Cloud native networking and network security
This report presents the forensic synthetic code analysis of projectcalico/calico, a Go project with 7,279 GitHub stars. SynthScan v2.0 examined 1,025,139 lines of code across 4136 source files, recording 3620 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 3.9 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3620 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/calico-windows/main.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/version.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/apiserver.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/ctl.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/health.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/cni.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/component.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/main.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | cmd/calico/main.go | 61 | COMMENT | |
| LOW | cmd/calico/main_test.go | 1 | // Copyright (c) 2026 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | networking-calico/setup.py | 1 | # Copyright (c) 2013 Hewlett-Packard Development Company, L.P. | COMMENT |
| LOW | networking-calico/devstack/plugin.sh | 101 | COMMENT | |
| LOW | networking-calico/devstack/resync_scale_test.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | networking-calico/devstack/resync_scale_test.py | 81 | # Default scales to measure if RESYNC_SCALES is not set. Stops at 3000 because larger | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 1 | #!/bin/bash | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 21 | sudo rm -rf /usr/local/lib/python3.8/dist-packages/setuptools-*.dist-info | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 41 | # is run, and is _different_ from the local machine's hostname, the | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 61 | # DEVSTACK_BRANCH | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 301 | # fixes we have specifically landed in the Calico driver, plus a | COMMENT |
| LOW | networking-calico/devstack/bootstrap.sh | 321 | # (e.g. unit not found on a future devstack version): treat that as a | COMMENT |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | networking-calico/networking_calico/monotonic.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/datamodel_v1.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/etcdv3.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/etcdv3.py | 421 | # Authorization header to the session headers. | COMMENT |
| LOW | networking-calico/networking_calico/etcdv3.py | 501 | # Authorization header. | COMMENT |
| LOW | networking-calico/networking_calico/logutils.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 1 | # Copyright (c) 2016, 2018 Tigera, Inc. All rights reserved. | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 221 | ) | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 241 | # prefix that we are monitoring: | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 261 | # | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 281 | COMMENT | |
| LOW | networking-calico/networking_calico/etcdutils.py | 341 | # loop. | COMMENT |
| LOW | networking-calico/networking_calico/etcdutils.py | 361 | # }} | COMMENT |
| LOW | networking-calico/networking_calico/datamodel_v2.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/timestamp.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | networking-calico/networking_calico/datamodel_v3.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …ing-calico/networking_calico/plugins/calico/context.py | 1 | # Copyright (c) 2025 Tigera, Inc. All Rights Reserved. | COMMENT |
| LOW | …king-calico/networking_calico/plugins/calico/plugin.py | 1 | # Copyright (c) 2015 Cisco Systems. All Rights Reserved. | COMMENT |
| LOW | …king-calico/networking_calico/plugins/calico/plugin.py | 81 | # a way as to avoid tracebacks in the neutron-server log. | COMMENT |
| LOW | …king-calico/networking_calico/plugins/calico/plugin.py | 101 | # .../neutron/db/l3_db.py", line 198, in _get_dead_floating_port_candidates | COMMENT |
| LOW | …king-calico/networking_calico/plugins/calico/plugin.py | 121 | # .../neutron_lib/db/api.py", line 183, in wrapped | COMMENT |
| LOW | …networking_calico/plugins/ml2/drivers/calico/syncer.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 181 | # | COMMENT |
| LOW | …orking_calico/plugins/ml2/drivers/calico/qos_driver.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 301 | # called from any of those contexts: from multiple OS processes, or from multiple | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 321 | # non-Calico context will be missing that key when it tries to log. (Resulting in | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 761 | # those cases, we may be out-of-sync with Neutron because the | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1061 | if host: | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1181 | # CAS-writes accordingly. Same for ``sync_lm``. This handles uniformly all the | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1461 | return | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1481 | # {..., 'grantedTTL': '5', 'ID': '75...', 'TTL': '1'} | COMMENT |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1581 | except etcdv3.Etcd3Exception as e3e: | COMMENT |
| LOW | …networking_calico/plugins/ml2/drivers/calico/policy.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …networking_calico/plugins/ml2/drivers/calico/policy.py | 281 | # "The IP protocol can be represented by a string, an integer, or null. Valid string | COMMENT |
| LOW | …etworking_calico/plugins/ml2/drivers/calico/subnets.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …ico/plugins/ml2/drivers/calico/fairy_gc_diagnostics.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | …ico/plugins/ml2/drivers/calico/fairy_gc_diagnostics.py | 181 | "Calico fairy-GC diagnostics: eventlet is importable but time is not " | COMMENT |
| 2849 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | networking-calico/devstack/bootstrap.sh | 108 | # Create a directory for DevStack bootstrap and testing. | COMMENT |
| MEDIUM | networking-calico/devstack/bootstrap.sh | 287 | # Create a Calico network, for demonstration purposes. | COMMENT |
| MEDIUM | networking-calico/devstack/qos_responsiveness_tests.py | 351 | # Create the QoS rules and policies that we need. | COMMENT |
| MEDIUM | networking-calico/devstack/qos_responsiveness_tests.py | 368 | # Create the network and subnet. | COMMENT |
| MEDIUM | networking-calico/devstack/qos_responsiveness_tests.py | 371 | # Create the VM. | COMMENT |
| MEDIUM | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 22 | # This module is the OpenStack-specific implementation of the Plugin component | COMMENT |
| MEDIUM | …etworking_calico/plugins/ml2/drivers/calico/workers.py | 64 | # Create the stop event here, not in start(), because oslo_service can call | COMMENT |
| MEDIUM | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 394 | # The following methods differ from those for other resources for two reasons. | COMMENT |
| MEDIUM | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 763 | # Create a new security group. | COMMENT |
| MEDIUM | …tworking_calico/plugins/ml2/drivers/calico/test/lib.py | 206 | # Define a stub class, that we will use as the base class for CalicoMechanismDriver. | COMMENT |
| MEDIUM | …tworking_calico/plugins/ml2/drivers/calico/test/lib.py | 382 | # Create an instance of CalicoMechanismDriver. | COMMENT |
| MEDIUM | …king-calico/networking_calico/tests/test_dhcp_agent.py | 113 | # Create the DHCP agent. | COMMENT |
| MEDIUM | …king-calico/networking_calico/tests/test_dhcp_agent.py | 246 | # Create the DHCP agent. | COMMENT |
| MEDIUM⚡ | …king-calico/networking_calico/tests/test_dhcp_agent.py | 286 | # Create the DHCP agent and allow it to start the SubnetWatcher loop. | COMMENT |
| MEDIUM⚡ | …king-calico/networking_calico/tests/test_dhcp_agent.py | 297 | # Create the DHCP agent. | COMMENT |
| MEDIUM | …king-calico/networking_calico/tests/test_dhcp_agent.py | 331 | # Create the DHCP agent. | COMMENT |
| MEDIUM | …king-calico/networking_calico/tests/test_dhcp_agent.py | 359 | # Create the DHCP agent. | COMMENT |
| MEDIUM | …king-calico/networking_calico/tests/test_dhcp_agent.py | 384 | # Create the DHCP agent. | COMMENT |
| MEDIUM⚡ | …-calico/networking_calico/tests/test_subnet_watcher.py | 41 | # Create the DHCP agent and allow it to start the | COMMENT |
| MEDIUM | calicoctl/calicoctl/commands/create.go | 36 | # Create a policy using the data in policy.yaml. | COMMENT |
| MEDIUM | calicoctl/calicoctl/commands/create.go | 39 | # Create a policy based on the JSON passed into stdin. | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 39 | # Create the ipv6 pool using calicoctl, and read it out using an | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 48 | # Create a BGP Config | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 56 | # Create a BGP Config that should reference a node. | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 65 | # Create a BGP Peer | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 73 | # Create a Felix config | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 79 | # Create a Felix config that should reference a node. | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 86 | # Create a Global Network policy | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 95 | # Create a Global Network set | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_migrate.py | 103 | # Create a HostEndpoint | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_migrate.py | 139 | # Create a Node, this should also trigger auto-creation of a cluster info | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_migrate.py | 154 | # Create an IP reservation. | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_migrate.py | 158 | # Create a BGPFilter. | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1004 | # Create a second node, this should keep the existing cluster info. | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1015 | # Create a new default KubeControllersConfiguration and get it to determine the current | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1058 | # Create a new Host Endpoint and get it to determine the | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1495 | # Create a resource with invalid syntax (negative AS number causes parse error) | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 44 | # Create the ipv6 pool using calicoctl, and read it out using an | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 219 | # Create a new BGP Peer and get it to determine the current resource | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 250 | # Create a new Network Policy and get it to determine the current | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 286 | # Create a new Staged Network Policy and get it to determine the current | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 322 | # Create a new Staged Kubernetes Network Policy and get it to determine the current | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 572 | # Create a couple of resources. | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 885 | # Create a new default BGPConfiguration and get it to determine the current | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 936 | # Create a new default BGPConfiguration and get it to determine the current | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 991 | # Create a node, this should trigger auto-creation of a cluster info. | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 1110 | # Create a new Network Policy with all metadata specified | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 1166 | # Create a new Staged Network Policy with all metadata specified | COMMENT |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1547 | pass # Create an empty file | CODE |
| MEDIUM⚡ | calicoctl/tests/st/calicoctl/test_crud.py | 1559 | pass # Create an empty file | CODE |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 1601 | # Create a NetworkPolicy with an invalid selector that has invalid characters | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 2950 | # # Create the policy using calicoctl | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 2976 | # # Create the policy using calicoctl | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 3011 | # # Create the policy using calicoctl | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_crud.py | 3046 | # # Create the policy using calicoctl | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_flags.py | 47 | # Create a Node, this should also trigger auto-creation of a cluster info, | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_ipam_split.py | 41 | # Create the ipv4 pool using calicoctl, and read it out using an | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_ipam_split.py | 50 | # Create a Node, this should also trigger auto-creation of a cluster info | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_ipam_split.py | 124 | # Create the ipv4 pool using calicoctl, and read it out using an | COMMENT |
| MEDIUM | calicoctl/tests/st/calicoctl/test_ipam_split.py | 133 | # Create a Node, this should also trigger auto-creation of a cluster info | COMMENT |
| 23 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | networking-calico/devstack/resync_scale_test.py | 261 | def create_networks_and_subnets(conn, num_networks): | CODE |
| LOW⚡ | networking-calico/devstack/resync_concurrency_test.py | 326 | def neutron_server_restart_and_wait(conn, deadline_secs=60): | CODE |
| LOW⚡ | networking-calico/devstack/resync_concurrency_test.py | 344 | def wait_for_log_text_in_journal(text, since_dt, deadline_secs): | CODE |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 113 | def measure_port_create_burst(conn, network, subnet, sg, host, count, label): | CODE |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 146 | def _take_warmup_then_measure(conn, network, subnet, sg, host, count, label): | CODE |
| LOW | networking-calico/networking_calico/datamodel_v3.py | 275 | def sanitize_label_name_value(name, max_length): | CODE |
| LOW⚡ | …king-calico/networking_calico/plugins/calico/plugin.py | 169 | def create_security_group_rule(self, context, security_group_rule): | CODE |
| LOW⚡ | …king-calico/networking_calico/plugins/calico/plugin.py | 175 | def create_security_group_rule_bulk(self, context, security_group_rules): | CODE |
| LOW⚡ | …king-calico/networking_calico/plugins/calico/plugin.py | 183 | def delete_security_group_rule(self, context, sgrid): | CODE |
| LOW | …networking_calico/plugins/ml2/drivers/calico/syncer.py | 353 | def etcd_write_data_matches_existing(self, write_data, existing): | CODE |
| LOW⚡ | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1002 | def get_allowed_network_types(self, agent=None): | CODE |
| LOW⚡ | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1011 | def create_network_postcommit(self, context): | CODE |
| LOW⚡ | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1016 | def update_network_postcommit(self, context): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 618 | def _init_start_calico_resource_syncer(self): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 621 | def _init_start_calico_manager(self): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 638 | def _init_start_agent_status_watcher(self): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 655 | def _init_start_endpoint_status_watcher(self): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 836 | def _loop_writing_port_statuses(self): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 862 | def _try_to_update_port_status(self, admin_context, port_status_key): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 945 | def _retry_port_status_update(self, port_status_key): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1097 | def delete_network_postcommit(self, context): | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1413 | def check_request_etcd_compaction(): | CODE |
| LOW | …networking_calico/plugins/ml2/drivers/calico/policy.py | 136 | def neutron_to_etcd_write_data(self, name, sg, context, reread=False): | CODE |
| LOW | …networking_calico/plugins/ml2/drivers/calico/policy.py | 263 | def _neutron_rule_to_etcd_rule(rule): | CODE |
| LOW | …etworking_calico/plugins/ml2/drivers/calico/subnets.py | 78 | def neutron_to_etcd_write_data(self, name, subnet, context, reread=False): | CODE |
| LOW | …ico/plugins/ml2/drivers/calico/fairy_gc_diagnostics.py | 206 | def _calico_detect_in_hub_checkin(dbapi_conn, connection_record): | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 479 | def neutron_to_etcd_write_data(self, name, value, context, reread=False): | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 493 | def neutron_to_port_etcd_write_data(self, port, context, reread, dest_host=None): | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 522 | def neutron_to_live_migration_etcd_write_data( | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 772 | def get_extra_port_information(self, context, port): | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 863 | def _get_extra_port_information_from_bulk(self, context, port): | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 1138 | def endpoint_name_without_host(name): | CODE |
| LOW⚡ | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1593 | def test_get_vif_details_falls_back_when_port_mac_missing(self): | CODE |
| LOW⚡ | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1599 | def test_get_vif_details_falls_back_on_malformed_port_mac(self): | CODE |
| LOW⚡ | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1605 | def test_neutron_rule_to_etcd_rule_icmp(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1475 | def test_subnet_cas_retry_after_conflict(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1514 | def test_subnet_cas_exhaustion(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1559 | def test_check_segment_for_agent(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1578 | def test_get_vif_details_derives_tap_mac_from_port_mac(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1682 | def test_neutron_rule_to_etcd_rule_protocol_name(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1700 | def test_neutron_rule_to_etcd_rule_protocol_any(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1714 | def test_sg_rule_ingress_no_remote_ip_prefix(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1732 | def test_sg_rule_egress_no_remote_ip_prefix(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1751 | def test_sg_rule_ingress_with_remote_ip_prefix(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1771 | def test_sg_rule_egress_with_remote_ip_prefix(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1791 | def test_startup_resync_disabled(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1973 | def test_port_narrow_resync_no_op_when_correct(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1983 | def test_port_narrow_resync_recreates_after_etcd_loss(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 1996 | def test_subnet_narrow_resync_writes_only_when_changed(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2020 | def test_subnet_narrow_resync_deletes_when_gone(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2044 | def test_security_group_narrow_resync_no_op_when_correct(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2238 | def test_pre_live_migration_transient_vif_unbound(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2282 | def test_live_migration_succeeded(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2315 | def test_live_migration_failed(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2346 | def test_port_delete_during_migration(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2379 | def _call_try_to_update_port_status(self, hostname, port_id): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2393 | def test_vif_plug_notification(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2416 | def test_vif_plug_no_notification_for_non_migration(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2428 | def test_resync_creates_missing_live_migration(self): | CODE |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 2444 | def test_resync_deletes_stale_live_migration(self): | CODE |
| 162 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 220 | // Step 1: calculate any updates to the _desired_ state of the BPF map. | COMMENT |
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 223 | // Step 2: if required, load the state of the map from the dataplane so we can do efficient deltas. | COMMENT |
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 230 | // Step 3: apply dataplane updates. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2223 | // Step 1: Felix programs a local route for the VM at normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2236 | // Step 2: BIRD programs a remote route at elevated priority via eth0. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2260 | // Step 3: Source cleanup — Felix removes the local route. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2274 | // Step 4: BIRD updates its route to normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2320 | // Step 1: BIRD remote route exists at normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2343 | // Step 2: VM is now live on this host — Felix programs a | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2359 | // Step 3: Source cleanup — BIRD removes the remote route. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2371 | // Step 4: Reversion to normal — Felix updates its route | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 40 | // Step 1: create nodes and a peering on a local subnet. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 46 | // Step 2: update the peering to omit source address. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 54 | // Step 3: add a max restart time. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 79 | // Step 1: no secret yet → peerings have no password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 82 | // Step 2: create the secret with key "a". | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 91 | // Step 3: update the password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 100 | // Step 4: change secret to an unreferenced key → password disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 109 | // Step 5: delete the secret → still no password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 137 | // Step 1: no secrets → no passwords on any peering. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 140 | // Step 2: create my-secrets-1 with only key "b". | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 171 | // Step 4: delete my-secrets-2 → password-c disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 176 | // Step 5: change passwords in my-secrets-1. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 185 | // Step 6: remove key "a" from my-secrets-1 → new-password-a disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 383 | // Step 1: create nodes and a peering on a local subnet. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 389 | // Step 2: update BGPConfiguration to change normal IPv4 route priority. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 397 | // Step 3: update BGPConfiguration to change normal IPv6 route priority. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 413 | // Step 1: apply resources and verify output with filter active. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 417 | // Step 2: delete the BGPFilter, verify output updates. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 485 | // Step 1: as for mesh/restart-time test oneshot test. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 490 | // Step 2: update BGPConfiguration to disable cluster route programming. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 498 | // Step 3: update BGPConfiguration to enable cluster route programming. | COMMENT |
| LOW | confd/tests/daemon_test.go | 152 | // Step 3: update my-secrets-1 to include both keys, and create my-secrets-2. | COMMENT |
| LOW | confd/docs/bgpfilter-bird-config-examples.md | 89 | ### Step 1: BGPFilterBIRDFuncs generates BIRD function definitions | COMMENT |
| LOW | confd/docs/bgpfilter-bird-config-examples.md | 180 | ### Step 2: Per-peer filter calls (bgp_processor.go) | COMMENT |
| LOW | confd/docs/bgpfilter-bird-config-examples.md | 213 | ### Step 3: Final rendered BIRD config | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 15 | ## Step 1: Identify the CI Image Family | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 29 | ## Step 2: Create the VM | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 48 | ## Step 3: Wait for SSH and Install Dependencies | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 87 | ## Step 4: Clone Repo and Checkout Branch | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 104 | ## Step 5: Run the Failing Test | COMMENT |
| LOW | .claude/skills/ci-reproduce-on-gcp-vm/SKILL.md | 129 | ## Step 6: Clean Up | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 40 | ### Step 1: API Type Definition | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 115 | ### Step 2: Register in API Scheme | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 129 | ### Step 3: Run API Code Generation | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 144 | ### Step 4: CRD Operator Types (crd.projectcalico.org/v1) | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 170 | ### Step 5: Register in CRD v1 Scheme | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 181 | ### Step 6: Backend Model Registration | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 193 | ### Step 7: K8s Backend Resource Client | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 227 | ### Step 8: Register in K8s Backend Client | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 244 | ### Step 9: Namespace Helper (if namespaced) | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 261 | ### Step 10: Validator | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 282 | ### Step 11: clientv3 Typed Client | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 352 | ### Step 12: Apiserver Registry | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 372 | ### Step 13: Apiserver Calico Storage Adapter | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 393 | ### Step 14: Apiserver Storage Interface Switch | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 404 | ### Step 15: Apiserver Converter | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 417 | ### Step 16: Apiserver REST Storage Provider | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 429 | ### Step 17: Syncers (Conditional) | COMMENT |
| LOW | .claude/skills/implement-calico-api-resource/SKILL.md | 451 | ### Step 18: calicoctl Resource Manager | COMMENT |
| 52 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | felix/bpf-gpl/ip_v4_fragment.h | 248 | /* We do not really use bpf_loop() here, but we need to check if the kernel | COMMENT |
| LOW | felix/bpf-gpl/ip_v4_fragment.h | 324 | /* We do not really use bpf_loop() here, but we need to check if the kernel | COMMENT |
| LOW | felix/bpf-gpl/ip_v4_fragment.h | 377 | /* We do not really use bpf_loop() here, but we need to check if the kernel | COMMENT |
| LOW | felix/bpf-gpl/ip_v4_fragment.h | 400 | /* We do not really use bpf_loop() here, but we need to check if the kernel | COMMENT |
| LOW | felix/calc/vxlan_resolver.go | 158 | // VXLAN tunnel IP/MAC address updates. On an add/update, we need to check if there are VTEPs which | COMMENT |
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 220 | // Step 1: calculate any updates to the _desired_ state of the BPF map. | COMMENT |
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 223 | // Step 2: if required, load the state of the map from the dataplane so we can do efficient deltas. | COMMENT |
| LOW⚡ | felix/dataplane/linux/bpf_route_mgr.go | 230 | // Step 3: apply dataplane updates. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2223 | // Step 1: Felix programs a local route for the VM at normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2236 | // Step 2: BIRD programs a remote route at elevated priority via eth0. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2260 | // Step 3: Source cleanup — Felix removes the local route. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2274 | // Step 4: BIRD updates its route to normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2320 | // Step 1: BIRD remote route exists at normal priority. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2343 | // Step 2: VM is now live on this host — Felix programs a | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2359 | // Step 3: Source cleanup — BIRD removes the remote route. | COMMENT |
| LOW | felix/routetable/route_table_test.go | 2371 | // Step 4: Reversion to normal — Felix updates its route | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 40 | // Step 1: create nodes and a peering on a local subnet. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 46 | // Step 2: update the peering to omit source address. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 54 | // Step 3: add a max restart time. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 79 | // Step 1: no secret yet → peerings have no password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 82 | // Step 2: create the secret with key "a". | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 91 | // Step 3: update the password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 100 | // Step 4: change secret to an unreferenced key → password disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 109 | // Step 5: delete the secret → still no password. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 137 | // Step 1: no secrets → no passwords on any peering. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 140 | // Step 2: create my-secrets-1 with only key "b". | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 171 | // Step 4: delete my-secrets-2 → password-c disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 176 | // Step 5: change passwords in my-secrets-1. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 185 | // Step 6: remove key "a" from my-secrets-1 → new-password-a disappears. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 383 | // Step 1: create nodes and a peering on a local subnet. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 389 | // Step 2: update BGPConfiguration to change normal IPv4 route priority. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 397 | // Step 3: update BGPConfiguration to change normal IPv6 route priority. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 413 | // Step 1: apply resources and verify output with filter active. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 417 | // Step 2: delete the BGPFilter, verify output updates. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 485 | // Step 1: as for mesh/restart-time test oneshot test. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 490 | // Step 2: update BGPConfiguration to disable cluster route programming. | COMMENT |
| LOW⚡ | confd/tests/daemon_test.go | 498 | // Step 3: update BGPConfiguration to enable cluster route programming. | COMMENT |
| LOW | confd/tests/daemon_test.go | 152 | // Step 3: update my-secrets-1 to include both keys, and create my-secrets-2. | COMMENT |
| LOW | hack/check-images-availability.sh | 46 | # Step 1: Extract from manifests | COMMENT |
| LOW | hack/check-images-availability.sh | 89 | # Step 2: Check availability with retries | COMMENT |
| LOW | hack/check-images-availability.sh | 118 | # Step 3: Final result | COMMENT |
| LOW⚡ | hack/test/kind/migration/run_test.sh | 322 | # Step 6: Disruption test — force-kill kube-controllers during migration | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 99 | # Step 0: Preflight checks | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 171 | # Step 1: Deploy connectivity test workloads | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 205 | # Step 2: Seed test resources via the apiserver | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 254 | # Step 3: Snapshot v1 resource state | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 295 | # Step 4: Install v3 CRDs alongside v1 | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 306 | # Step 5: Install migration CRD | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 363 | # Step 7: Wait for migration to complete | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 425 | # Step 8: Verify migration results | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 570 | # Step 9: Verify continuous connectivity | COMMENT |
| LOW | hack/test/kind/migration/run_test.sh | 603 | # Step 10: Test v1 CRD cleanup via CR deletion (post-completion) | COMMENT |
| LOW | …-controllers/pkg/controllers/ippool/pool_controller.go | 186 | // Every time an IP pool is added, updated, or deleted, we need to check if it changes the active set of pools. We only | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 464 | // Step 1: Save and delete the APIService to route v3 requests to CRDs. | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 469 | // Step 2: Create v3 ClusterInformation with DatastoreReady=false to lock the datastore. | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 474 | // Step 3: Migrate all resources in order. | COMMENT |
| LOW | …be-controllers/pkg/controllers/migration/controller.go | 571 | // Step 4: Unlock the datastore. | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 768 | // Step 1: Delete partial v3 resources that were created during migration. | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 774 | // Step 2: Restore v1 ClusterInformation to DatastoreReady=true so components | COMMENT |
| LOW⚡ | …be-controllers/pkg/controllers/migration/controller.go | 780 | // Step 3: Delete the v3 ClusterInformation if it was created with | COMMENT |
| 29 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | networking-calico/devstack/plugin.sh | 3 | # =============================== | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 129 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 131 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 221 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 223 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 402 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 404 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 474 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 476 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 533 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 535 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 702 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 704 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 770 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 772 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | networking-calico/devstack/bootstrap.sh | 25 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | networking-calico/devstack/bootstrap.sh | 33 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | networking-calico/devstack/bootstrap.sh | 35 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | networking-calico/devstack/bootstrap.sh | 86 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 82 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 171 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 173 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 312 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 314 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 480 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 482 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 521 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 523 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 555 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/devstack/resync_concurrency_test.py | 557 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/networking_calico/agent/dhcp_agent.py | 175 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/networking_calico/agent/dhcp_agent.py | 177 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/networking_calico/agent/dhcp_agent.py | 228 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | networking-calico/networking_calico/agent/dhcp_agent.py | 230 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | felix/wireguard/bootstrap.go | 50 | // ┌────────────┐ ┌────────────┐ - Felix1 gets a response from Typha1 about the key update for Node2, and | COMMENT |
| MEDIUM⚡ | felix/wireguard/bootstrap.go | 52 | // │ ┌────────┐ │ │ │ node to node traffic for supporting nodes) | COMMENT |
| MEDIUM⚡ | felix/wireguard/bootstrap.go | 53 | // │ │ Typha1 ◄─┼────────┼──────┐ │ - Felix2 has not yet had an update from Typha1 about the public key for | COMMENT |
| MEDIUM⚡ | felix/wireguard/bootstrap.go | 57 | // │ └────────┘ │ │ └────────┘ │ - Packets routed over Wireguard from Node1 to Node2 will be dropped by the | COMMENT |
| MEDIUM⚡ | felix/wireguard/bootstrap.go | 58 | // └────────────┘ └────────────┘ Wireguard device on Node2 because Node1 is not one of its known peers. | COMMENT |
| MEDIUM | …pkg/controllers/loadbalancer/loadbalancer_leak_test.go | 58 | // ── Positive tests: correct code paths ───────────────────────────────── | COMMENT |
| MEDIUM | …pkg/controllers/loadbalancer/loadbalancer_leak_test.go | 104 | // ── deleteService cleans all three maps ──────────────────────────────── | COMMENT |
| MEDIUM | …pkg/controllers/loadbalancer/loadbalancer_leak_test.go | 135 | // ── releaseAddressFromService cleans all three maps ──────────────────── | COMMENT |
| MEDIUM | …pkg/controllers/loadbalancer/loadbalancer_leak_test.go | 162 | // ── Re-assignment safety ──────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 322 | def _add_rule(args): | CODE |
| MEDIUM | networking-calico/devstack/resync_scale_test.py | 364 | def _create_one(spec): | CODE |
| LOW⚡ | networking-calico/devstack/resync_scale_test.py | 421 | except Exception as exc: | CODE |
| LOW⚡ | networking-calico/devstack/resync_scale_test.py | 431 | except Exception as exc: | CODE |
| LOW⚡ | networking-calico/devstack/resync_scale_test.py | 441 | except Exception as exc: | CODE |
| LOW | networking-calico/devstack/resync_scale_test.py | 325 | except Exception as exc: | CODE |
| LOW | networking-calico/devstack/resync_scale_test.py | 367 | except Exception as exc: | CODE |
| LOW | networking-calico/devstack/resync_scale_test.py | 838 | except Exception: | CODE |
| LOW⚡ | networking-calico/devstack/resync_concurrency_test.py | 336 | except Exception as exc: | CODE |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 650 | except Exception: | CODE |
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 70 | except Exception as e: | CODE |
| LOW | networking-calico/networking_calico/etcdv3.py | 490 | except Exception: | CODE |
| LOW | networking-calico/networking_calico/logutils.py | 22 | except Exception: | CODE |
| MEDIUM | networking-calico/networking_calico/logutils.py | 19 | def wrapped(*args, **kwargs): | CODE |
| LOW | networking-calico/networking_calico/etcdutils.py | 274 | except Exception: | CODE |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 279 | except Exception as e: | CODE |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 321 | except Exception as e: | CODE |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 344 | except Exception as e: | CODE |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 374 | except Exception: | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 249 | except Exception: | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 848 | except Exception: | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1341 | except Exception: | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1352 | except Exception: | CODE |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1604 | except Exception: | CODE |
| LOW | …etworking_calico/plugins/ml2/drivers/calico/workers.py | 131 | except Exception: | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 824 | except Exception: | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 912 | except Exception: | CODE |
| LOW | …working_calico/plugins/ml2/drivers/calico/endpoints.py | 1116 | except Exception: | CODE |
| LOW | …ng-calico/networking_calico/tests/test_fv_etcdutils.py | 108 | except Exception: | CODE |
| LOW | …tworking-calico/networking_calico/tests/test_etcdv3.py | 47 | except Exception: | CODE |
| LOW⚡ | …-calico/networking_calico/tests/test_subnet_watcher.py | 46 | except Exception: | CODE |
| LOW | networking-calico/networking_calico/agent/dhcp_agent.py | 299 | except Exception: | CODE |
| LOW | networking-calico/networking_calico/agent/dhcp_agent.py | 766 | except Exception: | CODE |
| LOW | networking-calico/networking_calico/agent/dhcp_agent.py | 937 | except Exception as e: | CODE |
| MEDIUM | networking-calico/networking_calico/agent/dhcp_agent.py | 157 | def make_net_model(net_spec): | CODE |
| LOW | …king-calico/networking_calico/agent/linux/interface.py | 100 | except Exception: | CODE |
| LOW | networking-calico/networking_calico/resync/scope.py | 178 | except Exception as exc: | CODE |
| LOW | hack/strip-skipped-tests.py | 47 | except Exception as e: | CODE |
| LOW | node/tests/k8st/test_base.py | 54 | except Exception as e: | CODE |
| LOW | node/tests/k8st/utils/utils.py | 182 | except Exception as e: | CODE |
| LOW | node/tests/k8st/utils/utils.py | 217 | except Exception: | CODE |
| LOW | e2e/pkg/tests/kubevirt/utils.go | 121 | except Exception: | CODE |
| MEDIUM | e2e/pkg/tests/kubevirt/utils.go | 114 | def handle(conn, addr): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ng-calico/networking_calico/tests/test_fv_etcdutils.py | 22 | CODE | |
| LOW | calicoctl/tests/st/test_base.py | 17 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 15 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 16 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 23 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_crud.py | 16 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_crud.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_crud.py | 22 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_flags.py | 15 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_flags.py | 18 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 15 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 16 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 19 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 24 | CODE | |
| LOW | calicoctl/tests/st/utils/utils.py | 18 | CODE | |
| LOW | calicoctl/tests/st/utils/utils.py | 19 | CODE | |
| LOW | calicoctl/tests/st/utils/data.py | 27 | CODE | |
| LOW | hack/set_quay_expiry.py | 45 | CODE | |
| LOW | release/get-contributors.py | 2 | CODE | |
| LOW | node/tests/k8st/tests/test_bgp_advert_v6.py | 17 | CODE | |
| LOW | node/tests/k8st/utils/utils.py | 25 | CODE | |
| LOW | node/tests/k8st/utils/utils.py | 25 | CODE | |
| LOW | cni-plugin/contrib/test_scripts/ping_test.py | 1 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | felix/dataplane/linux/bpf_ep_mgr.go | 986 | // but taking it now makes us robust to refactoring. | COMMENT |
| MEDIUM | felix/dataplane/linux/bpf_ep_mgr.go | 1400 | // but taking it now makes us robust to refactoring. | COMMENT |
| MEDIUM | felix/dataplane/linux/qos/qos.go | 40 | // (Fundamentally, a TBF only works on traffic that the kernel is sending _to_ a network device. | COMMENT |
| MEDIUM | felix/iptables/table.go | 171 | // to do and keeps it manageable/robust. | COMMENT |
| MEDIUM | typha/pkg/snapcache/cache.go | 113 | // Why not use channels to fan out to the clients? I think it'd be more tricky to make robust and | COMMENT |
| MEDIUM | libcalico-go/lib/backend/watchersyncer/watchercache.go | 70 | // to construct resource updates rather than utilize a watch, as watches can't be created for the resource. We can be | COMMENT |
| MEDIUM | e2e/pkg/tests/kubevirt/live_migration.go | 42 | // KubeVirt live migration e2e tests validate Calico's seamless migration support for | COMMENT |
| MEDIUM | e2e/pkg/utils/remotecluster/exec.go | 33 | // RemoteFrameworkAwareExec is used to execute commands in a context that forces the executed function to utilize the | COMMENT |
| MEDIUM | process/testing/aso/vmss.sh | 19 | # It has been enhanced with ASO v2 best practices including: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 103 | # Check if this key is already in etcd. If it is, and if it represents | COMMENT |
| LOW | charts/calico/templates/calico-typha.yaml | 132 | # Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time | COMMENT |
| LOW | charts/calico/templates/calico-config.yaml | 9 | # Set these to the IP and port of your API server; In BPF mode, we need to connect directly to the | COMMENT |
| LOW | manifests/calico-policy-only.yaml | 12816 | # Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time | COMMENT |
| LOW | manifests/calico-typha.yaml | 12944 | # Set this to the same value as terminationGracePeriodSeconds; it tells Typha how much time | COMMENT |
| LOW | manifests/calico-bpf.yaml | 47 | # Set these to the IP and port of your API server; In BPF mode, we need to connect directly to the | COMMENT |
| LOW | cni-plugin/contrib/test_scripts/util.py | 34 | # Open the file again to pass the file handle as the stdin to call the plugin | COMMENT |
| LOW | process/testing/win-connections/run-tests.sh | 25 | # Check if kubeconfig exists at ../aso/kubeconfig | COMMENT |
| LOW | process/testing/aso/vmss.sh | 463 | # Check if first arg is a number (node index) | COMMENT |
| LOW | process/testing/aso/vmss.sh | 495 | # Check if first arg is a number (node index) | COMMENT |
| LOW | process/testing/aso/vmss.sh | 527 | # Check if first arg is a number (node index) | COMMENT |
| LOW | process/testing/aso/vmss.sh | 573 | # Check if first arg is a number (node index) | COMMENT |
| LOW | process/testing/aso/vmss.sh | 681 | # Check if ASO is running | COMMENT |
| LOW | process/testing/aso/vmss.sh | 775 | # Check if resource group exists | COMMENT |
| LOW | process/testing/aso/install-calico.sh | 69 | # Verify if the required variables are set for Calico EE | COMMENT |
| LOW | .semaphore/end-to-end/scripts/global_prologue.sh | 135 | # Set needrestart to automatically restart all required services after installation. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | networking-calico/devstack/resync_scale_test.py | 162 | CODE | |
| LOW | networking-calico/devstack/resync_scale_test.py | 560 | CODE | |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 186 | CODE | |
| LOW | networking-calico/devstack/resync_concurrency_test.py | 560 | CODE | |
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 33 | CODE | |
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 250 | CODE | |
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 389 | CODE | |
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 468 | CODE | |
| LOW | networking-calico/networking_calico/etcdv3.py | 88 | CODE | |
| LOW | networking-calico/networking_calico/etcdutils.py | 402 | CODE | |
| LOW | networking-calico/networking_calico/etcdutils.py | 149 | CODE | |
| LOW | …networking_calico/plugins/ml2/drivers/calico/syncer.py | 109 | CODE | |
| LOW | …tworking_calico/plugins/ml2/drivers/calico/election.py | 261 | CODE | |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1413 | CODE | |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 678 | CODE | |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 862 | CODE | |
| LOW | …rking_calico/plugins/ml2/drivers/calico/mech_calico.py | 1324 | CODE | |
| LOW | …networking_calico/plugins/ml2/drivers/calico/policy.py | 263 | CODE | |
| LOW | …co/plugins/ml2/drivers/calico/test/test_plugin_etcd.py | 246 | CODE | |
| LOW | networking-calico/networking_calico/agent/linux/dhcp.py | 50 | CODE | |
| LOW | calicoctl/tests/st/calicoctl/test_crud.py | 768 | CODE | |
| LOW | node/tests/k8st/utils/utils.py | 143 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | node/pkg/cni/token_watch_internal_test.go | 70 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 136 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 195 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 260 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 499 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 575 | Token: "fake-token", | CODE |
| LOW | node/pkg/cni/token_watch_internal_test.go | 665 | Token: "fake-token", | CODE |
| LOW | e2e/pkg/tests/operator/ippools.go | 141 | pool.Spec.NodeSelector = "has(dummy-key)" | CODE |
| LOW | e2e/pkg/tests/operator/ippools.go | 165 | installation.Spec.CalicoNetwork.IPPools[i].NodeSelector = "has(dummy-key)" | CODE |
| LOW | e2e/pkg/tests/operator/ippools.go | 176 | if pool.Spec.NodeSelector != "has(dummy-key)" { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | networking-calico/devstack/qos_responsiveness_tests.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | networking-calico/networking_calico/monotonic.py | 23 | __all__ = ["monotonic_time"] | CODE |
| LOW | …king-calico/networking_calico/agent/dhcp_agent_main.py | 44 | __all__ = ["main"] | CODE |
| LOW | calicoctl/tests/st/test_base.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | calicoctl/tests/st/calicoctl/test_migrate.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | calicoctl/tests/st/calicoctl/test_crud.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | calicoctl/tests/st/calicoctl/test_ipam_split.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | calicoctl/tests/st/utils/utils.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | node/tests/k8st/test_base.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | node/workload/responder.py | 9 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | networking-calico/devstack/bootstrap.sh | 287 | # Create a Calico network, for demonstration purposes. | COMMENT |
| LOW | …ng-calico/networking_calico/tests/test_fv_etcdutils.py | 69 | # Add in an invalid API path so as to make sure to test the failure | COMMENT |
| MEDIUM | .github/workflows/codeql.yml | 49 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/list-go-sources.sh | 10 | # Usage: | COMMENT |
| LOW | hack/dev-build.sh | 21 | # Usage: | COMMENT |
| LOW | process/testing/aso/vmss.sh | 21 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | felix/bpf/ut/pol_prog_test.go | 1525 | // TODO: Add test cases for IPv6 | COMMENT |
| LOW | felix/bpf/ut/pol_prog_test.go | 1810 | // TODO: Add test cases for IPv6 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | networking-calico/networking_calico/etcdv3.py | 439 | CODE | |
| LOW | networking-calico/networking_calico/resync/scope.py | 100 | CODE |