2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

7.4K

Stars

TypeScript

Language

172.4K

Lines of Code

972

Files

291

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 264 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 3.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 66 finding(s).

PR Review Velocity Impact 10.6/100 · LOW

Which changes need focused human review? 291 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 1MEDIUM 40LOW 249

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 291 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block193 hits · 190 pts

Severity	File	Line	Snippet	Context
LOW	bats/tests/helpers/defaults.bash	161	is_true "${RD_USE_RAMDISK}"	COMMENT
LOW	bats/tests/helpers/defaults.bash	201		COMMENT
LOW	bats/scripts/ghcr-mirror.sh	1	#!/bin/bash	COMMENT
LOW	scripts/patch-guest-iso.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/workflows/paths-ignore.yaml	1	# This is a reusable workflow to determine if the current change requires an E2E	COMMENT
LOW	.github/workflows/codeql.yaml	41	# Use `c-cpp` to analyze code written in C, C++ or both	COMMENT
LOW	.github/workflows/spelling.yml	1	name: Check Spelling	COMMENT
LOW	.github/workflows/spelling.yml	21	#	COMMENT
LOW	.github/workflows/spelling.yml	41	# and configuring the action with `use_sarif: 1`	COMMENT
LOW	.github/workflows/bats/sanitize-artifact-name.sh	1	#!/bin/bash	COMMENT
LOW	.github/workflows/bats/collect-logs.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/workflows/smoke-test/smoke-test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/actions/spelling/patterns.txt	41	# hit-count: 247 file-count: 111	COMMENT
LOW	e2e/rdctl.e2e.spec.ts	1401	// This kind of test would be better done as a standalone BAT-type test that can monitor	COMMENT
LOW	pkg/rancher-desktop/index.ts	21	// plugin.addProduct(require('./product'));	COMMENT
LOW	pkg/rancher-desktop/sudo-prompt/index.js	201	//	COMMENT
LOW	pkg/rancher-desktop/sudo-prompt/index.js	661	// Set code page to UTF-8:	COMMENT
LOW	pkg/rancher-desktop/utils/commandLine.ts	1	import Electron from 'electron';	COMMENT
LOW	…s/processOutputInterpreters/__tests__/assets/build.txt	1	#1 [internal] load build definition from Dockerfile	COMMENT
LOW	…s/processOutputInterpreters/__tests__/assets/build.txt	21		COMMENT
LOW	…s/processOutputInterpreters/__tests__/assets/build.txt	41	#6 resolve docker.io/library/golang:1.12-alpine@sha256:3f8e3ad3e7c128d29ac3004ac8314967c5ddbfa5bfa7caa59b0de493fc01686a	COMMENT
LOW	pkg/rancher-desktop/components/SortableTable/index.vue	21	import LabeledSelect from '@pkg/components/form/LabeledSelect';	COMMENT
LOW	…er-desktop/components/SortableTable/sortable-config.ts	1	// Its quicker to render if we directly supply the components for the formatters	COMMENT
LOW	pkg/rancher-desktop/components/SortableTable/debug.js	21	console.log('rows changed ------------------------------------------------');	COMMENT
LOW	…cher-desktop/main/__tests__/deploymentProfiles.spec.ts	101	// Deliberate errors in defaults:	COMMENT
LOW	pkg/rancher-desktop/assets/networks-config.yaml	1	# Path to socket_vmnet executable. Because socket_vmnet is invoked via sudo, it	COMMENT
LOW	pkg/rancher-desktop/assets/lima-config.yaml	21	mode: system	COMMENT
LOW	pkg/rancher-desktop/assets/lima-config.yaml	41	# symlink \| yes \| fresh VM 2nd boot, or pre-1.22 upgrade \| dereference only	COMMENT
LOW	pkg/rancher-desktop/assets/styles/base/_functions.scss	41		COMMENT
LOW	pkg/rancher-desktop/assets/styles/base/_functions.scss	81	@warn '#{ $mode } is undefined keyword.';	COMMENT
LOW	pkg/rancher-desktop/assets/styles/base/_functions.scss	101	}	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	201	action: ''	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	341	# @source Source	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	601	# @reason Japanese conjunction と takes no surrounding spaces.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	661	# @source Build	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	681	# @reason Japanese conjugates the verb in the sentence templates, so both the base and past-tense action variant	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	901	# @source &Discuss	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	1061	# @source to be selected.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	1221	# @source Mounting WSL data	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	1661	# @source {field}: "{name}" has invalid tag "{tag}"	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	1721	# @reason Technical option value; kept in English.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/ja.yaml	1761	# @source mapped-file	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	201	# @source	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	281	# @source Docker API; use with Docker CLI.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	321	# @source Command	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	381	charts:	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	401	noProcesses: Nessun processo trovato.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	581	# @source Kubernetes Version	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	621	# @source ,	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	681	# @source Pulling	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	701	# @source Error trying to { action } ''{ image }''. See console output for more information.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	921	# @reason Noun form ('Discussions') reads more naturally than an imperative as an Italian menu item.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	961	# @reason Accelerator on N: I is taken by 'schermo &intero' in the same menu.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1081	header: Impostazioni	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1121	# @source Allowed Images	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1181	# @source checking...	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1261	# @reason 'guest agent' kept English: it names the rancher-desktop-guestagent component.	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1301	# @source Starting container engine	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1621	# @source Reset Kubernetes?	COMMENT
LOW	pkg/rancher-desktop/assets/translations/it.yaml	1781	# @source 9p2000	COMMENT
133 more matches not shown…

Decorative Section Separators20 hits · 60 pts

Severity	File	Line	Snippet	Context
MEDIUM	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	90	# ── xfrm_usersa_info (224 bytes) ─────────────────────────────────────────	COMMENT
MEDIUM	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	115	# ── XFRM attributes ──────────────────────────────────────────────────────	COMMENT
MEDIUM	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	123	# ── nlmsghdr ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	175	# ── Layer 1: seccomp check ────────────────────────────────────────────────	COMMENT
MEDIUM	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	193	# ── Layer 2: module availability check ───────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	219	// ── Parsing helpers ────────────────────────────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	251	// ── Chart colour helpers ───────────────────────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	303	// ── Computed chart data ────────────────────────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	334	// ── Chart options ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	404	// ── Data ingestion (from IPC events) ──────────────────────────────────────	COMMENT
MEDIUM	pkg/rancher-desktop/components/ContainerStats.vue	479	// ── Lifecycle ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	26	// ── test helpers ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	91	// ── tests ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	104	// ── new session ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	198	// ── output ring buffer ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	223	// ── input ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	235	// ── detach ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	257	// ── reconnect ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	301	// ── kill ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…g/rancher-desktop/main/__tests__/containerExec.spec.ts	314	// ── killAll ───────────────────────────────────────────────────────────────────	COMMENT

Hyper-Verbose Identifiers43 hits · 44 pts

Severity	File	Line	Snippet	Context
LOW	scripts/docker-cli-monitor.ts	25	async function getLatestDockerCliVersion(): Promise<string> {	CODE
LOW	scripts/lint-go.ts	193	function getGoLangCISupportedPlatforms(): SupportedPlatform[] {	CODE
LOW	scripts/e2e.ts	159	function escapeUnescapedBackslashes(s: string): string {	CODE
LOW	scripts/unreleased-change-monitor.ts	71	async function checkForUnreleasedChanges(): Promise<void> {	CODE
LOW	scripts/rddepman.ts	215	async function determineUpdatesAvailable(dependencies: VersionedDependency[]): Promise<VersionComparison[]> {	CODE
LOW	scripts/lib/installer-win32-gen.tsx	138	function getDescendantsIncludingSelf(d: directory): directory[] {	CODE
LOW	scripts/lib/dependencies.ts	830	export async function getPublishedReleaseTagNames(owner: string, repo: string, releaseFilter: Exclude<ReleaseFilter, 'cu	CODE
LOW	scripts/lib/extension-data.ts	118	export async function generateExtensionMarketplaceData() {	CODE
LOW	scripts/lib/download.ts	108	function checkDownloadStatusOrThrow(url: string, response: Response): void {	CODE
LOW	e2e/credentials-server.e2e.spec.ts	65	function haveCredentialServerHelper(): boolean {	CODE
LOW	e2e/startup-profiles.e2e.spec.ts	42	async function createInvalidDarwinUserProfile(contents: string) {	CODE
LOW	e2e/startup-profiles.e2e.spec.ts	48	async function createInvalidLinuxUserProfile(contents: string) {	CODE
LOW	e2e/startup-profiles.e2e.spec.ts	60	async function createDefaultUserRegistryProfileWithNonexistentFields() {	CODE
LOW⚡	e2e/startup-profiles.e2e.spec.ts	71	async function createDefaultUserRegistryProfileWithIncorrectTypes() {	CODE
LOW⚡	e2e/startup-profiles.e2e.spec.ts	80	async function createDefaultUserRegistryProfileWithValidDataButNoVersion() {	CODE
LOW⚡	e2e/startup-profiles.e2e.spec.ts	86	async function createLockedUserRegistryProfileWithValidDataButNoVersion() {	CODE
LOW	e2e/utils/TestUtils.ts	64	async function setWindowsUserLegacyProfile(userProfile: RecursivePartial<Settings> \| null, lockedFields:LockedSettingsTy	CODE
LOW	e2e/utils/ProfileUtils.ts	94	export async function verifySystemRegistrySubtree(): Promise<string[]> {	CODE
LOW	pkg/rancher-desktop/sudo-prompt/index.js	650	function WindowsWriteCommandScript(instance, end) {	CODE
LOW	pkg/rancher-desktop/sudo-prompt/index.js	684	function WindowsWriteExecuteScript(instance, end) {	CODE
LOW	pkg/rancher-desktop/config/settingsImpl.ts	138	function finishConfiguringSettings(cfg: Settings, deploymentProfiles: DeploymentProfileType): Settings {	CODE
LOW	pkg/rancher-desktop/config/settingsImpl.ts	279	function migrateSettingsLocationOnWindows(): boolean {	CODE
LOW	pkg/rancher-desktop/config/settingsImpl.ts	522	function migrateSettingsToCurrentVersion(settings: Record<string, any>): Settings {	CODE
LOW	pkg/rancher-desktop/config/settingsImpl.ts	542	export function migrateSpecifiedSettingsToCurrentVersion(settings: Record<string, any>, locked: boolean, targetVersion:n	CODE
LOW	pkg/rancher-desktop/config/__tests__/settings.spec.ts	307	function verifyAllFieldsAreUnlocked(lockedFields: settings.LockedSettingsType) {	CODE
LOW	pkg/rancher-desktop/utils/accessKeys.ts	23	export function removeParenthesizedAccessKey(label: string): string {	CODE
LOW	pkg/rancher-desktop/utils/string.js	222	export function coerceStringTypeToScalarType(val, type) {	CODE
LOW	pkg/rancher-desktop/utils/stringify.ts	1	export function jsonStringifyWithWhiteSpace(obj: Record<string, any>): string {	CODE
LOW	pkg/rancher-desktop/utils/protocols.ts	69	function setupExtensionProtocolHandler(partition?: string): Promise<void> {	CODE
LOW	pkg/rancher-desktop/backend/progressTracker.ts	7	export function getProgressErrorDescription(e: any) {	CODE
LOW	pkg/rancher-desktop/backend/k3sHelper.ts	1226	function restartIfKubernetesEnabled() {	CODE
LOW	pkg/rancher-desktop/integrations/manageLinesInFile.ts	154	async function copyFileExtendedAttributes(fromPath: string, toPath: string): Promise<void> {	CODE
LOW	…op/components/__tests__/SortableTableSelection.spec.ts	20	function stubResizeObserverMissingFromJsdom() {	CODE
LOW	pkg/rancher-desktop/window/index.ts	414	function extensionGetContentAreaListener(_event: Electron.IpcMainEvent, payload: { top: number, right: number, bottom: n	CODE
LOW	pkg/rancher-desktop/window/index.ts	637	export async function openUnmetPrerequisitesDialog(reasonId: reqMessageId, ...args: any[]) {	CODE
LOW	pkg/rancher-desktop/window/index.ts	653	export async function openKubernetesErrorMessageWindow(titlePart: string, mainMessage: string, failureDetails: K8s.Failu	CODE
LOW	pkg/rancher-desktop/main/deploymentProfiles.ts	512	export function validateDeploymentProfile(inputPath: string, profile: any, schema: any, parentPathParts: string[]): Recu	CODE
LOW	pkg/rancher-desktop/main/deploymentProfiles.ts	531	function validateDeploymentProfileWithErrors(profile: any, errors: string[], schema: any, parentPathParts: string[]) {	CODE
LOW	pkg/rancher-desktop/main/mainmenu.ts	175	function getWindowsApplicationMenu(): MenuItem[] {	CODE
LOW	pkg/rancher-desktop/main/extensions/manager.ts	654	export async function initializeExtensionManager(client: ContainerEngineClient, cfg: RecursiveReadonly<Settings>): Promi	CODE
LOW	…cher-desktop/main/__tests__/deploymentProfiles.spec.ts	194	function stringToMultiStringHexBytes(s: string[]): string {	CODE
LOW	…p/main/diagnostics/__tests__/dockerCliSymlinks.spec.ts	109	function problematicSecondLinkError(desc: string) {	CODE
LOW	…p/main/diagnostics/__tests__/dockerCliSymlinks.spec.ts	113	function intermediateFileNotSymlinkError(desc: string) {	CODE

Slop Phrases10 hits · 30 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/codeql.yaml	46	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/ja.yaml	1414	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/it.yaml	1449	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/de.yaml	1489	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/ko.yaml	1395	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/pt-br.yaml	1436	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/fr.yaml	1439	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/zh-hans.yaml	1471	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/es.yaml	1421	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT
MEDIUM	pkg/rancher-desktop/assets/translations/vi.yaml	1394	# @source A snapshot lock file has been detected for an unusually long time. If you believe this is an error, you	COMMENT

Self-Referential Comments8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	packaging/linux/flatpak.yaml	1	# This file is unused and just kept for reference for plain flatpak builds	COMMENT
MEDIUM	bats/tests/helpers/utils.bash	358	# Create a new file with the provided path; the contents of standard input will	COMMENT
MEDIUM	scripts/yarn-dedupe.sh	51	# Create a PR only if one does not already exist for this branch.	COMMENT
MEDIUM	scripts/assets/extension-data.yaml	1	# This file contains the extension versions we list in the marketplace.	COMMENT
MEDIUM	.github/workflows/bats.yaml	279	# Create the initial user	COMMENT
MEDIUM	.github/workflows/package.yaml	213	# Create a custom keychain so we can unlock it properly.	COMMENT
MEDIUM	.github/workflows/smoke-test/smoke-test.sh	217	# This file is not installed	COMMENT
MEDIUM	.github/actions/setup-environment/action.yaml	139	# Create a GPG key	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	pkg/rancher-desktop/config/settingsImpl.ts	469	settings.experimental.virtualMachine.proxy.noproxy.map((entry: string) => {	CODE

Redundant / Tautological Comments6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	bats/tests/helpers/profile.bash	70	# Check if profile exists	COMMENT
LOW	bats/tests/helpers/utils.bash	162	# Check if the argument is a valid 3-tuple version number with no leading 0s and no newlines	COMMENT
LOW	bats/tests/helpers/utils.bash	221	# Set CALLER to print a calling function higher up in the call stack.	COMMENT
LOW	bats/tests/helpers/utils.bash	239	# Set CALLER to print a calling function higher up in the call stack.	COMMENT
LOW	bats/tests/helpers/vm.bash	346	# Check if the VM is using systemd (instead of OpenRC).	COMMENT
LOW	bats/tests/helpers/os.bash	80	# Check if we can run /usr/bin/true (or /bin/true) without requiring a password	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	bats/tests/security/cve-2026-31431-copy-fail-exploit.py	75	except OSError:	CODE

AI Slop Vocabulary2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/dependabot.yml	33	- # We don't utilize @rancher/shell in a meaningful way. It is safe to	CODE
MEDIUM	pkg/rancher-desktop/assets/lima-config.yaml	221	- # mount bpffs to allow containers to leverage bpf, and make both bpffs and	CODE

Fake / Example Data3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	pkg/rancher-desktop/components/form/LabeledSelect.vue	298	:placeholder="placeholder"	CODE
LOW	…g/rancher-desktop/components/form/TextAreaAutoGrow.vue	116	:placeholder="placeholder"	CODE
LOW	src/go/i18n-report/report_validate.go	40	catPlaceholder = "placeholder"	CODE

Excessive Try-Catch Wrapping2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	bats/tests/security/cve-2026-43284-dirtyfrag-probe.py	207	except Exception as e:	CODE
LOW	bats/tests/security/cve-2026-31431-copy-fail-exploit.py	78	except Exception as exc:	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/paths-ignore.yaml	6	# Usage:	COMMENT

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/rancher-desktop/config/settingsImpl.ts	274	* The purpose of this function is to let RD stop using AppData\Roaming on Windows, and store almost everything	COMMENT

rancher-sandbox/rancher-desktop

Open-Source Code Quality, Security and Technical Debt Review