2.7

Adjusted Signal

2.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.9K

Stars

Elixir

Language

1.7M

Lines of Code

10.2K

Files

3.7K

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3358 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.7/100 · LOW

Are imports declared and package/API names verified? 146 finding(s).

Agent Over-Engineering Ratio 2.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 341 finding(s).

PR Review Velocity Impact 13.6/100 · LOW

Which changes need focused human review? 3687 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 34HIGH 136MEDIUM 172LOW 3345

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3687 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block2965 hits · 2664 pts

Severity	File	Line	Snippet	Context
LOW	infra/mdm/enroller/expiry.go	1	package main	COMMENT
LOW	infra/mdm/enroller/main.go	1	// mdm-enroller is the enrollment brain sitting next to NanoMDM. NanoMDM	COMMENT
LOW	…e-operator/config/samples/public-pages-rate-limit.yaml	1	# Example matching the rate limit currently live on tuist.dev. The	COMMENT
LOW	…udflare-operator/internal/cloudflare/bot_management.go	1	package cloudflare	COMMENT
LOW	…re-operator/api/v1alpha1/cloudflarecustomrule_types.go	21		COMMENT
LOW	…/cloudflare-operator/api/v1alpha1/groupversion_info.go	1	// Package v1alpha1 contains the Cloudflare operator's API types.	COMMENT
LOW	…operator/api/v1alpha1/cloudflarebotmanagement_types.go	21	// and Super Bot Fight Mode configuration. Each CR is a singleton per	COMMENT
LOW	…operator/api/v1alpha1/cloudflarebotmanagement_types.go	41	// read_only (default), the operator computes the intended diff,	COMMENT
LOW	…operator/api/v1alpha1/cloudflarebotmanagement_types.go	61	DependsOn *ResourceRef `json:"dependsOn,omitempty"`	COMMENT
LOW	…operator/api/v1alpha1/cloudflarebotmanagement_types.go	81	EnableJS *bool `json:"enableJs,omitempty"`	COMMENT
LOW	…operator/api/v1alpha1/cloudflarebotmanagement_types.go	101	LikelyAutomated SBFMAction `json:"likelyAutomated,omitempty"`	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	21	// specifically (not by ref) and treats it as the baseline: fields the	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	41	// +kubebuilder:validation:XValidation:rule="'cf.colo.id' in self.ratelimit.characteristics",message="ratelimit.characte	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	61		COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	81		COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	101	// +kubebuilder:default=false	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	121	// Add "ip.src", "http.request.headers['x-...']", etc. as	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	141	// matches). When set, only requests / responses matching this	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	161	ReasonReadOnly = "ReadOnly"	COMMENT
LOW	…are-operator/api/v1alpha1/cloudflareratelimit_types.go	201	// Mode is the reconcile mode observed on the last pass. Useful	COMMENT
LOW	…ator/controllers/cloudflarebotmanagement_controller.go	1	// CloudflareBotManagement reconciler: a settings-shaped kind rather	COMMENT
LOW	infra/cloudflare-operator/controllers/ruleset_common.go	101	}	COMMENT
LOW	…operator/controllers/cloudflareratelimit_controller.go	1	// Package controllers holds the reconcilers for the Cloudflare	COMMENT
LOW	…operator/controllers/cloudflareratelimit_controller.go	21	// fields the operator does not model (extra rate-limit knobs,	COMMENT
LOW	infra/cloudflare-operator/controllers/envtest_test.go	1	// envtest coverage for the CRD admission rules the reconciler	COMMENT
LOW	infra/runner-cache/local.go	81	// restored or published) within it to the new HEAD in the background instead	COMMENT
LOW	infra/runner-cache/checkout.go	61	// Checkouts keeps the host-built masters of checkout volumes: a repository's	COMMENT
LOW	infra/mise/tasks/mgmt/reconcile-hetzner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/mgmt/migrate-tailscale.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/mgmt/reconcile-talos.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/mgmt/reconcile-talos.sh	21	# declared entries. A patch owns every list it mentions: live entries it does	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	21	# still happens lazily — the controller stamps the	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	21	# 6. Install hcloud-csi-driver (for parity; no PVCs use it today).	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	321	-f "$BOOTSTRAP_DIR/hcloud-csi-values.yaml" \	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	341	# workload cluster.	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	441	# `appVersion` is a placeholder, not a real image with the encrypted	COMMENT
LOW	infra/mise/tasks/k8s/bootstrap-workload.sh	461	if [ "$ENV" != "pentest" ]; then	COMMENT
LOW	infra/mise/tasks/k8s/install-kura-platform.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/k8s/install-platform.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-host.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-host.sh	21	#	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-host.sh	41	#	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-host.sh	221	err " scw apple-silicon server reinstall <server-id> zone=<zone> \\"	COMMENT
LOW	infra/mise/tasks/k8s/prepare-fleet-host.sh	261	printf ' ✓ sudoers: installed\n'	COMMENT
LOW	infra/mise/tasks/preview/seed-account.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/preview/seed-account.sh	61	if [ -z "$SERVER_POD" ]; then	COMMENT
LOW	infra/mise/tasks/helm/preview-up.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/mise/tasks/helm/rack-independence.sh	1	#!/usr/bin/env bash	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	1	// Package bootstrap turns a freshly-provisioned macOS host into a	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	21	// 2. Grant the SSH user passwordless sudo using UserPassword.	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	81		COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	101		COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	121	// rolls back Tart in place (see installTart).	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	141	// deliberately not a pre-auth key: those expire after at most 90	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	161	// legacy pre-auth key, whose own tag binding then applies.	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	181	// its own ephemerality and takes no parameters.	COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	201		COMMENT
LOW	infra/macos-host-bootstrap/bootstrap.go	221	// (TCP+UDP) — the cluster's kube-dns ClusterIP, so the runner	COMMENT
2905 more matches not shown…

Cross-File Repetition94 hits · 470 pts

Severity	File	Line	Snippet	Context
HIGH	infra/cloudflare-operator/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/hetzner-robot-controller/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/cluster-api-provider-tuist/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/runner-image/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/runners-controller/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/linux-runner-image/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/stable-egress-controller/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/xcresult-processor-image/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/egress-tree-agent/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/helm/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	swifterpm/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	app/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	cache/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	noora/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	server/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	cli/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	gradle/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	tuist_ex/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	kura/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	skills/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	atlas/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	grafana-datasource/cliff.toml	0	# changelog all notable changes to this project will be documented in this file.	STRING
HIGH	infra/cloudflare-operator/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/hetzner-robot-controller/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/cluster-api-provider-tuist/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/runner-image/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/runners-controller/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/linux-runner-image/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/stable-egress-controller/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/xcresult-processor-image/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/egress-tree-agent/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	infra/helm/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	app/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	cache/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	noora/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	server/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	cli/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	gradle/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	tuist_ex/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	kura/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	skills/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	atlas/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	grafana-datasource/cliff.toml	0	## what's changed {%- if version %} in {{ version }}{%- endif -%} <!-- release notes start --> {% for group, commits in	STRING
HIGH	…terpm/Tests/swifterpmTests/CertificateTrustTests.swift	0	basicconstraints=critical,ca:false keyusage=critical,digitalsignature,keyencipherment extendedkeyusage=serverauth subjec	STRING
HIGH	cli/Tests/TuistREAPITests/CertificateTrustTests.swift	0	basicconstraints=critical,ca:false keyusage=critical,digitalsignature,keyencipherment extendedkeyusage=serverauth subjec	STRING
HIGH	…/Tests/TuistREAPITests/CertificateTrustGRPCTests.swift	0	basicconstraints=critical,ca:false keyusage=critical,digitalsignature,keyencipherment extendedkeyusage=serverauth subjec	STRING
HIGH	…ts/TuistHTTPTests/CertificateTrustTransportTests.swift	0	basicconstraints=critical,ca:false keyusage=critical,digitalsignature,keyencipherment extendedkeyusage=serverauth subjec	STRING
HIGH	ci/cache-volume/cliff.toml	0	{% for group, commits in commits \| group_by(attribute="group") %} ### {{ group }} {% for commit in commits %} - {{ commi	STRING
HIGH	ci/runner-caches/cliff.toml	0	{% for group, commits in commits \| group_by(attribute="group") %} ### {{ group }} {% for commit in commits %} - {{ commi	STRING
HIGH	.github/actions/install/cliff.toml	0	{% for group, commits in commits \| group_by(attribute="group") %} ### {{ group }} {% for commit in commits %} - {{ commi	STRING
HIGH	server/priv/docs/pl/guides/features/build-insights.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	server/priv/docs/pt/guides/features/build-insights.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	server/priv/docs/ar/guides/features/build-insights.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
HIGH	…des/features/build-insights/generated-xcode-project.md	0	$home/.local/bin/mise x -c $srcroot -- tuist inspect build	STRING
34 more matches not shown…

Hallucination Indicators34 hits · 355 pts

Severity	File	Line	Snippet	Context
CRITICAL	…der-tuist/controllers/linux/racklinuxhost_amt_power.go	299	return max(host.Status.AMT.LastPowerAction.At.Add(backoff).Sub(now), 0)	CODE
CRITICAL	…/TuistKitTests/Services/TestCaseListServiceTests.swift	41	let mutedResponse = Operations.listTestCases.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…/TuistKitTests/Services/TestCaseListServiceTests.swift	82	let page1Response = Operations.listTestCases.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…/TuistKitTests/Services/TestCaseListServiceTests.swift	104	let page2Response = Operations.listTestCases.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mmandTests/Services/BuildListCommandServiceTests.swift	64	let response = Operations.listBuilds.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mmandTests/Services/BuildListCommandServiceTests.swift	144	let response = Operations.listBuilds.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mmandTests/Services/BuildListCommandServiceTests.swift	198	let response = Operations.listBuilds.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mmandTests/Services/BuildListCommandServiceTests.swift	257	let response = Operations.listBuilds.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mandTests/Services/BundleListCommandServiceTests.swift	59	let response = Operations.listBundles.Output.Ok.Body.jsonPayload(bundles: [	CODE
CRITICAL	…mandTests/Services/BundleListCommandServiceTests.swift	109	let response = Operations.listBundles.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…mandTests/Services/BundleListCommandServiceTests.swift	157	let response = Operations.listBundles.Output.Ok.Body.jsonPayload(bundles: [	CODE
CRITICAL	…Tests/Services/TestCaseEventsCommandServiceTests.swift	61	let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…Tests/Services/TestCaseEventsCommandServiceTests.swift	109	let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…Tests/Services/TestCaseEventsCommandServiceTests.swift	164	let eventsResponse = Operations.listTestCaseEvents.Output.Ok.Body.jsonPayload(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	61	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	104	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: [])	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	142	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: [])	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	180	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	225	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	268	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	309	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	352	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	394	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	434	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(	CODE
CRITICAL	…ndTests/Services/TestCaseListCommandServiceTests.swift	472	let response = Operations.listTestCases.Output.Ok.Body.jsonPayload.test(testCases: [])	CODE
CRITICAL	…Sources/TuistCache/Services/PutCacheValueService.swift	73	let entriesPayload = Operations.putKeyValue.Input.Body.jsonPayload.entriesPayload(	CODE
CRITICAL	…Sources/TuistCache/Services/PutCacheValueService.swift	77	Operations.putKeyValue.Input.Body.jsonPayload.entriesPayloadPayload(value: $0.value)	CODE
CRITICAL	…er/Services/MultipartUploadCompleteShardsService.swift	57	Operations.completeShardUpload.Input.Body.jsonPayload.partsPayloadPayload(	CODE
CRITICAL	…s/TuistServer/Services/CreateAccountTokenService.swift	48	Operations.createAccountToken.Input.Body.jsonPayload.scopesPayloadPayload(rawValue: $0.rawValue)	CODE
CRITICAL	kura/src/handover.rs	3063	holder: self.source.state.runtime.authority.identity().clone(),	CODE
CRITICAL	kura/src/handover.rs	3082	source: self.source.state.runtime.authority.identity().clone(),	CODE
CRITICAL⚡	kura/src/handover.rs	3222	holder: pair.source.state.runtime.authority.identity().clone(),	CODE
CRITICAL⚡	kura/src/handover.rs	3230	pair.source.state.runtime.authority.install(other).unwrap();	CODE
CRITICAL⚡	kura/src/handover.rs	3234	source: pair.source.state.runtime.authority.identity().clone(),	CODE

Decorative Section Separators75 hits · 242 pts

Severity	File	Line	Snippet	Context
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	89	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	106	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	126	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	155	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	96	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	147	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	166	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	201	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	220	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	313	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	324	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	332	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	395	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	419	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	434	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	457	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/bootstrap-workload.sh	497	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-host.sh	96	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-host.sh	103	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-host.sh	118	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-host.sh	149	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	infra/helm/mdm/values-production.yaml	29	# ---------------------------------------------------------------------	COMMENT
MEDIUM	infra/helm/mdm/values-production.yaml	42	# ---------------------------------------------------------------------	COMMENT
MEDIUM	infra/helm/k8s-monitoring/values.yaml	452	# ───── Features ─────	COMMENT
MEDIUM	infra/helm/k8s-monitoring/values.yaml	1030	# ───── Telemetry services (deployed alongside the collectors) ─────	COMMENT
MEDIUM	infra/helm/k8s-monitoring/values.yaml	1171	# ───── Service integrations ─────	COMMENT
MEDIUM	infra/helm/k8s-monitoring/values.yaml	1391	# ───── Collectors (Alloy instances) ─────	COMMENT
MEDIUM⚡	…mandTests/Services/BundleListCommandServiceTests.swift	181	// ╭──────────────────────┬────────────┬────────┬─────────┬─────────────┬─────╮	COMMENT
MEDIUM⚡	…mandTests/Services/BundleListCommandServiceTests.swift	183	// ├──────────────────────┼────────────┼────────┼─────────┼─────────────┼─────┤	COMMENT
MEDIUM⚡	…mandTests/Services/BundleListCommandServiceTests.swift	185	// ╰──────────────────────┴────────────┴────────┴─────────┴─────────────┴─────╯	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1473	/// ┌───┐ ┌────────┐ ┌──────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1474	/// │App├────► MacroB ├─────►MacroC│	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1479	/// └────────┘ └──────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1932	/// ┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1935	/// └──────────────────┘ └──────────────────┘ └────────┬─────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1937	/// ┌────────▼─────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1940	/// └──────────────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2169	/// ┌─────┐ ┌──────────────────┐ ┌────────────────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2170	/// │ App ├─────────────►│ Feature ├──►│ GoogleMaps │	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2171	/// └─────┘ │ (framework, dyn.)│ │ (static xcframework)│	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2172	/// ┌──────────────────┐ └──────────────────┘ └────────────────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2173	/// │ FeatureTests ├───────────────────────►	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2175	/// └──────────────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2273	/// ┌─────┐ ┌──────────────────┐ ┌──────────────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2274	/// │ App ├─────────────►│ Feature ├──►│ SupportLib │	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2275	/// └─────┘ │ (framework, dyn.)│ │ (static, cached) │	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2276	/// ┌──────────────────┐ └──────────────────┘ └──────────────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2277	/// │ FeatureTests ├───────────────────────►	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2279	/// └──────────────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2375	/// ┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2378	/// └────────┬─────────┘ └──────────────────┘ └────────┬─────────┘	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2380	/// └──────────────────────────────────────────────►│	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2382	/// ┌────────────────────┐	COMMENT
MEDIUM⚡	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	2385	/// └────────────────────┘	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1586	/// ┌───┐ ┌────────┐ ┌──────┐	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1587	/// │App├────► MacroB ├─────►Exec. │	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1648	/// ┌─────┐ ┌─────────────────┐ ┌──────────────┐	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1650	/// └─────┘ └─────────────────┘ └──────────────┘	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1726	/// ┌─────┐ ┌─────────────────┐	COMMENT
MEDIUM	…istCacheEETests/Generator/CacheGraphMutatorTests.swift	1728	/// └─────┘ └─────────────────┘	COMMENT
15 more matches not shown…

Modern AI Meta-Vocabulary67 hits · 174 pts

Severity	File	Line	Snippet	Context
MEDIUM	infra/k8s/mgmt/capi-webhook-cert-reloader.yaml	23	# event-driven reload (e.g. stakater/Reloader keyed on the cert Secrets), plus	COMMENT
MEDIUM	infra/egress-tree-agent/internal/agent/tree.go	32	// EnsureDevices creates the veth pair if missing and applies its guardrails:	COMMENT
MEDIUM	infra/helm/atlas/values-managed-production.yaml	384	# embedding model means re-provisioning this collection and re-embedding	COMMENT
MEDIUM	cas-plugin/src/proxy.rs	1444	/// prior build, an agentic sandbox — resolve like a warm one.	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	30	## Tworzenie rusztowania projektu {#create-project-scaffold}	COMMENT
MEDIUM	…ocs/yue_Hant/guides/features/agentic-coding/plugins.md	44	它會安裝 Tuist 技能，並將 `https://tuist.dev/mcp` 註冊為遠端 MCP 伺服器。對於尚未支援 Agent Plugins 的客戶端，請分別安裝 [skills](/guides/features/agentic	CODE
MEDIUM	…cs/yue_Hant/guides/features/projects/best-practices.md	113	### 代理編碼和工作樹 {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## 建立專案骨架 {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/ja/guides/features/agentic-coding/plugins.md	44	これにより Tuist スキルがインストールされ、`https://tuist.dev/mcp` がリモート MCP サーバーとして登録されます。Agent Plugins をまだサポートしていないクライアントの場合は、[スキル](/gui	CODE
MEDIUM	…riv/docs/ja/guides/features/projects/best-practices.md	113	### エージェンティックコーディングとワークツリー {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## プロジェクトのスケルトンを作成する {#create-project-scaffold}	COMMENT
MEDIUM	…docs/zh_Hans/guides/features/agentic-coding/plugins.md	44	它会安装 Tuist 技能，并将 `https://tuist.dev/mcp` 注册为远程 MCP 服务器。对于尚不支持 Agent Plugins 的客户端，请单独安装 [技能](/guides/features/agentic-cod	CODE
MEDIUM	…ocs/zh_Hans/guides/features/projects/best-practices.md	113	### 代理编程与工作树 {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## 创建项目脚手架 {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/ru/guides/features/agentic-coding/plugins.md	44	Он устанавливает навыки Tuist и регистрирует `https://tuist.dev/mcp` как удалённый MCP-сервер. Для клиентов, которые ещё	CODE
MEDIUM	…riv/docs/ru/guides/features/projects/best-practices.md	113	### Разработка с агентами и рабочие деревья {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## Создание каркаса проекта {#create-project-scaffold}	COMMENT
MEDIUM	…docs/zh_Hant/guides/features/agentic-coding/plugins.md	44	它會安裝 Tuist 技能，並將 `https://tuist.dev/mcp` 註冊為遠端 MCP 伺服器。對於尚未支援 Agent Plugins 的用戶端，請分別安裝 [skills](/guides/features/agentic	CODE
MEDIUM	…ocs/zh_Hant/guides/features/projects/best-practices.md	113	### 代理式編碼與工作樹 {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## 建立專案骨架 {#create-project-scaffold}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	31	## Create project scaffold {#create-project-scaffold}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	28	## إنشاء سقالة المشروع {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/ka/guides/features/agentic-coding/plugins.md	44	ის აყენებს Tuist-ის უნარებს და არეგისტრირებს `https://tuist.dev/mcp`-ს როგორც დაშორებულ MCP სერვერს. კლიენტებისთვის, რომ	CODE
MEDIUM	…riv/docs/ka/guides/features/projects/best-practices.md	113	### აგენტური კოდირება და worktrees {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## პროექტის სკაფოლდის შექმნა {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/ko/guides/features/agentic-coding/plugins.md	44	이 플러그인은 Tuist 스킬을 설치하고 `https://tuist.dev/mcp`을 원격 MCP 서버로 등록합니다. 아직 Agent Plugins를 지원하지 않는 클라이언트의 경우, [스킬](/guides/feat	CODE
MEDIUM	…riv/docs/ko/guides/features/projects/best-practices.md	113	### 에이전트 기반 코딩과 워크트리 {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## 프로젝트 스캐폴드 생성 {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/es/guides/features/agentic-coding/plugins.md	44	Instala las habilidades de Tuist y registra `https://tuist.dev/mcp` como un servidor MCP remoto. Para clientes que aún n	CODE
MEDIUM	…riv/docs/es/guides/features/projects/best-practices.md	113	### Programación con agentes y worktrees {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## Crear el andamiaje del proyecto {#create-project-scaffold}	COMMENT
MEDIUM	…priv/docs/en/guides/features/agentic-coding/plugins.md	44	It installs Tuist skills and registers `https://tuist.dev/mcp` as a remote MCP server. For clients that do not yet suppo	CODE
MEDIUM	…riv/docs/en/guides/features/projects/best-practices.md	113	### Agentic coding and worktrees {#agentic-coding-and-worktrees}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	18	## Create project scaffold {#create-project-scaffold}	COMMENT
MEDIUM	…es/features/projects/adoption/migrate/xcode-project.md	30	## Proje iskelesi oluşturun {#create-project-scaffold}	COMMENT
MEDIUM	server/priv/marketing/agents/compare/circleci.md	1	# Tuist and CircleCI: toolchain improvement or CI orchestration and test acceleration?	COMMENT
MEDIUM	server/priv/marketing/agents/compare/circleci.md	11	## Compare orchestration and evidence	COMMENT
MEDIUM	server/priv/marketing/agents/compare/namespace.md	36	Sources checked on 2026-10-08: [Namespace Cache Volumes](https://namespace.so/docs/solutions/github-actions/caching)	CODE
MEDIUM	server/priv/marketing/agents/compare/appcircle.md	32	Sources checked on 2026-10-08: [Appcircle documentation](https://docs.appcircle.io/), [Enterprise self-hosting](http	CODE
MEDIUM	server/priv/marketing/agents/compare/bitrise.md	36	Sources checked on 2026-10-08: [Bitrise Build Cache](https://bitrise.io/platform/build-cache), [Bitrise Insights](ht	CODE
MEDIUM	server/priv/marketing/blog/2025/04/03/mcp.md	22	The server can provide [resources](https://modelcontextprotocol.io/docs/concepts/resources), [prompts](https://modelcont	CODE
MEDIUM	…ng/blog/2025/11/27/teaching-ai-to-read-xcode-builds.md	601	For real-time features and richer causality data, we've open-sourced [Argus](https://github.com/tuist/argus), a fork of	CODE
MEDIUM	…/priv/marketing/blog/2025/08/11/tuist-ai-whitepaper.md	17	## Building the foundation for agentic coding	COMMENT
MEDIUM	…r/priv/marketing/blog/2023/09/08/trendyol-and-tuist.md	78	We have integrated the use of [templates](https://docs.old.tuist.io/commands/scaffold/) to **optimize our development pr	CODE
MEDIUM	server/priv/marketing/blog/2026/03/02/gradle.md	58	## Built for automation and agentic workflows	COMMENT
MEDIUM	server/priv/marketing/blog/2026/03/02/gradle.md	62	For example, our [fix-flaky-tests skill](https://tuist.dev/en/docs/guides/features/agentic-coding/skills) gives coding a	CODE
MEDIUM	server/priv/marketing/blog/2026/03/18/doctor.md	44	- CLI + Skills: We solved distribution of the CLI years ago, and coincidentally, CLIs became trendy again because th	CODE
MEDIUM	server/priv/marketing/blog/2026/03/18/doctor.md	45	- MCP: We have also exposed an authenticated [MCP server](https://tuist.dev/en/docs/guides/features/agentic-coding/m	CODE
MEDIUM	server/priv/marketing/blog/2026/03/18/doctor.md	99	If this sounds interesting, you can add the [Tuist MCP](https://tuist.dev/en/docs/guides/features/agentic-coding/mcp) to	CODE
MEDIUM	…26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md	15	We decided to test this on the [Mastodon iOS client](https://github.com/mastodon/mastodon-ios). A real app with multiple	CODE
MEDIUM	…26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md	93	The agent wrote `skill.md` as a migration guide that starts where a real engineer would start: with a baseline build, a	CODE
MEDIUM	…26/02/02/migrating-mastodon-ios-to-tuist-with-codex.md	105	If you want to migrate your project, you can get started with the [migration skill](https://tuist.dev/en/docs/guides/fea	CODE
MEDIUM	server/priv/marketing/blog/2026/10/21/elixir-support.md	82	We want agents to be able to investigate this too. Build summaries, including durations, warning and error counts, and c	CODE
MEDIUM	server/priv/marketing/blog/2026/10/21/elixir-support.md	126	Once a test is flagged, you can notify the team through [Slack](https://tuist.dev/en/docs/guides/integrations/slack#flak	CODE
MEDIUM	server/priv/marketing/blog/2026/10/21/elixir-support.md	126	Once a test is flagged, you can notify the team through [Slack](https://tuist.dev/en/docs/guides/integrations/slack#flak	CODE
MEDIUM	server/priv/marketing/blog/2020/03/25/version-1.5.0.md	27	To read more about how it works you can do so on [commands](https://docs.old.tuist.io/commands/scaffold/) documentation	CODE
MEDIUM	server/priv/marketing/blog/2020/04/21/version-1.7.1.md	61	[new `scaffold` command](https://docs.old.tuist.io/commands/scaffold/).	CODE
MEDIUM	server/priv/marketing/blog/2020/10/08/george.md	51	### Can you tell us more about how you use property wrappers to do dependency injection?	COMMENT
MEDIUM	server/priv/marketing/blog/2020/06/11/marek.md	15	Marek is a core member of Tuist, and has been the brain behind features like [scaffolding](https://docs.old.tuist.io/com	CODE
MEDIUM	cli/CHANGELOG.old.md	3106	- Breaking Support for deprecated `Template.swift` has been ended. Define your templates using any name that describ	CODE
7 more matches not shown…

Hyper-Verbose Identifiers158 hits · 170 pts

Severity	File	Line	Snippet	Context
LOW	infra/flux/cloudflare-config/test_skip_sbfm.py	75	def test_canonical_project_roots(self):	CODE
LOW	infra/flux/cloudflare-config/test_skip_sbfm.py	81	def test_public_documentation_and_markdown(self):	CODE
LOW⚡	infra/flux/cloudflare-config/test_skip_sbfm.py	101	def test_content_prefixes_do_not_exempt_project_dashboards(self):	CODE
LOW⚡	infra/flux/cloudflare-config/test_skip_sbfm.py	111	def test_deeper_dashboards_and_empty_segments_remain_protected(self):	CODE
LOW⚡	infra/flux/cloudflare-config/test_skip_sbfm.py	120	def test_sockets_authentication_operator_and_scanner_paths_remain_protected(self):	CODE
LOW⚡	infra/flux/cloudflare-config/test_skip_sbfm.py	129	def test_non_read_methods_remain_protected(self):	CODE
LOW⚡	infra/flux/cloudflare-config/test_skip_sbfm.py	139	def test_existing_machine_paths_remain_exempt(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	50	def test_self_hosted_defaults_to_no_dns_verification(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	53	def test_self_hosted_can_explicitly_require_dns_verification(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	57	def test_hosted_mode_alone_does_not_enable_dns_verification(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	60	def test_managed_environments_explicitly_require_dns_verification(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	65	def test_previews_and_pentest_explicitly_require_dns_verification(self):	CODE
LOW⚡	infra/helm/tuist/test-sso-domain-verification.py	71	def test_separate_xcresult_processor_inherits_managed_policy(self):	CODE
LOW	infra/helm/tuist/test-clickhouse-tailnet.py	38	def test_managed_proxygroups_expose_only_http_without_nodeports(self):	CODE
LOW⚡	infra/helm/tuist/test-clickhouse-tailnet.py	50	def test_standalone_proxy_remains_clusterip(self):	CODE
LOW⚡	infra/helm/tuist/test-clickhouse-tailnet.py	57	def test_disabled_tailnet_and_self_hosted_defaults_have_no_tailnet_service(self):	CODE
LOW⚡	infra/helm/tuist/test-clickhouse-tailnet.py	63	def test_existing_allocation_is_removed_without_recreating_service(self):	CODE
LOW	infra/helm/tuist/test-cluster-cookie.py	36	def test_managed_environments_use_durable_web_only_cookie(self):	CODE
LOW⚡	infra/helm/tuist/test-cluster-cookie.py	73	def test_disabled_cluster_does_not_sync_or_inject_cookie(self):	CODE
LOW⚡	infra/helm/tuist/test-cluster-cookie.py	81	def test_self_hosted_still_generates_cookie_without_eso(self):	CODE
LOW⚡	infra/helm/tuist/test-cluster-cookie.py	86	def test_preowned_secret_is_not_managed_by_either_template(self):	CODE
LOW⚡	infra/helm/tuist/test-cluster-cookie.py	94	def test_custom_source_and_target(self):	CODE
LOW	infra/helm/tuist/test-cluster-cookie.py	106	def test_cookie_value_template_rejects_empty_and_preserves_bytes(self):	CODE
LOW	infra/helm/tuist/test-cluster-cookie.py	135	def test_invalid_ownership_or_empty_source_fails_closed(self):	CODE
LOW	noora/types/web-components.d.ts	159	export function registerNooraBreadcrumbItem(): void;	CODE
LOW	noora/types/web-components.d.ts	223	export function registerNooraButtonDropdown(): void;	CODE
LOW	noora/types/web-components.d.ts	257	export function registerNooraButtonGroupItem(): void;	CODE
LOW	noora/types/web-components.d.ts	413	export function registerNooraChartCategory(): void;	CODE
LOW	noora/types/web-components.d.ts	572	export function registerNooraDatePickerPreset(): void;	CODE
LOW	noora/types/web-components.d.ts	734	export function registerNooraDropdownItem(): void;	CODE
LOW	noora/types/web-components.d.ts	803	export function registerNooraFilterDefinition(): void;	CODE
LOW	noora/types/web-components.d.ts	821	export function registerNooraFilterOption(): void;	CODE
LOW	noora/types/web-components.d.ts	950	export function registerNooraInlineDropdown(): void;	CODE
LOW	noora/types/web-components.d.ts	1084	export function registerNooraNeutralButton(): void;	CODE
LOW	noora/types/web-components.d.ts	1110	export function registerNooraPaginationGroup(): void;	CODE
LOW	noora/types/web-components.d.ts	1245	export function registerNooraSidebarGroup(): void;	CODE
LOW	noora/js/DatePicker/dateUtils.js	55	export function calculateRangeFromDuration(duration) {	CODE
LOW	noora/js/DatePicker/dateUtils.js	159	export function initCalendarMonthsFromRange(startDate, endDate) {	CODE
LOW	noora/js/web-components/Remaining.js	624	function breadcrumbMenuItemTemplate(item, onSelect) {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4902	export function registerNooraBreadcrumbItem() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4908	export function registerNooraButtonDropdown() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4914	export function registerNooraButtonGroupItem() {	CODE
LOW	noora/js/web-components/Remaining.js	4926	export function registerNooraChartCategory() {	CODE
LOW	noora/js/web-components/Remaining.js	4944	export function registerNooraDatePickerPreset() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4956	export function registerNooraDropdownItem() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4959	export function registerNooraInlineDropdown() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4965	export function registerNooraFilterDefinition() {	CODE
LOW⚡	noora/js/web-components/Remaining.js	4968	export function registerNooraFilterOption() {	CODE
LOW	noora/js/web-components/Remaining.js	4992	export function registerNooraNeutralButton() {	CODE
LOW	noora/js/web-components/Remaining.js	4995	export function registerNooraPaginationGroup() {	CODE
LOW	noora/js/web-components/Remaining.js	5013	export function registerNooraSidebarGroup() {	CODE
LOW	noora/js/web-components/Remaining.js	5062	export function registerRemainingNooraComponents() {	CODE
LOW	noora/js/web-components/Contract.js	88	export function initializeContractDefaults(element, contract) {	CODE
LOW	noora/scripts/generate-web-components.js	540	function renderComponentDocumentation(contract) {	CODE
LOW	atlas-native/resources/app_icons_test.py	23	def test_ios_catalog_images_are_opaque_and_correctly_sized(self):	CODE
LOW	atlas-native/resources/app_icons_test.py	34	def test_ios_targets_package_preview_and_home_screen_icons(self):	CODE
LOW	atlas-native/resources/app_icons_test.py	52	def test_android_launcher_has_raster_and_adaptive_resources(self):	CODE
LOW⚡	atlas-native/ios/distribution/push_test.py	25	def test_production_profile_preserves_authorized_environment(self):	CODE
LOW⚡	atlas-native/ios/distribution/push_test.py	30	def test_missing_capability_fails_before_reading_private_certificate(self):	CODE
LOW⚡	atlas-native/ios/distribution/push_test.py	35	def test_development_profile_cannot_sign_distribution_app(self):	CODE
98 more matches not shown…

Magic Placeholder Names29 hits · 145 pts

Severity	File	Line	Snippet	Context
HIGH	server/priv/docs/pl/guides/features/previews.md	214	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/pl/guides/features/previews.md	230	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/yue_Hant/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/yue_Hant/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ja/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ja/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/zh_Hans/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/zh_Hans/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ru/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ru/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/zh_Hant/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/zh_Hant/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/pt/guides/features/previews.md	206	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/pt/guides/features/previews.md	222	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ar/guides/features/previews.md	198	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ar/guides/features/previews.md	214	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ka/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ka/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ko/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/ko/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/es/guides/features/previews.md	179	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/es/guides/features/previews.md	195	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/en/guides/features/previews/run/ios.md	52	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/en/guides/features/previews/run/ios.md	68	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/tr/guides/features/previews.md	212	apiKey: "your-api-key"	CODE
HIGH	server/priv/docs/tr/guides/features/previews.md	228	apiKey: "your-api-key"	CODE
HIGH	…rketing/changelog/2025.12.17-preview-tracks-and-sdk.md	34	apiKey: "your-api-key"	CODE
HIGH	…v/marketing/blog/2026/01/02/previews-sdk-and-tracks.md	41	apiKey: "your-api-key"	CODE
HIGH	…v/marketing/blog/2026/01/02/previews-sdk-and-tracks.md	61	apiKey: "your-api-key"	CODE

Structural Annotation Overuse74 hits · 126 pts

Severity	File	Line	Snippet	Context
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	28	### Step 1: Generate a Tuist SCIM token {#okta-step-1}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	36	### Step 2: Add the Okta SCIM app {#okta-step-2}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	43	### Step 3: Configure the API integration {#okta-step-3}	COMMENT
LOW	…riv/docs/en/guides/integrations/authentication/scim.md	54	### Step 4: Enable provisioning actions {#okta-step-4}	COMMENT
LOW	…riv/docs/en/guides/integrations/authentication/scim.md	64	### Step 5: Assign users or groups {#okta-step-5}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	91	### Step 1: Generate a Tuist SCIM token {#entra-step-1}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	99	### Step 2: Configure provisioning {#entra-step-2}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	108	### Step 3: Set the matching attribute {#entra-step-3}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	116	### Step 4: Disable group provisioning {#entra-step-4}	COMMENT
LOW⚡	…riv/docs/en/guides/integrations/authentication/scim.md	122	### Step 5: Assign users and start provisioning {#entra-step-5}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	115	### Step 1: Create an Okta application {#okta-step-1}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	125	### Step 2: Configure Tuist {#okta-step-2}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	137	### Step 3: Assign users to the Okta application {#okta-step-3}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	149	### Step 1: Register an Entra application {#entra-step-1}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	159	### Step 2: Configure Tuist {#entra-step-2}	COMMENT
LOW	…priv/docs/en/guides/integrations/authentication/sso.md	171	### Step 3: Assign users to the Entra application {#entra-step-3}	COMMENT
LOW⚡	…ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md	42	### Step 1: Rummaging for .xcworkspace or .xcodeproj	COMMENT
LOW⚡	…ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md	47	### Step 2: Chitchat with XcodeProj	COMMENT
LOW⚡	…ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md	51	### Step 3: Marshaling the troops (our mappers)	COMMENT
LOW	…ing/blog/2025/02/11/mapping-xcodeproj-to-xcodegraph.md	62	### Step 4: One graph to rule them all	COMMENT
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	855	// Step 1: AutogeneratedWorkspaceSchemeGraphMapper with insights enabled.	COMMENT
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	874	// Step 2: FocusTargetsGraphMappers — only BTests is on-shard.	COMMENT
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	888	// Step 3: TreeShakePrunedTargetsGraphMapper — drops pruned targets and rewrites	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	129	// Step 1: Start with a capital letter	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	132	// Step 2: Remove invalid characters	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	135	// Step 3: Add underscore prefix if the string starts with a number	COMMENT
LOW	…y/access-and-risk-management/risk-management-policy.md	168	### Step 1: Prepare for the Assessment	COMMENT
LOW	…y/access-and-risk-management/risk-management-policy.md	192	### Step 2: Conduct the Assessment	COMMENT
LOW	…y/access-and-risk-management/risk-management-policy.md	237	### Step 3: Communicate and Share the Risk Assessment Results	COMMENT
LOW	…y/access-and-risk-management/risk-management-policy.md	245	### Step 4: Maintain the Assessment	COMMENT
LOW	skills/skills/compare-generations/SKILL.md	17	## Step 1: Resolve Generations	COMMENT
LOW	skills/skills/compare-generations/SKILL.md	44	## Step 2: Compare Top-Level Metrics	COMMENT
LOW	skills/skills/compare-generations/SKILL.md	62	## Step 3: Analyze Cache Invalidation	COMMENT
LOW	skills/skills/compare-generations/SKILL.md	94	## Step 4: Assess Impact	COMMENT
LOW	skills/skills/compare-builds/SKILL.md	20	## Step 1: Resolve Builds	COMMENT
LOW	skills/skills/compare-builds/SKILL.md	47	## Step 2: Fetch Sub-Resource Details	COMMENT
LOW	skills/skills/compare-builds/SKILL.md	78	## Step 3: Compare Top-Level Metrics	COMMENT
LOW⚡	skills/skills/compare-builds/SKILL.md	95	## Step 4: Investigate Duration Regressions	COMMENT
LOW⚡	skills/skills/compare-builds/SKILL.md	103	## Step 5: Investigate Cache Changes	COMMENT
LOW⚡	skills/skills/compare-builds/SKILL.md	111	## Step 6: Check Build Context	COMMENT
LOW	skills/skills/compare-test-case/SKILL.md	18	## Step 1: Resolve the Test Case	COMMENT
LOW	skills/skills/compare-test-case/SKILL.md	48	## Step 2: Get Runs on Each Branch	COMMENT
LOW	skills/skills/compare-test-case/SKILL.md	67	## Step 3: Compare Branch Behavior	COMMENT
LOW	skills/skills/compare-test-case/SKILL.md	83	## Step 4: Inspect Failures	COMMENT
LOW	skills/skills/compare-test-case/SKILL.md	99	## Step 5: Identify Root Cause	COMMENT
LOW	skills/skills/compare-cache-runs/SKILL.md	17	## Step 1: Resolve Cache Runs	COMMENT
LOW	skills/skills/compare-cache-runs/SKILL.md	44	## Step 2: Compare Top-Level Metrics	COMMENT
LOW	skills/skills/compare-cache-runs/SKILL.md	62	## Step 3: Analyze Cache Invalidation	COMMENT
LOW	skills/skills/compare-cache-runs/SKILL.md	94	## Step 4: Assess Impact	COMMENT
LOW	skills/skills/debug-generated-project/SKILL.md	15	## Step 1: Gather Context	COMMENT
LOW	skills/skills/debug-generated-project/SKILL.md	32	## Step 2: Reproduce with the latest release	COMMENT
LOW	skills/skills/debug-generated-project/SKILL.md	62	## Step 3: Build Tuist from Source	COMMENT
LOW	skills/skills/debug-generated-project/SKILL.md	87	## Step 4: Triage the Issue	COMMENT
LOW	skills/skills/compare-gradle-builds/SKILL.md	20	## Step 1: Resolve Builds	COMMENT
LOW	skills/skills/compare-gradle-builds/SKILL.md	41	## Step 2: Compare Top-Level Metrics	COMMENT
LOW	skills/skills/compare-gradle-builds/SKILL.md	59	## Step 3: Drill Into Tasks	COMMENT
LOW⚡	skills/skills/compare-gradle-builds/SKILL.md	79	## Step 4: Investigate Duration Regressions	COMMENT
LOW⚡	skills/skills/compare-gradle-builds/SKILL.md	89	## Step 5: Investigate Cache Changes	COMMENT
LOW⚡	skills/skills/compare-gradle-builds/SKILL.md	98	## Step 6: Check Build Context	COMMENT
LOW	skills/skills/analyze-selective-testing/SKILL.md	14	## Step 1: Resolve Test Runs	COMMENT
14 more matches not shown…

Fake / Example Data82 hits · 83 pts

Severity	File	Line	Snippet	Context
LOW	noora/custom-elements.json	3166	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	3171	"attribute": "placeholder",	CODE
LOW	noora/custom-elements.json	3245	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	3250	"fieldName": "placeholder",	CODE
LOW	noora/custom-elements.json	7085	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	7090	"attribute": "placeholder"	CODE
LOW	noora/custom-elements.json	7242	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	7247	"fieldName": "placeholder"	CODE
LOW	noora/custom-elements.json	7482	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	7487	"attribute": "placeholder"	CODE
LOW	noora/custom-elements.json	7644	"name": "placeholder",	CODE
LOW	noora/custom-elements.json	7649	"fieldName": "placeholder"	CODE
LOW	noora/types/web-components.d.ts	60	fallback: "initials" \| "placeholder";	CODE
LOW	noora/css/filter.css	25	& [data-part="placeholder"] {	CODE
LOW	noora/js/web-components/Remaining.js	902	${!showImage && fallback === "placeholder"	CODE
LOW	noora/js/web-components/Remaining.js	2873	: html`<span data-part="placeholder">Enter value</span>`	CODE
LOW	noora/js/web-components/Remaining.js	2949	: html`<span data-part="placeholder">Enter value</span>`}	CODE
LOW	noora/js/web-components/contracts.json	228	"placeholder"	CODE
LOW	noora/js/web-components/contracts.json	2192	"name": "placeholder",	CODE
LOW	noora/js/web-components/contracts.json	2193	"property": "placeholder",	CODE
LOW	noora/js/web-components/contracts.json	5067	"name": "placeholder",	CODE
LOW	noora/js/web-components/contracts.json	5068	"property": "placeholder",	CODE
LOW	noora/js/web-components/contracts.json	5324	"name": "placeholder",	CODE
LOW	noora/js/web-components/contracts.json	5325	"property": "placeholder",	CODE
LOW	noora/docs/components/avatar.md	46	<noora-avatar name="Marek Fořt" image-href="https://www.invalid.url" fallback="placeholder"></noora-avatar>	CODE
LOW	noora/docs/components/avatar.md	67	<noora-avatar name="John Doe" color="gray"></noora-avatar>	CODE
LOW	noora/components/text-area.json	57	"name": "placeholder",	CODE
LOW	noora/components/text-area.json	58	"property": "placeholder",	CODE
LOW	noora/components/digit-input.json	26	"name": "placeholder",	CODE
LOW	noora/components/digit-input.json	27	"property": "placeholder",	CODE
LOW	noora/components/text-input.json	72	"name": "placeholder",	CODE
LOW	noora/components/text-input.json	73	"property": "placeholder",	CODE
LOW	noora/components/avatar.json	60	"values": ["initials", "placeholder"],	CODE
LOW	atlas-native/auth/src/business_tests.rs	368	"billing":{"email":"billing@example.org", "secret":"must-not-forward"},	CODE
LOW	atlas-native/auth/src/business_tests.rs	454	"server_version":"0.7.2", "user":{"name":"Taylor","email":"taylor@example.org"},	CODE
LOW	atlas-native/auth/src/business_tests.rs	479	json!({"server_version":"0.7.2","user":{"name":"Taylor","email":"taylor@example.org","token":"private"}}),	CODE
LOW	atlas-native/auth/src/business_tests.rs	494	json!({"server_version":"0.7.2","user":{"name":"Taylor","email":"taylor@example.org","description":""}})	CODE
LOW	atlas-native/auth/src/business_tests.rs	521	"name":"Taylor", "email":"taylor@example.org", "description":description, "roles":["admin"]	CODE
LOW	atlas-native/auth/src/presence_tests.rs	22	{"id":SELF,"name":"Me","email":"me@example.org","online":true,"here":true},	CODE
LOW	atlas-native/auth/src/presence_tests.rs	23	{"id":OTHER,"name":"Colleague","email":"other@example.org","online":online,"here":true,"location":"never-forward	CODE
LOW	atlas-native/ios/Tests/AtlasAIAccountsTests.swift	206	{"server_version":"1.2","user":{"name":"Taylor","email":"taylor@example.org","description":"Engineer"}}	CODE
LOW	atlas-native/ios/Tests/AtlasAIAccountsTests.swift	217	#expect(model.profile?.user.email == "taylor@example.org" && model.profile?.serverVersion == "1.2")	STRING
LOW	atlas-native/ios/Tests/AtlasAIAccountsTests.swift	243	{"server_version":"1.0","user":{"name":"Taylor","email":"taylor@example.org","description":"Role\\nCurious"}	CODE
LOW	atlas-native/ios/Tests/AtlasAIAccountsTests.swift	274	{"server_version":"1.0","user":{"name":"Taylor","email":"taylor@example.org"}}	CODE
LOW	atlas-native/previews/ios/AtlasSettingsPreview.swift	27	"account_name":"demo@example.org","status":"needs_authorization"}]}	CODE
LOW	atlas-native/previews/ios/AtlasBusinessPreview.swift	141	"user": ["name": "Taylor Morgan", "email": "taylor@example.org", "description": profileDescription],	CODE
LOW	…las-native/previews/ios/AtlasPresencePreviewData.swift	35	["id": "online", "name": "Alex Morgan", "email": "alex@example.org", "online": true,	CODE
LOW	…las-native/previews/ios/AtlasPresencePreviewData.swift	37	["id": "offline", "name": "Sam Rivera", "email": "sam@example.org", "online": false, "here": false]	CODE
LOW⚡	…as-native/previews/android/AtlasPresenceModelChecks.kt	26	"""{"sequence":1,"location":{"resource":"tasks","id":"first-record"},"people":[{"id":"other","name":"Colleague",	STRING
LOW⚡	…as-native/previews/android/AtlasPresenceModelChecks.kt	31	"""{"sequence":2,"location":{"resource":"accounts","id":"second-record"},"people":[{"id":"other","name":"Colleag	STRING
LOW⚡	…as-native/previews/android/AtlasPresenceModelChecks.kt	41	"""{"sequence":3,"location":{"resource":"accounts","id":"second-record"},"people":[{"id":"other","name":"Late re	STRING
LOW	…as-native/previews/android/AtlasBusinessModelChecks.kt	133	check(profile.name == "Alex Example" && profile.email == "alex@example.org" && profile.version == "1.2.3-demo")	CODE
LOW	…as-native/previews/android/AtlasBusinessModelChecks.kt	147	JSONObject().put("name", "Alex").put("email", "alex@example.org").put("description", description),	CODE
LOW	…las-native/previews/android/SettingsPreviewActivity.kt	46	{"provider":"google","name":"Google","configured":true,"account_name":"demo@example.org","status":"n	STRING
LOW	atlas-native/previews/android/AtlasBusinessFixtures.kt	76	return JSONObject("""{"server_version":"1.2.3-demo","user":{"name":"Alex Example","email":"alex@example.org"	CODE
LOW	…las-native/previews/android/BusinessPreviewActivity.kt	78	{"id":"online","name":"Alex Morgan","email":"alex@example.org","online":true,"here":true},	STRING
LOW	…las-native/previews/android/BusinessPreviewActivity.kt	79	{"id":"offline","name":"Sam Rivera","email":"sam@example.org","online":false,"here":false}]}""",	STRING
LOW	server/priv/docs/strings/tr.json	16	"placeholder": "Arama",	CODE
LOW	server/priv/docs/strings/yue_Hant.json	16	"placeholder": "",	CODE
LOW	server/priv/docs/strings/ja.json	16	"placeholder": "検索",	CODE
22 more matches not shown…

AI Slop Vocabulary22 hits · 62 pts

Severity	File	Line	Snippet	Context
MEDIUM	infra/flux/cloudflare-config/bot-management.yaml	16	# "Definitely automated" is the Cloudflare classifier's high-confidence	COMMENT
MEDIUM	infra/linux-runner-image/metrics-sampler.sh	74	# interface name, then on whitespace — robust across awk variants	COMMENT
MEDIUM	infra/helm/pomerium/templates/access-tiers.yaml	596	# binds to, so both are gated behind an active `/elevate` (TTL-bounded, audited)	COMMENT
MEDIUM	tuist-ops/slack-app-manifest.yaml	2	# fronts JIT elevation (`/elevate`, `/elevate-github`), preview requests (`/preview`), and	COMMENT
MEDIUM	cas-plugin/src/proxy_proto.rs	187	/// request keeps it stateless and robust; unix-socket connects are tens of	COMMENT
MEDIUM	server/priv/marketing/newsletter/issues/3.yml	44	I'm embarrassed to say I don't read less than I'd like. But, I got a great deal out of ["Grit: The Power of Pass	CODE
MEDIUM	server/priv/marketing/newsletter/issues/3.yml	69	link: https://apps.apple.com/us/app/tapestry-by-iconfactory/id6448078074	CODE
MEDIUM	server/assets/marketing/js/hooks/logo-transition.js	136	// the track by one set, so the loop is seamless and runs on the	COMMENT
MEDIUM	…ver/assets/marketing/js/hooks/infinite-scroll-logos.js	33	// Clone all logos for seamless looping	COMMENT
MEDIUM	…ver/assets/marketing/js/hooks/infinite-scroll-logos.js	47	// Add duplicated logos for seamless loop	COMMENT
MEDIUM	…ources/XcodeGraph/Models/Metadata/TargetMetadata.swift	4	/// Some Tuist features can leverage that information for doing things like filtering.	COMMENT
MEDIUM	cli/Sources/ProjectDescription/Settings.swift	162	/// `.settings(base:debug:release:defaultSettings:)` to leverage the default configurations	COMMENT
MEDIUM	kura/test/e2e/kura_compatibility_rollout.sh	3	# Mixed-version rollout compatibility harness.	COMMENT
MEDIUM	kura/test/e2e/kura_compatibility_rollout.sh	94	# two harness nodes so the never-started kura-ap cannot enter a node's initial	COMMENT
MEDIUM	kura/test/e2e/kura_compatibility_rollout.sh	266	# gate.sh transport + wrapper: the harness applies the fleet rollout gate's	COMMENT
MEDIUM	kura/test/e2e/kura_compatibility_rollout.sh	298	# matches nothing under BSD sed, and this harness is a manual gate	COMMENT
MEDIUM	kura/test/e2e/certificate-trust/qualify-linux.sh	81	# created and removed by the shared resource harness. No global Docker prune.	COMMENT
MEDIUM	kura/spec/e2e/grpc_upload_throughput_spec.sh	11	# skipped unless KURA_E2E_THROUGHPUT=1. The full harness (and tuning knobs)	COMMENT
MEDIUM	…generated_ios_app_with_watch_application/Project.swift	37	// In Xcode 14, watch application can now leverage the `.app` product type	COMMENT
MEDIUM	.github/workflows/kura.yml	441	# NOTE: the mixed-version harness kura/test/e2e/kura_compatibility_rollout.sh	COMMENT
MEDIUM	grafana-datasource/package-lock.json	13936	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
MEDIUM	grafana-datasource/.config/docker-compose-base.yaml	15	- 2345:2345/tcp # delve	CODE

Empty Error Handlers8 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH	infra/helm/k8s-monitoring/test-metric-cost-controls.py	132	except (OSError, ValueError):	CODE
HIGH	kura/test/e2e/multipart-admission/run.py	29	except (OSError, http.client.HTTPException):	CODE
HIGH	…ustom_scheme/Scripts/lldb/commands_for_customscheme.py	3	except:	CODE
HIGH	bazel/private/auth.py	131	except FileNotFoundError:	CODE
HIGH	bazel/private/auth.py	217	except (ValueError, IndexError):	CODE
HIGH	.github/scripts/server-elixir-cache-benchmark.py	124	except ProcessLookupError:	CODE
HIGH	.github/scripts/server-elixir-cache-benchmark.py	128	except subprocess.TimeoutExpired:	CODE
HIGH	.github/scripts/server-elixir-cache-benchmark.py	133	except ProcessLookupError:	CODE

Deep Nesting29 hits · 28 pts

Severity	File	Line	Context
LOW	infra/flux/cloudflare-config/test_skip_sbfm.py	16	CODE
LOW	infra/flux/cloudflare-config/test_skip_sbfm.py	41	CODE
LOW	infra/helm/tuist/test-clickhouse-tailnet.py	63	CODE
LOW	infra/helm/tuist/test-cluster-cookie.py	36	CODE
LOW	infra/helm/tuist/test-cluster-cookie.py	106	CODE
LOW	infra/helm/k8s-monitoring/test-metric-cost-controls.py	75	CODE
LOW	atlas-native/resources/generate_pip_assets.py	20	CODE
LOW	atlas-native/android/push/manifest.py	34	CODE
LOW	atlas-native/android/push/dependencies.py	64	CODE
LOW	atlas-native/android/push/dependencies.py	110	CODE
LOW	atlas-native/previews/capture_thread_card.py	34	CODE
LOW	cli/Tests/Fixtures/CargoCache/coverage_e2e.py	94	CODE
LOW	cli/Tests/Fixtures/CargoCache/native_e2e.py	17	CODE
LOW	kura/test/e2e/multipart-admission/run.py	37	CODE
LOW	bazel/tests/test_previews.py	275	CODE
LOW	bazel/tests/test_previews.py	362	CODE
LOW	bazel/tests/test_previews.py	492	CODE
LOW	bazel/tests/test_previews.py	599	CODE
LOW	bazel/tests/test_auth.py	418	CODE
LOW	bazel/tests/runtime/runtime_test.py	19	CODE
LOW	bazel/release/release.py	150	CODE
LOW	bazel/private/auth.py	60	CODE
LOW	bazel/private/auth.py	173	CODE
LOW	bazel/private/auth.py	309	CODE
LOW	bazel/private/executable.py	55	CODE
LOW	bazel/private/apple.py	13	CODE
LOW	bazel/private/apple.py	53	CODE
LOW	.github/scripts/server-elixir-cache-benchmark.test.py	145	CODE
LOW	.github/scripts/server-elixir-cache-benchmark.py	200	CODE

Redundant / Tautological Comments12 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	mise.toml	93	# Check if user already signed	COMMENT
LOW	infra/helm/tuist/values-managed-production.yaml	2104	# Set it to the M4-XL host count regardless, as the per-pool bound	COMMENT
LOW	mise/tasks/app/upload-ios.sh	10	# Check if the IPA was created successfully	COMMENT
LOW	mise/tasks/app/release/homebrew-cask.sh	25	# Check if VERSION, GITHUB_TOKEN, and SHA256 are provided	COMMENT
LOW	mise/tasks/cli/ee.sh	20	# Check if submodule is initialized	COMMENT
LOW	mise/tasks/cli/clean.sh	9	# Check if it is a directory before deleting	COMMENT
LOW	mise/tasks/cli/clean.sh	16	# Check if it is a directory before deleting	COMMENT
LOW	mise/tasks/cli/release/homebrew-formula.sh	25	# Check if VERSION, GITHUB_TOKEN, and SHA256 are provided	COMMENT
LOW	mise/utilities/derived_data_path.sh	5	# Check if the path is set	COMMENT
LOW	mise/utilities/xcode_path.sh	40	# Check if we found a path	COMMENT
LOW	.github/workflows/server.yml	158	# Check if marketing.pot exists	COMMENT
LOW	.github/workflows/server.yml	164	# Check if all languages have marketing.po files	COMMENT

Self-Referential Comments6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	infra/mise/tasks/k8s/prepare-fleet-ssh-key.sh	138	# Create the Secret matching the layout the controller writes	COMMENT
MEDIUM	infra/runner-image/runner.pkr.hcl	441	# Create the subdirectories as root + chown to runner instead of	COMMENT
MEDIUM	infra/helm/tuist/values-managed-common.yaml	9	# This file is layered under values-managed-staging.yaml /	COMMENT
MEDIUM	infra/helm/tuist/values-pentest.yaml	3	# This file is intentionally self-contained. It does not inherit the preview	COMMENT
MEDIUM	infra/helm/tuist/templates/clickhouse-managed.yaml	651	# Creating the database registers the replica with its peers. Two	COMMENT
MEDIUM	mise/tasks/cli/benchmark/run.sh	10	# Define a cleanup function	COMMENT

Example Usage Blocks10 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	infra/mdm/pkg/build.sh	6	# Usage:	COMMENT
LOW	mise/tasks/baremetal/prep-ovh.sh	17	# Usage:	COMMENT
LOW	mise/tasks/baremetal/mint-fleet-key.sh	12	# Usage:	COMMENT
LOW	mise/tasks/baremetal/mark-ovh.sh	9	# Usage:	COMMENT
LOW	mise/tasks/baremetal/prep-vultr.sh	21	# Usage:	COMMENT
LOW	mise/tasks/rack/card-password.sh	10	# Usage:	COMMENT
LOW	mise/tasks/rack/fleet.sh	14	# Usage:	COMMENT
LOW	mise/tasks/rack/prep-switch.sh	18	# Usage:	COMMENT
LOW	mise/tasks/rack/write-install-usb.sh	9	# Usage:	COMMENT
LOW	.github/scripts/server-clickhouse-floor.sh	4	# Usage:	COMMENT

Synthetic Comment Markers3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	atlas-native/auth/src/accounts.rs	152	"Paste the subscription token generated by claude setup-token.",	CODE
HIGH	…e/android/src/dev/tuist/atlas/AtlasAIAccountsScreen.kt	556	field.error = "Paste the token generated by claude setup-token."	CODE
HIGH	server/priv/gettext/CLAUDE.md	4	<!-- This section is auto-generated by claude-mem. Edit content outside the tags. -->	CODE

Verbosity Indicators6 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	855	// Step 1: AutogeneratedWorkspaceSchemeGraphMapper with insights enabled.	COMMENT
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	874	// Step 2: FocusTargetsGraphMappers — only BTests is on-shard.	COMMENT
LOW	…stKitTests/Mappers/FocusTargetsGraphMappersTests.swift	888	// Step 3: TreeShakePrunedTargetsGraphMapper — drops pruned targets and rewrites	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	129	// Step 1: Start with a capital letter	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	132	// Step 2: Remove invalid characters	COMMENT
LOW⚡	cli/Sources/TuistSupport/Extensions/String+Extras.swift	135	// Step 3: Add underscore prefix if the string starts with a number	COMMENT

AI Response Leakage2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	…/priv/docs/pt/guides/features/projects/dependencies.md	541	> dynamic](#static-or-dynamic) for more details. In this example, all dependencies	CODE
HIGH	…/priv/docs/en/guides/features/projects/dependencies.md	481	> Dynamic linking is not always recommended. See the section [Static or dynamic](#static-or-dynamic) for more details. I	CODE

Slop Phrases2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/codeql.yml	72	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT
MEDIUM	atlas/assets/tsconfig.json	21	// Feel free to adjust this configuration however you need.	COMMENT

Excessive Try-Catch Wrapping6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	infra/helm/k8s-monitoring/test-metric-cost-controls.py	167	except Exception:	STRING
LOW	…appers/CachedModuleSymbolsPreparationScriptTests.swift	168	except Exception as failure:	CODE
LOW	…erator/Mappers/CachedModulesDebuggingGraphMapper.swift	605	except Exception as error:	CODE
LOW	…tor/Mappers/CachedModuleSymbolsPreparationScript.swift	136	except Exception as error:	CODE
LOW	…tor/Mappers/CachedModuleSymbolsPreparationScript.swift	163	except Exception as error:	CODE
LOW	bazel/tests/test_auth.py	42	except Exception as error:	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	infra/registry-router/src/index.ts	27	async function handleRequest(request: Request): Promise<Response> {	CODE
LOW	bazel/tests/test_auth.py	62	def handle_request(self):	STRING

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…ustom_scheme/Scripts/lldb/commands_for_customscheme.py	2		CODE

tuist/tuist

Open-Source Code Quality, Security and Technical Debt Review