Repository Analysis

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

13.6 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of prowler-cloud/prowler, a Python project with 14,513 GitHub stars. SynthScan v2.0 examined 1,542,921 lines of code across 10577 source files, recording 17271 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 13.6 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

13.6
Adjusted Score
13.6
Raw Score
100%
Time Factor
2026-08-01
Last Push
14.5K
Stars
Python
Language
1.5M
Lines of Code
10.6K
Files
17.3K
Pattern Hits
2026-08-02
Scan Date
0.06
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 29HIGH 555MEDIUM 851LOW 15836

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 17271 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers11941 hits · 11158 pts
SeverityFileLineSnippetContext
LOWui/types/providers-table.ts110export function isProvidersOrganizationRow(CODE
LOW…rowler)/attack-paths/(workflow)/query-builder/page.tsx22export default async function AttackPathsQueryBuilderRedirectPage({CODE
LOW…telist/_components/simple/mute-rule-target-previews.ts14export function formatMuteRuleTargetPreview(CODE
LOW…telist/_components/simple/mute-rule-target-previews.ts31export async function hydrateMuteRuleTargetPreviews(CODE
LOW…ans/config/_components/scan-configurations-manager.tsx34export function ScanConfigurationsManager({CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts217function getRelationshipProviderIds(CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts229function getOrganizationNodeParentId(CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts251function resolveProviderRowsAndIds({CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts291function collectOrganizationRowProviderIds(CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts297function getOrganizationNodeRelationshipId(CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts308function buildOrganizationNodeRows({CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts513 function collectAssignedProviderIds(rows: ProvidersTableRow[]) {CODE
LOWui/app/(prowler)/providers/providers-page.utils.ts532export async function loadProvidersAccountsViewData({CODE
LOW…r)/_overview/threat-score/_components/threat-score.tsx63function convertSectionScoresToTooltipData(CODE
LOW…me/_components/finding-severity-over-time.skeleton.tsx3export function FindingSeverityOverTimeSkeleton() {CODE
LOWui/app/(prowler)/_overview/_lib/lighthouse-banner.ts21export function resolveLighthouseOverviewBannerHref(CODE
LOWui/app/(prowler)/_overview/_lib/lighthouse-banner.ts31export async function getLighthouseOverviewBannerHref(CODE
LOW…prowler)/_overview/_lib/lighthouse-provider-context.ts24export function buildOverviewProviderContextItems({CODE
LOW…w/resources-inventory/resources-inventory-skeleton.tsx37export function ResourcesInventorySkeleton() {CODE
LOW…nventory/_components/resources-inventory-card-item.tsx13export function ResourcesInventoryCardItem({CODE
LOW…-severity/_components/risk-severity-chart.skeleton.tsx3export function RiskSeverityChartSkeleton() {CODE
LOWui/app/(prowler)/lighthouse/config/page.tsx5export default function LighthouseConfigRedirectPage() {CODE
LOW…/app/(prowler)/lighthouse/config/select-model/page.tsx3export default async function LighthouseConfigSelectModelRedirectPage({CODE
LOWui/app/(prowler)/lighthouse/config/connect/page.tsx3export default async function LighthouseConfigConnectRedirectPage({CODE
LOWui/app/(prowler)/lighthouse/_lib/chat-store.ts90export function selectLighthouseChatCanSend(CODE
LOWui/app/(prowler)/lighthouse/_lib/chat-store.ts107export function createLighthouseChatStore(CODE
LOWui/app/(prowler)/lighthouse/_lib/chat-store.ts491function resolveInitialModelSelection(CODE
LOW…/(prowler)/lighthouse/_lib/panel-chat-message-state.ts11export function subscribePanelChatHasMessages(CODE
LOW…/(prowler)/lighthouse/_lib/panel-chat-message-state.ts18export function getPanelChatActiveSessionId(): string | null {CODE
LOW…/(prowler)/lighthouse/_lib/panel-chat-message-state.ts42export function resetPanelChatMessageState(): void {CODE
LOWui/app/(prowler)/lighthouse/_lib/panel-chat-store.ts19export function getOrCreatePanelChatStore(CODE
LOWui/app/(prowler)/lighthouse/_lib/panel-chat-store.ts19export function getOrCreatePanelChatStore(CODE
LOWui/app/(prowler)/lighthouse/_lib/panel-chat-store.ts56export function flushPendingPanelChatMessage(): void {CODE
LOWui/app/(prowler)/lighthouse/_lib/panel-chat-store.ts69export function getPanelChatStoreForSession(CODE
LOWui/app/(prowler)/lighthouse/_lib/panel-chat-store.ts91export function resetPanelChatStoreForTests(): void {CODE
LOW…/_components/panel/lighthouse-panel-header-actions.tsx22export function LighthousePanelHeaderActions() {CODE
LOW…lighthouse/_components/panel/lighthouse-panel-chat.tsx86export function resetPanelChatConfigCacheForTests(): void {CODE
LOW…e/_components/panel/lighthouse-panel-chat-skeleton.tsx8export function LighthousePanelChatSkeleton() {CODE
LOW…se/_components/chat/lighthouse-chat-store-provider.tsx20export function LighthouseChatStoreProvider({CODE
LOW…r)/lighthouse/_components/chat/decrypted-text-hooks.ts116export function useDecryptedTextController({CODE
LOW…rowler)/lighthouse/_components/chat/message-bubble.tsx151function getAssistantPartGroupType(CODE
LOW…ler)/lighthouse/_components/chat/streaming-message.tsx45export function StreamingAssistantMessage({CODE
LOW…ler)/lighthouse/_components/chat/streaming-message.tsx154function StreamingReconnectActivity() {CODE
LOW…ler)/lighthouse/_components/chat/streaming-message.tsx198function groupStreamingActivityItems(CODE
LOW…ighthouse/_components/ai-elements/chain-of-thought.tsx168export function ChainOfThoughtSearchResults({CODE
LOW…ighthouse/_components/ai-elements/chain-of-thought.tsx182export function ChainOfThoughtSearchResult({CODE
LOWui/app/(auth)/invitation/_lib/invitation-errors.ts61export function getInvitationErrorDisplay(CODE
LOWui/components/layout/app-sidebar/sidebar-navigation.tsx54function getCollapsibleActivationKey(item: NavigationCollapsible) {CODE
LOWui/components/layout/app-sidebar/sidebar-navigation.tsx181function CollapsibleNavigationItem({CODE
LOWui/components/layout/app-sidebar/navigation-config.ts84export function filterNavigationByPermissions(CODE
LOWui/components/scans/scans.utils.ts68export function getScanTriggerFilterOptions(CODE
LOWui/components/scans/scans.utils.ts185export function getScanStatusFilterOptions(CODE
LOWui/components/scans/scans.utils.ts283export function appendPendingScheduleRowsToPage({CODE
LOWui/components/scans/scans.utils.ts341export function pickScheduleProviderFilters(CODE
LOW…components/scans/schedule/edit-scan-schedule-modal.tsx79function getBulkProviderTypeIconItems(CODE
LOWui/components/scans/schedule/save-schedule.ts31export async function saveScheduleWithInitialScan({CODE
LOWui/components/providers/providers-accounts-table.tsx48function computeTestableProviderIds(CODE
LOWui/components/providers/providers-accounts-table.tsx105function collectVisibleScheduleProviders(rows: ProvidersTableRow[]) {CODE
LOWui/components/providers/providers-accounts-table.tsx127export function computeSelectedScheduleProviders(CODE
LOWui/components/providers/providers-accounts-table.tsx172export function createScanConfigIdByProviderId(CODE
11881 more matches not shown…
Cross-File Repetition414 hits · 2070 pts
SeverityFileLineSnippetContext
HIGH…/objectstorage/openstack_objectstorage_service_test.py0test that a failing region doesn't prevent other regions from being listed.STRING
HIGH…es/blockstorage/openstack_blockstorage_service_test.py0test that a failing region doesn't prevent other regions from being listed.STRING
HIGH…rvices/networking/openstack_networking_service_test.py0test that a failing region doesn't prevent other regions from being listed.STRING
HIGH…oviders/openstack/services/image/image_service_test.py0test that a failing region doesn't prevent other regions from being listed.STRING
HIGH…ack/services/compute/openstack_compute_service_test.py0test that a failing region doesn't prevent other regions from being listed.STRING
HIGH…bjectstorage_container_metadata_sensitive_data_test.py0test that a confirmed live secret escalates the finding to critical (fail).STRING
HIGH…/blockstorage_snapshot_metadata_sensitive_data_test.py0test that a confirmed live secret escalates the finding to critical (fail).STRING
HIGH…ta/blockstorage_volume_metadata_sensitive_data_test.py0test that a confirmed live secret escalates the finding to critical (fail).STRING
HIGH…_data/compute_instance_metadata_sensitive_data_test.py0test that a confirmed live secret escalates the finding to critical (fail).STRING
HIGH…/blockstorage_snapshot_metadata_sensitive_data_test.py0test that secrets are correctly attributed to the right metadata keys.STRING
HIGH…ta/blockstorage_volume_metadata_sensitive_data_test.py0test that secrets are correctly attributed to the right metadata keys.STRING
HIGH…_data/compute_instance_metadata_sensitive_data_test.py0test that secrets are correctly attributed to the right metadata keys.STRING
HIGH…leworkspace/services/calendar/calendar_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…ers/googleworkspace/services/chat/chat_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…space/services/marketplace/marketplace_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…/additionalservices/additionalservices_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…googleworkspace/services/groups/groups_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…s/googleworkspace/services/sites/sites_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…s/googleworkspace/services/drive/drive_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…s/googleworkspace/services/gmail/gmail_service_test.py0test early return when _build_service fails to construct the clientSTRING
HIGH…leworkspace/services/calendar/calendar_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…ers/googleworkspace/services/chat/chat_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…ices/security/googleworkspace_security_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…space/services/marketplace/marketplace_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…/additionalservices/additionalservices_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…googleworkspace/services/groups/groups_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…s/googleworkspace/services/sites/sites_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…s/googleworkspace/services/drive/drive_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…s/googleworkspace/services/gmail/gmail_service_test.py0test inner except handler when request.execute() raises during paginationSTRING
HIGH…leworkspace/services/calendar/calendar_service_test.py0test that ou-level and group-level policies are skipped, only customer-level usedSTRING
HIGH…ers/googleworkspace/services/chat/chat_service_test.py0test that ou-level and group-level policies are skipped, only customer-level usedSTRING
HIGH…googleworkspace/services/groups/groups_service_test.py0test that ou-level and group-level policies are skipped, only customer-level usedSTRING
HIGH…s/googleworkspace/services/drive/drive_service_test.py0test that ou-level and group-level policies are skipped, only customer-level usedSTRING
HIGH…s/googleworkspace/services/gmail/gmail_service_test.py0test that ou-level and group-level policies are skipped, only customer-level usedSTRING
HIGH…_warning/calendar_external_invitations_warning_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…dar/calendar_external_sharing_primary_calendar_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…ns/drive_warn_sharing_with_allowlisted_domains_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…drive_shared_drive_disable_download_print_copy_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…on_allowed/drive_shared_drive_creation_allowed_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…g_warn_users/drive_external_sharing_warn_users_test.py0test pass when no explicit policy is set (none) — google default is secureSTRING
HIGH…_warning/calendar_external_invitations_warning_test.py0test no findings returned when the api fetch failedSTRING
HIGH…dar/calendar_external_sharing_primary_calendar_test.py0test no findings returned when the api fetch failedSTRING
HIGH…r/calendar_external_sharing_secondary_calendar_test.py0test no findings returned when the api fetch failedSTRING
HIGH…tion_limited/security_session_duration_limited_test.py0test no findings returned when the api fetch failedSTRING
HIGH…igured/security_advanced_protection_configured_test.py0test no findings returned when the api fetch failedSTRING
HIGH…cess_restricted/security_app_access_restricted_test.py0test no findings returned when the api fetch failedSTRING
HIGH…_policy_strong/security_password_policy_strong_test.py0test no findings returned when the api fetch failedSTRING
HIGH…_keys_admins/security_2sv_hardware_keys_admins_test.py0test no findings returned when the api fetch failedSTRING
HIGH…ty/security_2sv_enforced/security_2sv_enforced_test.py0test no findings returned when the api fetch failedSTRING
HIGH…configured/security_dlp_drive_rules_configured_test.py0test no findings returned when the api fetch failedSTRING
HIGH…ps_disabled/security_less_secure_apps_disabled_test.py0test no findings returned when the api fetch failedSTRING
HIGH…ecovery_enabled/security_user_recovery_enabled_test.py0test no findings returned when the api fetch failedSTRING
HIGH…al_apps_trusted/security_internal_apps_trusted_test.py0test no findings returned when the api fetch failedSTRING
HIGH…onfigured/security_login_challenges_configured_test.py0test no findings returned when the api fetch failedSTRING
HIGH…isabled/security_super_admin_recovery_disabled_test.py0test no findings returned when the api fetch failedSTRING
HIGH…_restricted/marketplace_apps_access_restricted_test.py0test no findings returned when the api fetch failedSTRING
HIGH…ed/additionalservices_external_groups_disabled_test.py0test no findings returned when the api fetch failedSTRING
HIGH…creation_restricted/groups_creation_restricted_test.py0test no findings returned when the api fetch failedSTRING
HIGH…estricted/groups_view_conversations_restricted_test.py0test no findings returned when the api fetch failedSTRING
HIGH…s_restricted/groups_external_access_restricted_test.py0test no findings returned when the api fetch failedSTRING
354 more matches not shown…
Excessive Try-Catch Wrapping1716 hits · 1784 pts
SeverityFileLineSnippetContext
LOWutil/update_oci_regions.py63 except Exception as e:CODE
LOWutil/update_oci_regions.py80 except Exception as e:CODE
LOWutil/update_oci_regions.py120 except Exception as e:CODE
LOWutil/update_oci_regions.py141 except Exception as e:CODE
LOWutil/update_oci_regions.py174 except Exception as e:CODE
LOWutil/update_oci_regions.py207 except Exception as e:CODE
LOWutil/compliance/ccc/from_yaml_to_json.py17 except Exception as e:CODE
MEDIUMutil/compliance/ccc/from_yaml_to_json.py18 print(f"Error loading YAML file: {e}")CODE
LOWutil/compliance/ccc/from_yaml_to_json.py120 except Exception as e:CODE
MEDIUMutil/compliance/ccc/from_yaml_to_json.py121 print(f"Error saving JSON file: {e}")CODE
MEDIUMutil/compliance/ccc/from_yaml_to_json.py135 print(f"Error: File {input_file} does not exist.")CODE
MEDIUMutil/compliance/ccc/from_yaml_to_json.py154 print("Error saving JSON file.")CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py818 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py132 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py291 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py329 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py348 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py361 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py429 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py541 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py699 except Exception as e:CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py891 except Exception as e:CODE
MEDIUMutil/prowler_check_kreator/prowler_check_kreator.py300 print(f"Error: {e}")CODE
LOWutil/prowler_check_kreator/prowler_check_kreator.py302 except Exception as e:CODE
LOWutil/prowler_check_kreator/lib/llms/gemini.py57 except Exception as e:CODE
LOWutil/prowler_check_kreator/lib/llms/gemini.py73 except Exception as e:CODE
LOWutil/prowler-bulk-provisioning/aws_org_generator.py93 except Exception as e:CODE
MEDIUMutil/prowler-bulk-provisioning/nuke_providers.py113 print(f"Error fetching providers (page {page}): {resp.status_code}")CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py132 except Exception as e:CODE
MEDIUMutil/prowler-bulk-provisioning/nuke_providers.py133 print(f"Error fetching providers: {e}")CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py202 except Exception as e:CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py410 except Exception as e:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py93 except Exception:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py123 except Exception:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py537 except Exception as e:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py551 except Exception:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py686 except Exception as e:CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py792 except Exception as e:CODE
LOWtests/lib/check/check_test.py1114 except Exception as e:CODE
LOWprowler/__main__.py552 except Exception:CODE
LOWprowler/__main__.py671 except Exception as error:CODE
LOWprowler/config/config.py109 except Exception as error:CODE
LOWprowler/config/config.py181 except Exception as error:CODE
LOWprowler/config/config.py289 except Exception:CODE
LOWprowler/config/config.py352 except Exception as error:CODE
LOWprowler/config/config.py390 except Exception as error:CODE
MEDIUMprowler/config/config.py274def check_current_version():CODE
LOWprowler/providers/openstack/openstack_provider.py446 except Exception as error:CODE
LOWprowler/providers/openstack/openstack_provider.py492 except Exception as error:CODE
LOWprowler/providers/openstack/openstack_provider.py526 except Exception as error:CODE
LOWprowler/providers/openstack/openstack_provider.py651 except Exception as error:CODE
LOW…nstack/services/objectstorage/objectstorage_service.py32 except Exception as head_error:CODE
LOW…nstack/services/objectstorage/objectstorage_service.py68 except Exception as error:CODE
LOW…penstack/services/blockstorage/blockstorage_service.py59 except Exception as error:CODE
LOW…penstack/services/blockstorage/blockstorage_service.py88 except Exception as error:CODE
LOW…penstack/services/blockstorage/blockstorage_service.py118 except Exception as error:CODE
LOW…rs/openstack/services/networking/networking_service.py96 except Exception as error:CODE
LOW…rs/openstack/services/networking/networking_service.py130 except Exception as error:CODE
LOW…rs/openstack/services/networking/networking_service.py161 except Exception as error:CODE
LOW…rs/openstack/services/networking/networking_service.py195 except Exception as error:CODE
1656 more matches not shown…
Decorative Section Separators471 hits · 1648 pts
SeverityFileLineSnippetContext
MEDIUMui/types/organizations.ts1// ─── Const Enums ──────────────────────────────────────────────────────────────COMMENT
MEDIUMui/types/organizations.ts138// ─── Candidate Registration (shared wire shape) ───────────────────────────────COMMENT
MEDIUMui/types/organizations.ts150// ─── AWS Discovery Result (wire) ───────────────────────────────────────────────COMMENT
MEDIUMui/types/organizations.ts184// ─── GCP Discovery Result (wire) ───────────────────────────────────────────────COMMENT
MEDIUMui/types/organizations.ts223// ─── Normalized Hierarchy Model (store currency) ───────────────────────────────COMMENT
MEDIUMui/types/organizations.ts260// ─── Secret + Apply Payloads (per-type) ────────────────────────────────────────COMMENT
MEDIUMui/types/organizations.ts329// ─── JSON:API Resource Interfaces ─────────────────────────────────────────────COMMENT
MEDIUMui/types/organizations.ts476// ─── Connection Test Status ───────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx47// ── Future E2E coverage ────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx53// ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx56 // ── No changes ───────────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx114 // ── Has changes ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx187 // ── onApply interaction ──────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/apply-filters-button.test.tsx237 // ── onDiscard interaction ────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/filter-summary-strip.test.tsx45// ── Future E2E coverage ────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/filter-summary-strip.test.tsx50// ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/filter-summary-strip.test.tsx59 // ── Empty state ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/filter-summary-strip.test.tsx76 // ── Chip rendering ───────────────────────────────────────────────────────COMMENT
MEDIUMui/components/filters/filter-summary-strip.test.tsx151 // ── onRemove interaction ─────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx7// ── next/navigation mock ────────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx17// ── useUrlFilters mock — tracks whether updateFilter is called ───────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx22// ── context (optional dependency used by useUrlFilters) ────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx128// ── ClearFiltersButton stub ─────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx133// ── Other component stubs ───────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx150// ── Future E2E coverage ────────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx156// ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx183 // ── Default / instant mode ───────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx234 // ── Batch mode ───────────────────────────────────────────────────────────COMMENT
MEDIUM…s/shadcn/table/data-table-filter-custom-batch.test.tsx333 // ── hideClearButton ──────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts31 // ── Initial state ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts122 // ── Excluded keys ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts147 // ── setPending ─────────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts227 // ── getFilterValue ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts293 // ── hasChanges & changeCount ───────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts366 // ── applyAll ───────────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts437 // ── discardAll ─────────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts466 // ── URL sync (back/forward) ────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts498 // ── removePending ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/hooks/use-filter-batch.test.ts526 // ── clearAndApply ──────────────────────────────────────────────────────────COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py147 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py149 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py274 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py276 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py452 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py454 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py175 # ------------------------------------------------------------------COMMENT
MEDIUM…pqc_tls_enabled/elbv2_listener_pqc_tls_enabled_test.py177 # ------------------------------------------------------------------COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py232# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py234# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py905# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py907# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1097# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1099# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1328# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1330# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1449# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1451# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1516# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1518# ===========================================================================COMMENT
MEDIUM…ts/providers/external/test_dynamic_provider_loading.py1869# ===========================================================================COMMENT
411 more matches not shown…
Deep Nesting1294 hits · 1176 pts
SeverityFileLineSnippetContext
LOWutil/compliance/ccc/from_yaml_to_json.py22CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py136CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py236CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py298CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py367CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py434CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py502CODE
LOWutil/compliance/compliance_mapper/compliance_mapper.py767CODE
LOWutil/prowler-bulk-provisioning/aws_org_generator.py36CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py172CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py254CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py21CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py87CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py164CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py559CODE
LOW…ices/organizations/atlas_organizations_service_test.py118CODE
LOW…ongodbatlas/services/projects/projects_service_test.py89CODE
LOW…ongodbatlas/services/projects/projects_service_test.py177CODE
LOW…ongodbatlas/services/projects/projects_service_test.py211CODE
LOW…oraclecloud/services/identity/identity_service_test.py125CODE
LOW…vm/vm_scaleset_not_empty/vm_scaleset_not_empty_test.py128CODE
LOW…vm/vm_jit_access_enabled/vm_jit_access_enabled_test.py234CODE
LOW…ncer/vm_scaleset_associated_with_load_balancer_test.py134CODE
LOW…iders/aws/services/codebuild/codebuild_service_test.py42CODE
LOW…secretsmanager_has_restrictive_resource_policy_test.py537CODE
LOW…secretsmanager_has_restrictive_resource_policy_test.py797CODE
LOWtests/providers/aws/services/glue/glue_service_test.py17CODE
LOW…cess_block/s3_access_point_public_access_block_test.py338CODE
LOW…bility/s3_bucket_shadow_resource_vulnerability_test.py192CODE
LOW…delegated_admin_and_org_aggregator_all_regions_test.py272CODE
LOW…delegated_admin_and_org_aggregator_all_regions_test.py313CODE
LOW…delegated_admin_and_org_aggregator_all_regions_test.py353CODE
LOW…delegated_admin_and_org_aggregator_all_regions_test.py398CODE
LOW…afv2_webacl_with_rules/wafv2_webacl_with_rules_test.py18CODE
LOW…on/ecs_service_fargate_latest_platform_version_test.py16CODE
LOW…multi_region_enabled_logging_management_events_test.py309CODE
LOW…enabled/cloudtrail_log_file_validation_enabled_test.py88CODE
LOW…_enabled/cloudtrail_cloudwatch_logging_enabled_test.py43CODE
LOW…_enabled/cloudtrail_cloudwatch_logging_enabled_test.py130CODE
LOW…_enabled/cloudtrail_cloudwatch_logging_enabled_test.py217CODE
LOW…region_enabled/cloudtrail_multi_region_enabled_test.py16CODE
LOW…region_enabled/cloudtrail_multi_region_enabled_test.py68CODE
LOW…region_enabled/cloudtrail_multi_region_enabled_test.py144CODE
LOW…region_enabled/cloudtrail_multi_region_enabled_test.py221CODE
LOW…iders/aws/services/awslambda/awslambda_service_test.py456CODE
LOW…/iam_inline_policy_allows_privilege_escalation_test.py897CODE
LOW…iam_inline_policy_no_administrative_privileges_test.py163CODE
LOW…iam_inline_policy_no_administrative_privileges_test.py366CODE
LOW…iam_inline_policy_no_administrative_privileges_test.py572CODE
LOW…alation/iam_policy_allows_privilege_escalation_test.py855CODE
LOW…alation/iam_policy_allows_privilege_escalation_test.py1592CODE
LOW…firewall_in_all_vpc/networkfirewall_in_all_vpc_test.py281CODE
LOW…_by_default/vpc_subnet_no_public_ip_by_default_test.py11CODE
LOW…_by_default/vpc_subnet_no_public_ip_by_default_test.py63CODE
LOW…pc_subnet_different_az/vpc_subnet_different_az_test.py11CODE
LOW…pc_subnet_different_az/vpc_subnet_different_az_test.py76CODE
LOW…pc_subnet_different_az/vpc_subnet_different_az_test.py130CODE
LOW…t_for_ec2_enabled/vpc_endpoint_for_ec2_enabled_test.py41CODE
LOW…t_for_ec2_enabled/vpc_endpoint_for_ec2_enabled_test.py100CODE
LOW…vate_public/vpc_subnet_separate_private_public_test.py11CODE
1234 more matches not shown…
Self-Referential Comments261 hits · 819 pts
SeverityFileLineSnippetContext
MEDIUM…ate_compliance_json_from_csv_for_cis40_microsoft365.py12# Create the output JSON objectCOMMENT
MEDIUMutil/compliance/compliance_mapper/compliance_mapper.py772 # Create a copy of original compliance dataCOMMENT
MEDIUMutil/prowler_check_kreator/prowler_check_kreator.py140 # Create the checkCOMMENT
MEDIUMutil/prowler_check_kreator/lib/templates.py100 # Create a compliant resourceCOMMENT
MEDIUMutil/prowler_check_kreator/lib/llms/gemini.py117 "from json import dumps\nfrom unittest import mock\n\nfrom boto3 import client\nfrom moto import mock_aws\n\CODE
MEDIUM…godbatlas/lib/arguments/mongodbatlas_arguments_test.py26 # Create a mock object that has the necessary attributesCOMMENT
MEDIUM…godbatlas/lib/arguments/mongodbatlas_arguments_test.py176 # Create a mock object that mimics the structure used by the init_parser functionCOMMENT
MEDIUM…ings_exists/monitor_diagnostic_settings_exists_test.py106 # Create a valid BlobProperties instanceCOMMENT
MEDIUM…sts/providers/azure/services/apim/apim_service_test.py231 # Create a mock table with the expected structure for LogsQueryLogEntryCOMMENT
MEDIUM…_llm_jacking/apim_threat_detection_llm_jacking_test.py12# Create a mock LogsQueryLogEntry class for testingCOMMENT
MEDIUMtests/providers/gcp/gcp_provider_test.py964 # Create a mock provider with required attributesCOMMENT
MEDIUM…ging/logging_sink_created/logging_sink_created_test.py266 # Create a MagicMock sink object with name=NoneCOMMENT
MEDIUM…ging/logging_sink_created/logging_sink_created_test.py314 # Create a MagicMock sink object without name attributeCOMMENT
MEDIUM…nd_alert_for_project_ownership_changes_enabled_test.py286 # Create a MagicMock metric object with name=NoneCOMMENT
MEDIUM…nd_alert_for_project_ownership_changes_enabled_test.py333 # Create a MagicMock metric object without name attributeCOMMENT
MEDIUM…nd_alert_for_bucket_permission_changes_enabled_test.py286 # Create a MagicMock metric object with name=NoneCOMMENT
MEDIUM…nd_alert_for_bucket_permission_changes_enabled_test.py336 # Create a MagicMock metric object without name attributeCOMMENT
MEDIUMtests/providers/image/lib/registry/test_oci_adapter.py674 # Create a base64 string that decodes to invalid UTF-8COMMENT
MEDIUMtests/providers/iac/iac_provider_test.py824 # Create a mock .git/HEAD file with main branchCOMMENT
MEDIUMtests/providers/iac/iac_provider_test.py838 # Create a mock .git/HEAD file with develop branchCOMMENT
MEDIUM…roviders/github/lib/arguments/github_arguments_test.py28 # Create a mock object that has the necessary attributesCOMMENT
MEDIUM…roviders/github/lib/arguments/github_arguments_test.py156 # Create a mock object that mimics the structure used by the init_parser functionCOMMENT
MEDIUMtests/providers/m365/lib/jwt/jwt_decoder_test.py11 # Create a mock JWT tokenCOMMENT
MEDIUMtests/providers/m365/lib/jwt/jwt_decoder_test.py124 # Create a valid JWTCOMMENT
MEDIUM…ts/providers/m365/lib/arguments/m365_arguments_test.py30 # Create a mock object that has the necessary attributesCOMMENT
MEDIUM…ts/providers/m365/lib/arguments/m365_arguments_test.py305 # Create a mock object that mimics the structure used by the init_parser functionCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py287 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py291 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1353 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1356 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1391 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1394 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1433 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1436 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1471 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1474 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1523 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1526 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1614 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/aws_provider_test.py1618 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/lib/s3/s3_test.py329 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/lib/s3/s3_test.py332 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/lib/s3/s3_test.py358 # Create a mock IAM userCOMMENT
MEDIUMtests/providers/aws/lib/s3/s3_test.py361 # Create a mock IAM access keysCOMMENT
MEDIUMtests/providers/aws/lib/mutelist/aws_mutelist_test.py330 # Create an invalid mutelist by adding an invalid keyCOMMENT
MEDIUM…bility/s3_bucket_shadow_resource_vulnerability_test.py207 # Define the shadow resources we want to simulateCOMMENT
MEDIUM…_logging_enabled/datasync_task_logging_enabled_test.py16 # Create a DataSync client with no tasksCOMMENT
MEDIUM…_logging_enabled/datasync_task_logging_enabled_test.py47 # Create a DataSync task without logging enabledCOMMENT
MEDIUM…_logging_enabled/datasync_task_logging_enabled_test.py57 # Create a DataSync client with the taskCOMMENT
MEDIUM…_logging_enabled/datasync_task_logging_enabled_test.py97 # Create a DataSync task with logging enabledCOMMENT
MEDIUM…_logging_enabled/datasync_task_logging_enabled_test.py107 # Create a DataSync client with the taskCOMMENT
MEDIUM…lb/elb_is_in_multiple_az/elb_is_in_multiple_az_test.py42 # Create a compliant resourceCOMMENT
MEDIUM…lb/elb_is_in_multiple_az/elb_is_in_multiple_az_test.py92 # Create a compliant resourceCOMMENT
MEDIUM…tificate/elb_ssl_listeners_use_acm_certificate_test.py445 # Create a certificate ARN that will NOT be in ACM (simulating IAM certificate or any non-ACM certificate)COMMENT
MEDIUM…aining_enabled/elb_connection_draining_enabled_test.py41 # Create a compliant resourceCOMMENT
MEDIUM…aining_enabled/elb_connection_draining_enabled_test.py100 # Create a compliant resourceCOMMENT
MEDIUM…_enabled/elb_cross_zone_load_balancing_enabled_test.py40 # Create a compliant resourceCOMMENT
MEDIUM…_enabled/elb_cross_zone_load_balancing_enabled_test.py90 # Create a compliant resourceCOMMENT
MEDIUM…_enabled/elb_cross_zone_load_balancing_enabled_test.py145 # Create a non-compliant resourceCOMMENT
MEDIUM…y_attached/bedrock_full_access_policy_attached_test.py228 # Create a compliant role (no AmazonBedrockFullAccess)COMMENT
201 more matches not shown…
Docstring Block Structure123 hits · 615 pts
SeverityFileLineSnippetContext
HIGHutil/update_oci_regions.py85 Fetch all OCI commercial regions using the Identity service API. Args: identity_client (oci.identity.ISTRING
HIGHutil/prowler_check_kreator/lib/templates.py2Load the template for the check file. Args: provider (str): The provider of the service. service (sSTRING
HIGHutil/prowler_check_kreator/lib/templates.py47Load the template for the test file. Args: provider: The provider of the service (e.g., "aws"). serSTRING
HIGHprowler/providers/openstack/openstack_provider.py244Setup session from clouds.yaml content provided as a string. Parses the YAML content directly instead of writinSTRING
HIGHprowler/providers/openstack/openstack_provider.py325Setup session from clouds.yaml configuration file. Args: clouds_yaml_file: Path to clouds.yaml fileSTRING
HIGHprowler/providers/openstack/openstack_provider.py555Test connection to OpenStack without creating a full provider instance. This static method allows testing OpenSSTRING
HIGH…/providers/googleworkspace/googleworkspace_provider.py187 Sets up the Google Workspace session with Service Account and Domain-Wide Delegation. Args: STRING
HIGH…/providers/googleworkspace/googleworkspace_provider.py373 Retrieves Google Workspace identity information using the Admin SDK. Args: session (GoogleSTRING
HIGH…/providers/googleworkspace/googleworkspace_provider.py526Test connection to Google Workspace. Test the connection to Google Workspace using the provided credentials. STRING
HIGHprowler/providers/mongodbatlas/mongodbatlas_provider.py153 Setup MongoDB Atlas session with authentication credentials Args: atlas_public_key: MongoDSTRING
HIGHprowler/providers/mongodbatlas/mongodbatlas_provider.py202 Setup MongoDB Atlas identity information Args: session: MongoDB Atlas session RetSTRING
HIGHprowler/providers/mongodbatlas/lib/service/service.py41 Make HTTP request to MongoDB Atlas API with retry logic Args: method: HTTP method (GET, POSTRING
HIGHprowler/providers/e2enetworks/e2enetworks_provider.py137Create an authenticated E2E Networks API session. Args: api_key: E2E Networks API key. STRING
HIGHprowler/providers/e2enetworks/e2enetworks_provider.py196Test connectivity to the E2E Networks MyAccount API. Args: api_key: E2E Networks API key. Falls bacSTRING
HIGHprowler/providers/oraclecloud/oraclecloud_provider.py290 setup_session sets up an OCI session using the provided credentials. Args: - oci_config_fiSTRING
HIGHprowler/providers/oraclecloud/oraclecloud_provider.py467 set_identity sets the OCI provider identity information. Args: - session: The OCI session.STRING
HIGHprowler/providers/oraclecloud/oraclecloud_provider.py855 Test the connection to OCI with the provided credentials. Args: oci_config_file (str): TheSTRING
HIGH…owler/providers/oraclecloud/lib/arguments/arguments.py67 Validates that the input compartment OCID is valid. Args: ocid (str): The compartment OCID to validateSTRING
HIGHprowler/providers/vercel/vercel_provider.py123Initialize Vercel API session. Credentials can be provided as arguments (for API use) or read from enviSTRING
HIGHprowler/providers/vercel/vercel_provider.py175Fetch user and team metadata for Vercel. Args: session: The Vercel session. Returns: STRING
HIGHprowler/providers/vercel/lib/service/service.py46Make a rate-limit-aware GET request to the Vercel API. Args: path: API path (e.g., "/v9/projects").STRING
HIGHprowler/providers/azure/azure_provider.py130 Initializes the Azure provider. Args: az_cli_auth (bool): Flag indicating whether to use ASTRING
HIGHprowler/providers/azure/azure_provider.py494Returns the Azure credentials object. Set up the Azure session with the specified authentication method. STRING
HIGHprowler/providers/azure/azure_provider.py637Test connection to Azure subscription. Test the connection to an Azure subscription using the provided credentiSTRING
HIGHprowler/providers/azure/azure_provider.py1094 Retrieves a set of regions available across all subscriptions or specific subscriptions if provided. ASTRING
HIGHprowler/providers/azure/azure_provider.py1191 Validates the static credentials for the Azure provider. Args: tenant_id (str): The Azure STRING
HIGHprowler/providers/azure/azure_provider.py1278 Verifies the Azure client credentials using the specified tenant ID, client ID, and client secret. ArgSTRING
HIGH…viders/azure/services/postgresql/postgresql_service.py186Get the ``connection_throttle.enable`` setting for a flexible server. The ``connection_throttle.enable`` serverSTRING
HIGHprowler/providers/linode/linode_provider.py136Initialize Linode SDK client. Credentials can be provided as argument or read from environment variable: STRING
HIGHprowler/providers/linode/linode_provider.py173Validate the requested regions against the live Linode regions list. The ``/v4/regions`` endpoint is public, soSTRING
HIGHprowler/providers/linode/linode_provider.py216Fetch user and account metadata for Linode. The authenticated user's profile is retrieved first to validate theSTRING
HIGHprowler/providers/cloudflare/cloudflare_provider.py171Initialize Cloudflare SDK client. Credentials can be provided as arguments or read from environment variables: STRING
HIGHprowler/providers/cloudflare/cloudflare_provider.py249Fetch user and account metadata for Cloudflare. Args: session: The Cloudflare session. RetSTRING
HIGHprowler/providers/cloudflare/cloudflare_provider.py538Test connection to Cloudflare. Test the connection to Cloudflare using the provided credentials. Args:STRING
HIGHprowler/providers/gcp/gcp_provider.py94 GCP Provider constructor Args: retries_max_attempts: int -> The maximum number of retries STRING
HIGHprowler/providers/gcp/gcp_provider.py350 Setup the GCP session with the provided credentials file or service account to impersonate Args: STRING
HIGHprowler/providers/gcp/gcp_provider.py463 Test the connection to GCP with the provided credentials file or service account to impersonate. If theSTRING
HIGHprowler/providers/gcp/gcp_provider.py898 Validate the static arguments client_id, client_secret and refresh_token of ADC credentials Args: STRING
HIGHprowler/providers/gcp/gcp_provider.py927 Validate the provider ID given the credentials, checking if the provider ID matches with the expected project_iSTRING
HIGHprowler/providers/alibabacloud/alibabacloud_provider.py252 Set up the Alibaba Cloud session. Args: role_arn: ARN of the RAM role to assume STRING
HIGHprowler/providers/alibabacloud/alibabacloud_provider.py428 Validates the Alibaba Cloud credentials using STS GetCallerIdentity. Args: session: The AlSTRING
HIGHprowler/providers/alibabacloud/alibabacloud_provider.py723 Test the connection to Alibaba Cloud with the provided credentials. Args: access_key_id: ASTRING
HIGHprowler/providers/common/provider.py808Resolve the provider class for a name (built-in or entry-point). Does not call ``sys.exit`` and does not initiaSTRING
HIGHprowler/providers/iac/iac_provider.py604Test connection to IaC repository. Test the connection to the IaC repository using the provided credentials. STRING
HIGHprowler/providers/github/github_provider.py531 Validate that the provider ID (username or organization) is accessible with the given credentials. ArgSTRING
HIGHprowler/providers/github/github_provider.py617Test connection to GitHub. Test the connection to GitHub using the provided credentials. Args: STRING
HIGHprowler/providers/huaweicloud/models.py235 Create a service client for the given service and region. Args: service: The service name STRING
HIGHprowler/providers/huaweicloud/huaweicloud_provider.py336 Set up the Huawei Cloud session. Each argument falls back to its environment variable when not provideSTRING
HIGHprowler/providers/huaweicloud/huaweicloud_provider.py435 Assume a Huawei Cloud agency in the target account. Uses the base credentials to call CreateTemporaryASTRING
HIGHprowler/providers/huaweicloud/huaweicloud_provider.py559 Validates the Huawei Cloud credentials using IAM API. Args: session: The Huawei Cloud sessSTRING
HIGHprowler/providers/huaweicloud/huaweicloud_provider.py714 get_regions_to_audit returns the list of regions to audit. Args: regions: List of Huawei CSTRING
HIGHprowler/providers/m365/m365_provider.py136 Initializes the M365 provider. Args: tenant_id (str): The M365 Active Directory tenant ID.STRING
HIGHprowler/providers/m365/m365_provider.py495Returns the M365 credentials object. Set up the M365 session with the specified authentication method. STRING
HIGHprowler/providers/m365/m365_provider.py690Test connection to M365 tenant and PowerShell modules. Test the connection to an M365 tenant and PowerShell modSTRING
HIGHprowler/providers/m365/m365_provider.py1088 Validates the static credentials for the M365 provider. Args: tenant_id (str): The M365 AcSTRING
HIGHprowler/providers/m365/m365_provider.py1196 Verifies the M365 client credentials using the specified tenant ID, client ID, and client secret. ArgsSTRING
HIGHprowler/providers/scaleway/scaleway_provider.py123Initialize the Scaleway API session. Credentials can be provided as arguments (for API/SDK use) or read STRING
HIGHprowler/providers/stackit/services/iaas/iaas_service.py151 Centralized API call handler with authentication error detection. Args: api_function: The STRING
HIGHprowler/providers/aws/aws_provider.py598 set_identity sets the AWS provider identity information. Args: - caller_identity: The AWS STRING
HIGHprowler/providers/aws/aws_provider.py637 setup_session sets up an AWS session using the provided credentials. Args: - mfa: A booleaSTRING
63 more matches not shown…
Redundant / Tautological Comments325 hits · 485 pts
SeverityFileLineSnippetContext
LOWutil/compliance/compliance_mapper/compliance_mapper.py401 # Check if it's a model issueCOMMENT
LOWutil/prowler_check_kreator/prowler_check_kreator.py198 # Check if exits check.py, check_metadata.json or check_test.pyCOMMENT
LOWutil/prowler-bulk-provisioning/nuke_providers.py125 # Check if there's a next pageCOMMENT
LOWutil/prowler-bulk-provisioning/nuke_providers.py179 # Check if it's a task responseCOMMENT
LOWutil/prowler-bulk-provisioning/nuke_providers.py389 # Check if it was an async deletionCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py58 # Check if the key name suggests sensitive dataCOMMENT
LOW…hub/services/organization/organization_service_test.py458 # Check if Access denied message was logged (could be in warning or error calls)COMMENT
LOW…/github/services/repository/repository_service_test.py432 # Check if Access denied message was loggedCOMMENT
LOW…bility/s3_bucket_shadow_resource_vulnerability_test.py246 # Check if we found all expected shadow resourcesCOMMENT
LOWtests/providers/aws/services/ec2/ec2_service_test.py821 # Check if ENI was added to security groupCOMMENT
LOWtests/lib/utils/utils_test.py343 os.chmod(temp_file.name, 0o644) # Set permissions to 644 (-rw-r--r--)CODE
LOWtests/lib/utils/utils_test.py353 os.chmod(temp_file.name, 0o644) # Set permissions to 644 (-rw-r--r--)CODE
LOWtests/lib/check/check_test.py918 # Check if the checkID in the metadata.json of the checks is correctCOMMENT
LOWtests/lib/check/check_test.py928 # Check if the checkID in the metadata.json of the checks is correctCOMMENT
LOWtests/lib/check/check_test.py940 # Check if the checkID in the metadata.json of the checks is correctCOMMENT
LOWtests/lib/check/check_test.py950 # Check if the checkID in the metadata.json of the checks is correctCOMMENT
LOWtests/lib/outputs/outputs_test.py551 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py593 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py635 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py677 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py721 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py765 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py809 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py853 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py895 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py937 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py979 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py1021 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py1063 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py1105 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py1147 ) # Check if the list was sortedSTRING
LOWtests/lib/outputs/outputs_test.py1189 ) # Check if the list was sortedSTRING
LOWprowler/__main__.py528 # Check if there are any FAIL findingsCOMMENT
LOWprowler/__main__.py1393 # Check if -D was inputCOMMENT
LOWprowler/config/config.yaml510 # Set s3_bucket_object_public_enabled to True to opt in.COMMENT
LOWprowler/providers/openstack/models.py102 # Check if custom output filename was input, if not, set the defaultCOMMENT
LOWprowler/providers/openstack/lib/security_groups.py49 # Check if any of the target ports fall within the rule's rangeCOMMENT
LOWprowler/providers/openstack/lib/arguments/arguments.py96 # Check if clouds.yaml options are used with explicit credential parametersCOMMENT
LOW…rs/openstack/services/networking/networking_service.py76 # Check if this is a default security groupCOMMENT
LOW…/networking_security_group_allows_rdp_from_internet.py22 # Check if any rule allows RDP from 0.0.0.0/0 or ::/0COMMENT
LOW…ing_security_group_allows_all_ingress_from_internet.py34 # Check if from internet (0.0.0.0/0, ::/0, or None with no group)COMMENT
LOW…/networking_security_group_allows_ssh_from_internet.py22 # Check if any rule allows SSH from 0.0.0.0/0 or ::/0COMMENT
LOW…ublic_ip_exposed/compute_instance_public_ip_exposed.py38 # Check if IP is public and not already captured in SDK attributesCOMMENT
LOWprowler/providers/googleworkspace/models.py69 # Check if custom output filename was input, if not, set the defaultCOMMENT
LOW…/providers/googleworkspace/googleworkspace_provider.py205 # Check if delegated_user is provided (required for Domain-Wide Delegation)COMMENT
LOW…/providers/googleworkspace/googleworkspace_provider.py342 # Check if it's a permission/delegation errorCOMMENT
LOW…projects_auditing_enabled/projects_auditing_enabled.py34 # Check if audit configuration is enabledCOMMENT
LOWprowler/providers/oraclecloud/models.py81 # Check if custom output filename was input, if not, set the defaultCOMMENT
LOWprowler/providers/oraclecloud/oraclecloud_provider.py134 # Check if the configuration is scanning exactly one explicit region.COMMENT
LOWprowler/providers/oraclecloud/oraclecloud_provider.py391 # Check if config file existsCOMMENT
LOWprowler/providers/oraclecloud/oraclecloud_provider.py401 # Check if using security token authenticationCOMMENT
LOWprowler/providers/oraclecloud/oraclecloud_provider.py616 # Check if auditing specific region or allCOMMENT
LOWprowler/providers/oraclecloud/lib/mutelist/mutelist.py102 # Check if mutelist has Accounts/Tenancies sectionCOMMENT
LOWprowler/providers/oraclecloud/lib/mutelist/mutelist.py144 # Check if any tag matchesCOMMENT
LOW…owler/providers/oraclecloud/lib/arguments/arguments.py106 # Check if instance principal and config file/profile are used togetherCOMMENT
LOW…cted/database_autonomous_database_access_restricted.py23 # Check if database has no whitelisted IPs and no subnet (unrestricted public access)COMMENT
LOW…cted/database_autonomous_database_access_restricted.py27 # Check if database has whitelisted IPs containing 0.0.0.0/0COMMENT
LOW…ogging_enabled/objectstorage_bucket_logging_enabled.py25 # Check if there is a write-level log configured for this bucketCOMMENT
LOW…ssible/objectstorage_bucket_not_publicly_accessible.py30 # Check if bucket has public accessCOMMENT
LOW…ders/oraclecloud/services/identity/identity_service.py109 # Check if user can use API keysCOMMENT
265 more matches not shown…
Hallucination Indicators29 hits · 300 pts
SeverityFileLineSnippetContext
CRITICALtests/providers/azure/azure_provider_test.py7from azure.core.exceptions import HttpResponseErrorCODE
CRITICAL…s/azure/services/postgresql/postgresql_service_test.py4from azure.core.exceptions import HttpResponseError, ResourceNotFoundErrorCODE
CRITICALtests/providers/m365/m365_provider_test.py1240 from azure.core.exceptions import ClientAuthenticationErrorCODE
CRITICALprowler/providers/azure/azure_provider.py12from azure.core.exceptions import ClientAuthenticationError, HttpResponseErrorCODE
CRITICAL…viders/azure/services/postgresql/postgresql_service.py4from azure.core.exceptions import ResourceNotFoundErrorCODE
CRITICAL…/providers/azure/services/keyvault/keyvault_service.py6from azure.core.exceptions import HttpResponseErrorCODE
CRITICAL…er/providers/azure/services/network/network_service.py5from azure.core.exceptions import ResourceNotFoundErrorCODE
CRITICAL…/providers/azure/services/defender/defender_service.py5from azure.core.exceptions import ClientAuthenticationError, ResourceNotFoundErrorCODE
CRITICAL…ler/providers/cloudflare/services/zone/zone_service.py149 universal_ssl = self.client.ssl.universal.settings.get(zone_id=zone.id)CODE
CRITICALprowler/providers/m365/m365_provider.py9from azure.core.exceptions import ClientAuthenticationError, HttpResponseErrorCODE
CRITICAL…/services/defenderidentity/defenderidentity_service.py78 sensors_response = await self.client.security.identities.sensors.get()CODE
CRITICAL…/services/defenderidentity/defenderidentity_service.py137 await self.client.security.identities.sensors.with_url(CODE
CRITICAL…/services/defenderidentity/defenderidentity_service.py166 await self.client.security.identities.health_issues.get()CODE
CRITICAL…/services/defenderidentity/defenderidentity_service.py221 await self.client.security.identities.health_issues.with_url(CODE
CRITICAL…oviders/m365/services/sharepoint/sharepoint_service.py53 global_settings = await self.client.admin.sharepoint.settings.get()CODE
CRITICALprowler/providers/m365/services/entra/entra_service.py214 await self.client.identity.conditional_access.policies.get()CODE
CRITICALprowler/providers/m365/services/entra/entra_service.py603 self.client.identity.conditional_access.policies.to_get_request_information()CODE
CRITICALprowler/providers/m365/services/entra/entra_service.py1652 await self.client.role_management.directory.role_definitions.by_unified_role_definition_id(CODE
CRITICALprowler/providers/m365/services/entra/entra_service.py1324 await self.client.role_management.directory.role_assignments.get()STRING
CRITICALprowler/providers/m365/services/entra/entra_service.py1341 role_assignments_response = await self.client.role_management.directory.role_assignments.with_url(STRING
CRITICALapi/src/backend/api/models.py45from django.core.exceptions import ValidationErrorCODE
CRITICALapi/src/backend/api/validators.py7from django.core.exceptions import ValidationErrorCODE
CRITICALapi/src/backend/api/exceptions.py1from django.core.exceptions import ValidationError as django_validation_errorCODE
CRITICALapi/src/backend/api/rls.py5from django.core.exceptions import ValidationErrorCODE
CRITICALapi/src/backend/api/v1/serializers.py69from django.core.exceptions import ValidationError as DjangoValidationErrorCODE
CRITICALapi/src/backend/api/v1/views.py259from django.core.exceptions import ValidationError as DjangoValidationErrorCODE
CRITICALapi/src/backend/api/tests/test_validators.py8from django.core.exceptions import ValidationErrorCODE
CRITICALapi/src/backend/api/tests/test_models.py16from django.core.exceptions import ValidationErrorCODE
CRITICALskills/prowler-test-api/assets/api_test.py344 mock_conn.cursor.return_value.__enter__.return_value.execute.assert_called()CODE
Unused Imports197 hits · 164 pts
SeverityFileLineSnippetContext
LOWutil/prowler-bulk-provisioning/aws_org_generator.py15CODE
LOWutil/prowler-bulk-provisioning/nuke_providers.py26CODE
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py3CODE
LOWtests/providers/openstack/openstack_provider_test.py3CODE
LOW…ware_mfa_enabled/iam_root_hardware_mfa_enabled_test.py15CODE
LOW…/iam/iam_root_mfa_enabled/iam_root_mfa_enabled_test.py13CODE
LOW…_support_role_created/iam_support_role_created_test.py14CODE
LOW…ware_mfa_enabled/iam_user_hardware_mfa_enabled_test.py13CODE
LOW…alation/iam_policy_allows_privilege_escalation_test.py19CODE
LOW…sword_policy_number/iam_password_policy_number_test.py15CODE
LOW…ength_14/iam_password_policy_minimum_length_14_test.py15CODE
LOW…tive_access_key/iam_user_two_active_access_key_test.py13CODE
LOW…sword_policy_symbol/iam_password_policy_symbol_test.py15CODE
LOW…d_policy_reuse_24/iam_password_policy_reuse_24_test.py14CODE
LOW…ole_access/iam_user_mfa_enabled_console_access_test.py12CODE
LOW…policy_uppercase/iam_password_policy_uppercase_test.py14CODE
LOWprowler/config/config.py20CODE
LOW…nstack/services/objectstorage/objectstorage_service.py1CODE
LOW…penstack/services/blockstorage/blockstorage_service.py1CODE
LOW…rs/openstack/services/networking/networking_service.py1CODE
LOW…er/providers/openstack/services/image/image_service.py1CODE
LOW…roviders/openstack/services/compute/compute_service.py1CODE
LOWprowler/providers/e2enetworks/lib/api/client.py1CODE
LOWprowler/providers/image/image_provider.py1CODE
LOW…wler/providers/image/lib/registry/dockerhub_adapter.py3CODE
LOWprowler/providers/image/lib/registry/factory.py3CODE
LOWprowler/providers/image/lib/registry/oci_adapter.py3CODE
LOWprowler/providers/image/lib/registry/base.py3CODE
LOWprowler/providers/okta/lib/service/service.py10CODE
LOWprowler/providers/aws/services/acmpca/acmpca_service.py1CODE
LOWprowler/lib/outputs/compliance/compliance.py10CODE
LOW…r/lib/outputs/compliance/universal/universal_output.py17CODE
LOW…er/lib/outputs/compliance/universal/ocsf_compliance.py32CODE
LOWdocs/scripts/generate_provider_cards.py13CODE
LOWcontrib/inventory-graph/inventory_graph.py17CODE
LOWcontrib/inventory-graph/lib/inventory_output.py14CODE
LOWscripts/check_test_init_files.py4CODE
LOWapi/src/backend/tasks/jobs/attack_paths/__init__.py1CODE
LOWapi/src/backend/tasks/jobs/attack_paths/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py2CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py11CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py21CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py26CODE
137 more matches not shown…
Fake / Example Data143 hits · 158 pts
SeverityFileLineSnippetContext
LOW…ery-builder/_components/query-parameters-form.test.tsx120 "placeholder",CODE
LOW…/_components/config/lighthouse-v2-config-page.test.tsx279 "placeholder",CODE
LOW…/_components/config/lighthouse-v2-config-page.test.tsx285 "placeholder",CODE
LOW…/_components/config/lighthouse-v2-config-page.test.tsx289 "placeholder",CODE
LOW…/_components/config/lighthouse-v2-config-page.test.tsx305 expect(screen.getByLabelText("API key")).not.toHaveAttribute("placeholder");CODE
LOW…s/via-credentials/googleworkspace-credentials-form.tsx47 placeholder="admin@example.com"CODE
LOW…components/integrations/jira/jira-integration-form.tsx176 placeholder="user@example.com"CODE
LOW…components/users/profile/api-keys/table-cells.test.tsx27 userEmail: "user@example.com",CODE
LOW…components/users/table/data-table-row-actions.test.tsx39 name: "Jane Doe",CODE
LOWui/actions/auth/auth.test.ts53 name: "Jane Doe",CODE
LOWui/actions/auth/auth.test.ts85 name: "Jane Doe",CODE
LOW…bjectstorage_container_metadata_sensitive_data_test.py265 metadata={"api_key": "placeholder"},CODE
LOW…/blockstorage_snapshot_metadata_sensitive_data_test.py368 metadata={"api_key": "placeholder"},CODE
LOW…ta/blockstorage_volume_metadata_sensitive_data_test.py428 metadata={"api_key": "placeholder"},CODE
LOW…_data/compute_instance_metadata_sensitive_data_test.py608 metadata={"api_key": "placeholder"},CODE
LOW…_data/compute_instance_metadata_sensitive_data_test.py677 metadata={"api_key": "placeholder"},CODE
LOWtests/providers/azure/azure_provider_test.py261 token="fake_token", expires_on=9999999999CODE
LOWtests/providers/azure/azure_provider_test.py302 token="fake_token", expires_on=9999999999CODE
LOWtests/providers/azure/azure_provider_test.py1047 mock_post.return_value.json.return_value = {"access_token": "fake-token"}CODE
LOW…ional_email_configured_with_a_security_contact_test.py100 emails=["test@test.com"],CODE
LOWtests/providers/linode/linode_fixtures.py10EMAIL = "admin@example.com"CODE
LOW…s/administration/linode_administration_service_test.py10def _mock_user(username="admin", email="admin@example.com", tfa=True, restricted=False):CODE
LOW…s/administration/linode_administration_service_test.py45 _mock_user("admin", "admin@example.com", True, False),CODE
LOW…er_2fa_enabled/administration_user_2fa_enabled_test.py38 email="admin@example.com",CODE
LOWtests/providers/gcp/gcp_fixtures.py20 provider.session._service_account_email = "test@test.com"CODE
LOWtests/providers/gcp/gcp_fixtures.py1145 "principalEmail": "user@example.com",CODE
LOWtests/providers/m365/m365_provider_test.py260 token="fake_token", expires_on=9999999999CODE
LOWtests/providers/m365/lib/jwt/jwt_decoder_test.py15 "name": "John Doe",CODE
LOWtests/providers/m365/lib/jwt/jwt_decoder_test.py40 assert result["name"] == "John Doe"CODE
LOW…abled/defender_safe_attachments_policy_enabled_test.py140 users=["user@example.com"],CODE
LOW…abled/defender_safe_attachments_policy_enabled_test.py225 users=["user@example.com"],CODE
LOW…abled/defender_safe_attachments_policy_enabled_test.py304 users=["user@example.com"],CODE
LOW…abled/defender_safe_attachments_policy_enabled_test.py371 users=["user@example.com"],CODE
LOW…y_notifications_internal_users_malware_enabled_test.py37 internal_sender_admin_address="admin@example.com",CODE
LOW…y_notifications_internal_users_malware_enabled_test.py89 internal_sender_admin_address="admin@example.com",CODE
LOW…y_notifications_internal_users_malware_enabled_test.py97 internal_sender_admin_address="admin@example.com",CODE
LOW…y_notifications_internal_users_malware_enabled_test.py107 users=["user@example.com"],CODE
LOW…y_notifications_internal_users_malware_enabled_test.py169 internal_sender_admin_address="admin@example.com",CODE
LOW…y_notifications_internal_users_malware_enabled_test.py257 internal_sender_admin_address="admin@example.com",CODE
LOW…y_notifications_internal_users_malware_enabled_test.py267 users=["user@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py38 notify_limit_exceeded_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py39 notify_sender_blocked_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py92 notify_limit_exceeded_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py93 notify_sender_blocked_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py101 notify_limit_exceeded_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py102 notify_sender_blocked_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py178 notify_limit_exceeded_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py179 notify_sender_blocked_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py273 notify_limit_exceeded_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py274 notify_sender_blocked_addresses=["admin@example.com"],CODE
LOW…r_antispam_outbound_policy_forwarding_disabled_test.py422 users=["user@example.com"],CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py40 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py93 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py101 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py172 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py180 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py251 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py259 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py329 internal_sender_admin_address="admin@example.com",CODE
LOW…olicy_comprehensive_attachments_filter_applied_test.py382 internal_sender_admin_address="admin@example.com",CODE
83 more matches not shown…
Structural Annotation Overuse64 hits · 112 pts
SeverityFileLineSnippetContext
LOWui/components/integrations/s3/s3-integration-form.tsx145 : // Step 1: No required fields since role_arn and external_id are optionalCODE
LOWui/actions/users/tenants.ts362 // Step 1: Switch to the target tenant (current token is still valid)COMMENT
LOWui/actions/users/tenants.ts402 // Step 2: Delete the old tenant using the NEW tokenCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py828 # Step 1: Load compliance fileCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py834 # Step 2: Field selectionCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py838 # Step 3: Load Prowler checksCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py842 # Step 4: Add check codeCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py846 # Step 5: Process all requirementsCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py851 # Step 6: Generate output fileCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py183 # Step 1: Build provider creation payload (minimal)COMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py195 # Step 2: Build secret creation payload if credentials are providedCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py463 # Step 1: Create providerCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py479 # Step 2: Create secret if providedCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py501 # Step 3: Test connection if requestedCOMMENT
LOW…ds_instance_inside_vpc/rds_instance_inside_vpc_test.py44 # Step 1: Create the VPCCOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py76 # Step 1: Call the APICOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py98 # Step 2: Parse the responseCOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py163 # Step 1: Call the APICOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py187 # Step 2: Parse the responseCOMMENT
LOW…derxdr_endpoint_privileged_user_exposed_credentials.py38 # Step 1: Check MDE statusCOMMENT
LOW…derxdr_endpoint_privileged_user_exposed_credentials.py91 # Step 2: MDE is active with devices - check for exposed credentialsCOMMENT
LOWprowler/providers/aws/services/s3/s3_service.py642 # NOTE: This function is restricted to the us-west-2 region due to AWS limitations on Multi-Region Access PointsCOMMENT
LOWcontrib/k8s/helm/prowler-app/README.md40### Step 1: Create Required SecretsCOMMENT
LOWcontrib/k8s/helm/prowler-app/README.md97### Step 2: Configure ValuesCOMMENT
LOWcontrib/k8s/helm/prowler-app/README.md123### Step 3: Install the ChartCOMMENT
LOW.github/agents/issue-triage.md59### Step 1: Extract Structured FieldsCOMMENT
LOW.github/agents/issue-triage.md77### Step 2: Classify the IssueCOMMENT
LOW.github/agents/issue-triage.md90### Step 3: Search for Duplicates and Related IssuesCOMMENT
LOW.github/agents/issue-triage.md100### Step 4: InvestigateCOMMENT
LOW.github/agents/issue-triage.md135### Step 5: Root Cause and Issue SeverityCOMMENT
LOW.github/agents/issue-triage.md151### Step 6: Build the Coding Agent PlanCOMMENT
LOW.github/agents/issue-triage.md161### Step 7: Assess Complexity and Agent ReadinessCOMMENT
LOW.github/agents/issue-triage.md177### Step 8: Apply LabelsCOMMENT
LOW.github/scripts/slack-messages/README.md241# Step 1: Notify when push startsCOMMENT
LOW.github/scripts/slack-messages/README.md257# Step 2: Build and push containerCOMMENT
LOW.github/scripts/slack-messages/README.md265# Step 3: Determine push statusCOMMENT
LOW.github/scripts/slack-messages/README.md278# Step 4: Notify when push completes (success or failure)COMMENT
LOW.github/scripts/slack-messages/README.md302# Step 1: Send deployment start notificationCOMMENT
LOW.github/scripts/slack-messages/README.md322# Step 2: Run your deployment stepsCOMMENT
LOW.github/scripts/slack-messages/README.md331# Step 3: Determine status (calculated internally, not configured)COMMENT
LOW.github/scripts/slack-messages/README.md364# Step 4: Update the same Slack message (using calculated values)COMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py27# Step 1 - String / comment protectionCOMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py33# Step 2 - Clause splittingCOMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py105 # Step 1: Protect strings and comments (single pass, leftmost-first)COMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py114 # Step 2: Split by clause keywordsCOMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py135 # Step 5: Restore protected regionsCOMMENT
LOWskills/prowler-provider/assets/provider.py56 # Step 1: Setup session (authentication)COMMENT
LOWskills/prowler-provider/assets/provider.py60 # Step 2: Setup identity (who is authenticated)COMMENT
LOWskills/prowler-provider/assets/provider.py63 # Step 3: Load audit configCOMMENT
LOWskills/prowler-provider/assets/provider.py71 # Step 4: Load fixer configCOMMENT
LOWskills/prowler-provider/assets/provider.py74 # Step 5: Load mutelistCOMMENT
LOWskills/prowler-readme-table/SKILL.md23### Step 1: Collect Stats via CLICOMMENT
LOWskills/prowler-readme-table/SKILL.md44### Step 2: Batch ExtractionCOMMENT
LOWskills/prowler-readme-table/SKILL.md57### Step 3: Update the TableCOMMENT
LOWskills/prowler-changelog/SKILL.md118### Step 1: Determine Affected Component(s)COMMENT
LOWskills/prowler-changelog/SKILL.md133### Step 2: Create the fragment(s)COMMENT
LOWskills/prowler-changelog/SKILL.md139### Step 3: Check pending fragmentsCOMMENT
LOWskills/django-migration-psql/SKILL.md134### Step 1: create indexes on actual partitionsCOMMENT
LOWskills/django-migration-psql/SKILL.md171### Step 2: register the index with DjangoCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py240 # Step 1: Check if provider already existsCOMMENT
4 more matches not shown…
Cross-Language Confusion17 hits · 108 pts
SeverityFileLineSnippetContext
HIGH…/providers/m365/lib/powershell/m365_powershell_test.py217 tenant_id="def-456 && whoami",CODE
HIGHtests/contrib/wazuh/prowler_wrapper_security_test.py100 malicious_profile = f"test && touch {test_file}"CODE
HIGHtests/lib/outputs/html/html_test.py618 tagStack.push(tagName);CODE
HIGHprowler/lib/outputs/html/html.py379 tagStack.push(tagName);CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py388buildGraph(null);CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py391sel.addEventListener("change", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py391sel.addEventListener("change", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py394document.getElementById("link-distance").addEventListener("input", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py394document.getElementById("link-distance").addEventListener("input", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py395document.getElementById("charge-strength").addEventListener("input", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py395document.getElementById("charge-strength").addEventListener("input", () => buildGraph(sel.value || null));CODE
HIGHcontrib/inventory-graph/lib/inventory_output.py337 d.fx = null; d.fy = null;CODE
HIGHapi/src/backend/tasks/tests/test_orphan_recovery.py42 assert decode_celery_field('{"enabled": true, "scan_id": null}', {}) == {CODE
HIGHapi/src/backend/api/filters.py386 included. Providers with no connection attempt (status is null) areCODE
HIGHapi/src/backend/api/tests/test_cypher_sanitizer.py409 "CALL apoc.load.csvParams('http://evil.com/', {}, null) YIELD list RETURN list",CODE
HIGH…rver/prowler_mcp_server/prowler_app/tools/providers.py70 - Connection status: Connected (true), Failed (false), Not Tested (null)STRING
HIGH…/prowler_mcp_server/prowler_app/models/integrations.py212 f"must be a boolean or null, got {unexpected!r}."CODE
Over-Commented Block106 hits · 99 pts
SeverityFileLineSnippetContext
LOW.pre-commit-config.yaml1# Priority tiers (lower = runs first, same priority = concurrent):COMMENT
LOWui/vitest.integration.setup.ts1// Global stylesheet (Tailwind + design tokens) is imported by the Next.jsCOMMENT
LOWui/pnpm-workspace.yaml41 # GHSA-96hv-2xvq-fx4p (memory exhaustion DoS from tiny fragments, high) +COMMENT
LOWui/pnpm-workspace.yaml61 "minimatch@>=10": "10.2.3"COMMENT
LOWui/pnpm-workspace.yaml81minimumReleaseAge: 1440COMMENT
LOWui/pnpm-workspace.yaml101 # msw: Copies mockServiceWorker.js into the directories listed in package.json's `msw.workerDirectory` (here: `public/COMMENT
LOW…/query-builder/_components/graph/attack-path-graph.tsx261 // once React Flow has applied the new layout (next animation frame).COMMENT
LOWui/app/(prowler)/lighthouse/_lib/stream-url.ts1// Same-origin path for the Lighthouse v2 SSE proxy route handler.COMMENT
LOWui/components/icons/compliance/IconCompliance.tsx21import OktaLogo from "./okta.svg";COMMENT
LOWui/actions/mute-rules/mute-rules.ts401// Note: Unmute functionality is not currently supported by the API.COMMENT
LOWui/lib/integrations.ts1import { readBoolEnv, readEnv } from "@/lib/runtime-env";COMMENT
LOWui/lib/compliance/asd-essential-eight.tsx61 // normalize to "1. Patch applications" so the leading clause number readsCOMMENT
LOWtests/providers/azure/services/app/app_service_test.py21# auth_enabled=True,COMMENT
LOWtests/providers/azure/services/app/app_service_test.py41# category="AppServiceAuditLogs",COMMENT
LOW…iders/azure/services/keyvault/keyvault_service_test.py21# id="id",COMMENT
LOW…iders/azure/services/keyvault/keyvault_service_test.py41# location="location",COMMENT
LOW…/iam_inline_policy_allows_privilege_escalation_test.py21 # def test_iam_inline_policy_allows_privilege_escalation_sts(self):COMMENT
LOW…/iam_inline_policy_allows_privilege_escalation_test.py41 # "prowler.providers.common.provider.Provider.get_global_provider",COMMENT
LOW…alation/iam_policy_allows_privilege_escalation_test.py21 AWS_ACCOUNT_NUMBER,COMMENT
LOW…alation/iam_policy_allows_privilege_escalation_test.py41 # with mock.patch(COMMENT
LOWtests/providers/aws/services/acm/acm_service_test.py121 # Test ACM SessionCOMMENT
LOW…s/providers/aws/services/athena/athena_service_test.py81 default_workgroup_name = "primary"COMMENT
LOWtests/lib/check/check_test.py701 }COMMENT
LOWtests/lib/check/check_test.py721 # with mock.patch(COMMENT
LOWtests/lib/check/check_test.py741 # "iam_avoid_root_usage",COMMENT
LOWtests/lib/check/check_test.py761 # "expected": set(),COMMENT
LOWprowler/config/config.yaml1# AWS ConfigurationCOMMENT
LOWprowler/config/config.yaml21 max_ebs_snapshots: nullCOMMENT
LOWprowler/config/config.yaml41 # "*":COMMENT
LOWprowler/config/config.yaml101 # AWS VPC Configuration (vpc_endpoint_connections_trust_boundaries, vpc_endpoint_services_allowed_principals_trust_bouCOMMENT
LOWprowler/config/config.yaml161 ]COMMENT
LOWprowler/config/config.yaml401 # AWS ELB ConfigurationCOMMENT
LOWprowler/config/config.yaml461 # Minimum number of days that a Redis cluster must have backups retention periodCOMMENT
LOWprowler/config/config.yaml481 # as possible; this is not recommended unless you have confirmed the matchedCOMMENT
LOWprowler/config/config.yaml501 # AWS Kinesis ConfigurationCOMMENT
LOWprowler/config/config.yaml621 mig_min_zones: 2COMMENT
LOWprowler/config/config.yaml721 stable_branches:COMMENT
LOWprowler/config/config.yaml761 # Maximum acceptable Okta Admin Console app idle timeout, in minutes.COMMENT
LOWprowler/config/config.yaml781 # limits per endpoint, so this is a deliberately simple global cap; lower it ifCOMMENT
LOWprowler/config/config.yaml801 # before being flagged. Defaults to 7.COMMENT
LOWprowler/providers/m365/services/entra/entra_service.py1261 sp_response = await self.client.service_principals.with_url(COMMENT
LOW…roviders/okta/services/network/network_zone_service.py61 all_zones, err = await _paginate_shared(COMMENT
LOWprowler/providers/aws/aws_provider.py321COMMENT
LOW…r/providers/aws/lib/quick_inventory/quick_inventory.py141 # "IAM":COMMENT
LOW…providers/aws/services/iam/lib/privilege_escalation.py1from py_iam_expand.actions import expand_actionsCOMMENT
LOWprowler/lib/check/external_tool_providers.py1# Providers that delegate scanning to an external tool (e.g. Trivy, promptfoo)COMMENT
LOWprowler/lib/check/utils.py61 # Built-in checks from prowler.providers.{provider}.services. GateCOMMENT
LOWprowler/lib/outputs/compliance/cis/models.py321COMMENT
LOWprowler/lib/outputs/compliance/cis/models.py341# Location: strCOMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml61 podAnnotations: {}COMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml101 # hosts:COMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml221COMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml261 # hosts:COMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml361 # For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/COMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml461 # Annotations to add to the service accountCOMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml481 # readOnlyRootFilesystem: trueCOMMENT
LOWcontrib/k8s/helm/prowler-app/values.yaml521 # If enabled, it will create a Secret with the credentials.COMMENT
LOWcontrib/k8s/helm/prowler-cli/Chart.yaml1apiVersion: v2COMMENT
LOWcontrib/k8s/helm/prowler-cli/Chart.yaml21# incremented each time you make changes to the application. Versions are not expected toCOMMENT
LOWcontrib/k8s/helm/prowler-api/Chart.yaml1apiVersion: v2COMMENT
46 more matches not shown…
Verbosity Indicators35 hits · 68 pts
SeverityFileLineSnippetContext
LOWui/components/integrations/s3/s3-integration-form.tsx145 : // Step 1: No required fields since role_arn and external_id are optionalCODE
LOWui/actions/users/tenants.ts362 // Step 1: Switch to the target tenant (current token is still valid)COMMENT
LOWui/actions/users/tenants.ts402 // Step 2: Delete the old tenant using the NEW tokenCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py828 # Step 1: Load compliance fileCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py834 # Step 2: Field selectionCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py838 # Step 3: Load Prowler checksCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py842 # Step 4: Add check codeCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py846 # Step 5: Process all requirementsCOMMENT
LOWutil/compliance/compliance_mapper/compliance_mapper.py851 # Step 6: Generate output fileCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py183 # Step 1: Build provider creation payload (minimal)COMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py195 # Step 2: Build secret creation payload if credentials are providedCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py463 # Step 1: Create providerCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py479 # Step 2: Create secret if providedCOMMENT
LOW…prowler-bulk-provisioning/prowler_bulk_provisioning.py501 # Step 3: Test connection if requestedCOMMENT
LOW…ds_instance_inside_vpc/rds_instance_inside_vpc_test.py44 # Step 1: Create the VPCCOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py76 # Step 1: Call the APICOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py98 # Step 2: Parse the responseCOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py163 # Step 1: Call the APICOMMENT
LOW…/services/defenderidentity/defenderidentity_service.py187 # Step 2: Parse the responseCOMMENT
LOW…derxdr_endpoint_privileged_user_exposed_credentials.py38 # Step 1: Check MDE statusCOMMENT
LOW…derxdr_endpoint_privileged_user_exposed_credentials.py91 # Step 2: MDE is active with devices - check for exposed credentialsCOMMENT
LOWapi/src/backend/api/v1/mixins.py299 # Add kwargs filters - we need to check if the task kwargs contain our parametersCOMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py105 # Step 1: Protect strings and comments (single pass, leftmost-first)COMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py114 # Step 2: Split by clause keywordsCOMMENT
LOWapi/src/backend/api/attack_paths/cypher_sanitizer.py135 # Step 5: Restore protected regionsCOMMENT
LOWskills/prowler-provider/assets/provider.py56 # Step 1: Setup session (authentication)COMMENT
LOWskills/prowler-provider/assets/provider.py60 # Step 2: Setup identity (who is authenticated)COMMENT
LOWskills/prowler-provider/assets/provider.py63 # Step 3: Load audit configCOMMENT
LOWskills/prowler-provider/assets/provider.py71 # Step 4: Load fixer configCOMMENT
LOWskills/prowler-provider/assets/provider.py74 # Step 5: Load mutelistCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py240 # Step 1: Check if provider already existsCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py243 # Step 2: Create or update providerCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py251 # Step 3: Handle credentials if provided and capture secret responseCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py258 # Step 4: Test connectionCOMMENT
LOW…rver/prowler_mcp_server/prowler_app/tools/providers.py261 # Step 5: Get final provider state with relationshipsCOMMENT
AI Structural Patterns66 hits · 58 pts
SeverityFileLineSnippetContext
LOW…linode/services/compute/linode_compute_service_test.py10CODE
LOW…cy_corporate_device_sign_in_frequency_enforced_test.py24CODE
LOW…intune_enrollment_sign_in_frequency_every_time_test.py26CODE
LOW…al_access_policy_mdm_compliant_device_required_test.py29CODE
LOW…ra_conditional_access_policy_no_exclusion_gaps_test.py26CODE
LOW…nal_access_policy_no_deleted_object_references_test.py19CODE
LOW…rs/okta/services/network_zone/network_zone_fixtures.py20CODE
LOW…/okta/services/application/application_service_test.py44CODE
LOW…ders/okta/services/application/application_fixtures.py55CODE
LOW…/okta/services/authenticator/authenticator_fixtures.py26CODE
LOWtests/providers/aws/utils.py97CODE
LOWprowler/providers/openstack/openstack_provider.py54CODE
LOWprowler/providers/openstack/openstack_provider.py159CODE
LOWprowler/providers/openstack/openstack_provider.py540CODE
LOW…/providers/googleworkspace/googleworkspace_provider.py76CODE
LOWprowler/providers/mongodbatlas/mongodbatlas_provider.py46CODE
LOWprowler/providers/e2enetworks/e2enetworks_provider.py38CODE
LOWprowler/providers/oraclecloud/oraclecloud_provider.py74CODE
LOWprowler/providers/oraclecloud/oraclecloud_provider.py278CODE
LOWprowler/providers/oraclecloud/oraclecloud_provider.py841CODE
LOWprowler/providers/vercel/vercel_provider.py45CODE
LOWprowler/providers/azure/azure_provider.py112CODE
LOWprowler/providers/azure/azure_provider.py625CODE
LOWprowler/providers/cloudflare/cloudflare_provider.py59CODE
LOWprowler/providers/gcp/gcp_provider.py74CODE
LOWprowler/providers/gcp/gcp_provider.py453CODE
LOWprowler/providers/alibabacloud/alibabacloud_provider.py66CODE
LOWprowler/providers/alibabacloud/alibabacloud_provider.py242CODE
LOWprowler/providers/alibabacloud/alibabacloud_provider.py711CODE
LOWprowler/providers/image/image_provider.py70CODE
LOWprowler/providers/iac/iac_provider.py34CODE
LOWprowler/providers/github/github_provider.py106CODE
LOWprowler/providers/huaweicloud/huaweicloud_provider.py67CODE
LOWprowler/providers/huaweicloud/huaweicloud_provider.py326CODE
LOWprowler/providers/m365/m365_provider.py115CODE
LOWprowler/providers/m365/m365_provider.py676CODE
LOWprowler/providers/okta/okta_provider.py95CODE
LOWprowler/providers/scaleway/scaleway_provider.py46CODE
LOWprowler/providers/stackit/stackit_provider.py92CODE
LOWprowler/providers/aws/aws_provider.py105CODE
LOWprowler/providers/aws/aws_provider.py1353CODE
LOWprowler/providers/aws/lib/s3/s3.py74CODE
LOWprowler/providers/aws/lib/s3/s3.py262CODE
LOWprowler/providers/aws/lib/security_hub/security_hub.py92CODE
LOWprowler/providers/aws/lib/security_hub/security_hub.py465CODE
LOWprowler/providers/aws/lib/session/aws_set_up_session.py32CODE
LOWprowler/providers/kubernetes/kubernetes_provider.py70CODE
LOWprowler/lib/scan/scan.py48CODE
LOWprowler/lib/check/checks_loader.py13CODE
LOWprowler/lib/outputs/jira/jira.py1268CODE
LOWprowler/lib/outputs/jira/jira.py1965CODE
LOWprowler/lib/outputs/jira/jira.py2370CODE
LOWapi/src/backend/tasks/jobs/threatscore_utils.py357CODE
LOWapi/src/backend/tasks/jobs/report.py651CODE
LOWapi/src/backend/tasks/jobs/reports/charts.py69CODE
LOWapi/src/backend/tasks/jobs/reports/charts.py152CODE
LOWapi/src/backend/tasks/jobs/reports/charts.py239CODE
LOWapi/src/backend/tasks/jobs/reports/charts.py366CODE
LOWskills/prowler-provider/assets/provider.py36CODE
LOW…erver/prowler_mcp_server/prowler_app/tools/findings.py28CODE
6 more matches not shown…
Modern AI Meta-Vocabulary19 hits · 51 pts
SeverityFileLineSnippetContext
MEDIUMui/tests/scans/scans.spec.ts6// Scans E2E suite scaffoldCOMMENT
MEDIUMui/components/side-panel/global-side-panel.test.tsx403 // Given: the user is on the agentic chat page with the panel openCOMMENT
MEDIUM…uts/compliance/config_status_renderer_coverage_test.py22# Base/dispatch modules that orchestrate renderers but never emit a status row.COMMENT
MEDIUM…ance/aws_well_architected/aws_well_architected_test.py179 expected_csv = f"PROVIDER;DESCRIPTION;ACCOUNTID;REGION;ASSESSMENTDATE;REQUIREMENTS_ID;REQUIREMENTS_DESCRIPTION;RCODE
MEDIUM…ance/aws_well_architected/aws_well_architected_test.py179 expected_csv = f"PROVIDER;DESCRIPTION;ACCOUNTID;REGION;ASSESSMENTDATE;REQUIREMENTS_ID;REQUIREMENTS_DESCRIPTION;RCODE
MEDIUM…k_guardrail_prompt_attack_filter_enabled.metadata.json22 "https://support.icompaas.com/support/solutions/articles/62000233535-ensure-prompt-attack-filter-is-configured-at-hiCODE
MEDIUM…k_guardrail_prompt_attack_filter_enabled.metadata.json23 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html"CODE
MEDIUM…_enabled/bedrock_agent_guardrail_enabled.metadata.json19 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-create.html",CODE
MEDIUM…_enabled/bedrock_agent_guardrail_enabled.metadata.json21 "https://www.trendmicro.com/trendaivisiononecloudriskmanagement/knowledge-base/aws/Bedrock/protect-agent-sessions-wiCODE
MEDIUM…_enabled/bedrock_agent_guardrail_enabled.metadata.json22 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html"CODE
MEDIUM…configured/bedrock_guardrails_configured.metadata.json19 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html",CODE
MEDIUM…configured/bedrock_guardrails_configured.metadata.json20 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-create.html"CODE
MEDIUM…ail_sensitive_information_filter_enabled.metadata.json21 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-sensitive-filters.html",CODE
MEDIUM…ail_sensitive_information_filter_enabled.metadata.json22 "https://www.trendmicro.com/trendaivisiononecloudriskmanagement/knowledge-base/aws/Bedrock/guardrails-with-pii-mask-CODE
MEDIUM…ail_sensitive_information_filter_enabled.metadata.json23 "https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html"CODE
MEDIUM…providers/aws/services/iam/lib/privilege_escalation.py313 # reads the execution role credentials from MMDS, bypassing the agent and guardrails.COMMENT
MEDIUMskills/README.md3This directory contains **Agent Skills** following the [Agent Skills open standard](https://agentskills.io). Skills provCODE
MEDIUMskills/prowler-compliance/SKILL.md1085# Requirements with config guardrails (empty arrays are truthy in jq — check length)COMMENT
MEDIUMmcp_server/AGENTS.md73├── server.py # Main orchestrationCODE
AI Slop Vocabulary22 hits · 40 pts
SeverityFileLineSnippetContext
MEDIUM…ra_conditional_access_policy_no_exclusion_gaps_test.py423 # user-1 is covered, so it must not appear as a gap (whitespace-robust).COMMENT
MEDIUM…ance/aws_well_architected/aws_well_architected_test.py179 expected_csv = f"PROVIDER;DESCRIPTION;ACCOUNTID;REGION;ASSESSMENTDATE;REQUIREMENTS_ID;REQUIREMENTS_DESCRIPTION;RCODE
MEDIUM…ge_enabled/gmail_comprehensive_mail_storage_enabled.py8 """Check that comprehensive mail storage is enabled.STRING
MEDIUM…s/zone/zone_waf_enabled/zone_waf_enabled.metadata.json23 "Terraform": "```hcl\n# Enable WAF managed rulesets for comprehensive protection\nresource \"cloudflare_ruleset\" CODE
MEDIUM…wler/providers/aws/services/ec2/lib/security_groups.py75 # Combine IPv4 and IPv6 ranges to facilitate a single check loop.COMMENT
MEDIUMprowler/compliance/azure/cis_6.0_azure.json129 "AuditProcedure": "Azure Databricks administrators can monitor and revoke personal access tokens within their CODE
MEDIUMprowler/compliance/azure/cis_4.0_azure.json986 "AuditProcedure": "Azure Databricks administrators can monitor and revoke personal access tokens within their CODE
MEDIUMprowler/compliance/azure/cis_5.0_azure.json129 "AuditProcedure": "Azure Databricks administrators can monitor and revoke personal access tokens within their CODE
MEDIUMprowler/compliance/m365/cis_7.0_m365.json586 "AuditProcedure": "For this control, a Level 2 comprehensive attachment policy is defined as one that includesCODE
LOWprowler/lib/outputs/compliance/compliance_output.py45 # Compliance reports are always CSV, so just use the last suffixCOMMENT
LOWapi/src/backend/tasks/jobs/scan.py2680 # scan just set. Skip and let the newer scan's reset task do the work; ifSTRING
MEDIUM…/prowler-compliance/assets/audit_framework_template.py57# for a comprehensive mapping cheat sheet built from a 172-AR CCC audit.COMMENT
MEDIUM…_server/prowler_mcp_server/prowler_app/tools/muting.py289 """Retrieve comprehensive details about a specific mute rule by its ID.STRING
LOW…_server/prowler_mcp_server/prowler_app/tools/muting.py418 # No updates provided, just return current stateCOMMENT
MEDIUM…erver/prowler_mcp_server/prowler_app/tools/findings.py187 """Retrieve comprehensive details about a specific security finding by its ID.STRING
MEDIUM…erver/prowler_mcp_server/prowler_app/tools/findings.py224 # Return comprehensive fields including temporal metadataCOMMENT
MEDIUM…p_server/prowler_mcp_server/prowler_app/tools/scans.py134 """Retrieve comprehensive details about a specific scan by its ID.STRING
MEDIUM…rver/prowler_mcp_server/prowler_app/tools/resources.py183 """Retrieve comprehensive details about a specific resource by its ID.STRING
MEDIUM…rver/prowler_mcp_server/prowler_app/models/findings.py160 """Detailed security finding with comprehensive information for deep analysis.STRING
MEDIUM…ver/prowler_mcp_server/prowler_app/models/resources.py47 """Detailed resource with comprehensive information for deep analysis.STRING
MEDIUMmcp_server/prowler_mcp_server/prowler_hub/server.py215 """Retrieve comprehensive details about a specific security check by its ID.STRING
MEDIUMmcp_server/prowler_mcp_server/prowler_hub/server.py575 """Retrieve comprehensive details about a specific compliance framework by its ID.STRING
Modern Structural Boilerplate21 hits · 22 pts
SeverityFileLineSnippetContext
LOW…ler/providers/alibabacloud/services/rds/rds_service.py26 def _set_region_id(request, regional_client) -> None:CODE
LOWprowler/providers/common/provider.py321 def set_global_provider(global_provider: "Provider") -> None:CODE
LOW…roviders/okta/services/network/network_zone_service.py42 def _set_retrieval_error(self, message: str) -> None:CODE
LOWcontrib/aws/simulate_policy/simulate_policy_service.py11logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/tasks/jobs/attack_paths/__init__.py4__all__ = [CODE
LOWapi/src/backend/tasks/jobs/reports/__init__.py104__all__ = [CODE
LOWapi/src/backend/api/compliance.py11logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/api/health.py32logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/api/authentication.py19logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/api/sse/__init__.py13__all__ = ["BaseSSEViewSet", "make_channel_name"]CODE
LOWapi/src/backend/api/attack_paths/__init__.py8__all__ = [CODE
LOWapi/src/backend/api/attack_paths/retryable_session.py10logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/api/attack_paths/ingest/__init__.py19__all__ = [CODE
LOWapi/src/backend/api/attack_paths/queries/__init__.py10__all__ = [CODE
LOWapi/src/backend/api/attack_paths/sink/neo4j.py31logger = logging.getLogger(__name__)CODE
LOWapi/src/backend/api/attack_paths/sink/__init__.py21__all__ = [CODE
LOWapi/src/backend/api/attack_paths/sink/neptune.py45logger = logging.getLogger(__name__)CODE
LOWmcp_server/prowler_mcp_server/__init__.py12__all__ = ["__version__", "__author__", "__email__"]CODE
LOW…rver/prowler_mcp_server/prowler_app/models/__init__.py19__all__ = [CODE
LOWmcp_server/prowler_mcp_server/lib/__init__.py3__all__ = ["logger"]CODE
LOWmcp_server/prowler_mcp_server/prowler_hub/__init__.py3__all__ = ["prowler_hub_mcp"]CODE
Example Usage Blocks4 hits · 6 pts
SeverityFileLineSnippetContext
LOWcontrib/reverse-proxy/docker-compose.reverse-proxy.yml6# Usage:COMMENT
LOW.github/scripts/osv-scan.sh24# Usage:COMMENT
LOWskills/setup.sh9# Usage:COMMENT
LOWskills/prowler-compliance/assets/configs/ccc.yaml3# Usage:COMMENT
Magic Placeholder Names1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHutil/compliance/compliance_mapper/README.md121 export OPENAI_API_KEY="your-api-key-here"CODE
Dead Code1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMapi/src/backend/tasks/tests/test_attack_paths_scan.py1800CODE
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWui/public/mockServiceWorker.js129async function handleRequest(event, requestId, requestInterceptedAt) {CODE