3.8

Adjusted Signal

3.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

7.4K

Stars

Language

1.3M

Lines of Code

5.2K

Files

4.6K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 16.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4457 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 56 finding(s).

Agent Over-Engineering Ratio 2.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 425 finding(s).

PR Review Velocity Impact 17.3/100 · LOW

Which changes need focused human review? 4644 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 22MEDIUM 153LOW 4464

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4644 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block3820 hits · 3754 pts

Severity	File	Line	Snippet	Context
LOW	cmd/calico-windows/main.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/version.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/apiserver.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/ctl.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/health.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/cni.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/component.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/main.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	cmd/calico/main.go	61		COMMENT
LOW	cmd/calico/main_test.go	1	// Copyright (c) 2026 Tigera, Inc. All rights reserved.	COMMENT
LOW	networking-calico/setup.py	1	# Copyright (c) 2013 Hewlett-Packard Development Company, L.P.	COMMENT
LOW	networking-calico/devstack/plugin.sh	101		COMMENT
LOW	networking-calico/devstack/resync_scale_test.py	1	#!/usr/bin/env python3	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	1	#!/bin/bash	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	21	# DevStack install, so take it out of the way there. Guarded because this is a	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	41	#------------------------------------------------------------------------------	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	61	# For a single node Calico/DevStack cluster, the environment should leave	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	81	# set to 'true', Tempest will be installed and the required initial	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	101	# Semaphore agent's checkout path; set it when running anywhere else.	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	321	if ${SCALE_ONLY:-false}; then	COMMENT
LOW	networking-calico/devstack/bootstrap.sh	381		COMMENT
LOW	networking-calico/devstack/resync_concurrency_test.py	1	#!/usr/bin/env python3	COMMENT
LOW	networking-calico/networking_calico/monotonic.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/datamodel_v1.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/etcdv3.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/etcdv3.py	421		COMMENT
LOW	networking-calico/networking_calico/etcdv3.py	521		COMMENT
LOW	networking-calico/networking_calico/logutils.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	1	# Copyright (c) 2016, 2018 Tigera, Inc. All rights reserved.	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	161	while not self._stopped:	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	221	# Start a watch from just after the last known revision.	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	241	# revision N+1, which is no longer available.	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	261	#	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	281	# that the DB has just been compacted and so the revision is no	COMMENT
LOW	networking-calico/networking_calico/etcdutils.py	361	# 'value': '...',	COMMENT
LOW	networking-calico/networking_calico/datamodel_v2.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/timestamp.py	1	# -- coding: utf-8 --	COMMENT
LOW	networking-calico/networking_calico/datamodel_v3.py	1	# -- coding: utf-8 --	COMMENT
LOW	…ing-calico/networking_calico/plugins/calico/context.py	1	# Copyright (c) 2025 Tigera, Inc. All Rights Reserved.	COMMENT
LOW	…king-calico/networking_calico/plugins/calico/plugin.py	1	# Copyright (c) 2015 Cisco Systems. All Rights Reserved.	COMMENT
LOW	…king-calico/networking_calico/plugins/calico/plugin.py	81	# a way as to avoid tracebacks in the neutron-server log.	COMMENT
LOW	…king-calico/networking_calico/plugins/calico/plugin.py	101	# .../neutron/db/l3_db.py", line 198, in _get_dead_floating_port_candidates	COMMENT
LOW	…king-calico/networking_calico/plugins/calico/plugin.py	121	# .../neutron_lib/db/api.py", line 183, in wrapped	COMMENT
LOW	…networking_calico/plugins/ml2/drivers/calico/syncer.py	1	# -- coding: utf-8 --	COMMENT
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	1	# -- coding: utf-8 --	COMMENT
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	181	#	COMMENT
LOW	…orking_calico/plugins/ml2/drivers/calico/qos_driver.py	1	# -- coding: utf-8 --	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1	# -- coding: utf-8 --	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	301		COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	321	# us by creating an instance of oslo_context.context.RequestContext (or subclass) at the	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	781	# port can be marked as down/removed by another component.	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1201	p, p.get("binding:host_id"), plugin_context	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1321	# port from the Neutron DB, decides present-or-absent for the slot, and	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1581	try:	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1621	#	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1661	# keep history for at least one etcd_compaction_period_mins	COMMENT
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1721	)	COMMENT
LOW	…networking_calico/plugins/ml2/drivers/calico/policy.py	1	# -- coding: utf-8 --	COMMENT
LOW	…networking_calico/plugins/ml2/drivers/calico/policy.py	281	# "The IP protocol can be represented by a string, an integer, or null. Valid string	COMMENT
LOW	…etworking_calico/plugins/ml2/drivers/calico/subnets.py	1	# -- coding: utf-8 --	COMMENT
3760 more matches not shown…

Hyper-Verbose Identifiers292 hits · 253 pts

Severity	File	Line	Snippet	Context
LOW	networking-calico/devstack/resync_scale_test.py	274	def create_networks_and_subnets(conn, num_networks):	CODE
LOW⚡	networking-calico/devstack/resync_concurrency_test.py	326	def neutron_server_restart_and_wait(conn, deadline_secs=60):	CODE
LOW⚡	networking-calico/devstack/resync_concurrency_test.py	344	def wait_for_log_text_in_journal(text, since_dt, deadline_secs):	CODE
LOW	networking-calico/devstack/resync_concurrency_test.py	113	def measure_port_create_burst(conn, network, subnet, sg, host, count, label):	CODE
LOW	networking-calico/devstack/resync_concurrency_test.py	146	def _take_warmup_then_measure(conn, network, subnet, sg, host, count, label):	CODE
LOW	networking-calico/networking_calico/datamodel_v2.py	59	def get_port_status_id_from_key(region_string, key):	CODE
LOW	networking-calico/networking_calico/datamodel_v3.py	275	def sanitize_label_name_value(name, max_length):	CODE
LOW⚡	…king-calico/networking_calico/plugins/calico/plugin.py	169	def create_security_group_rule(self, context, security_group_rule):	CODE
LOW⚡	…king-calico/networking_calico/plugins/calico/plugin.py	175	def create_security_group_rule_bulk(self, context, security_group_rules):	CODE
LOW⚡	…king-calico/networking_calico/plugins/calico/plugin.py	183	def delete_security_group_rule(self, context, sgrid):	CODE
LOW	…networking_calico/plugins/ml2/drivers/calico/syncer.py	358	def etcd_write_data_matches_existing(self, write_data, existing):	CODE
LOW⚡	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1142	def get_allowed_network_types(self, agent=None):	CODE
LOW⚡	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1151	def create_network_postcommit(self, context):	CODE
LOW⚡	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1156	def update_network_postcommit(self, context):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	637	def _init_start_calico_resource_syncer(self):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	640	def _init_start_calico_manager(self):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	657	def _init_start_agent_status_watcher(self):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	674	def _init_start_endpoint_status_watcher(self):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	855	def _loop_writing_port_statuses(self):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	949	def _try_to_update_port_status(self, admin_context, port_status_key):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	965	def _update_port_status_from_cache(self, admin_context, port_status_key):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1085	def _retry_port_status_update(self, port_status_key):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1237	def delete_network_postcommit(self, context):	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1561	def check_request_etcd_compaction():	CODE
LOW	…networking_calico/plugins/ml2/drivers/calico/policy.py	136	def neutron_to_etcd_write_data(self, name, sg, context, reread=False):	CODE
LOW	…networking_calico/plugins/ml2/drivers/calico/policy.py	263	def _neutron_rule_to_etcd_rule(rule):	CODE
LOW	…etworking_calico/plugins/ml2/drivers/calico/subnets.py	78	def neutron_to_etcd_write_data(self, name, subnet, context, reread=False):	CODE
LOW	…ico/plugins/ml2/drivers/calico/fairy_gc_diagnostics.py	206	def _calico_detect_in_hub_checkin(dbapi_conn, connection_record):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	511	def neutron_to_etcd_write_data(self, name, value, context, reread=False):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	525	def neutron_to_port_etcd_write_data(self, port, context, reread, dest_host=None):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	560	def neutron_to_live_migration_etcd_write_data(	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	835	def get_extra_port_information(self, context, port):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	926	def _get_extra_port_information_from_bulk(self, context, port):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	1204	def _etcd_slots_can_exist_for(db_port, host, device_id):	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	1235	def endpoint_name_without_host(name):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1629	def test_get_vif_details_falls_back_when_port_mac_missing(self):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1635	def test_get_vif_details_falls_back_on_malformed_port_mac(self):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1641	def test_neutron_rule_to_etcd_rule_icmp(self):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2757	def test_vif_plug_no_notification_for_detached_port(self):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2767	def test_vif_plug_no_notification_if_dest_goes_down_during_read(self):	CODE
LOW⚡	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2774	def get_port_while_dest_goes_down(context, port_id):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1463	def test_subnet_cas_retry_after_conflict(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1502	def test_subnet_cas_exhaustion(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1547	def test_check_segment_for_agent(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1608	def test_bind_port_dead_agent(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1613	def test_get_vif_details_derives_tap_mac_from_port_mac(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1718	def test_neutron_rule_to_etcd_rule_protocol_name(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1743	def test_neutron_rule_to_etcd_rule_protocol_any(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1769	def test_sg_rule_ingress_no_remote_ip_prefix(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1787	def test_sg_rule_egress_no_remote_ip_prefix(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1806	def test_sg_rule_ingress_with_remote_ip_prefix(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1826	def test_sg_rule_egress_with_remote_ip_prefix(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	1846	def test_startup_resync_disabled(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2028	def test_port_narrow_resync_no_op_when_correct(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2038	def test_port_narrow_resync_recreates_after_etcd_loss(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2051	def test_subnet_narrow_resync_writes_only_when_changed(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2075	def test_subnet_narrow_resync_deletes_when_gone(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2099	def test_security_group_narrow_resync_no_op_when_correct(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2296	def test_pre_live_migration_transient_vif_unbound(self):	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	2343	def test_live_migration_complete_transient_vif_unbound(self):	CODE
232 more matches not shown…

Self-Referential Comments68 hits · 224 pts

Severity	File	Line	Snippet	Context
MEDIUM	networking-calico/devstack/bootstrap.sh	136	# Create a directory for DevStack bootstrap and testing.	COMMENT
MEDIUM	networking-calico/devstack/bootstrap.sh	365	# Create a Calico network, for demonstration purposes.	COMMENT
MEDIUM	networking-calico/devstack/qos_responsiveness_tests.py	349	# Create the QoS rules and policies that we need.	COMMENT
MEDIUM	networking-calico/devstack/qos_responsiveness_tests.py	366	# Create the network and subnet.	COMMENT
MEDIUM	networking-calico/devstack/qos_responsiveness_tests.py	369	# Create the VM.	COMMENT
MEDIUM	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	22	# This module is the OpenStack-specific implementation of the Plugin component	COMMENT
MEDIUM	…etworking_calico/plugins/ml2/drivers/calico/workers.py	64	# Create the stop event here, not in start(), because oslo_service can call	COMMENT
MEDIUM	…working_calico/plugins/ml2/drivers/calico/endpoints.py	426	# The following methods differ from those for other resources for two reasons.	COMMENT
MEDIUM	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	745	# Create a new security group.	COMMENT
MEDIUM	…tworking_calico/plugins/ml2/drivers/calico/test/lib.py	154	# Define a stub class that mocks out leader election: assume we're always	COMMENT
MEDIUM	…tworking_calico/plugins/ml2/drivers/calico/test/lib.py	315	# Create an instance of CalicoMechanismDriver.	COMMENT
MEDIUM	…king-calico/networking_calico/tests/test_dhcp_agent.py	114	# Create the DHCP agent.	COMMENT
MEDIUM	…king-calico/networking_calico/tests/test_dhcp_agent.py	367	# Create the DHCP agent.	COMMENT
MEDIUM⚡	…king-calico/networking_calico/tests/test_dhcp_agent.py	407	# Create the DHCP agent and allow it to start the SubnetWatcher loop.	COMMENT
MEDIUM⚡	…king-calico/networking_calico/tests/test_dhcp_agent.py	418	# Create the DHCP agent.	COMMENT
MEDIUM	…king-calico/networking_calico/tests/test_dhcp_agent.py	452	# Create the DHCP agent.	COMMENT
MEDIUM	…king-calico/networking_calico/tests/test_dhcp_agent.py	480	# Create the DHCP agent.	COMMENT
MEDIUM	…king-calico/networking_calico/tests/test_dhcp_agent.py	505	# Create the DHCP agent.	COMMENT
MEDIUM⚡	…-calico/networking_calico/tests/test_subnet_watcher.py	45	# Create the DHCP agent and allow it to start the	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	39	# Create the ipv6 pool using calicoctl, and read it out using an	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	48	# Create a BGP Config	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	56	# Create a BGP Config that should reference a node.	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	65	# Create a BGP Peer	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	73	# Create a Felix config	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	79	# Create a Felix config that should reference a node.	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	86	# Create a Global Network policy	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	95	# Create a Global Network set	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_migrate.py	103	# Create a HostEndpoint	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_migrate.py	139	# Create a Node, this should also trigger auto-creation of a cluster info	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_migrate.py	154	# Create an IP reservation.	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_migrate.py	158	# Create a BGPFilter.	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1004	# Create a second node, this should keep the existing cluster info.	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1015	# Create a new default KubeControllersConfiguration and get it to determine the current	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1058	# Create a new Host Endpoint and get it to determine the	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1495	# Create a resource with invalid syntax (negative AS number causes parse error)	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	44	# Create the ipv6 pool using calicoctl, and read it out using an	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	219	# Create a new BGP Peer and get it to determine the current resource	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	250	# Create a new Network Policy and get it to determine the current	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	286	# Create a new Staged Network Policy and get it to determine the current	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	322	# Create a new Staged Kubernetes Network Policy and get it to determine the current	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	572	# Create a couple of resources.	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	885	# Create a new default BGPConfiguration and get it to determine the current	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	936	# Create a new default BGPConfiguration and get it to determine the current	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	991	# Create a node, this should trigger auto-creation of a cluster info.	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	1110	# Create a new Network Policy with all metadata specified	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	1166	# Create a new Staged Network Policy with all metadata specified	COMMENT
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1547	pass # Create an empty file	CODE
MEDIUM⚡	calicoctl/tests/st/calicoctl/test_crud.py	1559	pass # Create an empty file	CODE
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	1592	# Create a NetworkPolicy with an invalid selector that has invalid characters	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	2942	# # Create the policy using calicoctl	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	2968	# # Create the policy using calicoctl	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	3003	# # Create the policy using calicoctl	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_crud.py	3038	# # Create the policy using calicoctl	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_flags.py	47	# Create a Node, this should also trigger auto-creation of a cluster info,	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_ipam_split.py	41	# Create the ipv4 pool using calicoctl, and read it out using an	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_ipam_split.py	50	# Create a Node, this should also trigger auto-creation of a cluster info	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_ipam_split.py	124	# Create the ipv4 pool using calicoctl, and read it out using an	COMMENT
MEDIUM	calicoctl/tests/st/calicoctl/test_ipam_split.py	133	# Create a Node, this should also trigger auto-creation of a cluster info	COMMENT
MEDIUM	hack/set_quay_expiry.py	338	# Create a timedelta from the number of days passed in	STRING
MEDIUM	hack/test/kind/external-node.sh	68	# Create the ubuntu user for the framework to SSH in as, and harden sshd to	COMMENT
8 more matches not shown…

Structural Annotation Overuse113 hits · 191 pts

Severity	File	Line	Snippet	Context
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	227	// Step 1: calculate any updates to the _desired_ state of the BPF map.	COMMENT
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	230	// Step 2: if required, load the state of the map from the dataplane so we can do efficient deltas.	COMMENT
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	237	// Step 3: apply dataplane updates.	COMMENT
LOW	felix/routetable/route_table_test.go	2223	// Step 1: Felix programs a local route for the VM at normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2236	// Step 2: BIRD programs a remote route at elevated priority via eth0.	COMMENT
LOW	felix/routetable/route_table_test.go	2260	// Step 3: Source cleanup — Felix removes the local route.	COMMENT
LOW	felix/routetable/route_table_test.go	2274	// Step 4: BIRD updates its route to normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2320	// Step 1: BIRD remote route exists at normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2343	// Step 2: VM is now live on this host — Felix programs a	COMMENT
LOW	felix/routetable/route_table_test.go	2359	// Step 3: Source cleanup — BIRD removes the remote route.	COMMENT
LOW	felix/routetable/route_table_test.go	2371	// Step 4: Reversion to normal — Felix updates its route	COMMENT
LOW⚡	confd/tests/daemon_test.go	41	// Step 1: create nodes and a peering on a local subnet.	COMMENT
LOW⚡	confd/tests/daemon_test.go	47	// Step 2: update the peering to omit source address.	COMMENT
LOW⚡	confd/tests/daemon_test.go	55	// Step 3: add a max restart time.	COMMENT
LOW⚡	confd/tests/daemon_test.go	80	// Step 1: no secret yet → peerings have no password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	83	// Step 2: create the secret with key "a".	COMMENT
LOW⚡	confd/tests/daemon_test.go	92	// Step 3: update the password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	101	// Step 4: change secret to an unreferenced key → password disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	110	// Step 5: delete the secret → still no password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	138	// Step 1: no secrets → no passwords on any peering.	COMMENT
LOW⚡	confd/tests/daemon_test.go	141	// Step 2: create my-secrets-1 with only key "b".	COMMENT
LOW⚡	confd/tests/daemon_test.go	172	// Step 4: delete my-secrets-2 → password-c disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	177	// Step 5: change passwords in my-secrets-1.	COMMENT
LOW⚡	confd/tests/daemon_test.go	186	// Step 6: remove key "a" from my-secrets-1 → new-password-a disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	384	// Step 1: create nodes and a peering on a local subnet.	COMMENT
LOW⚡	confd/tests/daemon_test.go	390	// Step 2: update BGPConfiguration to change normal IPv4 route priority.	COMMENT
LOW⚡	confd/tests/daemon_test.go	398	// Step 3: update BGPConfiguration to change normal IPv6 route priority.	COMMENT
LOW⚡	confd/tests/daemon_test.go	414	// Step 1: apply resources and verify output with filter active.	COMMENT
LOW⚡	confd/tests/daemon_test.go	418	// Step 2: delete the BGPFilter, verify output updates.	COMMENT
LOW	confd/tests/daemon_test.go	153	// Step 3: update my-secrets-1 to include both keys, and create my-secrets-2.	COMMENT
LOW	confd/docs/bgpfilter-bird-config-examples.md	89	### Step 1: BGPFilterBIRDFuncs generates BIRD function definitions	COMMENT
LOW	confd/docs/bgpfilter-bird-config-examples.md	180	### Step 2: Per-peer filter calls (bgp_processor.go)	COMMENT
LOW	confd/docs/bgpfilter-bird-config-examples.md	213	### Step 3: Final rendered BIRD config	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	15	## Step 1: Identify the CI Image Family	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	29	## Step 2: Create the VM	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	48	## Step 3: Wait for SSH and Install Dependencies	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	87	## Step 4: Clone Repo and Checkout Branch	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	104	## Step 5: Run the Failing Test	COMMENT
LOW	.claude/skills/ci-reproduce-on-gcp-vm/SKILL.md	129	## Step 6: Clean Up	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	40	### Step 1: API Type Definition	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	115	### Step 2: Register in API Scheme	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	129	### Step 3: Run API Code Generation	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	144	### Step 4: CRD Operator Types (crd.projectcalico.org/v1)	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	170	### Step 5: Register in CRD v1 Scheme	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	181	### Step 6: Backend Model Registration	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	193	### Step 7: K8s Backend Resource Client	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	227	### Step 8: Register in K8s Backend Client	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	244	### Step 9: Namespace Helper (if namespaced)	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	261	### Step 10: Validator	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	282	### Step 11: clientv3 Typed Client	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	352	### Step 12: Apiserver Registry	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	372	### Step 13: Apiserver Calico Storage Adapter	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	393	### Step 14: Apiserver Storage Interface Switch	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	404	### Step 15: Apiserver Converter	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	417	### Step 16: Apiserver REST Storage Provider	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	429	### Step 17: Syncers (Conditional)	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	451	### Step 18: calicoctl Resource Manager	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	518	### Step 19: RBAC	COMMENT
LOW	.claude/skills/implement-calico-api-resource/SKILL.md	530	### Step 20: Full Generation, Formatting, and Commit	COMMENT
LOW	hack/check-images-availability.sh	55	# Step 1: Extract from manifests	COMMENT
53 more matches not shown…

Decorative Section Separators54 hits · 174 pts

Severity	File	Line	Snippet	Context
MEDIUM	networking-calico/devstack/plugin.sh	3	# ===============================	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	142	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	144	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	234	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	236	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	415	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	417	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	487	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	489	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	546	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	548	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	753	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	755	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	829	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_scale_test.py	831	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	networking-calico/devstack/bootstrap.sh	33	#------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	networking-calico/devstack/bootstrap.sh	41	#------------------------------------------------------------------------------	COMMENT
MEDIUM⚡	networking-calico/devstack/bootstrap.sh	43	#------------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/bootstrap.sh	112	# ------------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	82	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	84	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	171	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	173	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	312	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	314	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	480	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	482	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	521	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	523	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	555	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/devstack/resync_concurrency_test.py	557	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/networking_calico/agent/dhcp_agent.py	172	# -----------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/networking_calico/agent/dhcp_agent.py	174	# -----------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/networking_calico/agent/dhcp_agent.py	225	# -----------------------------------------------------------------	COMMENT
MEDIUM	networking-calico/networking_calico/agent/dhcp_agent.py	227	# -----------------------------------------------------------------	COMMENT
MEDIUM⚡	felix/wireguard/bootstrap.go	50	// ┌────────────┐ ┌────────────┐ - Felix1 gets a response from Typha1 about the key update for Node2, and	COMMENT
MEDIUM⚡	felix/wireguard/bootstrap.go	52	// │ ┌────────┐ │ │ │ node to node traffic for supporting nodes)	COMMENT
MEDIUM⚡	felix/wireguard/bootstrap.go	53	// │ │ Typha1 ◄─┼────────┼──────┐ │ - Felix2 has not yet had an update from Typha1 about the public key for	COMMENT
MEDIUM⚡	felix/wireguard/bootstrap.go	57	// │ └────────┘ │ │ └────────┘ │ - Packets routed over Wireguard from Node1 to Node2 will be dropped by the	COMMENT
MEDIUM⚡	felix/wireguard/bootstrap.go	58	// └────────────┘ └────────────┘ Wireguard device on Node2 because Node1 is not one of its known peers.	COMMENT
MEDIUM	…pkg/controllers/loadbalancer/loadbalancer_leak_test.go	58	// ── Positive tests: correct code paths ─────────────────────────────────	COMMENT
MEDIUM	…pkg/controllers/loadbalancer/loadbalancer_leak_test.go	104	// ── deleteService cleans all three maps ────────────────────────────────	COMMENT
MEDIUM	…pkg/controllers/loadbalancer/loadbalancer_leak_test.go	135	// ── releaseAddressFromService cleans all three maps ────────────────────	COMMENT
MEDIUM	…pkg/controllers/loadbalancer/loadbalancer_leak_test.go	162	// ── Re-assignment safety ────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/auto-pick-oss-to-enterprise.yml	61	# =========================================================================	COMMENT
MEDIUM	.github/workflows/auto-pick-oss-to-enterprise.yml	63	# =========================================================================	COMMENT
MEDIUM	.github/workflows/auto-pick-oss-to-enterprise.yml	435	# =========================================================================	COMMENT
MEDIUM	.github/workflows/auto-pick-oss-to-enterprise.yml	438	# =========================================================================	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	52	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	54	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	116	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	119	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	431	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/scripts/oss-pick.sh	434	# ---------------------------------------------------------------------------	COMMENT

Verbosity Indicators91 hits · 159 pts

Severity	File	Line	Snippet	Context
LOW	felix/bpf-gpl/ip_v4_fragment.h	250	/* We do not really use bpf_loop() here, but we need to check if the kernel	COMMENT
LOW	felix/bpf-gpl/ip_v4_fragment.h	326	/* We do not really use bpf_loop() here, but we need to check if the kernel	COMMENT
LOW	felix/bpf-gpl/ip_v4_fragment.h	379	/* We do not really use bpf_loop() here, but we need to check if the kernel	COMMENT
LOW	felix/bpf-gpl/ip_v4_fragment.h	402	/* We do not really use bpf_loop() here, but we need to check if the kernel	COMMENT
LOW	felix/calc/vxlan_resolver.go	158	// VXLAN tunnel IP/MAC address updates. On an add/update, we need to check if there are VTEPs which	COMMENT
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	227	// Step 1: calculate any updates to the _desired_ state of the BPF map.	COMMENT
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	230	// Step 2: if required, load the state of the map from the dataplane so we can do efficient deltas.	COMMENT
LOW⚡	felix/dataplane/linux/bpf_route_mgr.go	237	// Step 3: apply dataplane updates.	COMMENT
LOW	felix/routetable/route_table_test.go	2223	// Step 1: Felix programs a local route for the VM at normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2236	// Step 2: BIRD programs a remote route at elevated priority via eth0.	COMMENT
LOW	felix/routetable/route_table_test.go	2260	// Step 3: Source cleanup — Felix removes the local route.	COMMENT
LOW	felix/routetable/route_table_test.go	2274	// Step 4: BIRD updates its route to normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2320	// Step 1: BIRD remote route exists at normal priority.	COMMENT
LOW	felix/routetable/route_table_test.go	2343	// Step 2: VM is now live on this host — Felix programs a	COMMENT
LOW	felix/routetable/route_table_test.go	2359	// Step 3: Source cleanup — BIRD removes the remote route.	COMMENT
LOW	felix/routetable/route_table_test.go	2371	// Step 4: Reversion to normal — Felix updates its route	COMMENT
LOW⚡	confd/tests/daemon_test.go	41	// Step 1: create nodes and a peering on a local subnet.	COMMENT
LOW⚡	confd/tests/daemon_test.go	47	// Step 2: update the peering to omit source address.	COMMENT
LOW⚡	confd/tests/daemon_test.go	55	// Step 3: add a max restart time.	COMMENT
LOW⚡	confd/tests/daemon_test.go	80	// Step 1: no secret yet → peerings have no password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	83	// Step 2: create the secret with key "a".	COMMENT
LOW⚡	confd/tests/daemon_test.go	92	// Step 3: update the password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	101	// Step 4: change secret to an unreferenced key → password disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	110	// Step 5: delete the secret → still no password.	COMMENT
LOW⚡	confd/tests/daemon_test.go	138	// Step 1: no secrets → no passwords on any peering.	COMMENT
LOW⚡	confd/tests/daemon_test.go	141	// Step 2: create my-secrets-1 with only key "b".	COMMENT
LOW⚡	confd/tests/daemon_test.go	172	// Step 4: delete my-secrets-2 → password-c disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	177	// Step 5: change passwords in my-secrets-1.	COMMENT
LOW⚡	confd/tests/daemon_test.go	186	// Step 6: remove key "a" from my-secrets-1 → new-password-a disappears.	COMMENT
LOW⚡	confd/tests/daemon_test.go	384	// Step 1: create nodes and a peering on a local subnet.	COMMENT
LOW⚡	confd/tests/daemon_test.go	390	// Step 2: update BGPConfiguration to change normal IPv4 route priority.	COMMENT
LOW⚡	confd/tests/daemon_test.go	398	// Step 3: update BGPConfiguration to change normal IPv6 route priority.	COMMENT
LOW⚡	confd/tests/daemon_test.go	414	// Step 1: apply resources and verify output with filter active.	COMMENT
LOW⚡	confd/tests/daemon_test.go	418	// Step 2: delete the BGPFilter, verify output updates.	COMMENT
LOW	confd/tests/daemon_test.go	153	// Step 3: update my-secrets-1 to include both keys, and create my-secrets-2.	COMMENT
LOW	hack/check-images-availability.sh	55	# Step 1: Extract from manifests	COMMENT
LOW	hack/check-images-availability.sh	98	# Step 2: Check availability with retries	COMMENT
LOW	hack/check-images-availability.sh	138	# Step 3: Final result	COMMENT
LOW⚡	hack/test/kind/migration/run_test.sh	253	# Step 5: Disruption test — force-kill kube-controllers during migration	COMMENT
LOW	hack/test/kind/migration/run_test.sh	72	# Step 0: Preflight checks	COMMENT
LOW	hack/test/kind/migration/run_test.sh	144	# Step 1: Deploy connectivity test workloads	COMMENT
LOW	hack/test/kind/migration/run_test.sh	178	# Step 2: Seed test resources via the apiserver	COMMENT
LOW	hack/test/kind/migration/run_test.sh	226	# Step 3: Install v3 CRDs alongside v1	COMMENT
LOW	hack/test/kind/migration/run_test.sh	237	# Step 4: Install migration CRD	COMMENT
LOW	hack/test/kind/migration/run_test.sh	295	# Step 6: Wait for migration to complete	COMMENT
LOW	hack/test/kind/migration/run_test.sh	343	# Step 7: Verify the APIService cutover and component reconfiguration	COMMENT
LOW	hack/test/kind/migration/run_test.sh	402	# Step 8: Verify continuous connectivity	COMMENT
LOW	hack/test/kind/migration/run_test.sh	435	# Step 9: Test v1 CRD cleanup via CR deletion (post-completion)	COMMENT
LOW	…-controllers/pkg/controllers/ippool/pool_controller.go	266	// Every time an IP pool is added, updated, or deleted, we need to check if it changes the active set of pools. We only	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	716	// Step 1: Lock v1 first, in case we resumed into Migrating without Pending	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	722	// Step 2: Save and delete the APIService so v3 requests route to CRDs.	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	728	// Step 3: Lock v3. This has to come after the APIService delete, since the	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	734	// Step 4: Migrate all resources in order.	COMMENT
LOW	…be-controllers/pkg/controllers/migration/controller.go	822	// Step 5: Unlock the datastore.	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	1050	// Step 1: Delete v3 resources created during migration. Best-effort, since	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	1054	// Step 2: Restore v1 ClusterInformation to DatastoreReady=true so components	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	1067	// Step 3: Undo whatever this migration did to the v3 ClusterInformation.	COMMENT
LOW⚡	…be-controllers/pkg/controllers/migration/controller.go	1070	// Step 4: Restore the aggregated APIService from the saved annotation.	COMMENT
LOW⚡	libcalico-go/lib/ipam/vmipam/ipam_kubevirt.go	155	// Step 1: Generate handleID using the same logic as CNI plugin	COMMENT
LOW⚡	libcalico-go/lib/ipam/vmipam/ipam_kubevirt.go	158	// Step 2: Get all IPs allocated to this handle	COMMENT
31 more matches not shown…

Empty Error Handlers22 hits · 110 pts

Severity	File	Line	Snippet	Context
HIGH	networking-calico/devstack/resync_concurrency_test.py	194	except FileNotFoundError:	CODE
HIGH	networking-calico/devstack/resync_concurrency_test.py	296	except OSError:	CODE
HIGH	networking-calico/networking_calico/datamodel_v3.py	87	except etcdv3.KeyNotFound:	CODE
HIGH	…tworking_calico/plugins/ml2/drivers/calico/election.py	390	except ElectorStopped:	CODE
HIGH	…tworking_calico/plugins/ml2/drivers/calico/election.py	126	except RestartElection:	CODE
HIGH	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1643	except etcdv3.KeyNotFound:	CODE
HIGH	…networking_calico/plugins/ml2/drivers/calico/policy.py	113	except etcdv3.KeyNotFound:	CODE
HIGH	…etworking_calico/plugins/ml2/drivers/calico/subnets.py	71	except etcdv3.KeyNotFound:	CODE
HIGH	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	120	except ValueError:	CODE
HIGH	…g-calico/networking_calico/tests/test_fv_dhcp_agent.py	171	except Exception:	CODE
HIGH	…tworking-calico/networking_calico/tests/test_etcdv3.py	47	except Exception:	CODE
HIGH	…-calico/networking_calico/tests/test_subnet_watcher.py	50	except Exception:	CODE
HIGH	networking-calico/networking_calico/agent/dhcp_agent.py	1014	except cfg.NoSuchOptError:	CODE
HIGH	networking-calico/networking_calico/agent/dhcp_agent.py	329	except Empty:	CODE
HIGH	…king-calico/networking_calico/agent/linux/interface.py	67	except cfg.NoSuchOptError:	CODE
HIGH	networking-calico/networking_calico/agent/linux/dhcp.py	165	except AttributeError:	CODE
HIGH	networking-calico/networking_calico/agent/linux/dhcp.py	173	except AttributeError:	CODE
HIGH	networking-calico/networking_calico/agent/linux/dhcp.py	187	except AttributeError:	CODE
HIGH	calicoctl/tests/st/utils/utils.py	383	except ValueError:	CODE
HIGH	calicoctl/tests/st/utils/utils.py	390	except yaml.YAMLError:	CODE
HIGH	hack/set_quay_expiry.py	46	except ImportError:	CODE
HIGH	.argoci/scripts/merge_junit.py	77	except ValueError:	CODE

Excessive Try-Catch Wrapping46 hits · 52 pts

Severity	File	Line	Snippet	Context
MEDIUM	networking-calico/devstack/resync_scale_test.py	335	def _add_rule(args):	CODE
MEDIUM	networking-calico/devstack/resync_scale_test.py	377	def _create_one(spec):	CODE
LOW⚡	networking-calico/devstack/resync_scale_test.py	434	except Exception as exc:	CODE
LOW⚡	networking-calico/devstack/resync_scale_test.py	444	except Exception as exc:	CODE
LOW⚡	networking-calico/devstack/resync_scale_test.py	454	except Exception as exc:	CODE
LOW	networking-calico/devstack/resync_scale_test.py	338	except Exception as exc:	CODE
LOW	networking-calico/devstack/resync_scale_test.py	380	except Exception as exc:	CODE
LOW	networking-calico/devstack/resync_scale_test.py	655	except Exception as e:	CODE
LOW	networking-calico/devstack/resync_scale_test.py	908	except Exception:	CODE
LOW⚡	networking-calico/devstack/resync_concurrency_test.py	336	except Exception as exc:	CODE
LOW	networking-calico/devstack/resync_concurrency_test.py	650	except Exception:	CODE
LOW	networking-calico/devstack/qos_responsiveness_tests.py	70	except Exception as e:	CODE
LOW	networking-calico/networking_calico/etcdv3.py	498	except Exception:	CODE
LOW	networking-calico/networking_calico/etcdv3.py	600	except Exception:	CODE
LOW	networking-calico/networking_calico/logutils.py	22	except Exception:	CODE
MEDIUM	networking-calico/networking_calico/logutils.py	19	def wrapped(args, *kwargs):	CODE
LOW	networking-calico/networking_calico/etcdutils.py	278	except Exception:	CODE
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	279	except Exception as e:	CODE
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	321	except Exception as e:	CODE
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	344	except Exception as e:	CODE
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	374	except Exception:	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	256	except Exception:	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	867	except Exception:	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1489	except Exception:	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1500	except Exception:	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1752	except Exception:	CODE
LOW	…etworking_calico/plugins/ml2/drivers/calico/workers.py	131	except Exception:	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	887	except Exception:	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	975	except Exception:	CODE
LOW	…working_calico/plugins/ml2/drivers/calico/endpoints.py	1179	except Exception:	CODE
LOW	…ng-calico/networking_calico/tests/test_fv_etcdutils.py	110	except Exception:	CODE
LOW	…g-calico/networking_calico/tests/test_fv_dhcp_agent.py	171	except Exception:	CODE
LOW	…g-calico/networking_calico/tests/test_fv_dhcp_agent.py	205	except Exception:	CODE
LOW	…tworking-calico/networking_calico/tests/test_etcdv3.py	47	except Exception:	CODE
LOW⚡	…-calico/networking_calico/tests/test_subnet_watcher.py	50	except Exception:	CODE
LOW	networking-calico/networking_calico/agent/dhcp_agent.py	339	except Exception:	CODE
LOW	networking-calico/networking_calico/agent/dhcp_agent.py	901	except Exception:	CODE
LOW	networking-calico/networking_calico/agent/dhcp_agent.py	1079	except Exception as e:	CODE
MEDIUM	networking-calico/networking_calico/agent/dhcp_agent.py	159	def make_net_model(net_spec):	CODE
LOW	…king-calico/networking_calico/agent/linux/interface.py	100	except Exception:	CODE
LOW	networking-calico/networking_calico/resync/scope.py	178	except Exception as exc:	CODE
LOW	hack/strip-skipped-tests.py	47	except Exception as e:	CODE
LOW	e2e/pkg/tests/kubevirt/utils.go	122	except Exception:	CODE
MEDIUM	e2e/pkg/tests/kubevirt/utils.go	115	def handle(conn, addr):	CODE
LOW	.argoci/scripts/stern_junit.py	127	except Exception as e:	CODE
LOW	.argoci/scripts/merge_junit.py	40	except Exception as e:	CODE

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	operator/pkg/render/apiserver.go	995	env = append(env, corev1.EnvVar{Name: "MULTI_INTERFACE_MODE", Value: c.cfg.Installation.CalicoNetwork.MultiInterfaceMo	CODE
CRITICAL	operator/pkg/render/node.go	787	logFileMaxSize := c.cfg.Installation.Logging.CNI.LogFileMaxSize.Value() / (1024 * 1024)	CODE
CRITICAL	operator/pkg/render/windows.go	286	logFileMaxSize := c.cfg.Installation.Logging.CNI.LogFileMaxSize.Value() / (1024 * 1024)	CODE
CRITICAL	operator/pkg/render/istio/istio.go	297	Value: strconv.FormatInt(int64(c.cfg.Istio.Spec.DSCPMark.ToUint8()), 10),	CODE
CRITICAL	operator/pkg/controller/installation/validation.go	83	instance.Spec.Logging.CNI.LogFileMaxSize.Value() <= 0) {	CODE

AI Slop Vocabulary14 hits · 42 pts

Severity	File	Line	Snippet	Context
MEDIUM	felix/fv/live_migration_test.go	211	// host. Re-sending the GARP on each poll makes the test robust against the GARP being sent	COMMENT
MEDIUM	felix/dataplane/linux/bpf_ep_mgr.go	1038	// but taking it now makes us robust to refactoring.	COMMENT
MEDIUM	felix/dataplane/linux/bpf_ep_mgr.go	1491	// but taking it now makes us robust to refactoring.	COMMENT
MEDIUM	felix/dataplane/linux/qos/qos.go	40	// (Fundamentally, a TBF only works on traffic that the kernel is sending _to_ a network device.	COMMENT
MEDIUM	felix/iptables/table.go	192	// to do and keeps it manageable/robust.	COMMENT
MEDIUM	typha/pkg/snapcache/cache.go	113	// Why not use channels to fan out to the clients? I think it'd be more tricky to make robust and	COMMENT
MEDIUM	libcalico-go/lib/backend/watchersyncer/watchercache.go	70	// to construct resource updates rather than utilize a watch, as watches can't be created for the resource. We can be	COMMENT
MEDIUM	node/tests/k8st/tests/local_bgp_peer_test.go	554	// when it did not, makes the setup robust against that flake.	COMMENT
MEDIUM	e2e/pkg/tests/kubevirt/live_migration.go	41	// KubeVirt live migration e2e tests validate Calico's seamless migration support for	COMMENT
MEDIUM	e2e/pkg/utils/remotecluster/exec.go	33	// RemoteFrameworkAwareExec is used to execute commands in a context that forces the executed function to utilize the	COMMENT
MEDIUM	operator/pkg/render/common/test/testing.go	149	// most tests should use ExpectResources instead, which is more robust and provides better error messages.	COMMENT
MEDIUM	operator/pkg/controller/ippool/pool_controller.go	420	// we require the v3 API to be running. This is so that we properly leverage the v3 API's validation.	COMMENT
MEDIUM	…ller/clusterconnection/clusterconnection_controller.go	411	// Validate that the tier watch is ready before querying the tier to ensure we utilize the cache.	COMMENT
MEDIUM	process/testing/aso/vmss.sh	19	# It has been enhanced with ASO v2 best practices including:	COMMENT

Unused Imports39 hits · 35 pts

Severity	File	Line	Context
LOW	…ng-calico/networking_calico/tests/test_fv_etcdutils.py	22	CODE
LOW	…g-calico/networking_calico/tests/test_fv_dhcp_agent.py	35	CODE
LOW	calicoctl/tests/st/test_base.py	17	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	15	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	16	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	23	CODE
LOW	calicoctl/tests/st/calicoctl/test_crud.py	16	CODE
LOW	calicoctl/tests/st/calicoctl/test_crud.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_crud.py	22	CODE
LOW	calicoctl/tests/st/calicoctl/test_flags.py	15	CODE
LOW	calicoctl/tests/st/calicoctl/test_flags.py	18	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	15	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	16	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	19	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	24	CODE
LOW	calicoctl/tests/st/utils/utils.py	18	CODE
LOW	calicoctl/tests/st/utils/utils.py	19	CODE
LOW	calicoctl/tests/st/utils/data.py	27	CODE
LOW	hack/set_quay_expiry.py	45	CODE
LOW	release/get-contributors.py	2	CODE
LOW	cni-plugin/contrib/test_scripts/ping_test.py	1	CODE

Modern AI Meta-Vocabulary10 hits · 34 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	operator/config/crd/kustomization.yaml	28	#+kubebuilder:scaffold:crdkustomizeresource	COMMENT
MEDIUM⚡	operator/config/crd/kustomization.yaml	33	#+kubebuilder:scaffold:crdkustomizewebhookpatch	COMMENT
MEDIUM⚡	operator/config/crd/kustomization.yaml	38	#+kubebuilder:scaffold:crdkustomizecainjectionpatch	COMMENT
MEDIUM	operator/config/samples/kustomization.yaml	27	# +kubebuilder:scaffold:manifestskustomizesamples	COMMENT
MEDIUM	operator/config/scorecard/kustomization.yaml	16	# +kubebuilder:scaffold:patchesJson6902	COMMENT
MEDIUM	operator/internal/controller/controllers.go	122	// +kubebuilder:scaffold:builder	COMMENT
MEDIUM	operator/internal/controller/suite_test.go	35	//+kubebuilder:scaffold:imports	COMMENT
MEDIUM	operator/internal/controller/suite_test.go	79	//+kubebuilder:scaffold:scheme	COMMENT
MEDIUM	operator/pkg/daemon/daemon.go	76	// +kubebuilder:scaffold:imports	COMMENT
MEDIUM	operator/pkg/daemon/daemon.go	90	// +kubebuilder:scaffold:scheme	COMMENT

Redundant / Tautological Comments15 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	112	# Check if this key is already in etcd. If it is, and if it represents	COMMENT
LOW	charts/calico/templates/calico-typha.yaml	132	# Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time	COMMENT
LOW	charts/calico/templates/calico-config.yaml	9	# Set these to the IP and port of your API server; In BPF mode, we need to connect directly to the	COMMENT
LOW	manifests/calico-policy-only.yaml	13304	# Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time	COMMENT
LOW	manifests/calico-typha.yaml	13424	# Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time	COMMENT
LOW	manifests/calico-bpf.yaml	47	# Set these to the IP and port of your API server; In BPF mode, we need to connect directly to the	COMMENT
LOW	cni-plugin/contrib/test_scripts/util.py	34	# Open the file again to pass the file handle as the stdin to call the plugin	COMMENT
LOW	process/testing/win-connections/run-tests.sh	25	# Check if kubeconfig exists at ../aso/kubeconfig	COMMENT
LOW	process/testing/aso/vmss.sh	485	# Check if first arg is a number (node index)	COMMENT
LOW	process/testing/aso/vmss.sh	517	# Check if first arg is a number (node index)	COMMENT
LOW	process/testing/aso/vmss.sh	549	# Check if first arg is a number (node index)	COMMENT
LOW	process/testing/aso/vmss.sh	595	# Check if first arg is a number (node index)	COMMENT
LOW	process/testing/aso/vmss.sh	703	# Check if ASO is running	COMMENT
LOW	process/testing/aso/vmss.sh	797	# Check if resource group exists	COMMENT
LOW	process/testing/aso/install-calico.sh	69	# Verify if the required variables are set for Calico EE	COMMENT

Deep Nesting24 hits · 18 pts

Severity	File	Line	Context
LOW	networking-calico/devstack/resync_scale_test.py	175	CODE
LOW	networking-calico/devstack/resync_scale_test.py	573	CODE
LOW	networking-calico/devstack/resync_scale_test.py	624	CODE
LOW	networking-calico/devstack/resync_concurrency_test.py	186	CODE
LOW	networking-calico/devstack/resync_concurrency_test.py	560	CODE
LOW	networking-calico/devstack/qos_responsiveness_tests.py	33	CODE
LOW	networking-calico/devstack/qos_responsiveness_tests.py	248	CODE
LOW	networking-calico/devstack/qos_responsiveness_tests.py	387	CODE
LOW	networking-calico/devstack/qos_responsiveness_tests.py	464	CODE
LOW	networking-calico/networking_calico/etcdv3.py	96	CODE
LOW	networking-calico/networking_calico/etcdutils.py	406	CODE
LOW	networking-calico/networking_calico/etcdutils.py	154	CODE
LOW	…networking_calico/plugins/ml2/drivers/calico/syncer.py	109	CODE
LOW	…tworking_calico/plugins/ml2/drivers/calico/election.py	261	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1561	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	701	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	965	CODE
LOW	…rking_calico/plugins/ml2/drivers/calico/mech_calico.py	1472	CODE
LOW	…networking_calico/plugins/ml2/drivers/calico/policy.py	263	CODE
LOW	…co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py	257	CODE
LOW	…g-calico/networking_calico/tests/test_fv_dhcp_agent.py	109	CODE
LOW	networking-calico/networking_calico/agent/linux/dhcp.py	50	CODE
LOW	calicoctl/tests/st/calicoctl/test_crud.py	768	CODE
LOW	.argoci/scripts/merge_junit.py	50	CODE

Fake / Example Data12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	node/pkg/cni/token_watch_internal_test.go	70	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	136	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	195	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	260	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	499	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	575	Token: "fake-token",	CODE
LOW	node/pkg/cni/token_watch_internal_test.go	665	Token: "fake-token",	CODE
LOW	e2e/pkg/tests/operator/ippools.go	134	pool.Spec.NodeSelector = "has(dummy-key)"	CODE
LOW	e2e/pkg/tests/operator/ippools.go	158	installation.Spec.CalicoNetwork.IPPools[i].NodeSelector = "has(dummy-key)"	CODE
LOW	e2e/pkg/tests/operator/ippools.go	169	if pool.Spec.NodeSelector != "has(dummy-key)" {	CODE
LOW	…or/pkg/controller/installation/core_controller_test.go	1891	"extra-dummy": "dummy-value",	CODE
LOW	operator/pkg/tls/certificatemanagement/keypair_test.go	83	PrivateKeyPEM: []byte("fake-key"),	CODE

Modern Structural Boilerplate9 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	networking-calico/devstack/qos_responsiveness_tests.py	26	logger = logging.getLogger(__name__)	CODE
LOW	networking-calico/networking_calico/monotonic.py	23	__all__ = ["monotonic_time"]	CODE
LOW	…king-calico/networking_calico/agent/dhcp_agent_main.py	44	__all__ = ["main"]	CODE
LOW	calicoctl/tests/st/test_base.py	22	logger = logging.getLogger(__name__)	CODE
LOW	calicoctl/tests/st/calicoctl/test_migrate.py	26	logger = logging.getLogger(__name__)	CODE
LOW	calicoctl/tests/st/calicoctl/test_crud.py	25	logger = logging.getLogger(__name__)	CODE
LOW	calicoctl/tests/st/calicoctl/test_ipam_split.py	27	logger = logging.getLogger(__name__)	CODE
LOW	calicoctl/tests/st/utils/utils.py	33	logger = logging.getLogger(__name__)	CODE
LOW	node/workload/responder.py	9	logger = logging.getLogger(__name__)	CODE

Slop Phrases3 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	networking-calico/devstack/bootstrap.sh	365	# Create a Calico network, for demonstration purposes.	COMMENT
LOW	…ng-calico/networking_calico/tests/test_fv_etcdutils.py	71	# Add in an invalid API path so as to make sure to test the failure	COMMENT
MEDIUM	.github/workflows/codeql.yml	49	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT

Example Usage Blocks3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	hack/list-go-sources.sh	10	# Usage:	COMMENT
LOW	hack/dev-build.sh	21	# Usage:	COMMENT
LOW	process/testing/aso/vmss.sh	21	# Usage:	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	felix/bpf/ut/pol_prog_test.go	1525	// TODO: Add test cases for IPv6	COMMENT
LOW	felix/bpf/ut/pol_prog_test.go	1810	// TODO: Add test cases for IPv6	COMMENT

AI Structural Patterns2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	networking-calico/networking_calico/etcdv3.py	447		CODE
LOW	networking-calico/networking_calico/resync/scope.py	100		CODE

projectcalico/calico

Open-Source Code Quality, Security and Technical Debt Review