的 OpenAPI 架构", | CODE |
| LOW | web/src/i18n/messages/zh.json | 314 | "placeholder": "选择方式", | CODE |
| LOW | web/src/i18n/messages/zh.json | 372 | "placeholder": "选择模式" | CODE |
| LOW | web/src/i18n/messages/zh.json | 384 | "placeholder": "组织共享的 API 密钥" | CODE |
| 2203 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/hooks/pre_commit_on_stop.py | 100 | except (subprocess.CalledProcessError, KeyError): | CODE |
| HIGH | backend/ee/onyx/server/license/api.py | 179 | except Exception: | CODE |
| HIGH | backend/ee/onyx/server/tenants/proxy.py | 198 | except Exception: | CODE |
| HIGH | backend/ee/onyx/server/billing/service.py | 125 | except Exception: | CODE |
| HIGH | backend/tests/external_dependency_unit/full_setup.py | 58 | except Exception: | CODE |
| HIGH | …end/tests/external_dependency_unit/indexing_helpers.py | 190 | except Exception: | CODE |
| HIGH | …ts/external_dependency_unit/document_index/conftest.py | 169 | except KvKeyNotFoundError: | CODE |
| HIGH | …ts/external_dependency_unit/llm/test_prompt_caching.py | 598 | except OSError: | CODE |
| HIGH | …ckend/tests/external_dependency_unit/craft/conftest.py | 75 | except Exception: | CODE |
| HIGH | …ckend/tests/external_dependency_unit/craft/conftest.py | 287 | except Exception: | CODE |
| HIGH | …ency_unit/sandbox_proxy/test_identity_docker_lookup.py | 163 | except (NotFound, APIError): | CODE |
| HIGH | …ency_unit/sandbox_proxy/test_identity_docker_lookup.py | 121 | except (NotFound, APIError): | CODE |
| HIGH | …al_dependency_unit/chat/test_lazy_chat_file_loading.py | 113 | except Exception: | CODE |
| HIGH | …l_dependency_unit/chat/test_build_python_chat_files.py | 83 | except Exception: | CODE |
| HIGH | …er/enterprise_settings/test_custom_analytics_script.py | 39 | except Exception: | CODE |
| HIGH | …er/enterprise_settings/test_custom_analytics_script.py | 49 | except Exception: | CODE |
| HIGH | …l_dependency_unit/opensearch/test_opensearch_client.py | 195 | except Exception: | CODE |
| HIGH | …l_dependency_unit/opensearch/test_opensearch_client.py | 226 | except Exception: | CODE |
| HIGH | …unit/file_store/test_postgres_file_store_non_mocked.py | 64 | except Exception: | CODE |
| HIGH | …pendency_unit/file_store/test_file_store_non_mocked.py | 398 | except (OSError, AttributeError): | CODE |
| HIGH | …nit/file_store/test_staging_concurrent_attempt_skip.py | 206 | except Exception: | CODE |
| HIGH | …nit/file_store/test_staging_concurrent_attempt_skip.py | 152 | except Exception: | CODE |
| HIGH | …ncy_unit/server/security/test_security_settings_put.py | 93 | except KvKeyNotFoundError: | CODE |
| HIGH | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 80 | except RuntimeError: | CODE |
| HIGH | …nal_dependency_unit/db/test_port_metadata_defer_e2e.py | 212 | except Exception: | CODE |
| HIGH | …ests/external_dependency_unit/db/test_port_flow_e2e.py | 420 | except Exception: | CODE |
| HIGH | …external_dependency_unit/db/test_index_reclaim_task.py | 383 | except Exception: | CODE |
| HIGH | …external_dependency_unit/db/test_index_reclaim_task.py | 432 | except Exception: | CODE |
| HIGH | …dency_unit/indexing/test_docfetching_orphan_cleanup.py | 175 | except Exception: | CODE |
| HIGH | …_dependency_unit/oauth_provider/test_native_clients.py | 442 | except httpx.HTTPError: | CODE |
| HIGH | …/unit/server/metrics/test_opensearch_search_metrics.py | 295 | except ValueError: | CODE |
| HIGH | …sts/unit/onyx/connectors/source_operation_harnesses.py | 93 | except Exception: | CODE |
| HIGH | …/tests/unit/onyx/connectors/web/test_slim_retrieval.py | 252 | except RuntimeError: | CODE |
| HIGH | …unit/onyx/connectors/sharepoint/test_drive_matching.py | 326 | except StopIteration: | CODE |
| HIGH | …unit/onyx/connectors/sharepoint/test_drive_matching.py | 663 | except StopIteration: | CODE |
| HIGH | …ntations/open_url/test_onyx_web_crawler_body_bounds.py | 69 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | …ntations/open_url/test_onyx_web_crawler_body_bounds.py | 90 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | …text/search/federated/test_slack_query_construction.py | 144 | except Exception: | CODE |
| HIGH | …end/tests/unit/onyx/chat/test_multi_model_streaming.py | 145 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 165 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 221 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 269 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 319 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 518 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 572 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 1078 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 1108 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 1141 | except Exception: | CODE |
| HIGH | backend/tests/unit/onyx/auth/test_user_registration.py | 1196 | except Exception: | CODE |
| HIGH | …ts/unit/onyx/server/metrics/test_shard_pool_metrics.py | 62 | except KeyError: | CODE |
| HIGH | …features/craft/sandbox/test_serve_client_401_reload.py | 61 | except httpx.HTTPStatusError: | CODE |
| HIGH | …es/craft/sandbox/sandbox_daemon/test_sandbox_daemon.py | 1379 | except OSError: | CODE |
| HIGH | backend/tests/unit/onyx/db/engine/test_postgres_ssl.py | 265 | except ssl.SSLWantReadError: | CODE |
| HIGH | backend/tests/integration/conftest.py | 289 | except ProcessLookupError: | CODE |
| HIGH | backend/tests/integration/conftest.py | 297 | except ProcessLookupError: | CODE |
| HIGH | …ests/integration/common_utils/managers/reindex_port.py | 156 | except ValueError: | CODE |
| HIGH | backend/tests/integration/tests/craft/conftest.py | 124 | except Exception: | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 446 | except Exception: | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 450 | except Exception: | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 577 | except Exception: | CODE |
| 143 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/ee/onyx/background/celery/tasks/vespa/tasks.py | 22 | """This function is likely to move in the worker refactor happening next.""" | STRING |
| MEDIUM | …x/background/celery/tasks/tenant_provisioning/tasks.py | 211 | # Create the schema for the new tenant | COMMENT |
| MEDIUM | backend/ee/onyx/external_permissions/perm_sync_types.py | 49 | # Defining the input/output types for the sync functions | COMMENT |
| MEDIUM | …ernal_permissions/google_drive/permission_retrieval.py | 30 | # Create a set for faster lookup | COMMENT |
| MEDIUM | backend/ee/onyx/server/tenants/provisioning.py | 219 | # Create the schema for the tenant | COMMENT |
| MEDIUM | …onnectors/google_drive/test_google_drive_group_sync.py | 443 | # Create a large group with many users | COMMENT |
| MEDIUM | …rnal_dependency_unit/tools/test_oauth_token_manager.py | 52 | # Create a non-expired token | COMMENT |
| MEDIUM | …rnal_dependency_unit/tools/test_oauth_token_manager.py | 102 | # Create an expired token | COMMENT |
| MEDIUM | …rnal_dependency_unit/tools/test_oauth_token_manager.py | 140 | # Create an expired token without refresh_token | COMMENT |
| MEDIUM | …rnal_dependency_unit/tools/test_oauth_token_manager.py | 162 | # Create an expired token | COMMENT |
| MEDIUM | …sts/external_dependency_unit/tools/test_python_tool.py | 250 | # # Create a CSV file | COMMENT |
| MEDIUM | …sts/external_dependency_unit/tools/test_python_tool.py | 562 | # # Create a mapping of filename to generated file for easier verification | COMMENT |
| MEDIUM | …sts/external_dependency_unit/tools/test_python_tool.py | 586 | # # Create a client that will fail | COMMENT |
| MEDIUM | …sts/external_dependency_unit/tools/test_python_tool.py | 806 | # # Create a visualization | COMMENT |
| MEDIUM | …ests/external_dependency_unit/llm/test_llm_provider.py | 561 | # Create a provider and set it as default | COMMENT |
| MEDIUM | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 118 | # Define the expected models from the mock GitHub config | COMMENT |
| MEDIUM | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 123 | # Create the mock LLMRecommendations | COMMENT |
| MEDIUM | …ts/external_dependency_unit/llm/test_prompt_caching.py | 177 | # Create a long context message to ensure caching threshold is met (>1024 tokens) | COMMENT |
| MEDIUM | …ts/external_dependency_unit/llm/test_prompt_caching.py | 303 | # Create a long context message. | COMMENT |
| MEDIUM | …ts/external_dependency_unit/llm/test_prompt_caching.py | 625 | # Create a long system message and context | COMMENT |
| MEDIUM | …ts/external_dependency_unit/llm/test_prompt_caching.py | 740 | # Create a long context | COMMENT |
| MEDIUM | …al_dependency_unit/craft/test_streaming_persistence.py | 481 | # Create a user message first | COMMENT |
| MEDIUM | …ndency_unit/answer/test_stream_chat_message_objects.py | 64 | # Create a test user | COMMENT |
| MEDIUM | …ndency_unit/answer/test_stream_chat_message_objects.py | 67 | # Create a test persona explicitly WITHOUT any tools (including web search) | COMMENT |
| MEDIUM | …ndency_unit/answer/test_stream_chat_message_objects.py | 85 | # Create a chat session with our test persona | COMMENT |
| MEDIUM | …ndency_unit/answer/test_stream_chat_message_objects.py | 92 | # Create the chat message request with a query that attempts to force web search | COMMENT |
| MEDIUM | …l_dependency_unit/opensearch/test_opensearch_client.py | 1106 | # Create a document to update. | COMMENT |
| MEDIUM | …l_dependency_unit/opensearch/test_opensearch_client.py | 1309 | # Create a single document; the rest of the update targets won't exist. | COMMENT |
| MEDIUM | …on_sync/test_external_group_permission_sync_attempt.py | 290 | # Create a cc_pair specific attempt | COMMENT |
| MEDIUM | …on_sync/test_external_group_permission_sync_attempt.py | 518 | # Create an attempt (simulating the start of a sync task) | COMMENT |
| MEDIUM | …pendency_unit/file_store/test_file_store_non_mocked.py | 515 | # Create a 1MB file | COMMENT |
| MEDIUM | …pendency_unit/file_store/test_file_store_non_mocked.py | 871 | # Create a new database session for each worker to avoid conflicts | COMMENT |
| MEDIUM | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 844 | # Create a persona (using same fields as _create_test_persona_with_slack_config) | COMMENT |
| MEDIUM | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 854 | # Create a slack bot | COMMENT |
| MEDIUM | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 617 | # Create a hierarchy node whose raw_node_id matches a document ID | COMMENT |
| MEDIUM | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 641 | # Create a document with the same ID as the hierarchy node | COMMENT |
| MEDIUM | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 861 | # Create a parent node and a child node | COMMENT |
| MEDIUM | …_dependency_unit/celery/test_docprocessing_priority.py | 260 | # Create a mock connector runner that yields one document batch | COMMENT |
| MEDIUM | …ted_connector/slack/test_slack_federated_connnector.py | 399 | # Create a connector for testing | COMMENT |
| MEDIUM | backend/tests/unit/ee/onyx/server/billing/test_proxy.py | 62 | # Create a license payload without tenant_id by using a mock | COMMENT |
| MEDIUM | backend/tests/unit/file_store/test_file_store.py | 203 | # Create a mock database session | COMMENT |
| MEDIUM | …d/tests/unit/onyx/connectors/test_connector_factory.py | 147 | # Create a custom mock that raises AttributeError for the specific class | COMMENT |
| MEDIUM⚡ | …it/onyx/connectors/github/test_github_checkpointing.py | 646 | # Create a new mock for successful retrieval after retry | COMMENT |
| MEDIUM⚡ | …it/onyx/connectors/github/test_github_checkpointing.py | 650 | # Create an iterator that will yield the remaining PR | COMMENT |
| MEDIUM⚡ | …it/onyx/connectors/github/test_github_checkpointing.py | 654 | # Create a mock for the _Slice object that will be returned by pag_list[prev_num_objs:] | COMMENT |
| MEDIUM | …it/onyx/connectors/github/test_github_checkpointing.py | 516 | # Create a mock paginated list that will raise the 422 error on get_page | COMMENT |
| MEDIUM | …it/onyx/connectors/github/test_github_checkpointing.py | 528 | # Create a new mock for cursor-based pagination | COMMENT |
| MEDIUM | …it/onyx/connectors/github/test_github_checkpointing.py | 578 | # Create a checkpoint that was using cursor-based pagination | COMMENT |
| MEDIUM | …it/onyx/connectors/github/test_github_checkpointing.py | 630 | # Create a checkpoint with an expired cursor | COMMENT |
| MEDIUM⚡ | …t/onyx/connectors/salesforce/test_yield_doc_batches.py | 110 | # Create a parent object with various data types in the fields | COMMENT |
| MEDIUM | …t/onyx/connectors/salesforce/test_yield_doc_batches.py | 137 | # Create a mock document that convert_sf_object_to_doc will return | COMMENT |
| MEDIUM⚡ | …nyx/document_index/opensearch/test_get_doc_chunk_id.py | 57 | # Create a doc ID that will exceed max length after the suffix is | COMMENT |
| MEDIUM | backend/tests/unit/onyx/llm/test_multi_llm.py | 285 | # Create a mock response with multiple tool calls using litellm objects | COMMENT |
| MEDIUM | backend/tests/unit/onyx/chat/test_citation_processor.py | 1116 | # Create a doc with a high citation number | COMMENT |
| MEDIUM⚡ | backend/tests/unit/onyx/auth/test_oauth_refresher.py | 173 | # Create an account that needs refreshing (expiring soon) | COMMENT |
| MEDIUM⚡ | backend/tests/unit/onyx/auth/test_oauth_refresher.py | 179 | # Create an account that doesn't need refreshing (expires later) | COMMENT |
| MEDIUM⚡ | backend/tests/unit/onyx/auth/test_oauth_refresher.py | 185 | # Create an account without a refresh token | COMMENT |
| MEDIUM | backend/tests/unit/onyx/auth/test_user_registration.py | 497 | # Create a result mock | COMMENT |
| MEDIUM | …nyx/server/features/craft/sandbox/test_safe_extract.py | 143 | # Create a file that exceeds the lowered limit | COMMENT |
| MEDIUM | …nyx/server/features/craft/sandbox/test_safe_extract.py | 191 | # Create a FIFO entry | COMMENT |
| 212 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/ods/internal/openapi/openapi_schema.py | 81 | CODE | |
| LOW | tools/loadtest/mock_llm/app.py | 229 | CODE | |
| LOW | tools/loadtest/mock_llm/app.py | 108 | CODE | |
| LOW | tools/loadtest/onyx_client/stream_parser.py | 63 | CODE | |
| LOW | tools/loadtest/onyx_client/chat_user.py | 176 | CODE | |
| LOW | tools/loadtest/scenarios/health_probe.py | 53 | CODE | |
| LOW | .agents/feature-map/check_feature_map.py | 140 | CODE | |
| LOW | .agents/feature-map/stale_docs.py | 52 | CODE | |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 177 | CODE | |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 517 | CODE | |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 219 | CODE | |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 457 | CODE | |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 749 | CODE | |
| LOW | …ckend/ee/onyx/background/celery/tasks/cleanup/tasks.py | 21 | CODE | |
| LOW | backend/ee/onyx/background/celery/tasks/cloud/tasks.py | 77 | CODE | |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 46 | CODE | |
| LOW | …x/background/celery/tasks/tenant_provisioning/tasks.py | 125 | CODE | |
| LOW | …ee/onyx/background/celery/tasks/query_history/tasks.py | 37 | CODE | |
| LOW | backend/ee/onyx/external_permissions/utils.py | 34 | CODE | |
| LOW | …nyx/external_permissions/onedrive/permission_mapper.py | 36 | CODE | |
| LOW | …x/external_permissions/microsoft_utils/entra_groups.py | 137 | CODE | |
| LOW | …x/external_permissions/microsoft_utils/entra_groups.py | 149 | CODE | |
| LOW | …ckend/ee/onyx/external_permissions/jira/page_access.py | 321 | CODE | |
| LOW | backend/ee/onyx/external_permissions/github/doc_sync.py | 33 | CODE | |
| LOW | …ee/onyx/external_permissions/confluence/page_access.py | 16 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 159 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 230 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 369 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 584 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 165 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 380 | CODE | |
| LOW | …yx/external_permissions/sharepoint/permission_utils.py | 592 | CODE | |
| LOW | …ckend/ee/onyx/external_permissions/slack/group_sync.py | 31 | CODE | |
| LOW | backend/ee/onyx/external_permissions/slack/doc_sync.py | 86 | CODE | |
| LOW | backend/ee/onyx/external_permissions/slack/doc_sync.py | 190 | CODE | |
| LOW | backend/ee/onyx/external_permissions/slack/utils.py | 7 | CODE | |
| LOW | backend/ee/onyx/external_permissions/gmail/doc_sync.py | 45 | CODE | |
| LOW | …e/onyx/external_permissions/google_drive/group_sync.py | 187 | CODE | |
| LOW | …e/onyx/external_permissions/google_drive/group_sync.py | 231 | CODE | |
| LOW | …e/onyx/external_permissions/google_drive/group_sync.py | 427 | CODE | |
| LOW | …/ee/onyx/external_permissions/google_drive/doc_sync.py | 103 | CODE | |
| LOW | …/ee/onyx/external_permissions/google_drive/doc_sync.py | 283 | CODE | |
| LOW | …/ee/onyx/external_permissions/google_drive/doc_sync.py | 376 | CODE | |
| LOW | backend/ee/onyx/server/seeding.py | 78 | CODE | |
| LOW | backend/ee/onyx/server/seeding.py | 205 | CODE | |
| LOW | …ckend/ee/onyx/server/middleware/license_enforcement.py | 90 | CODE | |
| LOW | …ckend/ee/onyx/server/middleware/license_enforcement.py | 96 | CODE | |
| LOW | backend/ee/onyx/server/middleware/tenant_tracking.py | 135 | CODE | |
| LOW | backend/ee/onyx/server/settings/api.py | 31 | CODE | |
| LOW | backend/ee/onyx/server/scim/patch.py | 201 | CODE | |
| LOW | backend/ee/onyx/server/scim/patch.py | 297 | CODE | |
| LOW | backend/ee/onyx/server/scim/patch.py | 337 | CODE | |
| LOW | backend/ee/onyx/server/scim/patch.py | 380 | CODE | |
| LOW | …nd/ee/onyx/server/reporting/usage_export_generation.py | 275 | CODE | |
| LOW | backend/ee/onyx/server/log_export/api.py | 135 | CODE | |
| LOW | backend/ee/onyx/server/log_export/storage.py | 207 | CODE | |
| LOW | backend/ee/onyx/server/oauth/api.py | 41 | CODE | |
| LOW | backend/ee/onyx/server/tenants/provisioning.py | 94 | CODE | |
| LOW | backend/ee/onyx/server/tenants/provisioning.py | 265 | CODE | |
| LOW | backend/ee/onyx/server/billing/api.py | 283 | CODE | |
| 586 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ackground/celery/tasks/external_group_syncing/tasks.py | 0 | compute the expiration time for the fence validation block signal. base expiration is 60 seconds, multiplied by the beat | STRING |
| HIGH | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 0 | compute the expiration time for the fence validation block signal. base expiration is 60 seconds, multiplied by the beat | STRING |
| HIGH | backend/onyx/background/celery/tasks/pruning/tasks.py | 0 | compute the expiration time for the fence validation block signal. base expiration is 60 seconds, multiplied by the beat | STRING |
| HIGH | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 0 | compute the expiration time for the fence validation block signal. base expiration is 60 seconds, multiplied by the beat | STRING |
| HIGH | …ackground/celery/tasks/external_group_syncing/tasks.py | 0 | checks for the error condition where an indexing fence is set but the associated celery tasks don't exist. this can happ | STRING |
| HIGH | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 0 | checks for the error condition where an indexing fence is set but the associated celery tasks don't exist. this can happ | STRING |
| HIGH | …yx/background/celery/tasks/connector_deletion/tasks.py | 0 | checks for the error condition where an indexing fence is set but the associated celery tasks don't exist. this can happ | STRING |
| HIGH | backend/ee/onyx/server/oauth/confluence_cloud.py | 0 | dev mode workaround for localhost testing - https://www.nango.dev/blog/oauth-redirects-on-localhost-with-https | STRING |
| HIGH | backend/ee/onyx/server/oauth/google_drive.py | 0 | dev mode workaround for localhost testing - https://www.nango.dev/blog/oauth-redirects-on-localhost-with-https | STRING |
| HIGH | backend/ee/onyx/server/oauth/slack.py | 0 | dev mode workaround for localhost testing - https://www.nango.dev/blog/oauth-redirects-on-localhost-with-https | STRING |
| HIGH | backend/ee/onyx/server/oauth/confluence_cloud.py | 0 | temporary state to store in redis. to be looked up on auth response. returns a json string. | STRING |
| HIGH | backend/ee/onyx/server/oauth/google_drive.py | 0 | temporary state to store in redis. to be looked up on auth response. returns a json string. | STRING |
| HIGH | backend/ee/onyx/server/oauth/slack.py | 0 | temporary state to store in redis. to be looked up on auth response. returns a json string. | STRING |
| HIGH | backend/ee/onyx/db/saml.py | 0 | note: this is async, since it's used during auth (which is necessarily async due to fastapi users) | STRING |
| HIGH | backend/onyx/db/saml.py | 0 | note: this is async, since it's used during auth (which is necessarily async due to fastapi users) | STRING |
| HIGH | backend/onyx/db/api_key.py | 0 | note: this is async, since it's used during auth (which is necessarily async due to fastapi users) | STRING |
| HIGH | …s/unit/ee/onyx/connectors/test_ee_capability_checks.py | 0 | minimal concrete named check; ``run`` never executes in these tests. | STRING |
| HIGH | …onnectors/capability_checks/test_registry_fallbacks.py | 0 | minimal concrete named check; ``run`` never executes in these tests. | STRING |
| HIGH | …ors/capability_checks/test_capability_check_ratchet.py | 0 | minimal concrete named check; ``run`` never executes in these tests. | STRING |
| HIGH | …it/onyx/connectors/jira/test_jira_capability_checks.py | 0 | the config the create form sends, with "" for empty tab fields. | STRING |
| HIGH | …ectors/confluence/test_confluence_capability_checks.py | 0 | the config the create form sends, with "" for empty tab fields. | STRING |
| HIGH | …ly/connectors/jira/test_jira_capability_checks_live.py | 0 | the config the create form sends, with "" for empty tab fields. | STRING |
| HIGH | …s/confluence/test_confluence_capability_checks_live.py | 0 | the config the create form sends, with "" for empty tab fields. | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | clears the sf db by deleting all files in the data directory. | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | clears the sf db by deleting all files in the data directory. | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | clears the sf db by deleting all files in the data directory. | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | creates a csv file for the given object type and records. args: object_type: the salesforce object type (e.g. "account", | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | creates a csv file for the given object type and records. args: object_type: the salesforce object type (e.g. "account", | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | creates a csv file for the given object type and records. args: object_type: the salesforce object type (e.g. "account", | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | creates csv files with example data, organized by object type. | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | creates csv files with example data, organized by object type. | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | creates csv files with example data, organized by object type. | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests querying functionality by verifying: 1. all expected account ids are found 2. each account's data matches what was | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests querying functionality by verifying: 1. all expected account ids are found 2. each account's data matches what was | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests querying functionality by verifying: 1. all expected account ids are found 2. each account's data matches what was | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests upsert functionality by: 1. updating an existing account 2. creating a new account 3. verifying both operations we | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests upsert functionality by: 1. updating an existing account 2. creating a new account 3. verifying both operations we | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests upsert functionality by: 1. updating an existing account 2. creating a new account 3. verifying both operations we | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests relationship shelf updates and queries by: 1. creating test data with relationships 2. verifying the relationships | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests relationship shelf updates and queries by: 1. creating test data with relationships 2. verifying the relationships | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests relationship shelf updates and queries by: 1. creating test data with relationships 2. verifying the relationships | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests querying all accounts and retrieving their child objects. this test verifies that: 1. all accounts can be retrieve | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests querying all accounts and retrieving their child objects. this test verifies that: 1. all accounts can be retrieve | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests querying all accounts and retrieving their child objects. this test verifies that: 1. all accounts can be retrieve | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests that relationships are properly updated when a child object's parent reference changes. this test verifies: 1. ini | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests that relationships are properly updated when a child object's parent reference changes. this test verifies: 1. ini | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests that relationships are properly updated when a child object's parent reference changes. this test verifies: 1. ini | STRING |
| HIGH | …t/onyx/connectors/salesforce/test_salesforce_sqlite.py | 0 | tests get_affected_parent_ids functionality by verifying: 1. ids that are directly in the parent_types list are included | STRING |
| HIGH | …salesforce/shelve_stuff/old_test_salesforce_shelves.py | 0 | tests get_affected_parent_ids functionality by verifying: 1. ids that are directly in the parent_types list are included | STRING |
| HIGH | …ors/salesforce/shelve_stuff/test_salesforce_shelves.py | 0 | tests get_affected_parent_ids functionality by verifying: 1. ids that are directly in the parent_types list are included | STRING |
| HIGH | …tests/integration/tests/permissions_access/conftest.py | 0 | reuses the permissions package fixtures. these directories exist only so ci shards them as separate jobs — the suite is | STRING |
| HIGH | …s/integration/tests/permissions_membership/conftest.py | 0 | reuses the permissions package fixtures. these directories exist only so ci shards them as separate jobs — the suite is | STRING |
| HIGH | …ts/integration/tests/permissions_resources/conftest.py | 0 | reuses the permissions package fixtures. these directories exist only so ci shards them as separate jobs — the suite is | STRING |
| HIGH | …sts/integration/tests/chat/test_chat_session_access.py | 0 | reset all data once before running any tests in this module. | STRING |
| HIGH | …end/tests/integration/tests/chat/test_chat_deletion.py | 0 | reset all data once before running any tests in this module. | STRING |
| HIGH | …kend/tests/integration/tests/projects/test_projects.py | 0 | reset all data once before running any tests in this module. | STRING |
| HIGH | …ermissions_membership/test_group_manager_membership.py | 0 | flip is_manager on the (user, group) edge and recompute the cached flag. | STRING |
| HIGH | …/permissions_resources/test_group_manager_resources.py | 0 | flip is_manager on the (user, group) edge and recompute the cached flag. | STRING |
| HIGH | …gration/tests/permissions/test_group_manager_agents.py | 0 | flip is_manager on the (user, group) edge and recompute the cached flag. | STRING |
| HIGH | …nd/onyx/background/celery/versioned_apps/monitoring.py | 0 | factory stub for running celery worker / celery beat. | STRING |
| 47 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/ods/hatch_build.py | 1 | CODE | |
| LOW | tools/ods/internal/_version.py | 1 | CODE | |
| LOW | tools/ods/internal/openapi/openapi_schema.py | 7 | CODE | |
| LOW | tools/requirements/check_build_constraints.py | 9 | CODE | |
| LOW | tools/loadtest/prometheus_exporter.py | 13 | CODE | |
| LOW | tools/loadtest/prometheus_collector.py | 8 | CODE | |
| LOW | tools/loadtest/shapes.py | 10 | CODE | |
| LOW | tools/loadtest/locustfile.py | 13 | CODE | |
| LOW | tools/loadtest/locustfile.py | 14 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 15 | CODE | |
| LOW | tools/loadtest/locustfile.py | 43 | CODE | |
| LOW | tools/loadtest/mock_llm/models.py | 8 | CODE | |
| LOW | tools/loadtest/mock_llm/app.py | 56 | CODE | |
| LOW | tools/loadtest/onyx_client/stream_parser.py | 12 | CODE | |
| LOW | tools/loadtest/onyx_client/env.py | 3 | CODE | |
| LOW | tools/loadtest/onyx_client/messages.py | 6 | CODE | |
| LOW | tools/loadtest/onyx_client/chat_user.py | 19 | CODE | |
| LOW | tools/loadtest/tests/test_mock_llm.py | 10 | CODE | |
| LOW | tools/loadtest/tests/test_exporter.py | 8 | CODE | |
| LOW | tools/loadtest/tests/test_stream_parser.py | 3 | CODE | |
| LOW | tools/loadtest/tests/test_messages.py | 8 | CODE | |
| LOW | tools/loadtest/scenarios/long_conversation.py | 6 | CODE | |
| LOW | tools/loadtest/scenarios/chat_with_search.py | 13 | CODE | |
| LOW | tools/loadtest/scenarios/health_probe.py | 28 | CODE | |
| LOW | tools/loadtest/scenarios/compression.py | 19 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 1 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 2 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 3 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 4 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 5 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 6 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 7 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 8 | CODE | |
| LOW | tools/loadtest/scenarios/__init__.py | 9 | CODE | |
| LOW | tools/loadtest/scenarios/disconnect.py | 7 | CODE | |
| LOW | tools/loadtest/scenarios/multi_tool.py | 6 | CODE | |
| LOW | tools/loadtest/scenarios/deep_research.py | 13 | CODE | |
| LOW | tools/loadtest/scenarios/thread_hog.py | 15 | CODE | |
| LOW | tools/loadtest/scenarios/file_attachment.py | 18 | CODE | |
| LOW | tools/i18n/check_copy_changes.py | 3 | CODE | |
| LOW | .zed/dotenv_launch.py | 20 | CODE | |
| LOW | backend/ee/onyx/external_permissions/perm_sync_types.py | 5 | CODE | |
| LOW | backend/ee/onyx/external_permissions/perm_sync_types.py | 5 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 40 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 41 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 41 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 42 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 43 | CODE | |
| LOW | backend/ee/onyx/external_permissions/sync_params.py | 44 | CODE | |
| LOW | backend/ee/onyx/server/scim/patch.py | 15 | CODE | |
| LOW | backend/ee/onyx/server/scim/filtering.py | 24 | CODE | |
| LOW | backend/ee/onyx/server/scim/api.py | 12 | CODE | |
| 473 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/loadtest/mock_llm/app.py | 330 | # its tool_calls entries), but finish_reason is always present (null). | COMMENT |
| HIGH | backend/ee/onyx/server/tenants/tier_management.py | 4 | {"customer_tier": "BUSINESS", "trial_end": "2026-06-01T12:00:00+00:00" | null} | STRING |
| HIGH | backend/ee/onyx/server/query_history/models.py | 255 | "The file metadata must be non-null, and must be of type `dict[str, str]`" | CODE |
| HIGH | backend/ee/onyx/db/community_downgrade.py | 6 | from sqlalchemy import ColumnElement, Select, and_, delete, null, or_, select, update | CODE |
| HIGH | …rnal_dependency_unit/tracing/test_tracing_admin_api.py | 30 | # Handlers tolerate a None user (updated_by becomes null); cast to satisfy typing. | COMMENT |
| HIGH | …y_unit/db/test_existing_document_rows_null_metadata.py | 2 | document metadata store it as null, and those rows must still read.""" | STRING |
| HIGH | …/tests/unit/onyx/tools/test_coding_agent_repo_setup.py | 46 | cmd="tar -xzf repo.tar.gz --strip-components=1 && rm repo.tar.gz && ls", | CODE |
| HIGH⚡ | …_implementations/websearch/test_web_search_tool_run.py | 68 | # Control chars (e.g. null) removed; no space inserted | COMMENT |
| HIGH | …text/search/federated/test_slack_query_construction.py | 234 | mock_llm.invoke.return_value.text = '{"days_back": null}' | CODE |
| HIGH | …/tests/unit/onyx/chat/test_argument_delta_streaming.py | 621 | """Non-string values (numbers, booleans, null) are skipped — they are | STRING |
| HIGH⚡ | …sts/unit/onyx/server/features/craft/test_nextjs_dev.py | 87 | "${ONYX_WEBAPP_PORT:-$(cat ../../.nextjs-port 2>/dev/null || echo 3000)}" | CODE |
| HIGH⚡ | …sts/unit/onyx/server/features/craft/test_nextjs_dev.py | 118 | assert 'if ! grep -q "ONYX_WEBAPP_PORT" package.json 2>/dev/null; then' in script | CODE |
| HIGH | …sts/unit/onyx/server/features/craft/test_nextjs_dev.py | 262 | f'[ "$(readlink /proc/$NEXTJS_PID/cwd 2>/dev/null)" ' | CODE |
| HIGH⚡ | …eatures/craft/sandbox/test_session_workspace_script.py | 101 | f'"$(readlink /proc/$NEXTJS_PID/cwd 2>/dev/null)"' | CODE |
| HIGH | backend/tests/unit/onyx/utils/test_streaming_json.py | 29 | '{"s": "x", "n": -1.5, "t": true, "f": false, "z": null}' | CODE |
| HIGH⚡ | backend/tests/integration/tests/craft/webapp_preview.py | 62 | f'echo "--- $log ---"; tail -n {lines} "$log" 2>&1 || true; ' | CODE |
| HIGH⚡ | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 946 | f" kill $pid 2>/dev/null; " | CODE |
| HIGH⚡ | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 947 | f" for _ in $(seq 1 20); do kill -0 $pid 2>/dev/null || break; sleep 1; done; " | CODE |
| HIGH⚡ | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 948 | f" kill -9 $pid 2>/dev/null; " | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 223 | f"base64 {shlex.quote(self._abs_posix)} 2>/dev/null || echo __MISSING__" | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 238 | f"find {shlex.quote(self._abs_posix)} -mindepth 1 2>/dev/null || true" | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 476 | "-mindepth 1 -delete 2>/dev/null; true", | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 488 | "find /workspace/sessions -mindepth 1 -delete 2>/dev/null; true", | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/k8s_fixtures.py | 775 | f"cat {output_path} 2>/dev/null || true", | CODE |
| HIGH | …s/integration/tests/craft/k8s/test_snapshot_restore.py | 203 | f"[ -d /workspace/sessions/{session_id} ] && echo PRESENT || echo MISSING", | CODE |
| HIGH | …s/integration/tests/craft/k8s/test_snapshot_restore.py | 259 | "rm -rf /workspace/managed/skills && mkdir -p /workspace/managed", | CODE |
| HIGH | …s/integration/tests/craft/k8s/test_snapshot_restore.py | 411 | "ls -1 /workspace/sessions/ /workspace/ 2>&1 || true", | CODE |
| HIGH | …s/integration/tests/craft/k8s/test_snapshot_restore.py | 422 | "[ -e /workspace/escape.txt ] && echo PRESENT || echo MISSING", | CODE |
| HIGH | …s/integration/tests/craft/k8s/test_snapshot_restore.py | 434 | "&& echo PRESENT || echo MISSING", | CODE |
| HIGH | …on/tests/craft/k8s/test_kubernetes_sandbox_file_ops.py | 89 | f"mkdir -p {outputs_dir}/subdir && echo content > {outputs_dir}/file.txt", | CODE |
| HIGH | …on/tests/craft/k8s/test_kubernetes_sandbox_file_ops.py | 163 | "2>/dev/null; true", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 59 | f"test -d {required} && echo OK || echo MISSING", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 81 | f"test -d {session_path}/{sub} && echo OK || echo MISSING", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 90 | f"test -f {session_path}/{fname} && echo OK || echo MISSING", | CODE |
| HIGH⚡ | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 101 | f"readlink {session_path}/.opencode/skills || echo MISSING", | CODE |
| HIGH⚡ | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 111 | f"readlink {session_path}/user_library || echo MISSING", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 179 | "[ -d /var/run/secrets/eks.amazonaws.com ] && echo PRESENT || echo MISSING", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 202 | "echo agent-write > /workspace/managed/probe.txt 2>&1 || echo BLOCKED", | CODE |
| HIGH | …integration/tests/craft/k8s/test_kubernetes_sandbox.py | 280 | "-w '%{http_code}' https://1.1.1.1 || echo BLOCKED:$?" | CODE |
| HIGH | …kend/tests/integration/tests/craft/k8s/test_browser.py | 44 | "&& browser open https://example.com && browser snapshot -i", | CODE |
| HIGH | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 107 | f"test -f {path} && echo YES || echo NO", | CODE |
| HIGH | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 246 | f"[ -d /workspace/sessions/{session_id} ] && echo PRESENT || echo MISSING", | CODE |
| HIGH⚡ | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 328 | f"test -d {session_a_web}/node_modules/lodash && echo YES || echo NO", | CODE |
| HIGH⚡ | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 328 | f"test -d {session_a_web}/node_modules/lodash && echo YES || echo NO", | CODE |
| HIGH⚡ | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 336 | f"test -f {session_b_web}/node_modules/next/package.json && echo OK || echo BROKEN", | CODE |
| HIGH⚡ | …gration/tests/craft/k8s/test_bun_node_modules_dedup.py | 336 | f"test -f {session_b_web}/node_modules/next/package.json && echo OK || echo BROKEN", | CODE |
| HIGH | …/tests/craft/docker_e2e/test_workspace_setup_docker.py | 217 | "&& echo PRESENT || echo ABSENT", | CODE |
| HIGH | …/craft/docker_e2e/networking/test_docker_networking.py | 236 | 'curl --noproxy "*" --silent --max-time 3 "$1" >/dev/null; echo $?', | CODE |
| HIGH | …ckend/tests/integration/tests/cli/test_cli_commands.py | 14 | cd cli && go build -o /tmp/onyx-cli-test . | STRING |
| HIGH | …sts/daily/connectors/gitbook/test_gitbook_connector.py | 86 | assert 'res.push("FizzBuzz")' in content | CODE |
| HIGH | backend/onyx/llm/litellm_singleton/monkey_patches.py | 353 | # Terminal events may carry "output": null, which upstream iterates. | COMMENT |
| HIGH | backend/onyx/chat/tool_call_args_streaming.py | 42 | NOTE: Non-string arguments (numbers, booleans, null, arrays, objects) | STRING |
| HIGH⚡ | backend/onyx/server/manage/llm/models.py | 312 | # Provided distinguishes an omitted field from an explicit null, so an | COMMENT |
| HIGH | backend/onyx/server/query_and_chat/token_limit.py | 148 | # the token check. Guarding <= 0 means a 0 (new cost-only rows store null, | COMMENT |
| HIGH | backend/onyx/server/gateway/models.py | 67 | semantics (some keys must be present even when null, others absent — not | STRING |
| HIGH | backend/onyx/server/gateway/models.py | 687 | # stop_sequence is assigned explicitly (present-and-null) — exclude_unset | COMMENT |
| HIGH⚡ | backend/onyx/hooks/models.py | 55 | "fail_strategy cannot be null; omit the field to leave it unchanged." | CODE |
| HIGH⚡ | backend/onyx/hooks/models.py | 59 | "timeout_seconds cannot be null; omit the field to leave it unchanged." | CODE |
| HIGH | backend/onyx/hooks/points/document_ingestion.py | 59 | description="Sections of the document. Includes both text sections (text set, image_file_id null) and image sect | CODE |
| HIGH | backend/onyx/prompts/federated_search.py | 65 | 2. If no date/time is mentioned, return {{"days_back": null}} | CODE |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 161 | alias: terraform-fmt | COMMENT |
| LOW | cr.yaml | 1 | # See https://github.com/helm/chart-releaser#configuration | COMMENT |
| LOW | tools/ods/cmd/deploy_cloud_test.go | 1 | package cmd | COMMENT |
| LOW | tools/ods/cmd/cherry-pick_test.go | 1 | package cmd | COMMENT |
| LOW | tools/ods/cmd/run-ci_test.go | 1 | package cmd | COMMENT |
| LOW | tools/ods/cmd/release_beta_test.go | 1 | package cmd | COMMENT |
| LOW | tools/ods/cmd/release_beta_test.go | 21 | // With --new-branch the cut targets a new release/v4.6 at main's tip PostCutSHA | COMMENT |
| LOW | tools/ods/cmd/deploy_cloud_watch.go | 21 | // The deployment.yml job that sends the new-cloud-image dispatch; its | COMMENT |
| LOW | tools/ods/internal/s3/fetch.go | 61 | // ErrObjectUnavailable marks a download that failed because the object cannot | COMMENT |
| LOW | tools/ods/internal/composegen/composegen.go | 1 | // Package composegen renders the standalone docker compose files | COMMENT |
| LOW | tools/ods/internal/deployfilessync/deployfilessync.go | 1 | // Package deployfilessync mirrors the deployment files that onyx-cli embeds | COMMENT |
| LOW | tools/ods/internal/release/check_test.go | 1 | package release | COMMENT |
| LOW | tools/ods/internal/release/check_test.go | 21 | // T3 tag commit not on the release branch -> error TestCheckTag_offBranchStableErrors | COMMENT |
| LOW | tools/ods/internal/release/beta_test.go | 1 | package release | COMMENT |
| LOW | tools/ods/internal/release/beta_test.go | 21 | // B11 origin unreachable -> error, no stale-state fallback TestComputeBetaTag_fetchFailureErrors | COMMENT |
| LOW | tools/ods/internal/release/classify_test.go | 1 | package release | COMMENT |
| LOW | tools/ods/internal/release/cloud_test.go | 1 | package release | COMMENT |
| LOW | tools/ods/internal/release/cloud_test.go | 21 | // S9 --version override -> override base, counter fresh TestComputeCloudTag_versionOverride | COMMENT |
| LOW | tools/ods/internal/basedigest/basedigest.go | 1 | // Package basedigest refreshes the pinned base image digests across the Onyx | COMMENT |
| LOW | tools/ods/internal/audit/actions.go | 1 | package audit | COMMENT |
| LOW | tools/ods/internal/audit/alert.go | 101 | type alertPlan struct { | COMMENT |
| LOW | tools/loadtest/mock_llm/app.py | 181 | (pos for pos in (head.find(mark) for mark in "?!.\n") if pos != -1), | COMMENT |
| LOW | tools/loadtest/onyx_client/messages.py | 1 | """The question corpus that search scenarios draw from. | COMMENT |
| LOW | tools/loadtest/k8s/locust.yaml | 1 | # Locust master + workers for the Onyx chat load tests, using the harness | COMMENT |
| LOW | tools/loadtest/k8s/locust.yaml | 141 | # applyable on clusters without the operator. | COMMENT |
| LOW | .zed/debug.json | 1 | // Zed port of .vscode/launch.json | COMMENT |
| LOW | web/tests/e2e/agents/create_and_edit_agent.spec.ts | 301 | // Submit the creation form | COMMENT |
| LOW | web/lib/opal/scripts/convert-svg.sh | 1 | #!/bin/bash | COMMENT |
| LOW | web/lib/opal/src/types.ts | 1 | import type { ReactNode, SVGProps } from "react"; | COMMENT |
| LOW | web/lib/opal/src/constants.ts | 1 | // Screen-size breakpoints — used by useScreenSize to determine the current tier. | COMMENT |
| LOW | web/lib/opal/src/components/buttons/row-interaction.ts | 1 | import type React from "react"; | COMMENT |
| LOW | web/src/proxy.ts | 1 | import { NextResponse } from "next/server"; | COMMENT |
| LOW | web/src/proxy.ts | 21 | // WEB_FRAME_PROTECTION_ENABLED=false drops it so any origin may frame Onyx. | COMMENT |
| LOW | web/src/app/craft/components/ChatPanel.tsx | 501 | // Pre-provisioned session flow: | COMMENT |
| LOW | web/src/app/nrf/NRFPage.tsx | 101 | const activeAgent = useActiveAgent(); | COMMENT |
| LOW | web/src/components/SSRAutoRefresh.tsx | 1 | "use client"; | COMMENT |
| LOW | web/src/layouts/chromes/AppChrome.tsx | 601 | // The `AppInputBar` has `shadow-box-01` applied, which extends ~14px below it. | COMMENT |
| LOW | web/src/lib/connectors/checks/constants.ts | 1 | // NOTE(@raunakab): This behaviour is up for debate. Therefore, keeping it as a | COMMENT |
| LOW | web/src/lib/auth/components.tsx | 101 | </Modal.Content> | COMMENT |
| LOW | web/src/lib/auth/components.tsx | 121 | // IMPORTANT: This component is rendered as part of the /auth/login page, which | COMMENT |
| LOW | web/src/lib/banner/hooks.ts | 1 | "use client"; | COMMENT |
| LOW | web/src/views/AppPage.tsx | 121 | export interface ChatPageProps { | COMMENT |
| LOW | …ConnectorDetailPage/ExternalGroupSyncAttemptsTable.tsx | 41 | timeStarted: string; | COMMENT |
| LOW | …onnectorPage/sections/AuthenticationAccountSection.tsx | 161 | padding={0} | COMMENT |
| LOW | .agents/skills/sync-vendored-skills.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | desktop/src-tauri/src/main.rs | 21 | COMMENT | |
| LOW | desktop/src-tauri/src/alt_menu.rs | 1 | // Native GTK-level Alt-alone-press menu toggle for Linux. | COMMENT |
| LOW | backend/alembic.ini | 1 | # A generic, single database configuration. | COMMENT |
| LOW | backend/alembic.ini | 21 | # timezone = | COMMENT |
| LOW | backend/alembic.ini | 41 | COMMENT | |
| LOW | backend/ee/onyx/configs/license_enforcement_config.py | 21 | from onyx.server.settings.models import Tier | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 1 | # TODO re-enable this test | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 21 | # ) | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 41 | # responses = [] | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 61 | # assert final_response.id == IMAGE_GENERATION_RESPONSE_ID | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 81 | # model="dall-e-3", | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 101 | # ) | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 121 | # api_base=None, | COMMENT |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 141 | COMMENT | |
| LOW | …al_dependency_unit/tools/test_image_generation_tool.py | 161 | # id=IMAGE_GENERATION_RESPONSE_ID, | COMMENT |
| 383 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | backend/ee/onyx/server/scim/patch.py | 126 | Apply SCIM PATCH operations to a user resource. Args: operations: The PATCH operations to apply. cu | STRING |
| HIGH | backend/ee/onyx/server/scim/patch.py | 342 | Apply SCIM PATCH operations to a group resource. Args: operations: The PATCH operations to apply. c | STRING |
| HIGH | backend/ee/onyx/server/scim/filtering.py | 60 | Parse a simple SCIM filter expression. Args: filter_string: Raw filter query parameter value, e.g. | STRING |
| HIGH | backend/ee/onyx/server/tenants/proxy.py | 66 | Extract license data from Authorization header. Self-hosted instances authenticate to these proxy endpoints by send | STRING |
| HIGH | backend/ee/onyx/server/billing/service.py | 85 | Make an HTTP request to the billing service. Consolidates the common HTTP request pattern used by all billing opera | STRING |
| HIGH | backend/ee/onyx/utils/license.py | 190 | Verify RSA-4096 signature and return payload if valid. Args: license_data: Base64-encoded JSON contain | STRING |
| HIGH | …/tests/integration/connector_job_tests/github/utils.py | 29 | Change the visibility of a repository. Args: repo_owner: Repository owner (organization or | STRING |
| HIGH | …/tests/integration/connector_job_tests/github/utils.py | 81 | Add a team to a repository with specified permissions. Args: repo_owner: Repository owner | STRING |
| HIGH | …/tests/integration/connector_job_tests/github/utils.py | 129 | Remove a team from a repository. Args: repo_owner: Repository owner (organization) | STRING |
| HIGH | backend/onyx/connectors/highspot/client.py | 113 | Make a request to the Highspot API. Args: method: HTTP method (GET, POST, etc.) | STRING |
| HIGH | backend/onyx/connectors/slack/connector.py | 518 | Get a channel by its ID. Args: slack_client: The Slack source-operations gateway channel_id: The ID | STRING |
| HIGH | backend/onyx/connectors/mediawiki/family.py | 105 | Generate a family file for a given URL and name. Args: url: The URL of the wiki. name: The short na | STRING |
| HIGH | backend/onyx/evals/eval_cli.py | 138 | Trigger an eval pipeline execution on a remote server. Tool forcing and assertions are configured per-test in | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 428 | Puts cluster settings. Args: settings: The settings to put. Raises: Exception: | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 805 | Validates the index. Short-circuit returns False on the first mismatch. Logs the mismatch. See the Ope | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 923 | Gets the settings of the index. Args: include_defaults: Whether to include default settings which h | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1218 | Deletes a document. Args: document_chunk_id: The OpenSearch ID of the document chunk to | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1276 | Deletes documents by a query. Args: query_body: The body of the query to delete documents by. | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1649 | Gets an OpenSearch document chunk. Will raise an exception if the document chunk is not found. Args: | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1695 | Searches the index. NOTE: Does not return vector fields. In order to take advantage of performance bene | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1794 | Searches the index and returns only document chunk IDs. In order to take advantage of the performance benefits | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1887 | Opens a point-in-time (PIT) over this index for a consistent scan. The PIT pins the index across searches so co | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 1935 | Fetches one page of regular chunks for a batch of documents from a PIT. Filters to regular chunks (max_chunk_si | STRING |
| HIGH | backend/onyx/document_index/opensearch/client.py | 2199 | Extracts the hits and profiling information from a search result. Args: result: The search result t | STRING |
| HIGH | …document_index/opensearch/opensearch_document_index.py | 500 | Indexes an iterable of document chunks into the document index. Groups chunks by document ID and for each docum | STRING |
| HIGH | …document_index/opensearch/opensearch_document_index.py | 627 | Deletes all chunks for a given document. Does nothing if the specified document ID does not exist. TOD | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 974 | Returns filters to be passed into the "filter" key of a search query. The "filter" key applies a logical AND op | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1050 | Returns a filter for the access control list. Since this returns an isolated bool should clause, it can be | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1208 | Returns a filter for the source types. Since this returns an isolated terms clause, it can be cached in | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1245 | Returns a filter for the tags. Since this returns an isolated terms clause, it can be cached in | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1282 | Returns a filter for the document sets. Since this returns an isolated terms clause, it can be cached in | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1397 | Returns a filter for documents explicitly attached to an assistant. Since this returns an isol | STRING |
| HIGH | backend/onyx/document_index/opensearch/search.py | 1431 | Returns a filter for chunks whose ancestors include any of the given hierarchy nodes. | STRING |
| HIGH | …end/onyx/document_index/opensearch/string_filtering.py | 13 | Filters and validates a document ID such that it can be used as an ID in OpenSearch. OpenSearch imposes th | STRING |
| HIGH | backend/onyx/document_index/opensearch/schema.py | 436 | Returns the document schema for the OpenSearch index. WARNING: Changes / additions to field names here require | STRING |
| HIGH | …nd/onyx/context/search/federated/slack_search_utils.py | 61 | Get the channel type that requires a specific Slack scope. Args: scope: The Slack API scope (e.g., 'mpim:re | STRING |
| HIGH | backend/onyx/chat/llm_step.py | 814 | Run an LLM step and stream the response as packets. NOTE: DO NOT TOUCH THIS FUNCTION BEFORE ASKING YUHONG, this is v | STRING |
| HIGH | backend/onyx/chat/chat_utils.py | 188 | Create a chat session from a ChatSessionCreationRequest. Includes project ownership and persona access validation. | STRING |
| HIGH | backend/onyx/redis/tenant_redis_client.py | 32 | Idempotently prepends the tenant prefix to a key. Module-level (not a method) so ``TenantRedisClient`` and ``Te | STRING |
| HIGH | backend/onyx/redis/lock_context.py | 22 | Context manager to acquire a system-wide shared Redis lock. Args: lock_name: Name of the lock to acquire. | STRING |
| HIGH | backend/onyx/file_store/utils.py | 273 | Save a file from either a URL or base64 encoded string. Args: url: URL to download file from base64 | STRING |
| HIGH | backend/onyx/server/features/default_assistant/api.py | 56 | Update the default assistant configuration. Args: update_request: Request with optional tool_ids and system | STRING |
| HIGH | backend/onyx/server/manage/validate_tokens.py | 49 | Validate that the user_token is a valid user OAuth token (xoxp-...) and not a bot token (xoxb-...) Args: | STRING |
| HIGH | backend/onyx/utils/variable_functionality.py | 67 | Fetches a versioned implementation of a specified attribute from a given module. This function first checks if | STRING |
| HIGH | backend/onyx/utils/variable_functionality.py | 164 | Fetches an EE implementation if EE is enabled, otherwise returns a no-op function. Raises an exception if EE is | STRING |
| HIGH | backend/onyx/utils/url.py | 485 | Make a GET request with SSRF protection. This function resolves the hostname, validates the IP is not private/ | STRING |
| HIGH | backend/onyx/utils/search_nlp_models_utils.py | 2 | Parse AWS API key string into components. Args: api_key: String in format 'aws_ACCESSKEY_SECRETKEY_REGION' | STRING |
| HIGH | backend/onyx/secondary_llm_flows/query_expansion.py | 79 | Rephrase a query into a standalone query using chat history context. Converts the user's query into a self-containe | STRING |
| HIGH | backend/onyx/secondary_llm_flows/query_expansion.py | 162 | Expand a query into multiple keyword-only queries using chat history context. Converts the user's query into a set | STRING |
| HIGH | backend/onyx/onyxbot/discord/handle_commands.py | 373 | Sync channel configs with current Discord channels for a guild. Fetches current channels from Discord and syncs wit | STRING |
| HIGH | backend/onyx/onyxbot/discord/api_client.py | 101 | Send a chat message to the Onyx API server and get a response. This method sends a non-streaming chat request t | STRING |
| HIGH | backend/onyx/voice/interface.py | 203 | Create a streaming transcription session. Args: audio_format: Audio format being sent (e.g | STRING |
| HIGH | backend/onyx/voice/interface.py | 220 | Create a streaming TTS session for real-time audio synthesis. Args: voice: Voice identifie | STRING |
| HIGH | backend/onyx/voice/factory.py | 15 | Factory function to get the appropriate voice provider implementation. Args: provider: VoiceProvider m | STRING |
| HIGH | backend/onyx/db/discord_bot.py | 79 | Get existing Discord service API key or create one. The API key is used by the Discord bot to authenticate with the | STRING |
| HIGH | backend/onyx/db/persona.py | 2119 | Update only tools and system_prompt for the default assistant. Args: db_session: Database session t | STRING |
| HIGH | backend/scripts/sources_selection_analysis.py | 129 | Try to identify differences between the two analysis based on the selected analysis key. Args: | STRING |
| HIGH | …end/scripts/tenant_cleanup/no_bastion_cleanup_utils.py | 287 | Get tenant status from control plane database via pod. Args: pod_name: The pod to execute the query fr | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/loadtest/mock_llm/app.py | 198 | # turn then embeds ~260 characters of identical scaffolding plus ~40 characters | COMMENT |
| MEDIUM | .agents/feature-map/components/document-index.md | 367 | ### 4.5 The embedding model and reranker | COMMENT |
| MEDIUM⚡ | …ependency_unit/search_settings/test_search_settings.py | 520 | # Create FUTURE settings with contextual RAG enabled | COMMENT |
| MEDIUM⚡ | …ependency_unit/search_settings/test_search_settings.py | 527 | # PRESENT still has contextual RAG disabled, so default should be None | COMMENT |
| MEDIUM⚡ | …ependency_unit/search_settings/test_search_settings.py | 537 | # Now PRESENT has contextual RAG enabled, default should match | COMMENT |
| MEDIUM | …ependency_unit/search_settings/test_search_settings.py | 466 | # PRESENT still has contextual RAG disabled, so default should be None | COMMENT |
| MEDIUM | …ependency_unit/search_settings/test_search_settings.py | 476 | # Now PRESENT has contextual RAG enabled, default should match | COMMENT |
| MEDIUM | …ependency_unit/search_settings/test_search_settings.py | 612 | # PRESENT has contextual RAG disabled, so default should be None | COMMENT |
| MEDIUM | …ests/external_dependency_unit/db/test_port_flow_e2e.py | 176 | # against the local embedding model server. Ext-dep shards run with it | COMMENT |
| MEDIUM | …_dependency_unit/celery/test_docprocessing_priority.py | 305 | # embedding model" lookup can pick it up and corrupt later real | COMMENT |
| MEDIUM⚡ | …external_dependency_unit/indexing/test_port_reembed.py | 161 | # RAG on in both, model changed -> AUGMENTATION (re-enrich under new LLM) | COMMENT |
| MEDIUM⚡ | …external_dependency_unit/indexing/test_port_reembed.py | 169 | # RAG on in both, same LLM, new embedder -> MODEL_ONLY | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 181 | # RAG OFF in both: a stale model-id difference is irrelevant (no enrichment in | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 240 | # Quantization plus a contextual-RAG change -> the text changes. | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 284 | # FUTURE keeps contextual RAG on -> nothing is stripped -> copy everything. | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 477 | # stored (BM25) content rebuilt without the contextual-RAG augmentation | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 542 | # Stub the contextual-RAG enrichment (the LLM call is the indexing pipeline's | COMMENT |
| MEDIUM | …external_dependency_unit/indexing/test_port_reembed.py | 564 | # PRESENT had RAG off: no doc_summary/chunk_context glued in. | COMMENT |
| MEDIUM | …/unit/onyx/document_index/opensearch/test_port_copy.py | 160 | # RAG-on AUGMENTATION re-embeds one doc per page (bounds the unheartbeated LLM | COMMENT |
| MEDIUM⚡ | …/unit/onyx/document_index/opensearch/test_port_copy.py | 208 | # RAG-off AUGMENTATION has no LLM step, so it streams PIT pages as-is rather than | COMMENT |
| MEDIUM⚡ | …/unit/onyx/document_index/opensearch/test_port_copy.py | 213 | [_chunk("doc_a")], # doc_a spans PIT pages; not reassembled when RAG is off | CODE |
| MEDIUM | …sts/unit/onyx/server/features/craft/test_nextjs_dev.py | 280 | # No eager scaffold/install at setup time: the old eager invocations (bare | COMMENT |
| MEDIUM⚡ | …eatures/craft/sandbox/test_session_workspace_script.py | 65 | # no scaffold/install/dev-server invocations at all. | COMMENT |
| MEDIUM | …x/server/manage/llm/test_nebius_tokenfactory_models.py | 56 | # embedding model -> must be dropped | COMMENT |
| MEDIUM | …sts/unit/onyx/server/manage/llm/test_portkey_models.py | 18 | # an embedding model (must be dropped), and an id-less entry (must be skipped). | COMMENT |
| MEDIUM | …nyx/server/manage/llm/test_vercel_ai_gateway_models.py | 24 | # model, an embedding model (dropped), a media model (dropped), and an id-less | COMMENT |
| MEDIUM | backend/tests/unit/onyx/indexing/test_embedder.py | 104 | # Mock the encode method of the embedding model | COMMENT |
| MEDIUM | backend/tests/unit/onyx/indexing/test_embedder.py | 152 | # Verify the embedding model was called exactly as follows | COMMENT |
| MEDIUM⚡ | backend/tests/unit/external_apps/test_token_refresh.py | 234 | # ensure_fresh_credentials orchestration (own short sessions, single-flight) | COMMENT |
| MEDIUM | backend/shared_configs/model_server_models.py | 10 | # Can be none for cloud embedding model requests, error handling logic exists for other cases | COMMENT |
| MEDIUM | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 628 | # NOTE: _run_indexing doesn't update connectors if the index attempt is the future embedding model | COMMENT |
| MEDIUM | …nd/onyx/background/celery/tasks/docprocessing/utils.py | 286 | # NOTE: during an embedding model switch over, the following logic | COMMENT |
| MEDIUM | backend/onyx/document_index/opensearch/port_copy.py | 123 | # Contextual RAG-on AUGMENTATION: buffer to reassemble each doc (chunks span PIT pages), then | COMMENT |
| MEDIUM | backend/onyx/tools/models.py | 174 | # agentic additions; only need to set during agentic tool calls | COMMENT |
| MEDIUM | backend/onyx/tools/tool_constructor.py | 69 | # project's/persona's user files didn't fit in the LLM context window and | COMMENT |
| MEDIUM⚡ | backend/onyx/llm/model_capabilities.py | 70 | # user to specify their desired max context window, and it's unlikely | COMMENT |
| MEDIUM | backend/onyx/llm/model_catalog.py | 369 | # An output limit at or above the context window is a pool-max | COMMENT |
| MEDIUM | backend/onyx/llm/utils.py | 229 | # for each chunk, we prompt the LLM with the contextual RAG prompt | COMMENT |
| MEDIUM | backend/onyx/context/search/models.py | 133 | # context window and must be searched via vector DB instead of being loaded | COMMENT |
| MEDIUM | backend/onyx/chat/process_message.py | 378 | # 60% of the LLM's max context window. The other benefit is that for projects with | COMMENT |
| MEDIUM | backend/onyx/chat/process_message.py | 896 | # Use the smallest context window across models for safety (harmless for N=1). | COMMENT |
| MEDIUM | backend/onyx/chat/chat_utils.py | 474 | # Drop any single message that would dominate the context window. | COMMENT |
| MEDIUM | backend/onyx/server/metrics/postgres_connection_pool.py | 39 | # --- Pool lifecycle counters (event-driven) --- | COMMENT |
| MEDIUM | backend/onyx/server/metrics/postgres_connection_pool.py | 71 | # --- Per-endpoint attribution (event-driven) --- | COMMENT |
| MEDIUM | backend/onyx/server/settings/models.py | 139 | # False when DISABLE_VECTOR_DB is set — connectors, RAG search, and | COMMENT |
| MEDIUM | backend/onyx/server/features/search/api.py | 138 | # Since the agentic search flow requires multiple LLM calls | COMMENT |
| MEDIUM | backend/onyx/server/manage/invite_rate_limit.py | 34 | # bypass entirely — their guardrails are seat limits and the per-admin lifetime | COMMENT |
| MEDIUM | backend/onyx/server/manage/search_settings.py | 128 | # Disallow contextual RAG for cloud deployments. | COMMENT |
| MEDIUM | backend/onyx/server/manage/search_settings.py | 726 | # Disallow contextual RAG for cloud deployments | COMMENT |
| MEDIUM | backend/onyx/server/manage/voice/websocket_api.py | 47 | # Whisper-style models pad short inputs to a 30s window and hallucinate | COMMENT |
| MEDIUM | …/onyx/natural_language_processing/search_nlp_models.py | 1287 | # 2. we are using an API-based embedding model (provider_type is not | COMMENT |
| MEDIUM | backend/onyx/configs/chat_configs.py | 38 | # Same backstop for contextual-RAG doc/chunk summaries. These are short, | COMMENT |
| MEDIUM | backend/onyx/configs/chat_configs.py | 107 | # Trigger compression when history exceeds this ratio of available context window | COMMENT |
| MEDIUM | backend/onyx/configs/app_configs.py | 78 | # Disables vector DB (OpenSearch) entirely. When True, connectors and RAG search | COMMENT |
| MEDIUM | backend/onyx/configs/app_configs.py | 104 | # (across users / agentic sub-queries) don't re-hit the embedding provider. | COMMENT |
| MEDIUM | backend/onyx/configs/app_configs.py | 1509 | # When swapping to a new embedding model, a secondary index is created in the background, to conserve | COMMENT |
| MEDIUM | backend/onyx/configs/app_configs.py | 1546 | # Enable multi-threaded embedding model calls for parallel processing | COMMENT |
| MEDIUM⚡ | backend/onyx/db/models.py | 2333 | # Contextual RAG | COMMENT |
| MEDIUM⚡ | backend/onyx/db/models.py | 2336 | # Contextual RAG LLM — FK to model_configuration (replaces deprecated string columns) | COMMENT |
| MEDIUM | backend/onyx/db/swap_index.py | 88 | # Expire jobs for the now past index/embedding model | COMMENT |
| 26 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/lib/opal/scripts/convert-svg.sh | 42 | # Check if file exists | COMMENT |
| LOW | web/lib/opal/scripts/convert-svg.sh | 48 | # Check if it's an SVG file | COMMENT |
| LOW | desktop/scripts/generate-icons.sh | 10 | # Check if ImageMagick is installed | COMMENT |
| LOW | …ackground/celery/tasks/external_group_syncing/tasks.py | 585 | # Check if the task has exceeded its timeout | COMMENT |
| LOW | …ackground/celery/tasks/doc_permission_syncing/tasks.py | 1056 | # Check if the task has exceeded its timeout | COMMENT |
| LOW | …e/onyx/external_permissions/google_drive/group_sync.py | 114 | # Check if the folder has permission IDs but no permissions | COMMENT |
| LOW | backend/ee/onyx/server/scim/api.py | 897 | # Assign user to default group BEFORE commit so everything is atomic. | COMMENT |
| LOW | backend/ee/onyx/server/tenants/billing.py | 116 | # Check if the response indicates no subscription | COMMENT |
| LOW | backend/ee/onyx/server/billing/service.py | 252 | # Check if no subscription | COMMENT |
| LOW | backend/ee/onyx/utils/license.py | 581 | # Check if grace period has expired | COMMENT |
| LOW | backend/ee/onyx/utils/license.py | 585 | # Check if license has expired | COMMENT |
| LOW | backend/ee/onyx/db/standard_answer.py | 312 | # Check if all of the keyword words are in the query words | COMMENT |
| LOW | …ndency_unit/answer/test_stream_chat_message_objects.py | 41 | # Check if this is a call to the embedding endpoint | COMMENT |
| LOW | …ndency_unit/answer/test_stream_chat_message_objects.py | 123 | # Check if we got MessageResponseIDInfo packet (indicating message was created) | COMMENT |
| LOW | …pendency_unit/file_store/test_file_store_non_mocked.py | 197 | # Read the file back | COMMENT |
| LOW | …pendency_unit/file_store/test_file_store_non_mocked.py | 276 | # Read the file back | COMMENT |
| LOW | …pendency_unit/file_store/test_file_store_non_mocked.py | 533 | # Read the file back | COMMENT |
| LOW⚡ | backend/tests/unit/onyx/llm/test_true_openai_model.py | 34 | # Check if this specific dated version exists in the registry | COMMENT |
| LOW⚡ | backend/tests/unit/onyx/llm/test_true_openai_model.py | 128 | # Check if embedding models are in the registry | COMMENT |
| LOW | backend/tests/integration/common_utils/document_acl.py | 82 | # Check if user has any matching ACL entry | COMMENT |
| LOW | …tion/multitenant_tests/tenants/test_tenant_creation.py | 128 | # Check if image gen config was created during tenant provisioning | COMMENT |
| LOW⚡ | …nant_tests/discord_bot/test_discord_bot_multitenant.py | 35 | # Check if guild is already registered | COMMENT |
| LOW | …/tests/integration/connector_job_tests/github/utils.py | 52 | # Check if we have admin permissions | COMMENT |
| LOW | …or_job_tests/sharepoint/test_sharepoint_permissions.py | 116 | # Check if user 2 has access to any non-public documents | COMMENT |
| LOW | …egration/tests/llm_auto_update/test_auto_llm_update.py | 109 | # Check if we have all expected models | COMMENT |
| LOW | …ckend/tests/integration/tests/users/test_seat_limit.py | 123 | # Set license to 1 seat — only admin counts now | COMMENT |
| LOW | …ntegration/tests/indexing/test_repeated_error_state.py | 116 | # Check if the connector is in a repeated error state | COMMENT |
| LOW | …ervices/mcp_test_server/run_mcp_server_google_oauth.py | 97 | # Check if token has an error (Google returns 200 with error field sometimes) | COMMENT |
| LOW | …sts/daily/connectors/google_drive/test_map_test_ids.py | 63 | # Check if this document's name matches our test file naming pattern (file_X.txt) | COMMENT |
| LOW | backend/shared_configs/configs.py | 12 | # Check if model server is disabled | COMMENT |
| LOW⚡ | …nyx/background/celery/tasks/hierarchyfetching/tasks.py | 94 | # Check if we've fetched hierarchy recently | COMMENT |
| LOW⚡ | …nyx/background/celery/tasks/hierarchyfetching/tasks.py | 100 | # Check if enough time has passed since last fetch | COMMENT |
| LOW | …nyx/background/celery/tasks/hierarchyfetching/tasks.py | 281 | # Check if the connector supports hierarchy fetching | COMMENT |
| LOW | …nyx/background/celery/tasks/hierarchyfetching/tasks.py | 300 | # Check if connector is public - all hierarchy nodes from public connectors | COMMENT |
| LOW | …yx/background/celery/tasks/connector_deletion/tasks.py | 441 | # Check if the taskset still exists in Redis without reading its size. | COMMENT |
| LOW | backend/onyx/background/celery/tasks/pruning/tasks.py | 875 | # Check if the taskset still exists in Redis without reading its size. | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 231 | # Check if this attempt has been updated with heartbeat tracking | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 243 | # Check if the heartbeat counter has advanced since last check | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 449 | # Check if the CC Pair should be moved to INITIAL_INDEXING | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 552 | # Check if indexing is complete and all batches are processed | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/tasks.py | 1882 | # Check if chunk indexing usage limit has been exceeded before processing. | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/utils.py | 61 | # Check if the associated indexing attempt has been cancelled | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/utils.py | 66 | # Check if the task has exceeded its timeout | COMMENT |
| LOW | …nd/onyx/background/celery/tasks/docprocessing/utils.py | 136 | # Check if the associated indexing attempt has been cancelled | COMMENT |
| LOW | backend/onyx/background/celery/apps/primary.py | 222 | # Check if the Celery task actually exists | COMMENT |
| LOW | backend/onyx/background/indexing/run_docfetching.py | 798 | # Check if connector is disabled mid run and stop if so unless it's the secondary | COMMENT |
| LOW | backend/onyx/connectors/models.py | 179 | # Check if all fields are None | COMMENT |
| LOW | backend/onyx/connectors/discord/connector.py | 206 | # Set start_time to the later of start and pull_date, or whichever is provided | COMMENT |
| LOW | backend/onyx/connectors/jira/access.py | 36 | # Check if EE is enabled | COMMENT |
| LOW | backend/onyx/connectors/github/utils.py | 91 | # Check if EE is enabled | COMMENT |
| LOW | backend/onyx/connectors/github/connector.py | 1425 | # Check if we can access any repos | COMMENT |
| LOW | backend/onyx/connectors/zendesk/connector.py | 124 | # Check if there are more pages | COMMENT |
| LOW | backend/onyx/connectors/confluence/utils.py | 295 | # Check if the response or headers are None to avoid potential AttributeError | COMMENT |
| LOW | backend/onyx/connectors/teams/listing.py | 286 | # Check if team name contains most of the meaningful words | COMMENT |
| LOW⚡ | backend/onyx/connectors/teams/connector.py | 216 | # Check if any requested teams have special characters that need client-side filtering | COMMENT |
| LOW | backend/onyx/connectors/dropbox/connector.py | 57 | # Check if a shared link already exists | COMMENT |
| LOW | backend/onyx/connectors/salesforce/doc_conversion.py | 147 | # Check if all fields are None | COMMENT |
| LOW | backend/onyx/connectors/salesforce/connector.py | 175 | # Check if fields is a list when present | COMMENT |
| LOW | backend/onyx/connectors/salesforce/connector.py | 183 | # Check if associations is a dict when present | COMMENT |
| LOW | backend/onyx/connectors/slack/connector.py | 1182 | # Set oldest to the checkpoint timestamp to resume from where we left off | COMMENT |
| 121 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 21 | // Step 1: Login as admin to create test fixtures | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 25 | // Step 2: Create a user group that will have access to the restricted provider | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 36 | // Step 3: Create a restricted LLM provider assigned to that group | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 46 | // Step 4: Logout and login as a random user (who won't be in the restricted group) | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 450 | // Step 1: Save the authentication configuration to the MCP server | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 460 | // Step 2: Update status to AWAITING_AUTH after successful config save | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 468 | // Step 3: For OAuth, initiate the OAuth flow | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 59 | * // Step 1: Build Map<turnIndex, TransformedStep[]> | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 67 | * // Step 2: Sort turn indices & steps by tabIndex | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 69 | * // Step 3: Build TurnGroup[] with isParallel flag | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 417 | * // Step 1: Map keys → GroupedPacket (parse key, lookup packets) | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 425 | * // Step 2: Filter (hasContentPackets check) | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 433 | * // Step 3: Sort by turn_index, then tab_index | COMMENT |
| LOW | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 421 | // Step 1: Render with finalAnswerComing=true, no tool steps | COMMENT |
| LOW | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 443 | // Step 2: finalAnswerComing goes false + new tool step arrives | COMMENT |
| LOW⚡ | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 456 | // Step 3: Add a second tool step so pacing is not yet complete | COMMENT |
| LOW⚡ | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 466 | // Step 4: Advance timer to complete pacing | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 15 | ## Step 1: Establish what changed | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 28 | ## Step 2: Map the paths to components | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 37 | ## Step 3: Read the components | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 50 | ## Step 4: Check the invariants | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 61 | ## Step 5: Walk the blast radius | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 76 | ## Step 6: Gather evidence | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 92 | ## Step 7: Read the footguns | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 97 | ## Step 8: Check the repo-wide rules | COMMENT |
| LOW | .agents/feature-map/VERIFYING.md | 113 | ## Step 9: Report | COMMENT |
| LOW⚡ | …ests/external_dependency_unit/llm/test_llm_provider.py | 498 | # Step 7: Change the default provider to provider 2 | COMMENT |
| LOW⚡ | …ests/external_dependency_unit/llm/test_llm_provider.py | 501 | # Step 8: Call run_test_default_provider - should use provider 2 | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 409 | # Step 1: Create provider 1 with models, it becomes default (first provider) | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 427 | # Step 2: Call run_test_default_provider - should use provider 1's default model | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 438 | # Step 3: Create provider 2 (not default) | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 457 | # Step 4: Call run_test_default_provider - should still use provider 1 | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 468 | # Step 5: Update provider 1's default model | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 487 | # Step 6: Call run_test_default_provider - should use new model on provider 1 | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 172 | # Step 4: Set the provider as default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 175 | # Step 5: Fetch the default provider and verify | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 572 | # Step 3: Verify provider 1 is still the default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 580 | # Step 4: Change the default to provider 2 | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 587 | # Step 5: Verify provider 2 is now the default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 595 | # Step 6: Run test_default_provider and verify it uses provider 2's model | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 152 | # Step 3: Verify all models from the GitHub config are present | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 312 | # Step 1: Upload provider WITHOUT auto mode, with initial models | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 339 | # Step 2: Update provider to enable auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 359 | # Step 3: Verify model visibility after auto mode transition | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 530 | # Step 1: Create provider 1 (OpenAI) with auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 557 | # Step 2: Create provider 2 (Anthropic) with auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 637 | # Step 1: Create provider with no model configs | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 652 | # Step 2: Run sync_auto_mode_models (simulating the periodic sync) | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 665 | # Step 3: Every ModelConfiguration must have at least one LLMModelFlow | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 687 | # Step 4: The provider must appear in fetch_existing_llm_providers | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 732 | # Step 1: Create manual-mode provider and set as default | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 759 | # Step 2: Transition to auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 779 | # Step 3: Default should be preserved on this provider | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 820 | # Step 1: Create in auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 849 | # Step 2: Switch to manual mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 870 | # Step 3: Models unchanged | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 918 | # Step 1: Create with config v1 | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 937 | # Step 2: Re-sync with config v2 | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 951 | # Step 3: Verify | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 1102 | # Step 2: Set gpt-4o as global default | COMMENT |
| 111 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 21 | // Step 1: Login as admin to create test fixtures | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 25 | // Step 2: Create a user group that will have access to the restricted provider | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 36 | // Step 3: Create a restricted LLM provider assigned to that group | COMMENT |
| LOW⚡ | web/tests/e2e/agents/llm_provider_rbac.spec.ts | 46 | // Step 4: Logout and login as a random user (who won't be in the restricted group) | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 450 | // Step 1: Save the authentication configuration to the MCP server | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 460 | // Step 2: Update status to AWAITING_AUTH after successful config save | COMMENT |
| LOW⚡ | …src/sections/actions/modals/MCPAuthenticationModal.tsx | 468 | // Step 3: For OAuth, initiate the OAuth flow | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 59 | * // Step 1: Build Map<turnIndex, TransformedStep[]> | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 67 | * // Step 2: Sort turn indices & steps by tabIndex | COMMENT |
| LOW⚡ | …app/message/messageComponents/timeline/transformers.ts | 69 | * // Step 3: Build TurnGroup[] with isParallel flag | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 417 | * // Step 1: Map keys → GroupedPacket (parse key, lookup packets) | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 425 | * // Step 2: Filter (hasContentPackets check) | COMMENT |
| LOW⚡ | …ge/messageComponents/timeline/hooks/packetProcessor.ts | 433 | * // Step 3: Sort by turn_index, then tab_index | COMMENT |
| LOW | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 421 | // Step 1: Render with finalAnswerComing=true, no tool steps | COMMENT |
| LOW | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 443 | // Step 2: finalAnswerComing goes false + new tool step arrives | COMMENT |
| LOW⚡ | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 456 | // Step 3: Add a second tool step so pacing is not yet complete | COMMENT |
| LOW⚡ | …eComponents/timeline/hooks/usePacedTurnGroups.test.tsx | 466 | // Step 4: Advance timer to complete pacing | COMMENT |
| LOW | web/src/hooks/useChatController.ts | 555 | // For pages like NRF where existingChatSessionId is always null, we need to check if | COMMENT |
| LOW | backend/ee/onyx/db/document.py | 87 | # If the document exists, we need to check if the external access has changed | COMMENT |
| LOW⚡ | …ests/external_dependency_unit/llm/test_llm_provider.py | 498 | # Step 7: Change the default provider to provider 2 | COMMENT |
| LOW⚡ | …ests/external_dependency_unit/llm/test_llm_provider.py | 501 | # Step 8: Call run_test_default_provider - should use provider 2 | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 409 | # Step 1: Create provider 1 with models, it becomes default (first provider) | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 427 | # Step 2: Call run_test_default_provider - should use provider 1's default model | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 438 | # Step 3: Create provider 2 (not default) | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 457 | # Step 4: Call run_test_default_provider - should still use provider 1 | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 468 | # Step 5: Update provider 1's default model | COMMENT |
| LOW | …ests/external_dependency_unit/llm/test_llm_provider.py | 487 | # Step 6: Call run_test_default_provider - should use new model on provider 1 | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 172 | # Step 4: Set the provider as default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 175 | # Step 5: Fetch the default provider and verify | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 572 | # Step 3: Verify provider 1 is still the default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 580 | # Step 4: Change the default to provider 2 | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 587 | # Step 5: Verify provider 2 is now the default | COMMENT |
| LOW⚡ | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 595 | # Step 6: Run test_default_provider and verify it uses provider 2's model | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 152 | # Step 3: Verify all models from the GitHub config are present | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 312 | # Step 1: Upload provider WITHOUT auto mode, with initial models | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 339 | # Step 2: Update provider to enable auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 359 | # Step 3: Verify model visibility after auto mode transition | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 530 | # Step 1: Create provider 1 (OpenAI) with auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 557 | # Step 2: Create provider 2 (Anthropic) with auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 637 | # Step 1: Create provider with no model configs | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 652 | # Step 2: Run sync_auto_mode_models (simulating the periodic sync) | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 665 | # Step 3: Every ModelConfiguration must have at least one LLMModelFlow | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 687 | # Step 4: The provider must appear in fetch_existing_llm_providers | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 732 | # Step 1: Create manual-mode provider and set as default | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 759 | # Step 2: Transition to auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 779 | # Step 3: Default should be preserved on this provider | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 820 | # Step 1: Create in auto mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 849 | # Step 2: Switch to manual mode | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 870 | # Step 3: Models unchanged | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 918 | # Step 1: Create with config v1 | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 937 | # Step 2: Re-sync with config v2 | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 951 | # Step 3: Verify | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 1102 | # Step 2: Set gpt-4o as global default | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 1114 | # Step 3: Re-sync with config v2 (gpt-4o removed) | COMMENT |
| LOW | …nal_dependency_unit/llm/test_llm_provider_auto_mode.py | 1128 | # Step 4: Verify visibility | COMMENT |
| LOW⚡ | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 282 | # Step 1: ensure the SOURCE node exists (mirrors what the pruning task does) | COMMENT |
| LOW⚡ | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 285 | # Step 2: extract from mock connector | COMMENT |
| LOW⚡ | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 290 | # Step 3: upsert hierarchy nodes (public connector = False) | COMMENT |
| LOW⚡ | …dependency_unit/celery/test_pruning_hierarchy_nodes.py | 300 | # Step 4: verify DB state | COMMENT |
| LOW⚡ | …ts/integration/tests/llm_provider/test_llm_provider.py | 1477 | # Step 2: Set provider 1 as the default provider | COMMENT |
| 85 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/loadtest/locustfile.py | 27 | __all__ = [ | CODE |
| LOW | tools/loadtest/scenarios/__init__.py | 11 | __all__ = [ | CODE |
| LOW | backend/ee/onyx/server/scim/patch.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/ee/onyx/server/scim/providers/base.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/ee/onyx/server/tenants/schema_management.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/ee/onyx/server/tenants/product_gating.py | 16 | def update_tenant_gating(tenant_id: str, status: ApplicationStatus) -> None: | CODE |
| LOW⚡ | backend/ee/onyx/db/scim.py | 120 | def update_token_last_used(self, token_id: int) -> None: | CODE |
| LOW | backend/tests/external_dependency_unit/mock_llm.py | 215 | def set_max_timeout(self, timeout: float = 5.0) -> None: | CODE |
| LOW | backend/tests/external_dependency_unit/mock_llm.py | 292 | def set_max_timeout(self, timeout: float = 5.0) -> None: | CODE |
| LOW | …ency_unit/document_index/test_cc_pair_access_filter.py | 105 | def _set_ee(monkeypatch: pytest.MonkeyPatch, is_ee: bool) -> None: | CODE |
| LOW | …ckend/tests/external_dependency_unit/craft/conftest.py | 135 | def _set_onyx_server_url(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …/external_dependency_unit/auth/test_jwt_passthrough.py | 93 | def set_key(self, key: _RSAKey) -> None: | CODE |
| LOW | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 328 | def _setup_embedding_mock(self, mock_get_query_embeddings: Mock) -> None: | CODE |
| LOW | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 430 | def _setup_llm_provider(self, db_session: Session) -> None: | CODE |
| LOW | …ests/external_dependency_unit/db/test_shard_routing.py | 71 | def _set_tenant_shard(tenant_id: str, shard_name: str) -> None: | CODE |
| LOW | …d/tests/unit/ee/onyx/server/features/hooks/test_api.py | 51 | def _set_level(monkeypatch: pytest.MonkeyPatch, level: SSRFProtectionLevel) -> None: | CODE |
| LOW | …nd/tests/unit/onyx/connectors/test_retry_after_caps.py | 54 | def _set_cloud(monkeypatch: pytest.MonkeyPatch, cloud: bool) -> None: | CODE |
| LOW | …x/connectors/github/test_github_failure_document_id.py | 37 | __all__ = [ | CODE |
| LOW | …ectors/salesforce/test_salesforce_oauth_credentials.py | 77 | def set_credentials(self, credential_json: dict[str, Any]) -> None: | CODE |
| LOW | …d/tests/unit/onyx/server/features/mcp/test_mcp_ssrf.py | 48 | def _set_level(monkeypatch: pytest.MonkeyPatch, level: SSRFProtectionLevel) -> None: | CODE |
| LOW | …it/onyx/server/features/mcp/test_mcp_oauth_provider.py | 48 | async def set_tokens(self, tokens: OAuthToken) -> None: | CODE |
| LOW | …it/onyx/server/features/mcp/test_mcp_oauth_provider.py | 54 | async def set_client_info(self, client_info: OAuthClientInformationFull) -> None: | CODE |
| LOW | …it/onyx/server/features/mcp/test_mcp_oauth_provider.py | 72 | async def set_tokens(self, tokens: OAuthToken) -> None: | CODE |
| LOW | backend/tests/unit/onyx/utils/test_external_endpoint.py | 19 | def _setup_client(mock_client_cls: MagicMock, response: MagicMock) -> None: | CODE |
| LOW | backend/tests/integration/common_utils/http_client.py | 80 | def set_test_client(c: httpx.Client | None) -> None: | CODE |
| LOW | …nd/tests/integration/common_utils/managers/mock_llm.py | 185 | def _set_default(default: DefaultModel, user_performing_action: DATestUser) -> None: | CODE |
| LOW | …s/integration/connector_job_tests/onedrive/conftest.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | …end/tests/integration/tests/craft/test_webapp_proxy.py | 22 | def _set_scope(user: DATestUser, session_id: UUID, scope: SharingScope) -> None: | CODE |
| LOW⚡ | …on/tests/craft/docker_e2e/test_approval_gate_docker.py | 119 | def _set_slack_org_credentials(value: dict[str, str]) -> None: | CODE |
| LOW | …roup/test_group_membership_updates_user_permissions.py | 23 | def _set_membership_is_manager(user_id: str, group_id: int, value: bool) -> None: | CODE |
| LOW | …ermissions_membership/test_group_manager_membership.py | 206 | def _set_cc_pair_creator(cc_pair_id: int, user_id: str) -> None: | CODE |
| LOW | …ests/permissions_resources/test_cc_pair_data_access.py | 244 | def _set_group_restrictions(enabled: bool | None, admin: DATestUser) -> None: | CODE |
| LOW | …tests/streaming_endpoints/test_chat_file_attachment.py | 91 | def _set_token_threshold(admin_user: DATestUser, threshold_k: int) -> None: | CODE |
| LOW | …ration/tests/indexing/test_connector_edit_perm_sync.py | 45 | def _set_next_run(mock_server_client: httpx.Client, text: str) -> None: | CODE |
| LOW | …ntegration/mock_services/mock_connector_server/main.py | 25 | async def set_behavior(behavior: list[dict]) -> None: | CODE |
| LOW | backend/tests/utils/aws_secrets.py | 44 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/tests/daily/connectors/google_drive/conftest.py | 137 | def set_resource_limits() -> None: | CODE |
| LOW | …end/tests/regression/search_quality/run_search_eval.py | 556 | def _update_metrics(self, result: AnalysisSummary) -> None: | CODE |
| LOW | backend/onyx/setup.py | 286 | def update_default_multipass_indexing(db_session: Session) -> None: | CODE |
| LOW⚡ | …nd/onyx/background/celery/tasks/vespa/document_sync.py | 56 | def set_document_sync_fence(r: TenantRedisClient, payload: int | None) -> None: | CODE |
| LOW⚡ | backend/onyx/background/celery/apps/monitoring.py | 98 | def _setup_shard_capacity_collector() -> None: | CODE |
| LOW | backend/onyx/background/celery/apps/app_base.py | 626 | def set_task_finished_log_level(logLevel: int) -> None: | CODE |
| LOW | backend/onyx/background/celery/apps/app_base.py | 707 | def update_liveness_file(self, worker: Any) -> None: # noqa: ARG002 | CODE |
| LOW | backend/onyx/connectors/interfaces.py | 97 | def set_allow_images(self, value: bool) -> None: | CODE |
| LOW | backend/onyx/connectors/interfaces.py | 101 | def set_raw_file_callback(self, callback: RawFileCallback) -> None: | CODE |
| LOW | backend/onyx/connectors/interfaces.py | 240 | def set_credentials(self, credential_json: dict[str, Any]) -> None: | CODE |
| LOW | backend/onyx/connectors/credentials_provider.py | 92 | def set_credentials(self, credential_json: dict[str, Any]) -> None: | CODE |
| LOW | backend/onyx/connectors/credentials_provider.py | 174 | def set_credentials(self, credential_json: dict[str, Any]) -> None: | CODE |
| LOW | backend/onyx/connectors/box/connector.py | 254 | def set_allow_images(self, value: bool) -> None: | CODE |
| LOW | backend/onyx/connectors/drupal_wiki/connector.py | 141 | def set_allow_images(self, value: bool) -> None: | CODE |
| LOW | backend/onyx/connectors/capability_checks/draft_runs.py | 393 | def set_latest_draft_run(run: StoredDraftRun) -> None: | CODE |
| LOW | backend/onyx/connectors/highspot/client.py | 92 | def _setup_auth(self) -> None: | CODE |
| LOW | backend/onyx/connectors/canvas/client.py | 13 | logger = logging.getLogger(__name__) | CODE |
| LOW | backend/onyx/connectors/confluence/connector.py | 305 | def set_allow_images(self, value: bool) -> None: | CODE |
| LOW | backend/onyx/connectors/teams/listing.py | 72 | def _update_request_url(request: RequestOptions, next_url: str) -> None: | CODE |
| LOW⚡ | backend/onyx/connectors/teams/connector.py | 205 | def set_allow_images(self, value: bool) -> None: | CODE |
| LOW | backend/onyx/connectors/salesforce/sqlite_functions.py | 301 | def update_email_to_id_table(self, email: str, id: str | None) -> None: | STRING |
| LOW | backend/onyx/connectors/salesforce/sqlite_functions.py | 794 | def _update_user_email_map(cursor: sqlite3.Cursor) -> None: | CODE |
| LOW | backend/onyx/connectors/salesforce/onyx_salesforce.py | 113 | def _set_instance_urls(self) -> None: | CODE |
| LOW | backend/onyx/connectors/gmail/connector.py | 600 | def set_page_token(page_token: str | None) -> None: | CODE |
| 68 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/loadtest/k8s/locust.yaml | 1 | # Locust master + workers for the Onyx chat load tests, using the harness | COMMENT |
| MEDIUM | …tests/e2e/admin/connector/permission-sync-tabs.spec.ts | 323 | // assertion stays robust if the truncated text changes. | COMMENT |
| MEDIUM | …src/app/app/message/messageComponents/AgentMessage.tsx | 62 | // TODO: Consider more robust comparisons: | COMMENT |
| MEDIUM | …src/app/app/message/messageComponents/AgentMessage.tsx | 64 | // reference equality. Shallow array/object comparison would be more robust if | COMMENT |
| LOW | …d/ee/onyx/external_permissions/confluence/constants.py | 2 | # Instead of setting a page to public, we just add this group so that the page | COMMENT |
| LOW | …e/onyx/external_permissions/confluence/space_access.py | 119 | # that exist in confluence and then just add that group to the space permissions | COMMENT |
| LOW | …onyx/external_permissions/salesforce/postprocessing.py | 187 | # so we should just return an empty list because no chunks will be | COMMENT |
| MEDIUM | …ternal_dependency_unit/craft/test_session_lifecycle.py | 1265 | # is robust if the stub is consulted on any code path. | COMMENT |
| LOW | …ernal_dependency_unit/answer/stream_test_assertions.py | 48 | # So just return | COMMENT |
| LOW | …ency_unit/slack_bot/test_slack_bot_federated_search.py | 1 | # NOTE: ruff and black disagree after applying this noqa, so we just set file-level. | COMMENT |
| MEDIUM | …nd/tests/unit/sandbox_proxy/test_response_streaming.py | 45 | # window keeps the structural assertion robust against scheduler jitter. | COMMENT |
| MEDIUM | …/ee/onyx/server/middleware/test_license_enforcement.py | 19 | # Type alias for the middleware harness tuple | COMMENT |
| MEDIUM⚡ | …/onyx/connectors/slack/test_slack_source_operations.py | 92 | # harness counts. | COMMENT |
| MEDIUM⚡ | backend/tests/unit/onyx/tools/test_tool_llm_names.py | 13 | # harness tool names (e.g. "browser", "bash") and starts rejecting them. | COMMENT |
| MEDIUM | …s/integration/tests/gateway_clients/run_with_server.sh | 3 | # need a real TCP api_server, which the in-process TestClient harness cannot | COMMENT |
| MEDIUM | …/tests/daily/connectors/zendesk/test_zendesk_data.json | 6 | "link": "https://d3v-onyx.zendesk.com/hc/en-us/articles/32502691728155-How-can-agents-leverage-knowledge-to-he | CODE |
| MEDIUM | backend/onyx/background/celery/apps/app_base.py | 165 | """We handle this signal in order to remove completed tasks | STRING |
| MEDIUM | backend/onyx/connectors/source_operations.py | 39 | """What an operation needs in order to run. | STRING |
| MEDIUM | backend/onyx/connectors/source_operations.py | 295 | # attribution the coverage harness counts, so coverage claims stay | COMMENT |
| LOW | backend/onyx/connectors/confluence/source_operations.py | 662 | # If it's not a method, just return it after ensuring token validity | COMMENT |
| MEDIUM | backend/onyx/connectors/slack/utils.py | 200 | """Simply replaces all tags with `@<USER_ID>` in order to prevent us from | STRING |
| LOW | backend/onyx/connectors/slack/connector.py | 607 | # we'll just set and use the last filter reason if | COMMENT |
| LOW | backend/onyx/connectors/slack/connector.py | 623 | # we'll just set and use the last filter reason if we get an empty list | COMMENT |
| MEDIUM | …document_index/opensearch/opensearch_document_index.py | 846 | # TODO(andrei): Fix the aforementioned race condition. | COMMENT |
| MEDIUM | …/onyx/tools/tool_implementations/python/python_tool.py | 228 | # OpenAI reserves the function name "python" for its own harness and | COMMENT |
| LOW | …nd/onyx/tools/tool_implementations/search/constants.py | 16 | # This may in the future just use an entirely keyword search. Currently it is a hybrid search with a keyword first phase | COMMENT |
| MEDIUM | …/onyx/llm/well_known_providers/llm_provider_options.py | 115 | # TODO: remove these lists once we have a comprehensive model configuration page | COMMENT |
| LOW | backend/onyx/auth/email_utils.py | 310 | # No images, just add HTML directly (higher priority than text) | STRING |
| MEDIUM | backend/onyx/file_processing/extract_file_text.py | 357 | # Unknown PDF parsing failure — elevate just the message, not a | COMMENT |
| LOW | backend/onyx/file_processing/extract_file_text.py | 1011 | # just return empty text | COMMENT |
| LOW | backend/onyx/file_store/s3_key_utils.py | 163 | # If no space for readable part, just use hash | COMMENT |
| LOW | backend/onyx/server/auth_check.py | 27 | # should always be callable, will just return 401 if not authenticated | COMMENT |
| LOW | backend/onyx/server/manage/llm/api.py | 505 | # Therefore, instead of performing additional, more complex logic, we just use a dummy value | COMMENT |
| LOW | backend/onyx/secondary_llm_flows/document_filter.py | 64 | # If center chunk not found in chunks list, just return center chunk | COMMENT |
| LOW | backend/onyx/onyxbot/slack/utils.py | 618 | # For other bots, just use the text as we have no way of knowing that the | COMMENT |
| LOW⚡ | backend/onyx/db/models.py | 2326 | # If not specified, will just use the model_dim without any reduction. | COMMENT |
| MEDIUM | backend/onyx/db/models.py | 3704 | # For "Custom LLM Providers", we don't provide a comprehensive list of models | COMMENT |
| LOW | backend/onyx/db/chat_search.py | 31 | # If no query, just return the most recent sessions | COMMENT |
| LOW | backend/onyx/db/usage.py | 82 | # No-op update: just set a field to its current value | COMMENT |
| LOW | backend/onyx/deep_research/dr_loop.py | 313 | # No citations in this step, it should just pass through all | COMMENT |
| LOW | backend/onyx/deep_research/dr_loop.py | 561 | # No citations in this step, it should just pass through all | COMMENT |
| MEDIUM | backend/scripts/env_inventory.py | 433 | # locals (e.g. `connector = ...` reused in a connector __main__ harness). | COMMENT |
| MEDIUM | backend/scripts/coding_agent_test.py | 84 | # with the research_agent test harness. | COMMENT |
| LOW | …nd/alembic/versions/be2ab2aa50ee_fix_capitalization.py | 36 | # cycle, so we just pass | STRING |
| LOW | …/da42808081e3_migrate_jira_connectors_to_new_format.py | 53 | # If URL parsing fails, just use the URL as the base | STRING |
| MEDIUM | backend/alembic/versions/3bd4c84fe72f_improved_index.py | 23 | # 2. Adds indexes to both chat_message and chat_session tables for comprehensive search | COMMENT |
| MEDIUM⚡ | …deployfiles/embedded/docker_compose/docker-compose.yml | 13 | # To convert this setup to a production deployment following best practices, | COMMENT |
| MEDIUM | .devcontainer/init-dev-user.sh | 8 | # We remap dev to that UID -- fast and seamless. | COMMENT |
| MEDIUM⚡ | deployment/docker_compose/docker-compose.yml | 13 | # To convert this setup to a production deployment following best practices, | COMMENT |
| MEDIUM⚡ | deployment/docker_compose/docker-compose.template.yml | 18 | # To convert this setup to a production deployment following best practices, | COMMENT |
| MEDIUM | .github/workflows/pr-terraform-provider-tests.yml | 15 | # Two auth legs run in parallel. `bootstrap` lets the harness register an admin | COMMENT |
| MEDIUM | .github/workflows/pr-terraform-provider-tests.yml | 340 | # deployment. Here they match the harness's own defaults, against a | COMMENT |
| MEDIUM | .github/workflows/pr-terraform-provider-tests.yml | 354 | # An empty key would send the harness down its own bootstrap path, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …pendency_unit/file_store/test_azure_blob_file_store.py | 322 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL⚡ | …x/background/celery/tasks/test_license_reclaim_task.py | 312 | mock_redis.return_value.pipeline.return_value.incr.assert_not_called() | CODE |
| CRITICAL⚡ | …x/background/celery/tasks/test_license_reclaim_task.py | 328 | mock_redis.return_value.pipeline.return_value.incr.assert_called_once() | CODE |
| CRITICAL | …ckground/celery/tasks/test_incognito_teardown_retry.py | 47 | redis_client.return_value.lock.return_value.release.assert_called_once_with() | CODE |
| CRITICAL⚡ | …yx/connectors/google_drive/test_drive_access_probes.py | 67 | service.files.return_value.list.return_value.execute.assert_not_called() | CODE |
| CRITICAL | backend/onyx/background/celery/celery_utils.py | 278 | queue_names = list(worker.app.amqp.queues.consume_from.keys()) | CODE |
| CRITICAL | backend/onyx/file_store/azure_blob_file_store.py | 154 | from azure.core.exceptions import HttpResponseError, ResourceExistsError | CODE |
| CRITICAL | backend/onyx/file_store/azure_blob_file_store.py | 331 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | backend/onyx/file_store/azure_blob_file_store.py | 378 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/tests/external_dependency_unit/mock_llm.py | 304 | CODE | |
| LOW | backend/tests/external_dependency_unit/mock_llm.py | 318 | CODE | |
| LOW | …tests/external_dependency_unit/mock_search_pipeline.py | 138 | CODE | |
| LOW | …dency_unit/answer/test_deep_research_agent_failures.py | 107 | CODE | |
| LOW | …dency_unit/answer/test_deep_research_agent_failures.py | 121 | CODE | |
| LOW | …l_dependency_unit/opensearch/test_opensearch_client.py | 117 | CODE | |
| LOW | …external_dependency_unit/indexing/test_port_reembed.py | 70 | CODE | |
| LOW | backend/tests/unit/sandbox_proxy/conftest.py | 100 | CODE | |
| LOW | backend/tests/unit/ee/onyx/hooks/test_executor.py | 27 | CODE | |
| LOW | …kend/tests/unit/onyx/connectors/box/fake_box_client.py | 215 | CODE | |
| LOW | backend/tests/unit/onyx/connectors/jira/conftest.py | 57 | CODE | |
| LOW | …/onyx/connectors/zendesk/test_zendesk_checkpointing.py | 78 | CODE | |
| LOW | …nnectors/sharepoint/test_load_checkpoint_resilience.py | 128 | CODE | |
| LOW | …onyx/connectors/sharepoint/test_delta_checkpointing.py | 221 | CODE | |
| LOW | backend/tests/unit/onyx/tools/test_coding_agent_loop.py | 124 | CODE | |
| LOW | backend/tests/unit/onyx/chat/test_citation_utils.py | 20 | CODE | |
| LOW | backend/tests/unit/onyx/chat/test_citation_processor.py | 35 | CODE | |
| LOW | …/server/features/craft/session/test_streaming_state.py | 28 | CODE | |
| LOW | …nit/onyx/server/manage/llm/test_model_configuration.py | 681 | CODE | |
| LOW | …/integration/common_utils/managers/image_generation.py | 28 | CODE | |
| LOW | …end/tests/integration/common_utils/managers/persona.py | 18 | CODE | |
| LOW | …end/tests/integration/common_utils/managers/persona.py | 85 | CODE | |
| LOW | …end/tests/integration/common_utils/managers/cc_pair.py | 65 | CODE | |
| LOW | …ests/integration/common_utils/managers/llm_provider.py | 18 | CODE | |
| LOW | …ion/mock_services/mcp_test_server/run_mock_oidc_idp.py | 330 | CODE | |
| LOW | backend/tests/common/craft/stubs.py | 532 | CODE | |
| LOW | backend/onyx/connectors/capability_checks/runner.py | 443 | CODE | |
| LOW | backend/onyx/connectors/capability_checks/models.py | 128 | CODE | |
| LOW | backend/onyx/connectors/confluence/connector.py | 251 | CODE | |
| LOW | backend/onyx/connectors/sharepoint/connector.py | 649 | CODE | |
| LOW | backend/onyx/connectors/teams/connector.py | 139 | CODE | |
| LOW | backend/onyx/connectors/zoom/connector.py | 178 | CODE | |
| LOW | backend/onyx/connectors/slack/connector.py | 639 | CODE | |
| LOW | backend/onyx/connectors/slack/connector.py | 843 | CODE | |
| LOW | backend/onyx/connectors/google_drive/connector.py | 321 | CODE | |
| LOW | backend/onyx/connectors/outlook/connector.py | 670 | CODE | |
| LOW | backend/onyx/tracing/framework/create.py | 185 | CODE | |
| LOW | backend/onyx/tracing/framework/span_data.py | 109 | CODE | |
| LOW | backend/onyx/document_index/opensearch/client.py | 293 | CODE | |
| LOW | backend/onyx/document_index/opensearch/client.py | 648 | CODE | |
| LOW | …ools/tool_implementations/open_url/onyx_web_crawler.py | 229 | CODE | |
| LOW | backend/onyx/llm/multi_llm.py | 566 | CODE | |
| LOW | backend/onyx/llm/multi_llm.py | 744 | CODE | |
| LOW | backend/onyx/llm/multi_llm.py | 1368 | CODE | |
| LOW | backend/onyx/llm/multi_llm.py | 1488 | CODE | |
| LOW | backend/onyx/llm/factory.py | 406 | CODE | |
| LOW | backend/onyx/context/search/federated/slack_search.py | 997 | CODE | |
| LOW | backend/onyx/chat/llm_loop.py | 769 | CODE | |
| LOW | backend/onyx/chat/llm_step.py | 793 | CODE | |
| LOW | backend/onyx/chat/llm_step.py | 1312 | CODE | |
| LOW | backend/onyx/redis/tenant_redis_client.py | 170 | CODE | |
| LOW | backend/onyx/redis/tenant_redis_client.py | 1234 | CODE | |
| LOW | backend/onyx/redis/redis_pool.py | 203 | CODE | |
| LOW | backend/onyx/auth/users.py | 2905 | CODE | |
| LOW | backend/onyx/file_store/file_store.py | 357 | CODE | |
| LOW | backend/onyx/server/manage/models.py | 188 | CODE | |
| LOW | backend/onyx/server/manage/users.py | 268 | CODE | |
| LOW | backend/onyx/server/manage/administrative.py | 207 | CODE | |
| LOW | backend/onyx/server/documents/models.py | 612 | CODE | |
| LOW | backend/onyx/server/documents/credential.py | 257 | CODE | |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | backend/onyx/connectors/imap/connector.py | 52 | # Usage: | COMMENT |
| LOW | backend/onyx/redis/redis_pool.py | 345 | # # Usage example | COMMENT |
| LOW | backend/onyx/utils/subclasses.py | 107 | # Example usage: | COMMENT |
| LOW⚡ | …s/embedded/docker_compose/docker-compose.onyx-lite.yml | 10 | # Usage: | COMMENT |
| LOW | …oyfiles/embedded/docker_compose/docker-compose.dev.yml | 12 | # Usage: | COMMENT |
| LOW⚡ | deployment/docker_compose/docker-compose.onyx-lite.yml | 10 | # Usage: | COMMENT |
| LOW | deployment/docker_compose/docker-compose.dev.yml | 12 | # Usage: | COMMENT |
| LOW⚡ | deployment/helm/charts/onyx/values-lite.yaml | 9 | # Usage: | COMMENT |
| LOW | deployment/helm/dev/k8s-down.sh | 8 | # Usage: | COMMENT |
| LOW | deployment/helm/dev/k8s-up.sh | 7 | # Usage: | COMMENT |
| LOW | deployment/helm/dev/craft-down.sh | 11 | # Usage: | COMMENT |
| LOW | deployment/helm/dev/craft-up.sh | 11 | # Usage: | COMMENT |
| LOW | examples/assistants-api/topics_analyzer.py | 116 | # Example usage | STRING |
| LOW | …aform-provider-onyx/examples/bootstrap/mint_api_key.sh | 17 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | widget/index.html | 267 | api-key="your-api-key-here" | CODE |
| HIGH | widget/README.md | 346 | Authorization: Bearer YOUR_API_KEY | CODE |
| HIGH | widget/README.md | 363 | Authorization: Bearer YOUR_API_KEY | CODE |
| HIGH | widget/README.md | 388 | VITE_WIDGET_API_KEY=your_api_key | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …onnectors/google_drive/test_google_drive_group_sync.py | 418 | CODE | |
| MEDIUM | …kend/tests/unit/background/celery/test_celery_utils.py | 53 | CODE | |
| MEDIUM | …ackground/celery/tasks/test_hierarchyfetching_queue.py | 33 | CODE | |
| MEDIUM | …nit/onyx/connectors/jira/test_jira_date_error_retry.py | 34 | CODE | |
| MEDIUM | …nnectors/sharepoint/test_load_checkpoint_resilience.py | 356 | CODE | |
| MEDIUM | …r/features/craft/test_webapp_proxy_header_stripping.py | 33 | CODE | |
| MEDIUM | …nit/onyx/server/features/mcp/test_mcp_oauth_refresh.py | 614 | CODE | |
| MEDIUM | backend/onyx/voice/providers/zoom.py | 481 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | backend/pytest.ini | 18 | # you can use it to test credentials locally. | COMMENT |
| LOW | …d/ee/onyx/external_permissions/post_query_censoring.py | 83 | # IMPORTANT: make sure to retain the same ordering as the original `chunks` passed in | COMMENT |
| LOW | …end/onyx/connectors/google_drive/section_extraction.py | 197 | # Don't forget to add the last section | COMMENT |
| LOW | backend/onyx/kg/models.py | 11 | # Note: make sure to write a migration if adding a non-nullable field or removing a field | COMMENT |
| MEDIUM | backend/onyx/prompts/coding_agent/coding_agent.py | 140 | - **No filler.** Cut "In summary,", "It's worth noting that,", "Essentially,", "Basically,", "I hope this helps". Cut se | CODE |
| LOW | backend/onyx/db/models.py | 1216 | # NOTE: if more sensitive data is added here for display, make sure to add user/group permission | COMMENT |
| LOW | backend/onyx/db/models.py | 1910 | # NOTE: if more sensitive data is added here for display, make sure to add user/group permission | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | web/tests/e2e/chat/chat_message_rendering.spec.ts | 97 | print(f"{doc.title}: {doc.score:.2f}") | CODE |
| HIGH | web/tests/e2e/chat/chat_file_uploads.spec.ts | 24 | print(greet("Onyx")) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/app/api/[...path]/route.ts | 66 | async function handleRequest(request: NextRequest, path: string[]) { | CODE |
| LOW | …nit/onyx/server/features/mcp/test_mcp_oauth_refresh.py | 674 | def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …nit/onyx/server/features/mcp/test_mcp_oauth_refresh.py | 741 | def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …nit/onyx/server/features/mcp/test_mcp_oauth_refresh.py | 794 | def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …s/unit/onyx/server/features/mcp/test_mcp_oauth_flow.py | 216 | def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …it/onyx/server/features/mcp/test_mcp_oauth_provider.py | 368 | def handle_request(request: httpx.Request) -> httpx.Response: | CODE |
| LOW | backend/tests/integration/common_utils/http_client.py | 44 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | widget/src/widget.ts | 663 | Responses are generated by AI and may be inaccurate | CODE |