Secure, Fast, and Extensible Sandbox runtime for AI agents.
This report summarizes scanner evidence for opensandbox-group/OpenSandbox, a Python project with 15,776 GitHub stars. SynthScan examined 646,242 lines of code across 2554 source files, recording 8690 pattern matches distributed across 24 syntactic categories. The legacy adjusted pattern signal is 17.9 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 6568 finding(s).
Are imports declared and package/API names verified? 915 finding(s).
Are wrappers, guards, and repeated structures necessary? 4666 finding(s).
Which changes need focused human review? 8690 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 8690 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …python/tests/test_code_service_adapter_sync_headers.py | 46 | def test_sync_adapter_merges_endpoint_headers_into_both_clients() -> None: | CODE |
| LOW | …python/tests/test_code_service_adapter_sync_headers.py | 61 | def test_sync_adapter_endpoint_headers_override_connection_headers() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 81 | def test_code_execution_converter_includes_context() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 90 | async def test_run_code_streaming_happy_path_updates_execution() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 101 | async def test_run_code_streaming_merges_endpoint_headers() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 125 | async def test_run_code_can_accept_language_string_without_context() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 136 | async def test_run_code_rejects_blank_code() -> None: | CODE |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 146 | async def test_run_code_rejects_mismatched_language_and_context() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 84 | async def test_async_adapter_aclose_closes_owned_clients() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 96 | async def test_async_adapter_aclose_keeps_shared_transport_open() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 122 | def test_sync_adapter_close_closes_owned_clients() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 132 | def test_sync_adapter_close_keeps_shared_transport_open() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 155 | def test_sync_create_failure_releases_service_clients(monkeypatch) -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 180 | async def test_async_adapter_aclose_is_idempotent() -> None: | CODE |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 187 | def test_supported_language_sync_matches_async_values() -> None: | CODE |
| LOW | …ython/tests/test_code_service_adapter_openapi_calls.py | 32 | async def test_create_context_uses_openapi_and_converts(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …ython/tests/test_code_service_adapter_openapi_calls.py | 54 | async def test_interrupt_calls_openapi(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | …de-interpreter/python/tests/test_adapter_eager_init.py | 24 | async def test_code_service_eager_init_and_client_available() -> None: | CODE |
| LOW | …de-interpreter/python/tests/test_adapter_eager_init.py | 34 | async def test_code_service_eager_init_merges_endpoint_headers() -> None: | CODE |
| LOW | …er/python/tests/test_code_interpreter_proxy_headers.py | 87 | async def test_async_code_requests_use_sandbox_proxy_headers( | CODE |
| LOW | …er/python/tests/test_code_interpreter_proxy_headers.py | 119 | def test_sync_code_requests_use_sandbox_proxy_headers( | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 71 | async def test_create_requires_sandbox() -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 77 | async def test_create_wires_code_service_and_delegates_properties( | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 97 | async def test_create_pings_until_code_service_ready(monkeypatch) -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 117 | async def test_create_times_out_when_code_service_never_ready(monkeypatch) -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 133 | async def test_create_skip_health_check_does_not_ping(monkeypatch) -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 148 | async def test_create_runs_runtime_process_check_script(monkeypatch) -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 169 | async def test_create_times_out_when_runtime_process_missing(monkeypatch) -> None: | CODE |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 191 | async def test_create_failure_releases_service_clients(monkeypatch) -> None: | CODE |
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 248 | async def _is_runtime_process_alive(self) -> bool: | CODE |
| LOW | …interpreter/python/src/code_interpreter/models/code.py | 62 | def language_must_not_be_empty(cls, v: str) -> str: | CODE |
| LOW | …preter/python/src/code_interpreter/models/code_sync.py | 39 | def language_must_not_be_empty(cls, v: str) -> str: | CODE |
| LOW | …preter/python/src/code_interpreter/adapters/factory.py | 48 | def create_code_execution_service(self, endpoint: SandboxEndpoint) -> Codes: | CODE |
| LOW | …rpreter/adapters/converter/code_execution_converter.py | 95 | def from_api_code_context_dict(api_context: dict[str, Any]) -> CodeContext: | CODE |
| LOW⚡ | …r/python/src/code_interpreter/sync/code_interpreter.py | 220 | def _is_runtime_process_alive(self) -> bool: | CODE |
| LOW | …r/python/src/code_interpreter/sync/adapters/factory.py | 44 | def create_code_execution_service(self, endpoint: SandboxEndpoint) -> CodesSync: | CODE |
| LOW | …preter/javascript/src/factory/defaultAdapterFactory.ts | 41 | export function createDefaultAdapterFactory(): AdapterFactory { | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 104 | async def test_kill_manager_fallback_keeps_shared_transport_open(server) -> None: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 119 | def test_borrowed_config_shares_transport_without_ownership() -> None: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 134 | async def test_concurrent_connect_creates_single_registry_entry( | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 166 | async def test_slow_connect_does_not_block_unrelated_registry_ops( | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 210 | async def test_failed_connect_is_not_sticky(server, monkeypatch) -> None: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_mcp2_migration.py | 44 | def _read_requires_dist_from_source() -> list[str]: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_mcp2_migration.py | 75 | def test_server_module_imports(self) -> None: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_mcp2_migration.py | 88 | def test_old_fastmcp_import_raises(self) -> None: | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_cli.py | 42 | def test_streamable_http_uses_mcp_defaults( | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_cli.py | 67 | def test_streamable_http_forwards_host_and_port( | CODE |
| LOW | sdks/mcp/sandbox/python/tests/test_cli.py | 100 | def test_stdio_does_not_pass_http_bind_options( | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 133 | async def test_async_write_files_direct_execd_uses_chunked_upload() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 155 | async def test_async_write_files_direct_execd_rewinds_seekable_streams() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 174 | async def test_async_write_files_direct_execd_escapes_filename_header() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 191 | async def test_async_write_files_server_proxy_uses_content_length_and_preserves_charset() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 215 | async def test_async_write_files_direct_execd_encodes_strings_with_entry_encoding() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 236 | async def test_async_chunked_upload_does_not_follow_redirects( | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 264 | async def test_async_server_proxy_upload_does_not_follow_redirects( | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 297 | async def test_async_isolated_upload_does_not_follow_redirects( | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 332 | def test_sync_write_files_direct_execd_uses_chunked_upload() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 353 | def test_sync_write_files_direct_execd_rewinds_seekable_streams() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 371 | def test_sync_write_files_direct_execd_escapes_filename_header() -> None: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 387 | def test_sync_write_files_server_proxy_uses_content_length_and_preserves_charset() -> None: | CODE |
| 3383 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/code-interpreter/python/pyproject.toml | 1 | # Copyright 2025 The OpenSandbox Authors | COMMENT |
| LOW | …python/tests/test_code_service_adapter_sync_headers.py | 1 | # | COMMENT |
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 1 | # | COMMENT |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 1 | # | COMMENT |
| LOW | …ython/tests/test_code_service_adapter_openapi_calls.py | 1 | # | COMMENT |
| LOW | …de-interpreter/python/tests/test_adapter_eager_init.py | 1 | # | COMMENT |
| LOW | …er/python/tests/test_code_interpreter_proxy_headers.py | 1 | # Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …n/tests/test_code_interpreter_create_and_delegation.py | 1 | # | COMMENT |
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 1 | # | COMMENT |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 1 | # | COMMENT |
| LOW | …interpreter/python/src/code_interpreter/models/code.py | 1 | # | COMMENT |
| LOW | …rpreter/python/src/code_interpreter/models/__init__.py | 1 | # | COMMENT |
| LOW | …preter/python/src/code_interpreter/models/code_sync.py | 1 | # | COMMENT |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 1 | # | COMMENT |
| LOW | …reter/python/src/code_interpreter/adapters/__init__.py | 1 | # | COMMENT |
| LOW | …preter/python/src/code_interpreter/adapters/factory.py | 1 | # | COMMENT |
| LOW | …rpreter/adapters/converter/code_execution_converter.py | 1 | # | COMMENT |
| LOW | …on/src/code_interpreter/adapters/converter/__init__.py | 1 | # | COMMENT |
| LOW | …r/python/src/code_interpreter/sync/code_interpreter.py | 1 | # | COMMENT |
| LOW | …terpreter/python/src/code_interpreter/sync/__init__.py | 1 | # | COMMENT |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 1 | # | COMMENT |
| LOW | …/python/src/code_interpreter/sync/adapters/__init__.py | 1 | # | COMMENT |
| LOW | …r/python/src/code_interpreter/sync/adapters/factory.py | 1 | # | COMMENT |
| LOW | …eter/python/src/code_interpreter/sync/services/code.py | 1 | # | COMMENT |
| LOW | …/python/src/code_interpreter/sync/services/__init__.py | 1 | # | COMMENT |
| LOW | …terpreter/python/src/code_interpreter/services/code.py | 1 | # | COMMENT |
| LOW | …reter/python/src/code_interpreter/services/__init__.py | 1 | # | COMMENT |
| LOW | …nSandbox.CodeInterpreter.Tests/CodeInterpreterTests.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …tests/OpenSandbox.CodeInterpreter.Tests/ModelsTests.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …deInterpreter.Tests/CodeInterpreterHealthCheckTests.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …OpenSandbox.CodeInterpreter.Tests/CodesAdapterTests.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …ests/OpenSandbox.CodeInterpreter.Tests/FactoryTests.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 21 | using OpenSandbox.Services; | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 61 | /// Gets or sets whether to skip the strict code-executor readiness check. | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 81 | public class CodeInterpreterWaitUntilReadyOptions | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 101 | /// and are the same instances as on the underlying <see cref="Sandbox"/>. | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 141 | { | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/CodeInterpreter.cs | 221 | /// Healthy means both: | COMMENT |
| LOW | …p/src/OpenSandbox.CodeInterpreter/Models/CodeModels.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …p/src/OpenSandbox.CodeInterpreter/Models/CodeModels.cs | 21 | /// </summary> | COMMENT |
| LOW | …p/src/OpenSandbox.CodeInterpreter/Models/CodeModels.cs | 41 | /// </summary> | COMMENT |
| LOW | …p/src/OpenSandbox.CodeInterpreter/Models/CodeModels.cs | 61 | /// Gets or sets the context ID. | COMMENT |
| LOW | …p/src/OpenSandbox.CodeInterpreter/Models/CodeModels.cs | 101 | /// <summary> | COMMENT |
| LOW | …c/OpenSandbox.CodeInterpreter/Adapters/CodesAdapter.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …eInterpreter/Factory/ICodeInterpreterAdapterFactory.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …eInterpreter/Factory/ICodeInterpreterAdapterFactory.cs | 21 | COMMENT | |
| LOW | …eInterpreter/Factory/ICodeInterpreterAdapterFactory.cs | 41 | COMMENT | |
| LOW | …preter/Factory/DefaultCodeInterpreterAdapterFactory.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/Services/ICodes.cs | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/Services/ICodes.cs | 21 | /// <summary> | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/Services/ICodes.cs | 41 | /// <returns>The context.</returns> | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/Services/ICodes.cs | 61 | /// <exception cref="InvalidArgumentException">Thrown when <paramref name="contextId"/> is null or empty.</exception | COMMENT |
| LOW | …arp/src/OpenSandbox.CodeInterpreter/Services/ICodes.cs | 81 | /// <exception cref="InvalidArgumentException">Thrown when required request fields are missing.</exception> | COMMENT |
| LOW | sdks/code-interpreter/javascript/tsup.config.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | sdks/code-interpreter/javascript/src/interpreter.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | sdks/code-interpreter/javascript/src/index.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | sdks/code-interpreter/javascript/src/models.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …de-interpreter/javascript/src/adapters/openapiError.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| LOW | …de-interpreter/javascript/src/adapters/codesAdapter.ts | 1 | // Copyright 2026 The OpenSandbox Authors | COMMENT |
| 2297 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CONTRIBUTING.md | 270 | Create a new sandbox instance. Args: image: Container image specification timeout: Sandbox timeout | STRING |
| HIGH | …preter/python/src/code_interpreter/code_interpreter.py | 313 | Creates a CodeInterpreter from an existing Sandbox instance. This factory method handles the creation | STRING |
| HIGH | …r/python/src/code_interpreter/sync/code_interpreter.py | 279 | Create a CodeInterpreterSync from an existing SandboxSync instance (blocking). By default a strict hea | STRING |
| HIGH | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 268 | Execute code within the specified context using SSE streaming (sync). Args: code: Source c | STRING |
| HIGH | …eter/python/src/code_interpreter/sync/services/code.py | 59 | Create a new execution context for code interpretation (blocking). An execution context maintains stat | STRING |
| HIGH | …eter/python/src/code_interpreter/sync/services/code.py | 118 | Execute code within the specified context (blocking). This method runs the provided code string in the | STRING |
| HIGH | …terpreter/python/src/code_interpreter/services/code.py | 75 | Creates a new execution context for code interpretation. An execution context maintains the state of v | STRING |
| HIGH | …terpreter/python/src/code_interpreter/services/code.py | 162 | Executes code within the specified context. This method runs the provided code string in the language | STRING |
| HIGH | sdks/mcp/sandbox/python/src/opensandbox_mcp/server.py | 178 | Create a sandbox and store it in the MCP server session. This allocates a new sandbox instance using the OpenSa | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 292 | Get a specific network endpoint for this sandbox. Args: port: The port number to get the e | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 309 | Get a signed endpoint URL with an OSEP-0011 route token. Args: port: The port number to ge | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 357 | Set the sandbox expiration time. The new expiration time will be set to the current time plus the prov | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 571 | Create a new sandbox instance with the specified configuration. Args: image: Container ima | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 668 | Create a new sandbox from a ``Succeeded`` fsb template. Template mode fixes the workload shape on the | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 867 | Connect to an existing sandbox instance by ID. Args: sandbox_id: ID of the existing sandbo | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/manager.py | 140 | List sandboxes with filtering options. Args: filter: Filter criteria for sandbox listing | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/manager.py | 155 | Get information for a single sandbox by its ID. Args: sandbox_id: Sandbox ID to retrieve i | STRING |
| HIGH | …/python/src/opensandbox/adapters/filesystem_adapter.py | 177 | Read file content as bytes with support for range and line-based requests. Args: path: Path to the | STRING |
| HIGH | …box/python/src/opensandbox/adapters/metrics_adapter.py | 96 | Retrieve current resource usage metrics for a sandbox. Args: sandbox_id: The unique identifier of t | STRING |
| HIGH | …i/egress/api/credential_vault/post_credential_vault.py | 94 | Create a sandbox-local Credential Vault Create the initial sandbox-local Credential Vault revision and activate it | STRING |
| HIGH | …i/egress/api/credential_vault/post_credential_vault.py | 129 | Create a sandbox-local Credential Vault Create the initial sandbox-local Credential Vault revision and activate it | STRING |
| HIGH | …i/egress/api/credential_vault/post_credential_vault.py | 159 | Create a sandbox-local Credential Vault Create the initial sandbox-local Credential Vault revision and activate it | STRING |
| HIGH | …i/egress/api/credential_vault/post_credential_vault.py | 192 | Create a sandbox-local Credential Vault Create the initial sandbox-local Credential Vault revision and activate it | STRING |
| HIGH | …al_vault/get_credential_vault_bindings_binding_name.py | 80 | Get sanitized metadata for one binding Args: binding_name (str): Raises: errors.UnexpectedStat | STRING |
| HIGH | …al_vault/get_credential_vault_bindings_binding_name.py | 109 | Get sanitized metadata for one binding Args: binding_name (str): Raises: errors.UnexpectedStat | STRING |
| HIGH | …al_vault/get_credential_vault_bindings_binding_name.py | 133 | Get sanitized metadata for one binding Args: binding_name (str): Raises: errors.UnexpectedStat | STRING |
| HIGH | …al_vault/get_credential_vault_bindings_binding_name.py | 160 | Get sanitized metadata for one binding Args: binding_name (str): Raises: errors.UnexpectedStat | STRING |
| HIGH | …lt/get_credential_vault_credentials_credential_name.py | 80 | Get sanitized metadata for one credential Args: credential_name (str): Raises: errors.Unexpect | STRING |
| HIGH | …lt/get_credential_vault_credentials_credential_name.py | 109 | Get sanitized metadata for one credential Args: credential_name (str): Raises: errors.Unexpect | STRING |
| HIGH | …lt/get_credential_vault_credentials_credential_name.py | 133 | Get sanitized metadata for one credential Args: credential_name (str): Raises: errors.Unexpect | STRING |
| HIGH | …lt/get_credential_vault_credentials_credential_name.py | 160 | Get sanitized metadata for one credential Args: credential_name (str): Raises: errors.Unexpect | STRING |
| HIGH | …/egress/api/credential_vault/patch_credential_vault.py | 98 | Atomically mutate sandbox-local credentials and bindings Args: body (CredentialVaultMutationRequest): | STRING |
| HIGH | …/egress/api/credential_vault/patch_credential_vault.py | 127 | Atomically mutate sandbox-local credentials and bindings Args: body (CredentialVaultMutationRequest): | STRING |
| HIGH | …/egress/api/credential_vault/patch_credential_vault.py | 151 | Atomically mutate sandbox-local credentials and bindings Args: body (CredentialVaultMutationRequest): | STRING |
| HIGH | …/egress/api/credential_vault/patch_credential_vault.py | 178 | Atomically mutate sandbox-local credentials and bindings Args: body (CredentialVaultMutationRequest): | STRING |
| HIGH | …src/opensandbox/api/egress/api/policy/delete_policy.py | 89 | Delete egress rules Remove specific egress rules from the currently enforced policy by target. - Accepts a li | STRING |
| HIGH | …src/opensandbox/api/egress/api/policy/delete_policy.py | 124 | Delete egress rules Remove specific egress rules from the currently enforced policy by target. - Accepts a li | STRING |
| HIGH | …src/opensandbox/api/egress/api/policy/delete_policy.py | 154 | Delete egress rules Remove specific egress rules from the currently enforced policy by target. - Accepts a li | STRING |
| HIGH | …src/opensandbox/api/egress/api/policy/delete_policy.py | 187 | Delete egress rules Remove specific egress rules from the currently enforced policy by target. - Accepts a li | STRING |
| HIGH | …/src/opensandbox/api/egress/api/policy/patch_policy.py | 93 | Patch egress rules Merge incoming egress rules with the currently enforced policy. This endpoint uses merge s | STRING |
| HIGH | …/src/opensandbox/api/egress/api/policy/patch_policy.py | 129 | Patch egress rules Merge incoming egress rules with the currently enforced policy. This endpoint uses merge s | STRING |
| HIGH | …/src/opensandbox/api/egress/api/policy/patch_policy.py | 160 | Patch egress rules Merge incoming egress rules with the currently enforced policy. This endpoint uses merge s | STRING |
| HIGH | …/src/opensandbox/api/egress/api/policy/patch_policy.py | 194 | Patch egress rules Merge incoming egress rules with the currently enforced policy. This endpoint uses merge s | STRING |
| HIGH | …i/execd/api/isolated_execution/isolated_remove_dirs.py | 85 | Remove directories Args: session_id (UUID): path (list[str]): Raises: errors.Unexpecte | STRING |
| HIGH | …i/execd/api/isolated_execution/isolated_remove_dirs.py | 117 | Remove directories Args: session_id (UUID): path (list[str]): Raises: errors.Unexpecte | STRING |
| HIGH | …i/execd/api/isolated_execution/isolated_remove_dirs.py | 144 | Remove directories Args: session_id (UUID): path (list[str]): Raises: errors.Unexpecte | STRING |
| HIGH | …i/execd/api/isolated_execution/isolated_remove_dirs.py | 174 | Remove directories Args: session_id (UUID): path (list[str]): Raises: errors.Unexpecte | STRING |
| HIGH | …ecd/api/isolated_execution/isolated_replace_content.py | 99 | Replace file content Args: session_id (UUID): verbose (bool | Unset): body (IsolatedReplace | STRING |
| HIGH | …ecd/api/isolated_execution/isolated_replace_content.py | 134 | Replace file content Args: session_id (UUID): verbose (bool | Unset): body (IsolatedReplace | STRING |
| HIGH | …ecd/api/isolated_execution/isolated_replace_content.py | 164 | Replace file content Args: session_id (UUID): verbose (bool | Unset): body (IsolatedReplace | STRING |
| HIGH | …ecd/api/isolated_execution/isolated_replace_content.py | 197 | Replace file content Args: session_id (UUID): verbose (bool | Unset): body (IsolatedReplace | STRING |
| HIGH | …i/execd/api/isolated_execution/get_isolated_session.py | 84 | Get isolated session state Returns runtime status plus the creation parameters of the session. A stateless client | STRING |
| HIGH | …i/execd/api/isolated_execution/get_isolated_session.py | 117 | Get isolated session state Returns runtime status plus the creation parameters of the session. A stateless client | STRING |
| HIGH | …i/execd/api/isolated_execution/get_isolated_session.py | 145 | Get isolated session state Returns runtime status plus the creation parameters of the session. A stateless client | STRING |
| HIGH | …i/execd/api/isolated_execution/get_isolated_session.py | 176 | Get isolated session state Returns runtime status plus the creation parameters of the session. A stateless client | STRING |
| HIGH | …api/execd/api/isolated_execution/isolated_make_dirs.py | 84 | Create directories Args: session_id (UUID): body (IsolatedMakeDirsBody): Raises: error | STRING |
| HIGH | …api/execd/api/isolated_execution/isolated_make_dirs.py | 116 | Create directories Args: session_id (UUID): body (IsolatedMakeDirsBody): Raises: error | STRING |
| HIGH | …api/execd/api/isolated_execution/isolated_make_dirs.py | 143 | Create directories Args: session_id (UUID): body (IsolatedMakeDirsBody): Raises: error | STRING |
| HIGH | …api/execd/api/isolated_execution/isolated_make_dirs.py | 173 | Create directories Args: session_id (UUID): body (IsolatedMakeDirsBody): Raises: error | STRING |
| HIGH | …xecd/api/isolated_execution/isolated_list_directory.py | 108 | List directory contents Args: session_id (UUID): path (str): depth (int | Unset): Default: | STRING |
| 323 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …er/python/tests/test_code_service_adapter_streaming.py | 16 | CODE | |
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 27 | CODE | |
| LOW | …ython/tests/test_code_service_adapter_openapi_calls.py | 16 | CODE | |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 27 | CODE | |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 28 | CODE | |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 28 | CODE | |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 32 | CODE | |
| LOW | …rpreter/python/src/code_interpreter/models/__init__.py | 20 | CODE | |
| LOW | …rpreter/python/src/code_interpreter/models/__init__.py | 20 | CODE | |
| LOW | …reter/python/src/code_interpreter/adapters/__init__.py | 20 | CODE | |
| LOW | …reter/python/src/code_interpreter/adapters/__init__.py | 21 | CODE | |
| LOW | …reter/python/src/code_interpreter/adapters/__init__.py | 24 | CODE | |
| LOW | …on/src/code_interpreter/adapters/converter/__init__.py | 20 | CODE | |
| LOW | …terpreter/python/src/code_interpreter/sync/__init__.py | 16 | CODE | |
| LOW | …/python/src/code_interpreter/sync/adapters/__init__.py | 20 | CODE | |
| LOW | …/python/src/code_interpreter/sync/adapters/__init__.py | 21 | CODE | |
| LOW | …/python/src/code_interpreter/sync/services/__init__.py | 23 | CODE | |
| LOW | …reter/python/src/code_interpreter/services/__init__.py | 20 | CODE | |
| LOW | sdks/mcp/sandbox/python/tests/test_mcp2_protocol.py | 17 | CODE | |
| LOW | sdks/mcp/sandbox/python/tests/test_server_tools.py | 17 | CODE | |
| LOW | sdks/mcp/sandbox/python/tests/test_mcp2_migration.py | 23 | CODE | |
| LOW | sdks/mcp/sandbox/python/tests/test_cli.py | 15 | CODE | |
| LOW | sdks/mcp/sandbox/python/src/opensandbox_mcp/server.py | 15 | CODE | |
| LOW | sdks/mcp/sandbox/python/src/opensandbox_mcp/__init__.py | 18 | CODE | |
| LOW | sdks/mcp/sandbox/python/src/opensandbox_mcp/__main__.py | 15 | CODE | |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 16 | CODE | |
| LOW | …box/python/tests/test_converters_and_error_handling.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_config.py | 18 | CODE | |
| LOW | sdks/sandbox/python/tests/test_template_adapter.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_models_stability.py | 16 | CODE | |
| LOW | …/sandbox/python/tests/test_credential_vault_adapter.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_sse.py | 16 | CODE | |
| LOW | …ndbox/python/tests/test_isolated_filesystem_adapter.py | 23 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_tracing.py | 9 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_sync.py | 15 | CODE | |
| LOW | sdks/sandbox/python/tests/test_isolation_run_once.py | 18 | CODE | |
| LOW | sdks/sandbox/python/tests/test_redis_pool_store.py | 15 | CODE | |
| LOW | …/sandbox/python/tests/test_execd_proxy_auth_headers.py | 25 | CODE | |
| LOW | …python/tests/test_sandbox_service_adapter_lifecycle.py | 16 | CODE | |
| LOW | …x/python/tests/test_command_service_adapter_set_env.py | 18 | CODE | |
| LOW | …x/python/tests/test_command_service_adapter_session.py | 18 | CODE | |
| LOW | sdks/sandbox/python/tests/test_retry_policy.py | 18 | CODE | |
| LOW | …python/tests/test_command_service_adapter_streaming.py | 16 | CODE | |
| LOW | …s/sandbox/python/tests/test_isolated_service_import.py | 25 | CODE | |
| LOW | …ndbox/python/tests/test_pool_acquire_auth_fail_fast.py | 25 | CODE | |
| LOW | …thon/tests/test_sandbox_manager_sync_business_logic.py | 16 | CODE | |
| LOW | …n/tests/test_sandbox_sync_service_adapter_lifecycle.py | 16 | CODE | |
| LOW | …ndbox/python/tests/test_sandbox_sync_business_logic.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_retry_decision.py | 18 | CODE | |
| LOW | …n/tests/test_sync_command_service_adapter_streaming.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_redirect_integration.py | 16 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_async.py | 15 | CODE | |
| LOW | …hon/tests/test_sync_command_service_adapter_set_env.py | 18 | CODE | |
| LOW | …hon/tests/test_sync_command_service_adapter_session.py | 18 | CODE | |
| LOW | …ndbox/python/tests/test_readiness_error_attribution.py | 24 | CODE | |
| LOW | …ks/sandbox/python/tests/test_async_redis_pool_store.py | 15 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_manager.py | 15 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_kill_discarded.py | 25 | CODE | |
| LOW | …ox/python/tests/test_sandbox_manager_business_logic.py | 16 | CODE | |
| LOW | …s/sandbox/python/tests/test_isolation_session_state.py | 22 | CODE | |
| 720 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | sdks/sandbox/python/tests/test_models_stability.py | 304 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | sdks/sandbox/python/tests/test_models_stability.py | 306 | # ============================================================================ | COMMENT |
| MEDIUM | sdks/sandbox/python/tests/test_models_stability.py | 475 | # ============================================================================ | COMMENT |
| MEDIUM | sdks/sandbox/python/tests/test_models_stability.py | 477 | # ============================================================================ | COMMENT |
| MEDIUM | sdks/sandbox/python/src/opensandbox/models/sandboxes.py | 415 | # ============================================================================ | COMMENT |
| MEDIUM | sdks/sandbox/python/src/opensandbox/models/sandboxes.py | 417 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tests/python/tests/test_isolated_session_e2e.py | 264 | # ── RW mode: run-based file tests ───────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/python/tests/test_isolated_session_e2e.py | 482 | # ── Overlay mode tests ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/python/tests/test_isolated_session_e2e.py | 691 | # ── Bind mount tests (explicit source->dest binds) ───────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 89 | # ── Helpers ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 102 | # ── Core session tests ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 216 | # ── Attach (stateless recovery) ─────────────────────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 298 | # ── RW mode: filesystem API tests ───────────────────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 421 | # ── RO mode tests ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 646 | # ── run_once / session convenience method tests ────────────────── | COMMENT |
| MEDIUM | tests/python/tests/test_isolated_session_e2e.py | 770 | # ── Background run tests ───────────────────────────────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 289 | // ── RW mode: filesystem API tests ─────────────────────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 529 | // ── RO mode tests ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 615 | // ── Overlay mode tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 862 | // ── run_once / withSession convenience API tests ───────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 954 | // ── Bind mount tests (explicit source->dest binds) ───────────────── | COMMENT |
| MEDIUM | …om/alibaba/opensandbox/e2e/IsolatedSessionE2ETest.java | 1095 | // ── Multiple overlay mounts (overlays request field) ──────────────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 183 | // ── Background runs ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 308 | // ── RW mode: filesystem API tests ─────────────────────────────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 545 | // ── RO mode tests ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 644 | // ── Overlay mode tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 921 | // ── RunOnceAsync / WithSessionAsync convenience API tests ──────── | COMMENT |
| MEDIUM | …csharp/OpenSandbox.E2ETests/IsolatedSessionE2ETests.cs | 971 | // ── Bind mount tests (explicit source->dest binds) ───────────────── | COMMENT |
| MEDIUM | …sts/javascript/tests/test_isolated_session_e2e.test.ts | 725 | // ── runOnce / withSession convenience API tests ────────────────── | COMMENT |
| MEDIUM | …sts/javascript/tests/test_isolated_session_e2e.test.ts | 766 | // ── Background run tests ────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/test_signing.py | 150 | # ============================================================ | COMMENT |
| MEDIUM | server/tests/test_signing.py | 152 | # ============================================================ | COMMENT |
| MEDIUM⚡ | server/tests/test_signing.py | 220 | # ============================================================ | COMMENT |
| MEDIUM⚡ | server/tests/test_signing.py | 222 | # ============================================================ | COMMENT |
| MEDIUM⚡ | server/tests/test_ingress.py | 75 | # ============================================================ | COMMENT |
| MEDIUM⚡ | server/tests/test_ingress.py | 77 | # ============================================================ | COMMENT |
| MEDIUM | server/tests/test_config.py | 1950 | # ============================================================ | COMMENT |
| MEDIUM | server/tests/test_config.py | 1952 | # ============================================================ | COMMENT |
| MEDIUM | server/tests/test_docker_service.py | 4674 | # ============================================================================ | COMMENT |
| MEDIUM | server/tests/test_docker_service.py | 4676 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | server/tests/k8s/test_provider_common.py | 25 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | server/tests/k8s/test_provider_common.py | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | server/tests/k8s/test_provider_common.py | 89 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | server/tests/k8s/test_provider_common.py | 91 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 66 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 68 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 280 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 282 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 396 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 398 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 511 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/lifecycle.py | 513 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 29 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 31 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 72 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 74 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 202 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 204 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 418 | # ============================================================================ | COMMENT |
| MEDIUM | server/opensandbox_server/api/schema.py | 420 | # ============================================================================ | COMMENT |
| 135 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 245 | except Exception: | CODE |
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 261 | except Exception: | CODE |
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 370 | except Exception: | CODE |
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 379 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 206 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 225 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 243 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 257 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 273 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 355 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 361 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 382 | except Exception as e: | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 402 | except Exception as e: | CODE |
| LOW⚡ | …r/python/src/code_interpreter/sync/code_interpreter.py | 217 | except Exception: | CODE |
| LOW⚡ | …r/python/src/code_interpreter/sync/code_interpreter.py | 227 | except Exception: | CODE |
| LOW | …r/python/src/code_interpreter/sync/code_interpreter.py | 318 | except Exception: | CODE |
| LOW | …r/python/src/code_interpreter/sync/code_interpreter.py | 326 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 187 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 207 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 228 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 241 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 256 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 338 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 343 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 361 | except Exception as e: | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 378 | except Exception as e: | CODE |
| LOW | sdks/sandbox/python/README.md | 60 | except Exception as e: | CODE |
| MEDIUM | sdks/sandbox/python/README.md | 61 | print(f"Error: {e}") | CODE |
| LOW | sdks/sandbox/python/README.md | 292 | except Exception: | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_sync.py | 1103 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_sync.py | 1199 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_store.py | 171 | except Exception as exc: | CODE |
| MEDIUM | sdks/sandbox/python/tests/test_pool_store.py | 161 | def worker() -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 106 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 119 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 130 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 216 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 232 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 243 | except Exception as exc: | CODE |
| LOW | …ndbox/python/src/opensandbox/async_redis_pool_store.py | 462 | except Exception as exc: | CODE |
| MEDIUM | sdks/sandbox/python/src/opensandbox/pool_async.py | 887 | def cleanup() -> None: | CODE |
| MEDIUM | sdks/sandbox/python/src/opensandbox/pool_async.py | 1057 | def _raise_if_pool_namespace_destroyed(self) -> None: | CODE |
| MEDIUM | sdks/sandbox/python/src/opensandbox/pool_async.py | 1340 | def _release_primary_lock_best_effort(self) -> None: | CODE |
| LOW⚡ | sdks/sandbox/python/src/opensandbox/pool_async.py | 881 | except Exception as exc: | CODE |
| LOW⚡ | sdks/sandbox/python/src/opensandbox/pool_async.py | 890 | except Exception: | CODE |
| LOW⚡ | sdks/sandbox/python/src/opensandbox/pool_async.py | 997 | except Exception as exc: | CODE |
| LOW⚡ | sdks/sandbox/python/src/opensandbox/pool_async.py | 1062 | except Exception: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 224 | except Exception: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 312 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 388 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 427 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 475 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 488 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 501 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 631 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 795 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 1213 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 1345 | except Exception as exc: | CODE |
| LOW | …ndbox/python/src/opensandbox/_async_pool_reconciler.py | 132 | except Exception as exc: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/redis_pool_store.py | 538 | except Exception as exc: | STRING |
| 537 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdks/sandbox/python/src/opensandbox/pool_async.py | 592 | except (asyncio.TimeoutError, TimeoutError): | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/pool_async.py | 864 | except (asyncio.TimeoutError, TimeoutError): | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/pool_async.py | 890 | except Exception: | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/pool_async.py | 457 | except asyncio.CancelledError: | CODE |
| HIGH | …ndbox/python/src/opensandbox/config/connection_sync.py | 201 | except Exception: | CODE |
| HIGH | …ks/sandbox/python/src/opensandbox/config/connection.py | 221 | except Exception: | CODE |
| HIGH | …andbox/python/src/opensandbox/internal/pool_tracing.py | 188 | except Exception: | CODE |
| HIGH | …andbox/python/src/opensandbox/internal/pool_tracing.py | 149 | except Exception: | CODE |
| HIGH | …andbox/python/src/opensandbox/internal/pool_tracing.py | 157 | except Exception: | CODE |
| HIGH | …/python/src/opensandbox/adapters/filesystem_adapter.py | 562 | except JSONDecodeError: | CODE |
| HIGH | …rc/opensandbox/adapters/isolated_filesystem_adapter.py | 343 | except JSONDecodeError: | CODE |
| HIGH | …/opensandbox/adapters/converter/exception_converter.py | 154 | except Exception: | CODE |
| HIGH | …rc/opensandbox/api/egress/models/credential_binding.py | 119 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …rc/opensandbox/api/egress/models/credential_binding.py | 127 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …rc/opensandbox/api/egress/models/credential_binding.py | 135 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …rc/opensandbox/api/egress/models/credential_binding.py | 143 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …pensandbox/api/execd/models/command_status_response.py | 141 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …rc/opensandbox/api/execd/models/isolated_run_status.py | 134 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | …box/python/src/opensandbox/api/lifecycle/models/pvc.py | 156 | except (TypeError, ValueError, AttributeError, KeyError): | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1073 | except Exception: | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1078 | except Exception: | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1121 | except Exception: | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1117 | except Exception: | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1593 | except BaseException: | CODE |
| HIGH | …on/src/opensandbox/sync/adapters/filesystem_adapter.py | 484 | except JSONDecodeError: | CODE |
| HIGH | …ensandbox/sync/adapters/isolated_filesystem_adapter.py | 347 | except JSONDecodeError: | CODE |
| HIGH | tests/python/tests/test_credential_vault_e2e.py | 569 | except Exception: | CODE |
| HIGH | tests/python/tests/test_execd_init_e2e.py | 238 | except Exception: # noqa: BLE001 # the execd connection dies mid-stream | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1364 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1368 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1372 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1380 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1384 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_async.py | 1400 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 336 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 341 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 405 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 410 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 486 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 491 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 551 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 556 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 631 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 636 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 693 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 698 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 772 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 777 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_e2e_sync.py | 133 | except Exception: | CODE |
| HIGH | tests/python/tests/test_execd_hardening_e2e.py | 251 | except Exception: # noqa: BLE001 # file may not be flushed yet | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1262 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1266 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1270 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1278 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1282 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1298 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_manager_e2e.py | 183 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_manager_e2e.py | 187 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_manager_e2e.py | 193 | except Exception: | CODE |
| HIGH | tests/python/tests/test_sandbox_manager_e2e.py | 199 | except Exception: | CODE |
| 63 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdks/sandbox/python/src/opensandbox/sandbox.py | 0 | provides access to the connection configuration (including shared transport). | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/manager.py | 0 | provides access to the connection configuration (including shared transport). | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/sandbox.py | 0 | provides access to the connection configuration (including shared transport). | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/sync/manager.py | 0 | provides access to the connection configuration (including shared transport). | STRING |
| HIGH | …dbox/python/src/opensandbox/adapters/health_adapter.py | 0 | initialize the metrics service adapter. args: connection_config: connection configuration (shared transport, headers, ti | STRING |
| HIGH | …box/python/src/opensandbox/adapters/command_adapter.py | 0 | initialize the metrics service adapter. args: connection_config: connection configuration (shared transport, headers, ti | STRING |
| HIGH | …box/python/src/opensandbox/adapters/metrics_adapter.py | 0 | initialize the metrics service adapter. args: connection_config: connection configuration (shared transport, headers, ti | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | a class for keeping track of data related to the api the following are accepted as keyword arguments and will be used to | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | a class for keeping track of data related to the api the following are accepted as keyword arguments and will be used to | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | a class for keeping track of data related to the api the following are accepted as keyword arguments and will be used to | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | a class for keeping track of data related to the api the following are accepted as keyword arguments and will be used to | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | get a new client matching this one with additional headers | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | get a new client matching this one with additional headers | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | get a new client matching this one with additional headers | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | get a new client matching this one with additional headers | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | get a new client matching this one with additional cookies | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | get a new client matching this one with additional cookies | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | get a new client matching this one with additional cookies | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | get a new client matching this one with additional cookies | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | get a new client matching this one with a new timeout configuration | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | get a new client matching this one with a new timeout configuration | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | get a new client matching this one with a new timeout configuration | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | get a new client matching this one with a new timeout configuration | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | manually set the underlying httpx.asyncclient **note**: this will override any other settings on the client, including c | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | manually set the underlying httpx.asyncclient **note**: this will override any other settings on the client, including c | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | manually set the underlying httpx.asyncclient **note**: this will override any other settings on the client, including c | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | manually set the underlying httpx.asyncclient **note**: this will override any other settings on the client, including c | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | get the underlying httpx.client, constructing a new one if not previously set | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | get the underlying httpx.client, constructing a new one if not previously set | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | get the underlying httpx.client, constructing a new one if not previously set | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | get the underlying httpx.client, constructing a new one if not previously set | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | enter a context manager for self.client—you cannot enter twice (see httpx docs) | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | enter a context manager for self.client—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | enter a context manager for self.client—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | enter a context manager for self.client—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | exit a context manager for internal httpx.client (see httpx docs) | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | exit a context manager for internal httpx.client (see httpx docs) | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | exit a context manager for internal httpx.client (see httpx docs) | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | exit a context manager for internal httpx.client (see httpx docs) | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | get the underlying httpx.asyncclient, constructing a new one if not previously set | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | get the underlying httpx.asyncclient, constructing a new one if not previously set | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | get the underlying httpx.asyncclient, constructing a new one if not previously set | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | get the underlying httpx.asyncclient, constructing a new one if not previously set | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | enter a context manager for underlying httpx.asyncclient—you cannot enter twice (see httpx docs) | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | enter a context manager for underlying httpx.asyncclient—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | enter a context manager for underlying httpx.asyncclient—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | enter a context manager for underlying httpx.asyncclient—you cannot enter twice (see httpx docs) | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | exit a context manager for underlying httpx.asyncclient (see httpx docs) | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | exit a context manager for underlying httpx.asyncclient (see httpx docs) | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | exit a context manager for underlying httpx.asyncclient (see httpx docs) | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | exit a context manager for underlying httpx.asyncclient (see httpx docs) | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/client.py | 0 | a client which has been authenticated for use on secured endpoints the following are accepted as keyword arguments and w | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/client.py | 0 | a client which has been authenticated for use on secured endpoints the following are accepted as keyword arguments and w | STRING |
| HIGH | …andbox/python/src/opensandbox/api/diagnostic/client.py | 0 | a client which has been authenticated for use on secured endpoints the following are accepted as keyword arguments and w | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/lifecycle/client.py | 0 | a client which has been authenticated for use on secured endpoints the following are accepted as keyword arguments and w | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/egress/types.py | 0 | return a tuple representation that httpx will accept for multipart/form-data | STRING |
| HIGH | sdks/sandbox/python/src/opensandbox/api/execd/types.py | 0 | return a tuple representation that httpx will accept for multipart/form-data | STRING |
| HIGH | …sandbox/python/src/opensandbox/api/diagnostic/types.py | 0 | return a tuple representation that httpx will accept for multipart/form-data | STRING |
| HIGH | …/sandbox/python/src/opensandbox/api/lifecycle/types.py | 0 | return a tuple representation that httpx will accept for multipart/form-data | STRING |
| HIGH | …ks/sandbox/python/src/opensandbox/api/egress/errors.py | 0 | contains shared errors types that can be raised from api functions | STRING |
| 14 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …preter/python/src/code_interpreter/code_interpreter.py | 41 | logger = logging.getLogger(__name__) | CODE |
| LOW | …de-interpreter/python/src/code_interpreter/__init__.py | 34 | __all__ = [ | CODE |
| LOW | …rpreter/python/src/code_interpreter/models/__init__.py | 25 | __all__ = [ | CODE |
| LOW | …r/python/src/code_interpreter/adapters/code_adapter.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | …reter/python/src/code_interpreter/adapters/__init__.py | 26 | __all__ = [ | CODE |
| LOW | …on/src/code_interpreter/adapters/converter/__init__.py | 24 | __all__ = [ | CODE |
| LOW | …r/python/src/code_interpreter/sync/code_interpreter.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …terpreter/python/src/code_interpreter/sync/__init__.py | 18 | __all__ = ["CodeInterpreterSync"] | CODE |
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 47 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/python/src/code_interpreter/sync/adapters/__init__.py | 23 | __all__ = [ | CODE |
| LOW | …/python/src/code_interpreter/sync/services/__init__.py | 25 | __all__ = [ | CODE |
| LOW | …reter/python/src/code_interpreter/services/__init__.py | 22 | __all__ = [ | CODE |
| LOW | sdks/mcp/sandbox/python/src/opensandbox_mcp/__init__.py | 25 | __all__ = ["create_server"] | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_sync.py | 1669 | def set_max_idle(self, pool_name: str, max_idle: int) -> None: | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_async.py | 1588 | async def set_max_idle(self, pool_name: str, max_idle: int) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_redis.py | 24 | __all__ = [ | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_manager.py | 276 | __all__ = [ | CODE |
| LOW | …ndbox/python/src/opensandbox/async_redis_pool_store.py | 291 | async def set_max_idle(self, pool_name: str, max_idle: int) -> None: | CODE |
| LOW | …ndbox/python/src/opensandbox/async_redis_pool_store.py | 307 | async def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 74 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 1369 | __all__ = [ | CODE |
| LOW | …ndbox/python/src/opensandbox/_async_pool_reconciler.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ks/sandbox/python/src/opensandbox/_async_pool_store.py | 180 | async def set_max_idle(self, pool_name: str, max_idle: int) -> None: | CODE |
| LOW | …ks/sandbox/python/src/opensandbox/_async_pool_store.py | 185 | async def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/__init__.py | 130 | __all__ = [ | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/redis_pool_store.py | 375 | def set_max_idle(self, pool_name: str, max_idle: int) -> None: | STRING |
| LOW | sdks/sandbox/python/src/opensandbox/redis_pool_store.py | 391 | def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: | STRING |
| LOW | sdks/sandbox/python/src/opensandbox/sandbox.py | 70 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/_pool_reconciler.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool.py | 52 | __all__ = [ | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/_pool_store.py | 184 | def set_max_idle(self, pool_name: str, max_idle: int) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/_pool_store.py | 189 | def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/manager.py | 48 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_types.py | 253 | def set_max_idle(self, pool_name: str, max_idle: int) -> None: ... | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_types.py | 255 | def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: ... | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_types.py | 295 | async def set_max_idle(self, pool_name: str, max_idle: int) -> None: ... | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/pool_types.py | 297 | async def set_idle_entry_ttl(self, pool_name: str, idle_ttl: timedelta) -> None: ... | CODE |
| LOW | …ndbox/python/src/opensandbox/transport/_async_retry.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | …s/sandbox/python/src/opensandbox/transport/__init__.py | 51 | __all__ = [ | CODE |
| LOW | …andbox/python/src/opensandbox/transport/_sync_retry.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/config/__init__.py | 23 | __all__ = ["ConnectionConfig", "ConnectionConfigSync"] | CODE |
| LOW | …x/python/src/opensandbox/internal/lifecycle_metrics.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …andbox/python/src/opensandbox/internal/pool_tracing.py | 94 | def set_sandbox_id(self, sandbox_id: str) -> None: | CODE |
| LOW⚡ | …andbox/python/src/opensandbox/internal/pool_tracing.py | 144 | def _set_attribute(self, key: str, value: Any) -> None: | CODE |
| LOW | sdks/sandbox/python/src/opensandbox/models/__init__.py | 96 | __all__ = [ | CODE |
| LOW | …/sandbox/python/src/opensandbox/exceptions/__init__.py | 39 | __all__ = [ | CODE |
| LOW | …dbox/python/src/opensandbox/adapters/health_adapter.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …x/python/src/opensandbox/adapters/sandboxes_adapter.py | 72 | logger = logging.getLogger(__name__) | CODE |
| LOW | …dbox/python/src/opensandbox/adapters/egress_adapter.py | 48 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/python/src/opensandbox/adapters/filesystem_adapter.py | 60 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/python/src/opensandbox/adapters/filesystem_adapter.py | 531 | async def set_permissions(self, entries: list[SetPermissionEntry]) -> None: | CODE |
| LOW | …python/src/opensandbox/adapters/diagnostics_adapter.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | …box/python/src/opensandbox/adapters/command_adapter.py | 74 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …box/python/src/opensandbox/adapters/command_adapter.py | 244 | async def set_env(self, key: str, value: str) -> None: | CODE |
| LOW | …ks/sandbox/python/src/opensandbox/adapters/__init__.py | 30 | __all__ = [ | CODE |
| LOW | …hon/src/opensandbox/adapters/network_policy_adapter.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ox/python/src/opensandbox/adapters/isolated_adapter.py | 61 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rc/opensandbox/adapters/isolated_filesystem_adapter.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rc/opensandbox/adapters/isolated_filesystem_adapter.py | 311 | async def set_permissions(self, entries: list[SetPermissionEntry]) -> None: | CODE |
| 158 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | README.md | 205 | osb config set connection.api_key <your-api-key> | CODE |
| HIGH | sdks/code-interpreter/python/README.md | 48 | api_key="your-api-key", | CODE |
| HIGH | sdks/code-interpreter/python/README.md | 109 | api_key="your-api-key", | CODE |
| HIGH | sdks/code-interpreter/csharp/README.md | 33 | ApiKey = "your-api-key" | CODE |
| HIGH | sdks/code-interpreter/javascript/README.md | 45 | apiKey: "your-api-key", | CODE |
| HIGH | sdks/sandbox/go/README.md | 35 | lc := opensandbox.NewLifecycleClient("http://localhost:8080/v1", "your-api-key") | CODE |
| HIGH | sdks/sandbox/python/README.md | 36 | api_key="your-api-key" | CODE |
| HIGH | sdks/sandbox/python/README.md | 80 | api_key="your-api-key", | CODE |
| HIGH | sdks/sandbox/python/src/opensandbox/__init__.py | 57 | api_key="your-api-key", | STRING |
| HIGH | sdks/sandbox/kotlin/README.md | 43 | .apiKey("your-api-key") | CODE |
| HIGH | sdks/sandbox/kotlin/code-interpreter/README.md | 54 | .apiKey("your-api-key") | CODE |
| HIGH | sdks/sandbox/csharp/README.md | 34 | ApiKey = "your-api-key", | CODE |
| HIGH | sdks/sandbox/javascript/README.md | 37 | apiKey: "your-api-key", | CODE |
| HIGH | specs/sandbox-lifecycle.yml | 30 | OPEN-SANDBOX-API-KEY: your-api-key | CODE |
| HIGH | specs/sandbox-lifecycle.yml | 35 | OPEN_SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | specs/sandbox-lifecycle.yml | 1106 | 1. HTTP Header: OPEN-SANDBOX-API-KEY: your-api-key | CODE |
| HIGH | specs/diagnostic-api.yml | 27 | OPEN-SANDBOX-API-KEY: your-api-key | CODE |
| HIGH | specs/diagnostic-api.yml | 32 | OPEN_SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | specs/diagnostic-api.yml | 190 | 1. HTTP Header: OPEN-SANDBOX-API-KEY: your-api-key | CODE |
| HIGH | docs/sdks/kotlin.md | 51 | .apiKey("your-api-key") | CODE |
| HIGH | docs/sdks/kotlin.md | 87 | .apiKey("your-api-key") | CODE |
| HIGH | docs/sdks/go.md | 402 | APIKey: "your-api-key", | CODE |
| HIGH | docs/sdks/python.md | 42 | api_key="your-api-key" | CODE |
| HIGH | docs/sdks/python.md | 85 | api_key="your-api-key", | CODE |
| HIGH | docs/sdks/csharp.md | 41 | ApiKey = "your-api-key", | CODE |
| HIGH | docs/sdks/javascript.md | 44 | apiKey: "your-api-key", | CODE |
| HIGH | docs/cli/index.md | 61 | osb config set connection.api_key <your-api-key> | CODE |
| HIGH | docs/cli/index.md | 511 | api_key = "your-api-key" | CODE |
| HIGH | docs/examples/rclone-volume-mount.md | 119 | export OPEN_SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | docs/examples/docker-ossfs-volume-mount.md | 63 | export SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | docs/examples/kubernetes-pvc-volume-mount.md | 99 | export OPEN_SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | docs/examples/client-pool-schedule.md | 29 | export OPEN_SANDBOX_API_KEY=your-api-key | CODE |
| HIGH | docs/examples/qwen-code.md | 36 | export API_KEY=your-api-key | CODE |
| HIGH | docs/api/index.md | 67 | - HTTP Header: `OPEN-SANDBOX-API-KEY: your-api-key` | CODE |
| HIGH | docs/api/index.md | 83 | - HTTP Header: `OPEN-SANDBOX-API-KEY: your-api-key` | CODE |
| HIGH | cli/README.md | 55 | osb config set connection.api_key <your-api-key> | CODE |
| HIGH | cli/README.md | 519 | api_key = "your-api-key" | CODE |
| HIGH | cli/src/opensandbox_cli/config.py | 48 | # api_key = "your-api-key" | COMMENT |
| HIGH | examples/kubernetes-pvc-volume-mount/main.py | 29 | export OPEN_SANDBOX_API_KEY=your-api-key | STRING |
| HIGH | oseps/0003-volume-and-volumebinding-support.md | 237 | client = AuthenticatedClient(base_url="https://api.opensandbox.io", token="YOUR_API_KEY") | CODE |
| HIGH | oseps/0003-volume-and-volumebinding-support.md | 297 | client = AuthenticatedClient(base_url="https://api.opensandbox.io", token="YOUR_API_KEY") | CODE |
| HIGH | oseps/0003-volume-and-volumebinding-support.md | 375 | client = AuthenticatedClient(base_url="https://api.opensandbox.io", token="YOUR_API_KEY") | CODE |
| HIGH | oseps/0003-volume-and-volumebinding-support.md | 462 | client = AuthenticatedClient(base_url="https://api.opensandbox.io", token="YOUR_API_KEY") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …preter/python/src/code_interpreter/code_interpreter.py | 55 | "&& exit 0 || exit 1" | CODE |
| HIGH | …r/python/src/code_interpreter/sync/code_interpreter.py | 51 | "&& exit 0 || exit 1" | CODE |
| HIGH | …python/tests/test_command_service_adapter_streaming.py | 154 | b'data: {"type":"error","error":{"ename":"CommandExecError","evalue":"fork/exec /usr/bin/bash: resource | CODE |
| HIGH | …n/tests/test_sync_command_service_adapter_streaming.py | 147 | b'data: {"type":"error","error":{"ename":"CommandExecError","evalue":"fork/exec /usr/bin/bash: resource | CODE |
| HIGH | tests/python/tests/test_execd_init_e2e.py | 77 | "stat=$(cat \"$p/stat\" 2>/dev/null) || continue; " | CODE |
| HIGH⚡ | tests/python/tests/test_execd_hardening_e2e.py | 344 | _run_command(sandbox, "echo ok > /tmp/hardening-e2e-write && rm /tmp/hardening-e2e-write") | CODE |
| HIGH⚡ | tests/python/tests/test_execd_hardening_e2e.py | 478 | "echo x > /tmp/rq-probe && chmod 755 /tmp/rq-probe" | CODE |
| HIGH⚡ | tests/python/tests/test_isolated_session_e2e.py | 279 | await session.run("mkdir -p /tmp/subdir && echo nested > /tmp/subdir/file.txt") | CODE |
| HIGH⚡ | tests/python/tests/test_isolated_session_e2e.py | 280 | result = await session.run("cat /tmp/persist.txt && cat /tmp/subdir/file.txt") | CODE |
| HIGH⚡ | tests/python/tests/test_isolated_session_e2e.py | 492 | f"cat /tmp/{marker} 2>&1 || echo NOT_FOUND" | CODE |
| HIGH⚡ | tests/python/tests/test_isolated_session_e2e.py | 537 | host_check = await self.sandbox.commands.run(f"cat {path} 2>&1 || echo NOT_FOUND") | CODE |
| HIGH⚡ | tests/python/tests/test_isolated_session_e2e.py | 843 | run = await session.run_background("sleep 2 && echo woke-up") | CODE |
| HIGH | tests/python/tests/test_isolated_session_e2e.py | 186 | "cat /tmp/isolated_test_file.txt 2>&1 || echo NOT_FOUND" | CODE |
| HIGH | tests/python/tests/test_fsb_e2e.py | 467 | # (upsert + delete via null), renew-expiration. | COMMENT |
| HIGH | server/tests/test_docker_delete_integration.py | 85 | const event = JSON.parse(body); event.acknowledged = false; events.push(event); | CODE |
| HIGH⚡ | server/tests/k8s/test_k8s_windows_profile.py | 183 | entrypoint=["/bin/sh", "-c", "patch && exec /run/entry.sh"], | CODE |
| HIGH⚡ | server/tests/k8s/test_k8s_windows_profile.py | 188 | assert main["command"] == ["/bin/sh", "-c", "patch && exec /run/entry.sh"] | CODE |
| HIGH | server/opensandbox_server/config.py | 550 | "Set to 0 to disable (TOML cannot express null). " | CODE |
| HIGH | server/opensandbox_server/api/schema.py | 485 | "When omitted or null, the sandbox will not auto-terminate and must be deleted explicitly. " | CODE |
| HIGH | server/opensandbox_server/services/signing.py | 23 | inner = BE32(len(secret)) || secret || BE32(len(canonical)) || canonical | STRING |
| HIGH | server/opensandbox_server/services/signing.py | 145 | ``inner = BE32(len(secret)) || secret || BE32(len(canonical)) || canonical`` | STRING |
| HIGH | …ver/opensandbox_server/services/k8s/provider_common.py | 128 | "chmod +x /opt/opensandbox/bwrap || true) && " | CODE |
| HIGH | components/execd/tests/smoke_api.py | 54 | payload = {"command": "echo smoke-command && sleep 1", "background": True} | CODE |
| HIGH | components/execd/tests/smoke_api.py | 153 | "command": "sh -c 'echo long-run-start && sleep 20 && echo long-run-end'", | CODE |
| HIGH | examples/deer-flow/main.py | 28 | cd deer-flow/backend && uv sync --all-packages --extra opensandbox | STRING |
| HIGH | examples/qwen-code/main.py | 115 | 'cd /tmp/qwen-code-example && qwen -p "Compute 1+1 and reply with only the final number."' | CODE |
| HIGH | examples/host-volume-mount/main.py | 171 | "touch /mnt/readonly/should-fail.txt 2>&1 || echo 'Write denied (expected)'" | CODE |
| HIGH | examples/docker-pvc-volume-mount/main.py | 198 | "touch /mnt/readonly/should-fail.txt 2>&1 || echo 'Write denied (expected)'" | CODE |
| HIGH | examples/docker-pvc-volume-mount/main.py | 312 | result = await sandbox.commands.run("test -f /mnt/training-data/marker.txt && echo FOUND || echo NOT-FOUND") | CODE |
| HIGH | examples/docker-pvc-volume-mount/main.py | 312 | result = await sandbox.commands.run("test -f /mnt/training-data/marker.txt && echo FOUND || echo NOT-FOUND") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/sandbox/go/pool_reconciler.go | 134 | // Step 1: Try to acquire the primary lock. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 146 | // Step 2: Reap expired idle entries. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 166 | // Step 3: Snapshot counters and determine current state. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 179 | // Step 4: If idle > maxIdle, shrink excess. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 215 | // Step 5: If deficit > 0 and not in backoff, create sandboxes. | COMMENT |
| LOW | sdks/sandbox/kotlin/code-interpreter/README.md | 201 | // Step 1: Define variables | COMMENT |
| LOW | sdks/sandbox/kotlin/code-interpreter/README.md | 211 | // Step 2: Use variables from previous step | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 458 | # Step 2: Write a file from inside the sandbox to the mounted path (read-write) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 464 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 476 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 541 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 603 | # Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 609 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 621 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 683 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 746 | # Step 2: Verify we only see the subpath contents (not the full volume) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 754 | # Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 446 | # Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 529 | # Step 1: Verify the host marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 591 | # Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 671 | # Step 1: Verify the marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 734 | # Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 710 | # Step 2: Write a file from inside the sandbox to the mounted path (read-write) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 717 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 791 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 850 | # Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 857 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 869 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 927 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 987 | # Step 2: Verify we only see the subpath contents (not the full volume) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 997 | # Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 697 | # Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 729 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 779 | # Step 1: Verify the host marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 837 | # Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 915 | # Step 1: Verify the marker file is readable on read-only mount | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 974 | # Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 531 | // Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 540 | // Step 2: Write a file from inside the sandbox to the mounted path | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 553 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 562 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 608 | // Step 1: Verify the host marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 617 | // Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 666 | // Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 674 | // Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 687 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 695 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 741 | // Step 1: Verify the marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 749 | // Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 799 | // Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 807 | // Step 2: Verify only subPath contents are visible (not the full volume) | COMMENT |
| LOW | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 823 | // Step 3: Write a file and verify | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 305 | // Step 2: Write a file from inside the sandbox to the mounted path | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 311 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 447 | // Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 453 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 590 | // Step 2: Verify only subPath contents are visible (not the full volume) | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 599 | // Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 289 | // Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 327 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| 42 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …m/alibaba/opensandbox/sandbox/EndpointReadinessTest.kt | 218 | val server = com.sun.net.httpserver.HttpServer.create(java.net.InetSocketAddress("127.0.0.1", 0), 0) | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 1697 | com.alibaba.opensandbox.sandbox.domain.pool.PoolConfig.builder() | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 1750 | com.alibaba.opensandbox.sandbox.domain.pool.PoolConfig.builder() | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 1879 | com.alibaba.opensandbox.sandbox.domain.pool.PoolConfig.builder() | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 2411 | throw com.alibaba.opensandbox.sandbox.domain.exceptions.PoolStateStoreUnavailableException( | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 2421 | throw com.alibaba.opensandbox.sandbox.domain.exceptions.PoolStateStoreUnavailableException( | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 2481 | throw com.alibaba.opensandbox.sandbox.domain.exceptions.PoolStateStoreUnavailableException( | CODE |
| CRITICAL | …om/alibaba/opensandbox/sandbox/pool/SandboxPoolTest.kt | 2496 | return com.alibaba.opensandbox.sandbox.domain.pool.TakeIdleResult.of(null) | CODE |
| CRITICAL | …ox/infrastructure/adapters/service/SandboxesAdapter.kt | 99 | com.alibaba.opensandbox.sandbox.infrastructure.cache.EndpointCache( | CODE |
| CRITICAL | …ox/infrastructure/adapters/service/SandboxesAdapter.kt | 293 | name?.let { com.alibaba.opensandbox.sandbox.api.models.CreateSnapshotRequest(name = it) }, | CODE |
| CRITICAL | …ox/infrastructure/adapters/service/SandboxesAdapter.kt | 405 | val key = com.alibaba.opensandbox.sandbox.infrastructure.cache.EndpointCacheKey(sandboxId, port, useServerProxy) | CODE |
| CRITICAL | …tructure/adapters/service/IsolatedFilesystemAdapter.kt | 236 | com.alibaba.opensandbox.sandbox.api.models.execd.Permission( | CODE |
| CRITICAL | …x/infrastructure/adapters/service/FilesystemAdapter.kt | 264 | com.alibaba.opensandbox.sandbox.api.models.execd.Permission( | CODE |
| CRITICAL | server/tests/test_docker_service.py | 290 | binds = mock_client.api.create_host_config.call_args.kwargs.get("binds") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …hon/src/code_interpreter/sync/adapters/code_adapter.py | 260 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_store.py | 152 | CODE | |
| LOW | sdks/sandbox/python/tests/test_pool_store.py | 161 | CODE | |
| LOW | sdks/sandbox/python/tests/test_redirect_integration.py | 332 | CODE | |
| LOW | sdks/sandbox/python/tests/test_redirect_integration.py | 365 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 230 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 411 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 466 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 661 | CODE | |
| LOW | …/sandbox/python/src/opensandbox/transport/_decision.py | 103 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/config/client_ip.py | 172 | CODE | |
| LOW | …andbox/python/src/opensandbox/internal/pool_tracing.py | 72 | CODE | |
| LOW | …/python/src/opensandbox/adapters/filesystem_adapter.py | 282 | CODE | |
| LOW | …/python/src/opensandbox/adapters/filesystem_adapter.py | 341 | CODE | |
| LOW | …/python/src/opensandbox/adapters/filesystem_adapter.py | 353 | CODE | |
| LOW | …rc/opensandbox/adapters/isolated_filesystem_adapter.py | 185 | CODE | |
| LOW | …src/opensandbox/adapters/converter/response_handler.py | 215 | CODE | |
| LOW | …ndbox/adapters/converter/filesystem_model_converter.py | 74 | CODE | |
| LOW | …ndbox/adapters/converter/execution_event_dispatcher.py | 45 | CODE | |
| LOW | …rc/opensandbox/api/egress/models/credential_binding.py | 56 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 264 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 499 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 524 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 715 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1155 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 1537 | CODE | |
| LOW | …on/src/opensandbox/sync/adapters/filesystem_adapter.py | 256 | CODE | |
| LOW | …on/src/opensandbox/sync/adapters/filesystem_adapter.py | 312 | CODE | |
| LOW | …on/src/opensandbox/sync/adapters/filesystem_adapter.py | 323 | CODE | |
| LOW | …thon/src/opensandbox/sync/adapters/isolated_adapter.py | 264 | CODE | |
| LOW | …ensandbox/sync/adapters/isolated_filesystem_adapter.py | 189 | CODE | |
| LOW | …/sync/adapters/converter/execution_event_dispatcher.py | 41 | CODE | |
| LOW | tests/python/tests/test_sandbox_pool_e2e_async.py | 1389 | CODE | |
| LOW | tests/python/tests/test_execd_hardening_e2e.py | 233 | CODE | |
| LOW | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1287 | CODE | |
| LOW | tests/python/tests/test_lifecycle_metrics_e2e.py | 82 | CODE | |
| LOW | tests/python/tests/test_lifecycle_metrics_e2e.py | 135 | CODE | |
| LOW | tests/python/tests/test_lifecycle_metrics_e2e.py | 174 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e.py | 116 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e.py | 172 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e.py | 303 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e.py | 139 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e_sync.py | 109 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e_sync.py | 165 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e_sync.py | 132 | CODE | |
| LOW | tests/python/tests/test_code_interpreter_e2e_sync.py | 935 | CODE | |
| LOW | tests/python/tests/test_sandbox_manager_e2e_sync.py | 54 | CODE | |
| LOW | server/tests/test_snapshot_repository_postgresql.py | 92 | CODE | |
| LOW | server/tests/test_docker_delete_integration.py | 238 | CODE | |
| LOW | server/tests/test_docker_service.py | 3548 | CODE | |
| LOW | server/tests/test_docker_service.py | 3708 | CODE | |
| LOW | server/tests/k8s/test_kubernetes_service.py | 3097 | CODE | |
| LOW | server/opensandbox_server/config.py | 425 | CODE | |
| LOW | server/opensandbox_server/config.py | 1494 | CODE | |
| LOW | server/opensandbox_server/tenants/__init__.py | 57 | CODE | |
| LOW | server/opensandbox_server/api/proxy.py | 502 | CODE | |
| LOW | server/opensandbox_server/services/sandbox_service.py | 67 | CODE | |
| LOW | …er/opensandbox_server/services/docker/container_ops.py | 402 | CODE | |
| LOW | …r/opensandbox_server/services/docker/docker_service.py | 515 | CODE | |
| LOW | …r/opensandbox_server/services/docker/docker_service.py | 709 | CODE | |
| 84 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/sandbox/go/pool_reconciler.go | 134 | // Step 1: Try to acquire the primary lock. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 146 | // Step 2: Reap expired idle entries. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 166 | // Step 3: Snapshot counters and determine current state. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 179 | // Step 4: If idle > maxIdle, shrink excess. | COMMENT |
| LOW | sdks/sandbox/go/pool_reconciler.go | 215 | // Step 5: If deficit > 0 and not in backoff, create sandboxes. | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 458 | # Step 2: Write a file from inside the sandbox to the mounted path (read-write) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 464 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 476 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 541 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 603 | # Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 609 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 621 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 683 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 746 | # Step 2: Verify we only see the subpath contents (not the full volume) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e_sync.py | 754 | # Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 446 | # Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 529 | # Step 1: Verify the host marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 591 | # Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 671 | # Step 1: Verify the marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e_sync.py | 734 | # Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 710 | # Step 2: Write a file from inside the sandbox to the mounted path (read-write) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 717 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 791 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 850 | # Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 857 | # Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 869 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 927 | # Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 987 | # Step 2: Verify we only see the subpath contents (not the full volume) | COMMENT |
| LOW⚡ | tests/python/tests/test_sandbox_e2e.py | 997 | # Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 697 | # Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 729 | # Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 779 | # Step 1: Verify the host marker file is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 837 | # Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 915 | # Step 1: Verify the marker file is readable on read-only mount | COMMENT |
| LOW | tests/python/tests/test_sandbox_e2e.py | 974 | # Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 531 | // Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 540 | // Step 2: Write a file from inside the sandbox to the mounted path | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 553 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 562 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 608 | // Step 1: Verify the host marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 617 | // Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 666 | // Step 1: Verify the marker file seeded into the named volume is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 674 | // Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 687 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 695 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 741 | // Step 1: Verify the marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 749 | // Step 2: Verify writing is denied on read-only mount | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 799 | // Step 1: Verify the subpath marker file is readable | COMMENT |
| LOW⚡ | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 807 | // Step 2: Verify only subPath contents are visible (not the full volume) | COMMENT |
| LOW | …t/java/com/alibaba/opensandbox/e2e/SandboxE2ETest.java | 823 | // Step 3: Write a file and verify | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 305 | // Step 2: Write a file from inside the sandbox to the mounted path | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 311 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 447 | // Step 2: Write a file from inside the sandbox to the named volume | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 453 | // Step 3: Verify the written file is readable | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 590 | // Step 2: Verify only subPath contents are visible (not the full volume) | COMMENT |
| LOW⚡ | tests/javascript/tests/test_sandbox_e2e.test.ts | 599 | // Step 3: Write a file and verify (retry read-back for transient SSE drops) | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 289 | // Step 1: Verify the host marker file is visible inside the sandbox | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 327 | // Step 4: Verify the mount path is a proper directory | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 372 | // Step 1: Verify the host marker file is readable | COMMENT |
| LOW | tests/javascript/tests/test_sandbox_e2e.test.ts | 388 | // Step 2: Verify writing is denied on read-only mount | COMMENT |
| 10 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/sandbox/go/credential_vault_test.go | 61 | "placeholder": "__api_token__", | CODE |
| LOW | sdks/sandbox/go/types.go | 546 | Placeholder string `json:"placeholder"` | CODE |
| LOW | …ensandbox/api/egress/models/credential_substitution.py | 62 | "placeholder": placeholder, | CODE |
| LOW | …ensandbox/api/egress/models/credential_substitution.py | 74 | placeholder = d.pop("placeholder") | CODE |
| LOW | …x/infrastructure/adapters/service/EgressAdapterTest.kt | 206 | assertEquals("__api_token__", substitution["placeholder"]!!.jsonPrimitive.content) | CODE |
| LOW | …ndbox/infrastructure/adapters/service/EgressAdapter.kt | 364 | put("placeholder", JsonPrimitive(placeholder)) | CODE |
| LOW | …OpenSandbox.Tests/EgressAdapterCredentialVaultTests.cs | 89 | root.GetProperty("bindings")[0].GetProperty("auth").GetProperty("substitutions")[0].GetProperty("placeholder").G | CODE |
| LOW | sdks/sandbox/csharp/src/OpenSandbox/Models/Sandboxes.cs | 251 | [JsonPropertyName("placeholder")] | CODE |
| LOW | tests/python/tests/test_credential_vault_e2e.py | 303 | "placeholder": "__query_secret__", | CODE |
| LOW | tests/python/tests/test_credential_vault_e2e.py | 317 | "placeholder": "__path_secret__", | CODE |
| LOW | tests/python/tests/test_credential_vault_e2e.py | 331 | "placeholder": "__body_secret__", | CODE |
| LOW | server/tests/test_routes_proxy.py | 1577 | OPEN_SANDBOX_EGRESS_AUTH_HEADER.lower(): "caller-fake-token", | CODE |
| LOW | docs/guides/credential-vault.md | 204 | "placeholder": "__client_secret__", | CODE |
| LOW⚡ | docs/guides/credential-vault.md | 261 | "placeholder": "__tenant_id__", | CODE |
| LOW⚡ | docs/guides/credential-vault.md | 266 | "placeholder": "__api_key__", | CODE |
| LOW⚡ | docs/guides/credential-vault.md | 271 | "placeholder": "__client_secret__", | CODE |
| LOW | docs/guides/credential-vault.md | 366 | "ANTHROPIC_API_KEY": "fake-key-inside-sandbox", | CODE |
| LOW | docs/examples/openclaw.md | 25 | | `OPENCLAW_TOKEN` | `dummy-token-for-sandbox` | Gateway authentication token | | CODE |
| LOW | docs/examples/openclaw.md | 92 | - Token: `OPENCLAW_GATEWAY_TOKEN` (default: `dummy-token-for-sandbox`) | CODE |
| LOW | docs/examples/aks-kata.md | 224 | # Expected: fake-key-inside-sandbox | COMMENT |
| LOW | components/egress/mitmscripts/decision_snapshot.py | 219 | "placeholder", | CODE |
| LOW | components/egress/mitmscripts/decision_snapshot.py | 224 | placeholder, rendered = substitution["placeholder"], substitution["value"] | CODE |
| LOW | components/egress/mitmscripts/system.py | 508 | placeholder = substitution.get("placeholder") | CODE |
| LOW | components/egress/mitmscripts/system.py | 547 | {"placeholder": placeholder, "value": value, "in": surfaces} | CODE |
| LOW | components/egress/mitmscripts/system.py | 996 | placeholder = substitution.get("placeholder") | CODE |
| LOW | components/egress/tests/test_decision_snapshot.py | 175 | {"placeholder": "__token__", "value": "", "in": ["header"]} | CODE |
| LOW | components/egress/tests/test_decision_snapshot.py | 196 | {"placeholder": "__del__", "value": "\x7f", "in": ["body"]} | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 668 | "placeholder": "__secret__", | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 678 | payload["redactions"].append(substitution["placeholder"]) | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 1423 | "placeholder": "__query_secret__", | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 1428 | "placeholder": "__tenant_id__", | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 1433 | "placeholder": "__body_secret__", | CODE |
| LOW⚡ | components/egress/tests/test_mitmscripts_system.py | 1438 | "placeholder": "__form_secret__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 981 | "placeholder": placeholder, | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1049 | "placeholder": placeholder, | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1541 | "placeholder": "__a__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1546 | "placeholder": "__b__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1584 | "placeholder": "__header_secret__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1666 | "placeholder": "__tenant_id__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 1701 | "placeholder": "__tenant_id__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 2314 | "placeholder": "__body_secret__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 2379 | "placeholder": "__body_secret__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 2421 | "placeholder": "__body_secret__", | CODE |
| LOW | components/egress/tests/test_mitmscripts_system.py | 2463 | "placeholder": "__body_secret__", | CODE |
| LOW | components/egress/pkg/credentialvault/vault.go | 151 | Placeholder string `json:"placeholder"` | CODE |
| LOW | components/egress/pkg/credentialvault/vault.go | 208 | Placeholder string `json:"placeholder"` | CODE |
| LOW | examples/openclaw/main.py | 30 | DEFAULT_TOKEN = os.getenv("OPENCLAW_TOKEN", "dummy-token-for-sandbox") | CODE |
| LOW | examples/aks-kata/main.py | 209 | "AZURE_OPENAI_API_KEY": "fake-key-inside-sandbox", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/architecture/control-plane/operator.md | 92 | ## Task orchestration | COMMENT |
| MEDIUM | kubernetes/cmd/controller/main.go | 54 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | kubernetes/cmd/controller/main.go | 143 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | kubernetes/cmd/controller/main.go | 515 | // +kubebuilder:scaffold:builder | COMMENT |
| MEDIUM | kubernetes/config/crd/kustomization.yaml | 8 | # +kubebuilder:scaffold:crdkustomizeresource | COMMENT |
| MEDIUM | kubernetes/config/crd/kustomization.yaml | 13 | # +kubebuilder:scaffold:crdkustomizewebhookpatch | COMMENT |
| MEDIUM⚡ | kubernetes/config/default/kustomization.yaml | 225 | # targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD. | COMMENT |
| MEDIUM⚡ | kubernetes/config/default/kustomization.yaml | 226 | # +kubebuilder:scaffold:crdkustomizecainjectionns | COMMENT |
| MEDIUM⚡ | kubernetes/config/default/kustomization.yaml | 233 | # targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD. | COMMENT |
| MEDIUM⚡ | kubernetes/config/default/kustomization.yaml | 234 | # +kubebuilder:scaffold:crdkustomizecainjectionname | COMMENT |
| MEDIUM | kubernetes/config/samples/kustomization.yaml | 6 | # +kubebuilder:scaffold:manifestskustomizesamples | COMMENT |
| MEDIUM | kubernetes/internal/controller/suite_test.go | 40 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | kubernetes/internal/controller/suite_test.go | 71 | // +kubebuilder:scaffold:scheme | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …preter/python/tests/test_code_service_adapter_close.py | 63 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 56 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …ndbox/python/tests/test_filesystem_upload_transport.py | 116 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …/sandbox/python/tests/test_credential_vault_adapter.py | 80 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …ndbox/python/tests/test_isolated_filesystem_adapter.py | 56 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_sync.py | 1675 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …s/sandbox/python/tests/test_follow_redirects_config.py | 54 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …s/sandbox/python/tests/test_follow_redirects_config.py | 88 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …/sandbox/python/tests/test_execd_proxy_auth_headers.py | 57 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …thon/tests/test_sandbox_manager_sync_business_logic.py | 113 | def handle_request(self, request: httpx.Request) -> httpx.Response: # pragma: no cover | CODE |
| LOW | …n/tests/test_sync_command_service_adapter_streaming.py | 50 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …n/tests/test_sync_command_service_adapter_streaming.py | 322 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …hon/tests/test_sync_command_service_adapter_set_env.py | 63 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | sdks/sandbox/python/tests/test_pool_manager.py | 182 | def handle_request(self, request: Any) -> Any: | CODE |
| LOW | sdks/sandbox/python/tests/test_retry_transport.py | 69 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …andbox/python/src/opensandbox/transport/_sync_retry.py | 70 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | …box/python/src/opensandbox/transport/_deadline_sync.py | 137 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | components/egress/tests/mitm-sse-truncation/run.sh | 26 | # Usage: | COMMENT |
| LOW | components/execd/bootstrap.sh | 492 | # Usage: | COMMENT |
| LOW | components/execd/tests/init_mode.sh | 23 | # Usage: | COMMENT |
| LOW | components/execd/tests/init_container.sh | 39 | # Usage: | COMMENT |
| LOW | components/execd/tests/smoke_overlays.sh | 37 | # Usage: | COMMENT |
| LOW | components/execd/tests/sigterm_forward.sh | 21 | # Usage: | COMMENT |
| LOW | components/execd/tests/smoke_bwrap.sh | 21 | # Usage: | COMMENT |
| LOW | components/execd/configs/isolation.example.toml | 17 | # Usage: | COMMENT |
| LOW | scripts/fast-sandbox-env/integration-env.sh | 36 | # Usage: | COMMENT |
| LOW | manifests/release/build-fast-sandbox.sh | 35 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/mcp/sandbox/python/src/opensandbox_mcp/server.py | 161 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/pool_async.py | 85 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sandbox.py | 547 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sandbox.py | 654 | CODE | |
| LOW | …s/sandbox/python/src/opensandbox/exceptions/sandbox.py | 128 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/sandbox.py | 515 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/sandbox.py | 623 | CODE | |
| LOW | sdks/sandbox/python/src/opensandbox/sync/pool.py | 86 | CODE | |
| LOW | tests/python/tests/test_sandbox_pool_e2e_async.py | 1266 | CODE | |
| LOW | tests/python/tests/test_sandbox_pool_e2e_sync.py | 1174 | CODE | |
| LOW | server/tests/test_docker_service.py | 4686 | CODE | |
| LOW | server/tests/k8s/test_pool_service.py | 30 | CODE | |
| LOW | server/tests/k8s/test_egress_helper.py | 56 | CODE | |
| LOW | server/opensandbox_server/middleware/auth.py | 136 | CODE | |
| LOW | server/opensandbox_server/middleware/auth.py | 153 | CODE | |
| LOW | components/egress/tests/test_tls_registry.py | 81 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdks/sandbox/python/src/opensandbox/sync/sandbox.py | 107 | # Create a sandbox (blocking) | STRING |
| MEDIUM⚡ | tests/python/tests/test_isolated_session_e2e.py | 702 | # Create the source dir and the destination mount point (bwrap binds | COMMENT |
| MEDIUM | …/opensandbox_server/services/k8s/kubernetes_service.py | 1097 | # Create the workload CR. Three failure modes drive PVC cleanup: | COMMENT |
| MEDIUM | kubernetes/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/guides/secure-container.md | 39 | OpenSandbox is designed to execute untrusted code generated by AI models (Claude, GPT-4, Gemini, etc.). Secure runtimes | CODE |
| HIGH | oseps/0004-secure-container-runtime.md | 47 | OpenSandbox is designed to execute untrusted code generated by AI models (such as Claude, GPT-4, Gemini). While standard | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/sandbox/python/scripts/generate_api.py | 358 | # Check if openapi-python-client is available | COMMENT |
| LOW | tests/python/tests/test_code_interpreter_e2e.py | 244 | # Check if it's a retryable network error | COMMENT |
| LOW | components/execd/tests/init_container.sh | 42 | # Set EXECD_TEST_IMAGE to an existing image (with /bootstrap.sh, /execd and | COMMENT |
| LOW | examples/kubernetes-pvc-volume-mount/main.py | 106 | # Read the file written by the previous sandbox | COMMENT |
| LOW | oseps/init-osep.sh | 176 | # Check if destination exists | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/python/tests/test_execd_hardening_e2e.py | 134 | # Landlock). The e2e harness now places the PV on the node rootfs | COMMENT |
| LOW | server/tests/k8s/test_kubernetes_service.py | 1754 | # must catch this for ALL PVC mounts, not just create-if-not-exists. | COMMENT |