Podman Desktop is the best free and open source tool to work with Containers and Kubernetes for developers. Get an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from your desktop.
This report summarizes scanner evidence for podman-desktop/podman-desktop, a TypeScript project with 8,118 GitHub stars. SynthScan examined 432,392 lines of code across 2648 source files, recording 438 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 1.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 380 finding(s).
Are imports declared and package/API names verified? 43 finding(s).
Are wrappers, guards, and repeated structures necessary? 241 finding(s).
Which changes need focused human review? 438 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 438 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | website/sidebar-content-parser.ts | 30 | export function extractNavigationFromSidebar( | CODE |
| LOW | website/src/pages/features/index.tsx | 70 | function FeatureManagementFromTrayIcon(): JSX.Element { | CODE |
| LOW | …ts/playwright/src/specs/z-podman-machine-tests.spec.ts | 281 | async function navigateToMachineDetailsPage( | CODE |
| LOW | …ts/playwright/src/specs/z-podman-machine-tests.spec.ts | 299 | async function startMachineAndVerifyLogs( | CODE |
| LOW | …ts/playwright/src/specs/z-podman-machine-tests.spec.ts | 344 | async function restartMachineAndVerifyLogs( | CODE |
| LOW | …ts/playwright/src/specs/podman-extension-smoke.spec.ts | 63 | async function verifyPodmanExtensionStatus(enabled: boolean): Promise<void> { | CODE |
| LOW | tests/playwright/src/specs/enhanced-dashboard.spec.ts | 282 | async function uninstallDummyClusterExtension(navigationBar: NavigationBar): Promise<void> { | CODE |
| LOW | …aywright/src/specs/z-podman-machine-onboarding.spec.ts | 333 | async function verifyPodmanOnboardingPageVisible(page: Page): Promise<void> { | CODE |
| LOW | …s/playwright/src/specs/builtin-extension-smoke.spec.ts | 65 | function loadPreInstalledExtensions(): PreInstalledExtension[] { | CODE |
| LOW | …s/playwright/src/specs/builtin-extension-smoke.spec.ts | 180 | async function verifyBuiltInExtensionStatus( | CODE |
| LOW | tests/playwright/src/utility/auth-utils.ts | 32 | export async function findPageWithTitleInBrowser(browser: Browser, expectedTitle: string): Promise<Page | undefined> { | CODE |
| LOW | tests/playwright/src/utility/registry-auth-config.ts | 91 | export async function removeRegistryCredentials(registryUrl: string): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/cluster-operations.ts | 159 | export async function resourceConnectionActionDetails( | CODE |
| LOW | tests/playwright/src/utility/cluster-operations.ts | 229 | export async function validateClusterResourcesDeletion( | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 105 | function kubernetesResourceDialogTitle(resourceType: KubernetesResources): string { | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 143 | export async function checkDeploymentReplicasInfo( | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 161 | export async function checkKubernetesResourceState( | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 218 | export async function countKubernetesPodReplicas(page: Page, expectedPodName: string): Promise<number> { | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 236 | export async function getFirstPodFromDeployment(page: Page, deploymentName: string): Promise<string> { | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 278 | export async function verifyPortForwardingConfiguration( | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 320 | export async function monitorPodStatusInClusterContainer( | CODE |
| LOW | tests/playwright/src/utility/kubernetes.ts | 345 | async function checkContourPodsInTerminal(page: Page, containerName: string): Promise<boolean> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 328 | export async function handlePodmanConfirmationDialogs(page: Page, signal?: AbortSignal): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 448 | async function ensurePodmanMachineStopped( | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 489 | async function waitForPodmanMachineStoppedState(podmanResourceCard: ResourceConnectionCardPage): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 573 | export async function getVolumeNameForContainer(page: Page, containerName: string): Promise<string> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 628 | export async function createPodmanMachineFromCLI(): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 657 | export async function deletePodmanMachineFromCLI(podmanMachineName: string): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 671 | export async function resetPodmanMachinesFromCLI(): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 750 | export async function setDockerCompatibilityFeature(page: Page, enable: boolean): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 795 | export async function setStatusBarProvidersFeature( | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 806 | export async function setEnhancedDashboardFeature( | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 867 | export async function verifyVirtualizationProvider( | CODE |
| LOW | tests/playwright/src/utility/operations.ts | 971 | export function isPodmanCliVersionAtLeast(referenceVersion: string): boolean { | CODE |
| LOW | tests/playwright/src/utility/wait.ts | 117 | export async function waitForPodmanMachineStartup(page: Page, timeout = 30_000): Promise<void> { | CODE |
| LOW | tests/playwright/src/utility/provider.ts | 30 | export function getVirtualizationProvider(): PodmanVirtualizationProviders | undefined { | CODE |
| LOW | tests/playwright/src/utility/provider.ts | 35 | export function getDefaultVirtualizationProvider(): PodmanVirtualizationProviders { | CODE |
| LOW | …nsions/podman/packages/extension/src/extension.spec.ts | 3539 | function mockExtensionForAuditTests() { | CODE |
| LOW | …nsions/podman/packages/extension/src/extension.spec.ts | 4495 | function setupSocketMonitorWithStatus(alive: boolean): void { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 143 | export function isIncompatibleMachineOutput(output: string | undefined): boolean { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 540 | export async function getImportNativeCAFromConfig( | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 574 | async function updateContainerConfiguration( | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 695 | function stopMonitoringPodmanSocket(machineName?: string): boolean { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1101 | async function doHandleWSLDistroNotFoundError( | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1179 | export function initPodmanRemoteConnections(remoteConnections: PodmanRemoteConnections): void { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1184 | export async function initCheckAndRegisterUpdate( | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1229 | export function registerOnboardingMachineExistsCommand(): extensionApi.Disposable { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1242 | export function registerOnboardingUnsupportedPodmanMachineCommand(): extensionApi.Disposable { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1268 | export function registerOnboardingRemoveUnsupportedMachinesCommand(): extensionApi.Disposable { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 1992 | export async function getJSONMachineListByProvider(containerMachineProvider?: string): Promise<MachineListOutput> { | CODE |
| LOW⚡ | extensions/podman/packages/extension/src/extension.ts | 2029 | export function isStartNowAtMachineInitSupported(podmanVersion: string): boolean { | CODE |
| LOW⚡ | extensions/podman/packages/extension/src/extension.ts | 2036 | export function isRootfulMachineInitSupported(podmanVersion: string): boolean { | CODE |
| LOW⚡ | extensions/podman/packages/extension/src/extension.ts | 2043 | export function isPlaybookMachineInitSupported(podmanVersion: string): boolean { | CODE |
| LOW⚡ | extensions/podman/packages/extension/src/extension.ts | 2049 | export function isPodmanSocketLocationMoved(podmanVersion: string): boolean { | CODE |
| LOW⚡ | extensions/podman/packages/extension/src/extension.ts | 2056 | export function isUserModeNetworkingSupported(podmanVersion: string): boolean { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 2085 | export function isMachineListAllProvidersSupported(podmanVersion: string): boolean { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 2429 | export function updateWSLHyperVEnabledContextValue(value: boolean): void { | CODE |
| LOW | extensions/podman/packages/extension/src/extension.ts | 2436 | async function initializeCertificateDetection(telemetryLogger: extensionApi.TelemetryLogger): Promise<void> { | CODE |
| LOW | …/podman/packages/extension/src/utils/podman-bundled.ts | 59 | export function getBundledReleaseNotesHref(os: string = process.platform, architecture: string = process.arch): string { | CODE |
| LOW | extensions/podman/packages/extension/src/utils/util.ts | 197 | export async function getMultiplePodmanInstallationsWarnings( | CODE |
| 166 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CUSTOM_UPDATE_SERVER.md | 24 | #### Step 1: Clean assets directory | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 32 | #### Step 2: Create a self-signed code signing certificate | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 74 | #### Step 3: Configure `product.json` | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 88 | #### Step 4: Build the initial binary (v1.0.0) | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 104 | #### Step 5: Build the update binary (v99.0.0) | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 113 | #### Step 6: Re-sign, repackage, and host the update | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 145 | #### Step 7: Start the update server | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 160 | #### Step 8: Install and run | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 177 | #### Step 9: Clean up | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 194 | #### Step 1: Configure `product.json` | COMMENT |
| LOW | CUSTOM_UPDATE_SERVER.md | 208 | #### Step 2: Build the initial binary (v1.0.0) | COMMENT |
| LOW⚡ | CUSTOM_UPDATE_SERVER.md | 223 | #### Step 3: Build the update binary (v99.0.0) | COMMENT |
| LOW⚡ | CUSTOM_UPDATE_SERVER.md | 232 | #### Step 4: Host the update | COMMENT |
| LOW⚡ | CUSTOM_UPDATE_SERVER.md | 242 | #### Step 5: Start the update server | COMMENT |
| LOW⚡ | CUSTOM_UPDATE_SERVER.md | 251 | #### Step 6: Install and run | COMMENT |
| LOW⚡ | CUSTOM_UPDATE_SERVER.md | 255 | #### Step 7: Clean up | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 44 | ### Step 1: Determine the target repository | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 50 | ### Step 2: Classify the issue type | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 64 | ### Step 3: Analyze the codebase (bug reports only) | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 83 | ### Step 4: Search for duplicates | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 89 | ### Step 5: Read the repo's issue templates | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 113 | ### Step 6: Gather metadata | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 126 | ### Step 7: Draft the issue — STOP and show to the user | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 156 | ### Step 8: Create the issue (only after explicit user confirmation) | COMMENT |
| LOW | .agents/skills/create-github-issue/SKILL.md | 166 | ### Step 9: Display the result | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 99 | ### Step 1: Run the overview | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 109 | ### Step 2: Read the test source | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 120 | ### Step 3: Find the first meaningful failure | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 140 | ### Step 4: Corroborate with additional signals | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 155 | ### Step 5: Correlate with code changes (when useful) | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 165 | ### Step 6: Classify the failure | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 177 | ### Step 7: Report | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 372 | ### Step 1: Verify zip contents and extract | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 380 | ### Step 2: Parse actions and locator resolutions from trace.trace | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 427 | ### Step 3: View screenshots at specific timestamps | COMMENT |
| LOW | .agents/skills/playwright-trace-analysis/SKILL.md | 431 | ### Step 4: Check network log | COMMENT |
| LOW | .agents/skills/prototype-switcher/SKILL.md | 28 | ### Step 1 - Install infrastructure files | COMMENT |
| LOW | .agents/skills/prototype-switcher/SKILL.md | 57 | ### Step 2 - Wire the prototype | COMMENT |
| LOW | .agents/skills/prototype-switcher/SKILL.md | 128 | ### Step 3 - Verify | COMMENT |
| LOW | .agents/skills/investigate-gh-run/SKILL.md | 16 | ### Step 1: Gather Everything (one parallel batch) | COMMENT |
| LOW | .agents/skills/investigate-gh-run/SKILL.md | 81 | ### Step 2: Classify and Route | COMMENT |
| LOW | .agents/skills/investigate-gh-run/SKILL.md | 106 | ### Step 3: Artifacts + Trace Dispatch (Category C only) | COMMENT |
| LOW | .agents/skills/investigate-gh-run/SKILL.md | 154 | ### Step 4: Regression Hunt + Source Code (parallel, Category C only) | STRING |
| LOW | .agents/skills/investigate-gh-run/SKILL.md | 166 | ### Step 5: Report | STRING |
| LOW | .agents/skills/component-modernization/SKILL.md | 14 | ## Step 1: Apply Storybook HMR patch | COMMENT |
| LOW | .agents/skills/component-modernization/SKILL.md | 24 | ## Step 2: Draft subtask issues | COMMENT |
| LOW⚡ | .agents/skills/component-modernization/SKILL.md | 88 | ## Step 3: Research the component | COMMENT |
| LOW⚡ | .agents/skills/component-modernization/SKILL.md | 98 | ## Step 4: Implement | COMMENT |
| LOW⚡ | .agents/skills/component-modernization/SKILL.md | 108 | ## Step 5: Before committing | COMMENT |
| LOW | .agents/skills/mcp-testing/agent-prompt.md | 71 | ### Step 1: Execute the Task | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 163 | // Step 1: Ensure the anchors directory exists (0% -> 5%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 169 | // Step 2: Get existing certificate fingerprints from VM (5% -> 10%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 175 | // Step 3: Build map of host certificates (fingerprint -> PEM) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 184 | // Step 4: Calculate diff | COMMENT |
| LOW | …ension/src/certificate-sync/podman-certificate-sync.ts | 198 | // Step 5: Delete stale certificates (10% -> 20%) | COMMENT |
| LOW | …ension/src/certificate-sync/podman-certificate-sync.ts | 209 | // Step 6: Upload only new certificates (20% -> 85%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 243 | // Step 7: Update the CA trust store (85% -> 92%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 249 | // Step 8: Restart podman services to pick up new certificates (92% -> 100%) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | codecov.yml | 1 | # | COMMENT |
| LOW | SECURITY-INSIGHTS.yml | 1 | # | COMMENT |
| LOW | .clomonitor.yml | 1 | # | COMMENT |
| LOW | .agentready-config.yaml | 1 | # AgentReady configuration for Podman Desktop | COMMENT |
| LOW | tests/tmt/scripts/install-docker-compose.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/tmt/scripts/install-podman.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/tmt/scripts/install-kubectl.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/tmt/scripts/create-results.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/tmt/scripts/install-kind.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/playwright/resources/proxy-fake-kube-config.yaml | 1 | # Copyright (C) 2026 Red Hat, Inc. | COMMENT |
| LOW | tests/playwright/resources/preinstalled-extensions.txt | 1 | # Pre-installed extensions to verify during E2E smoke tests. | COMMENT |
| LOW | …rces/podman-kube-play/podman-kube-play-build-test.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …sts/playwright/resources/alphine-hello/echo_and_run.sh | 1 | # /********************************************************************** | COMMENT |
| LOW | …s/playwright/resources/kubernetes/test-image-push.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …wright/resources/kubernetes/test-cronjob-resource.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …wright/resources/kubernetes/test-service-resource.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …wright/resources/kubernetes/test-kind-config-file.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …wright/resources/kubernetes/test-ingress-resource.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | …ght/resources/kubernetes/test-deployment-resource.yaml | 1 | # /********************************************************************** | COMMENT |
| LOW | tests/playwright/scripts/setup-proxy.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/playwright/scripts/setup-insecure-registry.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/playwright/scripts/setup-insecure-registry.sh | 21 | # Requires Bash 3.2+ (macOS GitHub runners ship Bash 3.2). | COMMENT |
| LOW | tests/playwright/scripts/validate-airgap-assets.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/playwright/src/model/core/data-subdirectories.ts | 21 | // Each is created eagerly during main-process startup: | COMMENT |
| LOW | .agents/skills/mcp-testing/probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .agents/skills/mcp-testing/start.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .devcontainer/updateContentCommand.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .devcontainer/onCreateCommand.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .devcontainer/postStartCommand.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .devcontainer/.parent/entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | extensions/kind/scripts/download.ts | 81 | // download the file from the given URL and store the content in destFile | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 1 | # This file is generated from the individual YAML files by generate-deployment.sh. Do not | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 41 | contour.yaml: | | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 61 | # Disable HTTPProxy permitInsecure field | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 81 | # namespace: projectcontour | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 101 | # The default fields that will be logged are specified below. | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 121 | # - "upstream_cluster" | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 141 | # connection-shutdown-grace-period: 5s | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 161 | # formatted as <namespace>/<name>. | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 181 | # Global Policy settings. | COMMENT |
| LOW | extensions/kind/src/resources/contour.yaml | 201 | # server-key-path: /path/to/server-private-key.pem | COMMENT |
| LOW | scripts/schemastore-sync-extension-schema.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/renderer/src/stores/event-store.ts | 101 | // Window event: 'extension-started' | COMMENT |
| LOW | packages/api/src/kubernetes-contexts-permissions.ts | 21 | // the resource name is a generic string type and not a string literal type, as we want to handle CRDs names | COMMENT |
| LOW | packages/main/src/tray-menu.ts | 81 | // and required an internal call to `addProviderLifecycleListener`. | COMMENT |
| LOW | packages/main/src/plugin/proxy-resolver.ts | 21 | import * as nodeurl from 'node:url'; | COMMENT |
| LOW | …ges/main/src/plugin/extension/extension-loader.spec.ts | 1561 | expect(analyzedExtension3.missingDependencies).toBeUndefined(); | COMMENT |
| LOW | packages/main/src/plugin/util/manifest.ts | 21 | const GUESSED_MANIFEST_SIZE = 50 * KB; | COMMENT |
| LOW | …ckages/main/src/plugin/kubernetes/kubernetes-client.ts | 1381 | // this change is due to changes on how client.patch / client.create works with the latest serialization changes | COMMENT |
| LOW | .github/workflows/e2e-prerelease.yaml | 1 | # | COMMENT |
| LOW | …ithub/workflows/schemastore-sync-extension-schema.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/daily-testing-build.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/publish-to-chocolatey.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/publish-website-pr-cloudflare.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/managed-configuration-template.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/stale.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/npmjs-publish.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/publish-flathub.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/e2e-main.yaml | 1 | # | COMMENT |
| LOW | .github/workflows/release-generate-sbom.yaml | 1 | # | COMMENT |
| 18 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | product.json | 146 | "placeholder": "Search Podman Desktop, or type > for commands" | CODE |
| LOW⚡ | product.json | 151 | "placeholder": "Search and execute commands" | CODE |
| LOW⚡ | product.json | 156 | "placeholder": "Search documentation and tutorials" | CODE |
| LOW⚡ | product.json | 161 | "placeholder": "Search images, containers, pods, and other resources" | CODE |
| LOW | tests/playwright/src/specs/search-bar-smoke.spec.ts | 41 | 'placeholder', | CODE |
| LOW⚡ | tests/playwright/src/specs/search-bar-smoke.spec.ts | 64 | 'placeholder', | CODE |
| LOW⚡ | tests/playwright/src/specs/search-bar-smoke.spec.ts | 70 | 'placeholder', | CODE |
| LOW⚡ | tests/playwright/src/specs/search-bar-smoke.spec.ts | 76 | 'placeholder', | CODE |
| LOW⚡ | tests/playwright/src/specs/search-bar-smoke.spec.ts | 82 | 'placeholder', | CODE |
| LOW | tests/playwright/src/specs/search-bar-smoke.spec.ts | 171 | 'placeholder', | CODE |
| LOW | tests/playwright/src/specs/search-bar-smoke.spec.ts | 185 | 'placeholder', | CODE |
| LOW | schemas/extension-schema.json | 161 | "placeholder": { | CODE |
| LOW | extensions/podman/packages/extension/package.json | 200 | "placeholder": "Use 'registry/org/image:version' for image reference" | CODE |
| LOW | …extension/src/remote/podman-remote-connections.spec.ts | 131 | vi.spyOn(remoteConnections, 'readPrivateKey').mockResolvedValue('fake-key'); | CODE |
| LOW | …extension/src/remote/podman-remote-connections.spec.ts | 172 | return 'fake-key'; | CODE |
| LOW | …extension/src/remote/podman-remote-connections.spec.ts | 269 | vi.spyOn(remoteConnections, 'readPrivateKey').mockResolvedValue('fake-key'); | CODE |
| LOW | extensions/kind/package.json | 69 | "placeholder": "Leave empty for using latest.", | CODE |
| LOW | scripts/generate-stylesheet.spec.ts | 72 | id: 'dummy-id', | CODE |
| LOW⚡ | packages/ui/src/lib/layouts/DetailsPage.spec.ts | 100 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/ui/src/lib/layouts/DetailsPage.spec.ts | 100 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/ui/src/lib/layouts/DetailsPage.spec.ts | 106 | // get the element having the 'Lorem ipsum' text | COMMENT |
| LOW⚡ | packages/ui/src/lib/layouts/Page.spec.ts | 137 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/ui/src/lib/layouts/Page.spec.ts | 137 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/ui/src/lib/layouts/Page.spec.ts | 143 | // get the element having the 'Lorem ipsum' text | COMMENT |
| LOW | packages/ui/src/lib/layouts/Page.spec.ts | 173 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW | packages/ui/src/lib/layouts/Page.spec.ts | 173 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW | packages/ui/src/lib/inputs/SearchInput.spec.ts | 44 | expect(element).toHaveProperty('placeholder', 'Search...'); | CODE |
| LOW⚡ | packages/renderer/src/lib/ui/DetailsPage.spec.ts | 106 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/renderer/src/lib/ui/DetailsPage.spec.ts | 106 | const subtitle = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit'; | CODE |
| LOW⚡ | packages/renderer/src/lib/ui/DetailsPage.spec.ts | 112 | // get the element having the 'Lorem ipsum' text | COMMENT |
| LOW | …er/src/lib/preferences/item-formats/StringItem.spec.ts | 55 | placeholder: 'placeholder', | CODE |
| LOW | …erer/src/lib/image/BuildImageFromContainerfile.spec.ts | 372 | expect(containerImageName).toHaveAttribute('placeholder', 'Image name (e.g. quay.io/namespace/my-custom-image)'); | CODE |
| LOW | …lib/feedback/feedbackForms/GitHubIssueFeedback.spec.ts | 166 | expect(title).toHaveProperty('placeholder', placeholders.title); | CODE |
| LOW | …lib/feedback/feedbackForms/GitHubIssueFeedback.spec.ts | 167 | expect(description).toHaveProperty('placeholder', placeholders.description); | CODE |
| LOW⚡ | …ckages/renderer/src/lib/dialogs/CommandPalette.spec.ts | 614 | expect(input).toHaveAttribute('placeholder', 'Enter category 1 item'); | CODE |
| LOW⚡ | …ckages/renderer/src/lib/dialogs/CommandPalette.spec.ts | 619 | await vi.waitFor(() => expect(input).toHaveAttribute('placeholder', 'Enter category 2 item')); | CODE |
| LOW⚡ | …ckages/renderer/src/lib/dialogs/CommandPalette.spec.ts | 623 | await vi.waitFor(() => expect(input).toHaveAttribute('placeholder', 'Enter category 3 item')); | CODE |
| LOW⚡ | …ckages/renderer/src/lib/dialogs/CommandPalette.spec.ts | 627 | await vi.waitFor(() => expect(input).toHaveAttribute('placeholder', 'Enter category 4 item')); | CODE |
| LOW⚡ | …ckages/renderer/src/lib/dialogs/CommandPalette.spec.ts | 631 | await vi.waitFor(() => expect(input).toHaveAttribute('placeholder', 'Enter category 1 item')); | CODE |
| LOW | …es/renderer/src/lib/kube/details/KubePortsList.spec.ts | 92 | id: 'dummy-id', | CODE |
| LOW | packages/main/src/plugin/proxy.spec.ts | 82 | getDataDirectory: () => '/fake-data-directory', | CODE |
| LOW | packages/main/src/plugin/util/sys-info.spec.ts | 73 | process.env['FLATPAK_ID'] = 'dummy-id'; | CODE |
| LOW | …s/main/src/plugin/kubernetes/kubernetes-client.spec.ts | 2531 | id: 'dummy-id', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/skills/mcp-testing/probe.sh | 34 | # ── Production detection ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/probe.sh | 67 | # ── Dev detection ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/probe.sh | 82 | # ── Stale session check ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/probe.sh | 92 | # ── Port conflict check ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/probe.sh | 106 | # ── Output ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/start.sh | 91 | # ── Argument parsing ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/start.sh | 109 | # ── Mode: prod ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/start.sh | 211 | # ── Mode: dev-fast ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/mcp-testing/start.sh | 236 | # ── Mode: dev (full startup) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/managed-configuration-template.yaml | 95 | # ======================================== | COMMENT |
| MEDIUM | .github/workflows/e2e-full-pr.yaml | 22 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/e2e-full-pr.yaml | 37 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/e2e-full-pr.yaml | 41 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/e2e-full-pr.yaml | 67 | # ─── Windows (HyperV) ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/e2e-full-pr.yaml | 131 | # ─── Windows (WSL) ─────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/podman/packages/extension/src/checks/macos-checks.ts | 76 | // we need to check if brew is installed to avoid unexpected error | COMMENT |
| LOW | …s/podman/packages/extension/src/checks/macos-checks.ts | 107 | // we need to check if brew is installed to avoid unexpected error | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 163 | // Step 1: Ensure the anchors directory exists (0% -> 5%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 169 | // Step 2: Get existing certificate fingerprints from VM (5% -> 10%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 175 | // Step 3: Build map of host certificates (fingerprint -> PEM) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 184 | // Step 4: Calculate diff | COMMENT |
| LOW | …ension/src/certificate-sync/podman-certificate-sync.ts | 198 | // Step 5: Delete stale certificates (10% -> 20%) | COMMENT |
| LOW | …ension/src/certificate-sync/podman-certificate-sync.ts | 209 | // Step 6: Upload only new certificates (20% -> 85%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 243 | // Step 7: Update the CA trust store (85% -> 92%) | COMMENT |
| LOW⚡ | …ension/src/certificate-sync/podman-certificate-sync.ts | 249 | // Step 8: Restart podman services to pick up new certificates (92% -> 100%) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | website/src/pages/community/index.tsx | 95 | <p className="mb-14">We welcome contributions of all kinds! Here's how you can get started:</p> | CODE |
| MEDIUM | packages/extension-api/src/extension-api.d.ts | 2280 | * Here is a simple example | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/playwright/scripts/setup-proxy.sh | 25 | # Usage: | COMMENT |
| LOW | tests/playwright/scripts/setup-insecure-registry.sh | 30 | # Usage: | COMMENT |
| LOW | .agents/skills/mcp-testing/start.sh | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | extensions/kind/src/resources/contour.yaml | 1 | # This file is generated from the individual YAML files by generate-deployment.sh. Do not | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/kind/src/resources/contour.yaml | 102 | # To customise this list, just add or remove entries. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/pr-check.yaml | 587 | # Check if there are any code changes matching the include patterns | COMMENT |