wazuh/wazuh

Pattern Findings

4370 matches across 17 categories. Click a row to expand file-level details.

Decorative Section Separators585 hits · 1862 pts

Severity	File	Line	Snippet
MEDIUM	tools/devContainer/reinstall-cmake.sh	2	#-------------------------------------------------------------------------------------------------------------
MEDIUM	tools/devContainer/reinstall-cmake.sh	5	#-------------------------------------------------------------------------------------------------------------
MEDIUM	framework/wazuh/rbac/tests/test_decorators.py	194	# ---------------------------------------------------------------------------
MEDIUM	framework/wazuh/rbac/tests/test_decorators.py	196	# ---------------------------------------------------------------------------
MEDIUM	framework/wazuh/rbac/tests/test_decorators.py	240	# ---------------------------------------------------------------------------
MEDIUM	framework/wazuh/rbac/tests/test_decorators.py	242	# ---------------------------------------------------------------------------
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	16	# =============================
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	18	# =============================
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	31	# =============================
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	33	# =============================
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	68	# ============================================================
MEDIUM	…ork/wazuh/core/cluster/tests/test_cluster_name_sync.py	70	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	11	# =============================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	13	# =============================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	44	# =============================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	46	# =============================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	88	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	90	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	178	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	180	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	261	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	263	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	423	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	425	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	481	# ============================================================
MEDIUM	…re/cluster/tests/test_cluster_name_sync_integration.py	483	# ============================================================
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	619	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	621	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	718	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	720	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	886	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	888	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	957	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	959	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1113	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1115	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1238	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1240	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1418	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1420	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1610	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1612	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1714	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1716	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1775	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1777	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	2062	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	2064	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	2142	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	2144	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	177	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	179	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	212	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	214	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	391	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	393	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1055	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1057	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1335	# ---------------------------------------------------------------------------
MEDIUM	…work/wazuh/core/indexer/tests/test_metrics_snapshot.py	1337	# ---------------------------------------------------------------------------
525 more matches not shown…

Hyper-Verbose Identifiers1368 hits · 1277 pts

Severity	File	Line	Snippet
LOW	tools/mitre/mitredb.py	570	def parse_json_ext_references(data_object):
LOW	framework/scripts/rbac_control.py	24	async def restore_default_passwords(script_args):
LOW	framework/scripts/tests/test_agent_upgrade.py	32	def test_get_script_arguments(mock_ArgumentParser):
LOW	framework/scripts/tests/test_agent_upgrade.py	223	async def test_main_internal_error_ko(capfd):
LOW	framework/scripts/tests/test_wazuh_manager_clusterd.py	256	def test_get_script_arguments(argument_parser_mock):
LOW	framework/scripts/tests/test_rbac_control.py	41	async def test_restore_default_passwords(forward_mock: AsyncMock, safe_load_mock, print_mock, user_input, db_setup):
LOW	framework/scripts/tests/test_rbac_control.py	66	async def test_restore_default_passwords_exceptions(safe_load_mock, getpass_mock, print_mock):
LOW	framework/scripts/tests/test_rbac_control.py	104	async def test_reset_rbac_database_exceptions(input_mock, print_mock):
LOW	framework/scripts/tests/test_rbac_control.py	114	def test_get_script_arguments(exit_mock):
LOW	framework/scripts/tests/test_agent_groups.py	77	async def test_show_agents_with_group(print_mock):
LOW	framework/scripts/tests/test_agent_groups.py	334	def test_get_script_arguments(argument_parser_mock, invalid_option_mock):
LOW	framework/scripts/tests/test_cluster_control.py	292	def add_mutually_exclusive_group(self):
LOW	framework/wazuh/security.py	1192	def revoke_current_user_tokens() -> WazuhResult:
LOW	framework/wazuh/stats.py	185	def get_agents_component_stats_json(agent_list: list = None, component: str = None) -> AffectedItemsWazuhResult:
LOW	framework/wazuh/agent.py	122	def get_agents_summary_status(agent_list: list[str] = None) -> WazuhResult:
LOW	framework/wazuh/agent.py	1578	def check_uninstall_permission() -> WazuhResult:
LOW	framework/wazuh/rbac/orm.py	1816	def get_all_policies_from_role(self, role_id: int) -> Union[list, bool]:
LOW	framework/wazuh/rbac/orm.py	1842	def get_all_roles_from_policy(self, policy_id: int) -> Union[list, bool]:
LOW	framework/wazuh/rbac/orm.py	2456	def _set_permissions_and_ownership(database: str):
LOW	framework/wazuh/rbac/decorators.py	77	def _combination_defined_rbac(needed_resources: list, user_resources: str) -> bool:
LOW	framework/wazuh/rbac/decorators.py	279	def _get_required_permissions(actions: list = None, resources: list = None, **kwargs: dict) -> tuple:
LOW	framework/wazuh/rbac/decorators.py	573	def _mask_all_sensitive_fields(text: str, mask_text: str = "***") -> str:
LOW	framework/wazuh/rbac/tests/test_orm.py	502	def test_get_all_roles_from_user(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	512	def test_get_all_policy_from_role(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	522	def test_get_all_role_from_policy(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	532	def test_remove_role_from_user(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	542	def test_remove_policy_from_role(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	689	def test_databasemanager_rollback(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	696	def test_databasemanager_set_database_version(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	706	def test_check_database_integrity(chmod_mock, chown_mock, remove_mock, safe_move_mock, fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	100	def test_token_valid_after_revoke_same_second_ms(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	133	def test_delete_all_expired_rules(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	262	def test_delete_all_security_rules(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	453	def test_add_role_policy_level(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	553	def test_remove_role_from_policy(db_setup):
LOW	framework/wazuh/rbac/tests/test_orm.py	564	def test_databasemanager___init__(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	572	def test_databasemanager_connect(sessionmaker_mock, create_engine_mock, fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	587	def test_databasemanager_close_sessions(sessionmaker_mock, create_engine_mock, fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	600	def test_databasemanager_create_database(create_db_mock, fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	613	def test_databasemanager_get_database_version(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	619	def test_databasemanager_insert_default_resources(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	663	def test_databasemanager_get_table(fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	752	def test_check_database_integrity_exceptions(remove_mock, close_sessions_mock, exception, fresh_in_memory_db):
LOW	framework/wazuh/rbac/tests/test_orm.py	827	def test_check_database_integrity_missing_default_policy(chmod_mock, chown_mock, remove_mock, safe_move_mock, fresh_in_m
LOW	framework/wazuh/rbac/tests/test_orm.py	870	def test_check_database_integrity_modified_default_policy(chmod_mock, chown_mock, remove_mock, safe_move_mock, fresh_in_
LOW	framework/wazuh/rbac/tests/test_decorators.py	198	def test_has_update_permissions_no_perms(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	204	def test_has_update_permissions_with_manager_update_config(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	210	def test_has_update_permissions_with_cluster_update_config(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	216	def test_has_update_permissions_read_only_role(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	222	def test_has_update_permissions_empty_action_dict(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	228	def test_has_update_permissions_non_dict_action_value(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	234	def test_has_update_permissions_none_rbac(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	113	def test_expose_resourcesless(db_setup, decorator_params, rbac, allowed, mode):
LOW	framework/wazuh/rbac/tests/test_decorators.py	158	def test_mask_sensitive_config_without_permissions(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	170	def test_mask_sensitive_config_with_permissions(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	181	def test_mask_sensitive_config_on_affected_items_result(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	288	def test_mask_sensitive_config_raw_xml_without_permissions(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	304	def test_mask_sensitive_config_raw_xml_with_permissions(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	316	def test_mask_sensitive_config_raw_xml_cluster_perm(db_setup):
LOW	framework/wazuh/rbac/tests/test_decorators.py	328	def test_mask_sensitive_config_raw_xml_no_cluster_block(db_setup):
1308 more matches not shown…

Over-Commented Block790 hits · 774 pts

Severity	File	Line	Snippet
LOW	tools/purge_wazuh.sh	1	#!/usr/bin/env bash
LOW	tools/testing/enrollment-simulator/src/simulator.cpp	1	#include "simulator.h"
LOW	tools/testing/enrollment-simulator/src/simulator.h	1	#pragma once
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	2061	rules:
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	2081	# 3.2.1 Ensure IP forwarding is disabled. (Automated) - Not implemented
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	5021	condition: all
LOW	ruleset/sca/amazon/cis_amazon_linux_1.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/amazon/cis_amazon_linux_2.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian8.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian9.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian13.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian13.yml	1981	- "not c:dpkg-query -s bluez -> r:install ok installed"
LOW	ruleset/sca/debian/cis_debian12.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian12.yml	1981	- "not c:dpkg-query -s bluez -> r:install ok installed"
LOW	ruleset/sca/debian/cis_debian10.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian10.yml	2321	tactic: ["TA0005"]
LOW	ruleset/sca/debian/cis_debian11.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/debian/cis_debian11.yml	1301	- "not f:/etc/gdm3/custom.conf"
LOW	ruleset/sca/debian/cis_debian11.yml	2101	- "c:dpkg-query -W -f='${binary:Package}\\t${Status}\\t${db:Status-Status}\\n' rpcbind -> r:unknown ok not-install
LOW	ruleset/sca/debian/cis_debian11.yml	2121	# 3.2 Network Parameters (Host Only)
LOW	ruleset/sca/debian/cis_debian7.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/rocky/cis_rocky_linux_8.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/rocky/cis_rocky_linux_8.yml	2381	###############################################
LOW	ruleset/sca/rocky/cis_rocky_linux_8.yml	3641
LOW	ruleset/sca/rocky/cis_rocky_linux_8.yml	5061
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	2141	###############################################
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	2521	subtechnique: ["T1562.002", "T1070.001"]
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	4481	- 'c:stat /etc/gshadow- -> r:Access:\s$0000/----------$\sUid:\s$\s\t0/\s\troot$\s\tGid:\s\(\s\t0/\
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	4581	# 6.2.15 Ensure no local interactive user has .rhosts files. (Automated) - Not Implemented
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	2141	###############################################
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	2521	subtechnique: ["T1562.002", "T1070.001"]
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	4481	- 'c:stat /etc/gshadow- -> r:Access:\s$0000/----------$\sUid:\s$\s\t0/\s\troot$\s\tGid:\s\(\s\t0/\
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	4581	# 6.2.15 Ensure no local interactive user has .rhosts files. (Automated) - Not Implemented
LOW	ruleset/sca/ol/9/cis_oracle_linux_9.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/ol/9/cis_oracle_linux_9.yml	2061	# 3.1.3 Ensure TIPC is disabled. (Automated) - Not Implemented
LOW	ruleset/sca/ol/9/cis_oracle_linux_9.yml	4821	tactic: ["TA0009", "TA0010"]
LOW	ruleset/sca/ol/9/cis_oracle_linux_9.yml	4921	# 6.2.12 Ensure local interactive user home directories are mode 750 or more restrictive. (Automated) - Not Implemente
LOW	ruleset/sca/ol/10/cis_oracle_linux_10.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/ol/10/cis_oracle_linux_10.yml	2061	# 3.1.3 Ensure TIPC is disabled. (Automated) - Not Implemented
LOW	ruleset/sca/ol/10/cis_oracle_linux_10.yml	4821	tactic: ["TA0009", "TA0010"]
LOW	ruleset/sca/ol/10/cis_oracle_linux_10.yml	4921	# 6.2.12 Ensure local interactive user home directories are mode 750 or more restrictive. (Automated) - Not Implemente
LOW	ruleset/sca/centos/9/cis_centos9_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/centos/9/cis_centos9_linux.yml	2401
LOW	ruleset/sca/centos/9/cis_centos9_linux.yml	5461	# 6.2.11 Ensure users' home directories permissions are 750 or more restrictive. (Automated) - Not Implemented
LOW	ruleset/sca/centos/7/cis_centos7_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/centos/7/cis_centos7_linux.yml	2001	# 3 Network Configuration and Firewalls
LOW	ruleset/sca/centos/7/cis_centos7_linux.yml	5281	tactic: ["TA0005"]
LOW	ruleset/sca/centos/6/cis_centos6_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/centos/10/cis_centos10_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/centos/10/cis_centos10_linux.yml	2401
LOW	ruleset/sca/centos/10/cis_centos10_linux.yml	5461	# 6.2.11 Ensure users' home directories permissions are 750 or more restrictive. (Automated) - Not Implemented
LOW	ruleset/sca/centos/8/cis_centos8_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/centos/8/cis_centos8_linux.yml	2401
LOW	ruleset/sca/centos/8/cis_centos8_linux.yml	5461	# 6.2.11 Ensure users' home directories permissions are 750 or more restrictive. (Automated) - Not Implemented
LOW	ruleset/sca/rhel/9/cis_rhel9_linux.yml	1	# Security Configuration Assessment
LOW	ruleset/sca/rhel/9/cis_rhel9_linux.yml	2021	- "c:rpm -q ftp -> r:^package ftp is not installed"
LOW	ruleset/sca/rhel/9/cis_rhel9_linux.yml	2041	# 3.3.1 Ensure source routed packets are not accepted (Automated) - Not implemented
730 more matches not shown…

Cross-File Repetition150 hits · 750 pts

Severity	File	Line	Snippet
HIGH	framework/scripts/agent_groups.py	0	get script arguments. returns ------- argparse.namespace arguments passed to the script.
HIGH	framework/scripts/agent_upgrade.py	0	get script arguments. returns ------- argparse.namespace arguments passed to the script.
HIGH	framework/scripts/wazuh_manager_clusterd.py	0	get script arguments. returns ------- argparse.namespace arguments passed to the script.
HIGH	framework/wazuh/core/cluster/worker.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/worker.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- args positional arguments for parent constructor class. kwargs keyword argument
HIGH	framework/wazuh/core/cluster/worker.py	0	check whether the synchronization process was correct and free its lock. parameters ---------- future : asyncio.future o
HIGH	framework/wazuh/core/cluster/worker.py	0	check whether the synchronization process was correct and free its lock. parameters ---------- future : asyncio.future o
HIGH	framework/wazuh/core/cluster/master.py	0	check whether the synchronization process was correct and free its lock. parameters ---------- future : asyncio.future o
HIGH	framework/wazuh/core/cluster/master.py	0	check whether the synchronization process was correct and free its lock. parameters ---------- future : asyncio.future o
HIGH	framework/wazuh/core/cluster/master.py	0	check whether the synchronization process was correct and free its lock. parameters ---------- future : asyncio.future o
HIGH	framework/wazuh/core/cluster/local_server.py	0	get basic information about the node. returns ------- dict basic node information.
HIGH	framework/wazuh/core/cluster/common.py	0	get basic information about the node. returns ------- dict basic node information.
HIGH	framework/wazuh/core/cluster/master.py	0	get basic information about the node. returns ------- dict basic node information.
HIGH	framework/wazuh/core/cluster/common.py	0	define set_up_coro method. it is implemented differently for master, workers and synchronization types. raises ------- n
HIGH	framework/wazuh/core/cluster/common.py	0	define set_up_coro method. it is implemented differently for master, workers and synchronization types. raises ------- n
HIGH	framework/wazuh/core/cluster/common.py	0	define set_up_coro method. it is implemented differently for master, workers and synchronization types. raises ------- n
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- kwargs arguments for the parent class constructor.
HIGH	framework/wazuh/core/cluster/master.py	0	class constructor. parameters ---------- kwargs arguments for the parent class constructor.
HIGH	framework/wazuh/core/cluster/local_client.py	0	class constructor. parameters ---------- kwargs arguments for the parent class constructor.
HIGH	framework/wazuh/core/cluster/tests/test_master.py	0	check if the data chunks are being properly forward to the wazuh-db socket.
HIGH	framework/wazuh/core/cluster/tests/test_master.py	0	check if the data chunks are being properly forward to the wazuh-db socket.
HIGH	framework/wazuh/core/cluster/tests/test_common.py	0	check if the data chunks are being properly forward to the wazuh-db socket.
HIGH	framework/wazuh/core/cluster/tests/test_common.py	0	test if this function is properly removing the finished tasks from the queue.
HIGH	framework/wazuh/core/cluster/tests/test_common.py	0	test if this function is properly removing the finished tasks from the queue.
HIGH	framework/wazuh/core/cluster/tests/test_common.py	0	test if this function is properly removing the finished tasks from the queue.
HIGH	tests/integration/conftest.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	tests/integration/test_syscollector/conftest.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…ation/test_syscollector/test_configuration/__init__.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	tests/integration/test_remoted/conftest.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…ed/test_agent_communication/test_request_agent_info.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…munication/test_multi_agent_protocols_communication.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…agent_communication/test_agents_switching_protocols.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…remoted/test_agent_communication/test_agent_version.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…_communication/test_invalid_protocols_communication.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…st_agent_communication/test_protocols_communication.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…ed/test_agent_communication/test_multi_agent_status.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…/test_agent_communication/test_agent_pending_status.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…/test_agent_communication/test_shared_configuration.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…remoted/test_configurations/test_queue_size_too_big.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…ed/test_configurations/test_invalid_connection_port.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…est_remoted/test_configurations/test_valid_local_ip.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…ed/test_configurations/test_rids_valid_closing_time.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…t_remoted/test_configurations/test_valid_queue_size.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…remoted/test_configurations/test_invalid_connection.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…t_remoted/test_configurations/test_valid_connection.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…est_configurations/test_invalid_connection_protocol.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…t_remoted/test_configurations/test_invalid_local_ip.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…/test_configurations/test_rids_invalid_closing_time.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	tests/integration/test_remoted/test_rids/test_rids.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	tests/integration/test_remoted/test_rids/test_config.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…oted/test_active_response/test_active_response_send.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…egration/test_remoted/test_manager/test_manager_ack.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…integration/test_remoted/test_multi_groups/conftest.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…moted/test_multi_groups/test_merged_mg_file_content.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	…emoted/test_socket_communication/test_ping_pong_msg.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
HIGH	tests/integration/test_sca/conftest.py	0	copyright (c) 2015-2024, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redi
90 more matches not shown…

Excessive Try-Catch Wrapping406 hits · 492 pts

Severity	File	Line	Snippet
LOW	tools/agent-upgrade/wpkpack.py	100	except Exception as error:
MEDIUM	tools/debug/csv-stat.py	66	print(f'Error: File {args.file} not found.')
LOW	tools/debug/csv-stat.py	68	except Exception as e:
MEDIUM	tools/debug/csv-stat.py	69	print(f'Error: {e}')
LOW	framework/scripts/agent_groups.py	20	except Exception as e:
MEDIUM	framework/scripts/agent_groups.py	21	print("Error importing 'Wazuh' package.\n\n{0}\n".format(e))
MEDIUM	framework/scripts/agent_groups.py	382	print("Error {0}: {1}".format(e.code, e.message))
LOW	framework/scripts/agent_groups.py	385	except Exception as e:
LOW	framework/scripts/agent_upgrade.py	25	except Exception as e:
MEDIUM	framework/scripts/agent_upgrade.py	26	print("Error importing 'Wazuh' package.\n\n{0}\n".format(e))
MEDIUM	framework/scripts/agent_upgrade.py	227	print(f"Error {wazuh_err.code}: {wazuh_err.message}")
MEDIUM	framework/scripts/agent_upgrade.py	231	print(f"Error {getattr(e, 'ext', {}).get('code', e.status)}: {str(e.detail)}")
LOW	framework/scripts/agent_upgrade.py	234	except Exception as unexpected_err:
MEDIUM	framework/scripts/agent_upgrade.py	197	def main():
LOW	framework/scripts/cluster_control.py	292	except Exception as e:
LOW	framework/scripts/rbac_control.py	14	except Exception as e:
MEDIUM	framework/scripts/rbac_control.py	15	print("Error importing 'Wazuh' package.\n\n{0}\n".format(e))
MEDIUM	framework/scripts/rbac_control.py	102	print(f"Error {e.code}: {e.message}")
LOW	framework/scripts/rbac_control.py	103	except Exception as e:
LOW	framework/scripts/wazuh_manager_clusterd.py	208	except Exception as e:
LOW	framework/scripts/wazuh_manager_clusterd.py	214	except Exception as e:
LOW	framework/scripts/wazuh_manager_clusterd.py	249	except Exception as e:
LOW	framework/scripts/wazuh_manager_clusterd.py	271	except Exception:
LOW	framework/wazuh/__init__.py	31	except Exception:
LOW	framework/wazuh/__init__.py	81	except Exception:
LOW	framework/wazuh/agent.py	861	except Exception as e:
LOW	framework/wazuh/agent.py	914	except Exception as e:
LOW	framework/wazuh/rbac/orm.py	2521	except Exception as e:
LOW	framework/wazuh/rbac/decorators.py	474	except Exception:
LOW	framework/wazuh/rbac/decorators.py	703	except Exception:
LOW	framework/wazuh/core/configuration.py	849	except Exception as e:
LOW	framework/wazuh/core/configuration.py	857	except Exception as e:
LOW	framework/wazuh/core/configuration.py	861	except Exception as e:
LOW	framework/wazuh/core/configuration.py	426	except Exception as e:
LOW	framework/wazuh/core/configuration.py	475	except Exception as e:
LOW	framework/wazuh/core/configuration.py	521	except Exception as e:
LOW	framework/wazuh/core/configuration.py	600	except Exception as e:
LOW	framework/wazuh/core/configuration.py	825	except Exception as e:
LOW	framework/wazuh/core/configuration.py	980	except Exception as unhandled_exc:
LOW	framework/wazuh/core/configuration.py	1008	except Exception as unhandled_exc:
LOW	framework/wazuh/core/configuration.py	1037	except Exception as unhandled_exc:
LOW	framework/wazuh/core/configuration.py	1089	except Exception as e:
LOW	framework/wazuh/core/wdb.py	433	except Exception as e:
MEDIUM	framework/wazuh/core/wdb.py	342	def send_request_to_wdb(query_lower, step, off, response):
LOW	framework/wazuh/core/wazuh_socket.py	38	except Exception as e:
LOW	framework/wazuh/core/wazuh_socket.py	53	except Exception as e:
LOW	framework/wazuh/core/wazuh_socket.py	61	except Exception as e:
LOW	framework/wazuh/core/wazuh_socket.py	123	except Exception as e:
MEDIUM	framework/wazuh/core/wazuh_socket.py	29	def _connect(self):
MEDIUM	framework/wazuh/core/wazuh_socket.py	56	def receive(self, header_format="<I", header_size=4):
LOW	framework/wazuh/core/utils.py	866	except Exception as e:
LOW	framework/wazuh/core/utils.py	1804	except Exception as e:
LOW	framework/wazuh/core/pyDaemonModule.py	128	except Exception as exc:
LOW	framework/wazuh/core/stats.py	50	except Exception:
LOW	framework/wazuh/core/agent.py	842	except Exception as e:
LOW	framework/wazuh/core/agent.py	910	except Exception:
LOW	framework/wazuh/core/agent.py	915	except Exception:
LOW	framework/wazuh/core/agent.py	934	except Exception as e:
LOW	framework/wazuh/core/agent.py	1138	except Exception as e:
LOW	framework/wazuh/core/wazuh_queue.py	53	except Exception:
346 more matches not shown…

Deep Nesting333 hits · 307 pts

Severity	File	Line
LOW	tools/mitre/mitredb.py	509
LOW	tools/mitre/mitredb.py	585
LOW	tools/mitre/mitredb.py	613
LOW	tools/debug/wdb-query.py	94
LOW	framework/scripts/agent_groups.py	336
LOW	framework/scripts/agent_upgrade.py	159
LOW	framework/scripts/cluster_control.py	253
LOW	framework/scripts/tests/test_wazuh_manager_clusterd.py	39
LOW	framework/scripts/tests/test_wazuh_manager_clusterd.py	95
LOW	framework/scripts/tests/test_wazuh_manager_clusterd.py	165
LOW	framework/scripts/tests/test_wazuh_manager_clusterd.py	287
LOW	framework/wazuh/security.py	26
LOW	framework/wazuh/security.py	258
LOW	framework/wazuh/security.py	361
LOW	framework/wazuh/security.py	427
LOW	framework/wazuh/security.py	533
LOW	framework/wazuh/security.py	603
LOW	framework/wazuh/security.py	744
LOW	framework/wazuh/security.py	781
LOW	framework/wazuh/security.py	848
LOW	framework/wazuh/security.py	908
LOW	framework/wazuh/security.py	959
LOW	framework/wazuh/security.py	1009
LOW	framework/wazuh/security.py	1063
LOW	framework/wazuh/security.py	1139
LOW	framework/wazuh/security.py	1270
LOW	framework/wazuh/stats.py	19
LOW	framework/wazuh/agent.py	122
LOW	framework/wazuh/agent.py	205
LOW	framework/wazuh/agent.py	585
LOW	framework/wazuh/agent.py	698
LOW	framework/wazuh/agent.py	922
LOW	framework/wazuh/agent.py	1222
LOW	framework/wazuh/agent.py	1341
LOW	framework/wazuh/rbac/orm.py	1153
LOW	framework/wazuh/rbac/orm.py	1331
LOW	framework/wazuh/rbac/orm.py	1438
LOW	framework/wazuh/rbac/orm.py	1525
LOW	framework/wazuh/rbac/orm.py	1577
LOW	framework/wazuh/rbac/orm.py	1722
LOW	framework/wazuh/rbac/orm.py	1863
LOW	framework/wazuh/rbac/orm.py	2065
LOW	framework/wazuh/rbac/orm.py	2162
LOW	framework/wazuh/rbac/orm.py	2204
LOW	framework/wazuh/rbac/preprocessor.py	19
LOW	framework/wazuh/rbac/auth_context.py	37
LOW	framework/wazuh/rbac/auth_context.py	108
LOW	framework/wazuh/rbac/auth_context.py	220
LOW	framework/wazuh/rbac/auth_context.py	273
LOW	framework/wazuh/rbac/auth_context.py	315
LOW	framework/wazuh/rbac/decorators.py	23
LOW	framework/wazuh/rbac/decorators.py	77
LOW	framework/wazuh/rbac/decorators.py	223
LOW	framework/wazuh/rbac/decorators.py	279
LOW	framework/wazuh/rbac/decorators.py	425
LOW	framework/wazuh/rbac/decorators.py	629
LOW	framework/wazuh/rbac/decorators.py	447
LOW	framework/wazuh/rbac/decorators.py	449
LOW	framework/wazuh/rbac/tests/test_orm.py	28
LOW	framework/wazuh/rbac/tests/test_orm.py	336
273 more matches not shown…

Unused Imports279 hits · 273 pts

Severity	File	Line
LOW	framework/wazuh/__init__.py	10
LOW	framework/wazuh/__init__.py	10
LOW	framework/wazuh/core/wdb.py	12
LOW	framework/wazuh/core/results.py	5
LOW	framework/wazuh/core/utils.py	21
LOW	framework/wazuh/core/utils.py	29
LOW	framework/wazuh/core/agent.py	24
LOW	framework/wazuh/core/cluster/local_server.py	10
LOW	framework/wazuh/core/cluster/local_server.py	14
LOW	framework/wazuh/core/cluster/tests/test_local_client.py	15
LOW	framework/wazuh/core/cluster/tests/test_local_server.py	24
LOW	framework/wazuh/core/cluster/tests/test_server.py	18
LOW	framework/wazuh/core/tests/test_stats.py	7
LOW	framework/wazuh/core/tests/test_task.py	11
LOW	framework/wazuh/core/tests/test_mitre.py	14
LOW	framework/wazuh/core/tests/test_agent.py	16
LOW	framework/wazuh/core/tests/test_pyDaemonModule.py	8
LOW	framework/wazuh/core/tests/test_manager.py	14
LOW	framework/wazuh/core/indexer/disconnected_agents.py	1
LOW	…rk/wazuh/core/indexer/tests/test_credential_manager.py	7
LOW	framework/wazuh/tests/test_task.py	7
LOW	framework/wazuh/tests/test_manager.py	23
LOW	tests/integration/test_syscollector/conftest.py	20
LOW	tests/integration/test_syscollector/conftest.py	22
LOW	tests/integration/test_syscollector/conftest.py	22
LOW	tests/integration/test_syscollector/conftest.py	22
LOW	tests/integration/test_syscollector/conftest.py	22
LOW	…/test_configuration/test_syscollector_configuration.py	45
LOW	…agent_communication/test_agents_switching_protocols.py	11
LOW	…st_agent_communication/test_protocols_communication.py	12
LOW	…st_agent_communication/test_protocols_communication.py	16
LOW	…st_agent_communication/test_protocols_communication.py	19
LOW	…remoted/test_configurations/test_queue_size_too_big.py	10
LOW	…ed/test_configurations/test_invalid_connection_port.py	10
LOW	…est_remoted/test_configurations/test_valid_local_ip.py	18
LOW	…ed/test_configurations/test_rids_valid_closing_time.py	10
LOW	…ed/test_configurations/test_rids_valid_closing_time.py	12
LOW	…ed/test_configurations/test_rids_valid_closing_time.py	19
LOW	…ed/test_configurations/test_rids_valid_closing_time.py	22
LOW	…ed/test_configurations/test_rids_valid_closing_time.py	23
LOW	…t_remoted/test_configurations/test_valid_queue_size.py	10
LOW	…t_remoted/test_configurations/test_valid_queue_size.py	12
LOW	…t_remoted/test_configurations/test_valid_queue_size.py	19
LOW	…remoted/test_configurations/test_invalid_connection.py	10
LOW	…t_remoted/test_configurations/test_valid_connection.py	10
LOW	…est_configurations/test_invalid_connection_protocol.py	10
LOW	…t_remoted/test_configurations/test_invalid_local_ip.py	10
LOW	…t_remoted/test_configurations/test_invalid_local_ip.py	20
LOW	…/test_configurations/test_rids_invalid_closing_time.py	10
LOW	…/test_configurations/test_rids_invalid_closing_time.py	20
LOW	…/test_configurations/test_rids_invalid_closing_time.py	22
LOW	…/test_configurations/test_rids_invalid_closing_time.py	23
LOW	tests/integration/test_remoted/test_rids/test_rids.py	13
LOW	tests/integration/test_remoted/test_rids/test_config.py	15
LOW	…emoted/test_socket_communication/test_ping_pong_msg.py	16
LOW	…ation/test_sca/test_basic/test_validate_remediation.py	41
LOW	…/integration/test_sca/test_basic/test_mitre_payload.py	53
LOW	…egration/test_sca/test_basic/test_compliance_format.py	40
LOW	…egration/test_sca/test_basic/test_compliance_format.py	42
LOW	…egration/test_sca/test_basic/test_compliance_format.py	49
219 more matches not shown…

Redundant / Tautological Comments183 hits · 270 pts

Severity	File	Line	Snippet
LOW	tools/get_git_refs.sh	148	# Check if HEAD points to a branch
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	42	remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module
LOW	ruleset/sca/amazon/cis_amazon_linux_2023.yml	69	remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo
LOW	ruleset/sca/debian/cis_debian10.yml	35	remediation: "Run the following script to disable the cramfs module: If the module is available in the running kerne
LOW	ruleset/sca/debian/cis_debian10.yml	66	remediation: "Run the following script to disable the squashfs module: If the module is available in the running ker
LOW	ruleset/sca/debian/cis_debian10.yml	92	remediation: "Run the following script to disable the udf module: If the module is available in the running kernel:
LOW	ruleset/sca/debian/cis_debian10.yml	789	remediation: "Run the following script to disable the cramfs module: If the module is available in the running kerne
LOW	ruleset/sca/debian/cis_debian10.yml	1289	remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l
LOW	ruleset/sca/debian/cis_debian10.yml	1385	remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	38	remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	65	remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	789	remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	1401	remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l
LOW	ruleset/sca/rocky/cis_rocky_linux_9.yml	2110	remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	38	remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	65	remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	789	remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	1401	remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l
LOW	ruleset/sca/rocky/cis_rocky_linux_10.yml	2110	remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	39	remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	67	remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	791	remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	1450	remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	1549	remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba
LOW	ruleset/sca/almalinux/cis_alma_linux_10.yml	2235	remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	39	remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	67	remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	791	remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	1450	remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	1549	remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba
LOW	ruleset/sca/almalinux/cis_alma_linux_9.yml	2235	remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C
LOW	framework/scripts/tests/test_cluster_control.py	310	# Check if cluster is disabled and first condition
LOW	framework/wazuh/agent.py	942	# Check if group exists
LOW	framework/wazuh/agent.py	997	# Check if the group exists
LOW	framework/wazuh/agent.py	1054	# Check if agent and group exist
LOW	framework/wazuh/agent.py	1094	# Check if agent exists
LOW	framework/wazuh/agent.py	1152	# Check if group exists
LOW	framework/wazuh/manager.py	385	# Check if the configuration is valid
LOW	framework/wazuh/rbac/orm.py	2478	# Check if an upgrade is required
LOW	framework/wazuh/core/configuration.py	317	# Check if we have read the same filters before (we will need to merge them)
LOW	framework/wazuh/core/configuration.py	894	# Check if the group exists
LOW	framework/wazuh/core/configuration.py	955	# Check if the component is correct
LOW	framework/wazuh/core/results.py	407	# Check if error is already added
LOW	framework/wazuh/core/utils.py	237	# Check if every element in sort['fields'] is in allowed_sort_fields
LOW	framework/wazuh/core/utils.py	1796	# Check if configuration changes are allowed
LOW	framework/wazuh/core/agent.py	794	# Check if agent is active
LOW	framework/wazuh/core/agent.py	1145	# Check if the group already belongs to the agent
LOW	framework/wazuh/core/agent.py	1267	# Check if agent exists and the group exists
LOW	framework/wazuh/core/agent.py	1347	# Check if agent version is compatible with this feature
LOW	framework/wazuh/core/manager.py	176	# Check if configuration file exists
LOW	framework/wazuh/core/cluster/common.py	472	# Check if a new message was received.
LOW	framework/wazuh/core/cluster/master.py	512	# Check if an integrity_check has already been performed
LOW	framework/wazuh/core/cluster/cluster.py	200	# Check if recursive flag is set or root is actually the initial lookup directory.
LOW	framework/wazuh/tests/test_agent.py	830	# Check if the number of affected items matches the number of times `add_group_to_agent` was called
LOW	tests/integration/test_logcollector/conftest.py	103	# Write the file status
LOW	…tegration/test_authd/test_api_registration/conftest.py	27	# Check if specific values were set or set the defaults
LOW	…est_wazuh_db/test_groups/test_sync_agent_groups_get.py	100	# Check if it requires any special configuration
LOW	…est_wazuh_db/test_groups/test_sync_agent_groups_get.py	105	# Check if it requires the global hash.
LOW	…st_ambiguous_confs/test_whodata_works_over_realtime.py	167	# Write the file
LOW	…_redirection/test_windows_system_folder_redirection.py	149	# Write the file
123 more matches not shown…

Docstring Block Structure53 hits · 265 pts

Severity	File	Line	Snippet
HIGH	…ntegration/test_agentd/test_state/test_agentd_state.py	162	Request remoted_server the status of the agent Args: parameters: - expected_status: typ
HIGH	src/build.py	18	Process the command line arguments and executes the corresponding argument's utility. Args: - None
HIGH	src/ci/build_tools.py	32	Execute the command 'make clean' in the operating system. Args: - None Returns: - None
HIGH	src/ci/build_tools.py	61	Delete the contents of the external folder. Args: - None Returns: - None Raises:
HIGH	src/ci/build_tools.py	89	Delete a specific folder inside some module. Args: - moduleName(str): Main folder name. - addi
HIGH	src/ci/build_tools.py	132	Execute the command 'make clean-internals' in the operating system. Args: - None Returns:
HIGH	src/ci/build_tools.py	161	Execute the command 'make clean-windows' in the operating system. Args: - None Returns: -
HIGH	src/ci/build_tools.py	190	Clean the files generated in some module when it is built. Args: - moduleName(str): Library name to be
HIGH	src/ci/build_tools.py	222	Configure cmake command with specific configuration based on the parameters passed to the function. Args:
HIGH	src/ci/build_tools.py	278	Get a map with configured folders to be deleted. Args: - None Returns: - DELETE_FOLDER_DI
HIGH	src/ci/build_tools.py	294	Use make command in order to download dependencies and after that build them. Args: - targetName(s
HIGH	src/ci/build_tools.py	333	Build a library. Args: - moduleName(str): Library to be built. Returns: - None Raise
HIGH	src/ci/build_tools.py	367	Build project with flags. Args: - targetName(str): Build type to be built <
HIGH	src/ci/utils.py	49	Get current path. Args: - None Returns: - path(str): Current path. Raises: -
HIGH	src/ci/utils.py	65	Delete logs generates for a module. Args: - moduleName(str): Library to be cleaned. Returns:
HIGH	src/ci/utils.py	105	Find a file in some path. Args: - name(str): File to find. - path(str): Base path to find a fi
HIGH	src/ci/utils.py	130	Find a folder in some path. Args: - name(str): Folder to find. - path(str): Base path to find
HIGH	src/ci/utils.py	156	Return folders to be analyzed with AStyle coding style analysis tool. Args: - moduleName(str): Library
HIGH	src/ci/utils.py	193	Get directory path for a module. Args: - moduleName(str): Library to get the path of. Returns:
HIGH	src/ci/utils.py	212	Get directory path build for a module. Args: moduleName(str): Library to get the path of. Returns
HIGH	src/ci/utils.py	231	Get valid module list. Args: - None Returns: - MODULE_LIST(array): A list with valid modu
HIGH	src/ci/utils.py	247	Get valid module list. Args: - None Returns: - MODULE_LIST_STR(str): A list with valid mo
HIGH	src/ci/utils.py	263	Display a red message with the errors. Args: - msg(str): Message to show. Returns: - None
HIGH	src/ci/utils.py	279	Display a formatted green message. Args: - msg(str): Message to show. - module(str): Library u
HIGH	src/ci/utils.py	300	Display a message formatted from the HEADER_DIR map. Args: - moduleName(str): Library using in the mes
HIGH	src/ci/utils.py	318	Display a yellow message with some information. Args: - msg(str): Message to show. Returns:
HIGH	src/ci/utils.py	334	Display a message formatted from the HEADER_DIR map. Args: - moduleName(str): Library using in the mes
HIGH	src/ci/utils.py	352	Read a JSON path and convert to map. Args: - jsonFilePath(str): JSON path. Returns: - jso
HIGH	src/ci/utils.py	376	Get root path. Args: - None Returns: - path(str): Root path. Raises: - None
HIGH	src/ci/utils.py	392	Get possible build targets. Args: - None Returns: - TARGET_LIST(array): Target list
HIGH	src/ci/run_check.py	21	Check the coverage for a library being analyzed. Args: - output(str): Message to be shown in the stdou
HIGH	src/ci/run_check.py	64	Execute Address Sanitizer dynamic analysis tool using the test tool defined for a library. Args: -
HIGH	src/ci/run_check.py	110	Execute AStyle coding style analysis for the library code failing when one or more files need to be modified.
HIGH	src/ci/run_check.py	162	Execute AStyle coding style analysis tool for the library code formatting all needed files. Args:
HIGH	src/ci/run_check.py	195	Execute code coverage for a library unit tests. Args: - moduleName: Library to be analyzed using gcov
HIGH	src/ci/run_check.py	313	Execute cppcheck static analysis in the library code. Args: - moduleName: Library to be analyzed using
HIGH	src/ci/run_check.py	419	Execute scan-build for a defined target. Args: - targetName: Target to be analyzed using scan-build an
HIGH	src/ci/run_check.py	473	Execute test tool for a module with a configuration passed by parameters. Args: - moduleName(str): Lib
HIGH	src/ci/run_check.py	522	Execute test tool for a module with a configuration passed by parameters for Windows OS. Args: - m
HIGH	src/ci/run_check.py	663	Execute library tests using CTest with labels. Args: - moduleName: Library representing the tests to b
HIGH	src/ci/run_check.py	730	Results are taken in JSON format after running the test tool and validated using pytest. Args: - m
HIGH	src/ci/run_check.py	771	Execute all tests with valgrind tool in order to check memory leaks in the library code. Args: - m
HIGH	src/ci/tests/syscheckd/test_check_module.py	20	Find smokeTests inside the root path and return the complete path. Args: - moduleName(str): Library to
HIGH	src/ci/tests/syscheckd/test_check_module.py	40	Configure and format logging message. Args: - getModuleName(fixture): Return current module. Retu
HIGH	src/ci/tests/syscheckd/test_check_module.py	75	Search inside test tool output folder so it returns the root path and the child folders. Args: - s
HIGH	src/ci/tests/syscheckd/test_check_module.py	97	From directory name and their paths it creates a map in order to have all information in only structure.
HIGH	src/ci/tests/syscheckd/test_check_module.py	122	From directory name and their paths it creates a map in order to have all information in only structure. A
HIGH	src/ci/tests/syscheckd/test_check_module.py	149	Read file transaction input files and return an array with these information in JSON format. Args:
HIGH	src/ci/tests/syscheckd/test_check_module.py	176	Read registry key transaction input files and return an array with these information in JSON format. Args:
HIGH	src/ci/tests/syscheckd/test_check_module.py	203	Read registry value transaction input files and return an array with these information in JSON format. Arg
HIGH	src/ci/tests/syscheckd/test_check_module.py	229	Read registry value transaction input files and return an array with these information in JSON format. Arg
HIGH	src/ci/tests/syscheckd/test_check_module.py	261	Check result of action executed. Args: - result(map): A map with parsed result JSON. - configL
HIGH	src/ci/tests/syscheckd/test_check_module.py	283	Check result of transaction executed compared than input information. Args: - result(map): A map with

Self-Referential Comments61 hits · 190 pts

Severity	File	Line	Snippet
MEDIUM	tools/mitre/mitredb.py	758	# Create a database connection
MEDIUM	ruleset/sca/debian/cis_debian10.yml	118	remediation: "For specific configuration requirements of the /tmp mount for your environment, modify /etc/fstab or t
MEDIUM	ruleset/sca/sles/16/cis_sles16_linux.yml	119	remediation: "Create or update an entry for /tmp in either /etc/fstab OR in a systemd tmp.mount file: If /etc/fstab
MEDIUM	ruleset/sca/sles/15/cis_sles15_linux.yml	119	remediation: "Create or update an entry for /tmp in either /etc/fstab OR in a systemd tmp.mount file: If /etc/fstab
MEDIUM	ruleset/sca/ubuntu/cis_ubuntu20-04.yml	43	remediation: "For specific configuration requirements of the /tmp mount for your environment, modify /etc/fstab or t
MEDIUM	framework/wazuh/manager.py	388	# Create a backup of the current configuration before attempting to replace it
MEDIUM	framework/wazuh/rbac/orm.py	1603	# Create a role-policy relationship if both exist
MEDIUM	framework/wazuh/rbac/orm.py	1765	# Create a role-policy relationship if both exist
MEDIUM	framework/wazuh/rbac/orm.py	1946	# Create a rule-role relationship if both exist
MEDIUM	framework/wazuh/rbac/orm.py	2108	# Create the relationships
MEDIUM	framework/wazuh/core/cluster/master.py	325	# Create an event to wait for the response.
MEDIUM	framework/wazuh/core/cluster/master.py	848	# Create a child process to run the task.
MEDIUM	tests/integration/conftest.py	614	# Create the SocketControllers
MEDIUM	…ntegration/test_wazuh_db/test_backup/test_db_backup.py	142	# Create the database backups and assert they have been created correctly
MEDIUM	…asic_usage/test_orphan_promote_after_config_removal.py	192	# Create the realtime-tracked file. inotify queues an "added" event;
MEDIUM	…es/test_invalid_characters/test_non_utf8_characters.py	168	# Create the file with the invalid byte sequence as part of the file name
MEDIUM	…m/test_files/test_report_changes/test_large_changes.py	188	# Create the file and and capture the event.
MEDIUM	…es/test_report_changes/test_report_changes_and_diff.py	180	# Create the file and and capture the event.
MEDIUM	…_files/test_report_changes/test_report_deleted_diff.py	170	# Create the file and and capture the event.
MEDIUM	packages/macos/package_files/preinstall.sh	172	# Creating the group
MEDIUM	packages/macos/package_files/preinstall.sh	187	# Creating the user
MEDIUM	packages/externals/external_sources.sh	3	# This file is sourced by packages/externals/build_external.sh inside the package
MEDIUM	api/test/integration/conftest.py	327	"""This function is responsible for setting up the Docker environment necessary for every test.
MEDIUM	wodles/gcloud/tests/test_subscriber.py	124	# Create a large list of fake messages
MEDIUM	wodles/azure/tests/db/test_orm.py	60	# Create the tables
MEDIUM	wodles/aws/subscribers/s3_log_handler.py	147	# Define the regex pattern for invalid CSV header characters
MEDIUM	src/init/darwin-addusers.sh	72	# Creating the groups.
MEDIUM	src/init/darwin-addusers.sh	82	# Creating the users.
MEDIUM	…ared_modules/indexer_connector/qa/test_efficacy_log.py	485	# Create the index and try to insert a document with old mapping, this should fail and the element queue in the pers
MEDIUM	…ared_modules/indexer_connector/qa/test_efficacy_log.py	589	# Create the index and try to insert a document with old mapping, this should fail and the element queue in the pers
MEDIUM	…ty_scanner/testtool/versionMatcher/version_verifier.sh	103	# Define the callback function based on the Linux distribution
MEDIUM	…uh_modules/inventory_sync/qa/wazuh_agent_controller.py	325	# Create the event structure with identifier and binary data
MEDIUM	…s/inventory_sync/qa/test_inventory_sync_integration.py	393	# Create the payload in the format expected by inventory_sync
MEDIUM	src/engine/tools/devContainer/e2e/init.sh	170	# Create the output directory if it doesn't exist (This never happens on devContainer context)
MEDIUM	…s/engine-suite/src/engine_private/cmds/ns/import_ns.py	28	# Create the api request
MEDIUM	…ools/engine-suite/src/engine_private/cmds/cm/delete.py	16	# Create the api request
MEDIUM	…/tools/engine-suite/src/engine_private/cmds/cm/list.py	15	# Create the api request
MEDIUM	…gine-suite/src/engine_private/cmds/cm/policy_upsert.py	29	# Create the api request
MEDIUM	…gine-suite/src/engine_private/cmds/cm/policy_delete.py	15	# Create the api request
MEDIUM	…e/tools/engine-suite/src/engine_private/cmds/cm/get.py	16	# Create the api request
MEDIUM	…ools/engine-suite/src/engine_private/cmds/cm/upsert.py	30	# Create the api request
MEDIUM	…ine-suite/src/engine_public/cmds/cm/policy_validate.py	26	# Create the api request
MEDIUM	…tools/engine-suite/src/engine_public/cmds/cm/upsert.py	30	# Create the api request
MEDIUM	…ls/engine-suite/src/engine_test/cmds/session_reload.py	21	# Create the request
MEDIUM	…tools/engine-suite/src/engine_test/cmds/session_get.py	20	# Create the request
MEDIUM	…ngine-suite/src/engine_test/cmds/session_delete_all.py	19	# Create the request
MEDIUM	…ngine-suite/src/engine_test/cmds/session_delete_all.py	32	# Create the list of sessions to delete
MEDIUM	…ls/engine-suite/src/engine_test/cmds/session_delete.py	21	# Create the request
MEDIUM	…ools/engine-suite/src/engine_test/cmds/session_list.py	19	# Create the request
MEDIUM	…tools/engine-suite/src/engine_test/cmds/session_add.py	22	# Create the request
MEDIUM	…tools/engine-suite/src/engine_test/conf/integration.py	110	# Create a new instance with the extracted values
MEDIUM	…ne/tools/engine-suite/src/engine_router/cmds/update.py	21	# Create the request
MEDIUM	…ne/tools/engine-suite/src/engine_router/cmds/delete.py	18	# Create the request
MEDIUM	…ne/tools/engine-suite/src/engine_router/cmds/ingest.py	18	# Create the request
MEDIUM	…gine/tools/engine-suite/src/engine_router/cmds/list.py	18	# Create the request
MEDIUM	…ngine/tools/engine-suite/src/engine_router/cmds/add.py	21	# Create the request
MEDIUM	…ne/tools/engine-suite/src/engine_router/cmds/reload.py	20	# Create the request
MEDIUM	…ngine/tools/engine-suite/src/engine_router/cmds/get.py	19	# Create the request
MEDIUM	…ngine/test/integration_tests/tester/steps/api_steps.py	247	# Create the session pointing to namespaceId == policy_name
MEDIUM	…ngine/test/integration_tests/router/steps/api_steps.py	239	# Create the route pointing to namespaceId == policy_name
1 more matches not shown…

Cross-Language Confusion28 hits · 166 pts

Severity	File	Line	Snippet
HIGH	framework/wazuh/core/wdb.py	258	if v == "(null)":
HIGH	framework/wazuh/core/wdb.py	283	if '"(null)"' in string:
HIGH	framework/wazuh/core/wdb.py	284	# To prevent empty dictionaries, clean data if there was any `"(null)"` within the string
HIGH	framework/wazuh/core/wazuh_queue.py	21	String indicating the agent_id if the message will be sent to a specific agent, or '(null)' if it will be sent
HIGH	framework/wazuh/core/wazuh_queue.py	110	- (msg_to_agent) [] ANN (null) restart-wazuh0 arg1 arg2 arg3
HIGH	framework/wazuh/core/wazuh_queue.py	113	- (msg_to_agent) [] ANN (null) !test.sh arg1 arg2 arg3
HIGH	framework/wazuh/core/wazuh_queue.py	149	str_agent_id = '(null)'
HIGH	framework/wazuh/core/cluster/common.py	1143	# Regex to find any character different to '\x00' (null) inside a string.
HIGH	framework/wazuh/core/cluster/common.py	545	self.push(msg)
HIGH	framework/wazuh/core/cluster/common.py	874	self.push(msg)
HIGH	framework/wazuh/core/cluster/common.py	1134	Expected length of bytearray. If any bytearray has this length and its content is null, it will be deleted.
HIGH	framework/wazuh/core/cluster/tests/test_common.py	485	handler.push(b"message")
HIGH	framework/wazuh/core/tests/test_wdb.py	162	Tests '(null)' values are removed from the resulting dictionary
HIGH	framework/wazuh/core/tests/test_wdb.py	165	nulls_string = b' [{"a": "a", "b": "(null)", "c": [1, 2, 3], "d": {"e": "(null)"}}]'
HIGH	framework/wazuh/core/tests/test_wdb.py	273	'[{"key1": "value1"}, {"invalid": "(null)"}]',
HIGH	framework/wazuh/core/indexer/max_version_components.py	158	if (ctx._source.wazuh == null) { ctx._source.wazuh = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	159	if (ctx._source.wazuh.agent == null) { ctx._source.wazuh.agent = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	161	if (ctx._source.wazuh.agent.groups != null && ctx._source.wazuh.agent.groups == params.groups) {
HIGH	framework/wazuh/core/indexer/max_version_components.py	168	if (ctx._source.state == null) { ctx._source.state = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	274	if (ctx._source.wazuh == null) { ctx._source.wazuh = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	275	if (ctx._source.wazuh.agent == null) { ctx._source.wazuh.agent = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	276	if (ctx._source.wazuh.cluster == null) { ctx._source.wazuh.cluster = [:]; }
HIGH	framework/wazuh/core/indexer/max_version_components.py	283	if (ctx._source.state == null) { ctx._source.state = [:]; }
HIGH	…e/tools/engine-metrics/src/engine_metrics/templates.py	298	if (chartId && data[name]) {
HIGH	…e/tools/engine-metrics/src/engine_metrics/templates.py	299	data[name].x.push(now);
HIGH	…e/tools/engine-metrics/src/engine_metrics/templates.py	300	data[name].y.push(metric.value);
HIGH	…e/tools/engine-metrics/src/engine_metrics/templates.py	314	sd.x.push(now);
HIGH	…e/tools/engine-metrics/src/engine_metrics/templates.py	315	sd.y.push(metric.value);

Verbosity Indicators50 hits · 94 pts

Severity	File	Line	Snippet
LOW	…asic_usage/test_orphan_promote_after_config_removal.py	188	# Step 1: agent is up via daemons_handler. The baseline scan has
LOW	…asic_usage/test_orphan_promote_after_config_removal.py	201	# Step 2: stop the agent, drop the realtime <directories> rule from
LOW	…dules/sync_protocol/tests/test_agent_sync_protocol.cpp	5430	// Step 1: Clear all DataContext
LOW	…dules/sync_protocol/tests/test_agent_sync_protocol.cpp	5436	// Step 2: Fetch pending DataValue items (onlyDataValues=true)
LOW	…sync_protocol/tests/test_sync_protocol_integration.cpp	284	// Step 1: Persist DataValue items
LOW	…sync_protocol/tests/test_sync_protocol_integration.cpp	293	// Step 2: Persist DataContext items
LOW	…sync_protocol/tests/test_sync_protocol_integration.cpp	302	// Step 3: Verify we have both types
LOW	…sync_protocol/tests/test_sync_protocol_integration.cpp	306	// Step 4: Clear all DataContext
LOW	…sync_protocol/tests/test_sync_protocol_integration.cpp	309	// Step 5: Fetch only DataValues
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	292	// Step 1: Send Start message with mode ModuleCheck
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	302	// Step 2: Send ChecksumModule message
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	312	// Step 3: Send End message and wait for EndAck
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	367	// Step 1: Send Start message and wait for StartAck
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	370	// Step 2: Send End message and wait for EndAck (no Data messages)
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	429	// Step 1: Send Start message with the indices and size
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	432	// Step 2: Send DataClean message for each index
LOW	…ared_modules/sync_protocol/src/agent_sync_protocol.cpp	435	// Step 3: Send End message and wait for EndAck
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1421	// Step 1: Get version from each module
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1474	// Step 2: Calculate new version
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1482	// Step 3: Set new version on all modules
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1532	// Step 1: Pause all coordination modules
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1544	// Step 2: Get versions, calculate new version, and set it on all modules
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1553	// Step 3: Trigger flush while still paused.
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1563	// Step 4: Resume all modules immediately. The pause window is now minimized to:
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1570	// Step 5: Wait for flush completion before handing the new version to the manager.
LOW	…les/agent_info/agent_info_impl/src/agent_info_impl.cpp	1583	// Step 6: Build indices list based on enabled modules and synchronize.
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	2566	// Step 0: Clear any existing DataContext from previous scans
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	2570	// Step 1: Fetch pending DataValue items from syscollector_vd_sync.db
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	2578	// Step 2: Build exclusion sets - IDs of items already submitted as DataValue
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	2587	// Step 3: Determine what DataContext tables are needed based on platform rules
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	2605	// Step 4: Fetch and submit DataContext for each required table
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	3424	// Step 1: Generate stateful DELETE events for each excess record
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	3456	// Step 2: Reset sync flag to 0 for these records
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	4708	// Step 1: Delete all rows in a transaction
LOW	src/wazuh_modules/syscollector/src/syscollectorImp.cpp	4737	// Step 2: Re-insert rows with new sync value in a transaction to force commit
LOW	src/logcollector/src/logcollector.c	1533	/* Because Windows cache's files, we need to check if the file
LOW	src/engine/test/acceptance_test/acceptance_test.sh	434	# Step 1: Stop manager
LOW	src/engine/test/acceptance_test/acceptance_test.sh	437	# Step 2: Start analysisd
LOW	src/engine/test/acceptance_test/acceptance_test.sh	440	# Step 3: Wait for engine ready
LOW	src/engine/test/acceptance_test/acceptance_test.sh	443	# Step 4: Start resource monitor
LOW	src/engine/test/acceptance_test/acceptance_test.sh	446	# Step 5: Grace period before benchmark
LOW	src/engine/test/acceptance_test/acceptance_test.sh	466	# Step 7: Grace period after benchmark
LOW	src/engine/test/acceptance_test/acceptance_test.sh	470	# Step 8: Stop monitor & analysisd
LOW	src/engine/source/api/cmcrud/src/handlers.cpp	439	// Step 1: Import into temp namespace (validates structure).
LOW	src/engine/source/api/cmcrud/src/handlers.cpp	449	// Step 2: If has integrations, post a tester entry to validate
LOW	src/engine/source/api/cmcrud/src/handlers.cpp	470	// Step 3: Decide what to do with the persistent test session.
LOW	src/engine/source/iockvdb/src/manager.cpp	424	// Step 1: Atomically transfer instance from source to target
LOW	src/engine/source/iockvdb/src/manager.cpp	428	// Step 2: Enqueue old target instance for safe deletion
LOW	src/engine/source/router/src/router.cpp	169	// Step 1: Create new environment WITHOUT any lock
LOW	src/engine/source/router/src/router.cpp	181	// Step 2: Atomically swap the environment

AI Slop Vocabulary34 hits · 64 pts

Severity	File	Line	Snippet
MEDIUM	ruleset/sca/windows/cis_win2019.yml	2058	# 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location
MEDIUM	ruleset/sca/windows/cis_win2019.yml	4868	# 18.6.11.4 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto
MEDIUM	ruleset/sca/windows/cis_win2019.yml	4901	remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK
MEDIUM	ruleset/sca/windows/cis_win2019.yml	8380	impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive
MEDIUM	ruleset/sca/windows/cis_win2019.yml	9511	description: "This policy setting specifies whether computers in your environment will receive security updates from
MEDIUM	ruleset/sca/windows/cis_win2012_non_r2.yml	2141	# 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location
MEDIUM	ruleset/sca/windows/cis_win2012_non_r2.yml	4721	# 18.6.11.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto
MEDIUM	ruleset/sca/windows/cis_win2012_non_r2.yml	4783	remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK
MEDIUM	ruleset/sca/windows/cis_win2012_non_r2.yml	7204	impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive
MEDIUM	ruleset/sca/windows/cis_win2012_non_r2.yml	8172	description: 'This policy setting specifies whether computers in your environment will receive security updates from
MEDIUM	ruleset/sca/windows/cis_win2012r2.yml	1985	# 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location
MEDIUM	ruleset/sca/windows/cis_win2012r2.yml	4503	# 18.6.11.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto
MEDIUM	ruleset/sca/windows/cis_win2012r2.yml	4536	remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK
MEDIUM	ruleset/sca/windows/cis_win2012r2.yml	7060	impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive
MEDIUM	ruleset/sca/windows/cis_win2012r2.yml	8110	description: 'This policy setting specifies whether computers in your environment will receive security updates from
MEDIUM	ruleset/sca/windows/cis_win2016.yml	1871	# 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location
MEDIUM	ruleset/sca/windows/cis_win2016.yml	4750	# 18.6.11.4 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto
MEDIUM	ruleset/sca/windows/cis_win2016.yml	4809	remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK
MEDIUM	ruleset/sca/windows/cis_win2016.yml	8112	impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive
MEDIUM	ruleset/sca/windows/cis_win2016.yml	9242	description: 'This policy setting specifies whether computers in your environment will receive security updates from
MEDIUM	framework/wazuh/core/mitre.py	878	"""This function loads the MITRE data in order to speed up the use of the Framework function.
MEDIUM	framework/wazuh/core/cluster/tests/test_worker.py	196	"""Mock method in order to obtain a particular output."""
MEDIUM	framework/wazuh/core/cluster/tests/test_worker.py	232	"""Mock method in order to obtain a particular output."""
MEDIUM	framework/wazuh/tests/data/schema_mitre_test.sql	259	INSERT INTO mitigation VALUES('course-of-action--aeff5887-8f9e-48d5-a523-9b395e2ce80a','Credential Dumping Mitigation',r
MEDIUM	framework/wazuh/tests/data/schema_mitre_test.sql	518	INSERT INTO use VALUES('relationship--dc10e96f-1d3c-4ab9-8df6-acdc8238ec6c','intrusion-set--bef4c620-0787-42a8-a96d-b7eb
MEDIUM	wodles/aws/tests/test_guardduty.py	136	"""Test 'send_event' method makes the necessary calls in order to send the event to Analysisd."""
MEDIUM	wodles/aws/tests/test_vpcflow.py	173	"""Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files.
MEDIUM	wodles/aws/tests/test_aws_bucket.py	609	"""Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files."""
MEDIUM	wodles/aws/tests/test_aws_bucket.py	631	"""Test 'send_event' method makes the necessary calls in order to send an event to Analysisd."""
MEDIUM	wodles/aws/tests/test_aws_bucket.py	791	"""Test 'check_bucket' method makes the necessary method calls in order to verify that the bucket is not empty."""
MEDIUM	wodles/aws/tests/test_aws_bucket.py	1131	"""Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files."""
MEDIUM	wodles/aws/tests/test_cloudwatchlogs.py	81	"""Test 'get_alerts' method makes the expected calls in order to fetch the events and send them to Analysisd.
MEDIUM	wodles/aws/tests/test_cloudwatchlogs.py	125	"""Test 'remove_aws_log_stream' method makes the necessary calls in order to remove the specified log stream
MEDIUM	src/engine/test/acceptance_test/acceptance_test.sh	3	# acceptance_test.sh – Engine benchmark harness

Fake / Example Data35 hits · 30 pts

Severity	File	Line	Snippet
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	79	{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	85	{"address", {{"street", "123 Main St"}, {"city", "New York"}}}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	97	nlohmann::json message = {{"name", "John Doe"}, {"age", "not a number"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	110	nlohmann::json message = {{"name", "John Doe"}, {"age", "30"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	123	nlohmann::json message = {{"name", "John Doe"}, {"age", 30.5}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	137	{"name", "John Doe"}, {"age", 30}, {"extra_field", "not allowed"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	152	{"name", "John Doe"}, {"age", 30}, {"extra_field", nullptr}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	166	{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	168	{"address", {{"street", "123 Main St"}, {"city", "New York"}, {"extra", nullptr}}}
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	183	{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	185	{"address", {{"street", "123 Main St"}, {"city", "New York"}, {"extra", "not allowed"}}}
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	199	nlohmann::json message = {{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	201	{"address", {{"street", "123 Main St"}, {"city", "New York"}}}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	214	nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", 1735468800000}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	227	nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", 1735468800}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	240	nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", "2025-12-29T10:00:00.000Z"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	253	nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", "123"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	266	nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", true}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	298	{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	313	std::string messageStr = R"({"name": "John Doe", "age": 30, "email": "john@example.com"})";
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	325	std::string messageStr = R"({"name": "John Doe", "age": 30,})";
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	365	nlohmann::json message = {{"name", nlohmann::json::array({"John Doe", "Jane Doe"})}, {"age", 30}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	365	nlohmann::json message = {{"name", nlohmann::json::array({"John Doe", "Jane Doe"})}, {"age", 30}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	391	nlohmann::json message = {{"name", "John Doe"}, {"age", nlohmann::json::array({30, 31, 32})}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	405	{"name", "John Doe"},
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	456	nlohmann::json message = {{"name", "John Doe"}, {"age", nlohmann::json::array({30, "invalid"})}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	470	nlohmann::json message = {{"name", "John Doe"}, {"is_active", "true"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	483	nlohmann::json message = {{"name", "John Doe"}, {"is_active", "false"}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	496	nlohmann::json message = {{"name", "John Doe"}, {"is_active", 1}};
LOW	…odules/schema_validator/tests/schemaValidator_test.cpp	509	nlohmann::json message = {{"name", "John Doe"}, {"is_active", "yes"}};
LOW	src/engine/source/yml/test/src/unit/yml_test.cpp	80	"street": "123 Main St",
LOW	src/engine/source/yml/test/src/unit/yml_test.cpp	101	street: "123 Main St"
LOW	src/engine/source/yml/test/src/unit/yml_test.cpp	146	"street": "123 Main St",
LOW	src/engine/source/yml/test/src/unit/yml_test.cpp	183	"street": "123 Main St",
LOW	src/engine/source/yml/test/src/unit/yml_test.cpp	213	"street": "123 Main St",

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet
CRITICAL	wodles/azure/azure_services/storage.py	15	from azure.core.exceptions import AzureError, ClientAuthenticationError, HttpResponseError, ResourceExistsError, \
CRITICAL	wodles/azure/tests/azure_services/test_storage.py	18	from azure.core.exceptions import AzureError, ClientAuthenticationError, HttpResponseError, ResourceModifiedError

Overly Generic Function Names9 hits · 12 pts

Severity	File	Line	Snippet
LOW	…wazuh/core/cluster/hap_helper/tests/test_hap_helper.py	57	def helper(self, proxy_mock: mock.MagicMock, dapi_mock: mock.MagicMock):
LOW	framework/wazuh/core/tests/test_decorators.py	9	def test_function():
LOW	framework/wazuh/core/tests/test_decorators.py	21	def test_function(a, b, c=0):
LOW	framework/wazuh/core/tests/test_decorators.py	32	async def test_function():
LOW	framework/wazuh/core/tests/test_decorators.py	46	async def test_function(a, b):
LOW	framework/wazuh/core/tests/test_decorators.py	58	def test_function():
LOW	framework/wazuh/core/tests/test_decorators.py	68	def test_function():
LOW	wodles/gcloud/integration.py	79	def process_data(self):
LOW	wodles/gcloud/buckets/bucket.py	233	def process_data(self):

Example Usage Blocks4 hits · 7 pts

Severity	File	Line	Snippet
LOW	tools/purge_wazuh.sh	5	# Usage:
LOW	src/engine/tools/devContainer/scripts/pr-clang.sh	8	# Usage:
LOW	…gine/tools/devContainer/scripts/toggle_event_dumper.sh	4	# Usage:
LOW	src/engine/internal_packages/debs/SPECS/build_venv.sh	10	# Usage:

Score History

Severity Breakdown

Pattern Findings