2.0

Adjusted Signal

2.0

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

5.7K

Stars

TypeScript

Language

345.9K

Lines of Code

1.5K

Files

429

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 356 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.7/100 · LOW

Are imports declared and package/API names verified? 21 finding(s).

Agent Over-Engineering Ratio 4.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 216 finding(s).

PR Review Velocity Impact 9.9/100 · LOW

Which changes need focused human review? 429 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 4MEDIUM 126LOW 297

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 429 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers164 hits · 166 pts

Severity	File	Line	Snippet	Context
LOW	test/createJestConfig.js	6	function getTestSnykIgnoreListPatterns() {	CODE
LOW	test/jest/unit/cli-monitor-utils.spec.ts	7	function stubScannedProjectContainer() {	CODE
LOW	test/jest/unit/iac/results-formatter.fixtures.ts	103	export function generateCloudConfigResults({	CODE
LOW	test/jest/util/dotnetRuntimeResolution.ts	9	export function parseDepGraphFromPrintGraphOutput(stdout: string) {	CODE
LOW	test/jest/util/dotnetRuntimeResolution.ts	24	export async function setupNugetProjectFromWorkspace(	CODE
LOW	test/jest/acceptance/proxy-behavior.spec.ts	23	function getConnectionRefusedRegExp(): string \| RegExp {	CODE
LOW	test/jest/acceptance/snyk-aibom/aibom.spec.ts	13	function aiBomRestEndpointRequests(requests: Request[]): string[] {	CODE
LOW	test/jest/acceptance/snyk-sbom/common.ts	4	export async function runSnykSbomCliCycloneDxJsonForFixture(	CODE
LOW	packages/snyk-protect/src/lib/patch.ts	4	export function createOldStylePatchAppliedFlagFilename(vulnId: string) {	CODE
LOW	packages/snyk-protect/src/lib/patch.ts	40	export function extractTargetFilePathFromPatch(patchContents: string): string {	CODE
LOW	…ckages/snyk-fix/test/helpers/generate-entity-to-fix.ts	37	export function generateEntityToFixWithFileReadWrite(	CODE
LOW	packages/snyk-fix/src/plugins/package-tool-supported.ts	23	export async function checkPackageToolSupported(	CODE
LOW	…ckages/snyk-fix/src/plugins/python/get-handler-type.ts	31	export function isRequirementsTxtManifest(targetFile: string): boolean {	CODE
LOW	…ckages/snyk-fix/src/plugins/python/get-handler-type.ts	35	function getTypeFromPackageManager(packageManager: string) {	CODE
LOW	…ix/src/plugins/python/map-entities-per-handler-type.ts	9	export function mapEntitiesPerHandlerType(entities: EntityToFix[]): {	CODE
LOW	…c/plugins/python/handlers/attempted-changes-summary.ts	41	export function generateSuccessfulChanges(	CODE
LOW	…/src/plugins/python/handlers/pip-requirements/index.ts	131	export async function fixIndividualRequirementsTxt(	CODE
LOW	…ements/update-dependencies/requirements-file-parser.ts	42	function extractDependencyDataFromLine(	CODE
LOW	…-fix/src/lib/output-formatters/show-results-summary.ts	57	export function generateSuccessfulFixesSummary(	CODE
LOW	…-fix/src/lib/output-formatters/show-results-summary.ts	80	export function generateUnresolvedSummary(	CODE
LOW	…-fix/src/lib/output-formatters/show-results-summary.ts	215	export function formatIssueCountBySeverity({	CODE
LOW	…kages/snyk-fix/src/lib/errors/error-to-user-message.ts	4	export function convertErrorToUserMessage(error: CustomError): string {	CODE
LOW	src/cli/main.ts	386	function validateUnsupportedOptionCombinations(	CODE
LOW	src/cli/main.ts	464	function validateUnsupportedSarifCombinations(args) {	CODE
LOW	src/cli/commands/monitor/process-json-monitor.ts	3	export function processJsonMonitorResponse(	CODE
LOW	src/cli/commands/monitor/index.ts	515	export function validateProjectAttributes(options): void {	CODE
LOW	src/cli/commands/monitor/index.ts	521	export function generateProjectAttributes(options): ProjectAttributes {	CODE
LOW	src/cli/commands/test/utils.ts	3	export function getPathWithOptionalProjectName(	CODE
LOW	src/cli/commands/test/validate-test-options.ts	20	function validateSeverityThreshold(severityThreshold) {	CODE
LOW	src/cli/commands/test/iac/output.ts	280	export function buildShareResultsSummaryIacPlus({	CODE
LOW	src/cli/commands/test/iac/output.ts	326	export function shouldPrintShareResultsTip(options: IaCTestFlags): boolean {	CODE
LOW	src/cli/commands/test/iac/output.ts	330	function shouldPrintShareCustomRulesDisclaimer(	CODE
LOW	src/cli/commands/test/iac/local-execution/index.ts	174	function shouldLoadVarDefinitionsFile(	CODE
LOW	src/cli/commands/test/iac/local-execution/file-utils.ts	56	export function computeCustomRulesBundleChecksum(): string \| undefined {	CODE
LOW	src/cli/commands/test/iac/local-execution/file-utils.ts	131	export function createPathExclusionMatcher(	CODE
LOW	…/cli/commands/test/iac/local-execution/file-scanner.ts	55	export function validateResultFromCustomRules(result: IacFileScanResult): {	CODE
LOW	…ds/test/iac/local-execution/assert-iac-options-flag.ts	178	export function assertIntegratedIaCOnlyOptions(	CODE
LOW	…t/iac/local-execution/parsers/terraform-plan-parser.ts	97	function referencedResourcesResolver(	CODE
LOW	…t/iac/local-execution/parsers/terraform-plan-parser.ts	136	function extractReferencedResources(	CODE
LOW	…li/commands/test/iac/local-execution/rules/oci-pull.ts	15	export function extractOCIRegistryURLComponents(	CODE
LOW	…c/cli/commands/test/iac/local-execution/rules/rules.ts	95	function checkOCIRegistryURLProvided(iacOrgSettings: IacOrgSettings): boolean {	CODE
LOW	…c/cli/commands/test/iac/local-execution/rules/rules.ts	105	function checkOCIRegistryURLExistsInSettings(	CODE
LOW	…c/cli/commands/test/iac/local-execution/rules/rules.ts	117	function getOCIRegistryURLComponentsFromSettings(	CODE
LOW	…c/cli/commands/test/iac/local-execution/rules/rules.ts	131	function getOCIRegistryURLComponentsFromEnv() {	CODE
LOW	…c/cli/commands/test/iac/local-execution/rules/rules.ts	144	function getOCIRegistryURLComponents(	CODE
LOW	src/cli/commands/test/iac/v2/index.ts	35	async function testWithSnykIacTestBinary(	CODE
LOW	src/cli/commands/test/iac/v2/index.ts	63	async function buildResultFromCliExtensionIac(	CODE
LOW	src/cli/commands/test/iac/v2/assert-iac-options.ts	96	function assertCloudContextOptions(cloudContext: string) {	CODE
LOW	src/cli/commands/auth/index.ts	152	function errorForFailedAuthAttempt(res, body) {	CODE
LOW	…/cli/commands/fix/validate-fix-command-is-supported.ts	14	export async function validateFixCommandIsSupported(	CODE
LOW	…ds/fix/convert-legacy-tests-results-to-fix-entities.ts	9	export function convertLegacyTestResultToFixEntities(	CODE
LOW	…/cli/commands/fix/convert-legacy-test-result-to-new.ts	32	export function convertLegacyTestResultToNew(	CODE
LOW	…mands/fix/convert-legacy-test-result-to-scan-result.ts	4	export function convertLegacyTestResultToScanResult(	CODE
LOW	src/lib/spotlight-vuln-notification.ts	32	export function notificationForSpotlightVulns(	CODE
LOW	src/lib/detect.ts	172	export function localFileSuppliedButNotFound(root, file) {	CODE
LOW	src/lib/detect.ts	217	export function detectPackageManagerFromFile(	CODE
LOW	src/lib/detect.ts	249	function detectPackageManagerFromRegistry(registry) {	CODE
LOW	src/lib/protect-update-notification.ts	9	export function getProtectUpgradeWarningForPaths(	CODE
LOW	src/lib/protect-update-notification.ts	40	export function packageJsonFileExistsInDirectory(	CODE
LOW	src/lib/protect-update-notification.ts	53	export function checkPackageJsonForSnykDependency(	CODE
104 more matches not shown…

Decorative Section Separators45 hits · 144 pts

Severity	File	Line	Snippet	Context
MEDIUM	…workspaces/unmanaged/deps/zlib-1.2.11.1/CMakeLists.txt	89	#============================================================================	COMMENT
MEDIUM	…workspaces/unmanaged/deps/zlib-1.2.11.1/CMakeLists.txt	91	#============================================================================	COMMENT
MEDIUM	…workspaces/unmanaged/deps/zlib-1.2.11.1/CMakeLists.txt	229	#============================================================================	COMMENT
MEDIUM	…workspaces/unmanaged/deps/zlib-1.2.11.1/CMakeLists.txt	231	#============================================================================	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	253	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	258	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	268	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	300	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	305	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	315	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	334	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	336	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	345	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	350	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	403	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	405	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	414	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	419	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	429	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	455	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	457	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	466	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	471	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	481	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	524	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	526	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	534	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	539	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	545	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	558	// ── GIVEN ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	563	// ── WHEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	573	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	63	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	65	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	106	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	108	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	155	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	157	// ──────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	188	// ─── Helpers using the closure of the suite ──────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	228	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	230	// ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…est/acceptance/snyk-sbom/allow-incomplete-sbom.spec.ts	371	// ── THEN ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	help/cli-commands/cos-target-template.md	31	# ── Target ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	help/cli-commands/cos-target-template.md	41	# ── Authentication ──────────────────────────────────────────────────	COMMENT
MEDIUM	help/cli-commands/cos-target-template.md	81	# ── Other settings ──────────────────────────────────────────────────	COMMENT

AI Slop Vocabulary66 hits · 133 pts

Severity	File	Line	Snippet	Context
MEDIUM	…workspaces/fail-on/docker/no-fixable/vulns-result.json	1867	"description": "## Overview\nThe SSL protocol, as used in certain configurations in Microsoft Windows and Micros	CODE
MEDIUM	…workspaces/fail-on/docker/no-fixable/vulns-result.json	3722	"description": "## Overview\nalter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via	CODE
MEDIUM	…ptance/workspaces/fail-on/docker/no-fixable/vulns.json	2661	"description": "## Overview\nThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsof	CODE
MEDIUM	…ptance/workspaces/fail-on/docker/no-fixable/vulns.json	3055	"description": "## Overview\nThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsof	CODE
MEDIUM	…ptance/workspaces/fail-on/docker/no-fixable/vulns.json	6808	"description": "## Overview\nalter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via c	CODE
MEDIUM	…ptance/workspaces/fail-on/docker/no-fixable/vulns.json	7127	"description": "## Overview\nalter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via c	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	659	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	811	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	895	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	895	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	1067	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	1161	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	1982	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	2162	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	2262	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	2262	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	2464	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	…ceptance/workspaces/fail-on/pinnable/vulns-result.json	2572	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web fram	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	675	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	931	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	1070	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	1070	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	1348	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	1495	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framewor	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	2725	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	2985	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	3126	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	3126	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	3408	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	test/acceptance/workspaces/fail-on/pinnable/vulns.json	3557	"description": "## Overview\r\n[`django`](https://pypi.python.org/pypi/django) is a high-level Python Web framew	CODE
MEDIUM	…by-app/test-graph-response-with-legal-instruction.json	13	"description": "## Overview\n[rack](https://rubygems.org/gems/rack) provides a minimal, modular and adaptable inte	CODE
MEDIUM	…by-app/test-graph-response-with-legal-instruction.json	88	"description": "## Overview\n[rack](https://rubygems.org/gems/rack) provides a minimal, modular and adaptable inte	CODE
MEDIUM	…by-app/test-graph-response-with-legal-instruction.json	165	"description": "## Overview\n[rack](https://rubygems.org/gems/rack) provides a minimal, modular and adaptable inte	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	359	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	359	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	443	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	443	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	505	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	505	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	634	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalization	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	634	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalization	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	711	"description": "## Overview\n[yargs-parser](https://www.npmjs.com/package/yargs-parser) is a mighty option parse	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	711	"description": "## Overview\n[yargs-parser](https://www.npmjs.com/package/yargs-parser) is a mighty option parse	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1280	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility lib	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1280	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility lib	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1344	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility lib	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1344	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility lib	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1408	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalizati	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/ap-dev.json	1408	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalizati	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	359	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	359	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	443	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	443	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	505	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	505	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility libra	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	634	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalization	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	634	"description": "## Overview\n[y18n](https://www.npmjs.com/package/y18n) is a the bare-bones internationalization	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	711	"description": "## Overview\n[yargs-parser](https://www.npmjs.com/package/yargs-parser) is a mighty option parse	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	711	"description": "## Overview\n[yargs-parser](https://www.npmjs.com/package/yargs-parser) is a mighty option parse	CODE
MEDIUM	test/acceptance/workspaces/yarn-workspaces/yw-dev.json	1280	"description": "## Overview\n[lodash](https://www.npmjs.com/package/lodash) is a modern JavaScript utility lib	CODE
6 more matches not shown…

Over-Commented Block94 hits · 94 pts

Severity	File	Line	Snippet	Context
LOW	test/acceptance/fake-server.ts	501	});	COMMENT
LOW	…workspaces/monorepo-with-nuget/src/frontend/Gopkg.toml	1	# Gopkg.toml example	COMMENT
LOW	…cceptance/workspaces/mono-repo-go/hello-dep/Gopkg.toml	1	# Gopkg.toml example	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	21		COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	61	# define DEF_WBITS MAX_WBITS	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	81	#define PRESET_DICT 0x20 /* preset dictionary flag in zlib header */	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	101		COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	121		COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	141	# endif	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	161		COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	201	#ifndef F_OPEN	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	221	# ifdef SMALL_MEDIUM /* MSDOS small or medium model */	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.h	241	# define Assert(cond,msg) {if(!(cond)) z_error(msg);}	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/crc32.c	21	DYNAMIC_CRC_TABLE and MAKECRCH can be #defined to write out crc32.h.	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.c	61	#ifdef ZLIB_DEBUG	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.c	81	#endif	COMMENT
LOW	…ptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zutil.c	101	# ifdef NO_snprintf	COMMENT
LOW	…ance/workspaces/unmanaged/deps/zlib-1.2.11.1/deflate.h	41		COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	1	/* gzguts.h -- zlib internal header definitions for gz* operations	COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	21	#include <stdio.h>	COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	41		COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	61	#endif	COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	81	# ifdef __TURBOC__	COMMENT
LOW	…tance/workspaces/unmanaged/deps/zlib-1.2.11.1/gzguts.h	121	#ifndef STDC	COMMENT
LOW	…eptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zlib.h	161	reports. After compression, total_in holds the total size of the	COMMENT
LOW	…eptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zlib.h	181	#define Z_STREAM_ERROR (-2)	COMMENT
LOW	…eptance/workspaces/unmanaged/deps/zlib-1.2.11.1/zlib.h	1841	ZEXTERN z_off64_t ZEXPORT gztell64 OF((gzFile));	COMMENT
LOW	…workspaces/unmanaged/deps/zlib-1.2.11.1/test/example.c	1	/* example.c -- usage example of the zlib compression library	COMMENT
LOW	…orkspaces/unmanaged/deps/zlib-1.2.11.1/test/minigzip.c	21	#ifdef STDC	COMMENT
LOW	…orkspaces/unmanaged/deps/zlib-1.2.11.1/test/minigzip.c	41	#endif	COMMENT
LOW	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	1	#!/bin/sh	COMMENT
LOW	…ps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/GZipStream.cs	141	#region Basic reading and writing	COMMENT
LOW	…ps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/GZipStream.cs	181	public override int ReadByte()	COMMENT
LOW	…eps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/CodecBase.cs	81	resetOutput();	COMMENT
LOW	…eps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/CodecBase.cs	101	/// <remarks>Adding data may, or may not, raise the <c>DataAvailable</c> event</remarks>	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/AssemblyInfo.cs	21	// Major Version	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/AssemblyInfo.cs	41	// a key.	COMMENT
LOW	…eps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/UnitTests.cs	1	//	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	61	public enum CompressLevel : int	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	81		COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	121	/// <summary>	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	141	void Update(byte[] data, int offset, int count);	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	161	/// are available.	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	181	/// <summary>	COMMENT
LOW	…/deps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/DotZLib.cs	261	/// Gets the size of the unsigned int that was compiled into Zlib	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	1	//	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	21	{	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	41	{	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	61	/// <exception cref="ArgumentException">The sum of offset and count is larger than the length of <c>data</c></ex	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	101	/// <summary>	COMMENT
LOW	…/zlib-1.2.11.1/contrib/dotzlib/DotZLib/ChecksumImpl.cs	161		COMMENT
LOW	…s/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/unzip.c	61		COMMENT
LOW	…s/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/unzip.c	81	# include <stdlib.h>	COMMENT
LOW	…s/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/unzip.c	101		COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.c	21		COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.c	41	#endif	COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.c	61	#ifndef ALLOC	COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.c	81	#endif	COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.h	41	#define _zip12_H	COMMENT
LOW	…ces/unmanaged/deps/zlib-1.2.11.1/contrib/minizip/zip.h	61	#define Z_BZIP2ED 12	COMMENT
34 more matches not shown…

Fake / Example Data18 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW⚡	…unit/lib/formatters/legal-license-instructions.spec.ts	11	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	…unit/lib/formatters/legal-license-instructions.spec.ts	11	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	…unit/lib/formatters/legal-license-instructions.spec.ts	16	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	…unit/lib/formatters/legal-license-instructions.spec.ts	16	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	115	'Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque doloribus molestiae atque eveniet, minus,	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	115	'Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque doloribus molestiae atque eveniet, minus,	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	117	'Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque doloribus molestiae atque eveniet, minus,	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	117	'Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque doloribus molestiae atque eveniet, minus,	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	128	.toContain(`Info: Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	128	.toContain(`Info: Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	131	Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque	CODE
LOW⚡	…b/formatters/iac-output/text/issues-list/index.spec.ts	131	Lorem ipsum dolor sit amet consectetur adipisicing elit. Cumque	CODE
LOW	test/jest/acceptance/api-auto-detect.spec.ts	10	name: 'John Doe',	CODE
LOW	test/jest/acceptance/resilience.spec.ts	213	name: 'John Doe',	CODE
LOW	cliv2/internal/helpdocs/fixture.go	16	"do-not-delete": {Data: []byte("placeholder")},	CODE
LOW	…l-to-json-parser-generator-v2/src/hcltojson-v2/test.js	22	'\t\t\t\t"cidr_blocks": "dummy_value",\n' +	CODE
LOW	…l-to-json-parser-generator-v2/src/hcltojson-v2/test.js	30	'\t\t\t"default": "dummy_value",\n' +	CODE
LOW	…-generator-v2/src/hcltojson-v2/sg_open_ssh_defaults.tf	9	default = "dummy_value"	CODE

AI Response Leakage3 hits · 22 pts

Severity	File	Line	Snippet	Context
HIGH	…ps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/GZipStream.cs	263	/// <remarks>In this implementation, this method does nothing. This is because excessive	COMMENT
HIGH	…ps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/GZipStream.cs	273	/// <remarks>In this implementation this property is not supported</remarks>	COMMENT
HIGH	…ps/zlib-1.2.11.1/contrib/dotzlib/DotZLib/GZipStream.cs	290	/// <remarks>In this implementation this property is not supported</remarks>	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	test/tap/cli-test/cli-test.ruby.spec.ts	768	const rootNodePkgId = req.body.depGraph.graph.nodes.find(	CODE
CRITICAL	src/lib/ecosystems/resolve-test-facts.ts	133	const dependencyCount = response.data.result.dep_graph.graph.nodes.find(	CODE

Self-Referential Comments5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	164	# Create the OS/400 library if it does not exist.	COMMENT
MEDIUM	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	172	# Create the DOCS source file if it does not exist.	COMMENT
MEDIUM	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	194	# Create the OS/400 source program file for the C header files.	COMMENT
MEDIUM	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	205	# Create the IFS directory for the C header files.	COMMENT
MEDIUM	…t/jest/unit/iac/file-parser.cloudformation.fixtures.ts	11	# Create the Aurora MySQL DB	COMMENT

Excessive Try-Catch Wrapping7 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/install-snyk.py	111	print(f"Error trying to download Snyk CLI {download_version} via {base_url}: {e}")	CODE
LOW	scripts/install-snyk.py	149	except Exception:	CODE
MEDIUM	scripts/install-snyk.py	144	def is_alpine():	CODE
MEDIUM	scripts/download_go.py	32	print("Error while calculating sha256sum of file:", e)	CODE
MEDIUM	scripts/download_go.py	58	print("Error while downloading the file:", e)	CODE
MEDIUM	scripts/download_go.py	71	print("Error while extracting the tar file: ", e)	CODE
MEDIUM	scripts/download_go.py	82	print("Error while unzipping the file: ", e)	CODE

Modern AI Meta-Vocabulary4 hits · 11 pts

Severity	File	Line	Snippet	Context
MEDIUM	release-scripts/upload-artifacts.sh	193	https://api.github.com/repos/snyk/agentic-integration-wrappers/dispatches \	CODE
MEDIUM	release-scripts/upload-artifacts.sh	328	# Trigger building DXT in agentic-integration-wrappers repository	COMMENT
MEDIUM	help/cli-commands/fix.md	7	# Fix (`snyk fix --agentic`)	COMMENT
MEDIUM	help/cli-commands/fix.md	50	### `--agentic`	COMMENT

Verbosity Indicators5 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	cliv2/pkg/core/exitcode.go	49	// Step 1: Check all UFM results - if ANY fail, exit 1 immediately	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	64	// Step 2: If any UFM passed (and none failed), exit 0 regardless of other conditions	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	69	// Step 3: Check test summary for open issues (only if no UFM results)	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	81	// Step 4: Check for data errors (only if no UFM and no test summary issues)	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	91	// Step 5: No issues found, exit 0	COMMENT

Structural Annotation Overuse5 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	cliv2/pkg/core/exitcode.go	49	// Step 1: Check all UFM results - if ANY fail, exit 1 immediately	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	64	// Step 2: If any UFM passed (and none failed), exit 0 regardless of other conditions	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	69	// Step 3: Check test summary for open issues (only if no UFM results)	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	81	// Step 4: Check for data errors (only if no UFM and no test summary issues)	COMMENT
LOW⚡	cliv2/pkg/core/exitcode.go	91	// Step 5: No issues found, exit 0	COMMENT

Redundant / Tautological Comments7 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…/workspaces/unmanaged/deps/zlib-1.2.11.1/os400/make.sh	66	# Set LINK to "YES" if the module has been compiled.	COMMENT
LOW	release-scripts/validate-repository.sh	7	# Check if version is a stable release (clean semver without pre-release identifiers)	COMMENT
LOW	release-scripts/validate-repository.sh	45	# Check if version extraction was successful	COMMENT
LOW	release-scripts/upload-artifacts.sh	77	echo -e "\033[1;33mTrigger Build and Publish Snyk Images:\033[0m" # Set color to yellow	CODE
LOW	release-scripts/create-release.sh	20	# Check if the script runs on the ‘release-candidate’ branch, otherwise FAIL	COMMENT
LOW	release-scripts/next-version.sh	43	# Check if the input string is in the list of valid strings	COMMENT
LOW	.circleci/config.yml	379	# Check if the file exists in the user's home directory	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…et/obj/Debug/netcoreapp1.1/cartservice.AssemblyInfo.cs	3	// This code was generated by a tool.	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	scripts/create-build-image.sh	19	# Example usage:	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/install-snyk.py	14		CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/download_go.py	4		CODE

snyk/cli

Open-Source Code Quality, Security and Technical Debt Review