An open, programmable decision layer for models and compute.
This report summarizes scanner evidence for vllm-project/semantic-router, a Go project with 6,077 GitHub stars. SynthScan examined 2,169,253 lines of code across 10645 source files, recording 10081 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 6.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 7883 finding(s).
Are imports declared and package/API names verified? 1203 finding(s).
Are wrappers, guards, and repeated structures necessary? 7089 finding(s).
Which changes need focused human review? 10081 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 10081 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/test_agent_session_replay.py | 31 | def test_requests_share_a_stable_prefix_and_append_history() -> None: | CODE |
| LOW | bench/test_agent_session_replay.py | 121 | def test_parse_session_rejects_malformed_sessions(mutate: Mutation, error: str) -> None: | CODE |
| LOW | bench/test_agent_session_replay.py | 129 | def test_load_session_rejects_duplicate_json_keys(tmp_path: Path) -> None: | CODE |
| LOW | bench/test_agent_session_replay.py | 164 | def test_replay_sends_each_turn_and_flags_a_tool_loop_switch( | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 547 | def missing_router_header_counts(rows: list[dict[str, Any]]) -> dict[str, int]: | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 554 | def invalid_router_header_counts(rows: list[dict[str, Any]]) -> dict[str, int]: | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 567 | def valid_router_header_value(header: str, value: str) -> bool: | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 667 | def attach_validation_failures( | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 714 | def render_comparison_markdown(comparison: dict[str, Any]) -> str: | CODE |
| LOW | bench/plot_session_routing_figures.py | 225 | def render_synthetic_headline(overall: dict[str, Any], output: Path, dpi: int) -> None: | CODE |
| LOW | bench/plot_session_routing_figures.py | 358 | def render_ablation_cost_quality( | CODE |
| LOW | bench/plot_session_routing_figures.py | 660 | def agent_task_readiness_metrics( | CODE |
| LOW | bench/plot_session_routing_figures.py | 712 | def render_agent_task_readiness( | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2575 | def missing_router_header_counts(rows: list[dict[str, Any]]) -> dict[str, int]: | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2582 | def invalid_router_header_counts(rows: list[dict[str, Any]]) -> dict[str, int]: | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2595 | def valid_router_header_value(header: str, value: str) -> bool: | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2818 | def attach_validation_failures( | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2943 | def render_comparison_markdown(comparison: dict[str, Any]) -> str: | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 251 | def add_evidence_identity_failures( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 324 | def add_cache_probe_identity_failures( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 333 | def add_cache_probe_pair_failures( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 360 | def add_cache_probe_serving_path_failures( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 457 | def evaluate_failure_aggregate( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 513 | def evaluate_agent_task_summary( | CODE |
| LOW | bench/session_routing_branch_image_benchmark.py | 694 | def has_mounted_binary_marker(*values: str) -> bool: | CODE |
| LOW | bench/agentic_routing_experiment.py | 473 | def agentic_boundary_decision( | CODE |
| LOW | bench/agentic_routing_experiment.py | 805 | def summarize_baseline_policy(rows: list[dict[str, Any]]) -> dict[str, Any]: | CODE |
| LOW | bench/agentic_routing_experiment.py | 905 | def learning_architecture_fixtures() -> list[dict[str, Any]]: | CODE |
| LOW | bench/agentic_routing_experiment.py | 1078 | def summarize_learning_architecture(rows: list[dict[str, Any]]) -> dict[str, Any]: | CODE |
| LOW | bench/agentic_routing_experiment.py | 1178 | def write_learning_architecture_outputs(out_dir: Path) -> dict[str, Any]: | CODE |
| LOW | bench/agentic_routing_experiment.py | 1280 | def render_learning_architecture_report( | CODE |
| LOW | bench/test_cache_token_probe.py | 70 | def test_cached_token_extraction_handles_missing_zero_and_positive_values(): | CODE |
| LOW | bench/test_cache_token_probe.py | 104 | def test_usage_extraction_handles_chat_and_responses_token_names(): | CODE |
| LOW | bench/test_cache_token_probe.py | 127 | def test_cache_reporting_state_distinguishes_missing_zero_and_positive(): | CODE |
| LOW | bench/test_cache_token_probe.py | 138 | def test_summary_reports_cached_ratio_and_reporting_state(): | CODE |
| LOW | bench/test_cache_token_probe.py | 166 | def test_summary_records_repeated_prefix_probe_metadata(): | CODE |
| LOW | bench/test_cache_token_probe.py | 179 | def test_validate_summary_gates_positive_cache_evidence(): | CODE |
| LOW | bench/test_cache_token_probe.py | 197 | def test_validate_summary_fails_missing_or_zero_cache_evidence(): | CODE |
| LOW | bench/test_cache_token_probe.py | 226 | def test_validate_summary_fails_low_success_rate(): | CODE |
| LOW | bench/test_cache_token_probe.py | 237 | def test_validate_baseline_identity_rejects_same_base_url(): | CODE |
| LOW | bench/test_cache_token_probe.py | 259 | def test_validate_baseline_identity_accepts_direct_backend_url(): | CODE |
| LOW | bench/test_cache_token_probe.py | 279 | def test_aggregate_summary_output_matches_ga_report_shape(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 53 | def complete_branch_image_summary() -> dict: | CODE |
| LOW | bench/test_session_routing_ga_report.py | 96 | def complete_agent_task_summary() -> dict: | CODE |
| LOW | bench/test_session_routing_ga_report.py | 235 | def test_complete_evidence_passes_ga_gate(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 282 | def test_missing_positive_cache_and_branch_image_block_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 332 | def test_positive_cache_without_probe_metadata_blocks_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 380 | def test_positive_cache_without_direct_backend_baseline_blocks_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 431 | def test_positive_cache_requires_router_baseline_probe_identity_match(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 493 | def test_positive_cache_requires_direct_backend_serving_path_identity(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 555 | def test_cache_runner_validation_failures_block_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 601 | def test_agent_task_runner_validation_failures_block_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 643 | def test_stale_agent_task_suite_blocks_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 713 | def test_diagnostic_probe_does_not_satisfy_branch_image_benchmark(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 771 | def test_branch_image_summary_requires_all_child_checks(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 813 | def test_branch_image_summary_requires_assembler_identity_and_evidence(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 861 | def test_branch_image_summary_blocks_expected_identity_mismatch(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 910 | def test_missing_initial_policy_baseline_blocks_ga(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 959 | def test_main_writes_report_and_respects_allow_blockers(tmp_path): | CODE |
| LOW | bench/test_session_routing_ga_report.py | 983 | def test_main_stdout_lists_blockers_for_maintainer_ops(tmp_path, capsys): | CODE |
| 6002 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/test/smoke/test-signal-api.sh | 13 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 15 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 78 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 80 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 134 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 136 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 186 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 188 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 466 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-signal-api.sh | 468 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 28 | # ─── Configurable parameters (from env, with defaults) ─────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 38 | # ─── Dynamic discovery ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | tools/test/smoke/test-authz-rbac.sh | 103 | # ─── Helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 175 | # ─── Test 1: Admin → 14B ───────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 181 | # ─── Test 2: Alice (engineering/pro_tier) → 7B ─────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 187 | # ─── Test 3: Bob (premium) + complex query → 14B ───────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 193 | # ─── Test 4: Bob (premium) + simple query → 7B ─────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 199 | # ─── Test 5: Carol (free) → 7B ─────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 205 | # ─── Test 6: Dave (contractor/free_tier) → 7B ──────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 211 | # ─── Test 7: Invalid token → 401 ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 217 | # ─── Test 8: No token → 401 ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-authz-rbac.sh | 226 | # ─── Summary ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-classification-api.sh | 192 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-classification-api.sh | 194 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-classification-api.sh | 198 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/test/smoke/test-classification-api.sh | 200 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 12 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 14 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 84 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 86 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 140 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 142 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 386 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 388 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 460 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 462 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 521 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 523 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 649 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 651 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 789 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 791 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 852 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 854 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 920 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-classification-api.sh | 922 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 13 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 15 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 80 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 82 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 147 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 149 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 215 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 217 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 283 | # ============================================================================ | COMMENT |
| MEDIUM | tools/test/smoke/test-direct-api.sh | 285 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | tools/security/ast_security_scanner.py | 814 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/security/ast_security_scanner.py | 816 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/security/ast_security_scanner.py | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/security/ast_security_scanner.py | 37 | # --------------------------------------------------------------------------- | COMMENT |
| 416 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/test_agent_session_replay.py | 1 | CODE | |
| LOW | bench/agentic_routing_live_benchmark.py | 12 | CODE | |
| LOW | bench/plot_session_routing_figures.py | 10 | CODE | |
| LOW | bench/agent_task_live_benchmark.py | 4 | CODE | |
| LOW | bench/session_routing_branch_image_benchmark.py | 10 | CODE | |
| LOW | bench/agentic_routing_experiment.py | 9 | CODE | |
| LOW | bench/openai_fault_proxy.py | 4 | CODE | |
| LOW | bench/agent_session_replay.py | 2 | CODE | |
| LOW | bench/session_routing_ga_report.py | 4 | CODE | |
| LOW | bench/cache_token_probe.py | 4 | CODE | |
| LOW | bench/session_routing_branch_image_probe.py | 4 | CODE | |
| LOW | bench/hallucination/datasets.py | 12 | CODE | |
| LOW | bench/hallucination/__init__.py | 7 | CODE | |
| LOW | bench/hallucination/__init__.py | 8 | CODE | |
| LOW | bench/hallucination/__init__.py | 8 | CODE | |
| LOW | bench/hallucination/__init__.py | 8 | CODE | |
| LOW | bench/hallucination/evaluate.py | 29 | CODE | |
| LOW | bench/redteam/test_attack.py | 3 | CODE | |
| LOW | bench/redteam/scorers.py | 7 | CODE | |
| LOW | bench/redteam/test_datasets.py | 1 | CODE | |
| LOW | bench/redteam/datasets.py | 7 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 3 | CODE | |
| LOW | bench/redteam/__init__.py | 11 | CODE | |
| LOW | bench/redteam/__init__.py | 12 | CODE | |
| LOW | bench/redteam/attack.py | 7 | CODE | |
| LOW | bench/redteam/evaluate.py | 12 | CODE | |
| LOW | bench/grounded_fusion/metrics.py | 9 | CODE | |
| LOW | bench/grounded_fusion/runner.py | 9 | CODE | |
| LOW | bench/grounded_fusion/ollama_proxy.py | 17 | CODE | |
| LOW | bench/grounded_fusion/datasets.py | 18 | CODE | |
| LOW | bench/grounded_fusion/grade_only.py | 16 | CODE | |
| LOW | bench/grounded_fusion/compare_multiarm.py | 22 | CODE | |
| LOW | bench/grounded_fusion/llm_client.py | 12 | CODE | |
| LOW | bench/grounded_fusion/rubric_judge.py | 17 | CODE | |
| LOW | bench/grounded_fusion/evaluate.py | 20 | CODE | |
| LOW | bench/grounded_fusion/make_configs.py | 16 | CODE | |
| LOW | bench/grounded_fusion/sanitize_results.py | 14 | CODE | |
| LOW | bench/grounded_fusion/items.py | 13 | CODE | |
| LOW | bench/grounded_fusion/compare.py | 16 | CODE | |
| LOW | bench/reasoning/plotting.py | 1 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 15 | CODE | |
| LOW | bench/reasoning/reasoning_mode_eval.py | 16 | CODE | |
| LOW | bench/reasoning/__init__.py | 28 | CODE | |
| LOW | bench/reasoning/__init__.py | 28 | CODE | |
| LOW | bench/reasoning/__init__.py | 29 | CODE | |
| LOW | bench/reasoning/__init__.py | 29 | CODE | |
| LOW | bench/reasoning/__init__.py | 29 | CODE | |
| LOW | bench/reasoning/__init__.py | 29 | CODE | |
| LOW | bench/reasoning/__init__.py | 32 | CODE | |
| LOW | bench/reasoning/__init__.py | 32 | CODE | |
| LOW | bench/reasoning/dataset_factory.py | 8 | CODE | |
| LOW | bench/reasoning/dataset_factory.py | 18 | CODE | |
| LOW | bench/reasoning/canonical_patch.py | 1 | CODE | |
| LOW | bench/reasoning/router_accounting.py | 8 | CODE | |
| LOW | bench/reasoning/reporting.py | 1 | CODE | |
| 992 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 29 | # Step 1: Install Node Feature Discovery (NFD) Operator | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 81 | # Step 2: Create NFD Instance | COMMENT |
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 122 | # Step 3: Install NVIDIA GPU Operator | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 175 | # Step 4: Create ClusterPolicy | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 235 | # Step 5: Verify GPU Resources | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 39 | ## Step 1: Create Kind Cluster (Optional) | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 50 | ## Step 2: Install agentgateway | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 73 | ## Step 3: Create an agentgateway proxy | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 100 | ## Step 4: Deploy Demo LLM | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 173 | ## Step 5: Deploy vLLM Semantic Router | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 193 | ## Step 6: Create agentgateway routing resources | COMMENT |
| LOW | website/docs/installation/k8s/agentgateway.md | 231 | ## Step 7: Attach Semantic Router as ExtProc | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 42 | ## Step 1: Verify the cluster | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 48 | ## Step 2: Deploy LLM models | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 79 | ## Step 3: Install Gateway API and Istio | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 100 | ## Step 4: Update vsr config (Optional) | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 111 | ## Step 5: Deploy vLLM Semantic Router | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 138 | ## Step 6: Install additional Istio configuration | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 156 | ## Step 7: Install gateway routes | COMMENT |
| LOW | website/docs/installation/k8s/istio.md | 166 | ## Step 8: Testing the Deployment | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 90 | ## Step 1: Create Kind Cluster (Optional) | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 101 | ## Step 2: Deploy vLLM Semantic Router | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 126 | ## Step 3: Install Envoy Gateway | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 143 | ## Step 4: Install Agent Router | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 164 | ## Step 5: Deploy Demo LLM | COMMENT |
| LOW | website/docs/installation/k8s/ai-gateway.md | 173 | ## Step 6: Create Gateway API Resources | COMMENT |
| LOW⚡ | website/blog/2026-01-23-mom-on-amd-gpu.md | 270 | ### Step 1: Install vLLM-SR | COMMENT |
| LOW⚡ | website/blog/2026-01-23-mom-on-amd-gpu.md | 278 | ### Step 2: Initialize Configuration | COMMENT |
| LOW⚡ | website/blog/2026-01-23-mom-on-amd-gpu.md | 286 | ### Step 3: Deploy vLLM on AMD GPU | COMMENT |
| LOW | website/blog/2026-01-23-mom-on-amd-gpu.md | 322 | ### Step 4: Start the Semantic Router | COMMENT |
| LOW | website/blog/2026-01-23-mom-on-amd-gpu.md | 331 | ### Step 5: Test It | COMMENT |
| LOW | …site/blog/2026-03-25-vllm-sr-on-amd-developer-cloud.md | 107 | ### Step 1: Create the Shared Docker Network | COMMENT |
| LOW | …site/blog/2026-03-25-vllm-sr-on-amd-developer-cloud.md | 117 | ### Step 2: Start the AMD ROCm vLLM Backend | COMMENT |
| LOW⚡ | …ite/versioned_docs/version-v0.1/installation/milvus.md | 356 | # Step 1: Deploy Milvus (using Helm for simplicity) | COMMENT |
| LOW⚡ | …ite/versioned_docs/version-v0.1/installation/milvus.md | 365 | # Step 2: Wait for ready | COMMENT |
| LOW⚡ | …ite/versioned_docs/version-v0.1/installation/milvus.md | 369 | # Step 3: Update router config (set backend_type: "milvus") | COMMENT |
| LOW⚡ | …ite/versioned_docs/version-v0.1/installation/milvus.md | 372 | # Step 4: Restart router | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 35 | ## Step 1: Common Steps from Istio Guide | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 39 | ## Step 2: Install Istio Gateway, Gateway API, Inference Extension CRDs | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 61 | ## Step 3: Deploy LLM models | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 100 | ## Step 4: Deploy InferencePools and LLM-D schedulers | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 118 | ## Step 5: Additional Istio config for LLM-D connection | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 132 | ## Step 6: Update vsr config | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 136 | ## Step 7: Deploy vLLM Semantic Router | COMMENT |
| LOW⚡ | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 151 | ## Step 6: Additional Istio configuration for the VSR connection | COMMENT |
| LOW⚡ | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 160 | ## Step 7: Install gateway routes | COMMENT |
| LOW⚡ | …/versioned_docs/version-v0.1/installation/k8s/llm-d.md | 169 | ## Step 8: Testing the Deployment | COMMENT |
| LOW | …docs/version-v0.1/installation/k8s/production-stack.md | 39 | ## Step 1: Deploy the vLLM Production Stack using your Helm values | COMMENT |
| LOW | …docs/version-v0.1/installation/k8s/production-stack.md | 94 | ## Step 2: Deploy vLLM Semantic Router and point it at your vLLM router Service | COMMENT |
| LOW | …docs/version-v0.1/installation/k8s/production-stack.md | 147 | ## Step 3: Test the deployment | COMMENT |
| LOW | …versioned_docs/version-v0.1/installation/k8s/aibrix.md | 42 | ## Step 1: Create Kind Cluster (Optional) | COMMENT |
| LOW | …versioned_docs/version-v0.1/installation/k8s/aibrix.md | 53 | ## Step 2: Deploy vLLM Semantic Router | COMMENT |
| LOW | …versioned_docs/version-v0.1/installation/k8s/aibrix.md | 75 | ## Step 3: Install vLLM AIBrix | COMMENT |
| LOW | …versioned_docs/version-v0.1/installation/k8s/aibrix.md | 91 | ## Step 4: Deploy Demo LLM | COMMENT |
| LOW | …versioned_docs/version-v0.1/installation/k8s/aibrix.md | 102 | ## Step 5: Create Gateway API Resources | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/istio.md | 27 | ## Step 1: Create Minikube Cluster | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/istio.md | 44 | ## Step 2: Deploy LLM models | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/istio.md | 83 | ## Step 3: Install Istio Gateway, Gateway API, Inference Extension CRDs | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/istio.md | 105 | ## Step 4: Update vsr config | COMMENT |
| LOW | …/versioned_docs/version-v0.1/installation/k8s/istio.md | 109 | ## Step 5: Deploy vLLM Semantic Router | COMMENT |
| 299 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bench/hallucination/test_trajectories.py | 32 | # running the same cases against the hallucination detector. | COMMENT |
| MEDIUM | bench/hallucination/datasets.py | 27 | context: str # Ground truth context (tool results / RAG context) | CODE |
| MEDIUM | bench/hallucination/datasets.py | 31 | hallucination_spans: Optional[List[dict]] = None # Annotated hallucination spans | CODE |
| MEDIUM⚡ | bench/hallucination/evaluate.py | 77 | true_positives: int # Correctly detected hallucinations | CODE |
| MEDIUM⚡ | bench/hallucination/evaluate.py | 78 | false_positives: int # Incorrectly flagged as hallucination | CODE |
| MEDIUM⚡ | bench/hallucination/evaluate.py | 80 | false_negatives: int # Missed hallucinations | CODE |
| MEDIUM | bench/hallucination/evaluate.py | 183 | # Add tool result with context (enables hallucination detection) | COMMENT |
| MEDIUM | bench/hallucination/evaluate.py | 217 | # Extract hallucination detection headers | COMMENT |
| MEDIUM | bench/hallucination/evaluate.py | 276 | # Print hallucination detection immediately when found | COMMENT |
| MEDIUM | bench/grounded_fusion/make_configs.py | 138 | # embedding model and otherwise fatal at startup) -- the benchmark routes | COMMENT |
| MEDIUM | bench/grounded_fusion/make_configs.py | 150 | # Enable hallucination_mitigation so the router prepares its hallucination | COMMENT |
| MEDIUM | …/dataset_implementations/openmathrreasoning_dataset.py | 39 | return True # Has detailed chain-of-thought solutions | CODE |
| MEDIUM | …vices/provider-mocker/provider_mocker/demo_fixtures.py | 6 | # Response with hallucination - claims facts not in context | COMMENT |
| MEDIUM | …vices/provider-mocker/provider_mocker/demo_fixtures.py | 11 | # Response grounded in context - no hallucination | COMMENT |
| MEDIUM | tools/agent/docs/architecture-guardrails.md | 1 | # Architecture guardrails | COMMENT |
| MEDIUM | config/config.yaml | 592 | # hallucination plugin enforces on them. | COMMENT |
| MEDIUM | config/config.yaml | 1246 | # with the hallucination detector (against the request's context, else | COMMENT |
| MEDIUM | config/config.yaml | 1782 | # request context window, the decision falls back to its normal candidate | COMMENT |
| MEDIUM | …ig/fragments/signal/hallucination/grounded-answer.yaml | 5 | # has answered. The hallucination plugin of the decision selected for the | COMMENT |
| MEDIUM | config/fragments/signal/embedding/image-routing.yaml | 3 | # the multimodal embedding model. | COMMENT |
| MEDIUM | config/runtime/memory/valkey.yaml | 3 | # module) as the agentic memory backend. | COMMENT |
| MEDIUM | config/runtime/response-cache/milvus.yaml | 49 | # Embedding width: 0 takes the embedding model's own; a set width must be one | COMMENT |
| MEDIUM | config/runtime/response-cache/valkey.yaml | 46 | # Embedding width: 0 takes the embedding model's own; a set width must be one | COMMENT |
| MEDIUM | config/runtime/response-cache/redis.yaml | 46 | # Embedding width: 0 takes the embedding model's own; a set width must be one | COMMENT |
| MEDIUM | config/recipes/vela-amd/config.yaml | 3 | # Replace vs_your_documents after creating and indexing a vector store for RAG. | COMMENT |
| MEDIUM | deploy/kserve/deploy.sh | 83 | # Deploy with custom storage class and a canonical embedding model | COMMENT |
| MEDIUM | deploy/operator/main.go | 38 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | deploy/operator/main.go | 53 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | deploy/operator/main.go | 97 | // +kubebuilder:scaffold:builder | COMMENT |
| MEDIUM⚡ | deploy/operator/config/crd/kustomization.yaml | 6 | # +kubebuilder:scaffold:crdkustomizeresource | COMMENT |
| MEDIUM⚡ | deploy/operator/config/crd/kustomization.yaml | 12 | # +kubebuilder:scaffold:crdkustomizewebhookpatch | COMMENT |
| MEDIUM⚡ | deploy/operator/config/crd/kustomization.yaml | 17 | # +kubebuilder:scaffold:crdkustomizecainjectionpatch | COMMENT |
| MEDIUM | …amples/vllm.ai_v1alpha1_semanticrouter_complexity.yaml | 3 | # This example demonstrates few-shot complexity classification for intelligent routing | COMMENT |
| MEDIUM | deploy/operator/config/samples/kustomization.yaml | 4 | #+kubebuilder:scaffold:manifestskustomizesamples | COMMENT |
| MEDIUM | website/docs/faq.md | 103 | ## How do we avoid hurting multi-turn / agentic workloads? | COMMENT |
| MEDIUM | website/docs/training/model-performance-eval.md | 116 | ## Generate a configuration scaffold | COMMENT |
| MEDIUM | website/docs/training/model-performance-eval.md | 175 | ## Turn the scaffold into a routing policy | COMMENT |
| MEDIUM | website/docs/model-runtime/migrate.md | 251 | ## Re-embed when the embedding model changes | COMMENT |
| MEDIUM | website/docs/installation/qdrant.md | 7 | This guide covers deploying [Qdrant](https://qdrant.tech/) as a backend for the Semantic Router. Qdrant can serve as the | CODE |
| MEDIUM | website/docs/troubleshooting/common-errors.md | 438 | ## A classifier or embedding model cannot load | COMMENT |
| MEDIUM | website/docs/tutorials/plugin/rag.md | 1 | # RAG | COMMENT |
| MEDIUM | website/docs/tutorials/plugin/context-compression.md | 45 | ## Requests beyond the model context window | COMMENT |
| MEDIUM | website/docs/tutorials/plugin/memory.md | 74 | ## Upgrading the embedding model | COMMENT |
| MEDIUM | website/docs/tutorials/signal/heuristic/conversation.md | 114 | [`config/fragments/signal/conversation/agentic-shape.yaml`](https://github.com/vllm-project/semantic-router/blob/main/co | CODE |
| MEDIUM | website/docs/overview/use-cases.md | 156 | ### Bounded recovery and orchestration | COMMENT |
| MEDIUM | website/blog/2026-06-29-micro-agent-frontier-models.md | 333 | [Agentic Intelligence Lab](https://agentic-in.ai/), especially | CODE |
| MEDIUM | …log/2026-06-18-agentic-intelligent-routing-amd-rocm.md | 49 | | Recipe | [`config/recipes/agent/config.yaml`](https://github.com/vllm-project/semantic-router/blob/main/config/recipes | CODE |
| MEDIUM | …log/2026-06-18-agentic-intelligent-routing-amd-rocm.md | 50 | | Inferoa | [github.com/agentic-in/inferoa](https://github.com/agentic-in/inferoa) | Optional agent client with native v | CODE |
| MEDIUM | …log/2026-06-18-agentic-intelligent-routing-amd-rocm.md | 396 | [Inferoa](https://github.com/agentic-in/inferoa) is an inference-native agent | CODE |
| MEDIUM | …log/2026-06-18-agentic-intelligent-routing-amd-rocm.md | 402 | [inferoa.agentic-in.ai](https://inferoa.agentic-in.ai/docs/intro). | CODE |
| MEDIUM | …bsite/blog/2026-06-02-session-aware-agentic-routing.md | 10 | source_url: "https://github.com/vllm-project/vllm-project.github.io/blob/main/_posts/2026-06-02-session-aware-agentic-ro | CODE |
| MEDIUM | website/blog/2025-12-14-halugate.md | 223 | ### The `hallucination` Plugin | COMMENT |
| MEDIUM | website/blog/2025-12-14-halugate.md | 234 | # Action when hallucination detected | COMMENT |
| MEDIUM | website/blog/2025-12-14-halugate.md | 430 | # Decision with hallucination plugin | COMMENT |
| MEDIUM | website/blog/2026-03-10-v0.2-vllm-sr-athena-release.md | 153 | ### 4. Memory, RAG, and Response State Move Into the Core Runtime | COMMENT |
| MEDIUM | …/2026-10-06-vela-2-0-open-foundation-routing-models.md | 66 | The same question format works at every size. [The GPU example below](#try-it) combines request routing with PII and gro | CODE |
| MEDIUM | …lettucedetect-v2-generative-hallucination-detection.md | 83 | The `endpoint` backend (implemented by community contributor [@pranavthakur0-0](https://github.com/pranavthakur0-0) in [ | CODE |
| MEDIUM | website/blog/2026-03-12-v0-3-themis-roadmap.md | 64 | The first track is **NL-to-DSL authoring** in the dashboard, tracked in [#1511](https://github.com/vllm-project/semantic | CODE |
| MEDIUM | website/blog/2026-03-12-v0-3-themis-roadmap.md | 64 | The first track is **NL-to-DSL authoring** in the dashboard, tracked in [#1511](https://github.com/vllm-project/semantic | CODE |
| MEDIUM | website/blog/2026-03-12-v0-3-themis-roadmap.md | 98 | That broader observability push now also includes ClawOS-specific visibility into model and tool behavior through [#1523 | CODE |
| 125 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/agentic_routing_live_benchmark.py | 514 | CODE | |
| LOW | bench/agent_task_live_benchmark.py | 2062 | CODE | |
| LOW | bench/agent_task_live_benchmark.py | 2245 | CODE | |
| LOW | bench/agent_task_live_benchmark.py | 2366 | CODE | |
| LOW | bench/agentic_routing_experiment.py | 855 | CODE | |
| LOW | bench/openai_fault_proxy.py | 358 | CODE | |
| LOW | bench/openai_fault_proxy.py | 168 | CODE | |
| LOW | bench/agent_session_replay.py | 319 | CODE | |
| LOW | bench/router_reason_bench.py | 276 | CODE | |
| LOW | bench/hallucination/evaluate.py | 309 | CODE | |
| LOW | bench/redteam/scorers.py | 18 | CODE | |
| LOW | bench/grounded_fusion/evaluate.py | 221 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 205 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 313 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 467 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 721 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 806 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 867 | CODE | |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 1192 | CODE | |
| LOW | bench/reasoning/dataset_interface.py | 124 | CODE | |
| LOW | bench/reasoning/cli.py | 186 | CODE | |
| LOW | bench/reasoning/dataset_implementations/gpqa_dataset.py | 68 | CODE | |
| LOW | bench/reasoning/dataset_implementations/gpqa_dataset.py | 84 | CODE | |
| LOW | bench/looper_tts/config.py | 64 | CODE | |
| LOW | bench/looper_tts/test_evidence_integrity.py | 86 | CODE | |
| LOW | bench/looper_tts/test_evidence_integrity.py | 105 | CODE | |
| LOW | bench/router_flow/render_report.py | 101 | CODE | |
| LOW | …nch/router_flow/real_eval/collect_evalscope_results.py | 322 | CODE | |
| LOW | …nch/router_flow/real_eval/collect_evalscope_results.py | 353 | CODE | |
| LOW | bench/agent_crew/crew.py | 362 | CODE | |
| LOW | bench/agent_crew/check_provider.py | 223 | CODE | |
| LOW | bench/agent_crew/check_provider.py | 226 | CODE | |
| LOW | …rovider-mocker/tests/test_provider_image_generation.py | 39 | CODE | |
| LOW | …test/services/provider-mocker/provider_mocker/cache.py | 31 | CODE | |
| LOW | …test/services/provider-mocker/provider_mocker/cache.py | 160 | CODE | |
| LOW | …/services/provider-mocker/provider_mocker/chat_wire.py | 59 | CODE | |
| LOW | …/services/provider-mocker/provider_mocker/chat_wire.py | 76 | CODE | |
| LOW | …/services/provider-mocker/provider_mocker/chat_wire.py | 164 | CODE | |
| LOW | …est/services/provider-mocker/provider_mocker/looper.py | 53 | CODE | |
| LOW | …vices/provider-mocker/provider_mocker/messages_wire.py | 18 | CODE | |
| LOW | …vices/provider-mocker/provider_mocker/messages_wire.py | 36 | CODE | |
| LOW | tools/test/services/tiny-model/run.py | 35 | CODE | |
| LOW | tools/test/services/tiny-model/run.py | 123 | CODE | |
| LOW | tools/test/services/tiny-model/run.py | 138 | CODE | |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 583 | CODE | |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 661 | CODE | |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 681 | CODE | |
| LOW | …est/services/mcp-classifier-server/server_embedding.py | 580 | CODE | |
| LOW | …est/services/mcp-classifier-server/server_embedding.py | 604 | CODE | |
| LOW | …/test/services/mcp-classifier-server/server_keyword.py | 360 | CODE | |
| LOW | …/test/services/mcp-classifier-server/server_keyword.py | 374 | CODE | |
| LOW | tools/security/scan_malicious_code.py | 313 | CODE | |
| LOW | tools/security/scan_malicious_code.py | 403 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 628 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 718 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 978 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 1261 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 1395 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 1499 | CODE | |
| LOW | tools/security/ast_security_scanner.py | 1538 | CODE | |
| 416 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | netlify.toml | 1 | # Production stays on Netlify's Git integration. PR previews are requested with | COMMENT |
| LOW | .pre-commit-config.yaml | 201 | # hooks: | COMMENT |
| LOW | bench/benchmark_comparison.sh | 1 | #!/bin/bash | COMMENT |
| LOW | bench/grounded_fusion/run_ab.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | bench/grounded_fusion/run_sweep.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | bench/grounded_fusion/fusioneval/main.go | 1 | // Command fusioneval is the paired, multi-arm evaluation driver for | COMMENT |
| LOW | bench/agent_crew/configs/crew.yaml | 41 | backend_refs: | COMMENT |
| LOW | tools/test/smoke/test-authz-rbac.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/test/services/provider-mocker/requirements.txt | 1 | # This file was autogenerated by uv via the following command: | COMMENT |
| LOW | tools/test/services/provider-mocker/requirements.txt | 21 | starlette==0.38.6 | COMMENT |
| LOW | …ols/test/services/provider-mocker/requirements-dev.txt | 1 | # This file was autogenerated by uv via the following command: | COMMENT |
| LOW | …ols/test/services/provider-mocker/requirements-dev.txt | 21 | httpcore==1.0.9 | COMMENT |
| LOW | …ols/test/services/provider-mocker/requirements-dev.txt | 41 | pygments==2.21.0 | COMMENT |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 61 | COMMENT | |
| LOW | tools/ci/retry.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/ci/retry.sh | 21 | # The command runs as the condition of an `if`, where bash suspends errexit. A | COMMENT |
| LOW | config/config.yaml | 2461 | database: vsr | COMMENT |
| LOW | config/config.yaml | 2641 | # hallucination_detector, feedback_detector). | COMMENT |
| LOW | config/config.yaml | 2861 | positive_labels: [jailbreak] | COMMENT |
| LOW | config/config.yaml | 2901 | # whole text up to its scan budget, so it sets no window; a token | COMMENT |
| LOW | config/fragments/plugin/shadow-dispatch/sampled.yaml | 21 | capture_response_body: false | COMMENT |
| LOW | config/fragments/signal/embedding/image-routing.yaml | 1 | # Opt-in image-modality embedding pack. Inline under | COMMENT |
| LOW | config/runtime/vector-store/valkey.yaml | 1 | # Valkey Vector Store — Example Configuration | COMMENT |
| LOW | config/runtime/vector-store/valkey.yaml | 41 | metric_type: COSINE | COMMENT |
| LOW | config/runtime/vector-store/valkey.yaml | 61 | # valkey: | COMMENT |
| LOW | config/runtime/memory/valkey.yaml | 1 | # Valkey Memory Store Configuration for Agentic Memory | COMMENT |
| LOW | config/runtime/memory/valkey.yaml | 41 | # backend: valkey # <-- select Valkey backend | COMMENT |
| LOW | config/runtime/memory/valkey.yaml | 61 | # hybrid_mode: weighted | COMMENT |
| LOW | config/runtime/memory/valkey.yaml | 81 | # # Tune index_m and index_ef_construction with representative data; higher | COMMENT |
| LOW | config/runtime/response-api/redis-cluster.yaml | 41 | COMMENT | |
| LOW | config/runtime/response-api/redis-cluster.yaml | 61 | # - Each master should have at least 1 replica for high availability | COMMENT |
| LOW | config/runtime/response-api/redis-simple.yaml | 21 | # Timeouts (in seconds) | COMMENT |
| LOW | config/runtime/response-api/redis-simple.yaml | 41 | # response_api: | COMMENT |
| LOW | config/runtime/response-api/redis-production.yaml | 41 | # tls_enabled: true | COMMENT |
| LOW | config/runtime/response-api/redis-production.yaml | 61 | COMMENT | |
| LOW | config/runtime/response-cache/milvus.yaml | 1 | # Milvus Vector Database Configuration for Semantic Cache | COMMENT |
| LOW | config/runtime/response-cache/milvus.yaml | 81 | level: "info" | COMMENT |
| LOW | config/runtime/response-cache/milvus.yaml | 101 | # development: | COMMENT |
| LOW | config/runtime/response-cache/milvus.yaml | 121 | # port: 19530 | COMMENT |
| LOW | config/runtime/response-cache/valkey.yaml | 1 | # Valkey Vector Database Configuration for Semantic Cache | COMMENT |
| LOW | config/runtime/response-cache/qdrant.yaml | 1 | # Qdrant Vector Search Engine Configuration for Semantic Cache | COMMENT |
| LOW | config/runtime/response-cache/redis.yaml | 1 | # Redis Vector Database Configuration for Semantic Cache | COMMENT |
| LOW | config/runtime/response-cache/redis.yaml | 81 | COMMENT | |
| LOW | config/runtime/response-cache/redis.yaml | 101 | # tls: | COMMENT |
| LOW | config/runtime/response-cache/redis.yaml | 121 | # * L2: Euclidean distance, good for non-normalized vectors | COMMENT |
| LOW | deploy/openshift/demo/curl-examples.sh | 1 | #!/bin/bash | COMMENT |
| LOW | deploy/openshift/demo/live-semantic-router-logs.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …s/dynamo/dynamo-resources/dynamo-graph-deployment.yaml | 1 | --- | COMMENT |
| LOW | deploy/kubernetes/dynamo/helm-chart/values.yaml | 1 | # Dynamo vLLM Helm Chart Configuration | COMMENT |
| LOW | deploy/kubernetes/dynamo/helm-chart/values.yaml | 21 | huggingface: | COMMENT |
| LOW | …etes/dynamo/helm-chart/examples/values-multi-node.yaml | 1 | # Example: Multi-Node Deployment with Node Affinity | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 1 | # Default values for semantic-router. | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 21 | mode: standalone | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 101 | # Metrics service | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 141 | requests: | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 181 | inflightRequests: 50 | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 201 | # Example: | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 261 | size: 10Gi | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 481 | # ============================================================================ | COMMENT |
| LOW | deploy/helm/semantic-router/values.yaml | 501 | # priority: 100 | COMMENT |
| 387 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/agentic_routing_live_benchmark.py | 248 | except Exception as exc: # pragma: no cover - network errors vary by platform | CODE |
| LOW | bench/agentic_routing_live_benchmark.py | 636 | except Exception as exc: # pragma: no cover - network errors vary by platform | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2146 | except Exception as exc: # pragma: no cover - network errors vary by platform | CODE |
| LOW | bench/agent_task_live_benchmark.py | 2762 | except Exception as exc: # pragma: no cover - network errors vary by platform | CODE |
| LOW | bench/openai_fault_proxy.py | 204 | except Exception as exc: # pragma: no cover - network errors vary | CODE |
| LOW | bench/benchmark_comparison.sh | 168 | except Exception as e: | CODE |
| LOW | bench/benchmark_comparison.sh | 193 | except Exception as e: | CODE |
| LOW | bench/plot_comprehensive_results.py | 61 | except Exception as e: | CODE |
| LOW | bench/comprehensive_bench.sh | 299 | except Exception as e: | CODE |
| MEDIUM | bench/comprehensive_bench.sh | 300 | print(f'Error processing $target_file: {e}', file=sys.stderr) | CODE |
| LOW | bench/router_reason_bench.py | 155 | except Exception as e: | CODE |
| MEDIUM | bench/router_reason_bench.py | 156 | print(f"Error communicating with endpoint to list models: {e}") | CODE |
| LOW | bench/router_reason_bench.py | 310 | except Exception: | CODE |
| LOW | bench/router_reason_bench.py | 344 | except Exception as e: | CODE |
| LOW | bench/router_reason_bench.py | 685 | except Exception: | CODE |
| LOW | bench/router_reason_bench.py | 1005 | except Exception as e: | CODE |
| LOW | bench/router_reason_bench.py | 1093 | except Exception as e: | CODE |
| LOW | bench/cache_token_probe.py | 166 | except Exception as exc: # pragma: no cover - network errors vary by platform | CODE |
| LOW | bench/session_routing_branch_image_probe.py | 108 | except Exception as exc: # pragma: no cover - platform network errors vary | CODE |
| LOW | bench/hallucination/datasets.py | 67 | except Exception as e: | CODE |
| MEDIUM | bench/hallucination/datasets.py | 68 | print(f"Error loading HaluEval: {e}") | CODE |
| LOW | bench/hallucination/datasets.py | 115 | except Exception as e: | CODE |
| LOW | bench/hallucination/evaluate.py | 238 | except Exception as e: | CODE |
| LOW | bench/hallucination/evaluate.py | 629 | except Exception as e: | CODE |
| LOW | bench/hallucination/evaluate_detectors.py | 110 | except Exception as e: | CODE |
| LOW | bench/grounded_fusion/ollama_proxy.py | 94 | except Exception as e: | CODE |
| MEDIUM⚡ | bench/reasoning/router_reason_bench_multi_dataset.py | 309 | print(f"Error communicating with endpoint to list models: {e}") | CODE |
| MEDIUM | bench/reasoning/router_reason_bench_multi_dataset.py | 1230 | print(f"Error loading dataset '{args.dataset}': {e}") | CODE |
| LOW⚡ | bench/reasoning/router_reason_bench_multi_dataset.py | 308 | except Exception as e: | CODE |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 348 | except Exception: | CODE |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 646 | except Exception as e: | CODE |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 1137 | except Exception as e: | CODE |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 1229 | except Exception as e: | CODE |
| LOW | bench/reasoning/reasoning_mode_eval.py | 213 | except Exception as exc: | CODE |
| MEDIUM | bench/reasoning/reasoning_mode_eval.py | 214 | print(f"Error fetching models: {exc}") | CODE |
| LOW | bench/reasoning/reasoning_mode_eval.py | 624 | except Exception as exc: | CODE |
| LOW | bench/reasoning/dataset_factory.py | 144 | except Exception as e: | CODE |
| MEDIUM | bench/reasoning/cli.py | 321 | print(f"Error importing dataset factory: {e}") | CODE |
| LOW | bench/reasoning/dataset_implementations/gpqa_dataset.py | 57 | except Exception as e: | CODE |
| LOW | …oning/dataset_implementations/commonsenseqa_dataset.py | 53 | except Exception as e: | CODE |
| LOW | …easoning/dataset_implementations/truthfulqa_dataset.py | 47 | except Exception as e: | CODE |
| LOW | bench/reasoning/dataset_implementations/math_dataset.py | 46 | except Exception: | CODE |
| LOW | bench/reasoning/dataset_implementations/math_dataset.py | 49 | except Exception: | CODE |
| LOW | …reasoning/dataset_implementations/hellaswag_dataset.py | 53 | except Exception as e: | CODE |
| LOW | bench/router_flow/flow_eval.py | 268 | except Exception as exc: | CODE |
| LOW | bench/router_flow/real_eval/run_evalscope_suite.py | 254 | except Exception: | CODE |
| LOW | bench/router_flow/real_eval/test_run_evalscope_suite.py | 736 | except Exception: | STRING |
| LOW | bench/agent_crew/crew.py | 243 | except Exception as exc: # every failure is recorded, not raised | CODE |
| LOW | bench/agent_crew/crew.py | 355 | except Exception as exc: | CODE |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 292 | except Exception: | CODE |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 352 | except Exception as e: | CODE |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 599 | except Exception as e: | CODE |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 801 | except Exception as e: | CODE |
| LOW⚡ | …est/services/mcp-classifier-server/server_embedding.py | 248 | except Exception as e: | CODE |
| LOW | …est/services/mcp-classifier-server/server_embedding.py | 530 | except Exception as e: | CODE |
| LOW | …est/services/mcp-classifier-server/server_embedding.py | 724 | except Exception as e: | CODE |
| LOW | …/test/services/mcp-classifier-server/server_keyword.py | 315 | except Exception as e: | CODE |
| LOW | …/test/services/mcp-classifier-server/server_keyword.py | 481 | except Exception as e: | CODE |
| MEDIUM | tools/security/scan_malicious_code.py | 252 | print(f"Error: cannot load {SIGNATURES_CONFIG}: {exc}", file=sys.stderr) | CODE |
| MEDIUM | tools/security/scan_malicious_code.py | 549 | print(f"Error: {root} is not a directory", file=sys.stderr) | CODE |
| 274 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | bench/test_openai_fault_proxy.py | 65 | b'data: {"choices":[{"delta":{"content":"one"},"finish_reason":null}]}\n\n', | CODE |
| HIGH | bench/test_openai_fault_proxy.py | 66 | b'data: {"choices":[{"delta":{"content":"two"},"finish_reason":null}]}\n\n', | CODE |
| HIGH⚡ | bench/test_openai_fault_proxy.py | 333 | b'data: {"choices":[{"delta":{"content":"one"},"finish_reason":null}]}', | CODE |
| HIGH⚡ | bench/test_openai_fault_proxy.py | 334 | b'data: {"choices":[{"delta":{"content":"two"},"finish_reason":null}]}', | CODE |
| HIGH | bench/router_flow/real_eval/test_run_amd_eval_matrix.py | 121 | assert "docker rm -f vllm-sr-router-container >/dev/null 2>&1 || true" in script | CODE |
| HIGH⚡ | bench/router_flow/real_eval/test_run_amd_eval_matrix.py | 151 | assert "curl -fsS http://127.0.0.1:8899/v1/models 2>/dev/null || true" in script | CODE |
| HIGH | bench/router_flow/real_eval/run_amd_eval_matrix.py | 519 | " docker rm -f vllm-sr-router-container >/dev/null 2>&1 || true", | CODE |
| HIGH | bench/router_flow/real_eval/run_amd_eval_matrix.py | 540 | " models_json=$(curl -fsS http://127.0.0.1:8899/v1/models 2>/dev/null || true)", | CODE |
| HIGH | bench/router_flow/real_eval/run_amd_eval_matrix.py | 541 | f' if [ -n "$models_json" ] && printf \'%s\\n\' "$models_json" | grep -F {quoted_model} >/dev/null; then', | CODE |
| HIGH⚡ | tools/ci/tests/test_performance_workflow.py | 134 | '{"results": null, "has_regressions": false}', | CODE |
| HIGH⚡ | tools/ci/tests/test_netlify_preview_workflow.py | 59 | "&& github.event.issue.number || github.run_id }}", | CODE |
| HIGH | tools/ci/tests/test_python_package_publication.py | 202 | install["if"], "inputs.prebuilt-dist || inputs.channel != 'dev'" | CODE |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 89 | RETRY_CLEANUP=cleanup retry_run 3 0 always_fails || true | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 104 | RETRY_CLEANUP=bad_cleanup retry_run 3 0 always_fails || true | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 117 | retry_run 2 1 always_fails || true | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 130 | false && echo "the rest must not run" | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 132 | retry_run 2 0 install || true | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 175 | retry_run 2 0 tracks || true | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 188 | retry_run 0 5 tracks || echo "zero=$?" | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 189 | retry_run 2 -1 tracks || echo "negative=$?" | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 190 | retry_run 1 x tracks || echo "nonnumeric=$?" | STRING |
| HIGH⚡ | tools/ci/tests/test_retry_sh.py | 191 | retry_run 1 5 || echo "missing=$?" | STRING |
| HIGH | tools/ci/tests/test_retry_sh.py | 71 | retry_run 3 0 always_fails || echo "status=$?" | STRING |
| HIGH⚡ | …mg/blog/system-one-auto/source/generate_blog_assets.py | 344 | if (a.x < 0 || a.y < 0 || a.right > bounds.width || a.bottom > bounds.height) | CODE |
| HIGH⚡ | …mg/blog/system-one-auto/source/generate_blog_assets.py | 345 | outside.push(a.text); | CODE |
| HIGH⚡ | …mg/blog/system-one-auto/source/generate_blog_assets.py | 348 | if (a.x < x || a.y < y || a.right > x+w || a.bottom > y+h) | CODE |
| HIGH⚡ | …mg/blog/system-one-auto/source/generate_blog_assets.py | 349 | containers.push(a.text); | CODE |
| HIGH⚡ | …mg/blog/system-one-auto/source/generate_blog_assets.py | 354 | overlaps.push([a.text,b.text]); | CODE |
| HIGH | …/testing/vllm-sr-cli/test_integration_recipe_bearer.py | 367 | 'read -r credential; grep -rlF --exclude-dir=management-credential -- "$credential" /app/.vllm-sr /app/d | CODE |
| HIGH⚡ | e2e/testing/hallucination-demo/web_client.py | 311 | const factCheckNeeded = data.headers && data.headers['x-vsr-fact-check-needed'] === 'true'; | CODE |
| HIGH⚡ | e2e/testing/hallucination-demo/web_client.py | 315 | const unverifiedResponse = data.headers && data.headers['x-vsr-unverified-factual-response'] === 'true'; | CODE |
| HIGH⚡ | e2e/testing/hallucination-demo/web_client.py | 316 | const hallucinationDetected = data.headers && data.headers['x-vsr-hallucination-detected'] === 'true'; | CODE |
| HIGH | e2e/testing/hallucination-demo/web_client.py | 215 | if (typeEffect && role === 'assistant') { | CODE |
| HIGH | e2e/testing/hallucination-demo/web_client.py | 239 | if (detail && detailEl) detailEl.textContent = detail; | CODE |
| HIGH | e2e/testing/hallucination-demo/web_client.py | 353 | addMessage(data.error ? 'error' : 'assistant', data.response || data.error, true); | CODE |
| HIGH | …del_classifier/safety_classifier/tests/test_release.py | 70 | '{"source_commit":null,"global_train_batch_size":64,' | CODE |
| HIGH | …training/model_classifier/sequence_repair/retention.py | 21 | """Return detached T² KL(teacher || student), summed over a logical batch.""" | STRING |
| HIGH | src/training/model_eval/jailbreak_guard_eval.py | 327 | """A slice can leave a number undefined, and that reads better than a crash.""" | STRING |
| HIGH | src/training/kv_mapper/distill.py | 148 | """Mean KL(target's own || target on the mapped cache) over the continuation.""" | STRING |
| HIGH | src/model-runtime/tools/embed_legacy.py | 118 | GO_TEMPLATE = r"""//go:build !windows && cgo | CODE |
| HIGH⚡ | src/model-runtime/tools/legacy_parity.py | 202 | GO_TEMPLATE = r"""//go:build !windows && cgo | CODE |
| HIGH | src/model-runtime/tools/legacy_parity.py | 286 | if callErr == nil || errors.Is(callErr, tasks.ErrTokenSpansTruncated) { | CODE |
| HIGH | src/model-runtime/tests/test_renderer.py | 24 | '\n<option>\n{"description":null,"key":"x"}\n</option>', | CODE |
| HIGH | src/model-runtime/tests/test_decision1_runtimes.py | 427 | '\n<option>\n{"description":null,"key":"other"}\n</option>' | CODE |
| HIGH | src/model-runtime/vllm_srun/systemone.py | 64 | """Text, an object or an array of JSON values (Choice descriptions may be null).""" | STRING |
| HIGH | src/model-runtime/vllm_srun/systemone.py | 107 | (descriptions may be null), Noul the given subset of ``false`` / ``true`` | STRING |
| HIGH | …odel-runtime/vllm_srun/families/decision1/questions.py | 43 | """A runtime's Noul criteria when a request leaves them out (or, ``null_is_default``, sends null).""" | STRING |
| HIGH | src/vllm-sr/tests/test_release_script.py | 139 | assert undo.startswith("git tag -d v0.5.0 && git reset --hard ") | STRING |
| HIGH⚡ | src/vllm-sr/tests/test_install_script_surface.py | 114 | "ensure_python_venv python3 && describe_python_dependency_plan python3", | CODE |
| HIGH | src/vllm-sr/tests/test_dashboard_dockerfile_surface.py | 495 | "RUN cd /tmp && gosu nonroot python3 -m cli.model_catalog_export >/dev/null" | CODE |
| HIGH⚡ | src/vllm-sr/cli/container_log_spool.py | 70 | if [ -n "$relay_pid" ]; then kill "$relay_pid" 2>/dev/null || true; fi | CODE |
| HIGH⚡ | src/vllm-sr/cli/container_log_spool.py | 71 | if [ -n "$child_pid" ]; then kill "$child_pid" 2>/dev/null || true; fi | CODE |
| HIGH⚡ | src/vllm-sr/cli/container_log_spool.py | 75 | if [ -n "$child_pid" ]; then kill -TERM "$child_pid" 2>/dev/null || true; fi | CODE |
| HIGH | src/vllm-sr/cli/container_log_spool.py | 97 | case "$(LC_ALL=C awk -W version </dev/null 2>/dev/null)" in | CODE |
| HIGH | src/vllm-sr/cli/goyaml_scalars.py | 25 | # text they are re-emitted as. None marks null, which the typed decoder turns | COMMENT |
| HIGH | src/vllm-sr/cli/goyaml_scalars.py | 65 | ``None`` means yaml.v2 resolved the scalar to null, which the typed | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 29 | # Step 1: Install Node Feature Discovery (NFD) Operator | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 81 | # Step 2: Create NFD Instance | COMMENT |
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 122 | # Step 3: Install NVIDIA GPU Operator | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 175 | # Step 4: Create ClusterPolicy | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 235 | # Step 5: Verify GPU Resources | COMMENT |
| LOW⚡ | dashboard/backend/setupmode/resolver_test.go | 590 | // Step 1: config off, flag on -> conflict. First WARNING. | COMMENT |
| LOW⚡ | dashboard/backend/setupmode/resolver_test.go | 598 | // Step 2: config on, flag on. They agree, so no new WARNING. | COMMENT |
| LOW⚡ | dashboard/backend/setupmode/resolver_test.go | 608 | // Step 3: back to step 1's conflicting shape. Step 2 changed the last | COMMENT |
| LOW | dashboard/backend/handlers/deploy.go | 259 | // Step 2: Deep merge the routing fragment into the deploy base. | COMMENT |
| LOW | dashboard/backend/handlers/deploy.go | 289 | // Step 3: Create backup of current config | COMMENT |
| LOW⚡ | dashboard/backend/handlers/deploy.go | 302 | // Step 4: Archive DSL source (for audit trail) | COMMENT |
| LOW⚡ | dashboard/backend/handlers/deploy.go | 305 | // Step 5: Atomic write to config.yaml | COMMENT |
| LOW⚡ | dashboard/backend/handlers/deploy.go | 319 | // Step 6: Propagate the new config to the managed runtime before returning. | COMMENT |
| LOW⚡ | dashboard/backend/handlers/deploy.go | 329 | // Step 7: Clean up old backups (keep only maxBackups most recent) | COMMENT |
| LOW⚡ | e2e/testing/vllm-sr-cli/test_integration.py | 516 | # Step 1: Create a lean active config | COMMENT |
| LOW⚡ | e2e/testing/vllm-sr-cli/test_integration.py | 519 | # Step 2: Try to serve with fake image and never policy | COMMENT |
| LOW | e2e/testing/memory_tests/test_storage.py | 108 | # Step 2: Send follow-up (also stored as a per-turn chunk) | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_storage.py | 120 | # Step 3: Wait for storage to complete | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_storage.py | 124 | # Step 4: Query for the fact in NEW SESSION (no previous_response_id) | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_per_decision.py | 33 | # Step 1: Store fact via default_route. | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_per_decision.py | 43 | # Step 2: Wait for storage and verify prerequisite | COMMENT |
| LOW | e2e/testing/memory_tests/test_per_decision.py | 58 | # Step 3: Query via no_memory_route (NOMEM_MARKER triggers keyword match) | COMMENT |
| LOW | e2e/testing/memory_tests/test_per_decision.py | 77 | # Step 4: Control — same query via default_route (no marker) | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_per_decision.py | 121 | # Step 1: Store fact via default_route | COMMENT |
| LOW⚡ | e2e/testing/memory_tests/test_per_decision.py | 129 | # Step 2: Wait for storage and verify prerequisite | COMMENT |
| LOW | e2e/testing/memory_tests/test_per_decision.py | 144 | # Step 3: Query via custom_threshold_route (threshold 0.99) | COMMENT |
| LOW | e2e/testing/memory_tests/test_per_decision.py | 170 | # Step 4: Control — same query via default_route (threshold 0.45) | COMMENT |
| LOW⚡ | e2e/testing/hallucination-demo/web_client.py | 307 | // Step 1: Question sent | COMMENT |
| LOW⚡ | e2e/testing/hallucination-demo/web_client.py | 310 | // Step 2: Router Signals - Need Fact Check | COMMENT |
| LOW | e2e/testing/hallucination-demo/web_client.py | 329 | // Step 5: Router Decisions - Hallucination Detection result | COMMENT |
| LOW | e2e/testing/hallucination-demo/run_demo.sh | 69 | # Step 1: Start Provider mocker with tool calling | COMMENT |
| LOW | e2e/testing/hallucination-demo/run_demo.sh | 82 | # Step 2: Start Mock Web Search | COMMENT |
| LOW | e2e/testing/hallucination-demo/run_demo.sh | 95 | # Step 3: Start Semantic Router (gRPC ExtProc on port 50051) | COMMENT |
| LOW | e2e/testing/hallucination-demo/run_demo.sh | 117 | # Step 4: Start Envoy proxy (HTTP to gRPC) | COMMENT |
| LOW | e2e/testing/hallucination-demo/run_demo.sh | 132 | # Step 5: Run Chat Client | COMMENT |
| LOW⚡ | e2e/profiles/multimodal-routing/profile.go | 63 | // Step 3: Deploy Envoy Gateway | COMMENT |
| LOW⚡ | e2e/profiles/multimodal-routing/profile.go | 69 | // Step 4: Deploy Envoy AI Gateway | COMMENT |
| LOW⚡ | e2e/profiles/multimodal-routing/profile.go | 75 | // Step 5: Deploy Demo LLM and Gateway API Resources | COMMENT |
| LOW⚡ | e2e/profiles/multimodal-routing/profile.go | 81 | // Step 6: Verify all components are ready | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 106 | // Step 1: Train ML models (or verify they exist) | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 112 | // Step 2: Deploy Semantic Router with ML selection | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 118 | // Step 3: Deploy Envoy Gateway | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 124 | // Step 4: Deploy Envoy AI Gateway | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 130 | // Step 5: Deploy Gateway API Resources | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 136 | // Step 6: Deploy Mock LLM (to receive routed requests) | COMMENT |
| LOW⚡ | e2e/profiles/ml-model-selection/profile.go | 142 | // Step 7: Verify deployment | COMMENT |
| LOW | e2e/profiles/ml-model-selection/profile.go | 371 | // Step 1: Copy models to host directory for Linux CI (where hostPath works) | COMMENT |
| LOW | e2e/profiles/ml-model-selection/profile.go | 393 | // Step 2: Also copy models directly into Kind containers | COMMENT |
| LOW⚡ | e2e/profiles/aibrix/profile.go | 100 | // Step 1: Deploy Semantic Router | COMMENT |
| LOW⚡ | e2e/profiles/aibrix/profile.go | 107 | // Step 2: Deploy AIBrix Dependencies | COMMENT |
| LOW⚡ | e2e/profiles/aibrix/profile.go | 115 | // Step 3: Deploy AIBrix Core | COMMENT |
| LOW⚡ | e2e/profiles/aibrix/profile.go | 123 | // Step 4: Deploy Demo LLM and Gateway API Resources | COMMENT |
| LOW⚡ | e2e/profiles/aibrix/profile.go | 131 | // Step 5: Verify all components are ready | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 48 | // Step 1: Deploy Nvidia Dynamo components (includes workers) | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 54 | // Step 2: Deploy Envoy Gateway (must be before Semantic Router to install Gateway API CRDs) | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 60 | // Step 3: Deploy Semantic Router with Dynamo integration | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 66 | // Step 4: Configure Gateway API routing | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 72 | // Step 5: Verify all components are ready | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 172 | // Step 3: List what was actually deployed (for debugging) | COMMENT |
| LOW⚡ | e2e/profiles/dynamo/profile.go | 180 | // Step 3: Wait for platform components to be ready | COMMENT |
| 71 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | bench/reasoning/router_reason_bench_multi_dataset.py | 575 | except (ValueError, AttributeError): | CODE |
| HIGH | bench/agent_crew/fixture/pr/billing.py | 15 | except: | CODE |
| HIGH | tools/test/services/tiny-model/run.py | 132 | except (urllib.error.URLError, TimeoutError): | CODE |
| HIGH | tools/security/scan_malicious_code.py | 308 | except (OSError, PermissionError): | CODE |
| HIGH | tools/security/scan_malicious_code.py | 502 | except (OSError, PermissionError): | CODE |
| HIGH | tools/security/ast_security_scanner.py | 66 | except (ImportError, AttributeError, Exception): | CODE |
| HIGH | tools/security/ast_security_scanner.py | 639 | except (OSError, PermissionError): | CODE |
| HIGH | tools/security/ast_security_scanner.py | 1969 | except (OSError, PermissionError): | CODE |
| HIGH | tools/security/ast_security_scanner.py | 1983 | except (OSError, PermissionError): | CODE |
| HIGH | tools/ci/image_artifacts.py | 343 | except mocker.PublicationUnavailableError: | CODE |
| HIGH | dashboard/backend/entrypoint_permissions.py | 70 | except FileNotFoundError: | CODE |
| HIGH | e2e/testing/09-openai-api-validation-test.py | 336 | except Exception: | CODE |
| HIGH | e2e/testing/09-openai-api-validation-test.py | 399 | except Exception: | CODE |
| HIGH | e2e/testing/vllm-sr-cli/serve_session.py | 116 | except (urllib_error.URLError, ConnectionError, TimeoutError): | CODE |
| HIGH | e2e/testing/vllm-sr-cli/runtime_http.py | 152 | except (urllib_error.URLError, ConnectionError): | CODE |
| HIGH | …/testing/vllm-sr-cli/test_integration_recipe_bearer.py | 139 | except (urllib_error.URLError, ConnectionError, TimeoutError): | CODE |
| HIGH | …testing/vllm-sr-cli/test_integration_plugin_example.py | 230 | except (URLError, ConnectionError): | CODE |
| HIGH | e2e/testing/vllm-sr-cli/test_integration_engine_mode.py | 50 | except OSError: | CODE |
| HIGH | e2e/testing/vllm-sr-cli/cli_test_base.py | 559 | except (urllib_error.URLError, urllib_error.HTTPError, OSError): | CODE |
| HIGH | …odel_classifier/verify_text_classification_datasets.py | 836 | except json.JSONDecodeError: | CODE |
| HIGH | …odel_classifier/verify_text_classification_datasets.py | 872 | except json.JSONDecodeError: | CODE |
| HIGH | …edback_classifier/data_processing/download_datasets.py | 715 | except (json.JSONDecodeError, AttributeError): | CODE |
| HIGH | …ck_classifier/data_processing/verify_dataset_labels.py | 110 | except json.JSONDecodeError: | CODE |
| HIGH | …ck_classifier/data_processing/verify_dataset_labels.py | 123 | except (json.JSONDecodeError, IndexError): | CODE |
| HIGH | …ck_classifier/data_processing/verify_dataset_labels.py | 167 | except json.JSONDecodeError: | CODE |
| HIGH | …ck_classifier/data_processing/verify_dataset_labels.py | 148 | except json.JSONDecodeError: | CODE |
| HIGH | src/training/model_eval/multi_benchmark_eval.py | 165 | except Exception: | CODE |
| HIGH | …aining/model_selection/ml_model_selection/benchmark.py | 620 | except Exception: | CODE |
| HIGH | …aining/model_selection/ml_model_selection/benchmark.py | 637 | except Exception: | CODE |
| HIGH | …aining/model_selection/ml_model_selection/benchmark.py | 768 | except Exception: | CODE |
| HIGH | …aining/model_selection/ml_model_selection/benchmark.py | 759 | except (AssertionError, TimeoutError): | CODE |
| HIGH | …aining/model_selection/ml_model_selection/benchmark.py | 761 | except Exception: | CODE |
| HIGH | src/model-runtime/tools/input_memory.py | 148 | except (OSError, urllib.error.URLError): | CODE |
| HIGH | src/model-runtime/tests/test_server.py | 71 | except OSError: | CODE |
| HIGH | src/model-runtime/tests/test_server.py | 186 | except OSError: | CODE |
| HIGH | src/model-runtime/vllm_srun/cli.py | 294 | except KeyError: | CODE |
| HIGH | src/model-runtime/vllm_srun/plugins/registry.py | 95 | except metadata.PackageNotFoundError: | CODE |
| HIGH | src/model-runtime/vllm_srun/accel/cpu.py | 47 | except (OSError, ValueError): | CODE |
| HIGH | src/model-runtime/vllm_srun/accel/cpu.py | 56 | except (OSError, ValueError): | CODE |
| HIGH | src/model-runtime/vllm_srun/accel/cpu.py | 113 | except (ValueError, OSError, AttributeError): | CODE |
| HIGH | src/vllm-sr/tests/test_sr_bench.py | 103 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | src/vllm-sr/tests/test_sr_bench.py | 593 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | src/vllm-sr/cli/instance_setup.py | 54 | except (OSError, ValueError, http.client.HTTPException): | CODE |
| HIGH | src/vllm-sr/cli/instance_runtime.py | 135 | except (OSError, ValueError, RuntimeError): | CODE |
| HIGH | src/vllm-sr/cli/container_runtime.py | 79 | except FileNotFoundError: | CODE |
| HIGH | src/vllm-sr/cli/execution_platform.py | 101 | except ValueError: | CODE |
| HIGH | src/vllm-sr/cli/container_services.py | 239 | except subprocess.CalledProcessError: | CODE |
| HIGH | src/vllm-sr/cli/recipe_activation_recovery.py | 482 | except FileNotFoundError: | CODE |
| HIGH | src/vllm-sr/cli/recipe_package.py | 615 | except ValueError: | CODE |
| HIGH | src/vllm-sr/cli/sr_bench/snapshots.py | 43 | except ValueError: | CODE |
| HIGH | src/vllm-sr/cli/sr_bench/dataset_io.py | 131 | except FileNotFoundError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | bench/reasoning/dataset_interface.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | bench/reasoning/dataset_implementations/drop_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …easoning/dataset_implementations/openbookqa_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …easoning/dataset_implementations/strategyqa_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | bench/reasoning/dataset_implementations/math_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …/reasoning/dataset_implementations/aqua_rat_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | bench/reasoning/dataset_implementations/sciq_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …nch/reasoning/dataset_implementations/gsm8k_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …/dataset_implementations/openmathrreasoning_dataset.py | 0 | get list of all available categories in the dataset. | STRING |
| HIGH | …st/services/mcp-classifier-server/server_generative.py | 0 | you are a history expert. when answering historical questions: - provide accurate dates, names, and historical context - | STRING |
| HIGH | …est/services/mcp-classifier-server/server_embedding.py | 0 | you are a history expert. when answering historical questions: - provide accurate dates, names, and historical context - | STRING |
| HIGH | …/test/services/mcp-classifier-server/server_keyword.py | 0 | you are a history expert. when answering historical questions: - provide accurate dates, names, and historical context - | STRING |
| HIGH | …st/services/mcp-classifier-server/server_generative.py | 0 | you are a mathematics expert. when answering math questions: - show step-by-step solutions with clear explanations - use | STRING |
| HIGH | …est/services/mcp-classifier-server/server_embedding.py | 0 | you are a mathematics expert. when answering math questions: - show step-by-step solutions with clear explanations - use | STRING |
| HIGH | …/test/services/mcp-classifier-server/server_keyword.py | 0 | you are a mathematics expert. when answering math questions: - show step-by-step solutions with clear explanations - use | STRING |
| HIGH | …st/services/mcp-classifier-server/server_generative.py | 0 | you are a knowledgeable assistant. when answering general questions: - provide balanced, well-rounded responses - draw f | STRING |
| HIGH | …est/services/mcp-classifier-server/server_embedding.py | 0 | you are a knowledgeable assistant. when answering general questions: - provide balanced, well-rounded responses - draw f | STRING |
| HIGH | …/test/services/mcp-classifier-server/server_keyword.py | 0 | you are a knowledgeable assistant. when answering general questions: - provide balanced, well-rounded responses - draw f | STRING |
| HIGH | e2e/testing/05-jailbreak-test.py | 0 | check if the services are running before running tests. | STRING |
| HIGH | e2e/testing/06-pii-detection-test.py | 0 | check if the services are running before running tests. | STRING |
| HIGH | e2e/testing/02-router-classification-test.py | 0 | check if the services are running before running tests. | STRING |
| HIGH | e2e/testing/04-cache-test.py | 0 | check if the services are running before running tests. | STRING |
| HIGH | …ck_fine_tuning_lora/fact_check_bert_finetuning_lora.py | 0 | create tokenizer with model-specific configuration. args: model_path: path to load tokenizer from base_model_name: optio | STRING |
| HIGH | …ng_classifier/modality_routing_bert_finetuning_lora.py | 0 | create tokenizer with model-specific configuration. args: model_path: path to load tokenizer from base_model_name: optio | STRING |
| HIGH | …ard_fine_tuning_lora/jailbreak_bert_finetuning_lora.py | 0 | create tokenizer with model-specific configuration. args: model_path: path to load tokenizer from base_model_name: optio | STRING |
| HIGH | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 0 | create tokenizer with model-specific configuration. args: model_path: path to load tokenizer from base_model_name: optio | STRING |
| HIGH | …er/classifier_model_fine_tuning_lora/ft_linear_lora.py | 0 | create tokenizer with model-specific configuration. args: model_path: path to load tokenizer from base_model_name: optio | STRING |
| HIGH | …g_classifier/exploration_lfm25_scx/try_scx_zeroshot.py | 0 | build the command-line parser. returns: the parser. | STRING |
| HIGH | …routing_classifier/exploration_lfm25_scx/eval_lfm25.py | 0 | build the command-line parser. returns: the parser. | STRING |
| HIGH | …y_routing_classifier/exploration_lfm25_scx/eval_scx.py | 0 | build the command-line parser. returns: the parser. | STRING |
| HIGH | …g_classifier/exploration_lfm25_scx/train_scx_router.py | 0 | build the command-line parser. returns: the parser. | STRING |
| HIGH | …lassifier/exploration_lfm25_scx/train_lfm25_encoder.py | 0 | build the command-line parser. returns: the parser. | STRING |
| HIGH | …ard_fine_tuning_lora/jailbreak_bert_finetuning_lora.py | 0 | merge lora adapter with base model to create a complete model for rust inference. this function is automatically called | STRING |
| HIGH | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 0 | merge lora adapter with base model to create a complete model for rust inference. this function is automatically called | STRING |
| HIGH | …er/classifier_model_fine_tuning_lora/ft_linear_lora.py | 0 | merge lora adapter with base model to create a complete model for rust inference. this function is automatically called | STRING |
| HIGH | …del_embeddings/multimodal/small/models/text_encoder.py | 0 | return encoder-layer states without the input embedding state. | STRING |
| HIGH | …el_embeddings/multimodal/small/models/image_encoder.py | 0 | return encoder-layer states without the input embedding state. | STRING |
| HIGH | …el_embeddings/multimodal/small/models/audio_encoder.py | 0 | return encoder-layer states without the input embedding state. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | bench/comprehensive_bench.sh | 352 | # Generate updated comprehensive plots for current dataset | COMMENT |
| MEDIUM | bench/comprehensive_bench.sh | 361 | # Function to generate comprehensive plot with all completed datasets (called after each dataset completes) | COMMENT |
| MEDIUM | bench/router_reason_bench.py | 277 | # Normalize non-string responses into a string to be robust to providers | COMMENT |
| MEDIUM | bench/grounded_fusion/make_configs.py | 139 | # purely on the sentinel the harness prepends to every prompt. | COMMENT |
| MEDIUM⚡ | bench/reasoning/router_reason_bench_multi_dataset.py | 315 | # Normalize non-string responses into a string to be robust to providers | COMMENT |
| MEDIUM | bench/reasoning/cli.py | 109 | """Register the 'comprehensive' command - run full research benchmark.""" | STRING |
| MEDIUM | bench/reasoning/cli.py | 348 | """Run comprehensive benchmark.""" | STRING |
| MEDIUM | bench/reasoning/reporting.py | 9 | """Generate a comprehensive markdown report.""" | STRING |
| MEDIUM | tools/linter/go/.golangci.yml | 20 | - testifylint # checks for best practices when using the testify testing framework | CODE |
| MEDIUM⚡ | tools/ci/ci_plan.py | 388 | # release can't run the current harness. Each is a main commit whose | COMMENT |
| MEDIUM⚡ | tools/ci/ci_plan.py | 389 | # Production Benchmarks job passed with the harness that cycle measures. | COMMENT |
| MEDIUM⚡ | tools/ci/ci_plan.py | 392 | # current harness cannot compile there. #3852 introduced the paired Vela | COMMENT |
| MEDIUM⚡ | tools/ci/tests/test_pr_change_classifier.py | 417 | # v0.4.0 predates the model runtime; #4707 runs the current harness. | COMMENT |
| MEDIUM | tools/ci/tests/test_e2e_batches.py | 30 | # without requiring a Kubernetes daemon for the deterministic harness tests. | COMMENT |
| MEDIUM | tools/agent/domains.yaml | 446 | # The release version contract reads these files. The harness tests check | COMMENT |
| MEDIUM⚡ | deploy/helm/validate-chart.sh | 430 | # Test 10: Check for common Helm best practices | COMMENT |
| MEDIUM | …ig/samples/vllm.ai_v1alpha1_semanticrouter_simple.yaml | 4 | # For a comprehensive example with all features, see vllm.ai_v1alpha1_semanticrouter_openshift.yaml | COMMENT |
| MEDIUM | website/package-lock.json | 20755 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | website/static/img/blog/vela-2-0/source/make_charts.py | 169 | # Section "Open extraction with the broad head": ACL-Verbatim word-F1, held out of training, one harness for all mod | COMMENT |
| MEDIUM | dashboard/frontend/src/utils/mlPipelineApi.ts | 97 | // on connect, so reconnection is seamless. | COMMENT |
| MEDIUM | e2e/testing/run_recipe_conformance.sh | 44 | # live output and generated config stay under ignored .agent-harness paths. | COMMENT |
| MEDIUM | e2e/testing/09-memory-features-test.py | 102 | # The shutdown phase ends the router process. The harness runs it last, | COMMENT |
| MEDIUM | e2e/profiles/response-jailbreak/values.yaml | 21 | # keyword signal, so the E2E exercises the same harness path a real | COMMENT |
| MEDIUM | perf/scripts/compare-model-baseline.sh | 2 | # Run the current benchmark harness against a real base revision. Both sides | COMMENT |
| MEDIUM | perf/scripts/compare-model-baseline.sh | 32 | # harness can measure both sides. Record the reset instead of a comparison, | COMMENT |
| MEDIUM | src/semantic-router/pkg/looper/confidence.go | 1007 | // Uses JSON marshaling for robust extraction across SDK versions | COMMENT |
| MEDIUM | src/semantic-router/pkg/selection/hybrid.go | 69 | // HybridSelector combines multiple selection methods for robust routing | COMMENT |
| MEDIUM | …lity_routing_classifier/evaluate_modality_candidate.py | 21 | - candidate vs published_baseline (secondary/reference; what #3856's harness | STRING |
| MEDIUM | …routing_classifier/modality_candidate_eval_report.json | 7265 | "same_run_p99_latency": "PENDING -- blocked on #3856 (same-run evaluation harness); not computed by this script.", | CODE |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 278 | # Use more robust tokenization that preserves character positions | COMMENT |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 321 | # Add comprehensive data validation and quality analysis | COMMENT |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 563 | # Use robust tokenization | COMMENT |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 1221 | # Training arguments optimized for LoRA token classification based on PEFT best practices | COMMENT |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 1128 | learning_rate: float = 3e-5, # Optimized for LoRA based on PEFT best practices | CODE |
| MEDIUM | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 351 | """Validate BIO label consistency and report comprehensive statistics.""" | STRING |
| MEDIUM | …edback_classifier/data_processing/download_datasets.py | 861 | # Extract label using robust extraction | COMMENT |
| MEDIUM | …_classifier/user_feedback_classifier/configs/config.py | 50 | max_seq_length: int = 1024 # Increased from 512 to leverage longer context | CODE |
| MEDIUM | …assifier_model_fine_tuning_lora/train_cpu_optimized.sh | 20 | LEARNING_RATE=3e-5 # Optimized learning rate based on PEFT best practices | CODE |
| MEDIUM | …er/classifier_model_fine_tuning_lora/ft_linear_lora.py | 625 | # Training arguments optimized for LoRA sequence classification based on PEFT best practices | COMMENT |
| MEDIUM | …ment/mmlu_pro_solver_lora/ft_qwen3_mmlu_solver_lora.py | 1042 | # Save comprehensive results | COMMENT |
| LOW | src/training/model_eval/signal_eval.py | 37 | # To add new datasets (e.g., multilingual), just add new entries here | COMMENT |
| MEDIUM | src/training/model_eval/mom_collection_eval.py | 379 | """Evaluate a single model with comprehensive error handling.""" | STRING |
| MEDIUM | …raining/model_selection/ml_model_selection/validate.go | 264 | // Uses huggingface-cli for robust downloads (handles auth, LFS, caching, parquet, etc.) | COMMENT |
| MEDIUM | src/vllm-sr/tests/test_sr_bench_experiment_admin.py | 51 | # An untrusted manifest field cannot elevate a writer's experiment access. | COMMENT |
| MEDIUM | src/vllm-sr/tests/test_sr_bench_large_datasets.py | 137 | # Basic-adapter planning needs no external harness or model calls. | COMMENT |
| MEDIUM | src/vllm-sr/tests/test_sr_bench_bridge.py | 180 | # A failed bridge refuses another harness call; it does not retry the | COMMENT |
| MEDIUM | src/vllm-sr/tests/install_runtime_harness.sh | 190 | # Source install.sh with its main entrypoint stripped so the harness can | COMMENT |
| MEDIUM | src/vllm-sr/tests/install_runtime_harness.sh | 195 | # install.sh sets `set -euo pipefail` at the top; neutralize for the harness | COMMENT |
| MEDIUM | src/vllm-sr/tests/install_runtime_harness.sh | 214 | # that one in a subshell so the harness survives to report the kept file. | COMMENT |
| MEDIUM | src/vllm-sr/cli/sr_bench/transport.py | 31 | # Shared internal transport/harness contract; preserving its exception identity. | COMMENT |
| MEDIUM | src/vllm-sr/cli/sr_bench/engine.py | 498 | # Fail closed: no new cases are dispatched after a transport/harness failure. | COMMENT |
| MEDIUM | src/vllm-sr/cli/sr_bench/harness_worker.py | 163 | from tau2.run import ( # noqa: PLC0415 - isolated optional harness environment | CODE |
| MEDIUM | src/vllm-sr/cli/sr_bench/harness_worker.py | 336 | from inspect_evals.scicode.prompt_templates import ( # noqa: PLC0415 - isolated optional harness environment | CODE |
| MEDIUM | src/vllm-sr/cli/sr_bench/harness_worker.py | 375 | from harbor.job import Job # noqa: PLC0415 - isolated optional harness environment | CODE |
| MEDIUM | src/vllm-sr/cli/sr_bench/harness_worker.py | 412 | from harbor.environments.docker.docker import ( # noqa: PLC0415 - isolated optional harness environment | CODE |
| MEDIUM | src/vllm-sr/cli/sr_bench/external.py | 156 | import tomli as tomllib # noqa: PLC0415 - Python 3.10 compatibility for optional harness | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/plot_comprehensive_results.py | 312 | # Check if we're dealing with a single dataset | COMMENT |
| LOW | bench/comprehensive_bench.sh | 434 | # Check if plots already exist | COMMENT |
| LOW | bench/hallucination/evaluate.py | 641 | # Print results | COMMENT |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 888 | # Check if dataset has actual CoT content by examining sample questions | COMMENT |
| LOW | tools/test/smoke/test-image-gen.sh | 53 | # Check if response contains image | COMMENT |
| LOW | tools/test/smoke/test-classification-api.sh | 62 | # Check if expected domain is in matched domains | COMMENT |
| LOW | tools/test/smoke/test-classification-api.sh | 364 | # Check if expected domain is in matched domains | COMMENT |
| LOW | tools/test/smoke/test-classification-api.sh | 629 | # Check if expected signal is in matched fact check signals | COMMENT |
| LOW | tools/test/smoke/test-classification-api.sh | 769 | # Check if expected signal is in matched user feedback signals | COMMENT |
| LOW | tools/test/smoke/milvus/test-milvus-deployment.sh | 103 | # Check if release exists | COMMENT |
| LOW | tools/test/smoke/milvus/test-milvus-deployment.sh | 256 | # Check if Prometheus Operator is installed | COMMENT |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 325 | # Check if it's a local path that exists | COMMENT |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 329 | # Check if it looks like a HuggingFace model ID (contains /) | COMMENT |
| LOW⚡ | …est/services/mcp-classifier-server/server_embedding.py | 254 | # Check if collection exists | COMMENT |
| LOW⚡ | …est/services/mcp-classifier-server/server_embedding.py | 258 | # Check if we need to rebuild (verify count matches CSV) | COMMENT |
| LOW | tools/ci/retry.sh | 30 | # Set RETRY_CLEANUP to the name of a function that runs before every retry, so a | COMMENT |
| LOW | tools/dev/local-up-router.sh | 228 | # Check if all processes are still running. Prints a warning once each time | COMMENT |
| LOW | tools/dev/kind/generate-kind-config.sh | 23 | # Check if template exists | COMMENT |
| LOW | tools/dev/kind/generate-kind-config.sh | 29 | # Check if models directory exists | COMMENT |
| LOW | deploy/kserve/deployment.yaml | 74 | # Check if model weights actually exist (not just the directory) | COMMENT |
| LOW | deploy/kserve/deploy.sh | 306 | # Check if logged in | COMMENT |
| LOW | deploy/kserve/deploy.sh | 323 | # Check if namespace exists | COMMENT |
| LOW | deploy/kserve/install-kserve.sh | 336 | # Check if both KServe CRDs are already installed | COMMENT |
| LOW | deploy/kserve/install-gpu-operator.sh | 14 | # Check if running on OpenShift | COMMENT |
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 32 | # Check if NFD operator is already installed | COMMENT |
| LOW⚡ | deploy/kserve/install-gpu-operator.sh | 126 | # Check if GPU operator is already installed | COMMENT |
| LOW | deploy/openshift/deployment.yaml | 189 | # Check if model already exists | COMMENT |
| LOW | deploy/openshift/deploy-to-openshift.sh | 108 | # Check if logged in to OpenShift | COMMENT |
| LOW | deploy/openshift/deploy-to-openshift.sh | 569 | # Check if dashboard imagestream exists | COMMENT |
| LOW | deploy/openshift/deploy-to-openshift.sh | 575 | # Check if dashboard buildconfig exists | COMMENT |
| LOW | deploy/openshift/cleanup-openshift.sh | 150 | # Check if oc is installed | COMMENT |
| LOW | deploy/openshift/demo/curl-examples.sh | 19 | # Check if logged into OpenShift | COMMENT |
| LOW | deploy/openshift/demo/live-classifier-logs.sh | 60 | # Increment counter | COMMENT |
| LOW | deploy/kubernetes/istio/deployment.yaml | 29 | # Check if all required models already exist in PVC; if yes, skip downloads entirely | COMMENT |
| LOW⚡ | deploy/helm/validate-chart.sh | 434 | # Check if labels helper exists | COMMENT |
| LOW⚡ | deploy/helm/validate-chart.sh | 442 | # Check if selector labels helper exists | COMMENT |
| LOW⚡ | deploy/helm/validate-chart.sh | 450 | # Check if NOTES.txt exists | COMMENT |
| LOW | e2e/testing/03-classification-api-test.py | 146 | # Check if classification is correct | COMMENT |
| LOW | e2e/testing/05-jailbreak-test.py | 222 | # Check if jailbreak was properly detected | COMMENT |
| LOW | e2e/testing/05-jailbreak-test.py | 418 | # Check if the request went through (indicating security bypass) | COMMENT |
| LOW | e2e/testing/05-jailbreak-test.py | 434 | # Check if response contains harmful instructions | COMMENT |
| LOW | e2e/testing/02-router-classification-test.py | 255 | # Check if classification and routing metrics exist | COMMENT |
| LOW | e2e/testing/06-pii-detection-test.py | 220 | # Check if PII was properly detected | COMMENT |
| LOW | e2e/testing/06-pii-detection-test.py | 409 | # Check if the request went through | COMMENT |
| LOW | e2e/testing/06-pii-detection-test.py | 425 | # Check if response potentially exposes PII patterns | COMMENT |
| LOW | e2e/testing/run_all_tests.py | 104 | # Check if services are running | COMMENT |
| LOW | e2e/testing/04-cache-test.py | 90 | # Check if cache is enabled in metrics | COMMENT |
| LOW | e2e/testing/04-cache-test.py | 177 | # Check if cache hits increased | COMMENT |
| LOW | e2e/testing/vllm-sr-cli/test_unit_serve.py | 250 | # Check if the default image exists | COMMENT |
| LOW | e2e/testing/vllm-sr-cli/test_unit_serve.py | 448 | # Check if models directory was created | COMMENT |
| LOW | e2e/testing/hallucination-demo/chat_client.py | 116 | # Check if we got tool_calls | COMMENT |
| LOW | e2e/scripts/generate_test_data.py | 253 | # Check if sample contains any of our required PII types | COMMENT |
| LOW | perf/scripts/run-cache-benchmark.sh | 62 | # Check if benchmark binary exists, build if not | COMMENT |
| LOW | perf/scripts/run-cache-benchmark.sh | 222 | # Check if Go is installed | COMMENT |
| LOW | perf/scripts/run-cache-benchmark.sh | 228 | # Check if CGO is available | COMMENT |
| LOW | …ck_fine_tuning_lora/fact_check_bert_finetuning_lora.py | 775 | # Check if it matches non-factual patterns | COMMENT |
| LOW | …ck_fine_tuning_lora/fact_check_bert_finetuning_lora.py | 1456 | # Check if this is a LoRA adapter or a merged model | COMMENT |
| LOW | …ng_classifier/modality_routing_bert_finetuning_lora.py | 2686 | # Check if this is a LoRA adapter or a merged model | COMMENT |
| LOW | …ard_fine_tuning_lora/jailbreak_bert_finetuning_lora.py | 712 | # Check if this is a LoRA adapter or a merged/complete model | COMMENT |
| LOW | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 299 | # Check if token overlaps with entity span | COMMENT |
| 29 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/hallucination/__init__.py | 10 | __all__ = [ | CODE |
| LOW | bench/redteam/__init__.py | 14 | __all__ = [ | CODE |
| LOW | bench/reasoning/__init__.py | 38 | __all__ = [ | CODE |
| LOW | bench/reasoning/dataset_implementations/__init__.py | 15 | __all__ = [ | CODE |
| LOW | …est/services/provider-mocker/provider_mocker/memory.py | 7 | logger = logging.getLogger(__name__) | CODE |
| LOW | …st/services/mcp-classifier-server/server_generative.py | 68 | logger = logging.getLogger(__name__) | CODE |
| LOW | …est/services/mcp-classifier-server/server_embedding.py | 68 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/test/services/mcp-classifier-server/server_keyword.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | tools/calibration/recipe/router_calibration_manifest.py | 33 | __all__ = [ | CODE |
| LOW | …/calibration/recipe/router_calibration_fixture_test.py | 153 | def _update_probe_digest(digest: Any, probe_id: str, payload: bytes) -> None: | CODE |
| LOW | tools/calibration/recipe/router_calibration_support.py | 54 | __all__ = [ | CODE |
| LOW⚡ | tools/calibration/tuning/engine_selection.py | 509 | def _update_mapping_outputs(m: dict, fix: Fix) -> None: | CODE |
| LOW | tools/calibration/tuning/engine_selection.py | 524 | def _update_score_weight(score: dict, signal_name: str, new_weight: float) -> None: | CODE |
| LOW | tools/calibration/tuning/__init__.py | 18 | __all__ = [ | CODE |
| LOW | tools/calibration/tuning/scenarios/__init__.py | 12 | __all__ = ["CalibrationScenario", "PrivacyScenario"] | CODE |
| LOW | tools/ci/community_lifecycle.py | 40 | __all__ = [ | CODE |
| LOW | e2e/testing/memory_tests/__init__.py | 26 | __all__ = [ | CODE |
| LOW | src/kv_connector/vllm_connector.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_classifier/common_lora_utils.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | …odel_classifier/verify_text_classification_datasets.py | 90 | logger = logging.getLogger(__name__) | CODE |
| LOW | …raining/model_classifier/safety_classifier/__init__.py | 36 | __all__ = [ | CODE |
| LOW | …classifier/exploration_lfm25_scx/exploration_common.py | 196 | __all__ = [ | CODE |
| LOW | …/prompt_guard_fine_tuning_lora/jailbreak_provenance.py | 336 | __all__ = [ | CODE |
| LOW | …/model_classifier/user_feedback_classifier/__init__.py | 7 | __all__ = ["FeedbackDetector", "FeedbackResult"] | CODE |
| LOW | …edback_classifier/data_processing/download_datasets.py | 47 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ck_classifier/data_processing/verify_dataset_labels.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …lassifier/user_feedback_classifier/configs/__init__.py | 15 | __all__ = [ | CODE |
| LOW | …model_experiment/multitask_wiki_classifier_training.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/multitask_bert_fine_tuning/multitask_bert_training.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_eval/cost_aware_calib.py | 92 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_eval/signal_predict.py | 109 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_eval/provenance/metrics.py | 17 | __all__ = [ | CODE |
| LOW | src/training/model_eval/provenance/__init__.py | 23 | __all__ = [ | CODE |
| LOW | src/training/model_eval/provenance/crossref.py | 22 | __all__ = [ | CODE |
| LOW | src/training/model_eval/provenance/emit.py | 25 | __all__ = [ | CODE |
| LOW | src/training/kv_mapper/__init__.py | 11 | __all__ = [ | CODE |
| LOW | …ing/model_embeddings/mmbert_32k/foundation_data_cli.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ing/model_embeddings/mmbert_32k/foundation_training.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | …training/model_embeddings/mmbert_32k/foundation_cli.py | 8 | logger = logging.getLogger(__name__) | CODE |
| LOW | …c/training/model_embeddings/mmbert_32k/reranker_cli.py | 8 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ining/model_embeddings/mmbert_32k/embedder_training.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_embeddings/mmbert_32k/reranker.py | 32 | __all__ = [ | CODE |
| LOW | …g/model_embeddings/mmbert_32k/foundation_data_local.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/training/model_embeddings/mmbert_32k/embedder_data.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | …training/model_embeddings/mmbert_32k/reranker_model.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_embeddings/mmbert_32k/foundation.py | 28 | __all__ = [ | CODE |
| LOW | …el_embeddings/mmbert_32k/foundation_data_transforms.py | 7 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ing/model_embeddings/mmbert_32k/reranker_evaluation.py | 7 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/training/model_embeddings/mmbert_32k/reranker_data.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | …raining/model_embeddings/mmbert_32k/foundation_data.py | 28 | __all__ = [ | CODE |
| LOW | …ining/model_embeddings/mmbert_32k/reranker_training.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/training/model_embeddings/mmbert_32k/embedder.py | 34 | __all__ = [ | CODE |
| LOW | …/model_embeddings/mmbert_32k/foundation_materialize.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ing/model_embeddings/mmbert_32k/embedder_evaluation.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/model_embeddings/mmbert_32k/foundation_data_remote.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | …training/model_embeddings/mmbert_32k/foundation_ewc.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ning/model_embeddings/mmbert_32k/foundation_packing.py | 199 | def update_token_digest(digest: Any, token_ids: Iterable[int]) -> None: | CODE |
| LOW | …/training/model_embeddings/multimodal/large/runtime.py | 44 | def set_seed(seed: int) -> None: | CODE |
| LOW | …ining/model_embeddings/multimodal/large/tri_encoder.py | 209 | def set_epoch(self, epoch: int) -> None: | CODE |
| LOW | src/training/model_embeddings/multimodal/large/data.py | 19 | __all__ = [ | CODE |
| 36 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | bench/reasoning/dataset_factory.py | 58 | Create a dataset instance by name. Args: name: Name of the dataset to create Returns: | STRING |
| HIGH | src/training/model_classifier/common_lora_utils.py | 24 | Get appropriate target_modules for LoRA based on model architecture. Args: model_name: Name of the mod | STRING |
| HIGH | src/training/model_classifier/common_lora_utils.py | 110 | Validate and normalize LoRA configuration parameters. Args: lora_config: Dictionary containing LoRA pa | STRING |
| HIGH | …lity_routing_classifier/evaluate_modality_candidate.py | 113 | Load a checkpoint and check that its labels map onto the canonical ones. Accepts a LoRA adapter directory or a merg | STRING |
| HIGH | …lassifier/modality_routing_classifier/modality_data.py | 57 | Compute class weights and the focal-loss gamma from the training labels. Weights are inverse frequency with sqrt da | STRING |
| HIGH | …/modality_routing_classifier/modality_label_mapping.py | 22 | Map checkpoint class ids to canonical MODALITY_LABELS ids, or raise. Raises unless id2label is a one-to-one mapping | STRING |
| HIGH | …ing_classifier/modality_routing_fixed_split_trainer.py | 397 | Add the frozen teacher's logits to the training set as a column. The student is trained in canonical label order, s | STRING |
| HIGH | …classifier/exploration_lfm25_scx/exploration_common.py | 119 | Score predicted label names against the true ones. Args: truth: True label names. preds: Predicted | STRING |
| HIGH | …odality_routing_classifier/label_audit/judge_labels.py | 103 | Load the split named in args, checking it against the dataset it was judged on. Judgments are keyed by row position | STRING |
| HIGH | …y_routing_classifier/label_audit/audit_lib/judgment.py | 30 | Parse one judgment line of the form "ID LABEL [flags]". Args: line: The line, for example "14 B M" or "15 A | STRING |
| HIGH | …uting_classifier/label_audit/audit_lib/human_review.py | 94 | Load the labels a human filled into the review sheet. Args: path: Path to the sheet written by write_sheet. | STRING |
| HIGH | …_routing_classifier/label_audit/audit_lib/api_judge.py | 77 | Send one batch to the model and return its reply. Retries the errors in `retryable` with a growing wait. Args: | STRING |
| HIGH | …ity_routing_classifier/label_audit/audit_lib/report.py | 35 | Check that predictions belong to the rows of the split, and put them in row order. Every row must be covered exactl | STRING |
| HIGH | …ity_routing_classifier/label_audit/audit_lib/report.py | 70 | Load the model predictions in an evaluation report, checked against the rows. Args: path: Path to modality_ | STRING |
| HIGH | …ity_routing_classifier/label_audit/audit_lib/report.py | 98 | Load one model's predictions from a JSON file, checked against the rows. The file needs "preds" and "input_hashes" | STRING |
| HIGH | …ity_routing_classifier/label_audit/audit_lib/report.py | 131 | Load model predictions for re-scoring against the judged labels. Nothing is joined by position alone: every predict | STRING |
| HIGH | …edback_classifier/data_processing/download_datasets.py | 1329 | Label a list of examples using the LLM API with production features. Features: - Retry logic for failed AP | STRING |
| HIGH | src/vllm-sr/cli/parser.py | 224 | Parse and validate user configuration file. Args: config_path: Path to config.yaml log_summary | STRING |
| HIGH | src/vllm-sr/cli/parser.py | 320 | Load configuration file as dictionary. Args: config_path: Path to configuration file Returns: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | bench/agent_crew/crew.py | 241 | raw = self.client.chat.completions.with_raw_response.create(**kwargs) | CODE |
| CRITICAL | …ntic-router/pkg/modelservice/replica_readiness_test.go | 74 | worker.member.group.client.bundleTasks.Store(DefaultBundleTasks) | CODE |
| CRITICAL | src/semantic-router/pkg/modelservice/replica_pool.go | 147 | current := w.member.group.client.bundleTasks.Load() | CODE |
| CRITICAL | src/semantic-router/pkg/modelservice/replica_pool.go | 151 | current = w.member.group.client.apiMinor.Load() | CODE |
| CRITICAL | …c-router/pkg/extproc/router_learning_outcome_ingest.go | 112 | gate := rt.config.RouterLearning.Protection.Tuning.ProgressGate.EffectiveConfig() | CODE |
| CRITICAL | …pii_model_fine_tuning_lora/tests/test_full_training.py | 151 | self.source.head.norm.weight.fill_(3) | CODE |
| CRITICAL | src/vllm-sr/cli/sr_bench/transport.py | 422 | response.raw._fp.fp.raw._sock.shutdown(socket.SHUT_RDWR) | CODE |
| CRITICAL | src/vllm-sr/cli/sr_bench/engine.py | 424 | response.raw._fp.fp.raw._sock.shutdown(socket.SHUT_RDWR) | CODE |
| CRITICAL | src/vllm-sr/cli/sr_bench/native_output.py | 262 | response.raw._fp.fp.raw._sock.shutdown(socket.SHUT_RDWR) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/router_reason_bench.py | 525 | client = OpenAI(base_url=endpoint, api_key=api_key or "dummy-key") | CODE |
| LOW | bench/reasoning/router_reason_bench_multi_dataset.py | 885 | client = OpenAI(base_url=endpoint, api_key=api_key or "dummy-key", timeout=300.0) | CODE |
| LOW⚡ | tools/agent/scripts/tests/test_changed_files_path.py | 124 | "user.email=test@example.org", | CODE |
| LOW⚡ | tools/agent/scripts/tests/test_changed_files_path.py | 207 | "user.email=test@example.org", | CODE |
| LOW | …version-v0.1/tutorials/content-safety/pii-detection.md | 22 | | `EMAIL_ADDRESS` | Email addresses | "user@example.com" | | CODE |
| LOW | …version-v0.2/tutorials/content-safety/pii-detection.md | 22 | | `EMAIL_ADDRESS` | Email addresses | "user@example.com" | | CODE |
| LOW | …version-v0.1/tutorials/content-safety/pii-detection.md | 29 | | `EMAIL_ADDRESS` | 电子邮件地址 | "user@example.com" | | CODE |
| LOW | …lugin-content-docs/version-v0.2/cookbook/pii-policy.md | 62 | | `EMAIL_ADDRESS`| 电子邮件地址 | "user@example.com" | | CODE |
| LOW | …lugin-content-docs/version-v0.2/cookbook/pii-policy.md | 66 | | `ORGANIZATION` | 公司/组织名称 | "Acme Corp" | | CODE |
| LOW | …version-v0.2/tutorials/content-safety/pii-detection.md | 29 | | `EMAIL_ADDRESS` | 电子邮件地址 | "user@example.com" | | CODE |
| LOW | dashboard/frontend/e2e/playground.spec.ts | 559 | await expect(dialog).toContainText('admin@example.com') | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 229 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 248 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 319 | await page.getByPlaceholder('you@example.com').fill('admin@example.com') | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 659 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 678 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 725 | await page.getByPlaceholder('you@example.com').fill('admin@example.com') | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 1063 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 1094 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/auth-flow.spec.ts | 1130 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/public-responsive.spec.ts | 206 | await page.getByPlaceholder('you@example.com').fill('admin@example.com') | CODE |
| LOW | dashboard/frontend/e2e/public-responsive.spec.ts | 251 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/support/auth.ts | 30 | email: 'admin@example.com', | CODE |
| LOW | dashboard/frontend/e2e/evaluation/sr-bench.spec.ts | 398 | 'placeholder', | CODE |
| LOW | …rontend/e2e/evaluation/sr-bench-missing-prices.spec.ts | 135 | await expect(budget).toHaveAttribute('placeholder', 'Not applied') | CODE |
| LOW | dashboard/frontend/src/pages/UsersPageUserDialog.tsx | 152 | placeholder="Jane Doe" | CODE |
| LOW | dashboard/backend/auth/handlers_test.go | 66 | user := newTestUser(t, svc, "admin@example.com", "admin", "active") | CODE |
| LOW | dashboard/backend/auth/store_test.go | 19 | admin := newTestUser(t, NewService(store, "test-secret", 1), "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/invitation_test.go | 11 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/invitation_test.go | 44 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/invitation_test.go | 70 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/invitation_test.go | 83 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/password_test.go | 63 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/password_test.go | 98 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/password_test.go | 131 | admin := newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 83 | newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 91 | rec := postRegister(svc, "admin@example.com") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 105 | newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 114 | rec := postRegister(svc, "admin@example.com") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 125 | rec := postRegister(svc, "admin@example.com") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 136 | newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 178 | newTestUser(t, svc, "admin@example.com", RoleAdmin, "active") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 198 | rec := postRegister(svc, "admin@example.com") | CODE |
| LOW | dashboard/backend/auth/bootstrap_gate_test.go | 331 | if rec := postRegister(svc, "admin@example.com"); rec.Code != http.StatusOK { | CODE |
| LOW | …esting/vllm-sr-cli/test_integration_first_run_setup.py | 109 | "email": "admin@example.com", | CODE |
| LOW | …sting/vllm-sr-cli/test_integration_restart_required.py | 79 | "email": "admin@example.com", | CODE |
| LOW | …/testing/vllm-sr-cli/test_integration_recipe_bearer.py | 87 | "email": "admin@example.com", | CODE |
| LOW | e2e/scripts/generate_test_data.py | 120 | "PERSON": ["Jane Smith", "John Doe", "Michael Johnson"], | CODE |
| LOW | …kg/classification/generic_classifier_reasoning_test.go | 29 | c, err := newLLMLabelClassifier(config.ClassifierSignalRule{Name: "labels", Model: "test", Labels: []string{"A", "B"} | CODE |
| LOW | …ntic-router/pkg/classification/vllm_classifier_test.go | 19 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| LOW | …c-router/pkg/classification/vllm_client_limits_test.go | 16 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| LOW | …ter/pkg/classification/classifier_full_context_test.go | 60 | const email = "alice@example.org" | CODE |
| LOW | …c-router/pkg/classification/generic_classifier_test.go | 52 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| LOW | …antic-router/pkg/classification/classifier_pii_test.go | 224 | piiEntity("PERSON", "John Doe", 0, 8, 0.9), | CODE |
| LOW | …antic-router/pkg/classification/classifier_pii_test.go | 238 | piiEntity("PERSON", "John Doe", 0, 8, 0.9), | CODE |
| LOW | …c-router/pkg/classification/pii_remote_backend_test.go | 20 | {"label": "EMAIL_ADDRESS", "score": 0.9, "text": "jane@example.org", "start": 19, "end": 35}, | CODE |
| LOW | …c-router/pkg/classification/pii_remote_backend_test.go | 21 | {"label": "URL", "score": 0.9, "text": "mailto:jane@example.org", "start": 12, "end": 35}, | CODE |
| LOW | …uter/pkg/classification/generic_classifier_llm_test.go | 46 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| LOW | …uter/pkg/classification/generic_classifier_llm_test.go | 168 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| LOW | …-router/pkg/classification/vllm_client_timeout_test.go | 28 | ModelEndpoint: config.ClassifierVLLMEndpoint{Address: "placeholder", Port: 1}, | CODE |
| 22 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/operator/config/crd/kustomizeconfig.yaml | 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD | COMMENT |
| MEDIUM⚡ | e2e/testing/08-rag-openai-test.py | 42 | # Create a request with RAG enabled (direct_search mode) | COMMENT |
| MEDIUM⚡ | e2e/testing/08-rag-openai-test.py | 98 | # Create a request with file_search tool (Responses API format) | COMMENT |
| MEDIUM⚡ | e2e/testing/run_all_tests.py | 153 | # Create a test suite from the module | COMMENT |
| MEDIUM | e2e/scripts/generate_test_data.py | 188 | # Define the PII types we need (matching semantic-router config) | COMMENT |
| MEDIUM | …ng/model_experiment/dual_classifier/dual_classifier.py | 165 | # Create a new instance | COMMENT |
| MEDIUM | …/multitask_bert_fine_tuning/multitask_bert_training.py | 469 | # Create a temporary trainer to load datasets and determine configurations | COMMENT |
| MEDIUM | …/multitask_bert_fine_tuning/multitask_bert_training.py | 512 | # Create the real trainer | COMMENT |
| MEDIUM | src/training/model_eval/plot_category_accuracies.py | 108 | # Create a new dict to avoid modifying the original during iteration | COMMENT |
| MEDIUM | …model_embeddings/cache_embeddings/domains/prompts.yaml | 3 | # This file defines how the LLM should generate paraphrases and hard negatives | COMMENT |
| MEDIUM⚡ | …model_selection/ml_model_selection/models.example.yaml | 3 | # This file defines multiple LLM models with different endpoints and authentication. | COMMENT |
| MEDIUM | src/vllm-sr/cli/templates/grafana-datasource.serve.yaml | 2 | # This file is provisioned automatically when Grafana starts | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | e2e/testing/vllm-sr-cli/serve_session.py | 159 | CODE | |
| LOW | e2e/testing/vllm-sr-cli/cli_test_base.py | 388 | CODE | |
| LOW | …raining/model_classifier/safety_classifier/evaluate.py | 376 | CODE | |
| LOW | …raining/model_classifier/safety_classifier/evaluate.py | 591 | CODE | |
| LOW | …ck_fine_tuning_lora/fact_check_bert_finetuning_lora.py | 1230 | CODE | |
| LOW | …ng_classifier/modality_routing_bert_finetuning_lora.py | 2264 | CODE | |
| LOW | …ard_fine_tuning_lora/jailbreak_bert_finetuning_lora.py | 488 | CODE | |
| LOW | …pii_model_fine_tuning_lora/pii_bert_finetuning_lora.py | 1121 | CODE | |
| LOW | …ssifier/hallucination_detection_classifier/finetune.py | 358 | CODE | |
| LOW | …ier_model_fine_tuning_lora/ft_qwen3_generative_lora.py | 401 | CODE | |
| LOW | …er/classifier_model_fine_tuning_lora/ft_linear_lora.py | 544 | CODE | |
| LOW | …r_model_fine_tuning_lora/ft_linear_lora_consistency.py | 493 | CODE | |
| LOW | …ro_solver_lora/ft_qwen3_mmlu_solver_lora_no_leakage.py | 1249 | CODE | |
| LOW | …ment/mmlu_pro_solver_lora/ft_qwen3_mmlu_solver_lora.py | 698 | CODE | |
| LOW | …/model_embeddings/mmbert_32k/foundation_data_remote.py | 231 | CODE | |
| LOW | …/training/model_embeddings/multimodal/large/records.py | 254 | CODE | |
| LOW | …/training/model_embeddings/multimodal/large/records.py | 315 | CODE | |
| LOW | …training/model_embeddings/multimodal/small/training.py | 188 | CODE | |
| LOW | …ing/model_embeddings/multimodal/small/models/fusion.py | 148 | CODE | |
| LOW | …g/model_embeddings/multimodal/small/models/embedder.py | 33 | CODE | |
| LOW | …g/model_embeddings/multimodal/small/data/sequential.py | 18 | CODE | |
| LOW | …aining/model_selection/ml_model_selection/benchmark.py | 1037 | CODE | |
| LOW | …c/training/model_selection/ml_model_selection/train.py | 86 | CODE | |
| LOW | …c/training/model_selection/ml_model_selection/train.py | 207 | CODE | |
| LOW | src/model-runtime/vllm_srun/testing/onnx_graphs.py | 51 | CODE | |
| LOW | src/vllm-sr/cli/config_translator.py | 45 | CODE | |
| LOW | src/vllm-sr/cli/container_backend.py | 27 | CODE | |
| LOW | src/vllm-sr/cli/core.py | 152 | CODE | |
| LOW | src/vllm-sr/cli/k8s_backend.py | 186 | CODE | |
| LOW | src/vllm-sr/cli/container_images.py | 354 | CODE | |
| LOW | src/vllm-sr/cli/container_start.py | 90 | CODE | |
| LOW | src/vllm-sr/cli/sr_bench/sources.py | 273 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/grounded_fusion/run_ab.sh | 9 | # Usage: | COMMENT |
| LOW⚡ | tools/test/smoke/test-authz-rbac.sh | 22 | # Usage: | COMMENT |
| LOW | tools/test/smoke/milvus/test-milvus-deployment.sh | 5 | # Usage: | COMMENT |
| LOW | …tes/dynamo/helm-chart/examples/values-multi-model.yaml | 5 | # Usage: | COMMENT |
| LOW | …etes/dynamo/helm-chart/examples/values-multi-node.yaml | 5 | # Usage: | COMMENT |
| LOW | …classifier/modality_routing_classifier/run_training.sh | 5 | # Usage: | COMMENT |
| LOW | …_feedback_classifier/scripts/label_balanced_dataset.sh | 18 | # Usage: | COMMENT |
| LOW⚡ | …lu_pro_solver_lora/train_all_specialists_no_leakage.sh | 8 | # Usage: | COMMENT |
| LOW | src/training/model_eval/arc_challenge_vllm_eval.py | 3 | # Usage example: | COMMENT |
| LOW | src/training/model_eval/mmlu_pro_vllm_eval.py | 3 | # Sample usage: | COMMENT |
| LOW⚡ | …model_selection/ml_model_selection/models.example.yaml | 6 | # Usage: | COMMENT |
| LOW | …tion/rl_model_selection/scripts/train_router_r1_gpu.sh | 9 | # Usage: | COMMENT |
| LOW | …tion/rl_model_selection/scripts/train_gmtrouter_gpu.sh | 9 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …tend/src/pages/ConfigPageMoMWorkspace.contract.test.ts | 59 | expect(usage).not.toContain('YOUR_API_KEY') | CODE |
| HIGH | e2e/testing/09-openai-api-validation-test.py | 47 | "your-api-key", | CODE |
| HIGH | …mantic-router/pkg/openai/openai_validation_e2e_test.go | 18 | var placeholderKeys = []string{"sk-your-key", "sk-your-real-key", "sk-...", "your-api-key"} | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …oard/frontend/src/pages/ConfigPageModelUsageDialog.tsx | 51 | print(chunk.choices[0].delta.content or "", end="")`, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | website/src/pages/community/contributing.tsx | 18 | description={<Translate id="contributing.subtitle">We welcome contributions from the community! Here's how you c | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/vllm-sr/tests/test_sr_bench_preparation_cli.py | 41 | def handle_request(self): | CODE |