Your platform team, as a service
This report presents the forensic synthetic code analysis of tuist/tuist, a Swift project with 5,744 GitHub stars. SynthScan v2.0 examined 811,045 lines of code across 6321 source files, recording 1975 pattern matches distributed across 18 syntactic categories. The overall adjusted score of 3.5 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1975 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 21 | # still happens lazily — the controller stamps the | COMMENT |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 21 | # 7. Install the platform chart (cert-manager, ESO, external-dns, | COMMENT |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 241 | COMMENT | |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 261 | # workload cluster. | COMMENT |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 361 | # `appVersion` is a placeholder, not a real image with the encrypted | COMMENT |
| LOW | infra/mise/tasks/k8s/bootstrap-workload.sh | 381 | # present a Cloudflare Origin Certificate to satisfy "Full (strict)" | COMMENT |
| LOW | infra/mise/tasks/k8s/install-kura-platform.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/k8s/install-platform.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-host.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-host.sh | 21 | # | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-host.sh | 41 | # | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-host.sh | 221 | err " scw apple-silicon server reinstall <server-id> zone=<zone> \\" | COMMENT |
| LOW | infra/mise/tasks/k8s/prepare-fleet-host.sh | 261 | printf ' ✓ sudoers: installed\n' | COMMENT |
| LOW | infra/mise/tasks/preview/seed-account.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/mise/tasks/helm/preview-up.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1 | // Package bootstrap turns a freshly-provisioned macOS host into a | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 21 | // so Virtualization.framework has a live console session. | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 81 | // Machine to its Node. Empty omits the flag (Node left unbound until | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 101 | // executable inside it because Tart's signature + Virtualization. | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 121 | COMMENT | |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 141 | // runner VMs on this host reach the in-cluster Kura runner-cache | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 161 | COMMENT | |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 181 | // attachment (per-host — Scaleway assigns it at attach time; the | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 201 | // HostCPU / HostMemoryMB / MaxPods are advertised on the Node. | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 221 | // there's a race window where a Node is `Ready` but unlabeled | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 241 | // vm-image-builder fleet; pure Node hosts leave this nil. | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 261 | // `UpdateTartKubelet` re-renders the plist on every binary roll | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 281 | RunnerCacheVolumeGiB int | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 361 | // Actions runner agent. Skipped entirely for pure Node hosts | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 381 | // Tailscale binaries + auth key wired (the install step is itself | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 441 | } | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 601 | # signature, but overwriting /usr/local/bin/tart-kubelet at the same inode | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 621 | // - Re-registration churn: every `bootout`+`bootstrap` re-registers | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 721 | maxPods := cfg.MaxPods | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 761 | // the flag kubelet would pick the first non-loopback interface, | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 781 | // Builder-fleet hosts never have Pods scheduled but bake images with | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 961 | COMMENT | |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1001 | // available". | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1021 | // On headless Apple Silicon Mac minis (Scaleway, AWS EC2 Mac, etc.) | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1061 | COMMENT | |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1101 | // preflight that re-establishes the session on demand, but | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1181 | ` | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1201 | // What the rules allow: | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1221 | // cfg.VMKuraEgressCIDR is set, VMs may reach that CIDR (the | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1241 | // address. Translation rules must land in pf's translation slot, | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1321 | COMMENT | |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1341 | block drop out quick from <vm_sources> to <blocked_dst> | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1361 | load anchor "tuist.runners" from "/etc/pf.anchors/tuist.runners" | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1421 | // VMCachePNCIDR being set, matching installVMEgressFirewall. | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1441 | # VM churn — VMs egressed with their 192.168.64.x source, the | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1581 | // | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1621 | exit 1 | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1661 | sleep 2 | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1681 | // with `$(sudo cat …)` so the formatted script (and any error | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1741 | } | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1761 | # daemon holds file handles on the old executable and replacing it | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1781 | # nowhere to read what went wrong (we hit this in staging: the | COMMENT |
| LOW | infra/macos-host-bootstrap/bootstrap.go | 1821 | # Wait for tailscaled to accept IPC before sending it 'up'. | COMMENT |
| 1546 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | infra/hetzner-robot-controller/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/cluster-api-provider-tuist/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/runner-image/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/runners-controller/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/linux-runner-image/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/stable-egress-controller/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/xcresult-processor-image/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/helm/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | swifterpm/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | app/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | cache/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | noora/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | server/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | cli/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | gradle/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | kura/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | skills/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | grafana-datasource/cliff.toml | 0 | # changelog all notable changes to this project will be documented in this file. | STRING |
| HIGH | infra/hetzner-robot-controller/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/cluster-api-provider-tuist/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/runner-image/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/runners-controller/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/linux-runner-image/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/stable-egress-controller/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/xcresult-processor-image/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | infra/helm/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | app/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | cache/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | noora/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | server/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | cli/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | gradle/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | kura/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | skills/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | grafana-datasource/cliff.toml | 0 | ## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in | STRING |
| HIGH | server/priv/docs/pl/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | …r/priv/docs/yue_Hant/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/ja/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | …er/priv/docs/zh_Hans/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/ru/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | …er/priv/docs/zh_Hant/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/pt/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/ar/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/ko/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/es/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | …n/guides/features/build-insights/generated-projects.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/tr/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect build | STRING |
| HIGH | server/priv/docs/pl/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | …r/priv/docs/yue_Hant/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/ja/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | …er/priv/docs/zh_Hans/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/ru/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | …er/priv/docs/zh_Hant/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/pt/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/ar/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/ko/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/es/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | …er/priv/docs/en/guides/features/test-insights/xcode.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| HIGH | server/priv/docs/tr/guides/features/build-insights.md | 0 | $home/.local/bin/mise x -c $srcroot -- tuist inspect test | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …/TuistKitTests/Services/TestCaseListServiceTests.swift | 41 | let mutedResponse = Operations.listTestCases.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …/TuistKitTests/Services/TestCaseListServiceTests.swift | 82 | let page1Response = Operations.listTestCases.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …/TuistKitTests/Services/TestCaseListServiceTests.swift | 104 | let page2Response = Operations.listTestCases.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mmandTests/Services/BuildListCommandServiceTests.swift | 64 | let response = Operations.listBuilds.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mmandTests/Services/BuildListCommandServiceTests.swift | 144 | let response = Operations.listBuilds.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mmandTests/Services/BuildListCommandServiceTests.swift | 198 | let response = Operations.listBuilds.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mmandTests/Services/BuildListCommandServiceTests.swift | 257 | let response = Operations.listBuilds.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mandTests/Services/BundleListCommandServiceTests.swift | 59 | let response = Operations.listBundles.Output.Ok.Body.jsonPayload(bundles: [ | CODE |
| CRITICAL | …mandTests/Services/BundleListCommandServiceTests.swift | 108 | let response = Operations.listBundles.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …mandTests/Services/BundleListCommandServiceTests.swift | 155 | let response = Operations.listBundles.Output.Ok.Body.jsonPayload(bundles: [ | CODE |
| CRITICAL | …Tests/Services/TestCaseEventsCommandServiceTests.swift | 61 | let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …Tests/Services/TestCaseEventsCommandServiceTests.swift | 109 | let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …Tests/Services/TestCaseEventsCommandServiceTests.swift | 164 | let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 61 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 104 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: []) | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 142 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: []) | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 180 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 225 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 268 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 309 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 352 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 394 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 434 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test( | CODE |
| CRITICAL | …ndTests/Services/TestCaseListCommandServiceTests.swift | 472 | let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: []) | CODE |
| CRITICAL | …Sources/TuistCache/Services/PutCacheValueService.swift | 70 | let entriesPayload = Operations.putKeyValue.Input.Body.jsonPayload.entriesPayload( | CODE |
| CRITICAL | …Sources/TuistCache/Services/PutCacheValueService.swift | 74 | Operations.putKeyValue.Input.Body.jsonPayload.entriesPayloadPayload(value: $0.value) | CODE |
| CRITICAL | …er/Services/MultipartUploadCompleteShardsService.swift | 57 | Operations.completeShardUpload.Input.Body.jsonPayload.partsPayloadPayload( | CODE |
| CRITICAL | …s/TuistServer/Services/CreateAccountTokenService.swift | 48 | Operations.createAccountToken.Input.Body.jsonPayload.scopesPayloadPayload(rawValue: $0.rawValue) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 89 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 126 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 155 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 86 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 137 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 156 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 191 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 203 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 211 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 244 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 252 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 315 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 339 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 354 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 377 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/bootstrap-workload.sh | 410 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-host.sh | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-host.sh | 103 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-host.sh | 118 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-host.sh | 149 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | infra/helm/k8s-monitoring/values.yaml | 125 | # ───── Features ───── | COMMENT |
| MEDIUM | infra/helm/k8s-monitoring/values.yaml | 412 | # ───── Telemetry services (deployed alongside the collectors) ───── | COMMENT |
| MEDIUM | infra/helm/k8s-monitoring/values.yaml | 458 | # ───── Service integrations ───── | COMMENT |
| MEDIUM | infra/helm/k8s-monitoring/values.yaml | 542 | # ───── Collectors (Alloy instances) ───── | COMMENT |
| MEDIUM⚡ | …mandTests/Services/BundleListCommandServiceTests.swift | 178 | // ╭──────────────────────┬────────────┬────────┬─────────┬─────────────┬─────╮ | COMMENT |
| MEDIUM⚡ | …mandTests/Services/BundleListCommandServiceTests.swift | 180 | // ├──────────────────────┼────────────┼────────┼─────────┼─────────────┼─────┤ | COMMENT |
| MEDIUM⚡ | …mandTests/Services/BundleListCommandServiceTests.swift | 182 | // ╰──────────────────────┴────────────┴────────┴─────────┴─────────────┴─────╯ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1372 | /// ┌───┐ ┌────────┐ ┌──────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1373 | /// │App├────► MacroB ├─────►MacroC│ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1378 | /// └────────┘ └──────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1831 | /// ┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1834 | /// └──────────────────┘ └──────────────────┘ └────────┬─────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1836 | /// ┌────────▼─────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1839 | /// └──────────────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2068 | /// ┌─────┐ ┌──────────────────┐ ┌────────────────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2069 | /// │ App ├─────────────►│ Feature ├──►│ GoogleMaps │ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2070 | /// └─────┘ │ (framework, dyn.)│ │ (static xcframework)│ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2071 | /// ┌──────────────────┐ └──────────────────┘ └────────────────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2072 | /// │ FeatureTests ├───────────────────────► | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2074 | /// └──────────────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2172 | /// ┌─────┐ ┌──────────────────┐ ┌──────────────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2173 | /// │ App ├─────────────►│ Feature ├──►│ SupportLib │ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2174 | /// └─────┘ │ (framework, dyn.)│ │ (static, cached) │ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2175 | /// ┌──────────────────┐ └──────────────────┘ └──────────────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2176 | /// │ FeatureTests ├───────────────────────► | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2178 | /// └──────────────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2274 | /// ┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2277 | /// └────────┬─────────┘ └──────────────────┘ └────────┬─────────┘ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2279 | /// └──────────────────────────────────────────────►│ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2281 | /// ┌────────────────────┐ | COMMENT |
| MEDIUM⚡ | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 2284 | /// └────────────────────┘ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1485 | /// ┌───┐ ┌────────┐ ┌──────┐ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1486 | /// │App├────► MacroB ├─────►Exec. │ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1547 | /// ┌─────┐ ┌─────────────────┐ ┌──────────────┐ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1549 | /// └─────┘ └─────────────────┘ └──────────────┘ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1625 | /// ┌─────┐ ┌─────────────────┐ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1627 | /// └─────┘ └─────────────────┘ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1684 | /// ┌─────┐ ┌─────────────────┐ | COMMENT |
| MEDIUM | …istCacheEETests/Generator/CacheGraphMutatorTests.swift | 1686 | /// └─────┘ └─────────────────┘ | COMMENT |
| 12 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | server/priv/docs/pl/guides/features/previews.md | 214 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/pl/guides/features/previews.md | 230 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/yue_Hant/guides/features/previews.md | 206 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/yue_Hant/guides/features/previews.md | 222 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ja/guides/features/previews.md | 176 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ja/guides/features/previews.md | 192 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/zh_Hans/guides/features/previews.md | 176 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/zh_Hans/guides/features/previews.md | 192 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ru/guides/features/previews.md | 215 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ru/guides/features/previews.md | 231 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/zh_Hant/guides/features/previews.md | 170 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/zh_Hant/guides/features/previews.md | 186 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/pt/guides/features/previews.md | 206 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/pt/guides/features/previews.md | 222 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ar/guides/features/previews.md | 198 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ar/guides/features/previews.md | 214 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ko/guides/features/previews.md | 181 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/ko/guides/features/previews.md | 197 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/es/guides/features/previews.md | 217 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/es/guides/features/previews.md | 233 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/en/guides/features/previews.md | 180 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/en/guides/features/previews.md | 196 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/tr/guides/features/previews.md | 212 | apiKey: "your-api-key" | CODE |
| HIGH | server/priv/docs/tr/guides/features/previews.md | 228 | apiKey: "your-api-key" | CODE |
| HIGH | …rketing/changelog/2025.12.17-preview-tracks-and-sdk.md | 34 | apiKey: "your-api-key" | CODE |
| HIGH | …v/marketing/blog/2026/01/02/previews-sdk-and-tracks.md | 41 | apiKey: "your-api-key" | CODE |
| HIGH | …v/marketing/blog/2026/01/02/previews-sdk-and-tracks.md | 61 | apiKey: "your-api-key" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …riv/docs/en/guides/integrations/authentication/scim.md | 26 | ### Step 1: Generate a Tuist SCIM token {#okta-step-1} | COMMENT |
| LOW⚡ | …riv/docs/en/guides/integrations/authentication/scim.md | 34 | ### Step 2: Add the Okta SCIM app {#okta-step-2} | COMMENT |
| LOW⚡ | …riv/docs/en/guides/integrations/authentication/scim.md | 41 | ### Step 3: Configure the API integration {#okta-step-3} | COMMENT |
| LOW | …riv/docs/en/guides/integrations/authentication/scim.md | 52 | ### Step 4: Enable provisioning actions {#okta-step-4} | COMMENT |
| LOW | …riv/docs/en/guides/integrations/authentication/scim.md | 62 | ### Step 5: Assign users or groups {#okta-step-5} | COMMENT |
| LOW⚡ | …priv/docs/en/guides/integrations/authentication/sso.md | 40 | ### Step 1: Create an Okta OIDC application {#okta-step-1} | COMMENT |
| LOW⚡ | …priv/docs/en/guides/integrations/authentication/sso.md | 50 | ### Step 2: Configure Tuist {#okta-step-2} | COMMENT |
| LOW⚡ | …priv/docs/en/guides/integrations/authentication/sso.md | 58 | ### Step 3: Assign users to the Okta application {#okta-step-3} | COMMENT |
| LOW⚡ | …ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md | 42 | ### Step 1: Rummaging for .xcworkspace or .xcodeproj | COMMENT |
| LOW⚡ | …ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md | 47 | ### Step 2: Chitchat with XcodeProj | COMMENT |
| LOW⚡ | …ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md | 51 | ### Step 3: Marshaling the troops (our mappers) | COMMENT |
| LOW | …ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md | 62 | ### Step 4: One graph to rule them all | COMMENT |
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 855 | // Step 1: AutogeneratedWorkspaceSchemeGraphMapper with insights enabled. | COMMENT |
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 874 | // Step 2: FocusTargetsGraphMappers — only BTests is on-shard. | COMMENT |
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 888 | // Step 3: TreeShakePrunedTargetsGraphMapper — drops pruned targets and rewrites | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 129 | // Step 1: Start with a capital letter | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 132 | // Step 2: Remove invalid characters | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 135 | // Step 3: Add underscore prefix if the string starts with a number | COMMENT |
| LOW | …y/access-and-risk-management/risk-management-policy.md | 168 | ### Step 1: Prepare for the Assessment | COMMENT |
| LOW | …y/access-and-risk-management/risk-management-policy.md | 192 | ### Step 2: Conduct the Assessment | COMMENT |
| LOW | …y/access-and-risk-management/risk-management-policy.md | 237 | ### Step 3: Communicate and Share the Risk Assessment Results | COMMENT |
| LOW | …y/access-and-risk-management/risk-management-policy.md | 245 | ### Step 4: Maintain the Assessment | COMMENT |
| LOW | skills/skills/compare-generations/SKILL.md | 17 | ## Step 1: Resolve Generations | COMMENT |
| LOW | skills/skills/compare-generations/SKILL.md | 44 | ## Step 2: Compare Top-Level Metrics | COMMENT |
| LOW | skills/skills/compare-generations/SKILL.md | 62 | ## Step 3: Analyze Cache Invalidation | COMMENT |
| LOW | skills/skills/compare-generations/SKILL.md | 94 | ## Step 4: Assess Impact | COMMENT |
| LOW | skills/skills/compare-builds/SKILL.md | 20 | ## Step 1: Resolve Builds | COMMENT |
| LOW | skills/skills/compare-builds/SKILL.md | 47 | ## Step 2: Fetch Sub-Resource Details | COMMENT |
| LOW | skills/skills/compare-builds/SKILL.md | 78 | ## Step 3: Compare Top-Level Metrics | COMMENT |
| LOW⚡ | skills/skills/compare-builds/SKILL.md | 95 | ## Step 4: Investigate Duration Regressions | COMMENT |
| LOW⚡ | skills/skills/compare-builds/SKILL.md | 103 | ## Step 5: Investigate Cache Changes | COMMENT |
| LOW⚡ | skills/skills/compare-builds/SKILL.md | 111 | ## Step 6: Check Build Context | COMMENT |
| LOW | skills/skills/compare-test-case/SKILL.md | 18 | ## Step 1: Resolve the Test Case | COMMENT |
| LOW | skills/skills/compare-test-case/SKILL.md | 48 | ## Step 2: Get Runs on Each Branch | COMMENT |
| LOW | skills/skills/compare-test-case/SKILL.md | 67 | ## Step 3: Compare Branch Behavior | COMMENT |
| LOW | skills/skills/compare-test-case/SKILL.md | 83 | ## Step 4: Inspect Failures | COMMENT |
| LOW | skills/skills/compare-test-case/SKILL.md | 99 | ## Step 5: Identify Root Cause | COMMENT |
| LOW | skills/skills/compare-cache-runs/SKILL.md | 17 | ## Step 1: Resolve Cache Runs | COMMENT |
| LOW | skills/skills/compare-cache-runs/SKILL.md | 44 | ## Step 2: Compare Top-Level Metrics | COMMENT |
| LOW | skills/skills/compare-cache-runs/SKILL.md | 62 | ## Step 3: Analyze Cache Invalidation | COMMENT |
| LOW | skills/skills/compare-cache-runs/SKILL.md | 94 | ## Step 4: Assess Impact | COMMENT |
| LOW | skills/skills/debug-generated-project/SKILL.md | 15 | ## Step 1: Gather Context | COMMENT |
| LOW | skills/skills/debug-generated-project/SKILL.md | 32 | ## Step 2: Reproduce with the latest release | COMMENT |
| LOW | skills/skills/debug-generated-project/SKILL.md | 62 | ## Step 3: Build Tuist from Source | COMMENT |
| LOW | skills/skills/debug-generated-project/SKILL.md | 87 | ## Step 4: Triage the Issue | COMMENT |
| LOW | skills/skills/compare-gradle-builds/SKILL.md | 20 | ## Step 1: Resolve Builds | COMMENT |
| LOW | skills/skills/compare-gradle-builds/SKILL.md | 41 | ## Step 2: Compare Top-Level Metrics | COMMENT |
| LOW | skills/skills/compare-gradle-builds/SKILL.md | 59 | ## Step 3: Drill Into Tasks | COMMENT |
| LOW⚡ | skills/skills/compare-gradle-builds/SKILL.md | 79 | ## Step 4: Investigate Duration Regressions | COMMENT |
| LOW⚡ | skills/skills/compare-gradle-builds/SKILL.md | 89 | ## Step 5: Investigate Cache Changes | COMMENT |
| LOW⚡ | skills/skills/compare-gradle-builds/SKILL.md | 98 | ## Step 6: Check Build Context | COMMENT |
| LOW | skills/skills/analyze-selective-testing/SKILL.md | 14 | ## Step 1: Resolve Test Runs | COMMENT |
| LOW | skills/skills/analyze-selective-testing/SKILL.md | 38 | ## Step 2: Drill Into Selective Testing Targets | COMMENT |
| LOW | skills/skills/analyze-selective-testing/SKILL.md | 73 | ## Step 3: Diagnose Regressions | COMMENT |
| LOW | skills/skills/analyze-selective-testing/SKILL.md | 106 | ## Step 4: Recommendations | COMMENT |
| LOW | skills/skills/compare-test-runs/SKILL.md | 19 | ## Step 1: Resolve Test Runs | COMMENT |
| LOW | skills/skills/compare-test-runs/SKILL.md | 46 | ## Step 2: Compare Top-Level Metrics | COMMENT |
| LOW | skills/skills/compare-test-runs/SKILL.md | 59 | ## Step 3: Get Module and Suite Breakdowns | COMMENT |
| LOW | skills/skills/compare-test-runs/SKILL.md | 73 | ## Step 4: Get Individual Test Case Results | COMMENT |
| LOW | skills/skills/compare-test-runs/SKILL.md | 83 | ## Step 5: Classify Changes | COMMENT |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cas-plugin/src/proxy.rs | 286 | /// prior build, an agentic sandbox — resolve like a warm one. | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 30 | ## Tworzenie rusztowania projektu {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 31 | ## Create project scaffold {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 18 | ## プロジェクトの足場を作る{#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 21 | ## 创建项目脚手架{#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 32 | ## Создание структуры проекта {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 21 | ## 建立專案鷹架{#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 31 | ## Create project scaffold {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 28 | ## إنشاء سقالة المشروع {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 22 | ## 프로젝트 기본 구조 생성 {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 32 | ## Crear un andamiaje de proyectos {#create-project-scaffold} | COMMENT |
| MEDIUM | …riv/docs/en/guides/features/projects/best-practices.md | 79 | ### Agentic coding and worktrees {#agentic-coding-and-worktrees} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 18 | ## Create project scaffold {#create-project-scaffold} | COMMENT |
| MEDIUM | …es/features/projects/adoption/migrate/xcode-project.md | 30 | ## Proje iskelesi oluşturun {#create-project-scaffold} | COMMENT |
| MEDIUM | server/priv/marketing/blog/2025/04/03/mcp.md | 22 | The server can provide [resources](https://modelcontextprotocol.io/docs/concepts/resources), [prompts](https://modelcont | CODE |
| MEDIUM | …ng/blog/2025/11/27/teaching-ai-to-read-xcode-builds.md | 601 | For real-time features and richer causality data, we've open-sourced [Argus](https://github.com/tuist/argus), a fork of | CODE |
| MEDIUM | …/priv/marketing/blog/2025/08/11/tuist-ai-whitepaper.md | 17 | ## Building the foundation for agentic coding | COMMENT |
| MEDIUM | …r/priv/marketing/blog/2023/09/08/trendyol-and-tuist.md | 78 | We have integrated the use of [templates](https://docs.old.tuist.io/commands/scaffold/) to **optimize our development pr | CODE |
| MEDIUM | server/priv/marketing/blog/2026/03/02/gradle.md | 58 | ## Built for automation and agentic workflows | COMMENT |
| MEDIUM | server/priv/marketing/blog/2026/03/02/gradle.md | 62 | For example, our [fix-flaky-tests skill](https://tuist.dev/en/docs/guides/features/agentic-coding/skills) gives coding a | CODE |
| MEDIUM | server/priv/marketing/blog/2026/03/18/doctor.md | 44 | - **CLI + Skills:** We solved distribution of the CLI years ago, and coincidentally, CLIs became trendy again because th | CODE |
| MEDIUM | server/priv/marketing/blog/2026/03/18/doctor.md | 45 | - **MCP:** We have also exposed an authenticated [MCP server](https://tuist.dev/en/docs/guides/features/agentic-coding/m | CODE |
| MEDIUM | server/priv/marketing/blog/2026/03/18/doctor.md | 99 | If this sounds interesting, you can add the [Tuist MCP](https://tuist.dev/en/docs/guides/features/agentic-coding/mcp) to | CODE |
| MEDIUM | …26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md | 15 | We decided to test this on the [Mastodon iOS client](https://github.com/mastodon/mastodon-ios). A real app with multiple | CODE |
| MEDIUM | …26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md | 93 | The agent wrote `skill.md` as a migration guide that starts where a real engineer would start: with a baseline build, a | CODE |
| MEDIUM | …26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md | 105 | If you want to migrate your project, you can get started with the [migration skill](https://tuist.dev/en/docs/guides/fea | CODE |
| MEDIUM | server/priv/marketing/blog/2020/03/25/version-1.5.0.md | 27 | To read more about how it works you can do so on [commands](https://docs.old.tuist.io/commands/scaffold/) documentation | CODE |
| MEDIUM | server/priv/marketing/blog/2020/04/21/version-1.7.1.md | 61 | [new `scaffold` command](https://docs.old.tuist.io/commands/scaffold/). | CODE |
| MEDIUM | server/priv/marketing/blog/2020/10/08/george.md | 51 | ### Can you tell us more about how you use property wrappers to do dependency injection? | COMMENT |
| MEDIUM | server/priv/marketing/blog/2020/06/11/marek.md | 15 | Marek is a core member of Tuist, and has been the brain behind features like [scaffolding](https://docs.old.tuist.io/com | CODE |
| MEDIUM | cli/CHANGELOG.old.md | 3106 | - **Breaking** Support for deprecated `Template.swift` has been ended. Define your templates using any name that describ | CODE |
| MEDIUM | …ronmentVariables/CommandEnvironmentVariableTests.swift | 450 | #expect(scaffoldCommandWithEnvVars.path == "/path/to/scaffold") | COMMENT |
| MEDIUM | …ronmentVariables/CommandEnvironmentVariableTests.swift | 460 | #expect(scaffoldCommandWithArgs.path == "/new/scaffold/path") | COMMENT |
| MEDIUM | cli/Sources/ProjectDescription/Template/Template.swift | 1 | /// A scaffold template model. | COMMENT |
| MEDIUM | cli/Sources/ProjectDescription/Template/Template.swift | 68 | /// Attribute to be passed to `tuist scaffold` for generating with `Template` | COMMENT |
| MEDIUM⚡ | .github/workflows/server-production-deployment.yml | 1752 | # Deploy orchestration. This pipeline tags every fleet/runtime image it | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | infra/linux-runner-image/metrics-sampler.sh | 57 | # interface name, then on whitespace — robust across awk variants | COMMENT |
| MEDIUM | tuist-ops/slack-app-manifest.yaml | 2 | # fronts JIT elevation (`/elevate`), preview requests (`/preview`), and | COMMENT |
| MEDIUM | cas-plugin/src/proxy_proto.rs | 125 | /// request keeps it stateless and robust; unix-socket connects are tens of | COMMENT |
| MEDIUM | server/priv/marketing/newsletter/issues/3.yml | 44 | I'm embarrassed to say I don't read less than I'd like. But, I got a great deal out of ["Grit: The Power of Pass | CODE |
| MEDIUM | server/priv/marketing/newsletter/issues/3.yml | 69 | link: https://apps.apple.com/us/app/tapestry-by-iconfactory/id6448078074 | CODE |
| MEDIUM | …ver/assets/marketing/js/hooks/infinite-scroll-logos.js | 33 | // Clone all logos for seamless looping | COMMENT |
| MEDIUM | …ver/assets/marketing/js/hooks/infinite-scroll-logos.js | 47 | // Add duplicated logos for seamless loop | COMMENT |
| MEDIUM | …ources/XcodeGraph/Models/Metadata/TargetMetadata.swift | 4 | /// Some Tuist features can leverage that information for doing things like filtering. | COMMENT |
| MEDIUM | cli/Sources/ProjectDescription/Settings.swift | 162 | /// `.settings(base:debug:release:defaultSettings:)` to leverage the default configurations | COMMENT |
| MEDIUM | kura/spec/e2e/grpc_upload_throughput_spec.sh | 11 | # skipped unless KURA_E2E_THROUGHPUT=1. The full harness (and tuning knobs) | COMMENT |
| MEDIUM | …generated_ios_app_with_watch_application/Project.swift | 37 | // In Xcode 14, watch application can now leverage the `.app` product type | COMMENT |
| MEDIUM | grafana-datasource/package-lock.json | 14093 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | grafana-datasource/.config/docker-compose-base.yaml | 15 | - 2345:2345/tcp # delve | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | noora/css/filter.css | 25 | & [data-part="placeholder"] { | CODE |
| LOW | server/priv/docs/strings/tr.json | 16 | "placeholder": "Arama", | CODE |
| LOW | server/priv/docs/strings/yue_Hant.json | 16 | "placeholder": "", | CODE |
| LOW | server/priv/docs/strings/ja.json | 16 | "placeholder": "検索", | CODE |
| LOW | server/priv/docs/strings/ru.json | 16 | "placeholder": "Поиск", | CODE |
| LOW | server/priv/docs/strings/pl.json | 16 | "placeholder": "Wyszukiwanie", | CODE |
| LOW | server/priv/docs/strings/pt.json | 16 | "placeholder": "Search", | CODE |
| LOW | server/priv/docs/strings/en.json | 16 | "placeholder": "Search", | CODE |
| LOW | server/priv/docs/strings/ko.json | 16 | "placeholder": "검색", | CODE |
| LOW | server/priv/docs/strings/zh_Hans.json | 16 | "placeholder": "搜索", | CODE |
| LOW | server/priv/docs/strings/zh_Hant.json | 16 | "placeholder": "搜尋", | CODE |
| LOW | server/priv/docs/strings/es.json | 16 | "placeholder": "Busca", | CODE |
| LOW | server/priv/docs/strings/ar.json | 16 | "placeholder": "بحث", | CODE |
| LOW | server/priv/docs/strings/ar.json | 61 | "placeholder": "بحث", | CODE |
| LOW⚡ | server/assets/app/css/pages/members.css | 164 | /* & [data-part="placeholder"] { */ | COMMENT |
| LOW⚡ | server/assets/app/css/pages/members.css | 170 | /* & [data-part="placeholder"] { */ | COMMENT |
| LOW⚡ | server/assets/app/css/pages/members.css | 175 | /* & [data-part="placeholder"] { */ | COMMENT |
| LOW | status/AGENTS.md | 38 | - `GET /api/debug/incidents.json` — raw upstream Grafana Incident response (active + recent), no field renaming. Gated b | CODE |
| LOW | status/AGENTS.md | 131 | In fake-data mode (`USE_FAKE_DATA=true`), the components list is the runtime fixture in `src/dev/fake-status.ts` — usefu | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 68 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 92 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 107 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 128 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 152 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 179 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 203 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| LOW | …ava/dev/tuist/app/ui/previews/PreviewsViewModelTest.kt | 225 | AuthState.LoggedIn(Account(email = "test@test.com", handle = "test")), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mise.toml | 87 | # Check if user already signed | COMMENT |
| LOW | mise/tasks/app/upload-ios.sh | 10 | # Check if the IPA was created successfully | COMMENT |
| LOW | mise/tasks/app/release/homebrew-cask.sh | 25 | # Check if VERSION, GITHUB_TOKEN, and SHA256 are provided | COMMENT |
| LOW | mise/tasks/cli/ee.sh | 20 | # Check if submodule is initialized | COMMENT |
| LOW | mise/tasks/cli/clean.sh | 9 | # Check if it is a directory before deleting | COMMENT |
| LOW | mise/tasks/cli/clean.sh | 16 | # Check if it is a directory before deleting | COMMENT |
| LOW | mise/tasks/cli/release/homebrew-formula.sh | 25 | # Check if VERSION, GITHUB_TOKEN, and SHA256 are provided | COMMENT |
| LOW | mise/utilities/derived_data_path.sh | 5 | # Check if the path is set | COMMENT |
| LOW | mise/utilities/xcode_path.sh | 40 | # Check if we found a path | COMMENT |
| LOW | .github/workflows/server.yml | 174 | # Check if marketing.pot exists | COMMENT |
| LOW | .github/workflows/server.yml | 180 | # Check if all languages have marketing.po files | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …docs/yue_Hant/guides/features/projects/dependencies.md | 541 | > dynamic](#static-or-dynamic) for more details. In this example, all dependencies | CODE |
| HIGH | …/priv/docs/pt/guides/features/projects/dependencies.md | 541 | > dynamic](#static-or-dynamic) for more details. In this example, all dependencies | CODE |
| HIGH | …/priv/docs/en/guides/features/projects/dependencies.md | 481 | > Dynamic linking is not always recommended. See the section [Static or dynamic](#static-or-dynamic) for more details. I | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh | 138 | # Create the Secret matching the layout the controller writes | COMMENT |
| MEDIUM | infra/runner-image/runner.pkr.hcl | 241 | # Create the subdirectories as root + chown to runner instead of | COMMENT |
| MEDIUM | infra/helm/tuist/values-managed-common.yaml | 9 | # This file is layered under values-managed-staging.yaml / | COMMENT |
| MEDIUM | mise/tasks/cli/benchmark/run.sh | 10 | # Define a cleanup function | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 855 | // Step 1: AutogeneratedWorkspaceSchemeGraphMapper with insights enabled. | COMMENT |
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 874 | // Step 2: FocusTargetsGraphMappers — only BTests is on-shard. | COMMENT |
| LOW | …stKitTests/Mappers/FocusTargetsGraphMappersTests.swift | 888 | // Step 3: TreeShakePrunedTargetsGraphMapper — drops pruned targets and rewrites | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 129 | // Step 1: Start with a capital letter | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 132 | // Step 2: Remove invalid characters | COMMENT |
| LOW⚡ | cli/Sources/TuistSupport/Extensions/String+Extras.swift | 135 | // Step 3: Add underscore prefix if the string starts with a number | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/registry-router/src/index.ts | 61 | function rewriteCanonicalPathForCache(url: URL): void { | CODE |
| LOW | noora/js/DatePicker/dateUtils.js | 55 | export function calculateRangeFromDuration(duration) { | CODE |
| LOW | noora/js/DatePicker/dateUtils.js | 159 | export function initCalendarMonthsFromRange(startDate, endDate) { | CODE |
| LOW | server/assets/shared/js/clipboard.js | 1 | function legacyCopyTextToClipboard(text, container = document.body) { | CODE |
| LOW | server/assets/docs/docs.js | 59 | function maybeScrollToTopForNavigation({ kind, to } = {}) { | CODE |
| LOW | server/assets/docs/hooks/docs-copy-page-button-hook.js | 11 | function dispatchCopyPageButtonFlash() { | CODE |
| LOW | status/src/grafana-irm.ts | 154 | function severityToComponentStatus(s: IncidentSeverity): ComponentStatus { | CODE |
| LOW | status/src/grafana-irm.ts | 248 | async function fetchComponentDefinitions(opts: ClientOpts, labelKey: string): Promise<Omit<Component, "status">[]> { | CODE |
| LOW | status/src/views/page.ts | 145 | function incidentToComponentStatus(i: Incident): ComponentStatus { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mise/tasks/baremetal/prep-ovh.sh | 12 | # Usage: | COMMENT |
| LOW | mise/tasks/baremetal/mint-fleet-key.sh | 12 | # Usage: | COMMENT |
| LOW | mise/tasks/baremetal/mark-ovh.sh | 9 | # Usage: | COMMENT |
| LOW | mise/tasks/baremetal/prep-dedibox.sh | 11 | # Usage: | COMMENT |
| LOW | mise/tasks/baremetal/mark-dedibox.sh | 8 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | kura/src/replication/mod.rs | 1383 | // Same cursor as requested → would loop forever without the guard. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | infra/registry-router/src/index.ts | 101 | async function handleRequest(request: Request, env: Env): Promise<Response> { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ustom_scheme/Scripts/lldb/commands_for_customscheme.py | 2 | CODE |