Portable, lightweight, self-contained virtual machines.
This report presents the forensic synthetic code analysis of smol-machines/smolvm, a Rust project with 4,395 GitHub stars. SynthScan v2.0 examined 132,554 lines of code across 300 source files, recording 899 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 10.7 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 899 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Makefile.toml | 16 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 18 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 78 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 80 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 102 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 104 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 158 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 160 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 172 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 174 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 197 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 199 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 238 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 240 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 252 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 254 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 11 | //! ┌─────────┐ ethernet frames ┌──────────────┐ unixstream ┌────────┐ | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 12 | //! │ tapX │◀───────────────────▶│ netns_tap │◀───────────▶│ libkrun │ | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 15 | //! └─────────┘ └──────────────┘ └────────┘ | COMMENT |
| MEDIUM | crates/smolvm-shim/src/engine.rs | 378 | /// stdin fifo (nonblocking read) ──────────────────────────► │ | COMMENT |
| MEDIUM | tests/test_gpu.sh | 38 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 40 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 71 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 73 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 80 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 82 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 187 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 189 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 258 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 260 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 28 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 30 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 39 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 41 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 157 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 159 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 319 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 321 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 497 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 499 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 557 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 559 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 649 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 651 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 897 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 899 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 926 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 928 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1004 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1006 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1061 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1063 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1248 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1250 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1342 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1344 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 67 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 69 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 83 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 85 | # ============================================================================= | COMMENT |
| 157 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Makefile.toml | 1 | # cargo-make configuration for smolvm | COMMENT |
| LOW | build.rs | 1 | //! Build script for smolvm. | COMMENT |
| LOW | build.rs | 21 | //! cp /opt/homebrew/opt/libkrun/lib/libkrun.dylib lib/ | COMMENT |
| LOW | packaging/nfpm.yaml | 1 | # nfpm config for the official smolvm .deb / .rpm packages. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 1 | //! Protocol types for smolvm host-guest communication. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 61 | pub const ROSETTA_GUEST_PATH: &str = "/mnt/rosetta"; | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 81 | /// frame (~1.4 MB) fits inside typical kernel Unix-socket send | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 101 | /// after the first chunk that pushes the accumulated total past the | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 121 | /// The host polls for this file through its virtiofs mount of the guest | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 161 | /// fsnotify event masks, mirroring the kernel's `FS_*` bits in | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 181 | /// Event occurred against a directory. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 201 | pub enum AgentRequest { | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 221 | /// Pull an OCI image and extract layers. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 301 | /// container isolation. Useful for VM-level operations and debugging. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 321 | background: bool, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 341 | /// User inside the rootfs. If omitted, the OCI image default applies. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 361 | /// Detached mode — start the container and return immediately with the | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 401 | /// New height in rows. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 421 | #[serde(default)] | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 441 | /// [`FILE_TRANSFER_MAX_TOTAL`]. The agent uses this for an | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 461 | FileRead { | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 481 | /// The host OCI runtime spec (config.json bytes). The agent extracts | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 641 | COMMENT | |
| LOW | crates/smolvm-protocol/src/lib.rs | 701 | /// Resource usage sample for a pod container (`PodStats` reply). Summed over | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 721 | DataChunk { | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 781 | pub const EXPORT_FAILED: &str = "EXPORT_FAILED"; | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 841 | /// Convert a Result into an AgentResponse. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 881 | pub layer_count: usize, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 921 | /// Number of cached layers. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 1061 | } | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 1 | //! Image reference canonicalization. | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 21 | /// present it takes precedence and any tag is dropped. | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 101 | } | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 1 | //! Retry utilities for transient failure recovery. | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 21 | /// Default maximum retry attempts for general operations. | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 41 | /// failing within a reasonable time (~45 seconds worst case). | COMMENT |
| LOW | crates/smolvm-protocol/src/secrets.rs | 1 | //! Secret reference types shared across smolvm surfaces. | COMMENT |
| LOW | crates/smolvm-protocol/src/secrets.rs | 41 | /// A reference to a secret. Exactly one of the two sources must be | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 1 | //! Shared environment-variable contract between the host launcher and guest agent. | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 21 | /// Absent means no GPU was requested. | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 41 | /// falls back to the shared [`crate::AGENT_READY_MARKER`] constant. | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 1 | //! Drop-in `libcudart.so.11.0` for smolvm guests: the CUDA **Runtime API**, | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 201 | /// Active CUDA graph capture, `(stream_handle, capture_id)`. Kept | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 281 | /// domains for one guest program-order stream; the driver shim fences this | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 1801 | } | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 2901 | } | COMMENT |
| LOW | crates/smolvm-network/src/device.rs | 1 | //! smoltcp `phy::Device` adapter for the virtio-net backend. | COMMENT |
| LOW | crates/smolvm-network/src/device.rs | 21 | //! ``` | COMMENT |
| LOW | crates/smolvm-network/src/device.rs | 41 | use smoltcp::phy::{self, DeviceCapabilities, Medium}; | COMMENT |
| LOW | crates/smolvm-network/src/device.rs | 101 | /// - the poll loop may need to classify it before calling | COMMENT |
| LOW | crates/smolvm-network/src/tcp_relay.rs | 1 | //! TCP relay support for the virtio-net backend. | COMMENT |
| LOW | crates/smolvm-network/src/tcp_relay.rs | 121 | } | COMMENT |
| LOW | crates/smolvm-network/src/tcp_relay.rs | 141 | #[derive(Clone, Debug)] | COMMENT |
| LOW | crates/smolvm-network/src/tcp_relay.rs | 201 | } | COMMENT |
| LOW | crates/smolvm-network/src/tcp_relay.rs | 281 | COMMENT | |
| LOW | crates/smolvm-network/src/netns_tap.rs | 1 | //! CNI netns ↔ virtio-net L2 bridge for the Kubernetes runtime. | COMMENT |
| LOW | crates/smolvm-network/src/netns_tap.rs | 61 | /// | COMMENT |
| LOW | crates/smolvm-network/src/queues.rs | 1 | //! Shared queues and wake notifications for the virtio-net backend. | COMMENT |
| LOW | crates/smolvm-network/src/queues.rs | 21 | //! | COMMENT |
| LOW | crates/smolvm-network/src/queues.rs | 41 | //! -> guest_to_host.pop() | COMMENT |
| 546 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/common.sh | 54 | # Initialize SMOLVM variable | COMMENT |
| MEDIUM | tests/test_gpu.sh | 155 | # Create a named machine with --gpu, stop+start it, verify DRI still present. | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 474 | # Create a Smolfile in the temp dir (simulating CWD) | COMMENT |
| MEDIUM⚡ | tests/test_api.sh | 209 | # Create a fresh machine | COMMENT |
| MEDIUM⚡ | tests/test_api.sh | 574 | # Create a machine (never start it) | COMMENT |
| MEDIUM | tests/test_machine_bare.sh | 255 | # Create the named VM first | COMMENT |
| MEDIUM⚡ | tests/test_pack.sh | 635 | # Create a named VM with network, install a package, then stop it | COMMENT |
| MEDIUM | tests/test_pack.sh | 521 | # Create a temp dir with a single .smolmachine file | COMMENT |
| MEDIUM | tests/test_db.sh | 29 | # Create a named VM with specific configuration | COMMENT |
| MEDIUM | tests/test_db.sh | 58 | # Create a named VM | COMMENT |
| MEDIUM | tests/test_db.sh | 103 | # Create a VM | COMMENT |
| MEDIUM | tests/test_volumes.sh | 29 | # Create a host directory with a test file | COMMENT |
| MEDIUM | src/api/mod.rs | 15 | //! # Create a machine | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Makefile.toml | 4 | # Usage: | COMMENT |
| LOW | tests/test_gpu.sh | 13 | # Usage: | COMMENT |
| LOW | tests/test_smolfile.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_secrets.sh | 15 | # Usage: | COMMENT |
| LOW | tests/test_cli.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_api.sh | 7 | # Usage: | COMMENT |
| LOW⚡ | tests/test_pack_registry.sh | 12 | # Usage: | COMMENT |
| LOW | tests/test_resize.sh | 6 | # Usage: | COMMENT |
| LOW | tests/run_tests.sh | 5 | # Usage: | COMMENT |
| LOW | tests/test_pack.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_scale.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/build-dist.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/install.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/test-registry.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/install-local.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/install-k8s-runtime.sh | 11 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/smolvm-registry/src/client.rs | 893 | // Step 1: attach a preemptive bearer to the initial send only. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 902 | // Step 2: send. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 979 | // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption). | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 986 | // Step 2: send with a fresh body from the factory. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1007 | // Step 3: token for the scope this request actually needs, fresh body. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1014 | // Step 4: force-evict stale cache entry, genuinely fresh token, final body. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 198 | // Step 1: POST to initiate upload. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 228 | // Step 2: PUT the blob data with digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 319 | // Step 1: POST to initiate upload (empty body — always replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 350 | // Step 2: PUT with streaming body via factory. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 403 | // Step 1: POST to open an upload session (empty body — replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 419 | // Step 2: PATCH contiguous chunks. The registry hands back a fresh upload | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 458 | // Step 3: PUT (empty body) to close the session, carrying the digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 936 | // Step 5: force-evict and fetch a genuinely fresh token → second retry. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/smolvm-registry/src/client.rs | 893 | // Step 1: attach a preemptive bearer to the initial send only. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 902 | // Step 2: send. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 979 | // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption). | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 986 | // Step 2: send with a fresh body from the factory. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1007 | // Step 3: token for the scope this request actually needs, fresh body. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1014 | // Step 4: force-evict stale cache entry, genuinely fresh token, final body. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 198 | // Step 1: POST to initiate upload. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 228 | // Step 2: PUT the blob data with digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 319 | // Step 1: POST to initiate upload (empty body — always replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 350 | // Step 2: PUT with streaming body via factory. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 403 | // Step 1: POST to open an upload session (empty body — replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 419 | // Step 2: PATCH contiguous chunks. The registry hands back a fresh upload | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 458 | // Step 3: PUT (empty body) to close the session, carrying the digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 936 | // Step 5: force-evict and fetch a genuinely fresh token → second retry. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/common.sh | 410 | # Check if any smolvm processes are running that might interfere with tests | COMMENT |
| LOW | tests/test_pack.sh | 1198 | # Check if docker is available | COMMENT |
| LOW | tests/test_volumes.sh | 45 | # Read the file via machine exec (VmExec) — this exercises boot-time mount | COMMENT |
| LOW | tests/bench_vm_startup.sh | 41 | # Check if smolvm is available | COMMENT |
| LOW | scripts/build-dist.sh | 305 | # Set CODESIGN_IDENTITY to a Developer ID for distribution signing. | COMMENT |
| LOW | scripts/smolvm-wrapper.sh | 35 | # Check if binary exists | COMMENT |
| LOW | scripts/smolvm-wrapper.sh | 42 | # Check if libraries exist | COMMENT |
| LOW | scripts/install.sh | 499 | # Check if already in PATH | COMMENT |
| LOW | scripts/install.sh | 505 | # Check if already in profile | COMMENT |
| LOW | scripts/rebuild-agent.sh | 43 | # Check if rootfs directory exists | COMMENT |
| LOW | scripts/install-local.sh | 194 | # Check if it's a tarball or directory | COMMENT |
| LOW | scripts/smol-wrapper.sh | 39 | # Check if binary exists | COMMENT |
| LOW | scripts/smol-wrapper.sh | 46 | # Check if libraries exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/test_secrets.sh | 76 | # `env` (busybox) prints the whole environment — robust across rootfs builds. | COMMENT |
| MEDIUM⚡ | .github/workflows/ci.yml | 277 | # the WHP QA harness (unit tests can additionally be run under Wine with | COMMENT |
| MEDIUM | src/agent/manager.rs | 2276 | // Combined with agent-side sync(), this provides robust data integrity | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/check-secrets-guards.sh | 3 | # Static guardrails for host-side secret references. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 1966 | // warning, never cause wrong behavior — unlike the fake-data stubs that | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_network.sh | 629 | except Exception: | CODE |