Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!
This report summarizes scanner evidence for sozu-proxy/sozu, a Rust project with 3,743 GitHub stars. SynthScan examined 323,005 lines of code across 367 source files, recording 2204 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 7.4 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1973 finding(s).
Are imports declared and package/API names verified? 1 finding(s).
Are wrappers, guards, and repeated structures necessary? 231 finding(s).
Which changes need focused human review? 2204 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2204 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | os-build/config.toml | 1 | # top level options | COMMENT |
| LOW | os-build/config.toml | 21 | # but they could be written to a UDP address: | COMMENT |
| LOW | os-build/config.toml | 41 | # `bin/config.toml` for the full schema rationale. | COMMENT |
| LOW | os-build/config.toml | 61 | COMMENT | |
| LOW | os-build/config.toml | 81 | COMMENT | |
| LOW | os-build/config.toml | 101 | # how much time (in milliseconds) sozu command line will wait for a command to complete. | COMMENT |
| LOW | os-build/config.toml | 121 | connect_timeout = 3 | COMMENT |
| LOW | os-build/config.toml | 141 | # You can see those statistics with sozu command line, like this: `sozu metrics get` or | COMMENT |
| LOW | os-build/config.toml | 161 | # specify a different IP than the one the socket sees, for logs and forwarded headers | COMMENT |
| LOW | os-build/config.toml | 181 | # frontend timed out while waiting on a backend (a connect timeout fails over | COMMENT |
| LOW | os-build/config.toml | 201 | COMMENT | |
| LOW | os-build/config.toml | 221 | # a 504 response means a connected backend sent no response in time, or the | COMMENT |
| LOW | bin/build.rs | 61 | // `fips > ring > aws-lc-rs > openssl`. Several can be active in the | COMMENT |
| LOW | bin/config.toml | 1 | # sozu proxy test config file | COMMENT |
| LOW | bin/config.toml | 21 | COMMENT | |
| LOW | bin/config.toml | 41 | # access_logs_target = "file:///var/logs/sozu-access.log" | COMMENT |
| LOW | bin/config.toml | 61 | # operator-friendly tail + machine-parseable archive. | COMMENT |
| LOW | bin/config.toml | 81 | # opens it to every local account. Sozu does not set the group: use a setgid | COMMENT |
| LOW | bin/config.toml | 101 | max_command_buffer_size = 163840 | COMMENT |
| LOW | bin/config.toml | 121 | handle_process_affinity = false | COMMENT |
| LOW | bin/config.toml | 141 | # header when present, else `peer_addr`. When the limit is reached: | COMMENT |
| LOW | bin/config.toml | 161 | # This is a SECOND, INDEPENDENT counter beside `max_connections_per_ip`, | COMMENT |
| LOW | bin/config.toml | 181 | # | COMMENT |
| LOW | bin/config.toml | 201 | # Linux-only kernel-pipe capacity, in bytes, requested for the | COMMENT |
| LOW | bin/config.toml | 221 | # min_buffers = 1 | COMMENT |
| LOW | bin/config.toml | 241 | # maximum time of inactivity for a frontend socket, in seconds | COMMENT |
| LOW | bin/config.toml | 261 | COMMENT | |
| LOW | bin/config.toml | 281 | # the complete configuration, and send an ActivateListener message afterwards | COMMENT |
| LOW | bin/config.toml | 301 | [[listeners]] | COMMENT |
| LOW | bin/config.toml | 321 | # answer_401 = "/absolute/path/to/custom_401.http" | COMMENT |
| LOW | bin/config.toml | 341 | # a cluster. Defaults to "SOZUBALANCEID" | COMMENT |
| LOW | bin/config.toml | 361 | # - "both": X-Forwarded-For/-Proto/-Port and RFC 7239 Forwarded | COMMENT |
| LOW | bin/config.toml | 381 | # a 401 response is sent when a frontend has a Deny rule | COMMENT |
| LOW | bin/config.toml | 401 | # defines the sticky session cookie's name, if `sticky_session` is activated for | COMMENT |
| LOW | bin/config.toml | 421 | # "Forwarding headers"). Default: "both". | COMMENT |
| LOW | bin/config.toml | 441 | # 31_536_000 seconds (1 year) — the HSTS preload list minimum. | COMMENT |
| LOW | bin/config.toml | 461 | # force_replace_backend = false | COMMENT |
| LOW | bin/config.toml | 501 | # Supported group names: | COMMENT |
| LOW | bin/config.toml | 521 | # default certificate and key | COMMENT |
| LOW | bin/config.toml | 541 | COMMENT | |
| LOW | bin/config.toml | 561 | # keep being served and the cap still sends GOAWAY(ENHANCE_YOUR_CALM). | COMMENT |
| LOW | bin/config.toml | 581 | # | COMMENT |
| LOW | bin/config.toml | 601 | # possible options are "http" or "tcp" | COMMENT |
| LOW | bin/config.toml | 621 | # when the listener expects one), or `affinity_header` / | COMMENT |
| LOW | bin/config.toml | 641 | # load_metric = "connections" | COMMENT |
| LOW | bin/config.toml | 661 | COMMENT | |
| LOW | bin/config.toml | 681 | # | COMMENT |
| LOW | bin/config.toml | 701 | COMMENT | |
| LOW | bin/tests/sozu_top_e2e.rs | 1 | //! Subprocess e2e tests for the `sozu top` TUI subcommand. | COMMENT |
| LOW | bin/tests/sozu_top_e2e.rs | 101 | /// `sozu start`, waits for the command socket to appear, runs the TUI | COMMENT |
| LOW | bin/tests/main_upgrade_transfer_rejection_e2e.rs | 1 | //! A rejected main-upgrade candidate must leave the old command graph live. | COMMENT |
| LOW | bin/tests/listener_validate_before_commit_e2e.rs | 1 | //! sozu#1301 end-to-end smoke test. | COMMENT |
| LOW | bin/tests/main_upgrade_compatibility_matrix_e2e.rs | 1 | //! Main-upgrade compatibility across the 2.2.1 / transactional-v2 boundary. | COMMENT |
| LOW | bin/tests/main_upgrade_compatibility_matrix_e2e.rs | 21 | //! The forward 2.2.1 -> current compatibility contract has its own positive | COMMENT |
| LOW | bin/tests/command_socket_mode_e2e.rs | 1 | //! `command_socket_mode` end-to-end test: `sozu start` must give the command | COMMENT |
| LOW | bin/tests/upgrade_pid_file_failure_e2e.rs | 1 | //! A main upgrade whose pid file cannot be written must roll back, not stop | COMMENT |
| LOW | bin/tests/upgrade_fd_inheritance_e2e.rs | 1 | //! sozu#1668 end-to-end test: after worker and main upgrades, no sozu process | COMMENT |
| LOW | bin/tests/sigterm_soft_stop_e2e.rs | 1 | //! sozu#1555 end-to-end test: `SIGTERM` to every process, as `systemctl stop` | COMMENT |
| LOW | bin/tests/load_state_rollback_e2e.rs | 1 | //! sozu#1313 end-to-end coverage: the state replay, against a real master and | COMMENT |
| LOW | bin/tests/load_state_rollback_e2e.rs | 21 | //! 3. [`a_mixed_state_file_keeps_the_accepted_entries_and_reverts_the_rejected_one`] | COMMENT |
| 1837 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 231 | // ── OVERVIEW pane ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 251 | // ── CLUSTERS pane ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 273 | // ── BACKENDS pane ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 284 | // ── LISTENERS pane ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 295 | // ── H2 pane ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | bin/src/ctl/top/snapshot_tests.rs | 306 | // ── EVENTS pane (empty) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 63 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 71 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 105 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 113 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 143 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/simulation-sweep.yml | 145 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | .github/workflows/ci.yml | 638 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | .github/workflows/ci.yml | 646 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 59 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 62 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 420 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 422 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 480 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 488 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 522 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 529 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 547 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 572 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 692 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 694 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 972 | # ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 974 | # └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 1041 | # ── Rule 2: drifted citations ───────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 1437 | # ── Rule 3: dead test-name citations ────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 1669 | # ── Rule 4: pinned snippets ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 1903 | # ── Rule 5: line numbers cited from a Rust comment ────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 2033 | # ── The audit mode: a citation that was ALREADY wrong ──────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 3095 | # ── Rule 2 ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 3250 | # ── Rule 3 ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 3294 | # ── Rule 4 ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 3322 | # ── Rule 5 ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/scripts/check_doc_citations.py | 3395 | # ── The audit mode ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/benches/h2_scheduling.rs | 178 | // ─── RFC 9218 §4 round-robin fairness simulation ──────────────────────── | COMMENT |
| MEDIUM | lib/benches/h2_stream_table.rs | 297 | // ─── Groups 1 and 2: the per-frame lookup ─────────────────────────────── | COMMENT |
| MEDIUM | lib/benches/h2_stream_table.rs | 348 | // ─── Group 3: steady-state churn ──────────────────────────────────────── | COMMENT |
| MEDIUM | lib/benches/h2_stream_table.rs | 377 | // ─── Group 4: the composite write pass ────────────────────────────────── | COMMENT |
| MEDIUM | lib/benches/h2_stream_table.rs | 415 | // ─── Wiring ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/https.rs | 2752 | // ── HSTS listener-default → frontend inheritance ───────────────── | COMMENT |
| MEDIUM | lib/src/backends.rs | 2486 | // ── #892: per-cluster availability tracker ────────────────────────── | COMMENT |
| MEDIUM | lib/src/backends.rs | 2486 | // ── #892: per-cluster availability tracker ────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1001 | // ── Header filtering ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1208 | // ── Header lowercasing ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1234 | // ── HPACK dynamic-table-size-update (RFC 7541 §4.2 / §6.3) ──────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1358 | // ── Elided headers ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1382 | // ── Invalid header name characters ────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1430 | // ── Flow control during DATA emission ──────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1494 | // ── END_STREAM flag management ────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1549 | // ── Finalize ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1629 | // ── ChunkHeader ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1648 | // ── RFC 9218 incremental yield: solo-bucket guard ─────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/converter.rs | 1836 | // ── HPACK budget over-run ──────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/pkawa.rs | 1794 | // ── parse_rfc9218_priority ──────────────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/pkawa.rs | 1861 | // ── is_connection_specific_header ───────────────────────────────────── | COMMENT |
| MEDIUM | lib/src/protocol/mux/pkawa.rs | 1887 | // ── is_invalid_h2_header ───────────────────────────────────────────── | COMMENT |
| 168 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | e2e/src/tests/listener_update_tests.rs | 1192 | // Step 1: deactivate. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1203 | // Step 2: update a H2 knob while deactivated. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1217 | // Step 3: reactivate. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1230 | // Step 4: verify knob in state. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2175 | // Step 2: Send DATA frame with body (no END_STREAM). | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2181 | // Step 3: Send trailer HEADERS with END_STREAM + END_HEADERS. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2260 | // Step 2: Send DATA frame with body (no END_STREAM). | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2266 | // Step 3: Send trailer HEADERS with a pseudo-header (:method GET). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 111 | // Step 1: Send HEADERS on stream 1 WITHOUT END_HEADERS. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 151 | // Step 2: Send 30 CONTINUATION frames, each referencing the dynamic table | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2158 | // Step 1: Send HEADERS for POST on stream 1 (no END_STREAM, has END_HEADERS). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2195 | // Step 4: Read response from sozu. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2248 | // Step 1: Send HEADERS for POST on stream 1 (no END_STREAM). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2283 | // Step 4: Read response. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2424 | // Step 1: Send SETTINGS with HEADER_TABLE_SIZE=0 (setting id=1, value=0). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2439 | // Step 2: Send a HEADERS request using only static table references | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2465 | // Step 3: Read response. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9134 | // Step 1: Read sozu's client preface + SETTINGS | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9141 | // Step 2: Send our SETTINGS (empty) + SETTINGS ACK | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9155 | // Step 3: Read sozu's SETTINGS ACK + HEADERS request | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9164 | // Step 4: Send a valid HEADERS response + DATA on stream 1 | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 8990 | // Step 1: Verify the listener works with the original certificate | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9012 | // Step 2: Replace the certificate (using the same cert for test purposes) | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9033 | // Step 3: New connection should work with the (replaced) certificate | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9201 | // Step 5: Flood with the specified frame type | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | e2e/src/tests/listener_update_tests.rs | 1192 | // Step 1: deactivate. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1203 | // Step 2: update a H2 knob while deactivated. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1217 | // Step 3: reactivate. | COMMENT |
| LOW | e2e/src/tests/listener_update_tests.rs | 1230 | // Step 4: verify knob in state. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2175 | // Step 2: Send DATA frame with body (no END_STREAM). | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2181 | // Step 3: Send trailer HEADERS with END_STREAM + END_HEADERS. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2260 | // Step 2: Send DATA frame with body (no END_STREAM). | COMMENT |
| LOW⚡ | e2e/src/tests/h2_security_tests.rs | 2266 | // Step 3: Send trailer HEADERS with a pseudo-header (:method GET). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 111 | // Step 1: Send HEADERS on stream 1 WITHOUT END_HEADERS. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 151 | // Step 2: Send 30 CONTINUATION frames, each referencing the dynamic table | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2158 | // Step 1: Send HEADERS for POST on stream 1 (no END_STREAM, has END_HEADERS). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2195 | // Step 4: Read response from sozu. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2248 | // Step 1: Send HEADERS for POST on stream 1 (no END_STREAM). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2283 | // Step 4: Read response. | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2424 | // Step 1: Send SETTINGS with HEADER_TABLE_SIZE=0 (setting id=1, value=0). | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2439 | // Step 2: Send a HEADERS request using only static table references | COMMENT |
| LOW | e2e/src/tests/h2_security_tests.rs | 2465 | // Step 3: Read response. | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9134 | // Step 1: Read sozu's client preface + SETTINGS | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9141 | // Step 2: Send our SETTINGS (empty) + SETTINGS ACK | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9155 | // Step 3: Read sozu's SETTINGS ACK + HEADERS request | COMMENT |
| LOW⚡ | e2e/src/tests/h2_tests.rs | 9164 | // Step 4: Send a valid HEADERS response + DATA on stream 1 | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 8990 | // Step 1: Verify the listener works with the original certificate | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9012 | // Step 2: Replace the certificate (using the same cert for test purposes) | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9033 | // Step 3: New connection should work with the (replaced) certificate | COMMENT |
| LOW | e2e/src/tests/h2_tests.rs | 9201 | // Step 5: Flood with the specified frame type | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bin/src/command/requests.rs | 4163 | // higher-leverage of the two reason-join paths. | COMMENT |
| MEDIUM⚡ | .github/workflows/ci.yml | 641 | # │ The sozu-sim harness is cfg-gated off in the main matrix │ | COMMENT |
| MEDIUM | lib/src/tcp.rs | 5070 | // (robust to any starting value), not an absolute reading. The | COMMENT |
| MEDIUM | lib/src/router/mod.rs | 7697 | // section's prose was itself ADDED by the sozu#1356 fix this harness | COMMENT |
| MEDIUM | e2e/src/tests/udp_tests.rs | 415 | // a handful) keeps the distribution sanity check below robust: with a | COMMENT |
| MEDIUM | e2e/src/tests/tests.rs | 5867 | /// upgrade (sozu#1688). The harness seeds the new worker from its mirror | COMMENT |
| MEDIUM⚡ | sim/Cargo.toml | 16 | # Test-only harness crate: never published, never linked by the `sozu` binary. | COMMENT |
| MEDIUM⚡ | sim/Cargo.toml | 19 | # `#[cfg(tokio_unstable)]` gates the harness (see tests/udp_simulation.rs); declare | COMMENT |
| MEDIUM⚡ | sim/Cargo.toml | 24 | # The harness is an integration test (tests/udp_simulation.rs, tests/tcp_preread_sim.rs, | COMMENT |
| MEDIUM | sim/tests/metrics_lease_sim.rs | 108 | //! # What this harness does NOT cover | COMMENT |
| MEDIUM | sim/tests/backend_selection_sim.rs | 460 | "seed={:#x}: the window must close one second later on the harness's clock", | CODE |
| MEDIUM | sim/tests/h2_simulation.rs | 133 | //! # Why the clock is the harness's and not moonpool's | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | e2e/src/tests/hsts_tests.rs | 236 | /// e2e tests reuse the existing TLS scaffold (cert generation, | COMMENT |
| MEDIUM | e2e/src/tests/tests.rs | 5578 | // * `test_x_real_ip_elide_h2_trailer` — H2 trailer regression (Codex finding); scaffold pending. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | e2e/lifecycle/keepalive_cookie.py | 129 | except subprocess.TimeoutExpired: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/check_doc_citations.py | 949 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1185 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1273 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1568 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1616 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1780 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 1972 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 2308 | CODE | |
| LOW | .github/scripts/check_doc_citations.py | 3014 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/check_doc_citations.py | 714 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | command/src/logging/access_logs.rs | 26 | /// Don't forget to use std::mem::forget or ManuallyDrop over one of your owners | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/bench_logs.py | 4 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/check_doc_citations.py | 1972 | def check_rust_comment_citations(root, historical=None, show=False, out=sys.stdout): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | e2e/lifecycle/tcp_upgrade/client.py | 62 | except Exception as error: # the result file records the observed lifecycle boundary | CODE |