| LOW | types/features/features.go | 1 | // Package features provides the annotations for [github.com/opencontainers/runtime-spec/specs-go/features]. | COMMENT |
| LOW | tests/rootless.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/rootless.sh | 121 | chmod g+rw "$CGROUP_MOUNT/$CGROUP_PATH/cgroup.subtree_control" "$CGROUP_MOUNT/$CGROUP_PATH/cgroup.procs" "$CGROUP_MOUN | COMMENT |
| LOW | tests/rootless.sh | 201 | # Run the test suite! | COMMENT |
| LOW | tests/fuzzing/oss_fuzz_build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/integration/bootstrap-get-images.sh | 21 | | COMMENT |
| LOW | tests/integration/helpers.bash | 201 | [ $EUID -ne 0 ] && user="--user" | COMMENT |
| LOW | tests/integration/helpers.bash | 981 | # Older EL9 kernels did not permit using ID map mounts | COMMENT |
| LOW | tests/integration/get-images.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/integration/testdata/seccomp_syscall_test1.c | 1 | #define _GNU_SOURCE | COMMENT |
| LOW | tests/integration/lib/assert.bash | 1 | #!/bin/bash | COMMENT |
| LOW | internal/pathrs/mkdirall_pathrslite.go | 21 | import ( | COMMENT |
| LOW | internal/pathrs/path.go | 81 | // do nothing | COMMENT |
| LOW | internal/sys/doc.go | 1 | // Package sys is an internal package that contains helper methods for dealing | COMMENT |
| LOW | internal/third_party/systemd/activation/files_unix.go | 1 | // Copyright 2015 CoreOS, Inc. | COMMENT |
| LOW | script/release_sign.sh | 1 | #!/bin/bash | COMMENT |
| LOW | script/keyring_validate.sh | 1 | #!/bin/bash | COMMENT |
| LOW | script/keyring_validate.sh | 81 | username="$(sed -En "s|^Comment:.* github=(\w+).*|\1|p" <<<"$block")" | COMMENT |
| LOW | script/build-libpathrs.sh | 1 | #!/bin/bash | COMMENT |
| LOW | script/keyring_addkey.sh | 1 | #!/bin/bash | COMMENT |
| LOW | script/check-binary-size.sh | 1 | #!/bin/bash | COMMENT |
| LOW | script/release_build.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .github/zizmor.yml | 1 | # Configuration for zizmor (https://docs.zizmor.sh/), run by the zizmor job | COMMENT |
| LOW | .github/workflows/review-policy.yml | 1 | # Enforce the pull request merge rules described in MAINTAINERS_GUIDE.md | COMMENT |
| LOW | .github/workflows/review-policy.yml | 21 | # request, so a pull request can change it. Therefore it is a governance file | COMMENT |
| LOW | libcontainer/init_wait_linux.go | 21 | // meaning it will never write anything to us again. | COMMENT |
| LOW | libcontainer/init_wait_linux.go | 61 | // Should the pid get recycled while we are polling, init is gone entirely, | COMMENT |
| LOW | libcontainer/setns_init_linux.go | 141 | // Close the pipe to signal that we have completed our init. | COMMENT |
| LOW | libcontainer/rootfs_linux.go | 681 | // contrast to mount(8)'s current behaviour, but is what users probably | COMMENT |
| LOW | libcontainer/rootfs_linux.go | 701 | // only difference from mount(8) is that we do this | COMMENT |
| LOW | libcontainer/rootfs_linux.go | 741 | } | COMMENT |
| LOW | libcontainer/rootfs_linux.go | 1201 | } | COMMENT |
| LOW | libcontainer/sync.go | 21 | // | COMMENT |
| LOW | libcontainer/factory_linux.go | 181 | // the following characters: | COMMENT |
| LOW | libcontainer/mount_linux.go | 141 | // in case it failed. | COMMENT |
| LOW | libcontainer/mount_linux.go | 241 | | COMMENT |
| LOW | libcontainer/mount_linux.go | 261 | | COMMENT |
| LOW | libcontainer/standard_init_linux.go | 301 | // (which can then be opened by container processes, leading to container | COMMENT |
| LOW | libcontainer/container_linux.go | 581 | // ExtraFiles otherwise it is possible for the stdlib to clobber the fd | COMMENT |
| LOW | libcontainer/cmd_clone.go | 1 | package libcontainer | COMMENT |
| LOW | libcontainer/process.go | 21 | // | COMMENT |
| LOW | libcontainer/process.go | 61 | | COMMENT |
| LOW | libcontainer/process.go | 101 | // LogLevel is a string containing a numeric representation of the current | COMMENT |
| LOW | libcontainer/process_linux.go | 201 | // cpuset.cpus, online or even present (hot-plugged) at call | COMMENT |
| LOW | libcontainer/process_linux.go | 301 | return fmt.Errorf("error adding pid %d to cgroups: %w", p.pid(), err) | COMMENT |
| LOW | libcontainer/init_linux.go | 441 | } | COMMENT |
| LOW | libcontainer/init_linux.go | 521 | if err := unix.Fstat(int(file.Fd()), &s); err != nil { | COMMENT |
| LOW | libcontainer/internal/userns/usernsfd_linux.go | 81 | // execve() is a waste of cycles because we just need some process to have | COMMENT |
| LOW | libcontainer/utils/utils_unix.go | 101 | // UnsafeCloseFrom closes all file descriptors greater or equal to minFd in the | COMMENT |
| LOW | libcontainer/utils/utils_unix.go | 161 | } | COMMENT |
| LOW | libcontainer/utils/utils_unix.go | 181 | // /proc/thread-self/, but it's better to be safe than sorry (and there are | COMMENT |
| LOW | libcontainer/specconv/spec_linux.go | 221 | // all containers. | COMMENT |
| LOW | libcontainer/specconv/spec_linux.go | 1081 | // can calculate uid and gid mappings within runc. These mappings are | COMMENT |
| LOW | libcontainer/system/proc.go | 81 | if err != nil { | COMMENT |
| LOW | libcontainer/intelrdt/intelrdt.go | 621 | // which means L3 cache id 0's CBM is 0xff, and L3 cache id 1's CBM | COMMENT |
| LOW | libcontainer/intelrdt/intelrdt.go | 641 | // predefined and can be looked up through "info/MB/min_bandwidth". | COMMENT |
| LOW | libcontainer/exeseal/cloned_binary_linux.go | 61 | return os.NewSyscallError("fcntl(F_ADD_SEALS)", err) | COMMENT |
| LOW | libcontainer/exeseal/overlayfs_linux.go | 41 | | COMMENT |
| LOW | libcontainer/exeseal/overlayfs_linux.go | 61 | | COMMENT |
| LOW | libcontainer/exeseal/overlayfs_linux.go | 101 | } | COMMENT |
| 17 more matches not shown… |
Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).