Podman: A tool for managing OCI containers and pods.
This report presents the forensic synthetic code analysis of podman-container-tools/podman, a Go project with 32,284 GitHub stars. SynthScan v2.0 examined 335,120 lines of code across 2148 source files, recording 1189 pattern matches distributed across 18 syntactic categories. The overall adjusted score of 3.7 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1189 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/podman/inspect/inspect.go | 261 | // InspectNormalize modifies a given row string based on the specified inspect type. | COMMENT |
| LOW | cmd/podman/machine/init.go | 261 | } | COMMENT |
| LOW | cmd/podman/machine/init.go | 281 | // // Examples: | COMMENT |
| LOW | cmd/podman/kube/play.go | 341 | // | COMMENT |
| LOW | cmd/podman/containers/cp.go | 241 | hostBaseName = filepath.Base(hostInfo.LinkTarget) | COMMENT |
| LOW | test/system/helpers.network.bash | 121 | EOF | COMMENT |
| LOW | test/system/helpers.bash | 81 | _LOG_PROMPT='#' | COMMENT |
| LOW | test/system/helpers.bash | 261 | rm -f $mylocks | COMMENT |
| LOW | test/system/helpers.bash | 361 | while read line; do | COMMENT |
| LOW | test/system/helpers.bash | 381 | # bats-1.11 to fix a more-than-one-slash-in-test-name bug, (2) as | COMMENT |
| LOW | test/system/helpers.bash | 501 | } | COMMENT |
| LOW | test/system/helpers.bash | 521 | # | COMMENT |
| LOW | test/system/helpers.bash | 961 | ######### | COMMENT |
| LOW | test/system/helpers.bash | 1161 | # Optional 2nd argument is a message to display if warning is missing | COMMENT |
| LOW | test/system/helpers.bash | 1281 | ############################# | COMMENT |
| LOW | test/system/helpers.registry.bash | 1 | # -*- bash -*- | COMMENT |
| LOW | test/e2e/common_test.go | 761 | // This heuristic will fail if run in parallel on >127 processors or if | COMMENT |
| LOW | libpod/runtime_ctr.go | 141 | // Step 1: Alter the config. Save the old name, we need it to rewrite | COMMENT |
| LOW | libpod/runtime_ctr.go | 681 | // Remove all the dependencies associated with the container. Can cause | COMMENT |
| LOW | libpod/runtime_ctr.go | 741 | // pod. | COMMENT |
| LOW | libpod/runtime_ctr.go | 1061 | // returns the full ID of the evicted container and any error encountered. | COMMENT |
| LOW | libpod/container_internal_common.go | 881 | // the path exists on the container. | COMMENT |
| LOW | libpod/container_internal_common.go | 2501 | // required by container configuration. | COMMENT |
| LOW | libpod/container_internal_common.go | 2621 | // required by container configuration. | COMMENT |
| LOW | libpod/container_internal_common.go | 2821 | s := c.config.PasswdEntry | COMMENT |
| LOW | libpod/container_exec.go | 21 | "go.podman.io/storage/pkg/stringid" | COMMENT |
| LOW | libpod/container_exec.go | 41 | AttachStdin bool `json:"attachStdin,omitempty"` | COMMENT |
| LOW | libpod/container_exec.go | 61 | // If set to "" the exec session will be started as the same user the | COMMENT |
| LOW | libpod/container_exec.go | 81 | // Two arguments will be appended to the exit command by Libpod: | COMMENT |
| LOW | libpod/container_config.go | 21 | // It is stored, read-only, on disk in Libpod's State. | COMMENT |
| LOW | libpod/container_config.go | 41 | COMMENT | |
| LOW | libpod/container_config.go | 61 | LockID uint32 `json:"lockID"` | COMMENT |
| LOW | libpod/container_config.go | 101 | type ContainerRootFSConfig struct { | COMMENT |
| LOW | libpod/container_config.go | 121 | // RootfsMapping specifies if there are mappings to apply to the rootfs. | COMMENT |
| LOW | libpod/container_config.go | 141 | // is not mounted into the container. It will be removed when the | COMMENT |
| LOW | libpod/container_config.go | 161 | // image volumes were handled in Libpod (support for these eventually | COMMENT |
| LOW | libpod/container_config.go | 181 | Passwd *bool `json:"passwd,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 201 | // MountLabel is the SELinux mount label for the container's root | COMMENT |
| LOW | libpod/container_config.go | 221 | // AddCurrentUserPasswdEntry indicates that Libpod should ensure that | COMMENT |
| LOW | libpod/container_config.go | 241 | UserNsCtr string `json:"userNsCtr,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 261 | OldPortMappings []types.OCICNIPortMapping `json:"portMappings,omitempty"` //nolint:staticcheck // OCICNIPortMapping is | COMMENT |
| LOW | libpod/container_config.go | 281 | // UseImageHostname indicates that /etc/hostname should not be | COMMENT |
| LOW | libpod/container_config.go | 301 | // sure to not change the json tags. | COMMENT |
| LOW | libpod/container_config.go | 321 | } | COMMENT |
| LOW | libpod/container_config.go | 341 | } | COMMENT |
| LOW | libpod/container_config.go | 361 | CgroupManager string `json:"cgroupManager,omitempty"` | COMMENT |
| LOW | libpod/container_config.go | 381 | LogSize int64 `json:"logSize"` | COMMENT |
| LOW | libpod/container_config.go | 401 | // OCIRuntime used to create the container | COMMENT |
| LOW | libpod/container_config.go | 421 | HealthCheckOnFailureAction define.HealthCheckOnFailureAction `json:"healthcheck_on_failure_action"` | COMMENT |
| LOW | libpod/container_config.go | 441 | // PreserveFD is a list of additional file descriptors (in addition | COMMENT |
| LOW | libpod/container_copy_common.go | 141 | } | COMMENT |
| LOW | libpod/container_path_resolution.go | 21 | // container's working dir. To be extra careful, let's first | COMMENT |
| LOW | libpod/container_api.go | 81 | // Once in ContainerStateRunning, the container can be transitioned to | COMMENT |
| LOW | libpod/container_api.go | 281 | COMMENT | |
| LOW | libpod/container_api.go | 381 | COMMENT | |
| LOW | libpod/container_api.go | 881 | } | COMMENT |
| LOW | libpod/container_api.go | 981 | // TCPEstablished tells the API to checkpoint a container | COMMENT |
| LOW | libpod/container_api.go | 1001 | // important to be able to restore a container multiple | COMMENT |
| LOW | libpod/container_api.go | 1021 | CreateImage string | COMMENT |
| LOW | libpod/runtime.go | 101 | // remove as much of the runtime as possible if they fail. This ensures | COMMENT |
| 980 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | libpod/container_internal_common.go | 719 | cdi.WithSpecDirs(c.runtime.config.Engine.CdiSpecDirs.Get()...), | CODE |
| CRITICAL | libpod/container_internal_common.go | 2260 | nameservers := make([]string, 0, len(c.runtime.config.Containers.DNSServers.Get())+len(c.config.DNSServer)) | CODE |
| CRITICAL | libpod/container_internal_common.go | 2270 | nameservers = append(nameservers, c.runtime.config.Containers.DNSServers.Get()...) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2295 | if len(c.config.DNSSearch) > 0 || len(c.runtime.config.Containers.DNSSearches.Get()) > 0 { | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2296 | customSearch := make([]string, 0, len(c.config.DNSSearch)+len(c.runtime.config.Containers.DNSSearches.Get())) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2297 | customSearch = append(customSearch, c.runtime.config.Containers.DNSSearches.Get()...) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2305 | options := make([]string, 0, len(c.config.DNSOption)+len(c.runtime.config.Containers.DNSOptions.Get())) | CODE |
| CRITICAL⚡ | libpod/container_internal_common.go | 2306 | options = append(options, c.runtime.config.Containers.DNSOptions.Get()...) | CODE |
| CRITICAL | libpod/networking_common.go | 51 | nameservers := make([]string, 0, len(c.runtime.config.Containers.DNSServers.Get())+len(c.config.DNSServer)) | CODE |
| CRITICAL | libpod/networking_common.go | 52 | nameservers = append(nameservers, c.runtime.config.Containers.DNSServers.Get()...) | CODE |
| CRITICAL | libpod/kube.go | 1368 | calculatedCaps := determineCapAddDropFromCapabilities(c.runtime.config.Containers.DefaultCapabilities.Get(), containerC | CODE |
| CRITICAL | libpod/container_inspect_linux.go | 148 | for _, cap := range c.runtime.config.Containers.DefaultCapabilities.Get() { | CODE |
| CRITICAL | libpod/container_internal.go | 2453 | if len(c.runtime.config.Engine.HooksDir.Get()) == 0 { | CODE |
| CRITICAL | libpod/container_internal.go | 2475 | manager, err := hooks.New(ctx, c.runtime.config.Engine.HooksDir.Get(), []string{"precreate", "poststop"}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/system/helpers.bash | 764 | # WARNING: This will break if there's ever a cgroups v3 | COMMENT |
| LOW | test/system/helpers.bash | 1285 | # WARNING: The same type, major and minor should not be used for multiple devices. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 141 | // Step 1: Alter the config. Save the old name, we need it to rewrite | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 146 | // Step 2: rewrite the old container's config in the DB. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 155 | // Step 3: rename the container in c/storage. | COMMENT |
| LOW | hack/golangci-lint.sh | 6 | # WARNING: This script executes on multiple operating systems that | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 18 | ## Step 1: Create `hello.container` | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 32 | ## Step 2: Place the file | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 45 | ## Step 3: Reload and start the service | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 81 | ## Step 1: Create `mydata.volume` | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 89 | ## Step 2: Place and reload | COMMENT |
| LOW | docs/source/markdown/podman-quadlet-basic-usage.7.md | 104 | ## Step 3: Create the volume | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 14 | ## Step 1: Find your Podman binary path | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 25 | ## Step 2: Create the LaunchAgent plist | COMMENT |
| LOW | docs/tutorials/macos_autostart.md | 66 | ## Step 3: Load the LaunchAgent | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 37 | # Step 1: Check if this is the contributor's first merged PR. | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 61 | # Step 2: Checkout the repository containing the certificate HTML file. | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 70 | # Step 3: Update the HTML file locally | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 84 | # Step 4: Setup Node.js environment | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 91 | # Step 5: Install Puppeteer | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 97 | # Step 6: Take a screenshot of the certificate div | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 125 | # Step 7: Upload certificate image to separate repository | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 228 | # Step 8: Comment on Pull Request with embedded image | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 280 | # Step 9: Clean up temporary files | COMMENT |
| LOW | pkg/util/utils.go | 442 | // Step 1: Remove extension regions from mapping | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/podman-mac-helper/install.go | 197 | // the entire installation path, and utilize sticky + read-only perms for the helper path | COMMENT |
| MEDIUM | libpod/healthcheck.go | 276 | // is called. Fundamentally this is expected so switch it to exit 0. | COMMENT |
| MEDIUM | libpod/container_internal.go | 940 | // Note: this function is currently meant as a robust solution to a narrow problem: start an infra-container when | COMMENT |
| MEDIUM | libpod/lock/shm/shm_lock.c | 160 | // Set mutexes to robust - if a process dies while holding a mutex, we'll get | COMMENT |
| MEDIUM | hack/ci/make-and-check-size.sh | 52 | # to implement a more robust size-override mechanism, such as by | COMMENT |
| MEDIUM | pkg/systemd/generate/containers.go | 431 | // make systemd units more robust as it allows them to | COMMENT |
| MEDIUM | pkg/k8s.io/api/core/v1/types.go | 3377 | // should be considered safe for load balancers and clients to utilize. | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 14 | // Image-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 20 | // Container-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| MEDIUM⚡ | pkg/domain/infra/tunnel/runtime.go | 25 | // Container-related runtime using an ssh-tunnel to utilize Podman service | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | libpod/runtime_ctr.go | 141 | // Step 1: Alter the config. Save the old name, we need it to rewrite | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 146 | // Step 2: rewrite the old container's config in the DB. | COMMENT |
| LOW⚡ | libpod/runtime_ctr.go | 155 | // Step 3: rename the container in c/storage. | COMMENT |
| LOW | libpod/runtime_ctr.go | 873 | // If we're not force-removing, we need to check if we're in a good | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 37 | # Step 1: Check if this is the contributor's first merged PR. | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 61 | # Step 2: Checkout the repository containing the certificate HTML file. | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 70 | # Step 3: Update the HTML file locally | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 84 | # Step 4: Setup Node.js environment | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 91 | # Step 5: Install Puppeteer | COMMENT |
| LOW⚡ | .github/workflows/first_contrib_cert_generator.yml | 97 | # Step 6: Take a screenshot of the certificate div | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 125 | # Step 7: Upload certificate image to separate repository | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 228 | # Step 8: Comment on Pull Request with embedded image | COMMENT |
| LOW | .github/workflows/first_contrib_cert_generator.yml | 280 | # Step 9: Clean up temporary files | COMMENT |
| LOW | pkg/util/utils.go | 442 | // Step 1: Remove extension regions from mapping | COMMENT |
| LOW | pkg/specgen/generate/kube/kube.go | 534 | // If the container has bind mounts, we need to check if | COMMENT |
| LOW | pkg/api/handlers/utils/images.go | 275 | // We need to check if no progress was sent previously. In that case, we should only return the base error message. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/podman/completion/completion.go | 90 | "\n# This file is generated with %q; see: podman-completion(1)\n", cmd.CommandPath(), | CODE |
| MEDIUM | test/python/docker/compat/test_containers.py | 46 | # Create a new container and validate the count | COMMENT |
| MEDIUM | test/system/helpers.bash | 794 | # This function is intended to be used as '$(podman_runtime)', i.e. | COMMENT |
| MEDIUM | test/e2e/build_test.go | 1337 | # Create a summary file | COMMENT |
| MEDIUM | docs/source/conf.py | 21 | # Define the canonical URL for our custom docs.podman.io domain configured on Read the Docs | COMMENT |
| MEDIUM | .github/workflows/cherry-pick.yml | 145 | # Create a new branch for the cherry-pick PR | COMMENT |
| MEDIUM | .github/workflows/cherry-pick.yml | 284 | # Create a new branch for the cherry-pick PR | COMMENT |
| MEDIUM | pkg/systemd/parser/unitfile_test.go | 101 | # This file is part of systemd. | COMMENT |
| MEDIUM | pkg/systemd/parser/unitfile_test.go | 170 | # This file is part of systemd. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 188 | def test_add_with_annotations(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 295 | def test_add_append_with_type_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 318 | def test_add_with_append_to_missing_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 337 | def test_add_without_name_and_filename_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 355 | def test_add_local_with_not_existing_file(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 378 | def test_add_local_with_not_absolute_path(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 441 | def test_inspect_absent_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 525 | def test_pull_unauthorised_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 686 | def test_remove_absent_artifact_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 743 | def test_push_missing_artifact(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_artifact.py | 815 | def test_extract_absent_fails(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 45 | def test_list_filters_label_not(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 281 | def test_create_duplicate_name(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 441 | def test_host_config_port_bindings(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 478 | def test_host_config_cgroupns_mode(self): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_volume.py | 126 | def test_volume_label_override(self): | CODE |
| LOW | test/python/docker/compat/test_images.py | 82 | def test_get_image_exists_not(self): | CODE |
| LOW | test/python/docker/compat/test_images.py | 131 | def test_build_image_via_api_client(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 51 | def test_start_container_with_random_port_bind(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 96 | def test_remove_container_without_force(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 121 | def test_pause_stopped_container(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 210 | def test_mount_preexisting_dir(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 229 | def test_non_existent_workdir(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 268 | def test_mount_options_by_default(self): | CODE |
| LOW | test/python/docker/compat/test_containers.py | 312 | def test_container_inspect_compatibility(self): | CODE |
| LOW | test/python/docker/compat/test_system.py | 23 | def test_info_container_details(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/system/helpers.bash | 1173 | # Set PODMAN_TEST_DEBUG to the name of one or more functions you want to debug | COMMENT |
| LOW | test/system/helpers.bash | 1188 | # Check if our calling function matches any of the desired strings | COMMENT |
| LOW | test/system/helpers.systemd.bash | 120 | # Check if this is a template unit (ends with @) | COMMENT |
| LOW | hack/install_golangci.sh | 32 | # Check if it's already installed globally. | COMMENT |
| LOW | hack/branch_commits.rb | 15 | # Check if a given Git branch exists | COMMENT |
| LOW | contrib/packit-tmt/packit-rpm-git-commit.sh | 10 | # Set path to rpm spec file | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 50 | # Check if user has write permission to the repository | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 103 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 123 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/cherry-pick.yml | 273 | # Check if branch exists | COMMENT |
| LOW | .github/workflows/assign.yml | 25 | # Check if issue has any assignees | COMMENT |
| LOW | .github/workflows/update-podmanio.yml | 95 | # Check if version is actually higher than one on podman.io | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | contrib/minutes/20260626.md | 92 | *These minutes were generated by AI. A full transcript of the meeting is below.* | COMMENT |
| HIGH | pkg/k8s.io/api/apps/v1/types.go | 42 | // - Storage: As many VolumeClaims as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/python/docker/compat/test_images.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| HIGH | test/python/docker/compat/test_containers.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| HIGH | test/python/docker/compat/test_system.py | 0 | integration tests for exercising docker-py against podman service. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 201 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 202 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 203 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 205 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 206 | CODE | |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_image.py | 209 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | troubleshooting.md | 884 | except Exception as e: | CODE |
| LOW | troubleshooting.md | 911 | except Exception as e: | CODE |
| MEDIUM | troubleshooting.md | 874 | def reload_podman_network(): | CODE |
| MEDIUM | troubleshooting.md | 898 | def signal_listener(): | CODE |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 388 | except Exception: | CODE |
| MEDIUM | test/apiv2/python/rest_api/test_v2_0_0_container.py | 379 | def _impl(fifo, stop): | CODE |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 34 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 1 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 2 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 6 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 3 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 4 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 5 | CODE | |
| LOW | test/apiv2/python/rest_api/v1_test_rest_v1_0_0.py | 10 | CODE | |
| LOW | test/python/docker/__init__.py | 4 | CODE | |
| LOW | test/compose/simple_port_map/frontend/app.py | 2 | CODE | |
| LOW | hack/ci/ci_yaml_test.py | 7 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/python/docker/compat/test_images.py | 146 | resp: str = self.docker.images.push("non-existent.lan:5000/alpine", "latest") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 373 | CODE | |
| LOW | test/apiv2/python/rest_api/test_v2_0_0_container.py | 379 | CODE | |
| LOW | test/python/docker/compat/test_containers.py | 312 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/e2e/image_sign_test.go | 52 | session := podmanTest.Podman([]string{"image", "sign", "--directory", sigDir, "--sign-by", "foo@bar.com", "docker://li | CODE |
| LOW | test/e2e/image_sign_test.go | 68 | session := podmanTest.Podman([]string{"image", "sign", "--all", "--directory", sigDir, "--sign-by", "foo@bar.com", "do | CODE |
| LOW | test/e2e/save_test.go | 181 | session = podmanTest.Podman([]string{"push", "-q", "--tls-verify=false", "--sign-by", "foo@bar.com", pushedImage}) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/k8s.io/api/core/v1/types.go | 1307 | // TODO: implement a realistic TCP lifecycle hook | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/domain/infra/abi/play.go | 64 | // Make sure to replace the service container as well if requested by | COMMENT |