3.4

Adjusted Signal

3.4

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

13.7K

Stars

Language

306.1K

Lines of Code

1.3K

Files

577

Pattern Hits

2026-10-31

Scan Date

0.03

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 530 finding(s).

Hallucinated Dependency & Supply Chain Risk 5.7/100 · LOW

Are imports declared and package/API names verified? 30 finding(s).

Agent Over-Engineering Ratio 1.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 75 finding(s).

PR Review Velocity Impact 15.6/100 · LOW

Which changes need focused human review? 577 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 29HIGH 13MEDIUM 66LOW 469

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 577 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators29 hits · 355 pts

Severity	File	Line	Snippet	Context
CRITICAL	pkg/operator/ceph/cluster/cleanup.go	122	{Name: sanitizeMethod, Value: cluster.Spec.CleanupPolicy.SanitizeDisks.Method.String()},	CODE
CRITICAL	pkg/operator/ceph/cluster/cleanup.go	123	{Name: sanitizeDataSource, Value: cluster.Spec.CleanupPolicy.SanitizeDisks.DataSource.String()},	CODE
CRITICAL	pkg/operator/ceph/cluster/mgr/mgr.go	466	interval := c.spec.Monitoring.Interval.Duration.Seconds()	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/config.go	85	if !c.fs.Spec.MetadataServer.Resources.Limits.Memory().IsZero() {	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/config.go	91	mdsCacheMemoryLimit := float64(c.fs.Spec.MetadataServer.Resources.Limits.Memory().Value()) * limitFactor	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/config.go	93	} else if !c.fs.Spec.MetadataServer.Resources.Requests.Memory().IsZero() {	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/config.go	99	mdsCacheMemoryRequest := float64(c.fs.Spec.MetadataServer.Resources.Requests.Memory().Value()) * requestFactor	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/spec.go	83	c.fs.Spec.MetadataServer.Annotations.ApplyToObjectMeta(&podSpec.ObjectMeta)	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/spec.go	84	c.fs.Spec.MetadataServer.Labels.ApplyToObjectMeta(&podSpec.ObjectMeta)	CODE
CRITICAL⚡	pkg/operator/ceph/file/mds/spec.go	85	c.fs.Spec.MetadataServer.Placement.ApplyToPodSpec(&podSpec.Spec)	CODE
CRITICAL	pkg/operator/ceph/file/mds/spec.go	116	c.fs.Spec.MetadataServer.Annotations.ApplyToObjectMeta(&d.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/file/mds/spec.go	117	c.fs.Spec.MetadataServer.Labels.ApplyToObjectMeta(&d.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	184	c.store.Spec.Gateway.Annotations.ApplyToObjectMeta(&d.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	185	c.store.Spec.Gateway.Labels.ApplyToObjectMeta(&d.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	295	kmsNeedsToken := kmsEnabled && c.store.Spec.Security.KeyManagementService.IsTokenAuthEnabled()	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	296	s3NeedsToken := s3Enabled && c.store.Spec.Security.ServerSideEncryptionS3.IsTokenAuthEnabled()	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	315	c.store.Spec.Gateway.Placement.ApplyToPodSpec(&podSpec)	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	328	c.store.Spec.Gateway.Annotations.ApplyToObjectMeta(&podTemplateSpec.ObjectMeta)	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	329	c.store.Spec.Gateway.Labels.ApplyToObjectMeta(&podTemplateSpec.ObjectMeta)	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	339	addVols, addMounts := c.store.Spec.Gateway.AdditionalVolumeMounts.GenerateVolumesAndMounts("/var/rgw/")	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	530	if c.store.Spec.Security.KeyManagementService.IsTokenAuthEnabled() {	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	533	if c.store.Spec.Security.KeyManagementService.IsTLSEnabled() {	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	575	if c.store.Spec.Security.ServerSideEncryptionS3.IsAgentAuthEnabled() {	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	577	} else if c.store.Spec.Security.ServerSideEncryptionS3.IsTokenAuthEnabled() {	CODE
CRITICAL⚡	pkg/operator/ceph/object/spec.go	580	if c.store.Spec.Security.ServerSideEncryptionS3.IsTLSEnabled() {	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	801	c.store.Spec.Gateway.Service.Annotations.ApplyToObjectMeta(&svc.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	802	c.store.Spec.Gateway.Service.Labels.ApplyToObjectMeta(&svc.ObjectMeta)	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	926	if c.store.Spec.Security != nil && c.store.Spec.Security.KeyManagementService.IsEnabled() {	CODE
CRITICAL	pkg/operator/ceph/object/spec.go	959	if c.store.Spec.Security != nil && c.store.Spec.Security.ServerSideEncryptionS3.IsEnabled() {	CODE

Over-Commented Block360 hits · 290 pts

Severity	File	Line	Snippet	Context
LOW	design/ceph/rgw-user-multitenancy-and-placement.md	161	to. This mirrors go-ceph's flat `admin.User` shape; a nested	COMMENT
LOW	design/ceph/rgw-user-multitenancy-and-placement.md	181	Tenant string `json:"tenant,omitempty"`	COMMENT
LOW	design/ceph/ceph-nfs-ganesha.md	101	# - matchExpressions:	COMMENT
LOW	design/ceph/update-osds-in-parallel.md	141	# continueUpgradeAfterChecksEvenIfNotHealthy is merely relocated from spec	COMMENT
LOW	design/ceph/object/store.md	321	dataPoolName: rgw-data-pool # results to rgw-data-pool:<CephObjectStore.name>.data	COMMENT
LOW	…n/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd.md	21	namespace: rook-ceph # namespace:cluster	COMMENT
LOW	…entation/CRDs/Shared-Filesystem/ceph-filesystem-crd.md	41	placement:	COMMENT
LOW	…mentation/CRDs/Object-Storage/ceph-object-store-crd.md	41	port: 80	COMMENT
LOW	…mentation/CRDs/Object-Storage/ceph-object-store-crd.md	61	# topologySpreadConstraints:	COMMENT
LOW	…orage-Configuration/Block-Storage-RBD/block-storage.md	41	clusterID: rook-ceph	COMMENT
LOW	…orage-Configuration/Block-Storage-RBD/block-storage.md	61		COMMENT
LOW	…Object-Storage-RGW/ceph-object-bucket-notifications.md	61	# ackLevel: broker [13]	COMMENT
LOW	images/ceph/toolbox.sh	1	#!/usr/bin/env -S bash -e	COMMENT
LOW	deploy/charts/rook-ceph/values.yaml	1	# Default values for rook-ceph-operator	COMMENT
LOW	deploy/charts/rook-ceph/values.yaml	161	cephCommandsTimeoutSeconds: "15"	COMMENT
LOW	deploy/charts/rook-ceph/values.yaml	181	# -- The specific key of the taint to tolerate	COMMENT
LOW	deploy/charts/rook-ceph/values.yaml	221	# -- Blacklist certain disks according to the regex provided.	COMMENT
LOW	deploy/charts/library/Chart.yaml	1	---	COMMENT
LOW	deploy/charts/library/Chart.yaml	21	# the 'charts/' dir of dependent charts via a symlink does not require using	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	1	# Default values for a single rook-ceph cluster	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	21	# osd_pool_default_min_size = 2	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	81	# NVMeoFHighWriteLatency:	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	101	# configMap:	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	121	# If specifying these values, do not include the cephVersion section in the cephClusterSpec.	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	141	# as in the host-based example (cluster.yaml). For a different configuration such as a	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	201	enabled: true	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	221	# The nbd and fuse drivers are not recommended in production since restarting the csi driver pod will disconnect	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	241	# #	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	261	periodicity: daily # one of: hourly, daily, weekly, monthly	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	281	dataSource: zero	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	301	# - storage-node	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	321	# osd:	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	421	# config:	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	481	# If the dashboard has ssl: true the following will make sure the NGINX Ingress controller can expose the dashboard	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	501	# external-dns/private: "true"	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	541	# - storage-node	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	721	# path: /	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	741	# namespace: kube-system	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	761	# zoneGroup: zonegroup-a	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	781	## remove the comments and set desired values to enable them. See	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	801	# codingChunks: 1	COMMENT
LOW	deploy/charts/rook-ceph-cluster/values.yaml	821	#	COMMENT
LOW	deploy/examples/bucket-topic.yaml	21	# ackLevel: broker # none, broker(default), routable	COMMENT
LOW	deploy/examples/common-external.yaml	1	###################################################################################################################	COMMENT
LOW	deploy/examples/rbdmirror.yaml	1	#################################################################################################################	COMMENT
LOW	deploy/examples/rbdmirror.yaml	21	# nodeAffinity:	COMMENT
LOW	deploy/examples/object-a.yaml	1	#################################################################################################################	COMMENT
LOW	deploy/examples/object-a.yaml	41	matchExpressions:	COMMENT
LOW	deploy/examples/object-a.yaml	61	# podAffinity:	COMMENT
LOW	deploy/examples/osd-purge.yaml	1	#################################################################################################################	COMMENT
LOW	deploy/examples/pool.yaml	21	# hybridStorage:	COMMENT
LOW	deploy/examples/pool.yaml	41	# Set any property on a given pool	COMMENT
LOW	deploy/examples/pool.yaml	61	mirror:	COMMENT
LOW	deploy/examples/object-multi-instance-test.yaml	1	#################################################################################################################	COMMENT
LOW	deploy/examples/cluster-tnf.yaml	1	#################################################################################################################	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	61	- name: set1	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	141	- ReadWriteOnce	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	161	# # Find the right size https://docs.ceph.com/docs/master/rados/configuration/bluestore-config-ref/#sizi	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	181	osd: system-node-critical	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	201	# KMS_PROVIDER: "vault"	COMMENT
300 more matches not shown…

Self-Referential Comments47 hits · 141 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/examples/pool-test.yaml	2	# Create a Ceph pool with settings a test environment. Only a single OSD is required.	COMMENT
MEDIUM	deploy/examples/object-multisite-pull-realm-test.yaml	2	# Create an object store with settings for a test environment. Only a single OSD is required in this example.	COMMENT
MEDIUM	deploy/examples/common-external.yaml	2	# Create the common resources that are necessary to start an external Ceph cluster in a different namespace	COMMENT
MEDIUM	deploy/examples/object-external.yaml	2	# Create an object store with settings for an external Ceph cluster.	COMMENT
MEDIUM	deploy/examples/object-a.yaml	2	# Create an object store with settings for shared pools in a production environment. A minimum of 3 hosts with	COMMENT
MEDIUM	deploy/examples/object-multisite-pull-realm.yaml	2	# Create an object store with multisite settings that is syncing with another multisite cluster for a	COMMENT
MEDIUM	deploy/examples/object-test.yaml	2	# Create an object store with settings for a test environment. Only a single OSD is required in this example.	COMMENT
MEDIUM	deploy/examples/object-multisite.yaml	2	# Create an object store with multisite settings for a production environment. A minimum of 3 hosts with OSDs	COMMENT
MEDIUM	deploy/examples/cluster-test.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a small test cluster.	COMMENT
MEDIUM	deploy/examples/common.yaml	2	# Create the common resources that are necessary to start the operator and the ceph cluster.	COMMENT
MEDIUM	deploy/examples/object-shared-pools-test.yaml	2	# Create the pools that can be shared by multiple object stores. A single OSD is required	COMMENT
MEDIUM	deploy/examples/pool.yaml	2	# Create a Ceph pool with settings for replication in production environments. A minimum of 3 OSDs on	COMMENT
MEDIUM	deploy/examples/pool-ec.yaml	2	# Create a Ceph pool with settings for erasure coding. A minimum of 3 OSDs are required in this example.	COMMENT
MEDIUM	deploy/examples/cluster-external-management.yaml	2	# Define the settings for the rook-ceph-external cluster with common settings for a production cluster.	COMMENT
MEDIUM	deploy/examples/object-multi-instance-test.yaml	2	# Create an object store with settings for a test environment. Only a single OSD is required in this example.	COMMENT
MEDIUM	deploy/examples/object-multisite-test.yaml	2	# Create an object store with settings for a test environment. Only a single OSD is required in this example.	COMMENT
MEDIUM	deploy/examples/cluster-tnf.yaml	2	# Define the settings for the rook-ceph cluster with DRBD floating monitor for testing.	COMMENT
MEDIUM	deploy/examples/cluster-stretched-aws.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a production cluster.	COMMENT
MEDIUM	deploy/examples/cluster-on-pvc.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a production cluster on top of cloud instances.	COMMENT
MEDIUM	deploy/examples/object-account.yaml	2	# Create an object store account to manage RGW resources.	COMMENT
MEDIUM	deploy/examples/object.yaml	2	# Create an object store with settings for replication in a production environment. A minimum of 3 hosts with	COMMENT
MEDIUM	deploy/examples/cluster-on-local-pvc.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a production cluster on top of bare metal.	COMMENT
MEDIUM	deploy/examples/filesystem-test.yaml	2	# Create a filesystem with settings for a test environment where only a single OSD is required.	COMMENT
MEDIUM	deploy/examples/cluster.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a production cluster.	COMMENT
MEDIUM	deploy/examples/cluster-stretched.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a production cluster.	COMMENT
MEDIUM	deploy/examples/object-shared-pools.yaml	2	# Create the pools that can be shared by multiple object stores. A minimum of 3 hosts with	COMMENT
MEDIUM	deploy/examples/filesystem-ec.yaml	2	# Create a filesystem with settings for erasure-coding instead of replication. A minimum of three nodes with OSDs	COMMENT
MEDIUM	deploy/examples/object-ec.yaml	2	# Create an object store with settings for erasure coding for the data pool. A minimum of 3 nodes with OSDs are	COMMENT
MEDIUM	deploy/examples/two-object-one-zone-test.yaml	2	# Create an two object stores with the same set of pre-created pools	COMMENT
MEDIUM	deploy/examples/filesystem.yaml	2	# Create a filesystem with settings with replication enabled for a production environment.	COMMENT
MEDIUM	deploy/examples/object-user.yaml	2	# Create an object store user for access to the s3 endpoint.	COMMENT
MEDIUM	deploy/examples/object-b.yaml	2	# Create an object store with settings for shared pools in a production environment. A minimum of 3 hosts with	COMMENT
MEDIUM	deploy/examples/pool-mirrored.yaml	2	# Create a mirroring enabled Ceph pool.	COMMENT
MEDIUM	deploy/examples/toolbox-operator-image.yaml	2	# Define the toolbox that will run with the Rook operator image.	COMMENT
MEDIUM	deploy/examples/headless-mon-service.yaml	1	# Create a headless service which will effectively referenced by the EndpointSlice resources	COMMENT
MEDIUM	deploy/examples/cluster-external.yaml	2	# Define the settings for the rook-ceph-external cluster with common settings for a production cluster.	COMMENT
MEDIUM	deploy/examples/operator-openshift.yaml	2	# Create the rook operator and necessary security context constraints for running	COMMENT
MEDIUM	deploy/examples/object-openshift.yaml	2	# Create an object store with settings specific for OpenShift. A minimum of 3 OSDs are required in this example	COMMENT
MEDIUM	deploy/examples/nfs.yaml	2	# Create a Ceph pool with settings for replication in production environments. A minimum of 3 OSDs on	COMMENT
MEDIUM	deploy/examples/cluster-multus-test.yaml	2	# Define the settings for the rook-ceph cluster with common settings for a small test cluster.	COMMENT
MEDIUM	deploy/examples/cluster-on-pvc-minikube.yaml	2	# Define the settings for the rook-ceph cluster with settings for a minikube cluster with a single node	COMMENT
MEDIUM	deploy/examples/csi/rbd/storageclass-ec.yaml	2	# Create a storage class with a data pool that uses erasure coding for a production environment.	COMMENT
MEDIUM	…loy/examples/csi/rbd/volumeattributesclass-cgroup.yaml	2	# Create a VolumeAttributesClass for RBD QoS using cgroup v2 io.max limits.	COMMENT
MEDIUM	deploy/examples/external/object-external.yaml	2	# Create an object store with settings for an external Ceph cluster.	COMMENT
MEDIUM	tests/scripts/github-action-helper.sh	186	# Create an extra disk if doesn't exist.	COMMENT
MEDIUM	tests/scripts/deploy-validate-vault.sh	157	# Create a token for Rook	COMMENT
MEDIUM	tests/manifests/test-object.yaml	2	# Create an object store with settings for a test environment. Only a single OSD is required in this example.	COMMENT

Hyper-Verbose Identifiers58 hits · 55 pts

Severity	File	Line	Snippet	Context
LOW	deploy/examples/create-external-cluster-resources.py	532	def validate_rbd_metadata_ec_pool_name(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	582	def validate_rgw_endpoint_tls_cert(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	724	def get_ceph_external_mon_data(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	803	def get_active_and_standby_mgrs(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	895	def get_cephfs_provisioner_caps_and_entity(self, generation):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	920	def get_cephfs_node_caps_and_entity(self, generation):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	978	def get_rbd_provisioner_caps_and_entity(self, generation):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1016	def get_rbd_node_caps_and_entity(self, generation):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1135	def get_cephfs_data_pool_details(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1286	def create_rgw_admin_ops_user(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1417	def get_or_create_subvolume_group(self, subvolume_group, cephfs_filesystem_name):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1567	def convert_comma_separated_to_array(self, value):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1570	def raise_exception_if_any_topology_flag_is_missing(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1607	def validate_topology_rbd_pools(self, topology_rbd_pools):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1635	def get_cephx_latest_key_generation(self):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	2138	def upgrade_users_permissions(self, generation):	CODE
LOW	deploy/examples/create-external-cluster-resources.py	2161	def get_rgw_pool_name_during_upgrade(self, user, caps):	CODE
LOW	deploy/examples/import-external-cluster.sh	179	function createInputCommadConfigMap() {	CODE
LOW	deploy/examples/import-external-cluster.sh	228	function importCsiRBDProvisionerSecret() {	CODE
LOW	deploy/examples/import-external-cluster.sh	250	function importCsiCephFSNodeSecret() {	CODE
LOW	deploy/examples/import-external-cluster.sh	271	function importCsiCephFSProvisionerSecret() {	CODE
LOW	deploy/examples/import-external-cluster.sh	402	function createRBDTopologyStorageClass() {	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	84	def test_non_zero_return_and_error(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	93	def test_multi_filesystem_scenario(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	131	def test_multi_data_pool_scenario(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	168	def test_upgrade_user_permissions(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	181	def test_monitoring_endpoint_validation(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	236	def test_skip_monitoring_endpoint_no_prometheus(self):	CODE
LOW	…oy/examples/create-external-cluster-resources-tests.py	266	def test_skip_monitoring_endpoint(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	532	def validate_rbd_metadata_ec_pool_name(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	582	def validate_rgw_endpoint_tls_cert(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	724	def get_ceph_external_mon_data(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	803	def get_active_and_standby_mgrs(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	895	def get_cephfs_provisioner_caps_and_entity(self, generation):	CODE
LOW	…examples/external/create-external-cluster-resources.py	920	def get_cephfs_node_caps_and_entity(self, generation):	CODE
LOW	…examples/external/create-external-cluster-resources.py	978	def get_rbd_provisioner_caps_and_entity(self, generation):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1016	def get_rbd_node_caps_and_entity(self, generation):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1135	def get_cephfs_data_pool_details(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1286	def create_rgw_admin_ops_user(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1417	def get_or_create_subvolume_group(self, subvolume_group, cephfs_filesystem_name):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1567	def convert_comma_separated_to_array(self, value):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1570	def raise_exception_if_any_topology_flag_is_missing(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1607	def validate_topology_rbd_pools(self, topology_rbd_pools):	CODE
LOW	…examples/external/create-external-cluster-resources.py	1635	def get_cephx_latest_key_generation(self):	CODE
LOW	…examples/external/create-external-cluster-resources.py	2138	def upgrade_users_permissions(self, generation):	CODE
LOW	…examples/external/create-external-cluster-resources.py	2161	def get_rgw_pool_name_during_upgrade(self, user, caps):	CODE
LOW	deploy/examples/external/import-external-cluster.sh	179	function createInputCommadConfigMap() {	CODE
LOW	deploy/examples/external/import-external-cluster.sh	228	function importCsiRBDProvisionerSecret() {	CODE
LOW	deploy/examples/external/import-external-cluster.sh	250	function importCsiCephFSNodeSecret() {	CODE
LOW	deploy/examples/external/import-external-cluster.sh	271	function importCsiCephFSProvisionerSecret() {	CODE
LOW	deploy/examples/external/import-external-cluster.sh	402	function createRBDTopologyStorageClass() {	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	84	def test_non_zero_return_and_error(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	93	def test_multi_filesystem_scenario(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	131	def test_multi_data_pool_scenario(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	168	def test_upgrade_user_permissions(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	181	def test_monitoring_endpoint_validation(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	236	def test_skip_monitoring_endpoint_no_prometheus(self):	CODE
LOW	…es/external/create-external-cluster-resources-tests.py	266	def test_skip_monitoring_endpoint(self):	CODE

Structural Annotation Overuse20 hits · 30 pts

Severity	File	Line	Snippet	Context
LOW	…tation/Storage-Configuration/Advanced/ceph-osd-mgmt.md	222	### Step 1: Trigger the replacement	COMMENT
LOW	…tation/Storage-Configuration/Advanced/ceph-osd-mgmt.md	235	### Step 2: Wait until the disk is ready to swap	COMMENT
LOW	…tation/Storage-Configuration/Advanced/ceph-osd-mgmt.md	265	### Step 3: Swap the disk	COMMENT
LOW	…tation/Storage-Configuration/Advanced/ceph-osd-mgmt.md	272	### Step 4: Verify the replacement completed	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	20	### Step 1: Install DRBD Kernel Modules	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	46	### Step 2: Identify Block Devices	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	81	### Step 3: Run DRBD Setup Script	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	104	### Step 4: Verify DRBD Setup	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	119	### Step 5: Deploy Rook CephCluster	COMMENT
LOW	…torage-Configuration/Advanced/two-node-cluster-drbd.md	129	### Step 6: Verify Ceph Cluster	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	40	### Step 1: Create the NVMe-oF Gateway	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	98	### Step 2: Deploy the NVMe-oF CSI Driver via CSI Operator	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	122	### Step 3: Create the Data Pool	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	149	### Step 4: Create the StorageClass	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	201	### Step 5: Create a PersistentVolumeClaim	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	222	### Step 6: Create a Pod	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	267	### Step 4: Create a VolumeAttributesClass	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	278	### Step 5: Create the External StorageClass and PVC	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	304	### Step 6: Create LoadBalancer Services	COMMENT
LOW	…ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md	329	### Step 7: Connect from the External Client	COMMENT

AI Slop Vocabulary11 hits · 30 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/examples/object-a.yaml	4	# shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store	COMMENT
LOW	deploy/examples/create-external-cluster-resources.py	1193	# just return silently	COMMENT
MEDIUM	deploy/examples/object-shared-pools-test.yaml	4	# shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store	COMMENT
MEDIUM	deploy/examples/object-shared-pools.yaml	4	# shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store	COMMENT
MEDIUM	deploy/examples/object-b.yaml	4	# shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store	COMMENT
LOW	…examples/external/create-external-cluster-resources.py	1193	# just return silently	COMMENT
MEDIUM	pkg/apis/ceph.rook.io/v1/types.go	3489	// network attachment definitions. Rook's methods are robust but may be imprecise for	COMMENT
MEDIUM	pkg/daemon/ceph/osd/kms/vault_test.go	209	// the previous file. Essentially we are verifying that defer does what it is supposed to do.	COMMENT
MEDIUM	pkg/operator/ceph/cluster/predicate.go	151	// Definitely non-trivial but nice to have in the future	COMMENT
MEDIUM	pkg/operator/ceph/cluster/osd/spec.go	1257	// Essentially, the device cannot be found because it was not mounted in the container	COMMENT
MEDIUM	pkg/operator/ceph/config/datapath.go	76	// NewDatalessDaemonDataPathMap returns a new DataPathMap for a daemon which does not utilize a data	COMMENT

Cross-File Repetition5 hits · 25 pts

Severity	File	Snippet	Context
HIGH	deploy/examples/create-external-cluster-resources.py	copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo	STRING
HIGH	…examples/external/create-external-cluster-resources.py	copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo	STRING
HIGH	…oy/examples/create-external-cluster-resources-tests.py	copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo	STRING
HIGH	…es/external/create-external-cluster-resources-tests.py	copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo	STRING
HIGH	tests/scripts/pythonwebserver/server.py	copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo	STRING

AI Response Leakage3 hits · 22 pts

Severity	File	Line	Snippet	Context
HIGH	Documentation/Contributing/development-flow.md	439	# In this example, the last 5 commits will be opened in the git rebase tool.	COMMENT
HIGH	deploy/examples/cluster-stretched-aws.yaml	129	# settings as other mons. In this example, the arbiter has a toleration to run on a control-plane node.	COMMENT
HIGH	deploy/examples/cluster-stretched.yaml	57	# settings as other mons. In this example, the arbiter has a toleration to run on a control-plane node.	COMMENT

Empty Error Handlers3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	deploy/examples/create-external-cluster-resources.py	244	except:	CODE
HIGH	…examples/external/create-external-cluster-resources.py	244	except:	CODE
HIGH	tests/scripts/pythonwebserver/server.py	48	except KeyboardInterrupt:	CODE

Excessive Try-Catch Wrapping8 hits · 14 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/examples/create-external-cluster-resources.py	43	print(f"Error: {noModErr}\nExiting the script...")	CODE
MEDIUM	deploy/examples/create-external-cluster-resources.py	49	print(f"Error: {noModErr}\nExiting the script...")	CODE
MEDIUM	deploy/examples/create-external-cluster-resources.py	2271	print(f"Error while trying to output the data: {osErr}")	CODE
LOW	deploy/examples/create-external-cluster-resources.py	645	except Exception as err:	CODE
MEDIUM	…examples/external/create-external-cluster-resources.py	43	print(f"Error: {noModErr}\nExiting the script...")	CODE
MEDIUM	…examples/external/create-external-cluster-resources.py	49	print(f"Error: {noModErr}\nExiting the script...")	CODE
MEDIUM	…examples/external/create-external-cluster-resources.py	2271	print(f"Error while trying to output the data: {osErr}")	CODE
LOW	…examples/external/create-external-cluster-resources.py	645	except Exception as err:	CODE

Slop Phrases9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	deploy/charts/rook-ceph-cluster/values.yaml	148	# Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fa	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	197	# To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file	COMMENT
LOW	deploy/examples/cluster-on-pvc.yaml	197	# To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file	COMMENT
LOW	deploy/examples/object.yaml	148	# To enable the Server Side Encryption configuration properly don't forget to uncomment the Secret at the end of the f	COMMENT
LOW	deploy/examples/object.yaml	148	# To enable the Server Side Encryption configuration properly don't forget to uncomment the Secret at the end of the f	COMMENT
LOW	deploy/examples/cluster.yaml	38	# Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fa	COMMENT
LOW	deploy/examples/object-openshift.yaml	109	# To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file	COMMENT
LOW	deploy/examples/object-openshift.yaml	109	# To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file	COMMENT
LOW	pkg/util/sys/device.go	370	// (don't forget to remove surrounding quotes from the value)	COMMENT

Synthetic Comment Markers2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH	pkg/operator/ceph/cluster/osd/osd.go	190	// Fall back to use the same placement as requested for the osd daemons	COMMENT
HIGH	pkg/operator/ceph/client/controller.go	494	return client.Spec.SecretName // return the secret name as requested by user.	CODE

Modern AI Meta-Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/charts/rook-ceph/values.yaml	215	# -- Disable automatic orchestration when new devices are discovered.	COMMENT
MEDIUM	deploy/examples/operator.yaml	75	# Disable automatic orchestration when new devices are discovered	COMMENT
MEDIUM	deploy/examples/operator-openshift.yaml	158	# Disable automatic orchestration when new devices are discovered	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	deploy/charts/ceph-csi-drivers/values.yaml	24	# Set snapshotPolicy to enable snapshot/group snapshot support.	COMMENT
LOW	deploy/examples/operator.yaml	239	# Set this to true if SELinux is enabled (e.g. OpenShift) to workaround the anyuid issues.	COMMENT
LOW	deploy/examples/operator.yaml	244	# Set this to true if mon pods are CrashLooping on SELinux-enabled systems despite other settings.	COMMENT
LOW	deploy/examples/operator-openshift.yaml	309	# Set this to true if SELinux is enabled (e.g. OpenShift) to workaround the anyuid issues.	COMMENT
LOW	tests/scripts/deploy-validate-vault.sh	233	# Set SA_CA_CRT to the PEM encoded CA cert used to talk to Kubernetes API	COMMENT

Verbosity Indicators3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	cmd/rook/ceph/osd.go	437	// For backward compatibility we need to check if the env var is still set	COMMENT
LOW	pkg/operator/ceph/cluster/osd/activate-osd.sh	107	# keep OSD pods from crashing repeatedly after a reboot, we need to check if the	COMMENT
LOW	pkg/operator/ceph/cluster/mon/health.go	139	// Since c.ClusterInfo.IsInitialized() below uses a different context, we need to check if the context is done	COMMENT

Deep Nesting8 hits · 4 pts

Severity	File	Line	Context
LOW	deploy/examples/create-external-cluster-resources.py	611	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1135	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1635	CODE
LOW	deploy/examples/create-external-cluster-resources.py	1681	CODE
LOW	…examples/external/create-external-cluster-resources.py	611	CODE
LOW	…examples/external/create-external-cluster-resources.py	1135	CODE
LOW	…examples/external/create-external-cluster-resources.py	1635	CODE
LOW	…examples/external/create-external-cluster-resources.py	1681	CODE

Decorative Section Separators1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	deploy/examples/cleanup-job.yaml	9	# ---------------	COMMENT

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/operator/ceph/controller/mirror_peer_test.go	76	// TODO: Add test cases.	COMMENT

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/operator/ceph/object/config_test.go	279	fakeUser := generateCephXUser("rook-ceph-rgw-fake-store-fake-user")	CODE

rook/rook

Open-Source Code Quality, Security and Technical Debt Review