Podman: A tool for managing OCI containers and pods.
This report summarizes scanner evidence for podman-container-tools/podman, a Go project with 33,154 GitHub stars. SynthScan examined 348,319 lines of code across 2188 source files, recording 1210 pattern matches distributed across 19 syntactic categories. The legacy adjusted pattern signal is 3.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1163 finding(s).
Are imports declared and package/API names verified? 29 finding(s).
Are wrappers, guards, and repeated structures necessary? 57 finding(s).
Which changes need focused human review? 1210 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1210 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/podman/inspect/inspect.go | 261 | var idRegex = regexp.Delayed(`{{\s*\.Id\s*}}`) | COMMENT |
| LOW | cmd/podman/machine/init.go | 261 | if err := checkMaxCPUs(initOpts.CPUS); err != nil { | COMMENT |
| LOW | cmd/podman/machine/init.go | 281 | // // - a user has chosen to perform their own reboot | COMMENT |
| LOW | cmd/podman/registry/remote.go | 21 | // IsRemote returns true if podman was built to run remote or --remote flag given on CLI | COMMENT |
| LOW | cmd/podman/kube/play.go | 361 | } | COMMENT |
| LOW | cmd/podman/containers/cp.go | 241 | // base path as it may have changed due to symlink evaluations. | COMMENT |
| LOW | test/system/helpers.network.bash | 121 | EOF | COMMENT |
| LOW | test/system/helpers.network.bash | 301 | # grep for exact address:port match or for the bind all address "*", "0.0.0.0" or "[::]" | COMMENT |
| LOW | test/system/helpers.bash | 81 | _LOG_PROMPT='#' | COMMENT |
| LOW | test/system/helpers.bash | 261 | rm -f $mylocks | COMMENT |
| LOW | test/system/helpers.bash | 361 | while read line; do | COMMENT |
| LOW | test/system/helpers.bash | 381 | # bats-1.11 to fix a more-than-one-slash-in-test-name bug, (2) as | COMMENT |
| LOW | test/system/helpers.bash | 501 | } | COMMENT |
| LOW | test/system/helpers.bash | 521 | # | COMMENT |
| LOW | test/system/helpers.bash | 601 | fi | COMMENT |
| LOW | test/system/helpers.bash | 941 | ######### | COMMENT |
| LOW | test/system/helpers.bash | 1141 | # Optional 2nd argument is a message to display if warning is missing | COMMENT |
| LOW | test/system/helpers.bash | 1261 | ############################# | COMMENT |
| LOW | test/system/helpers.registry.bash | 1 | # -*- bash -*- | COMMENT |
| LOW | test/e2e/common_test.go | 741 | lock.Lock() | COMMENT |
| LOW | libpod/runtime_ctr.go | 141 | COMMENT | |
| LOW | libpod/runtime_ctr.go | 681 | // Remove all the dependencies associated with the container. Can cause | COMMENT |
| LOW | libpod/runtime_ctr.go | 741 | // pod. | COMMENT |
| LOW | libpod/runtime_ctr.go | 1061 | // returns the full ID of the evicted container and any error encountered. | COMMENT |
| LOW | libpod/container_internal_common.go | 2561 | } | COMMENT |
| LOW | libpod/container_internal_common.go | 2681 | s = strings.ReplaceAll(s, "$GID", gid) | COMMENT |
| LOW | libpod/container_exec.go | 21 | "go.podman.io/storage/pkg/stringid" | COMMENT |
| LOW | libpod/container_exec.go | 41 | AttachStdin bool `json:"attachStdin,omitempty"` | COMMENT |
| LOW | libpod/container_exec.go | 61 | // If set to "" the exec session will be started as the same user the | COMMENT |
| LOW | libpod/container_exec.go | 81 | // Two arguments will be appended to the exit command by Libpod: | COMMENT |
| LOW | libpod/container_config.go | 21 | // It is stored, read-only, on disk in Libpod's State. | COMMENT |
| LOW | libpod/container_config.go | 41 | COMMENT | |
| LOW | libpod/container_config.go | 61 | LockID uint32 `json:"lockID"` | COMMENT |
| LOW | libpod/container_config.go | 101 | type ContainerRootFSConfig struct { | COMMENT |
| LOW | libpod/container_config.go | 121 | // RootfsMapping specifies if there are mappings to apply to the rootfs. | COMMENT |
| LOW | libpod/container_config.go | 141 | // is not mounted into the container. It will be removed when the | COMMENT |
| LOW | libpod/container_config.go | 161 | // image volumes were handled in Libpod (support for these eventually | COMMENT |
| LOW | libpod/container_config.go | 181 | Passwd *bool `json:"passwd,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 201 | // MountLabel is the SELinux mount label for the container's root | COMMENT |
| LOW | libpod/container_config.go | 221 | // AddCurrentUserPasswdEntry indicates that Libpod should ensure that | COMMENT |
| LOW | libpod/container_config.go | 241 | UserNsCtr string `json:"userNsCtr,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 261 | OldPortMappings []types.OCICNIPortMapping `json:"portMappings,omitempty"` //nolint:staticcheck // OCICNIPortMapping is | COMMENT |
| LOW | libpod/container_config.go | 281 | // UseImageHostname indicates that /etc/hostname should not be | COMMENT |
| LOW | libpod/container_config.go | 301 | // sure to not change the json tags. | COMMENT |
| LOW | libpod/container_config.go | 321 | } | COMMENT |
| LOW | libpod/container_config.go | 341 | } | COMMENT |
| LOW | libpod/container_config.go | 361 | CgroupManager string `json:"cgroupManager,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 381 | LogSize int64 `json:"logSize"` | COMMENT |
| LOW | libpod/container_config.go | 401 | // "on-failure". | COMMENT |
| LOW | libpod/container_config.go | 421 | SdNotifySocket string `json:"sdnotifySocket,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 441 | // runs, and when it passes the regular HC will be activated. | COMMENT |
| LOW | libpod/container_copy_common.go | 161 | // on a volume that was copied into that needed, but did | COMMENT |
| LOW | libpod/container_api.go | 81 | // Start starts the given container. | COMMENT |
| LOW | libpod/container_api.go | 301 | } | COMMENT |
| LOW | libpod/container_api.go | 401 | // The streams variable is only supported if the container was not a terminal, | COMMENT |
| LOW | libpod/container_api.go | 981 | } | COMMENT |
| LOW | libpod/container_api.go | 1081 | Keep bool | COMMENT |
| LOW | libpod/container_api.go | 1101 | // the container's root file-system (or to not import) | COMMENT |
| LOW | libpod/container_api.go | 1121 | // images. One is TargetFile, the other is ImportPrevious. | COMMENT |
| LOW | libpod/runtime.go | 101 | // A number of validation checks are relaxed, or replaced with logic to | COMMENT |
| 991 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | libpod/container_internal_common.go | 779 | cdi.WithSpecDirs(c.runtime.config.Engine.CdiSpecDirs.Get()...), | CODE |
| CRITICAL | libpod/container_internal_common.go | 2326 | nameservers := make([]string, 0, len(c.runtime.config.Containers.DNSServers.Get())+len(c.config.DNSServer)) | CODE |
| CRITICAL | libpod/container_internal_common.go | 2336 | nameservers = append(nameservers, c.runtime.config.Containers.DNSServers.Get()...) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2361 | if len(c.config.DNSSearch) > 0 || len(c.runtime.config.Containers.DNSSearches.Get()) > 0 { | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2362 | customSearch := make([]string, 0, len(c.config.DNSSearch)+len(c.runtime.config.Containers.DNSSearches.Get())) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2363 | customSearch = append(customSearch, c.runtime.config.Containers.DNSSearches.Get()...) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2371 | options := make([]string, 0, len(c.config.DNSOption)+len(c.runtime.config.Containers.DNSOptions.Get())) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2372 | options = append(options, c.runtime.config.Containers.DNSOptions.Get()...) | CODE |
| CRITICAL | libpod/networking_common.go | 51 | nameservers := make([]string, 0, len(c.runtime.config.Containers.DNSServers.Get())+len(c.config.DNSServer)) | CODE |
| CRITICAL | libpod/networking_common.go | 52 | nameservers = append(nameservers, c.runtime.config.Containers.DNSServers.Get()...) | CODE |
| CRITICAL | libpod/kube.go | 1367 | calculatedCaps := determineCapAddDropFromCapabilities(c.runtime.config.Containers.DefaultCapabilities.Get(), containerC | CODE |
| CRITICAL | libpod/container_inspect_linux.go | 150 | for _, cap := range c.runtime.config.Containers.DefaultCapabilities.Get() { | CODE |
| CRITICAL | libpod/container_internal.go | 2517 | if len(c.runtime.config.Engine.HooksDir.Get()) == 0 { | CODE |
| CRITICAL | libpod/container_internal.go | 2539 | manager, err := hooks.New(ctx, c.runtime.config.Engine.HooksDir.Get(), []string{"precreate", "poststop"}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 188 | def test_add_with_annotations(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 295 | def test_add_append_with_type_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 318 | def test_add_with_append_to_missing_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 337 | def test_add_without_name_and_filename_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 355 | def test_add_local_with_not_existing_file(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 378 | def test_add_local_with_not_absolute_path(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 441 | def test_inspect_absent_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 525 | def test_pull_unauthorised_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 686 | def test_remove_absent_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 743 | def test_push_missing_artifact(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 815 | def test_extract_absent_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 45 | def test_list_filters_label_not(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 281 | def test_create_duplicate_name(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 497 | def test_host_config_port_bindings(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 534 | def test_host_config_cgroupns_mode(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_volume.py | 126 | def test_volume_label_override(self): | CODE |
| LOW | test/python/docker/compat/test_images.py | 82 | def test_get_image_exists_not(self): | CODE |
| LOW | test/python/docker/compat/test_images.py | 131 | def test_build_image_via_api_client(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 51 | def test_start_container_with_random_port_bind(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 96 | def test_remove_container_without_force(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 121 | def test_pause_stopped_container(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 210 | def test_mount_preexisting_dir(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 229 | def test_non_existent_workdir(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 268 | def test_mount_options_by_default(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 312 | def test_container_inspect_compatibility(self): | CODE |
| LOW | test/python/docker/compat/test_system.py | 23 | def test_info_container_details(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 122 | def test_ginkgo_log_not_named_int(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 135 | def test_all_given_logs_are_summarized(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 147 | def test_logs_are_named_only_when_there_is_more_than_one(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 157 | def test_ginkgo_suite_run_without_parallel(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 164 | def test_logrus_error_does_not_mark_a_passing_test(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 169 | def test_bats_log_holding_a_logrus_error(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 176 | def test_nested_and_unclosed_failure_divs(self): | CODE |
| LOW⚡ | hack/ci/github_log_summary_test.py | 185 | def test_an_unreadable_log_between_two_good_ones(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 199 | def test_every_failure_block_is_reported(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 209 | def test_log_without_failures_says_nothing(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 226 | def test_logformatter_still_emits_the_classes_we_look_for(self): | CODE |
| LOW | hack/ci/github_log_summary_test.py | 233 | def test_unreadable_log_is_skipped(self): | CODE |
| LOW | hack/ci/ci_yaml_test.py | 35 | def test_gh_actions_are_pinned_by(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/system/helpers.bash | 1265 | # WARNING: The same type, major and minor should not be used for multiple devices. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 142 | // Step 1: Alter the config. Save the old name, we need it to rewrite | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 147 | // Step 2: rewrite the old container's config in the DB. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 156 | // Step 3: rename the container in c/storage. | COMMENT |
| LOW | hack/golangci-lint.sh | 6 | # WARNING: This script executes on multiple operating systems that | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 18 | ## Step 1: Create `hello.container` | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 32 | ## Step 2: Place the file | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 45 | ## Step 3: Reload and start the service | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 81 | ## Step 1: Create `mydata.volume` | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 89 | ## Step 2: Place and reload | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 104 | ## Step 3: Create the volume | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 14 | ## Step 1: Find your Podman binary path | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 25 | ## Step 2: Create the LaunchAgent plist | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 66 | ## Step 3: Load the LaunchAgent | COMMENT |
| LOW | docs/tutorials/podman_machine_os_customization.md | 32 | ## Step 1: Create the Containerfile | COMMENT |
| LOW⚡ | docs/tutorials/podman_machine_os_customization.md | 53 | ## Step 2: Build the Custom Image | COMMENT |
| LOW⚡ | docs/tutorials/podman_machine_os_customization.md | 63 | ## Step 3: Push the Image to a Registry | COMMENT |
| LOW⚡ | docs/tutorials/podman_machine_os_customization.md | 72 | ## Step 4: Initialize a Podman Machine | COMMENT |
| LOW⚡ | docs/tutorials/podman_machine_os_customization.md | 81 | ## Step 5: Apply the Custom OS Image | COMMENT |
| LOW | pkg/util/utils.go | 444 | // Step 1: Remove extension regions from mapping | COMMENT |
| LOW⚡ | pkg/machine/e2e/init_test.go | 722 | // Step 1: create temp image | COMMENT |
| LOW⚡ | pkg/machine/e2e/init_test.go | 725 | // Step 2: copy existing image and make it read-only | COMMENT |
| LOW | pkg/machine/e2e/init_test.go | 744 | // Step 3: run podman machine init | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/podman-mac-helper/install.go | 197 | // the entire installation path, and utilize sticky + read-only perms for the helper path | COMMENT |
| MEDIUM | libpod/healthcheck.go | 278 | // is called. Fundamentally this is expected so switch it to exit 0. | COMMENT |
| MEDIUM | libpod/container_internal.go | 944 | // Note: this function is currently meant as a robust solution to a narrow problem: start an infra-container when | COMMENT |
| MEDIUM | libpod/lock/shm/shm_lock.c | 160 | // Set mutexes to robust - if a process dies while holding a mutex, we'll get | COMMENT |
| MEDIUM | hack/ci/make-and-check-size.sh | 52 | # to implement a more robust size-override mechanism, such as by | COMMENT |
| MEDIUM | pkg/systemd/generate/containers.go | 431 | // make systemd units more robust as it allows them to | COMMENT |
| MEDIUM | pkg/k8s.io/api/core/v1/types.go | 3377 | // should be considered safe for load balancers and clients to utilize. | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 14 | // Image-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 20 | // Container-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 25 | // Container-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/podman/completion/completion.go | 90 | "\n# This file is generated with %q; see: podman-completion(1)\n", cmd.CommandPath(), | CODE |
| MEDIUM | test/python/docker/compat/test_containers.py | 46 | # Create a new container and validate the count | COMMENT |
| MEDIUM | test/system/helpers.bash | 774 | # This function is intended to be used as '$(podman_runtime)', i.e. | COMMENT |
| MEDIUM | test/e2e/build_test.go | 1363 | # Create a summary file | COMMENT |
| MEDIUM | docs/source/conf.py | 21 | # Define the canonical URL for our custom docs.podman.io domain configured on Read the Docs | COMMENT |
| MEDIUM | .github/workflows/cherry-pick.yml | 148 | # Create a new branch for the cherry-pick PR | COMMENT |
| MEDIUM | .github/workflows/cherry-pick.yml | 290 | # Create a new branch for the cherry-pick PR | COMMENT |
| MEDIUM | pkg/systemd/parser/unitfile_test.go | 101 | # This file is part of systemd. | COMMENT |
| MEDIUM | pkg/systemd/parser/unitfile_test.go | 170 | # This file is part of systemd. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | libpod/runtime_ctr.go | 142 | // Step 1: Alter the config. Save the old name, we need it to rewrite | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 147 | // Step 2: rewrite the old container's config in the DB. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 156 | // Step 3: rename the container in c/storage. | COMMENT |
| LOW | libpod/runtime_ctr.go | 873 | // If we're not force-removing, we need to check if we're in a good | COMMENT |
| LOW | pkg/util/utils.go | 444 | // Step 1: Remove extension regions from mapping | COMMENT |
| LOW | pkg/specgen/generate/kube/kube.go | 541 | // If the container has bind mounts, we need to check if | COMMENT |
| LOW⚡ | pkg/machine/e2e/init_test.go | 722 | // Step 1: create temp image | COMMENT |
| LOW⚡ | pkg/machine/e2e/init_test.go | 725 | // Step 2: copy existing image and make it read-only | COMMENT |
| LOW | pkg/machine/e2e/init_test.go | 744 | // Step 3: run podman machine init | COMMENT |
| LOW | pkg/api/handlers/utils/images.go | 275 | // We need to check if no progress was sent previously. In that case, we should only return the base error message. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/system/helpers.bash | 1153 | # Set PODMAN_TEST_DEBUG to the name of one or more functions you want to debug | COMMENT |
| LOW | test/system/helpers.bash | 1168 | # Check if our calling function matches any of the desired strings | COMMENT |
| LOW | test/system/helpers.systemd.bash | 120 | # Check if this is a template unit (ends with @) | COMMENT |
| LOW | hack/install_golangci.sh | 32 | # Check if it's already installed globally. | COMMENT |
| LOW | hack/branch_commits.rb | 15 | # Check if a given Git branch exists | COMMENT |
| LOW | contrib/packit-tmt/packit-rpm-git-commit.sh | 10 | # Set path to rpm spec file | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 53 | # Check if user has write permission to the repository | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 106 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 126 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 279 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/assign.yml | 27 | # Check if issue has any assignees | COMMENT |
| LOW | .github/workflows/update-podmanio.yml | 95 | # Check if version is actually higher than one on podman.io | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | contrib/minutes/20260626.md | 92 | *These minutes were generated by AI. A full transcript of the meeting is below.* | COMMENT |
| HIGH | pkg/k8s.io/api/apps/v1/types.go | 42 | // - Storage: As many VolumeClaims as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/python/docker/compat/test_images.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| HIGH | test/python/docker/compat/test_containers.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| HIGH | test/python/docker/compat/test_system.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 201 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 202 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 203 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 205 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 206 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 209 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | troubleshooting.md | 884 | except Exception as e: | CODE |
| LOW | troubleshooting.md | 911 | except Exception as e: | CODE |
| MEDIUM | troubleshooting.md | 874 | def reload_podman_network(): | CODE |
| MEDIUM | troubleshooting.md | 898 | def signal_listener(): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 388 | except Exception: | CODE |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_container.py | 379 | def _impl(fifo, stop): | CODE |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 34 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 1 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 2 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 6 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 3 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 4 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 5 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 10 | CODE | |
| LOW | test/python/docker/__init__.py | 4 | CODE | |
| LOW | test/compose/simple_port_map/frontend/app.py | 2 | CODE | |
| LOW | hack/ci/ci_yaml_test.py | 7 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/apiv2/python/rest_api/test_v2_0_0_container.py | 388 | except Exception: | CODE |
| HIGH | test/apiv2/python/rest_api/test_v2_0_0_container.py | 404 | except queue.Empty: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 373 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 379 | CODE | |
| LOW | test/python/docker/compat/test_containers.py | 312 | CODE | |
| LOW | hack/ci/ci_yaml_test.py | 35 | CODE | |
| LOW | hack/ci/github_log_summary.py | 86 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/python/docker/compat/test_images.py | 146 | resp: str = self.docker.images.push("non-existent.lan:5000/alpine", "latest") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/e2e/push_test.go | 34 | session := podmanTest.Podman([]string{"push", "-q", "--sign-by", "foo@bar.com", ALPINE, "docker://localhost:5000/my-al | CODE |
| LOW | test/e2e/image_sign_test.go | 52 | session := podmanTest.Podman([]string{"image", "sign", "--directory", sigDir, "--sign-by", "foo@bar.com", "docker://li | CODE |
| LOW | test/e2e/image_sign_test.go | 68 | session := podmanTest.Podman([]string{"image", "sign", "--all", "--directory", sigDir, "--sign-by", "foo@bar.com", "do | CODE |
| LOW | test/e2e/save_test.go | 182 | session = podmanTest.Podman([]string{"push", "-q", "--tls-verify=false", "--sign-by", "foo@bar.com", pushedImage}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/k8s.io/api/core/v1/types.go | 1307 | // TODO: implement a realistic TCP lifecycle hook | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/domain/infra/abi/play.go | 67 | // Make sure to replace the service container as well if requested by | COMMENT |