node of the decentralized oracle network, bridging on and off-chain computation
This report summarizes scanner evidence for smartcontractkit/chainlink, a Go project with 8,252 GitHub stars. SynthScan examined 876,550 lines of code across 3793 source files, recording 545 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 1.1 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 452 finding(s).
Are imports declared and package/API names verified? 27 finding(s).
Are wrappers, guards, and repeated structures necessary? 108 finding(s).
Which changes need focused human review? 545 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 545 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CHANGELOG.md | 2641 | # from 1 second ago or older. | COMMENT |
| LOW | main_test.go | 21 | "github.com/smartcontractkit/chainlink/v2/core/static" | COMMENT |
| LOW | tools/ci/internal/changeset/tags.txt | 1 | #nops | COMMENT |
| LOW | tools/ci/internal/ccip/baseline.go | 61 | func DerivePRTag(chainlinkVersion string) (string, error) { | COMMENT |
| LOW | …elease/release-changelog/cmd/release-changelog/main.go | 1 | // Command release-changelog generates a CCIP-focused changelog between | COMMENT |
| LOW | …lease/release-changelog/internal/products/ccip/ccip.go | 81 | // Anything a release engineer might paste in — image tags, image URIs — is | COMMENT |
| LOW | …s/release/release-changelog/internal/engine/product.go | 1 | package engine | COMMENT |
| LOW | devenv/products/ocr2/basic.toml | 41 | # AlphaAcceptPPB will never be satisfied. | COMMENT |
| LOW | core/cmd/doc.go | 1 | // Package cmd is the front-end interface for the application | COMMENT |
| LOW | core/cmd/doc.go | 21 | // # Renderer | COMMENT |
| LOW | core/cmd/presenters.go | 1 | package cmd | COMMENT |
| LOW | core/logger/logger.go | 61 | // - Tests should use a TestLogger, with NewLogger being reserved for actual | COMMENT |
| LOW | …/capabilities/launcher_offchain_method_configs_test.go | 241 | require.ErrorContains(t, err, "method Write not defined") | COMMENT |
| LOW | core/capabilities/integration_tests/framework/don.go | 461 | // Functions below this point are for adding non-standard capabilities to a DON, deliberately verbose. Eventually these | COMMENT |
| LOW | core/capabilities/ccip/launcher/README.md | 61 | /// [0, 0] | COMMENT |
| LOW | core/capabilities/ccip/launcher/README.md | 81 | /// - ActiveAndCandidate -> ActiveAndCandidate: setCandidate() | COMMENT |
| LOW | core/capabilities/ccip/launcher/doc.go | 1 | // Package launcher provides the functionality to launch and manage OCR instances. | COMMENT |
| LOW | core/capabilities/confidentialrelay/vault_error.go | 1 | package confidentialrelay | COMMENT |
| LOW | core/capabilities/confidentialrelay/handler.go | 41 | var _ core.GatewayConnectorHandler = (*Handler)(nil) | COMMENT |
| LOW | core/capabilities/confidentialrelay/handler.go | 181 | serveTime limits.TimeLimiter | COMMENT |
| LOW | core/capabilities/confidentialrelay/handler.go | 761 | // PRIV-458: the Nitro attestation binds the request hash but does not on its | COMMENT |
| LOW | core/capabilities/confidentialrelay/handler.go | 881 | if err == nil { | COMMENT |
| LOW | core/capabilities/confidentialrelay/response_cache.go | 41 | // signed on success, err on failure (a relayError, so it carries the | COMMENT |
| LOW | …e/capabilities/confidentialrelay/execution_handlers.go | 1 | package confidentialrelay | COMMENT |
| LOW | core/capabilities/confidentialrelay/handler_test.go | 381 | COMMENT | |
| LOW | …/capabilities/vault/gateway_vault_request_processor.go | 21 | // used by the gateway public handler and the node-side gateway connector handler. | COMMENT |
| LOW | core/capabilities/vault/zone_b_restriction.go | 21 | const zoneBFamily = "zone-b" | COMMENT |
| LOW | core/capabilities/remote/trigger_subscriber.go | 41 | // already includes WorkflowID inside TriggerID). However, keeping the workflowID has some benefits: | COMMENT |
| LOW | …mote/trigger_subscriber_byzantine_first_quorum_test.go | 101 | Payload: payload, | COMMENT |
| LOW | …mote/trigger_subscriber_byzantine_first_quorum_test.go | 121 | select { | COMMENT |
| LOW | core/capabilities/remote/executable/hasher.go | 161 | // named FeatureRequestHashInclude<Field>ActivePeriod. | COMMENT |
| LOW | core/config/toml/types.go | 2841 | Local LocalCapabilities `toml:",omitempty"` | COMMENT |
| LOW | core/config/toml/types.go | 3201 | // deployment/node identity dimensions stamped on emitted MeterRecords and | COMMENT |
| LOW | core/config/docs/core.toml | 1 | # **ADVANCED** | COMMENT |
| LOW | core/config/docs/core.toml | 41 | LogQueries = false # Default | COMMENT |
| LOW | core/config/docs/core.toml | 61 | # `full` - Dumps the entire database. | COMMENT |
| LOW | core/config/docs/core.toml | 81 | # FallbackPollInterval controls how often clients should manually poll as a fallback in case the postgres event was miss | COMMENT |
| LOW | core/config/docs/core.toml | 141 | # Level determines only what is printed on the screen/console. This configuration does not apply to the logs that are re | COMMENT |
| LOW | core/config/docs/core.toml | 161 | Dir = '/my/log/directory' # Example | COMMENT |
| LOW | core/config/docs/core.toml | 181 | # | COMMENT |
| LOW | core/config/docs/core.toml | 301 | ForceRedirect = false # Default | COMMENT |
| LOW | core/config/docs/core.toml | 321 | # by more than 5% or so. | COMMENT |
| LOW | core/config/docs/core.toml | 341 | DefaultTimeout = '15s' # Default | COMMENT |
| LOW | core/config/docs/core.toml | 361 | # | COMMENT |
| LOW | core/config/docs/core.toml | 381 | # Changed in block height: 43 | COMMENT |
| LOW | core/config/docs/core.toml | 421 | [OCR] | COMMENT |
| LOW | core/config/docs/core.toml | 441 | # DefaultTransactionQueueDepth controls the queue size for `DropOldestStrategy` in OCR. Set to 0 to use `SendEvery` stra | COMMENT |
| LOW | core/config/docs/core.toml | 461 | # already in the queue will be dropped. | COMMENT |
| LOW | core/config/docs/core.toml | 481 | # Enabled enables P2P V2, the networking stack that OCR, OCR2, OCR3, OCR3.1, and | COMMENT |
| LOW | core/config/docs/core.toml | 501 | # | COMMENT |
| LOW | core/config/docs/core.toml | 661 | OutgoingMessageBufferSize = 500 # Default | COMMENT |
| LOW | core/config/docs/core.toml | 681 | # Examples (using single-quoted TOML strings where backslashes are literal): | COMMENT |
| LOW | core/config/docs/core.toml | 781 | VerboseLogging = false # Default | COMMENT |
| LOW | core/config/docs/core.toml | 801 | # mercury server before retrying. Setting this to zero will wait indefinitely. | COMMENT |
| LOW | core/config/docs/core.toml | 821 | # This is useful if mercury server goes offline and the nop needs to buffer | COMMENT |
| LOW | core/config/docs/core.toml | 841 | # It does not currently include prometheus metrics or standard out logs, but may in the future. | COMMENT |
| LOW | core/config/docs/core.toml | 881 | # ChipIngressMaxGRPCRequestSize is the max serialized PublishBatch request size in bytes. Batches exceeding this are spl | COMMENT |
| LOW | core/config/docs/core.toml | 921 | COMMENT | |
| LOW | core/config/docs/core.toml | 1021 | # Sharding holds settings for node sharding configuration. | COMMENT |
| LOW | core/config/docs/chains-solana.toml | 21 | TxConfirmTimeout = '30s' # Default | COMMENT |
| 227 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 91 | /// ┌─────────────┐ setCandidate ┌─────────────┐ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 92 | /// │ ├───────────────────►│ │ setCandidate | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 93 | /// │ Init │ revokeCandidate │ Candidate │◄───────────┐ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 94 | /// │ [0,0] │◄───────────────────┤ [0,1] │────────────┘ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 95 | /// │ │ ┌─────────────────┤ │ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 96 | /// └─────────────┘ │ promote- └─────────────┘ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 101 | /// ┌──────────┴──┐ │ promote- ┌─────────────┐ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 103 | /// │ Active │ revokeCandidate │ Candidate │◄───────────┐ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 104 | /// │ [1,0] │◄───────────────────┤ [1,1] │────────────┘ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 105 | /// │ ├───────────────────►│ │ | COMMENT |
| MEDIUM⚡ | core/capabilities/ccip/launcher/README.md | 106 | /// └─────────────┘ setSecondary └─────────────┘ | COMMENT |
| MEDIUM | …stem-tests/tests/soak/cre/resource_consumption_test.go | 56 | // ── Phase 1: Single shared price provider ────────────────────────────────── | COMMENT |
| MEDIUM | …stem-tests/tests/soak/cre/resource_consumption_test.go | 92 | // ── Phase 2: Sequential workflow registration ────────────────────────────── | COMMENT |
| MEDIUM | …stem-tests/tests/soak/cre/resource_consumption_test.go | 123 | // ── Phase 3: Time-bounded verification + soak loop ───────────────────────── | COMMENT |
| MEDIUM | …stem-tests/tests/soak/cre/resource_consumption_test.go | 163 | // ── Phase 4: Verify each workflow ran ────────────────────────────────────── | COMMENT |
| MEDIUM | …stem-tests/tests/soak/cre/resource_consumption_test.go | 173 | // ── Phase 5: Memory / CPU leak check ────────────────────────────────────── | COMMENT |
| MEDIUM | …m-tests/tests/regression/cre/solana_regression_test.go | 543 | // ─── shared helpers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-tests/tests/regression/cre/stellar_regression_test.go | 72 | // ─── shared helpers ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/tests/regression/cre/solana/solread-negative/main.go | 385 | // ─── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM | .github/workflows/vault-audit-commands.yml | 146 | # ── /vault-audit skip <reason> ──────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/vault-audit-commands.yml | 170 | # ── /vault-audit ───────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | devenv/tests/vrfv2plus/replay_test.go | 89 | // more robust in CI than a fixed sleep around request timeout boundaries. | COMMENT |
| MEDIUM | core/config/docs/core.toml | 506 | # received from its DefaultBootstrappers or other discovered nodes. To facilitate discovery, | COMMENT |
| MEDIUM | core/config/docs/core.toml | 696 | # The Chainlink node is equipped with an internal "nurse" service that can perform automatic `pprof` profiling when the | COMMENT |
| MEDIUM⚡ | core/config/docs/chains-evm.toml | 74 | # LogPollInterval works in conjunction with Feature.LogPoller. Controls how frequently the log poller polls for logs. De | COMMENT |
| MEDIUM⚡ | core/config/docs/chains-evm.toml | 77 | # LogKeepBlocksDepth works in conjunction with Feature.LogPoller. Controls how many blocks the poller will keep, must be | COMMENT |
| MEDIUM⚡ | core/config/docs/chains-evm.toml | 86 | # BackupLogPollerBlockDelay works in conjunction with Feature.LogPoller. Controls the block delay of Backup LogPoller, a | COMMENT |
| MEDIUM | core/sessions/ldapauth/ldap_test.go | 209 | // Not in upstream, but utilize text fixture admin user presence in test DB. Succeed | COMMENT |
| MEDIUM | core/services/workflows/metering/metering.go | 286 | // TODO: https://smartcontract-it.atlassian.net/browse/CRE-427 more robust check of billing service health | COMMENT |
| MEDIUM | core/services/workflows/metering/metering.go | 672 | // TODO: https://smartcontract-it.atlassian.net/browse/CRE-427 more robust check of billing service health | COMMENT |
| MEDIUM | core/services/vrf/v2/integration_v2_test.go | 258 | // only be useful for tests, probably a more robust way is to have the job spawner accept a signal that a | COMMENT |
| MEDIUM | system-tests/tests/smoke/cre/grpc_source_test.go | 443 | // for "still executing". For a more robust check, we would need to query the engine | COMMENT |
| MEDIUM | …ke/cre/solana/solwrite/data_feeds_cache/constructor.go | 15 | var IDL = "{\"address\":\"3kX63udXtYcsdj2737Wi2KGd2PhqiKPgAFAxstrjtRUa\",\"metadata\":{\"name\":\"data_feeds_cache\",\"v | CODE |
| MEDIUM | …ilities_registry/v2/changeset/add_capabilities_test.go | 339 | // NewTestHarness deploys a cap reg v2 and configures it. So no need to do that here, just leverage the existing one. | COMMENT |
| MEDIUM | …ilities_registry/v2/changeset/add_capabilities_test.go | 352 | // NewTestHarness deploys a cap reg v2 and configures it. So no need to do that here, just leverage the existing one. | COMMENT |
| MEDIUM | …/capabilities_registry/v2/changeset/delete_don_test.go | 248 | // Avoid asserting specific substrings to keep this robust across ABI/runtime changes. | COMMENT |
| MEDIUM | deployment/utils/solutils/artifacts.go | 260 | // robust parsing that handles various go.mod formats. | COMMENT |
| MEDIUM | .github/workflows/cre-mixed-env-tests.yaml | 302 | # checkout: the test drives its enclave harness (tests/testhelpers) to start | COMMENT |
| MEDIUM | .github/workflows/cre-mixed-env-tests.yaml | 303 | # local fake enclaves. These runners are not Nitro-capable, so the harness | COMMENT |
| MEDIUM | .github/workflows/cre-mixed-env-tests.yaml | 356 | # The confidential workflows test starts fake enclaves on the harness's | COMMENT |
| MEDIUM | …/workflows/run-nightly-in-memory-integration-tests.yml | 19 | # A called workflow cannot elevate above the caller's permissions, and | COMMENT |
| MEDIUM⚡ | .github/workflows/cre-system-tests.yaml | 284 | # the test drives its enclave harness (tests/testhelpers) to start local | COMMENT |
| MEDIUM⚡ | .github/workflows/cre-system-tests.yaml | 285 | # enclaves. These runners are not Nitro-capable, so the harness falls back | COMMENT |
| MEDIUM⚡ | .github/workflows/cre-system-tests.yaml | 289 | # drives chainlink-confidential-compute's enclave harness, which shells out | COMMENT |
| MEDIUM | .github/workflows/cre-system-tests.yaml | 336 | # The confidential workflows tests start enclaves on the harness's | COMMENT |
| MEDIUM | .github/workflows/integration-tests.yml | 742 | # Docker-free unit tests for the CRE test harness; gates the CRE E2E jobs, which need this job | COMMENT |
| MEDIUM | .github/workflows/gomod-local-updater.yml | 6 | # Successive runs will utilize the same branch (and PR if already opened). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CHANGELOG.md | 0 | ds [type=http method=get url="https://chain.link/eth-usd"]; ds_parse [type=jsonparse path="data,price"]; ds_multiply [ty | STRING |
| HIGH | core/testdata/testspecs/v2_specs.go | 0 | ds [type=http method=get url="https://chain.link/eth-usd"]; ds_parse [type=jsonparse path="data,price"]; ds_multiply [ty | STRING |
| HIGH | core/services/cron/validate_test.go | 0 | ds [type=http method=get url="https://chain.link/eth-usd"]; ds_parse [type=jsonparse path="data,price"]; ds_multiply [ty | STRING |
| HIGH | core/internal/features/features_test.go | 0 | // data source 1 ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="data"]; ds1_multiply [type=multiply times= | STRING |
| HIGH | core/internal/features/ocr2/features_ocr2_test.go | 0 | // data source 1 ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="data"]; ds1_multiply [type=multiply times= | STRING |
| HIGH | core/internal/features/ocr2/features_ocr2_helper.go | 0 | // data source 1 ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="data"]; ds1_multiply [type=multiply times= | STRING |
| HIGH | core/services/job/testdata/pretty.toml | 0 | // data source 1 ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="data"]; ds1_multiply [type=multiply times= | STRING |
| HIGH | core/services/ocr2/validate/validate_test.go | 0 | ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="one,two"]; ds1_multiply [type=multiply times=1.23]; ds1 -> | STRING |
| HIGH | core/services/streams/delegate_test.go | 0 | ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="one,two"]; ds1_multiply [type=multiply times=1.23]; ds1 -> | STRING |
| HIGH | core/services/ocr/validate_test.go | 0 | ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="one,two"]; ds1_multiply [type=multiply times=1.23]; ds1 -> | STRING |
| HIGH | core/services/feeds/service_test.go | 0 | ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="one,two"]; ds1_multiply [type=multiply times=1.23]; ds1 -> | STRING |
| HIGH | core/services/job/runner_integration_test.go | 0 | ds1 [type=bridge name="%s"]; ds1_parse [type=jsonparse path="one,two"]; ds1_multiply [type=multiply times=1.23]; ds1 -> | STRING |
| HIGH | integration-tests/testconfig/default.toml | 0 | autocreatekey = true finalitydepth = 10 mincontractpayment = 0 [gasestimator] pricemax = '200 gwei' limitdefault = 60000 | STRING |
| HIGH | integration-tests/testconfig/README.md | 0 | autocreatekey = true finalitydepth = 10 mincontractpayment = 0 [gasestimator] pricemax = '200 gwei' limitdefault = 60000 | STRING |
| HIGH | …stconfig/ccip/Test_CCIPReorg_BelowFinality_OnDest.toml | 0 | autocreatekey = true finalitydepth = 10 mincontractpayment = 0 [gasestimator] pricemax = '200 gwei' limitdefault = 60000 | STRING |
| HIGH | …config/ccip/Test_CCIPReorg_BelowFinality_OnSource.toml | 0 | autocreatekey = true finalitydepth = 10 mincontractpayment = 0 [gasestimator] pricemax = '200 gwei' limitdefault = 60000 | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …nvironment/examples/workflows/ts/cron/mietekstefan2.js | 12774 | const parsedReturns = await me._def.returns._def.type.parseAsync(result, params).catch((e) => { | CODE |
| CRITICAL | …nvironment/examples/workflows/ts/cron/mietekstefan3.js | 12774 | const parsedReturns = await me._def.returns._def.type.parseAsync(result, params).catch((e) => { | CODE |
| CRITICAL | …environment/examples/workflows/ts/cron/mietekstefan.js | 12774 | const parsedReturns = await me._def.returns._def.type.parseAsync(result, params).catch((e) => { | CODE |
| CRITICAL | core/services/workflows/v2/engine.go | 331 | queueTimeout, err := e.base.cfg.LocalLimiters.TriggerEventQueueTimeout.Limit(ctx) | CODE |
| CRITICAL | core/services/workflows/v2/capability_executor.go | 196 | if openConcurrentCallSlots, err = c.base.cfg.LocalLimiters.CapabilityConcurrency.Available(ctx); err != nil { | CODE |
| CRITICAL | core/services/workflows/v2/capability_executor.go | 246 | execCtx, execCancel, err := c.base.cfg.LocalLimiters.CapabilityCallTime.WithTimeout(ctx) | CODE |
| CRITICAL | core/services/chainlink/config_general_test.go | 269 | assert.Equal(t, webserverLDAPSecrets.WebServer.LDAP.ServerAddress.URL().String(), opts.Secrets.WebServer.LDAP.ServerAd | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 101 | // Step 1: get an upload URL. | COMMENT |
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 130 | // Step 2: upload the raw bytes to the provided URL (no auth header). | COMMENT |
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 145 | // Step 3: complete the upload into the thread. | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 29 | ## Step 1: Create the Product TOML Config | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 41 | ## Step 2: Create the Product Configurator | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 87 | ## Step 3: Register the Product | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 94 | ## Step 4: Create the Smoke Test | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 113 | ## Step 5: Verify the Build | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 130 | ## Step 6: Remove Old Test from CI | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 134 | ## Step 7: Add New Test to CI | COMMENT |
| LOW | devenv/MIGRATION_GUIDE.md | 147 | ## Step 8: Delete the Old Test File | COMMENT |
| LOW | core/scripts/cre/environment/completions.go | 208 | // NOTE: This function is now replaced by buildCommandTreeFromCobra but kept for reference | COMMENT |
| LOW | core/services/ocr2/plugins/vault/plugin.go | 1816 | // Step 1: Create a map of id -> sha -> count. | COMMENT |
| LOW | core/services/ocr2/plugins/vault/plugin.go | 1868 | // Step 2: Generate the aggregated pending queue. | COMMENT |
| LOW⚡ | core/services/ocr2/plugins/vault/plugin.go | 1896 | // Step 3: Generate the salt that we'll use to sort the list deterministically. | COMMENT |
| LOW⚡ | core/services/ocr2/plugins/vault/plugin.go | 1902 | // Step 4: Sort the kept items by sha(id || salt) | COMMENT |
| LOW | core/services/pg/locked_db.go | 65 | // Step 1: open DB connection | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 78 | // Step 2: start the stat reporter | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 82 | // Step 3: acquire DB locks | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 123 | // Step 0: stop the stat reporter | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 128 | // Step 1: release DB locks | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 133 | // Step 2: close DB connection | COMMENT |
| LOW⚡ | core/services/ring/state_test.go | 184 | // Step 1: Enter transition | COMMENT |
| LOW⚡ | core/services/ring/state_test.go | 191 | // Step 2: Complete transition (after safety period) | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 72 | // Step 2: Use standard pattern - config has AdditionalSources with host.docker.internal | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 79 | // Step 3: Run lifecycle test | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 146 | // Step 2: Deploy gRPC source workflow (using the computed workflow ID from the actual binary) | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 170 | // Step 4: Pause gRPC workflow | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 184 | // Step 6: Resume gRPC workflow | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 192 | // Step 7: Delete gRPC workflow | COMMENT |
| LOW | system-tests/tests/smoke/cre/grpc_source_test.go | 54 | // Step 1: Start mock gRPC server BEFORE environment (uses default port 8544) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 101 | // Step 1: get an upload URL. | COMMENT |
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 130 | // Step 2: upload the raw bytes to the provided URL (no auth header). | COMMENT |
| LOW | …ols/release/release-changelog/internal/engine/slack.go | 145 | // Step 3: complete the upload into the thread. | COMMENT |
| LOW | core/services/ocr2/plugins/vault/plugin.go | 1816 | // Step 1: Create a map of id -> sha -> count. | COMMENT |
| LOW | core/services/ocr2/plugins/vault/plugin.go | 1868 | // Step 2: Generate the aggregated pending queue. | COMMENT |
| LOW⚡ | core/services/ocr2/plugins/vault/plugin.go | 1896 | // Step 3: Generate the salt that we'll use to sort the list deterministically. | COMMENT |
| LOW⚡ | core/services/ocr2/plugins/vault/plugin.go | 1902 | // Step 4: Sort the kept items by sha(id || salt) | COMMENT |
| LOW | core/services/pg/locked_db.go | 65 | // Step 1: open DB connection | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 78 | // Step 2: start the stat reporter | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 82 | // Step 3: acquire DB locks | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 123 | // Step 0: stop the stat reporter | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 128 | // Step 1: release DB locks | COMMENT |
| LOW⚡ | core/services/pg/locked_db.go | 133 | // Step 2: close DB connection | COMMENT |
| LOW⚡ | core/services/ring/state_test.go | 184 | // Step 1: Enter transition | COMMENT |
| LOW⚡ | core/services/ring/state_test.go | 191 | // Step 2: Complete transition (after safety period) | COMMENT |
| LOW | …ration-tests/smoke/ccip/ccip_gas_price_updates_test.go | 107 | // we need to check if the timestamp was updated after the first update and make sure value stays the same. | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 72 | // Step 2: Use standard pattern - config has AdditionalSources with host.docker.internal | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 79 | // Step 3: Run lifecycle test | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 138 | // Step 1: (Optional) Verify contract workflow is activated | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 146 | // Step 2: Deploy gRPC source workflow (using the computed workflow ID from the actual binary) | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 164 | // Step 3: (Optional) Verify contract workflow is still running (isolation check) | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 170 | // Step 4: Pause gRPC workflow | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 178 | // Step 5: (Optional) Verify contract workflow is still running (isolation check) | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 184 | // Step 6: Resume gRPC workflow | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 192 | // Step 7: Delete gRPC workflow | COMMENT |
| LOW⚡ | system-tests/tests/smoke/cre/grpc_source_test.go | 200 | // Step 8: (Optional) Final isolation check - contract workflow still running | COMMENT |
| LOW | system-tests/tests/smoke/cre/grpc_source_test.go | 54 | // Step 1: Start mock gRPC server BEFORE environment (uses default port 8544) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan2.js | 1762 | function parseTextFormatScalarValue(type, value) { | CODE |
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan2.js | 1802 | function unescapeBytesDefaultValue(str) { | CODE |
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan2.js | 3883 | function createWriteCreReportRequest(input) { | CODE |
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan3.js | 1762 | function parseTextFormatScalarValue(type, value) { | CODE |
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan3.js | 1802 | function unescapeBytesDefaultValue(str) { | CODE |
| LOW | …nvironment/examples/workflows/ts/cron/mietekstefan3.js | 3883 | function createWriteCreReportRequest(input) { | CODE |
| LOW | …environment/examples/workflows/ts/cron/mietekstefan.js | 1762 | function parseTextFormatScalarValue(type, value) { | CODE |
| LOW | …environment/examples/workflows/ts/cron/mietekstefan.js | 1802 | function unescapeBytesDefaultValue(str) { | CODE |
| LOW | …environment/examples/workflows/ts/cron/mietekstefan.js | 3883 | function createWriteCreReportRequest(input) { | CODE |
| LOW⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| LOW⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| LOW | …d/bindings/signer_registry/signer_registry_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"v0.8.28+commit.7893614a\",\"language\":\"Solidity\",\"settings\":{\"evmVersi | CODE |
| LOW | …red/bindings/token_governor/token_governor_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| LOW | …red/bindings/usd_stablecoin/usd_stablecoin_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 53 | def test_wait_for_run_found_immediately(self, mock_urlopen): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 64 | def test_wait_for_run_not_found_then_found(self, mock_print, mock_sleep, mock_urlopen): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 92 | def test_wait_for_run_timeout(self, mock_print, mock_time, mock_sleep, mock_urlopen): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 136 | def test_parse_job_logs_extracted(self): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 186 | def test_generate_report_markdown(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 197 | def test_generate_report_json(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 209 | def test_parse_duration_seconds(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 215 | def test_generate_report_json_includes_seconds_and_slowest_jobs(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 236 | def test_generate_report_markdown_includes_longest_jobs_summary(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 245 | def test_generate_report_markdown_links(self): | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 324 | def test_derive_workflow_name(self): | STRING |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 10 | def test_compare_durations_decrease(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 15 | def test_compare_durations_increase(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 20 | def test_compare_durations_equal(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 25 | def test_compare_costs_decrease(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 30 | def test_compare_costs_increase(self): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_compare.py | 96 | def test_generate_comparison_overall_cost_fallback_and_na(self): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_compare.py | 117 | def test_generate_comparison_markdown_links(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 188 | def test_resolve_trial_by_path(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 197 | def test_resolve_trial_by_search(self): | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_compare.py | 206 | def test_resolve_trial_legacy(self): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_compare.py | 219 | def test_resolve_trial_not_found(self): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_compare.py | 228 | def test_main_creates_comparison(self, mock_get_trials_dir, mock_parse_args): | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_compare.py | 255 | def test_main_different_workflows_error(self, mock_get_trials_dir, mock_parse_args): | CODE |
| LOW | .github/actions/golangci-lint/test_process_report.py | 20 | def test_process_report_with_issues(self): | CODE |
| LOW | .github/actions/golangci-lint/test_process_report.py | 85 | def test_process_report_empty_issues(self): | CODE |
| LOW | .github/actions/golangci-lint/test_process_report.py | 101 | def test_process_report_missing_file_treated_as_empty(self): | CODE |
| LOW | .github/actions/golangci-lint/test_process_report.py | 119 | def test_process_report_custom_critical_severities(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| HIGH⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| HIGH⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| HIGH⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/skills/optimize-workflow/scripts/workflow_compare.py | 89 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_compare.py | 124 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_compare.py | 158 | except Exception: | CODE |
| LOW⚡ | …s/skills/optimize-workflow/scripts/workflow_compare.py | 385 | except Exception as e: | CODE |
| MEDIUM⚡ | …s/skills/optimize-workflow/scripts/workflow_compare.py | 386 | print(f"Error locating trial reports: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | …s/skills/optimize-workflow/scripts/workflow_compare.py | 390 | print(f"Error: trials must belong to the same workflow (found {workflow1!r} and {workflow2!r})", file=sys.stderr | CODE |
| LOW⚡ | …s/skills/optimize-workflow/scripts/workflow_compare.py | 396 | except Exception as e: | CODE |
| MEDIUM⚡ | …s/skills/optimize-workflow/scripts/workflow_compare.py | 397 | print(f"Error loading JSON reports: {e}", file=sys.stderr) | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_compare.py | 410 | except Exception as e: | CODE |
| MEDIUM | …s/skills/optimize-workflow/scripts/workflow_compare.py | 411 | print(f"Error saving report to {out_file}: {e}", file=sys.stderr) | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 35 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 111 | except Exception as e: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 132 | except Exception as e: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 157 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 226 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 240 | except Exception: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 509 | except Exception as e: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 532 | except Exception as e: | CODE |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 540 | except Exception as e: | CODE |
| MEDIUM | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 27 | def detect_repo(): | CODE |
| LOW | .github/actions/golangci-lint/process_report.py | 198 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | core/config/docs/core.toml | 1033 | # ShardIndex is the index of this shard (0-based). If 0, no shard orchestration client is created. | COMMENT |
| MEDIUM⚡ | core/config/docs/core.toml | 1034 | # If greater than 0, a shard orchestration client is created and connects to ShardOrchestratorAddress. | COMMENT |
| MEDIUM⚡ | core/config/docs/core.toml | 1039 | # ShardOrchestratorAddress is the URL that the shard orchestration client will try to connect to. | COMMENT |
| MEDIUM | core/config/docs/core.toml | 85 | # Ideally, you should use a container orchestration system like [Kubernetes](https://kubernetes.io/) to ensure that only | COMMENT |
| MEDIUM | .github/workflows/devenv-core-compat.yml | 46 | # bash command to spin up your environment and product orchestration | COMMENT |
| MEDIUM | .github/workflows/devenv-core-compat.yml | 76 | # bash command to spin up your environment and product orchestration | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/skills/optimize-workflow/scripts/workflow_compare.py | 158 | except Exception: | CODE |
| HIGH | …s/skills/optimize-workflow/scripts/workflow_compare.py | 255 | except ValueError: | CODE |
| HIGH | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 35 | except Exception: | CODE |
| HIGH | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 312 | except ValueError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lease/release-changelog/internal/engine/report_test.go | 60 | {SHA: "feedface0000", Title: "chore: bump deps", PR: 1235, Author: "Jane Doe"}, | CODE |
| LOW | core/cmd/admin_commands_test.go | 169 | Email: "foo@bar.com", | CODE |
| LOW | core/capabilities/vault/capability_test.go | 519 | Owner: "placeholder", | CODE |
| LOW | core/sessions/oidcauth/oidc_test.go | 73 | testEmail := "test@test.com" | CODE |
| LOW | core/sessions/oidcauth/oidc_test.go | 91 | testEmail := "test@test.com" | CODE |
| LOW | core/sessions/ldapauth/ldap_test.go | 223 | testEmail := "test@test.com" | CODE |
| LOW | core/sessions/ldapauth/ldap_test.go | 244 | testEmail := "test@test.com" | CODE |
| LOW | core/services/pipeline/runner_test.go | 980 | inputBytes := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit") | CODE |
| LOW | core/services/pipeline/runner_test.go | 980 | inputBytes := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit") | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 48 | result = workflow_monitor.fetch_json('https://api.github.com/dummy', 'fake_token') | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 58 | result = workflow_monitor.wait_for_run('owner/repo', 12345, 'fake_token', timeout=5, poll_interval=1) | CODE |
| LOW⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 99 | workflow_monitor.wait_for_run('owner/repo', 12345, 'fake_token', timeout=2, poll_interval=1) | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 78 | result = workflow_monitor.wait_for_run('owner/repo', 12345, 'fake_token', timeout=5, poll_interval=1) | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 123 | result = workflow_monitor.wait_for_completion('owner/repo', 12345, 'fake_token', poll_interval=1) | CODE |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 288 | args.token = "fake_token" | STRING |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 308 | mock_download.assert_called_once_with("owner/repo", 12345, "fake_token", expected_logs_dir) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | core/scripts/setup_testdb.sh | 7 | # Create a new user and database for development | COMMENT |
| MEDIUM | plugins/plugins.testing.yaml | 1 | # This file defines testing plugins to be installed via `loopinstall`. | COMMENT |
| MEDIUM | plugins/plugins.private.yaml | 1 | # This file defines private plugins to be installed via `loopinstall`. | COMMENT |
| MEDIUM | plugins/plugins.public.yaml | 1 | # This file defines public plugins to be installed via `loopinstall`. | COMMENT |
| MEDIUM | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 137 | # Create a temp directory structure mimicking extracted logs | COMMENT |
| MEDIUM | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 164 | # Create a flat file at root mimicking 15_[Job Name].txt | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 107 | mock_resp_1.read.return_value = b'{"status": "in_progress", "conclusion": null}' | CODE |
| HIGH⚡ | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 112 | mock_resp_2.read.return_value = b'{"status": "in_progress", "conclusion": null}' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | integration-tests/testconfig/ccip/ccip.toml | 269 | # instead of using a specific tag you can also use "latest_available" to use latest published tag in Github or "latest_s | STRING |
| MEDIUM | integration-tests/testconfig/ccip/ccip.toml | 357 | # instead of using a specific tag you can also use "latest_available" to use latest published tag in Github or "latest_s | STRING |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM⚡ | …h_external_minter_fast_transfer_token_pool_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| MEDIUM | …red/bindings/token_governor/token_governor_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/capabilities/ccip/validate/validate_test.go | 19 | // TODO: Add test cases. | COMMENT |
| LOW | core/capabilities/ccip/validate/validate_test.go | 44 | // TODO: Add test cases. | COMMENT |
| LOW | core/capabilities/ccip/ccipton/pluginconfig.go | 22 | GasEstimateProvider: ccipnoop.NewGasEstimateProvider(extraDataCodec), // TODO: implement | CODE |
| LOW | core/capabilities/ccip/ccipton/pluginconfig.go | 23 | TokenDataEncoder: ccipnoop.NewTokenDataEncoder(), // TODO: implement | CODE |
| LOW | core/scripts/ccip/revert-reason/handler/reason_test.go | 23 | }{} // TODO: Add test cases. | CODE |
| LOW | deployment/ccip/changeset/v1_6/cs_ccip_home.go | 124 | // TODO: implement more proper validation | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/services/ocr2/plugins/llo/bench/run.sh | 6 | # Usage: | COMMENT |
| LOW | deployment/ccip/changeset/v1_6/cs_rmn_curse_uncurse.go | 366 | // Example usage: | COMMENT |
| LOW | deployment/ccip/changeset/v1_6/cs_rmn_curse_uncurse.go | 508 | // Example usage: | COMMENT |
| LOW | deployment/ccip/shared/deployergroup/deployer_group.go | 153 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …red/bindings/usd_stablecoin/usd_stablecoin_metadata.go | 6 | var SolidityStandardInput = "{\"version\":\"0.8.26\",\"language\":\"Solidity\",\"settings\":{\"evmVersion\":\"paris\",\" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | core/config/docs/chains-evm.toml | 473 | # Set true to enable this check | COMMENT |
| LOW | core/config/docs/chains-evm.toml | 499 | # Set false to disable | COMMENT |
| LOW | .github/workflows/ci-core.yml | 185 | # Check if the current hour is 00 (one per day) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/skills/optimize-workflow/scripts/workflow_compare.py | 260 | CODE | |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 136 | CODE | |
| LOW | …s/skills/optimize-workflow/scripts/workflow_monitor.py | 294 | CODE | |
| LOW | fuzz/fuzz_all_native.py | 72 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 3 | CODE | |
| LOW | …lls/optimize-workflow/scripts/test_workflow_monitor.py | 6 | CODE |