Home / pulumi / examples
AI Slop Code RIsk Monitor

pulumi/examples

Infrastructure, containers, and serverless apps to AWS, Azure, GCP, and Kubernetes... all deployed with Pulumi

8.1 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for pulumi/examples, a TypeScript project with 2,585 GitHub stars. SynthScan examined 124,561 lines of code across 2243 source files, recording 370 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 8.1 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

8.1
Adjusted Signal
8.1
Raw Pattern Score
100%
Time Factor
2026-10-05
Last Push
2.6K
Stars
TypeScript
Language
124.6K
Lines of Code
2.2K
Files
370
Pattern Hits
2026-10-12
Scan Date
0.02
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 22.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 273 finding(s).

Hallucinated Dependency & Supply Chain Risk 11.0/100 · LOW

Are imports declared and package/API names verified? 79 finding(s).

Agent Over-Engineering Ratio 4.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 45 finding(s).

PR Review Velocity Impact 32.1/100 · MEDIUM

Which changes need focused human review? 370 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 7HIGH 43MEDIUM 158LOW 162

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 370 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Self-Referential Comments149 hits · 474 pts
SeverityFileLineSnippetContext
MEDIUMaws-apigateway-py-routes/__main__.py9# Create a Cognito User Pool of authorized usersCOMMENT
MEDIUMaws-apigateway-py-routes/__main__.py17# Define an endpoint that invokes a lambda to handle requestsCOMMENT
MEDIUMaws-apigateway-py-routes/__main__.py48 # Define an authorizer which uses Cognito to validate the token from the Authorization headerCOMMENT
MEDIUMaws-apigateway-py-routes/__main__.py108# Create an API key to manage usageCOMMENT
MEDIUMaws-apigateway-py-routes/lambdas.py39# Create a Lambda function to validate request authorizationCOMMENT
MEDIUMaws-apigateway-py-routes/lambdas.py52# Create a Lambda function to respond to HTTP requestsCOMMENT
MEDIUMclassic-azure-py-arm-template/__main__.py8# Create a resource group to deploy all ARM template resources into.COMMENT
MEDIUMclassic-azure-py-arm-template/__main__.py71# Create an ARM template deployment using the ordinary JSON ARM template as specified above. This could be read from disCOMMENT
MEDIUM⚡aws-py-apigatewayv2-eventbridge/__main__.py7# Create an HTTP API.COMMENT
MEDIUM⚡aws-py-apigatewayv2-eventbridge/__main__.py10# Create a stage and set it to deploy automatically.COMMENT
MEDIUM⚡aws-py-apigatewayv2-eventbridge/__main__.py13# Create an event bus.COMMENT
MEDIUM⚡aws-py-apigatewayv2-eventbridge/__main__.py16# Create an event rule to watch for events.COMMENT
MEDIUM⚡aws-py-apigatewayv2-eventbridge/__main__.py23# Define a policy granting API Gateway permission to publish to EventBridge.COMMENT
MEDIUMaws-py-apigatewayv2-eventbridge/__main__.py45# Create an API Gateway integration to forward requests to EventBridge.COMMENT
MEDIUMaws-py-apigatewayv2-eventbridge/__main__.py73# Define a role and policy allowing Lambda functions to log to CloudWatch.COMMENT
MEDIUMaws-py-apigatewayv2-eventbridge/__main__.py110# Create a Lambda function handler.COMMENT
MEDIUMaws-py-apigatewayv2-eventbridge/__main__.py119# Create an EventBridge target associating the event rule with the function.COMMENT
MEDIUMazure-yaml-aks-managed-identity/Pulumi.yaml14 # Create a private key for ssh accessCOMMENT
MEDIUMazure-yaml-aks-managed-identity/Pulumi.yaml21 # Create an Azure Resource GroupCOMMENT
MEDIUMazure-yaml-aks-managed-identity/Pulumi.yaml41 # Create an AKS ClusterCOMMENT
MEDIUMaws-py-wordpress-fargate-rds/frontend.py37 # Create an ECS cluster to run a container-based service.COMMENT
MEDIUMaws-py-wordpress-fargate-rds/frontend.py40 # Create a load balancer to listen for HTTP traffic on port 80.COMMENT
MEDIUMaws-py-wordpress-fargate-rds/frontend.py77 # Create an IAM role that can be used by our service's task.COMMENT
MEDIUMaws-py-wordpress-fargate-rds/__main__.py32# Create an AWS VPC and subnets, etcCOMMENT
MEDIUMaws-py-wordpress-fargate-rds/__main__.py38# Create a backend DB instanceCOMMENT
MEDIUM…vpc-with-ecs-fargate-py/ecs-fargate-python/__main__.py105# Create an ECS cluster to run a container-based service.COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py21# Create a resource group.COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py26# Create a virtual network.COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py51# Create a public IP address for the VM.COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py135# Create a security group allowing inbound access over port 80 (for HTTP).COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py154# Create a network interface with the virtual network, IP address, and security groupCOMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py177# Define a script to be run when the VM starts up.COMMENT
MEDIUMazure-py-loadbalancer-vm/__main__.py183# Create the virtual machine.COMMENT
MEDIUMazure-py-minecraft-server/__main__.py29# Create a resource group to hold project resources.COMMENT
MEDIUMazure-py-minecraft-server/__main__.py32# Create a virtual network resource.COMMENT
MEDIUMazure-py-minecraft-server/__main__.py47# Create a public IP to enable access on the Internet.COMMENT
MEDIUMazure-py-minecraft-server/__main__.py54# Create the network interface for the server.COMMENT
MEDIUMazure-py-minecraft-server/__main__.py71# Create the virtual machine.COMMENT
MEDIUMazure-py-aks/__main__.py16# Create an AD service principalCOMMENT
MEDIUMazure-py-aks/__main__.py20# Create the Service Principal PasswordCOMMENT
MEDIUMaws-hcl-s3-folder/main.tf7# Create a bucket and expose a website index document.COMMENT
MEDIUMaws-py-static-website/__main__.py75# Create an S3 bucket configured as a website bucket.COMMENT
MEDIUMaws-py-static-website/__main__.py143 # Create a validation record to prove that we own the domain.COMMENT
MEDIUMaws-py-static-website/__main__.py153 # Create a special resource to await complete validation of the cert.COMMENT
MEDIUMaws-py-static-website/__main__.py164# Create a logs bucket for the CloudFront logsCOMMENT
MEDIUMaws-py-static-website/__main__.py168# Create the CloudFront distributionCOMMENT
MEDIUM⚡libvirt-py-vm/__main__.py25### Create a KVM hostCOMMENT
MEDIUM⚡libvirt-py-vm/__main__.py29# Create a provider using the connection URI returned by the KVM host componentCOMMENT
MEDIUM⚡libvirt-py-vm/__main__.py32# Create a storage pool for the KVM VM that is going to be launched.COMMENT
MEDIUM⚡libvirt-py-vm/__main__.py40# Create a small linux volume that contains a tiny (and thus fast to download) linux.COMMENT
MEDIUM⚡libvirt-py-vm/__main__.py50# Create a VM using the volume created above.COMMENT
MEDIUMaws-ts-eks-distro/eksdistro/kops.sh11# Create a unique s3 bucket name, or use an existing S3_BUCKET environment variableCOMMENT
MEDIUMaws-ts-eks-distro/eksdistro/kops.sh21# Create the bucket if it doesn't existCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py18# Creating a VPC and a public subnetCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py28# Creating a gateway to the web for the VPCCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py48# Creating a Security Group that restricts incoming traffic to HTTPCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py71# Creating an RDS instance requires having two subnetsCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py98# Creating a Pulumi MySQL provider to allow us to interact with the RDS instanceCOMMENT
MEDIUMaws-py-dynamicresource/__main__.py113# Creating a user which will be used to manage MySQL tablesCOMMENT
MEDIUMyaml-math-and-objects/Pulumi.yaml101 # Creating a RandomString resource (https://www.pulumi.com/registry/packages/random/api-docs/randomstring/)COMMENT
89 more matches not shown…
Cross-Language Confusion (JS/TS)23 hits · 155 pts
SeverityFileLineSnippetContext
HIGHopenclaw/openclaw-hetzner-typescript/index.ts184print("Configured gateway with trustedProxies, controlUi, and token")CODE
HIGHopenclaw/openclaw-aws-typescript/index.ts215print("Configured gateway with trustedProxies, controlUi, and token")CODE
HIGHopenclaw/openclaw-azure-typescript/index.ts230print("Configured gateway with trustedProxies, controlUi, and token")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts375print("Starting Large Training Workload (3g.20gb MIG)")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts376print(f"PyTorch version: {torch.__version__}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts377print(f"CUDA available: {torch.cuda.is_available()}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts378print(f"CUDA device: {torch.cuda.get_device_name(0) if torch.cuda.is_available() else 'N/A'}")CODE
HIGHaws-ts-eks-gpu-dra/index.ts394print("Starting training loop...")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts416 print(f"Epoch {epoch+1}/20 | Loss: {avg_loss:.4f} | Accuracy: {accuracy:.2f}% | GPU Mem: {torch.cuda.memory_allocateCODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts418print("Training complete!")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts425print("Starting Medium Training Workload (2g.10gb MIG)")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts426print(f"PyTorch version: {torch.__version__}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts427print(f"CUDA available: {torch.cuda.is_available()}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts428print(f"CUDA device: {torch.cuda.get_device_name(0) if torch.cuda.is_available() else 'N/A'}")CODE
HIGHaws-ts-eks-gpu-dra/index.ts463print("Starting training loop...")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts485 print(f"Epoch {epoch+1}/15 | Loss: {avg_loss:.4f} | Accuracy: {accuracy:.2f}% | GPU Mem: {torch.cuda.memory_allocateCODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts487print("Training complete!")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts493print("Starting Small Inference Workload (1g.5gb MIG)")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts494print(f"PyTorch version: {torch.__version__}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts495print(f"CUDA available: {torch.cuda.is_available()}")CODE
HIGH⚡aws-ts-eks-gpu-dra/index.ts496print(f"CUDA device: {torch.cuda.get_device_name(0) if torch.cuda.is_available() else 'N/A'}")CODE
HIGHaws-ts-eks-gpu-dra/index.ts517print("Starting continuous inference loop...")CODE
HIGHaws-ts-eks-gpu-dra/index.ts527 print(f"Iteration {iteration} | GPU Mem: {torch.cuda.memory_allocated()/1e9:.2f}GB")CODE
Hallucination Indicators7 hits · 70 pts
SeverityFileLineSnippetContext
CRITICAL…va-static-website/src/main/java/staticwebsite/App.java68 .sku(com.pulumi.azurenative.cdn.inputs.SkuArgs.builder()CODE
CRITICAL…-java-appservice-sql/src/main/java/appservice/App.java91 .sku(com.pulumi.azurenative.sql.inputs.SkuArgs.builder().name("S0").build())CODE
CRITICAL…ava-ansible-wordpress/src/main/java/myproject/App.java178 com.pulumi.aws.rds.InstanceArgs.builder()CODE
CRITICAL…ava-ansible-wordpress/src/main/java/myproject/App.java196 com.pulumi.aws.ec2.InstanceArgs.builder()CODE
CRITICAL…ava-ansible-wordpress/src/main/java/myproject/App.java214 var renderPlaybookCmd = new com.pulumi.command.local.Command("renderPlaybookCmd", com.pulumi.command.local.CommaCODE
CRITICAL…ava-ansible-wordpress/src/main/java/myproject/App.java231 var updatePythonCmd = new com.pulumi.command.local.Command("updatePythonCmd", com.pulumi.command.local.CommandArCODE
CRITICAL…ava-ansible-wordpress/src/main/java/myproject/App.java235 var playAnsiblePlaybookCmd = new com.pulumi.command.local.Command("playAnsiblePlaybookCmd", com.pulumi.command.lCODE
Over-Commented Block64 hits · 64 pts
SeverityFileLineSnippetContext
LOWaws-ts-apigatewayv2-http-api/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWmisc/test/google_test.go181 })COMMENT
LOWmisc/test/helpers/changed.go61// onSamePathBranch reports whether two slash-separated relative paths lie on the sameCOMMENT
LOWmisc/scripts/testinfra/gke.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWmisc/scripts/testinfra/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWmisc/scripts/testinfra/config.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWaws-ts-apigateway-auth0/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWaws-ts-containers-dockerbuildcloud/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWaws-ts-containers-dockerbuildcloud/index.ts61 // | |_| | (_) | (__| < __/ | | |_) | |_| | | | (_| |COMMENT
LOWaws-ts-containers-dockerbuildcloud/index.ts101 // |_|COMMENT
LOWcrd2pulumi-crontabs/kubernetes-go-crontabs/main.go21 if err != nil {COMMENT
LOWlibvirt-py-vm/__main__.py1# Copyright 2016-2020, Pulumi Corporation. All rights reserved.COMMENT
LOWaws-ts-langserve/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWgcp-ts-agent-sandbox/devcontainer/entrypoint.sh1#!/bin/bashCOMMENT
LOWgcp-ts-agent-sandbox/devcontainer/entrypoint.sh41COMMENT
LOWazure-cs-aks-cosmos-helm/CosmosDBMongoDB.cs61COMMENT
LOWazure-cs-aks-cosmos-helm/CosmosDBMongoDB.cs81 // port: "10255",COMMENT
LOWaws-ts-localai-flowise/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWaws-ts-organizations/index.ts21//COMMENT
LOWaws-go-slackbot/handler/handler.go41COMMENT
LOW…-on-rails-postgresql/app/app/assets/config/manifest.js1// = link_tree ../imagesCOMMENT
LOW…s-postgresql/app/app/assets/javascripts/application.js1// This is a manifest file that'll be compiled into application.js, which will include all the filesCOMMENT
LOW…-postgresql/app/app/assets/stylesheets/todo_lists.scss1// Place all the styles related to the todo_lists controller here.COMMENT
LOW…ts-k8s-ruby-on-rails-postgresql/app/config/storage.yml1test:COMMENT
LOW…ts-k8s-ruby-on-rails-postgresql/app/config/storage.yml21# credentials: <%= Rails.root.join("path/to/gcs.keyfile") %>COMMENT
LOWgcp-ts-k8s-ruby-on-rails-postgresql/app/config/puma.rb1# Puma can serve each request in a thread from an internal thread pool.COMMENT
LOWgcp-ts-k8s-ruby-on-rails-postgresql/app/config/puma.rb21# Workers do not work on JRuby or Windows (both of which do not supportCOMMENT
LOW…k8s-ruby-on-rails-postgresql/app/config/locales/en.yml1# Files in the config/locales directory are used for internationalizationCOMMENT
LOW…k8s-ruby-on-rails-postgresql/app/config/locales/en.yml21#COMMENT
LOW…rails-postgresql/app/config/environments/production.rb21 # Disable serving static files from the `/public` folder by default sinceCOMMENT
LOW…rails-postgresql/app/config/environments/production.rb41 # Store uploaded files on the local file system (see config/storage.yml for options)COMMENT
LOW…config/initializers/application_controller_renderer.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…tgresql/app/config/initializers/backtrace_silencers.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…rails-postgresql/app/config/initializers/mime_types.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…-postgresql/app/config/initializers/wrap_parameters.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…-on-rails-postgresql/app/config/initializers/assets.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…sql/app/config/initializers/content_security_policy.rb1# Be sure to restart your server when you modify this file.COMMENT
LOW…sql/app/config/initializers/content_security_policy.rb21COMMENT
LOW…ails-postgresql/app/config/initializers/inflections.rb1# Be sure to restart your server when you modify this file.COMMENT
LOWgcp-ts-k8s-ruby-on-rails-postgresql/app/db/seeds.rb1# This file should contain all the record creation needed to seed the database with its default values.COMMENT
LOWdockerbuildcloud-ts/index.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWazure-ts-sentinel-audit-logs/index.ts261});COMMENT
LOWkubernetes-py-guestbook/simple/__main__.py1# Copyright 2016-2024, Pulumi Corporation.COMMENT
LOW…bernetes-py-guestbook/components/service_deployment.py1# Copyright 2016-2020, Pulumi Corporation.COMMENT
LOWkubernetes-py-guestbook/components/__main__.py1# Copyright 2016-2020, Pulumi Corporation.COMMENT
LOWscripts/changed-examples.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/changed-examples.sh61# Every integration test set that has at least one TestAcc<Set> runner in misc/test. UsedCOMMENT
LOWaws-py-langserve/__main__.py1# Copyright 2016-2024, Pulumi Corporation.COMMENT
LOWclassic-azure-ts-aks-mean/mongoHelpers.ts1// Copyright 2016-2025, Pulumi Corporation. All rights reserved.COMMENT
LOWclassic-azure-ts-aks-mean/mongoHelpers.ts21 //COMMENT
LOWaws-cs-langserve/Program.cs1// Copyright 2016-2024, Pulumi Corporation.COMMENT
LOWkubernetes-go-guestbook/simple/main.go1// Copyright 2016-2020, Pulumi Corporation.COMMENT
LOWkubernetes-go-guestbook/components/serviceDeployment.go1// Copyright 2016-2020, Pulumi Corporation.COMMENT
LOWkubernetes-go-guestbook/components/main.go1// Copyright 2016-2020, Pulumi Corporation.COMMENT
LOWaws-ts-apigateway-eventbridge/index.ts161 // This bit of magic states that whenever any of the properties defined underCOMMENT
LOWtwilio-ts-component/index.ts21COMMENT
LOWaws-go-langserve/main.go1// Copyright 2016-2024, Pulumi Corporation.COMMENT
LOWkubernetes-ts-multicloud/app.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWkubernetes-ts-multicloud/gke.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
LOWkubernetes-ts-multicloud/aks.ts1// Copyright 2016-2026, Pulumi Corporation. All rights reserved.COMMENT
4 more matches not shown…
Cross-File Repetition12 hits · 60 pts
SeverityFileLineSnippetContext
HIGHaws-apigateway-py-routes/lambdas.py0{ "version": "2012-10-17", "statement": [ { "action": "sts:assumerole", "principal": { "service": "lambda.amazonaws.com"STRING
HIGHaws-py-slackbot/iam.py0{ "version": "2012-10-17", "statement": [ { "action": "sts:assumerole", "principal": { "service": "lambda.amazonaws.com"STRING
HIGHaws-py-stepfunctions/iam.py0{ "version": "2012-10-17", "statement": [ { "action": "sts:assumerole", "principal": { "service": "lambda.amazonaws.com"STRING
HIGHaws-py-apigateway-lambda-serverless/iam.py0{ "version": "2012-10-17", "statement": [ { "action": "sts:assumerole", "principal": { "service": "lambda.amazonaws.com"STRING
HIGHaws-apigateway-py-routes/lambdas.py0{ "version": "2012-10-17", "statement": [{ "effect": "allow", "action": [ "logs:createloggroup", "logs:createlogstream",STRING
HIGHaws-py-slackbot/iam.py0{ "version": "2012-10-17", "statement": [{ "effect": "allow", "action": [ "logs:createloggroup", "logs:createlogstream",STRING
HIGHaws-py-stepfunctions/iam.py0{ "version": "2012-10-17", "statement": [{ "effect": "allow", "action": [ "logs:createloggroup", "logs:createlogstream",STRING
HIGHaws-py-apigateway-lambda-serverless/iam.py0{ "version": "2012-10-17", "statement": [{ "effect": "allow", "action": [ "logs:createloggroup", "logs:createlogstream",STRING
HIGHazure-py-loadbalancer-vm/__main__.py0#!/bin/bash echo "hello, world!" > index.html nohup python -m simplehttpserver 80 >/dev/null 2>&1 &STRING
HIGHclassic-azure-py-webserver-component/webserver.py0#!/bin/bash echo "hello, world!" > index.html nohup python -m simplehttpserver 80 >/dev/null 2>&1 &STRING
HIGHaws-py-webserver/__main__.py0#!/bin/bash echo "hello, world!" > index.html nohup python -m simplehttpserver 80 >/dev/null 2>&1 &STRING
HIGHazure-py-webserver/__main__.py0#!/bin/bash echo "hello, world!" > index.html nohup python -m simplehttpserver 80 >/dev/null 2>&1 &STRING
Unused Imports42 hits · 42 pts
SeverityFileLineSnippetContext
LOW…nce-architecture/application/src/backend/helloworld.py1CODE
LOWmisc/benchmarks/py-many-resources/__main__.py1CODE
LOWaws-ts-voting-app/frontend/app/main.py5CODE
LOWaws-ts-voting-app/frontend/app/main.py7CODE
LOWaws-ts-voting-app/frontend/app/main.py8CODE
LOW…vpc-with-ecs-fargate-py/ecs-fargate-python/__main__.py3CODE
LOWazure-py-minecraft-server/__main__.py4CODE
LOWazure-py-aks/__main__.py8CODE
LOWaws-py-static-website/__main__.py1CODE
LOWlibvirt-py-vm/libvirt_host.py5CODE
LOWlibvirt-py-vm/libvirt_host.py7CODE
LOWlibvirt-py-vm/libvirt_host.py7CODE
LOWaws-py-dynamicresource/mysql_dynamic_provider.py4CODE
LOWaws-py-dynamicresource/mysql_dynamic_provider.py5CODE
LOWaws-py-dynamicresource/mysql_dynamic_provider.py6CODE
LOWaws-py-dynamicresource/mysql_dynamic_provider.py7CODE
LOWaws-py-dynamicresource/mysql_dynamic_provider.py7CODE
LOWaws-py-dynamicresource/__main__.py3CODE
LOWaws-py-dynamicresource/__main__.py4CODE
LOWaws-py-dynamicresource/__main__.py8CODE
LOWazure-py-aks-helm/cluster.py8CODE
LOWaws-py-django-voting-app/__main__.py4CODE
LOWaws-py-django-voting-app/frontend/mysite/polls/tests.py1CODE
LOWaws-py-django-voting-app/frontend/mysite/polls/urls.py1CODE
LOWaws-py-django-voting-app/frontend/mysite/polls/urls.py2CODE
LOWaws-py-django-voting-app/frontend/mysite/polls/views.py2CODE
LOWaws-py-slackbot/__main__.py2CODE
LOWaws-py-slackbot/__main__.py3CODE
LOWaws-py-slackbot/__main__.py4CODE
LOWaws-py-slackbot/__main__.py6CODE
LOWaws-py-eks/iam.py1CODE
LOWaws-py-eks/utils.py1CODE
LOWclassic-azure-py-webserver-component/webserver.py1CODE
LOWclassic-azure-py-webserver-component/webserver.py1CODE
LOWgcp-py-network-component/__main__.py2CODE
LOWaws-py-s3-folder/__main__.py1CODE
LOWclassic-azure-py-aks-multicluster/__main__.py1CODE
LOWazure-py-webserver/__main__.py4CODE
LOWaws-py-voting-app/__main__.py8CODE
LOWaws-py-voting-app/frontend/app/main.py5CODE
LOWaws-py-voting-app/frontend/app/main.py7CODE
LOWaws-py-voting-app/frontend/app/main.py8CODE
Structural Annotation Overuse14 hits · 27 pts
SeverityFileLineSnippetContext
LOW…vpc-with-ecs-fargate-py/ecs-fargate-python/__main__.py76# Step 3: Create a Cluster and Configure the Security Group https://docs.aws.amazon.com/AmazonECS/latest/userguide/ecs-cCOMMENT
LOW⚡.github/workflows/pull-request.yml102 # Step 1: Checkout the repositoryCOMMENT
LOW⚡.github/workflows/pull-request.yml106 # Step 2: Set up PythonCOMMENT
LOW⚡.github/workflows/pull-request.yml112 # Step 3: Install Make (already installed on Ubuntu, but explicit just in case)COMMENT
LOW⚡.github/workflows/pull-request.yml118 # Step 4: Run Makefile targetsCOMMENT
LOW⚡.github/workflows/test-examples.yml86 # Step 1: Checkout the repositoryCOMMENT
LOW⚡.github/workflows/test-examples.yml90 # Step 2: Set up PythonCOMMENT
LOW⚡.github/workflows/test-examples.yml96 # Step 3: Install Make (already installed on Ubuntu, but explicit just in case)COMMENT
LOW⚡.github/workflows/test-examples.yml102 # Step 4: Run Makefile targetsCOMMENT
LOWkubernetes-py-self-host-gemma4-llm/README.md20### Step 1: Start a local Kubernetes clusterCOMMENT
LOWkubernetes-py-self-host-gemma4-llm/README.md32### Step 2: Start llama.cpp on the hostCOMMENT
LOWkubernetes-py-self-host-gemma4-llm/README.md151### Step 3: Install Python dependenciesCOMMENT
LOWkubernetes-py-self-host-gemma4-llm/README.md159### Step 4: Configure PulumiCOMMENT
LOWkubernetes-py-self-host-gemma4-llm/README.md182### Step 5: Deploy Open WebUICOMMENT
Hyper-Verbose Identifiers24 hits · 24 pts
SeverityFileLineSnippetContext
LOWazure-ts-call-azure-sdk/index.ts10async function getAuthorizationManagementClient(): Promise<AuthorizationManagementClient> {CODE
LOWgcp-ts-slackbot/index.ts79async function handleIncomingHttpRequest(req: express.Request, res: express.Response) {CODE
LOWgcp-ts-slackbot/index.ts219async function onAppMentionEventCallback(request: EventCallbackRequest) {CODE
LOWaws-ts-eks-migrate-nodegroups/nginx-ing-cntlr-rbac.ts89export function makeNginxClusterRoleBinding(CODE
LOWkubernetes-ts-s3-rollout/config.ts28function publicReadPolicyForBucket(bucketName) {CODE
LOWtesting-unit-py/test_ec2.py54 def test_security_group_rules(self):CODE
LOWtesting-unit-py/test_ec2.py55 def check_security_group_rules(args):CODE
LOWtesting-integration/program/index.ts36function publicReadPolicyForBucket(bucketName: string): aws.iam.PolicyDocument {CODE
LOWaws-py-slackbot/mention_processing_lambda.py113def on_message_event_callback(event):CODE
LOWaws-py-slackbot/mention_processing_lambda.py180def on_app_mention_event_callback(event):CODE
LOWaws-py-slackbot/mention_processing_lambda.py192def unsubscribe_from_mentions(event):CODE
LOWpolicy-packs/gcp-python/__main__.py10def storage_bucket_no_public_read_validator(CODE
LOWpolicy-packs/kubernetes-python/__main__.py10def no_public_services_validator(args: ResourceValidationArgs, report_violation: ReportViolation):CODE
LOWpolicy-packs/azure-python/__main__.py10def storage_container_no_public_read_validator(CODE
LOWpolicy-packs/aws-ts-finops/s3.ts14export function requireBucketLifecycleRules(CODE
LOWpolicy-packs/aws-ts-finops/s3.ts37export function requireSpecificBucketExpirationDays(CODE
LOWpolicy-packs/aws-ts-finops/cloudwatch.ts13export function requireCloudWatchLogRetention(CODE
LOWpolicy-packs/aws-ts-advanced/compute.ts41export function requireHealthChecksOnAsgElb(name: string): ResourceValidationPolicy {CODE
LOWpolicy-packs/aws-ts-advanced/compute.ts143export function requireDetailedMonitoring(name: string): ResourceValidationPolicy {CODE
LOWaws-py-s3-folder/__main__.py27def public_read_policy_for_bucket(bucket_name):CODE
LOWazure-py-virtual-data-center/vdc.py197def route_to_virtual_appliance(CODE
LOWaws-ts-slackbot/index.ts225async function onAppMentionEventCallback(request: EventCallbackRequest) {CODE
LOWclassic-azure-ts-cosmosapp-component/policy/distance.ts25function getDistanceFromLatLonInKm(lat1: number, lon1: number, lat2: number, lon2: number) {CODE
LOWaws-py-assume-role/create-role/__main__.py9def assume_role_policy_for_principal(principal):CODE
Verbosity Indicators9 hits · 20 pts
SeverityFileLineSnippetContext
LOW…vpc-with-ecs-fargate-py/ecs-fargate-python/__main__.py76# Step 3: Create a Cluster and Configure the Security Group https://docs.aws.amazon.com/AmazonECS/latest/userguide/ecs-cCOMMENT
LOW⚡.github/workflows/pull-request.yml102 # Step 1: Checkout the repositoryCOMMENT
LOW⚡.github/workflows/pull-request.yml106 # Step 2: Set up PythonCOMMENT
LOW⚡.github/workflows/pull-request.yml112 # Step 3: Install Make (already installed on Ubuntu, but explicit just in case)COMMENT
LOW⚡.github/workflows/pull-request.yml118 # Step 4: Run Makefile targetsCOMMENT
LOW⚡.github/workflows/test-examples.yml86 # Step 1: Checkout the repositoryCOMMENT
LOW⚡.github/workflows/test-examples.yml90 # Step 2: Set up PythonCOMMENT
LOW⚡.github/workflows/test-examples.yml96 # Step 3: Install Make (already installed on Ubuntu, but explicit just in case)COMMENT
LOW⚡.github/workflows/test-examples.yml102 # Step 4: Run Makefile targetsCOMMENT
AI Response Leakage2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHaws-ts-wordpress-fargate-rds/README.md10- [Component Resources](https://www.pulumi.com/docs/intro/concepts/programming-model/#components): Allows one to create CODE
HIGHaws-py-wordpress-fargate-rds/README.md10- [Component Resources](https://www.pulumi.com/docs/intro/concepts/programming-model/#components): Allows one to create CODE
Cross-Language Confusion2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHazure-py-minecraft-server/__main__.py142 create="sudo chmod 755 install.sh && sudo ./install.sh",CODE
HIGHaws-py-ansible-wordpress/__main__.py231 create="""(sudo yum update -y || true);CODE
Magic Placeholder Names2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHdigitalocean-py-k8s/README.md28 pulumi config set digitalocean:token <YOUR_TOKEN_HERE> --secretCODE
HIGHdigitalocean-ts-k8s/README.md34 pulumi config set digitalocean:token <YOUR_TOKEN_HERE> --secretCODE
Empty Error Handlers2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHaws-py-ec2-provisioners/__main__.py21except:CODE
HIGHazure-ts-functions-many/python/HelloPython/__init__.py13except ValueError:CODE
Excessive Try-Catch Wrapping4 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUM⚡aws-py-slackbot/mention_processing_lambda.py45 print("Error: Invalid verification token")CODE
LOW⚡aws-py-slackbot/mention_processing_lambda.py55 except Exception as err:CODE
MEDIUM⚡aws-py-slackbot/mention_processing_lambda.py56 print("Error processing this request")CODE
MEDIUMaws-py-slackbot/mention_processing_lambda.py22def webhook_handler(event, context):CODE
AI Slop Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMmisc/test/performance_test.go242 // utilize the service backend.COMMENT
MEDIUMscripts/changed-examples.sh50# Changes to the harness, the CI definitions, or repo-wide tooling can affect any example,COMMENT
MEDIUM.github/actions/setup/action.yml47 # Must stay >= 22. The integration harness runs `yarn add @pulumi/pulumi@dev` inCOMMENT
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMaws-py-ecs-instances-autoapi/README.md1# AWS ECS with container instances and delete orchestrationCOMMENT
MEDIUMgcp-ts-agent-sandbox/Pulumi.yaml14# simple scalar prompts, so they're set after scaffolding. See the README'sCOMMENT
MEDIUMgcp-ts-k8s-ruby-on-rails-postgresql/scripts/setup.sh33# Now scaffold the todos model and migrate the database.COMMENT
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOW…rn-voting-app/clientside/client/public/serverParams.js2window.SERVER_URL = "placeholder";CODE
LOW…8s-voting-app/clientside/client/public/serverParams.js2window.SERVER_URL = "placeholder";CODE
LOW…rn-voting-app/clientside/client/public/serverParams.js2window.SERVER_URL = "placeholder";CODE
AI Structural Patterns3 hits · 3 pts
SeverityFileLineSnippetContext
LOWaws-py-wordpress-fargate-rds/backend.py7CODE
LOWaws-py-wordpress-fargate-rds/frontend.py9CODE
LOWkubernetes-py-self-host-gemma4-llm/llm_server.py21CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOW…rails-postgresql/app/config/environments/production.rb69 # Set this to true and configure the email server for immediate delivery to raise delivery errors.COMMENT
Deep Nesting1 hit · 1 pts
SeverityFileLineSnippetContext
LOWaws-py-slackbot/mention_processing_lambda.py22CODE