Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
This report summarizes scanner evidence for wazuh/wazuh, a C++ project with 17,197 GitHub stars. SynthScan examined 1,872,912 lines of code across 6160 source files, recording 6859 pattern matches distributed across 24 syntactic categories. The legacy adjusted pattern signal is 5.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 4738 finding(s).
Are imports declared and package/API names verified? 407 finding(s).
Are wrappers, guards, and repeated structures necessary? 4186 finding(s).
Which changes need focused human review? 6859 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6859 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tools/manager_benchmark/cleanup_agents.sh | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/cleanup_agents.sh | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/run_matrix.sh | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/run_matrix.sh | 30 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 86 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 355 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 357 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 448 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/result_summary.py | 450 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/run_benchmark.sh | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/run_benchmark.sh | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/scrape_metrics.sh | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/scrape_metrics.sh | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/indexer_control.sh | 2 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/indexer_control.sh | 18 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/prepare_manager.sh | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/prepare_manager.sh | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/prepare_manager.sh | 292 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/manager_benchmark/prepare_manager.sh | 294 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 125 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 127 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 169 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 171 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 220 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 222 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 465 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/manager_benchmark/tests/test_result_summary.py | 473 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/reinstall-cmake.sh | 2 | #------------------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/reinstall-cmake.sh | 5 | #------------------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/fix-dind.sh | 24 | # ── 1. Redirect iptables tooling to the nftables-backed binaries ────────────── | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/fix-dind.sh | 28 | # ── 2. Configure dockerd to use the nftables firewall backend ───────────────── | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/fix-dind.sh | 52 | # ── 3. Restart dockerd from a clean state ──────────────────────────────────── | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/fix-dind.sh | 75 | # ── 4. Wait until the daemon is ready ──────────────────────────────────────── | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/reinstall-cmake.sh | 2 | #------------------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/.devcontainer/reinstall-cmake.sh | 5 | #------------------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/pr-clang.sh | 4 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/pr-clang.sh | 11 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 82 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 84 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 120 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 122 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 141 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | tools/devContainer/scripts/pr-clang.sh | 143 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 96 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 104 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 113 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/devContainer/scripts/monitor.py | 115 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 50 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 52 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 313 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 315 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 427 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/devContainer/scripts/monitor.py | 433 | # --------------------------------------------------------------------------- | COMMENT |
| 866 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 49 | def test_delta_attributes_work_to_this_run(samples_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 57 | def test_peak_is_kept_for_gauges_that_come_back_down(samples_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 63 | def test_histograms_get_no_delta(samples_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 72 | def test_failed_scrape_is_counted_but_not_aggregated(samples_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 81 | def test_every_source_in_the_file_is_aggregated(samples_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 89 | def test_missing_samples_file_is_not_an_error(tmp_path): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 104 | def test_all_process_csvs_are_aggregated(tmp_path): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 120 | def test_missing_monitor_dir_is_not_an_error(tmp_path): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 128 | def test_verdict_is_condensed_not_copied(): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 137 | def test_scenario_without_assertions_did_not_pass_by_default(): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 143 | def test_inputs_are_named_relative_to_the_run_directory(tmp_path): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 162 | def test_inputs_skip_what_the_run_does_not_have(tmp_path): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 203 | def test_summary_and_charts_agree_on_the_same_file(two_runs_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 213 | def test_summary_names_the_run_it_aggregated(two_runs_file): | CODE |
| LOW⚡ | tools/manager_benchmark/tests/test_result_summary.py | 474 | def test_a_file_with_no_run_marker_says_it_is_not_a_samples_file(tmp_path, caplog): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 189 | def test_reused_label_reports_the_last_run_not_the_sum(two_runs_file): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 243 | def test_a_level_gets_no_delta(typed_file): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 256 | def test_a_counter_gets_its_delta(typed_file): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 263 | def test_text_keeps_its_value(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 283 | def test_large_counters_stay_exact(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 303 | def test_a_counter_reset_is_counted_not_negated(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 318 | def test_an_undeclared_series_is_a_level_however_it_moves(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 337 | def test_remoted_metrics_are_classified_from_the_declared_table(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 360 | def test_declared_type_beats_what_the_readings_happen_to_do(typed_file): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 367 | def test_a_metric_registered_mid_run_is_classified_by_its_type(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 393 | def test_a_disabled_histogram_is_left_out_of_the_summary(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 413 | def test_remoted_classifies_from_the_table_even_without_a_manifest(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 430 | def test_the_file_wins_over_the_static_table(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 443 | def test_the_projection_and_the_summary_agree_across_a_gap(tmp_path): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 489 | def test_a_run_that_scraped_nothing_is_told_apart_from_an_unreadable_file(tmp_path, caplog): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 502 | def test_readings_without_a_marker_warn_that_they_cannot_be_scoped(tmp_path, caplog): | CODE |
| LOW | tools/manager_benchmark/tests/test_result_summary.py | 517 | def test_a_readable_run_warns_about_nothing(samples_file, caplog): | CODE |
| LOW | tools/mitre/mitredb.py | 570 | def parse_json_ext_references(data_object): | CODE |
| LOW | tools/devContainer/scripts/monitor.py | 924 | def extract_manager_log_events(output_dir: str, | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 168 | def plot_multiline_timeseries( | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 1288 | def _plot_with_total_and_extra_components( | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 1378 | def _plot_grouped_disk_growth( | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 1606 | def _plot_agent_cache_overview( | CODE |
| LOW⚡ | tools/devContainer/scripts/bench_samples.py | 578 | def _invsync_shard_aggregates(metrics: dict) -> dict[str, Any]: | CODE |
| LOW | …devContainer/scripts/tests/test_monitor_integration.py | 16 | def test_monitor_finishes_inflight_scrape_before_closing(tmp_path, monkeypatch, fail_query): | CODE |
| LOW⚡ | …devContainer/scripts/tests/test_monitor_integration.py | 95 | def test_charts_load_both_monitor_layouts(tmp_path, charts, subdir): | CODE |
| LOW⚡ | …devContainer/scripts/tests/test_monitor_integration.py | 102 | def test_charts_prefer_orchestrated_samples(tmp_path, charts): | CODE |
| LOW⚡ | …devContainer/scripts/tests/test_monitor_integration.py | 108 | def test_charts_with_no_samples(tmp_path, charts): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 101 | def test_loop_writes_the_samples_file(tmp_path, metrics_socket): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 119 | def test_the_projection_of_what_was_collected_has_the_aliased_columns(tmp_path, metrics_socket): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 135 | def test_meta_line_is_written_once(tmp_path, metrics_socket): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 148 | def test_absent_socket_degrades_to_failed_scrapes(tmp_path): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 162 | def test_concurrent_sources_do_not_interleave_lines(tmp_path, metrics_socket): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 230 | def test_http_error_is_a_failed_scrape(tmp_path, bad_endpoint, status, body, why): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_collect.py | 249 | def test_a_body_that_is_not_a_json_object_is_a_failed_scrape(tmp_path, bad_endpoint): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_collect.py | 259 | def test_failed_scrapes_never_write_a_meta_line(tmp_path, bad_endpoint): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_collect.py | 270 | def test_standalone_entry_point_honours_the_same_contract(tmp_path, metrics_socket): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 287 | def test_standalone_entry_point_records_an_unreachable_endpoint(tmp_path): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 323 | def test_a_metric_registered_mid_run_gets_a_manifest(tmp_path): | CODE |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 345 | def test_an_unchanged_manifest_is_not_rewritten(tmp_path, metrics_socket): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_samples.py | 106 | def test_metrics_array_extraction_keeps_unaliased_metrics(invsync_dump): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_samples.py | 142 | def test_analysisd_extraction_flattens_spaces(analysisd_dump): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_samples.py | 150 | def test_remoted_extraction_flattens_nested_document(remoted_dump): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_samples.py | 160 | def test_a_metric_never_observed_has_no_column(invsync_dump, tmp_path): | CODE |
| LOW⚡ | tools/devContainer/scripts/tests/test_bench_samples.py | 202 | def test_sample_line_omits_empty_histograms(): | CODE |
| 2333 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install.sh | 281 | # postinst: seed rbac.db with generated Server API passwords, store the indexer credential in | COMMENT |
| LOW | tools/purge_wazuh.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/cleanup_agents.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/run_matrix.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/run_matrix.sh | 21 | # each, to compare the two first-contact paths on one machine. | COMMENT |
| LOW | tools/manager_benchmark/run_matrix.sh | 81 | "fim_agent agent scenarios/real_fim_first_sync_ubuntu.json" | COMMENT |
| LOW | tools/manager_benchmark/run_benchmark.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/run_benchmark.sh | 21 | # must pass it explicitly. There is no node knob: a session declares no cluster node. | COMMENT |
| LOW | tools/manager_benchmark/run_benchmark.sh | 41 | # bootstrap and any `enroll_https` step (scenarios/enroll_https.json) present, as minted | COMMENT |
| LOW | tools/manager_benchmark/scrape_metrics.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/indexer_control.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/prepare_manager.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/manager_benchmark/prepare_manager.sh | 21 | # | COMMENT |
| LOW | tools/manager_benchmark/prepare_manager.sh | 41 | # and removing etc/authd.pass -- which the legacy bootstrap needs, since the | COMMENT |
| LOW | …r_benchmark/tool_simulator/internal/metrics/metrics.go | 21 | // durable vd_scan task and the scan runs afterward (docu/14-scan-vd.md). ScanOther | COMMENT |
| LOW | …r_benchmark/tool_simulator/internal/metrics/metrics.go | 241 | } | COMMENT |
| LOW | …nager_benchmark/tool_simulator/internal/wire/prefix.go | 1 | package wire | COMMENT |
| LOW | …nager_benchmark/tool_simulator/internal/wire/enroll.go | 21 | // issues none. | COMMENT |
| LOW | …ger_benchmark/tool_simulator/internal/runner/runner.go | 21 | "github.com/wazuh/wazuh/tools/manager_benchmark/tool_simulator/internal/wire" | COMMENT |
| LOW | …ger_benchmark/tool_simulator/internal/runner/runner.go | 61 | SenderVer string | COMMENT |
| LOW | …er_benchmark/tool_simulator/internal/runner/session.go | 21 | // | COMMENT |
| LOW | …nager_benchmark/tool_simulator/internal/runner/scan.go | 1 | package runner | COMMENT |
| LOW | …ager_benchmark/tool_simulator/internal/runner/agent.go | 21 | client *wire.Client | COMMENT |
| LOW | …ger_benchmark/tool_simulator/internal/scanvd/scanvd.go | 1 | // Package scanvd sends the on-demand Vulnerability Detection re-scan request an | COMMENT |
| LOW | …_benchmark/tool_simulator/internal/source/documents.go | 21 | COMMENT | |
| LOW | …ark/tool_simulator/internal/enrollhttps/enrollhttps.go | 1 | // Package enrollhttps enrolls a brand-new agent over POST /enroll with an | COMMENT |
| LOW | …ark/tool_simulator/internal/enrollhttps/enrollhttps.go | 61 | COMMENT | |
| LOW | …er_benchmark/tool_simulator/internal/scenario/types.go | 221 | // Assertion is one expectation on a final counter: operator -> value, with | COMMENT |
| LOW | …r_benchmark/tool_simulator/internal/cacerts/cacerts.go | 1 | // Package cacerts fetches the CA that signs the manager's HTTPS listener | COMMENT |
| LOW | …r_benchmark/tool_simulator/internal/cacerts/cacerts.go | 41 | // ErrProtocol signals a run-invalidating answer: a 200 whose body is not a PEM | COMMENT |
| LOW | …ager_benchmark/tool_simulator/internal/engine/batch.go | 1 | // Package engine frames log events into the H/E batch remoted forwards to the | COMMENT |
| LOW | tools/testing/enrollment-simulator/src/simulator.cpp | 1 | #include "simulator.h" | COMMENT |
| LOW | tools/testing/enrollment-simulator/src/simulator.h | 1 | #pragma once | COMMENT |
| LOW | tools/devContainer/.devcontainer/fix-dind.sh | 1 | #!/usr/bin/env sh | COMMENT |
| LOW | tools/devContainer/scripts/clean-unused-containers.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/scripts/monitor.py | 81 | # remoted's C++ module publishes its own metrics on a manager-local admin socket, served by | COMMENT |
| LOW | tools/devContainer/scripts/monitor.py | 821 | # Everything the retired inventory_sync module used to log ("InventorySync queue | COMMENT |
| LOW | tools/devContainer/scripts/setup_monitor.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/devContainer/scripts/setup_monitor.sh | 21 | # INSTALL_CHARTS=1 bash setup_monitor.sh | COMMENT |
| LOW | tools/devContainer/scripts/toggle_event_dumper.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.sh | 21 | # | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.sh | 41 | # 7. getHelp(): -c/--config, -o/--output, -f/--force and the remoted leaf documented. | COMMENT |
| LOW | tools/devContainer/scripts/bench_samples.py | 81 | # | COMMENT |
| LOW | tools/devContainer/scripts/bench_samples.py | 141 | # | COMMENT |
| LOW | tools/devContainer/scripts/bench_samples.py | 981 | return {metric: d["type"] for metric, d in read_descriptors(path, src, run).items() | COMMENT |
| LOW | tools/devContainer/scripts/bench_samples.py | 1201 | return pd.DataFrame(data) | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.yml | 1 | # Certificate inventory of the devcontainer, read by scripts/wazuh-certs-tool.sh | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.yml | 21 | COMMENT | |
| LOW | tools/devContainer/e2e/wazuh_copy_certs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/e2e/wazuh_copy_certs.sh | 21 | # already point at these paths (the block is printed for review). | COMMENT |
| LOW | tools/devContainer/e2e/wazuh_install_manager.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/e2e/wazuh_install_manager.sh | 21 | # 5. certificates: the e2e PKI replaces whatever the install's credential resolver issued (it issues | COMMENT |
| LOW | tools/devContainer/e2e/init.sh | 421 | local repo=$1 | COMMENT |
| LOW | tools/devContainer/e2e/wazuh_credentials.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/e2e/wazuh_verify_manager.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/e2e/cluster/init.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/devContainer/e2e/cluster/docker-compose.yml | 1 | # Multi-node cluster overlay for the e2e environment. The master is the manager | COMMENT |
| LOW | tools/devContainer/e2e/cluster/node/entrypoint.sh | 21 | # not migrated; pass INDEXER_USER/INDEXER_PASSWORD explicitly when the indexer needs them. | COMMENT |
| LOW | tools/devContainer/e2e/wazuh-indexer/entrypoint.sh | 1 | #!/bin/bash | COMMENT |
| 1305 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/scripts/agent_groups.py | 0 | get script arguments. returns ------- argparse.namespace arguments passed to the script. | STRING |
| HIGH | framework/scripts/agent_upgrade.py | 0 | get script arguments. returns ------- argparse.namespace arguments passed to the script. | STRING |
| HIGH | framework/scripts/wazuh_manager_clusterd.py | 0 | get script arguments. returns ------- argparse.namespace arguments passed to the script. | STRING |
| HIGH | framework/wazuh/core/cluster/local_server.py | 0 | get basic information about the node. returns ------- dict basic node information. | STRING |
| HIGH | framework/wazuh/core/cluster/common.py | 0 | get basic information about the node. returns ------- dict basic node information. | STRING |
| HIGH | framework/wazuh/core/cluster/master.py | 0 | get basic information about the node. returns ------- dict basic node information. | STRING |
| HIGH | tests/integration/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_syscollector/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ation/test_syscollector/test_configuration/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_remoted/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ed/test_agent_communication/test_request_agent_info.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …munication/test_multi_agent_protocols_communication.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …agent_communication/test_agents_switching_protocols.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …remoted/test_agent_communication/test_agent_version.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …_communication/test_invalid_protocols_communication.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …st_agent_communication/test_protocols_communication.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ed/test_agent_communication/test_multi_agent_status.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/test_agent_communication/test_agent_pending_status.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/test_agent_communication/test_shared_configuration.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …remoted/test_configurations/test_queue_size_too_big.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ed/test_configurations/test_invalid_connection_port.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …est_remoted/test_configurations/test_valid_local_ip.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …st_configurations/test_invalid_https_ca_certificate.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ed/test_configurations/test_rids_valid_closing_time.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …t_remoted/test_configurations/test_valid_queue_size.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …remoted/test_configurations/test_invalid_connection.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …t_remoted/test_configurations/test_valid_connection.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …est_configurations/test_invalid_connection_protocol.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …t_remoted/test_configurations/test_invalid_local_ip.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/test_configurations/test_rids_invalid_closing_time.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ons/test_https_cert_missing/test_https_cert_missing.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …test_configurations/test_https_cert/test_https_cert.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_remoted/test_rids/test_rids.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_remoted/test_rids/test_config.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …egration/test_remoted/test_manager/test_manager_ack.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …integration/test_remoted/test_multi_groups/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …moted/test_multi_groups/test_merged_mg_file_content.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …emoted/test_socket_communication/test_ping_pong_msg.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_sca/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_sca/test_basic/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_sca/test_basic/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_manager_control/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_logcollector/utils.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ation/test_logcollector/test_configuration/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ts/integration/test_logcollector/test_read/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …tegration/test_authd/test_api_registration/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …tegration/test_authd/test_api_registration/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …s/integration/test_authd/test_use_password/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …s/integration/test_authd/test_use_password/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/test_ssl/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/test_ssl/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/test_cluster/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/integration/test_authd/test_use_source_ip/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/integration/test_authd/test_use_source_ip/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …egration/test_authd/test_remote_enrollment/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/test_common/conftest.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | tests/integration/test_authd/test_common/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …/integration/test_authd/test_force_options/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| HIGH | …ntegration/test_authd/test_drop_privileges/__init__.py | 0 | copyright (c) 2015, wazuh inc. created by wazuh, inc. <info@wazuh.com>. this program is free software; you can redistrib | STRING |
| 146 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/devContainer/scripts/monitor.py | 135 | except OSError: | CODE |
| HIGH | tools/devContainer/scripts/bench_samples.py | 716 | except OSError: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 928 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1331 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1724 | except OSError: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 884 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1407 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 891 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1292 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1300 | except Exception: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 410 | except OSError: | CODE |
| HIGH | tools/devContainer/e2e/dashboard/test_capture_dom.py | 226 | except Exception: | CODE |
| HIGH | tools/migration/wazuh-migrate-identity.py | 230 | except OSError: | CODE |
| HIGH | tools/debug/queue-mitm.py | 33 | except FileNotFoundError: | CODE |
| HIGH | framework/scripts/cluster_control.py | 284 | except KeyboardInterrupt: | CODE |
| HIGH | framework/scripts/rbac_control.py | 69 | except OSError: | CODE |
| HIGH | framework/wazuh/security.py | 1496 | except KeyError: | CODE |
| HIGH | framework/wazuh/agent.py | 1344 | except ValueError: | CODE |
| HIGH | framework/wazuh/rbac/orm.py | 2353 | except OperationalError: | CODE |
| HIGH | framework/wazuh/rbac/orm.py | 989 | except (TypeError, AttributeError): | CODE |
| HIGH | framework/wazuh/rbac/orm.py | 1258 | except (TypeError, AttributeError): | CODE |
| HIGH | framework/wazuh/rbac/orm.py | 1415 | except (TypeError, AttributeError): | CODE |
| HIGH | framework/wazuh/rbac/orm.py | 1627 | except (TypeError, AttributeError): | CODE |
| HIGH | framework/wazuh/rbac/tests/test_decorators.py | 78 | except AttributeError: | CODE |
| HIGH | framework/wazuh/rbac/tests/utils.py | 49 | except OperationalError: | CODE |
| HIGH | framework/wazuh/core/configuration.py | 1022 | except IOError: | CODE |
| HIGH | framework/wazuh/core/wdb.py | 416 | except IndexError: | CODE |
| HIGH | framework/wazuh/core/results.py | 505 | except TypeError: | CODE |
| HIGH | framework/wazuh/core/security.py | 145 | except FileNotFoundError: | CODE |
| HIGH | framework/wazuh/core/common.py | 44 | except ValueError: | CODE |
| HIGH | framework/wazuh/core/utils.py | 1888 | except PermissionError: | CODE |
| HIGH | framework/wazuh/core/utils.py | 947 | except (ValueError, TypeError): | CODE |
| HIGH | framework/wazuh/core/utils.py | 1424 | except ValueError: | CODE |
| HIGH | framework/wazuh/core/pyDaemonModule.py | 105 | except OSError: | CODE |
| HIGH | framework/wazuh/core/pyDaemonModule.py | 134 | except OSError: | CODE |
| HIGH | framework/wazuh/core/engine_http.py | 171 | except ValueError: | CODE |
| HIGH | framework/wazuh/core/cluster/common.py | 393 | except RuntimeError: | CODE |
| HIGH | framework/wazuh/core/cluster/common.py | 1691 | except (IndexError, KeyError): | CODE |
| HIGH | framework/wazuh/core/cluster/cluster.py | 267 | except (KeyError, AttributeError, TypeError): | CODE |
| HIGH | framework/wazuh/core/cluster/cluster.py | 170 | except KeyError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 944 | except Exception: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 980 | except Exception: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 1012 | except Exception: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 875 | except asyncio.exceptions.TimeoutError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 889 | except asyncio.exceptions.TimeoutError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_worker.py | 899 | except asyncio.exceptions.TimeoutError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_server.py | 662 | except IndexError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_server.py | 688 | except IndexError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_server.py | 626 | except IndexError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_server.py | 636 | except IndexError: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_client.py | 437 | except Exception: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_client.py | 447 | except Exception: | CODE |
| HIGH | framework/wazuh/core/cluster/tests/test_client.py | 473 | except Exception: | CODE |
| HIGH | …ore/indexer/tests/test_metrics_snapshot_integration.py | 55 | except Exception: | CODE |
| HIGH | …uh/core/indexer/tests/test_disconnected_agents_sync.py | 662 | except asyncio.CancelledError: | CODE |
| HIGH | framework/wazuh/tests/test_security.py | 98 | except OperationalError: | CODE |
| HIGH | tests/integration/conftest.py | 1038 | except OSError: | CODE |
| HIGH | tests/integration/conftest.py | 859 | except (KeyError, PermissionError): | CODE |
| HIGH | tests/integration/conftest.py | 620 | except FileNotFoundError: | CODE |
| HIGH | tests/integration/conftest.py | 626 | except FileNotFoundError: | CODE |
| 68 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/agent-upgrade/wpkpack.py | 100 | except Exception as error: | CODE |
| LOW | tools/devContainer/scripts/monitor.py | 365 | except Exception: | CODE |
| LOW | tools/devContainer/scripts/bench_collect.py | 329 | except Exception as exc: | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 650 | except Exception as exc: | CODE |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 659 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/agents/verify_agents.sh | 223 | except Exception: print(0)' "$OUT/api-agents.json" "${NAMES[@]}") | CODE |
| MEDIUM | tools/devContainer/e2e/dashboard/capture.py | 540 | def run(self, n, name, func): | CODE |
| MEDIUM | tools/devContainer/e2e/dashboard/capture.py | 878 | def _track(self, response): | CODE |
| LOW⚡ | tools/devContainer/e2e/dashboard/capture.py | 1407 | except Exception: | CODE |
| LOW⚡ | tools/devContainer/e2e/dashboard/capture.py | 1414 | except Exception as exc: | CODE |
| LOW⚡ | tools/devContainer/e2e/dashboard/capture.py | 1422 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 286 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 460 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 543 | except Exception as exc: # a check never aborts the run, and never leaks a credential | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 619 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 687 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 707 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 715 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 884 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 891 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 924 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 928 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1116 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1292 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1300 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1331 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1381 | except Exception: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1620 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1896 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1904 | except Exception as exc: # every view then fails naming the file, never a traceback | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 2000 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 2015 | except Exception as exc: | CODE |
| LOW | tools/devContainer/e2e/dashboard/test_capture_dom.py | 47 | except Exception as exc: # pragma: no cover - depends on the interpreter, not on the code | CODE |
| LOW | tools/devContainer/e2e/dashboard/test_capture_dom.py | 226 | except Exception: | CODE |
| MEDIUM⚡ | tools/debug/csv-stat.py | 66 | print(f'Error: File {args.file} not found.') | CODE |
| LOW⚡ | tools/debug/csv-stat.py | 68 | except Exception as e: | CODE |
| MEDIUM⚡ | tools/debug/csv-stat.py | 69 | print(f'Error: {e}') | CODE |
| LOW | framework/scripts/agent_groups.py | 20 | except Exception as e: | CODE |
| MEDIUM | framework/scripts/agent_groups.py | 21 | print("Error importing 'Wazuh' package.\n\n{0}\n".format(e)) | CODE |
| MEDIUM | framework/scripts/agent_groups.py | 404 | print("Error {0}: {1}".format(e.code, e.message)) | STRING |
| LOW | framework/scripts/agent_groups.py | 407 | except Exception as e: | STRING |
| LOW | framework/scripts/agent_upgrade.py | 36 | except Exception as e: | CODE |
| MEDIUM | framework/scripts/agent_upgrade.py | 37 | print("Error importing 'Wazuh' package.\n\n{0}\n".format(e)) | CODE |
| MEDIUM | framework/scripts/agent_upgrade.py | 112 | print("Error: custom WPK files are delivered from '{0}'. Move the file there and pass " | CODE |
| MEDIUM | framework/scripts/agent_upgrade.py | 117 | print("Error: WPK file not found: '{0}'. Place the file in '{1}' before launching the " | CODE |
| MEDIUM⚡ | framework/scripts/agent_upgrade.py | 178 | print(f"Error {wazuh_err.code}: {wazuh_err.message}") | CODE |
| MEDIUM⚡ | framework/scripts/agent_upgrade.py | 182 | print(f"Error {getattr(e, 'ext', {}).get('code', e.status)}: {str(e.detail)}") | CODE |
| LOW⚡ | framework/scripts/agent_upgrade.py | 185 | except Exception as unexpected_err: | CODE |
| MEDIUM | framework/scripts/agent_upgrade.py | 148 | def main(): | CODE |
| LOW | framework/scripts/cluster_control.py | 286 | except Exception as e: | STRING |
| LOW | framework/scripts/rbac_control.py | 14 | except Exception as e: | CODE |
| MEDIUM | framework/scripts/rbac_control.py | 15 | print("Error importing 'Wazuh' package.\n\n{0}\n".format(e)) | CODE |
| LOW | framework/scripts/rbac_control.py | 284 | except Exception: | CODE |
| MEDIUM | framework/scripts/rbac_control.py | 376 | print(f"Error {e.code}: {e.message}") | CODE |
| LOW | framework/scripts/rbac_control.py | 378 | except Exception as e: | CODE |
| LOW | framework/scripts/wazuh_manager_clusterd.py | 206 | except Exception as e: | CODE |
| LOW | framework/scripts/wazuh_manager_clusterd.py | 212 | except Exception as e: | CODE |
| LOW | framework/scripts/wazuh_manager_clusterd.py | 247 | except Exception as e: | CODE |
| LOW | framework/scripts/wazuh_manager_clusterd.py | 269 | except Exception: | CODE |
| LOW | framework/wazuh/__init__.py | 31 | except Exception: | CODE |
| 376 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/manager_benchmark/result_summary.py | 161 | CODE | |
| LOW | tools/mitre/mitredb.py | 509 | CODE | |
| LOW | tools/mitre/mitredb.py | 585 | CODE | |
| LOW | tools/mitre/mitredb.py | 613 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 201 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 342 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 924 | CODE | |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 606 | CODE | |
| LOW | tools/devContainer/scripts/bench_samples.py | 842 | CODE | |
| LOW | tools/devContainer/scripts/bench_samples.py | 1070 | CODE | |
| LOW | tools/devContainer/scripts/bench_samples.py | 1168 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 399 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1161 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1250 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1340 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1602 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1707 | CODE | |
| LOW | tools/devContainer/e2e/dashboard/capture.py | 1977 | CODE | |
| LOW | tools/migration/test_wazuh_migrate_identity.py | 424 | CODE | |
| LOW | tools/migration/wazuh-migrate-identity.py | 185 | CODE | |
| LOW | tools/migration/wazuh-migrate-identity.py | 280 | CODE | |
| LOW | tools/migration/wazuh-migrate-identity.py | 310 | CODE | |
| LOW | tools/debug/wdb-query.py | 94 | CODE | |
| LOW | framework/scripts/agent_groups.py | 358 | CODE | |
| LOW | framework/scripts/agent_upgrade.py | 148 | CODE | |
| LOW | framework/scripts/cluster_control.py | 247 | CODE | |
| LOW | framework/scripts/tests/test_wazuh_manager_clusterd.py | 38 | CODE | |
| LOW | framework/scripts/tests/test_wazuh_manager_clusterd.py | 154 | CODE | |
| LOW | framework/scripts/tests/test_wazuh_manager_clusterd.py | 276 | CODE | |
| LOW | framework/wazuh/vulnerability_scan.py | 17 | CODE | |
| LOW | framework/wazuh/security.py | 84 | CODE | |
| LOW | framework/wazuh/security.py | 430 | CODE | |
| LOW | framework/wazuh/security.py | 533 | CODE | |
| LOW | framework/wazuh/security.py | 599 | CODE | |
| LOW | framework/wazuh/security.py | 705 | CODE | |
| LOW | framework/wazuh/security.py | 775 | CODE | |
| LOW | framework/wazuh/security.py | 916 | CODE | |
| LOW | framework/wazuh/security.py | 953 | CODE | |
| LOW | framework/wazuh/security.py | 1020 | CODE | |
| LOW | framework/wazuh/security.py | 1080 | CODE | |
| LOW | framework/wazuh/security.py | 1131 | CODE | |
| LOW | framework/wazuh/security.py | 1181 | CODE | |
| LOW | framework/wazuh/security.py | 1235 | CODE | |
| LOW | framework/wazuh/security.py | 1311 | CODE | |
| LOW | framework/wazuh/security.py | 1458 | CODE | |
| LOW | framework/wazuh/stats.py | 16 | CODE | |
| LOW | framework/wazuh/agent.py | 220 | CODE | |
| LOW | framework/wazuh/agent.py | 372 | CODE | |
| LOW | framework/wazuh/agent.py | 671 | CODE | |
| LOW | framework/wazuh/agent.py | 932 | CODE | |
| LOW | framework/wazuh/agent.py | 1164 | CODE | |
| LOW | framework/wazuh/agent.py | 1467 | CODE | |
| LOW | framework/wazuh/manager.py | 246 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1293 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1471 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1578 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1665 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1717 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 1862 | CODE | |
| LOW | framework/wazuh/rbac/orm.py | 2003 | CODE | |
| 308 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/manager_benchmark/make_report_tables.py | 14 | CODE | |
| LOW | tools/manager_benchmark/make_report_tables.py | 14 | CODE | |
| LOW | tools/manager_benchmark/result_summary.py | 26 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 23 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 28 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 29 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 34 | CODE | |
| LOW | tools/devContainer/scripts/monitor.py | 35 | CODE | |
| LOW | tools/devContainer/scripts/bench_collect.py | 30 | CODE | |
| LOW | …ols/devContainer/scripts/monitor_graphics_generator.py | 2 | CODE | |
| LOW | tools/devContainer/scripts/bench_samples.py | 59 | CODE | |
| LOW | tools/devContainer/scripts/tests/test_bench_collect.py | 18 | CODE | |
| LOW | tools/migration/test_wazuh_migrate_identity.py | 24 | CODE | |
| LOW | framework/scripts/agent_upgrade.py | 13 | CODE | |
| LOW | framework/scripts/wazuh_manager_clusterd.py | 9 | CODE | |
| LOW | framework/wazuh/__init__.py | 10 | CODE | |
| LOW | framework/wazuh/__init__.py | 10 | CODE | |
| LOW | framework/wazuh/agent.py | 10 | CODE | |
| LOW | framework/wazuh/rbac/auth_context.py | 8 | CODE | |
| LOW | framework/wazuh/core/wdb.py | 13 | CODE | |
| LOW | framework/wazuh/core/results.py | 5 | CODE | |
| LOW | framework/wazuh/core/agent_tasks.py | 14 | CODE | |
| LOW | framework/wazuh/core/utils.py | 22 | CODE | |
| LOW | framework/wazuh/core/utils.py | 27 | CODE | |
| LOW | framework/wazuh/core/agent.py | 18 | CODE | |
| LOW | framework/wazuh/core/agent.py | 25 | CODE | |
| LOW | framework/wazuh/core/manager.py | 7 | CODE | |
| LOW | framework/wazuh/core/cluster/local_server.py | 10 | CODE | |
| LOW | framework/wazuh/core/cluster/local_server.py | 14 | CODE | |
| LOW | framework/wazuh/core/cluster/cluster.py | 19 | CODE | |
| LOW | framework/wazuh/core/cluster/cluster.py | 19 | CODE | |
| LOW | framework/wazuh/core/cluster/cluster.py | 19 | CODE | |
| LOW | framework/wazuh/core/cluster/tests/test_local_client.py | 15 | CODE | |
| LOW | framework/wazuh/core/cluster/tests/test_local_server.py | 24 | CODE | |
| LOW | framework/wazuh/core/cluster/tests/test_server.py | 18 | CODE | |
| LOW | framework/wazuh/core/cluster/tests/test_cluster.py | 14 | CODE | |
| LOW | framework/wazuh/core/tests/test_mitre.py | 14 | CODE | |
| LOW | framework/wazuh/core/tests/test_agent.py | 21 | CODE | |
| LOW | framework/wazuh/core/tests/test_configuration.py | 11 | CODE | |
| LOW | framework/wazuh/core/tests/test_pyDaemonModule.py | 11 | CODE | |
| LOW | framework/wazuh/core/tests/test_manager.py | 14 | CODE | |
| LOW | framework/wazuh/core/indexer/disconnected_agents.py | 1 | CODE | |
| LOW | framework/wazuh/core/indexer/tests/test_indexer.py | 5 | CODE | |
| LOW | …rk/wazuh/core/indexer/tests/test_credential_manager.py | 7 | CODE | |
| LOW | framework/wazuh/tests/test_agent.py | 17 | CODE | |
| LOW | framework/wazuh/tests/test_manager.py | 23 | CODE | |
| LOW | framework/wazuh/tests/test_vulnerability_scan.py | 25 | CODE | |
| LOW | tests/integration/test_syscollector/conftest.py | 21 | CODE | |
| LOW | tests/integration/test_syscollector/conftest.py | 23 | CODE | |
| LOW | tests/integration/test_syscollector/conftest.py | 23 | CODE | |
| LOW | tests/integration/test_syscollector/conftest.py | 23 | CODE | |
| LOW | tests/integration/test_syscollector/conftest.py | 23 | CODE | |
| LOW | …/test_configuration/test_syscollector_configuration.py | 45 | CODE | |
| LOW | …agent_communication/test_agents_switching_protocols.py | 11 | CODE | |
| LOW | …remoted/test_configurations/test_queue_size_too_big.py | 10 | CODE | |
| LOW | …ed/test_configurations/test_invalid_connection_port.py | 10 | CODE | |
| LOW | …est_remoted/test_configurations/test_valid_local_ip.py | 21 | CODE | |
| LOW | …ed/test_configurations/test_rids_valid_closing_time.py | 10 | CODE | |
| LOW | …ed/test_configurations/test_rids_valid_closing_time.py | 12 | CODE | |
| LOW | …ed/test_configurations/test_rids_valid_closing_time.py | 19 | CODE | |
| 242 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/build.py | 18 | Process the command line arguments and executes the corresponding argument's utility. Args: - None | STRING |
| HIGH | src/ci/build_tools.py | 34 | Execute the command 'make clean' in the operating system. Args: - None Returns: - None | STRING |
| HIGH | src/ci/build_tools.py | 63 | Delete the contents of the external folder. Args: - None Returns: - None Raises: | STRING |
| HIGH | src/ci/build_tools.py | 91 | Delete a specific folder inside some module. Args: - moduleName(str): Main folder name. - addi | STRING |
| HIGH | src/ci/build_tools.py | 134 | Execute the command 'make clean-internals' in the operating system. Args: - None Returns: | STRING |
| HIGH | src/ci/build_tools.py | 163 | Execute the command 'make clean-windows' in the operating system. Args: - None Returns: - | STRING |
| HIGH | src/ci/build_tools.py | 192 | Clean the files generated in some module when it is built. Args: - moduleName(str): Library name to be | STRING |
| HIGH | src/ci/build_tools.py | 224 | Configure cmake command with specific configuration based on the parameters passed to the function. Args: | STRING |
| HIGH | src/ci/build_tools.py | 280 | Get a map with configured folders to be deleted. Args: - None Returns: - DELETE_FOLDER_DI | STRING |
| HIGH | src/ci/build_tools.py | 296 | Use make command in order to download dependencies and after that build them. Args: - targetName(s | STRING |
| HIGH | src/ci/build_tools.py | 335 | Build a library. Args: - moduleName(str): Library to be built. Returns: - None Raise | STRING |
| HIGH | src/ci/build_tools.py | 369 | Build project with flags. Args: - targetName(str): Build type to be built < | STRING |
| HIGH | src/ci/utils.py | 51 | Get current path. Args: - None Returns: - path(str): Current path. Raises: - | STRING |
| HIGH | src/ci/utils.py | 67 | Delete logs generates for a module. Args: - moduleName(str): Library to be cleaned. Returns: | STRING |
| HIGH | src/ci/utils.py | 107 | Find a file in some path. Args: - name(str): File to find. - path(str): Base path to find a fi | STRING |
| HIGH | src/ci/utils.py | 132 | Find a folder in some path. Args: - name(str): Folder to find. - path(str): Base path to find | STRING |
| HIGH | src/ci/utils.py | 158 | Return folders to be analyzed with AStyle coding style analysis tool. Args: - moduleName(str): Library | STRING |
| HIGH | src/ci/utils.py | 195 | Get directory path for a module. Args: - moduleName(str): Library to get the path of. Returns: | STRING |
| HIGH | src/ci/utils.py | 214 | Get directory path build for a module. Args: moduleName(str): Library to get the path of. Returns | STRING |
| HIGH | src/ci/utils.py | 233 | Get valid module list. Args: - None Returns: - MODULE_LIST(array): A list with valid modu | STRING |
| HIGH | src/ci/utils.py | 249 | Get valid module list. Args: - None Returns: - MODULE_LIST_STR(str): A list with valid mo | STRING |
| HIGH | src/ci/utils.py | 265 | Display a red message with the errors. Args: - msg(str): Message to show. Returns: - None | STRING |
| HIGH | src/ci/utils.py | 281 | Display a formatted green message. Args: - msg(str): Message to show. - module(str): Library u | STRING |
| HIGH | src/ci/utils.py | 302 | Display a message formatted from the HEADER_DIR map. Args: - moduleName(str): Library using in the mes | STRING |
| HIGH | src/ci/utils.py | 320 | Display a yellow message with some information. Args: - msg(str): Message to show. Returns: | STRING |
| HIGH | src/ci/utils.py | 336 | Display a message formatted from the HEADER_DIR map. Args: - moduleName(str): Library using in the mes | STRING |
| HIGH | src/ci/utils.py | 354 | Read a JSON path and convert to map. Args: - jsonFilePath(str): JSON path. Returns: - jso | STRING |
| HIGH | src/ci/utils.py | 378 | Get root path. Args: - None Returns: - path(str): Root path. Raises: - None | STRING |
| HIGH | src/ci/utils.py | 394 | Get possible build targets. Args: - None Returns: - TARGET_LIST(array): Target list | STRING |
| HIGH | src/ci/run_check.py | 21 | Check the coverage for a library being analyzed. Args: - output(str): Message to be shown in the stdou | STRING |
| HIGH | src/ci/run_check.py | 64 | Execute Address Sanitizer dynamic analysis tool using the test tool defined for a library. Args: - | STRING |
| HIGH | src/ci/run_check.py | 110 | Execute AStyle coding style analysis for the library code failing when one or more files need to be modified. | STRING |
| HIGH | src/ci/run_check.py | 162 | Execute AStyle coding style analysis tool for the library code formatting all needed files. Args: | STRING |
| HIGH | src/ci/run_check.py | 195 | Execute code coverage for a library unit tests. Args: - moduleName: Library to be analyzed using gcov | STRING |
| HIGH | src/ci/run_check.py | 313 | Execute cppcheck static analysis in the library code. Args: - moduleName: Library to be analyzed using | STRING |
| HIGH | src/ci/run_check.py | 419 | Execute scan-build for a defined target. Args: - targetName: Target to be analyzed using scan-build an | STRING |
| HIGH | src/ci/run_check.py | 473 | Execute test tool for a module with a configuration passed by parameters. Args: - moduleName(str): Lib | STRING |
| HIGH | src/ci/run_check.py | 522 | Execute test tool for a module with a configuration passed by parameters for Windows OS. Args: - m | STRING |
| HIGH | src/ci/run_check.py | 663 | Execute library tests using CTest with labels. Args: - moduleName: Library representing the tests to b | STRING |
| HIGH | src/ci/run_check.py | 730 | Results are taken in JSON format after running the test tool and validated using pytest. Args: - m | STRING |
| HIGH | src/ci/run_check.py | 771 | Execute all tests with valgrind tool in order to check memory leaks in the library code. Args: - m | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 20 | Find smokeTests inside the root path and return the complete path. Args: - moduleName(str): Library to | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 40 | Configure and format logging message. Args: - getModuleName(fixture): Return current module. Retu | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 75 | Search inside test tool output folder so it returns the root path and the child folders. Args: - s | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 97 | From directory name and their paths it creates a map in order to have all information in only structure. | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 122 | From directory name and their paths it creates a map in order to have all information in only structure. A | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 149 | Read file transaction input files and return an array with these information in JSON format. Args: | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 176 | Read registry key transaction input files and return an array with these information in JSON format. Args: | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 203 | Read registry value transaction input files and return an array with these information in JSON format. Arg | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 229 | Read registry value transaction input files and return an array with these information in JSON format. Arg | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 261 | Check result of action executed. Args: - result(map): A map with parsed result JSON. - configL | STRING |
| HIGH | src/ci/tests/syscheckd/test_check_module.py | 283 | Check result of transaction executed compared than input information. Args: - result(map): A map with | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/devContainer/scripts/monitor.py | 260 | "'pkill -9 -f %s && service wazuh-manager restart' before re-running.", | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 941 | let text = el.innerText || el.textContent || ''; | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 943 | const hidden = sr.innerText || sr.textContent || ''; | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 957 | if (node.closest && node.closest('.euiScreenReaderOnly')) { return false; } | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 981 | if (el.matches(spec.selector) && found.indexOf(el) === -1) { found.push(el); } | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1007 | if (field === undefined) { return; } | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1008 | cells.push([field, Math.round(rect.top), Math.round(rect.bottom), visible(cell), | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1029 | headers.push({field: subject.slice(0, cut), index: position}); | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1047 | rows.push({columns: columns, cells: geometry, top: Math.round(rect.top), | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1064 | headers.push(field); | CODE |
| HIGH | tools/devContainer/e2e/dashboard/capture.py | 1080 | rows.push({columns: columns, cells: geometry, top: Math.round(rect.top), | CODE |
| HIGH | tools/devContainer/e2e/dashboard/test_capture_logic.py | 4 | cd tools/devContainer/e2e/dashboard && python3 -m unittest -v test_capture_logic | STRING |
| HIGH | framework/wazuh/core/wdb.py | 269 | if v == "(null)": | CODE |
| HIGH | framework/wazuh/core/wdb.py | 294 | if '"(null)"' in string: | CODE |
| HIGH | framework/wazuh/core/wdb.py | 295 | # To prevent empty dictionaries, clean data if there was any `"(null)"` within the string | COMMENT |
| HIGH | framework/wazuh/core/cluster/common.py | 1183 | # Regex to find any character different to '\x00' (null) inside a string. | COMMENT |
| HIGH | framework/wazuh/core/cluster/common.py | 581 | self.push(msg) | CODE |
| HIGH | framework/wazuh/core/cluster/common.py | 914 | self.push(msg) | CODE |
| HIGH | framework/wazuh/core/cluster/common.py | 1174 | Expected length of bytearray. If any bytearray has this length and its content is null, it will be deleted. | STRING |
| HIGH⚡ | framework/wazuh/core/cluster/tests/test_common.py | 549 | handler.push(b"message") | CODE |
| HIGH⚡ | framework/wazuh/core/tests/test_utils.py | 2193 | candidate (the nested field is itself null) should be dropped before comparing.""" | STRING |
| HIGH⚡ | framework/wazuh/core/tests/test_wdb.py | 162 | Tests '(null)' values are removed from the resulting dictionary | STRING |
| HIGH⚡ | framework/wazuh/core/tests/test_wdb.py | 165 | nulls_string = b' [{"a": "a", "b": "(null)", "c": [1, 2, 3], "d": {"e": "(null)"}}]' | CODE |
| HIGH | framework/wazuh/core/tests/test_wdb.py | 292 | '[{"key1": "value1"}, {"invalid": "(null)"}]', | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 148 | if (ctx._source.wazuh == null) { ctx._source.wazuh = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 149 | if (ctx._source.wazuh.agent == null) { ctx._source.wazuh.agent = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 151 | if (ctx._source.wazuh.agent.groups != null && ctx._source.wazuh.agent.groups == params.groups) { | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 158 | if (ctx._source.state == null) { ctx._source.state = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 246 | if (ctx._source.wazuh == null) { ctx._source.wazuh = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 247 | if (ctx._source.wazuh.agent == null) { ctx._source.wazuh.agent = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 248 | if (ctx._source.wazuh.cluster == null) { ctx._source.wazuh.cluster = [:]; } | CODE |
| HIGH⚡ | framework/wazuh/core/indexer/states_components.py | 255 | if (ctx._source.state == null) { ctx._source.state = [:]; } | CODE |
| HIGH⚡ | api/api/controllers/test/test_agent_controller.py | 1080 | ('id=001', 'group=null;(id=001)'), | CODE |
| HIGH⚡ | api/api/controllers/test/test_agent_controller.py | 1081 | ('id=001;name=agent', 'group=null;(id=001;name=agent)'), | CODE |
| HIGH⚡ | api/api/controllers/test/test_agent_controller.py | 1083 | ('id=001,id=002', 'group=null;(id=001,id=002)'), | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 114 | if (meta && meta.category) return meta.category; | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 131 | if (meta && meta.unit && UNIT_AXIS[meta.unit]) return UNIT_AXIS[meta.unit]; | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 219 | charts[chartId] = { type: metricType, prevValue: null }; | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 227 | if (c.prevValue === null) { c.prevValue = rawValue; return; } | CODE |
| HIGH⚡ | …e/tools/engine-metrics/src/engine_metrics/templates.py | 248 | const ts = new Date(data.timestamp || undefined); | CODE |
| HIGH⚡ | …e/tools/engine-metrics/src/engine_metrics/templates.py | 248 | const ts = new Date(data.timestamp || undefined); | CODE |
| HIGH⚡ | …e/tools/engine-metrics/src/engine_metrics/templates.py | 251 | if (data.name && infoEl.dataset.set !== '1') { | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 266 | pushPoint(chartId, ts, m.value || 0); | CODE |
| HIGH | …e/tools/engine-metrics/src/engine_metrics/templates.py | 277 | pushPoint(chartId, ts, m.value || 0); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/get_git_refs.sh | 160 | # Check if HEAD points to a branch | COMMENT |
| LOW⚡ | tools/devContainer/download_devContainer.sh | 144 | # Check if docker is installed | COMMENT |
| LOW⚡ | tools/devContainer/download_devContainer.sh | 150 | # Check if docker is running | COMMENT |
| LOW⚡ | tools/devContainer/download_devContainer.sh | 156 | # Check if the user is in the docker group (Docker Desktop on macOS has no such group). | COMMENT |
| LOW⚡ | tools/devContainer/download_devContainer.sh | 162 | # Check if git is installed | COMMENT |
| LOW | tools/devContainer/download_devContainer.sh | 210 | # Print the value of the first "image" line of a devcontainer.json (empty if there is none) | COMMENT |
| LOW | tools/devContainer/download_devContainer.sh | 671 | # Check if destination folder already exists | COMMENT |
| LOW | tools/devContainer/scripts/wazuh-certs-tool.sh | 67 | # Check if path is empty | COMMENT |
| LOW | tools/devContainer/scripts/mount_wazuh_proc.sh | 3 | # Check if WAZUH_HOME is set | COMMENT |
| LOW | tools/devContainer/e2e/wazuh-indexer/entrypoint.sh | 131 | # Check if server is up 'service wazuh-indexer status' (evaluated inside the | COMMENT |
| LOW | ruleset/sca/amazon/cis_amazon_linux_2023.yml | 47 | # Check if the module exists on the system | COMMENT |
| LOW | ruleset/sca/amazon/cis_amazon_linux_2023.yml | 111 | # Check if the module exists on the system | COMMENT |
| LOW | ruleset/sca/debian/cis_debian10.yml | 35 | remediation: "Run the following script to disable the cramfs module: If the module is available in the running kerne | CODE |
| LOW | ruleset/sca/debian/cis_debian10.yml | 76 | remediation: "Run the following script to disable the squashfs module: If the module is available in the running ker | CODE |
| LOW | ruleset/sca/debian/cis_debian10.yml | 112 | remediation: "Run the following script to disable the udf module: If the module is available in the running kernel: | CODE |
| LOW | ruleset/sca/debian/cis_debian10.yml | 1443 | remediation: "Run the following script to disable the cramfs module: If the module is available in the running kerne | CODE |
| LOW | ruleset/sca/debian/cis_debian10.yml | 2339 | remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l | CODE |
| LOW | ruleset/sca/debian/cis_debian10.yml | 2485 | remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_9.yml | 38 | remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_9.yml | 75 | remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_9.yml | 1391 | remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_9.yml | 2407 | remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_9.yml | 3432 | remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_10.yml | 38 | remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_10.yml | 75 | remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_10.yml | 1391 | remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_10.yml | 2407 | remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l | CODE |
| LOW | ruleset/sca/rocky/cis_rocky_linux_10.yml | 3432 | remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 39 | remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 77 | remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 1393 | remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 2502 | remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 2651 | remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_10.yml | 3665 | remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 39 | remediation: "Run the following script to disable squashfs: #!/usr/bin/env bash { l_mname=\"squashfs\" # set module | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 77 | remediation: "Run the following script to disable the udf filesystem: #!/usr/bin/env bash { l_mname=\"udf\" # set mo | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 1393 | remediation: "Run the following script to disable usb-storage: #!/usr/bin/env bash { l_mname=\"usb-storage\" # set m | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 2502 | remediation: "Run the following script to verify that the banner message is enabled and set: #!/usr/bin/env bash { l | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 2651 | remediation: "Run the following script to disable automatic mounting of media for all GNOME users: #!/usr/bin/env ba | CODE |
| LOW | ruleset/sca/almalinux/cis_alma_linux_9.yml | 3665 | remediation: "Run the following script to disable tipc: #!/usr/bin/env bash { l_mname=\"tipc\" # set module name # C | CODE |
| LOW | framework/scripts/tests/test_cluster_control.py | 304 | # Check if cluster is disabled and first condition | COMMENT |
| LOW | framework/wazuh/agent.py | 1184 | # Check if group exists | COMMENT |
| LOW | framework/wazuh/agent.py | 1239 | # Check if the group exists | COMMENT |
| LOW | framework/wazuh/agent.py | 1296 | # Check if agent and group exist | COMMENT |
| LOW | framework/wazuh/agent.py | 1336 | # Check if agent exists | COMMENT |
| LOW | framework/wazuh/agent.py | 1394 | # Check if group exists | COMMENT |
| LOW | framework/wazuh/rbac/orm.py | 2642 | # Check if an upgrade is required | COMMENT |
| LOW | framework/wazuh/core/configuration.py | 314 | # Check if we have read the same filters before (we will need to merge them) | COMMENT |
| LOW | framework/wazuh/core/configuration.py | 887 | # Check if the group exists | COMMENT |
| LOW | framework/wazuh/core/configuration.py | 943 | # Check if the component is correct | COMMENT |
| LOW | framework/wazuh/core/results.py | 417 | # Check if error is already added | COMMENT |
| LOW | framework/wazuh/core/utils.py | 262 | # Check if every element in sort['fields'] is in allowed_sort_fields | COMMENT |
| LOW | framework/wazuh/core/agent.py | 1177 | # Check if the group already belongs to the agent | COMMENT |
| LOW | framework/wazuh/core/agent.py | 1299 | # Check if agent exists and the group exists | COMMENT |
| LOW | framework/wazuh/core/cluster/common.py | 502 | # Check if a new message was received. | COMMENT |
| LOW | framework/wazuh/core/cluster/master.py | 511 | # Check if an integrity_check has already been performed | COMMENT |
| LOW | framework/wazuh/core/cluster/cluster.py | 153 | # Check if recursive flag is set or root is actually the initial lookup directory. | COMMENT |
| LOW | framework/wazuh/tests/test_agent.py | 998 | # Check if the number of affected items matches the number of times `add_group_to_agent` was called | COMMENT |
| LOW | tests/integration/test_logcollector/conftest.py | 153 | # Write the file status | COMMENT |
| LOW | …tegration/test_authd/test_api_registration/conftest.py | 44 | # Check if specific values were set or set the defaults | COMMENT |
| 99 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …asic_usage/test_orphan_promote_after_config_removal.py | 222 | # Step 1: agent is up via daemons_handler. The baseline scan has | COMMENT |
| LOW | …asic_usage/test_orphan_promote_after_config_removal.py | 248 | # Step 2: stop the agent, drop the realtime <directories> rule from | COMMENT |
| LOW⚡ | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 534 | # Step 1: publish the new CA alongside the one in force. | COMMENT |
| LOW⚡ | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 540 | # Step 2: reissue the manager's certificate under the new CA. Assigning after start() takes | COMMENT |
| LOW | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 551 | # Step 3: retire the old CA. The agent is verifying against the new certificate by now, so | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 281 | ### Step 1: Export from 4.x | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 298 | ### Step 2: Restore on 5.x | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 317 | ### Step 3: Configure the group on one agent only | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 344 | ### Step 4: Enroll the agents | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 354 | ### Step 5: Verify | COMMENT |
| LOW | docs/guide/migration/agent-groups-migration.md | 386 | ### Step 6: Assign the remaining agent manually | COMMENT |
| LOW | docs/guide/migration/remote-agent-upgrade.md | 463 | ### Step 1: Upgrade to v4.14.x | COMMENT |
| LOW | docs/guide/migration/remote-agent-upgrade.md | 484 | ### Step 2: Upgrade to v5.0.0 | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 164 | ### Step 1: Inventory your 4.x rules | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 182 | ### Step 2: Map rule identification | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 192 | ### Step 3: Map severity levels | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 216 | ### Step 4: Rewrite detection logic | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 457 | ### Step 5: Assign rules to an integration | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 508 | ### Step 6: Migrate metadata | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 531 | ### Step 7: Migrate MITRE ATT&CK mappings | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 575 | ### Step 8: Migrate compliance mappings | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 624 | ### Step 9: Migrate tags and groups | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 645 | ### Step 10: Handle rules that cannot be directly migrated | COMMENT |
| LOW | docs/guide/migration/rules-4x-to-5x.md | 733 | ### Step 11: Deploy and test | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 60 | ## Step 1: The operator mints a token | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 88 | ## Step 2: What a token actually is | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 187 | ## Step 3: The agent derives a key and signs a bearer | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 247 | ## Step 4: remoted classifies the request | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 296 | ## Step 5: remoted bridges to authd | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 310 | ## Step 6: Worker or master | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 331 | ## Step 7: authd reserves the token use | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 352 | ## Step 8: The keystore decision, with and without a key | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 424 | ## Step 9: The credential is written down before it is handed out | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 439 | ## Step 10: The agent gets its answer | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 455 | ## Step 11: The writer settles it | COMMENT |
| LOW | docs/ref/modules/authd/enrollment-lifecycle.md | 529 | ## Step 12: The agent becomes usable | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 20 | ### Step 1: Include Headers | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 28 | ### Step 2: Initialize During Module Startup | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 52 | ### Step 3: Create Helper Function for Validation | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 101 | ### Step 4: Validate Before Sending Data | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 130 | ### Step 5: Implement Batch Deletion | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 204 | ### Step 1: Include Headers | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 212 | ### Step 2: Initialize During Module Startup | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 232 | ### Step 3: Validate Before Sending Data | COMMENT |
| LOW | …ef/modules/utils/schema-validator/integration-guide.md | 303 | ### Step 4: Delete Invalid Entries After the Transaction | COMMENT |
| LOW | …s/ref/modules/utils/sync-protocol/integration-guide.md | 17 | ### Step 1: Include Required Headers | COMMENT |
| LOW | …s/ref/modules/utils/sync-protocol/integration-guide.md | 34 | ### Step 2: Initialize the Protocol | COMMENT |
| LOW | …s/ref/modules/utils/sync-protocol/integration-guide.md | 84 | ### Step 3: Persist Module Data | COMMENT |
| LOW | …s/ref/modules/utils/sync-protocol/integration-guide.md | 235 | ### Step 4: Process Manager Responses | COMMENT |
| LOW | …s/ref/modules/utils/sync-protocol/integration-guide.md | 261 | ### Step 5: Trigger Synchronization | COMMENT |
| LOW | docs/ref/modules/fim/architecture.md | 506 | #### Step 1: Database Entry Count Check | COMMENT |
| LOW | docs/ref/modules/fim/architecture.md | 534 | #### Step 2: Data Clean Notification | COMMENT |
| LOW | docs/ref/modules/fim/architecture.md | 564 | #### Step 3: Database Cleanup | COMMENT |
| LOW | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 219 | // Step 1: protocol version. An empty value here must mean "absent or duplicated" -- the | COMMENT |
| LOW⚡ | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 245 | // Step 2: the bounded, pre-signature peek. Nothing here is trusted: `kid` only names the | COMMENT |
| LOW⚡ | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 254 | // Step 3: one lookup resolves the key AND evaluates the client.keys ip column against the | COMMENT |
| LOW | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 291 | // Step 4: the token against that key. The key moves into a wiped buffer for the duration of | COMMENT |
| LOW | …oted_module/src/enrollment/enrollmentAuthenticator.cpp | 88 | // Step 2: which credential is this? A well-framed bearer whose header carries a `kid` is | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1019 | // Step 1: lock_restart (execd, plain-text protocol) | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1034 | // Step 2: open | COMMENT |
| 59 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/mitre/mitredb.py | 758 | # Create a database connection | COMMENT |
| MEDIUM | tools/devContainer/e2e/init.sh | 447 | # Create the output directory if it doesn't exist (This never happens on devContainer context) | COMMENT |
| MEDIUM | ruleset/sca/debian/cis_debian10.yml | 148 | remediation: "For specific configuration requirements of the /tmp mount for your environment, modify /etc/fstab or t | CODE |
| MEDIUM | ruleset/sca/sles/16/cis_sles16_linux.yml | 149 | remediation: "Create or update an entry for /tmp in either /etc/fstab OR in a systemd tmp.mount file: If /etc/fstab | CODE |
| MEDIUM | ruleset/sca/sles/15/cis_sles15_linux.yml | 149 | remediation: "Create or update an entry for /tmp in either /etc/fstab OR in a systemd tmp.mount file: If /etc/fstab | CODE |
| MEDIUM | ruleset/sca/ubuntu/cis_ubuntu20-04.yml | 43 | remediation: "For specific configuration requirements of the /tmp mount for your environment, modify /etc/fstab or t | CODE |
| MEDIUM | framework/wazuh/manager.py | 676 | # Create a backup of the current configuration before attempting to replace it | COMMENT |
| MEDIUM | framework/wazuh/rbac/orm.py | 1743 | # Create a role-policy relationship if both exist | COMMENT |
| MEDIUM | framework/wazuh/rbac/orm.py | 1905 | # Create a role-policy relationship if both exist | COMMENT |
| MEDIUM | framework/wazuh/rbac/orm.py | 2086 | # Create a rule-role relationship if both exist | COMMENT |
| MEDIUM | framework/wazuh/rbac/orm.py | 2262 | # Create the relationships | COMMENT |
| MEDIUM | framework/wazuh/rbac/orm.py | 2636 | # Create the tables added since the database was created. `create_all` skips the ones | COMMENT |
| MEDIUM | framework/wazuh/core/cluster/master.py | 324 | # Create an event to wait for the response. | COMMENT |
| MEDIUM | framework/wazuh/core/cluster/master.py | 847 | # Create a child process to run the task. | COMMENT |
| MEDIUM | tests/integration/conftest.py | 746 | # Create the SocketControllers | COMMENT |
| MEDIUM | …ntegration/test_wazuh_db/test_backup/test_db_backup.py | 159 | # Create the database backups and assert they have been created correctly | COMMENT |
| MEDIUM⚡ | …asic_usage/test_orphan_promote_after_config_removal.py | 226 | # Create the realtime-tracked file. inotify queues an "added" event; with | COMMENT |
| MEDIUM | …m/test_files/test_basic_usage/test_delete_directory.py | 175 | # This module is entirely skipif'd on Windows (see pytestmark above), so the Windows branch | COMMENT |
| MEDIUM | …es/test_invalid_characters/test_non_utf8_characters.py | 168 | # Create the file with the invalid byte sequence as part of the file name | COMMENT |
| MEDIUM | …m/test_files/test_report_changes/test_large_changes.py | 188 | # Create the file and and capture the event. | COMMENT |
| MEDIUM | …es/test_report_changes/test_report_changes_and_diff.py | 180 | # Create the file and and capture the event. | COMMENT |
| MEDIUM | …_files/test_report_changes/test_report_deleted_diff.py | 170 | # Create the file and and capture the event. | COMMENT |
| MEDIUM | packages/macos/package_files/preinstall.sh | 172 | # Creating the group | COMMENT |
| MEDIUM | packages/macos/package_files/preinstall.sh | 187 | # Creating the user | COMMENT |
| MEDIUM | packages/externals/external_sources.sh | 3 | # This file is sourced by packages/externals/build_external.sh inside the package | COMMENT |
| MEDIUM | api/test/integration/conftest.py | 363 | """This function is responsible for setting up the Docker environment necessary for every test. | STRING |
| MEDIUM | wodles/gcloud/tests/test_subscriber.py | 124 | # Create a large list of fake messages | COMMENT |
| MEDIUM | wodles/azure/tests/db/test_orm.py | 60 | # Create the tables | COMMENT |
| MEDIUM | wodles/aws/subscribers/s3_log_handler.py | 147 | # Define the regex pattern for invalid CSV header characters | COMMENT |
| MEDIUM | src/init/darwin-addusers.sh | 72 | # Creating the groups. | COMMENT |
| MEDIUM | src/init/darwin-addusers.sh | 82 | # Creating the users. | COMMENT |
| MEDIUM | src/init/credentials/wazuh-manager-certificates.sh | 5 | # This file is a sourceable POSIX /bin/sh library. It depends on the public and | COMMENT |
| MEDIUM⚡ | …ared_modules/indexer_connector/qa/test_efficacy_log.py | 485 | # Create the index and try to insert a document with old mapping, this should fail and the element queue in the pers | COMMENT |
| MEDIUM⚡ | …ared_modules/indexer_connector/qa/test_efficacy_log.py | 589 | # Create the index and try to insert a document with old mapping, this should fail and the element queue in the pers | COMMENT |
| MEDIUM | …ty_scanner/testtool/versionMatcher/version_verifier.sh | 103 | # Define the callback function based on the Linux distribution | COMMENT |
| MEDIUM | …s/engine-suite/src/engine_private/cmds/ns/import_ns.py | 28 | # Create the api request | COMMENT |
| MEDIUM | …ools/engine-suite/src/engine_private/cmds/cm/delete.py | 16 | # Create the api request | COMMENT |
| MEDIUM | …/tools/engine-suite/src/engine_private/cmds/cm/list.py | 15 | # Create the api request | COMMENT |
| MEDIUM⚡ | …gine-suite/src/engine_private/cmds/cm/policy_upsert.py | 29 | # Create the api request | COMMENT |
| MEDIUM | …gine-suite/src/engine_private/cmds/cm/policy_delete.py | 15 | # Create the api request | COMMENT |
| MEDIUM | …e/tools/engine-suite/src/engine_private/cmds/cm/get.py | 16 | # Create the api request | COMMENT |
| MEDIUM⚡ | …ools/engine-suite/src/engine_private/cmds/cm/upsert.py | 30 | # Create the api request | COMMENT |
| MEDIUM | …ine-suite/src/engine_public/cmds/cm/policy_validate.py | 26 | # Create the api request | COMMENT |
| MEDIUM⚡ | …tools/engine-suite/src/engine_public/cmds/cm/upsert.py | 30 | # Create the api request | COMMENT |
| MEDIUM | …ls/engine-suite/src/engine_test/cmds/session_reload.py | 21 | # Create the request | COMMENT |
| MEDIUM | …tools/engine-suite/src/engine_test/cmds/session_get.py | 20 | # Create the request | COMMENT |
| MEDIUM | …ngine-suite/src/engine_test/cmds/session_delete_all.py | 19 | # Create the request | COMMENT |
| MEDIUM | …ngine-suite/src/engine_test/cmds/session_delete_all.py | 32 | # Create the list of sessions to delete | COMMENT |
| MEDIUM | …ls/engine-suite/src/engine_test/cmds/session_delete.py | 21 | # Create the request | COMMENT |
| MEDIUM | …ools/engine-suite/src/engine_test/cmds/session_list.py | 19 | # Create the request | COMMENT |
| MEDIUM | …tools/engine-suite/src/engine_test/cmds/session_add.py | 22 | # Create the request | COMMENT |
| MEDIUM | …tools/engine-suite/src/engine_test/conf/integration.py | 110 | # Create a new instance with the extracted values | COMMENT |
| MEDIUM⚡ | …ne/tools/engine-suite/src/engine_router/cmds/update.py | 21 | # Create the request | COMMENT |
| MEDIUM | …ne/tools/engine-suite/src/engine_router/cmds/delete.py | 18 | # Create the request | COMMENT |
| MEDIUM | …ne/tools/engine-suite/src/engine_router/cmds/ingest.py | 18 | # Create the request | COMMENT |
| MEDIUM | …gine/tools/engine-suite/src/engine_router/cmds/list.py | 18 | # Create the request | COMMENT |
| MEDIUM | …ngine/tools/engine-suite/src/engine_router/cmds/add.py | 21 | # Create the request | COMMENT |
| MEDIUM | …ne/tools/engine-suite/src/engine_router/cmds/reload.py | 20 | # Create the request | COMMENT |
| MEDIUM | …ngine/tools/engine-suite/src/engine_router/cmds/get.py | 19 | # Create the request | COMMENT |
| MEDIUM⚡ | …ngine/test/integration_tests/tester/steps/api_steps.py | 247 | # Create the session pointing to namespaceId == policy_name | COMMENT |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …asic_usage/test_orphan_promote_after_config_removal.py | 222 | # Step 1: agent is up via daemons_handler. The baseline scan has | COMMENT |
| LOW | …asic_usage/test_orphan_promote_after_config_removal.py | 248 | # Step 2: stop the agent, drop the realtime <directories> rule from | COMMENT |
| LOW⚡ | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 534 | # Step 1: publish the new CA alongside the one in force. | COMMENT |
| LOW⚡ | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 540 | # Step 2: reissue the manager's certificate under the new CA. Assigning after start() takes | COMMENT |
| LOW | …ation/test_agentd/test_ca_rotation/test_ca_rotation.py | 551 | # Step 3: retire the old CA. The agent is verifying against the new certificate by now, so | COMMENT |
| LOW | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 219 | // Step 1: protocol version. An empty value here must mean "absent or duplicated" -- the | COMMENT |
| LOW⚡ | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 245 | // Step 2: the bounded, pre-signature peek. Nothing here is trusted: `kid` only names the | COMMENT |
| LOW⚡ | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 254 | // Step 3: one lookup resolves the key AND evaluates the client.keys ip column against the | COMMENT |
| LOW | src/remoted/remoted_module/src/auth/authMiddleware.cpp | 291 | // Step 4: the token against that key. The key moves into a wiped buffer for the duration of | COMMENT |
| LOW | …oted_module/src/enrollment/enrollmentAuthenticator.cpp | 88 | // Step 2: which credential is this? A well-framed bearer whose header carries a `kid` is | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1019 | // Step 1: lock_restart (execd, plain-text protocol) | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1034 | // Step 2: open | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1073 | // Step 3: write, chunked at a fixed 32KB (LEGACY_TASK_WPK_CHUNK_SIZE) -- a wire-protocol | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1129 | // Step 4: close | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1146 | // Step 5: sha1 -- compare the agent-reported hash against the expected one | COMMENT |
| LOW | src/remoted/src/legacy_task_delivery.c | 1195 | // Step 6: upgrade | COMMENT |
| LOW⚡ | …dules/sync_protocol/tests/test_agent_sync_protocol.cpp | 3715 | // Step 1: Clear all DataContext | COMMENT |
| LOW⚡ | …dules/sync_protocol/tests/test_agent_sync_protocol.cpp | 3721 | // Step 2: Fetch pending DataValue items (onlyDataValues=true) | COMMENT |
| LOW⚡ | …sync_protocol/tests/test_sync_protocol_integration.cpp | 255 | // Step 1: Persist DataValue items | COMMENT |
| LOW⚡ | …sync_protocol/tests/test_sync_protocol_integration.cpp | 264 | // Step 2: Persist DataContext items | COMMENT |
| LOW⚡ | …sync_protocol/tests/test_sync_protocol_integration.cpp | 273 | // Step 3: Verify we have both types | COMMENT |
| LOW⚡ | …sync_protocol/tests/test_sync_protocol_integration.cpp | 277 | // Step 4: Clear all DataContext | COMMENT |
| LOW⚡ | …sync_protocol/tests/test_sync_protocol_integration.cpp | 280 | // Step 5: Fetch only DataValues | COMMENT |
| LOW | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 281 | // Step 3: the temporary, beside the destination, in the same directory descriptor. | COMMENT |
| LOW | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 321 | // Step 4: the bytes finishWrite() already serialised and hashed. Short writes and EINTR are | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 349 | // Step 5: the contents on the medium before anything else is decided. | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 356 | // Step 6: the destination's own owner and mode, read from its descriptor under the lock -- | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 372 | // Step 7: again, because the owner and mode set above are metadata a crash could lose. | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 379 | // Step 8: is the destination still the file we read under the lock? A writer that did not | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 388 | // Step 9: a checked close -- a deferred write error surfaces here and nowhere else. | COMMENT |
| LOW⚡ | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 397 | // Step 10: the publication itself, one step for every reader. | COMMENT |
| LOW | …red_modules/manager_certs/src/commands/atomicWrite.cpp | 408 | // Step 11: the rename is visible now; surviving a power loss needs the directory flushed. | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1903 | // Step 2: Calculate new version | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1911 | // Step 3: Set new version on all modules | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1986 | // Step 2: Get versions, calculate new version, and set it on all modules | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1995 | // Step 3: Trigger flush while still paused. | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 2005 | // Step 4: Resume all modules immediately. The pause window is now minimized to: | COMMENT |
| LOW⚡ | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 2012 | // Step 5: Wait for flush completion before handing the new version to the manager. | COMMENT |
| LOW | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1846 | // Step 1: Get version from each module | COMMENT |
| LOW | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 1965 | // Step 1: Pause all coordination modules | COMMENT |
| LOW | …les/agent_info/agent_info_impl/src/agent_info_impl.cpp | 2035 | // Step 6: Build indices list based on enabled modules and synchronize. | COMMENT |
| LOW⚡ | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 3207 | // Step 0: Clear any existing DataContext from previous scans | COMMENT |
| LOW⚡ | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 3211 | // Step 1: Fetch pending DataValue items from syscollector_vd_sync.db | COMMENT |
| LOW⚡ | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 3219 | // Step 2: Build exclusion sets - IDs of items already submitted as DataValue | COMMENT |
| LOW⚡ | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 3228 | // Step 3: Determine what DataContext tables are needed based on platform rules | COMMENT |
| LOW | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 3246 | // Step 4: Fetch and submit DataContext for each required table | COMMENT |
| LOW | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 4185 | // Step 1: Generate stateful DELETE events for each excess record | COMMENT |
| LOW | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 4217 | // Step 2: Reset sync flag to 0 for these records | COMMENT |
| LOW | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 5842 | // Step 1: Delete all rows in a transaction | COMMENT |
| LOW | src/wazuh_modules/syscollector/src/syscollectorImp.cpp | 5871 | // Step 2: Re-insert rows with new sync value in a transaction to force commit | COMMENT |
| LOW | src/logcollector/src/logcollector.c | 1606 | /* Because Windows cache's files, we need to check if the file | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 434 | # Step 1: Stop manager | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 437 | # Step 2: Start analysisd | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 440 | # Step 3: Wait for engine ready | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 443 | # Step 4: Start resource monitor | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 446 | # Step 5: Grace period before benchmark | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 466 | # Step 7: Grace period after benchmark | COMMENT |
| LOW⚡ | src/engine/test/acceptance_test/acceptance_test.sh | 470 | # Step 8: Stop monitor & analysisd | COMMENT |
| LOW⚡ | src/engine/source/api/cmcrud/src/handlers.cpp | 440 | // Step 1: Import into temp namespace (validates structure). | COMMENT |
| LOW⚡ | src/engine/source/api/cmcrud/src/handlers.cpp | 450 | // Step 2: If has integrations, post a tester entry to validate | COMMENT |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/manager_benchmark/prepare_manager.sh | 29 | # steady state, while the harness deliberately asks faster than that to | COMMENT |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_ubuntu.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_ubuntu.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_ubuntu.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …_benchmark/sample_payloads/dumps/sca_full_windows.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …_benchmark/sample_payloads/dumps/sca_full_windows.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …_benchmark/sample_payloads/dumps/sca_full_windows.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …_benchmark/sample_payloads/dumps/sca_full_windows.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …_benchmark/sample_payloads/dumps/sca_full_windows.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_centos.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_centos.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM⚡ | …r_benchmark/sample_payloads/dumps/sca_full_centos.json | 1 | {"metadata":{"module":"sca","mode":"ModuleFull","option":"Sync","indices":["wazuh-states-sca"]},"items":[{"seq":0,"opera | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012_non_r2.yml | 3499 | # 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location | COMMENT |
| MEDIUM | ruleset/sca/windows/cis_win2012_non_r2.yml | 8057 | # 18.6.11.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto | COMMENT |
| MEDIUM | ruleset/sca/windows/cis_win2012_non_r2.yml | 8143 | remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012_non_r2.yml | 12050 | impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012_non_r2.yml | 13746 | description: 'This policy setting specifies whether computers in your environment will receive security updates from | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012r2.yml | 3223 | # 2.3.17.5 (L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure location | COMMENT |
| MEDIUM | ruleset/sca/windows/cis_win2012r2.yml | 7675 | # 18.6.11.3 (L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'. (Auto | COMMENT |
| MEDIUM | ruleset/sca/windows/cis_win2012r2.yml | 7720 | remediation: "To establish the recommended configuration, set the following Registry value to 0xff (255) (DWORD): HK | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012r2.yml | 11824 | impact: "Users can't access OneDrive from the OneDrive app and file picker. Windows Store apps can't access OneDrive | CODE |
| MEDIUM | ruleset/sca/windows/cis_win2012r2.yml | 13670 | description: 'This policy setting specifies whether computers in your environment will receive security updates from | CODE |
| MEDIUM | framework/wazuh/core/mitre.py | 878 | """This function loads the MITRE data in order to speed up the use of the Framework function. | STRING |
| MEDIUM | framework/wazuh/core/cluster/tests/test_worker.py | 201 | """Mock method in order to obtain a particular output.""" | STRING |
| MEDIUM | framework/wazuh/core/cluster/tests/test_worker.py | 237 | """Mock method in order to obtain a particular output.""" | STRING |
| MEDIUM | framework/wazuh/tests/data/schema_mitre_test.sql | 259 | INSERT INTO mitigation VALUES('course-of-action--aeff5887-8f9e-48d5-a523-9b395e2ce80a','Credential Dumping Mitigation',r | CODE |
| MEDIUM | framework/wazuh/tests/data/schema_mitre_test.sql | 518 | INSERT INTO use VALUES('relationship--dc10e96f-1d3c-4ab9-8df6-acdc8238ec6c','intrusion-set--bef4c620-0787-42a8-a96d-b7eb | CODE |
| MEDIUM | .github/workflows/5_testunit_managercerts.yml | 190 | # cannot elevate. What that action added on this path is kept verbatim: `ASAN_OPTIONS= | COMMENT |
| MEDIUM | .github/workflows/5_testintegration_taskmanager.yml | 49 | # The QA harness boots the real module through this: the same shared object modulesd loads, | COMMENT |
| MEDIUM | .github/workflows/5_testunit_taskmanager.yml | 73 | # starting the worker pool -- which is not a unit test, it is the qa harness, and the qa | COMMENT |
| MEDIUM | .github/workflows/5_testunit_taskmanager.yml | 74 | # harness already does exactly that (see qa/, including kill -9 recovery and the graceful | COMMENT |
| MEDIUM | …/workflows/5_testintegration_inventory-sync-server.yml | 48 | # The QA harness: --serve boots the real server (and would boot the real | COMMENT |
| MEDIUM | api/test/integration/mapping/selection_rules.yaml | 163 | # The environment and the harness | COMMENT |
| MEDIUM | wodles/aws/tests/test_guardduty.py | 155 | """Test 'send_event' method makes the necessary calls in order to send the event to Analysisd.""" | STRING |
| MEDIUM | wodles/aws/tests/test_vpcflow.py | 173 | """Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files. | STRING |
| MEDIUM | wodles/aws/tests/test_aws_bucket.py | 609 | """Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files.""" | STRING |
| MEDIUM | wodles/aws/tests/test_aws_bucket.py | 631 | """Test 'send_event' method makes the necessary calls in order to send an event to Analysisd.""" | STRING |
| MEDIUM | wodles/aws/tests/test_aws_bucket.py | 791 | """Test 'check_bucket' method makes the necessary method calls in order to verify that the bucket is not empty.""" | STRING |
| MEDIUM | wodles/aws/tests/test_aws_bucket.py | 1131 | """Test 'iter_regions_and_accounts' method makes the necessary calls in order to process the bucket's files.""" | STRING |
| MEDIUM | wodles/aws/tests/test_cloudwatchlogs.py | 82 | """Test 'get_alerts' method makes the expected calls in order to fetch the events and send them to Analysisd. | STRING |
| MEDIUM | wodles/aws/tests/test_cloudwatchlogs.py | 126 | """Test 'remove_aws_log_stream' method makes the necessary calls in order to remove the specified log stream | STRING |
| MEDIUM | …ed/remoted_module/test/unit/statelessEndpoint_test.cpp | 187 | // full pipeline, but validatePayloadIdentity() must still be robust to it on its own contract. | COMMENT |
| MEDIUM | …c/wazuh_modules/task_manager/qa/helpers/task_client.py | 155 | pass # the harness captures the module's log, not this stub's | CODE |
| MEDIUM | src/client-agent/https_client/demo/mock_manager.py | 14 | # Not production code; a demo harness only. | COMMENT |
| MEDIUM | src/engine/test/acceptance_test/acceptance_test.sh | 3 | # acceptance_test.sh – Engine benchmark harness | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/devContainer/e2e/dashboard/capture_logic.py | 543 | CODE | |
| LOW | framework/scripts/tests/test_agent_groups.py | 404 | CODE | |
| LOW | framework/wazuh/security.py | 128 | CODE | |
| LOW | framework/wazuh/security.py | 472 | CODE | |
| LOW | framework/wazuh/security.py | 644 | CODE | |
| LOW | framework/wazuh/security.py | 823 | CODE | |
| LOW | framework/wazuh/mitre.py | 32 | CODE | |
| LOW | framework/wazuh/mitre.py | 79 | CODE | |
| LOW | framework/wazuh/mitre.py | 124 | CODE | |
| LOW | framework/wazuh/mitre.py | 171 | CODE | |
| LOW | framework/wazuh/mitre.py | 218 | CODE | |
| LOW | framework/wazuh/mitre.py | 265 | CODE | |
| LOW | framework/wazuh/agent.py | 523 | CODE | |
| LOW | framework/wazuh/agent.py | 584 | CODE | |
| LOW | framework/wazuh/agent.py | 783 | CODE | |
| LOW | framework/wazuh/agent.py | 827 | CODE | |
| LOW | framework/wazuh/agent.py | 932 | CODE | |
| LOW | framework/wazuh/agent.py | 1013 | CODE | |
| LOW | framework/wazuh/agent.py | 1467 | CODE | |
| LOW | framework/wazuh/manager.py | 293 | CODE | |
| LOW | framework/wazuh/core/results.py | 330 | CODE | |
| LOW | framework/wazuh/core/results.py | 347 | CODE | |
| LOW | framework/wazuh/core/utils.py | 96 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 41 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 184 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 239 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 294 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 350 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 436 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 493 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 576 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 685 | CODE | |
| LOW | framework/wazuh/core/mitre.py | 784 | CODE | |
| LOW | framework/wazuh/core/agent.py | 1395 | CODE | |
| LOW | framework/wazuh/core/agent.py | 1545 | CODE | |
| LOW | framework/wazuh/core/agent.py | 1609 | CODE | |
| LOW | framework/wazuh/core/agent.py | 82 | CODE | |
| LOW | framework/wazuh/core/agent.py | 380 | CODE | |
| LOW | framework/wazuh/core/agent.py | 1131 | CODE | |
| LOW | framework/wazuh/core/agent.py | 1070 | CODE | |
| LOW | framework/wazuh/core/cluster/server.py | 466 | CODE | |
| LOW | framework/wazuh/core/cluster/control.py | 15 | CODE | |
| LOW | framework/wazuh/core/cluster/dapi/dapi.py | 48 | CODE | |
| LOW | api/api/middlewares.py | 765 | CODE | |
| LOW | api/api/models/enrollment_token_model.py | 14 | CODE | |
| LOW | api/api/controllers/cluster_controller.py | 59 | CODE | |
| LOW | api/api/controllers/cluster_controller.py | 426 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 28 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 99 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 474 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 558 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 778 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 842 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 1020 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 1365 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 1484 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 1533 | CODE | |
| LOW | api/api/controllers/agent_controller.py | 1583 | CODE | |
| LOW | api/api/controllers/security_controller.py | 206 | CODE | |
| LOW | api/api/controllers/security_controller.py | 403 | CODE | |
| 19 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ger_benchmark/tool_simulator/internal/runner/runner.go | 403 | ki := r.scn.Defaults.Control.KeepaliveInterval.D() | CODE |
| CRITICAL | …ager_benchmark/tool_simulator/internal/runner/agent.go | 125 | interval := a.r.scn.Defaults.Control.KeepaliveInterval.D() | CODE |
| CRITICAL | …ager_benchmark/tool_simulator/internal/runner/agent.go | 210 | repeatUntil := a.r.scn.Pacing.RepeatUntil.D() | CODE |
| CRITICAL | framework/wazuh/core/cluster/tests/test_cluster.py | 97 | wazuh.core.cluster.utils.read_config.cache_clear() # never reuse a section cached by another test | CODE |
| CRITICAL | api/api/test/test_wazuh_manager_apid.py | 502 | apid.uvicorn.Server.return_value.run.assert_called_once_with(sockets=bound) | CODE |
| CRITICAL | wodles/azure/azure_services/storage.py | 15 | from azure.core.exceptions import AzureError, ClientAuthenticationError, HttpResponseError, ResourceExistsError, \ | CODE |
| CRITICAL | wodles/azure/tests/azure_services/test_storage.py | 18 | from azure.core.exceptions import AzureError, ClientAuthenticationError, HttpResponseError, ResourceModifiedError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | wodles/gcloud/tests/test_subscriber.py | 138 | pubsub.subscriber.pull.side_effect = google_exceptions.DeadlineExceeded("placeholder") | CODE |
| LOW | wodles/gcloud/tests/test_bucket.py | 331 | mock_client.get_bucket.side_effect = google_exception("placeholder") | CODE |
| LOW | wodles/aws/tests/test_aws_bucket.py | 1420 | result = instance.load_information_from_file('fake_key') | CODE |
| LOW | wodles/aws/tests/test_aws_bucket.py | 1440 | instance.load_information_from_file('fake_key') | CODE |
| LOW⚡ | src/remoted/remoted_module/tools/send_agent_json.py | 234 | fake_id, fake_key = "999999", "00" * 32 # an id that (almost certainly) isn't enrolled | CODE |
| LOW⚡ | src/remoted/remoted_module/tools/send_agent_json.py | 235 | return _json_auth_headers(fake_id, fake_key), body | CODE |
| LOW⚡ | src/remoted/remoted_module/tools/send_stateless.py | 173 | fake_id, fake_key = "999999", "00" * 32 # an id that (almost certainly) isn't enrolled | CODE |
| LOW⚡ | src/remoted/remoted_module/tools/send_stateless.py | 174 | headers = auth_headers(fake_id, fake_key) | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 102 | {"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 108 | {"address", {{"street", "123 Main St"}, {"city", "New York"}}} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 121 | nlohmann::json message = {{"name", "John Doe"}, {"age", "not a number"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 134 | nlohmann::json message = {{"name", "John Doe"}, {"age", "30"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 147 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30.5}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 162 | {"name", "John Doe"}, {"age", 30}, {"extra_field", "not allowed"} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 179 | {"name", "John Doe"}, {"age", 30}, {"extra_field", nullptr} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 195 | {"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 197 | {"address", {{"street", "123 Main St"}, {"city", "New York"}, {"extra", nullptr}}} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 213 | {"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 215 | {"address", {{"street", "123 Main St"}, {"city", "New York"}, {"extra", "not allowed"}}} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 229 | nlohmann::json message = {{"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 231 | {"address", {{"street", "123 Main St"}, {"city", "New York"}}} | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 245 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", 1735468800000}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 258 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", 1735468800}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 271 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", "2025-12-29T10:00:00.000Z"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 284 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", "123"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 297 | nlohmann::json message = {{"name", "John Doe"}, {"age", 30}, {"created_at", true}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 331 | {"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 346 | std::string messageStr = R"({"name": "John Doe", "age": 30, "email": "john@example.com"})"; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 358 | std::string messageStr = R"({"name": "John Doe", "age": 30,})"; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 398 | nlohmann::json message = {{"name", nlohmann::json::array({"John Doe", "Jane Doe"})}, {"age", 30}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 398 | nlohmann::json message = {{"name", nlohmann::json::array({"John Doe", "Jane Doe"})}, {"age", 30}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 424 | nlohmann::json message = {{"name", "John Doe"}, {"age", nlohmann::json::array({30, 31, 32})}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 439 | {"name", "John Doe"}, | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 490 | nlohmann::json message = {{"name", "John Doe"}, {"age", nlohmann::json::array({30, "invalid"})}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 504 | nlohmann::json message = {{"name", "John Doe"}, {"is_active", "true"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 517 | nlohmann::json message = {{"name", "John Doe"}, {"is_active", "false"}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 530 | nlohmann::json message = {{"name", "John Doe"}, {"is_active", 1}}; | CODE |
| LOW | …odules/schema_validator/tests/schemaValidator_test.cpp | 543 | nlohmann::json message = {{"name", "John Doe"}, {"is_active", "yes"}}; | CODE |
| LOW | src/unit_tests/syscheckd/test_run_realtime.c | 212 | node->key = "dummy_key"; | CODE |
| LOW⚡ | src/unit_tests/syscheckd/test_run_realtime.c | 548 | const char *dummy_key = "1"; | CODE |
| LOW⚡ | src/unit_tests/syscheckd/test_run_realtime.c | 554 | __real_OSHash_Add_ex(syscheck.realtime->dirtb, dummy_key, (void *) path); | CODE |
| LOW⚡ | src/unit_tests/syscheckd/test_run_realtime.c | 562 | expect_string(__wrap_OSHash_Get_ex, key, dummy_key); | CODE |
| LOW | src/unit_tests/syscheckd/test_run_realtime.c | 851 | expect_string(__wrap_OSHash_Delete_ex, key, "dummy_key"); | CODE |
| LOW | src/unit_tests/syscheckd/test_run_realtime.c | 944 | expect_string(__wrap_OSHash_Delete_ex, key, "dummy_key"); | CODE |
| LOW | …/src/extended_sources/users/tests/test_users_linux.cpp | 566 | auto nameless = makePwd("placeholder", 4242); | CODE |
| LOW | …/src/extended_sources/users/tests/test_users_linux.cpp | 604 | auto nameless = makePwd("placeholder", 4242); | CODE |
| LOW | src/engine/source/yml/test/src/unit/yml_test.cpp | 80 | "street": "123 Main St", | CODE |
| LOW | src/engine/source/yml/test/src/unit/yml_test.cpp | 101 | street: "123 Main St" | CODE |
| LOW | src/engine/source/yml/test/src/unit/yml_test.cpp | 146 | "street": "123 Main St", | CODE |
| LOW | src/engine/source/yml/test/src/unit/yml_test.cpp | 183 | "street": "123 Main St", | CODE |
| LOW | src/engine/source/yml/test/src/unit/yml_test.cpp | 213 | "street": "123 Main St", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/wazuh/core/agent_tasks.py | 21 | __all__ = [ | CODE |
| LOW | framework/wazuh/core/wdb_http.py | 208 | async def set_agents_sync(self, agents_sync: dict) -> None: | CODE |
| LOW | tests/integration/conftest.py | 205 | def set_wazuh_configuration(request: pytest.FixtureRequest, test_configuration: dict) -> None: | CODE |
| LOW | tests/integration/test_api/test_rbac/conftest.py | 12 | def set_security_resources(wait_for_api_start, test_metadata: dict) -> None: | CODE |
| LOW | tests/integration/test_aws/conftest.py | 1001 | def set_test_sqs_queue(metadata: dict, sqs_manager, s3_client, create_test_bucket) -> None: | CODE |
| LOW | tests/integration/test_aws/configurator.py | 76 | def _set_session_id(self) -> None: | CODE |
| LOW⚡ | wodles/gcloud/tests/test_exceptions.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/gcloud/tests/test_access_logs.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/azure/tests/test_db_utils.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/azure/tests/test_azure_logs.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/tests/test_utils.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | wodles/tests/test_aws_tools.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/tests/test_docker_listener.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | wodles/aws/buckets_s3/__init__.py | 15 | __all__ = [ | CODE |
| LOW | wodles/aws/subscribers/__init__.py | 10 | __all__ = [ | CODE |
| LOW | wodles/aws/services/__init__.py | 9 | __all__ = [ | CODE |
| LOW | …e/tools/engine-schema/src/engine_schema/cmds/_types.py | 26 | def update_types_file(mappings_wrapper: Dict[str, Any], output_path: Union[Path, str]) -> None: | CODE |
| LOW | …e/test/engine-test-utils/src/engine_handler/handler.py | 49 | def _set_env(self) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/purge_wazuh.sh | 5 | # Usage: | COMMENT |
| LOW⚡ | tools/manager_benchmark/cleanup_agents.sh | 11 | # Usage: | COMMENT |
| LOW | tools/manager_benchmark/run_matrix.sh | 10 | # Usage: | COMMENT |
| LOW | tools/manager_benchmark/run_benchmark.sh | 15 | # Usage: | COMMENT |
| LOW | tools/manager_benchmark/scrape_metrics.sh | 23 | # Usage: | COMMENT |
| LOW | tools/manager_benchmark/prepare_manager.sh | 59 | # Usage: | COMMENT |
| LOW⚡ | tools/devContainer/scripts/pr-clang.sh | 8 | # Usage: | COMMENT |
| LOW | tools/devContainer/scripts/clean-unused-containers.sh | 15 | # Usage: | COMMENT |
| LOW | tools/devContainer/scripts/toggle_event_dumper.sh | 4 | # Usage: | COMMENT |
| LOW | src/engine/internal_packages/debs/SPECS/build_venv.sh | 10 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/ref/modules/utils/metrics/integration-guide.md | 9 | ## Wire by dependency injection | COMMENT |
| MEDIUM | .github/workflows/5_testunit_contentmanager.yml | 73 | # module's orchestration layer (contentModule, contentModuleFacade, actionOrchestrator, | COMMENT |
| MEDIUM | src/remoted/remoted_module/README.md | 1811 | └── deferredForwarder.hpp/.cpp# limiter + client + per-endpoint post-processing pool orchestration | CODE |
| MEDIUM | src/init/tests/test_resolve_credentials.sh | 18 | # below are about the orchestration on top. | COMMENT |
| MEDIUM | src/engine/test/acceptance_test/README.md | 10 | ├── acceptance_test.sh # Main orchestration script | CODE |
| MEDIUM | src/engine/source/README.md | 162 | ## Startup & dependency injection (`main.cpp`) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/guide/migration/integratord-notifications.md | 193 | <api_key>YOUR_API_KEY</api_key> | CODE |
| HIGH | docs/guide/migration/integratord-notifications.md | 202 | <api_key>YOUR_API_KEY</api_key> | CODE |
| HIGH | docs/guide/migration/virustotal-migration.md | 19 | <api_key>YOUR_API_KEY</api_key> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 9 | def test_function(): | CODE |
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 21 | def test_function(a, b, c=0): | CODE |
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 32 | async def test_function(): | CODE |
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 46 | async def test_function(a, b): | CODE |
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 58 | def test_function(): | CODE |
| LOW⚡ | framework/wazuh/core/tests/test_decorators.py | 68 | def test_function(): | CODE |
| LOW | wodles/gcloud/integration.py | 79 | def process_data(self): | CODE |
| LOW | wodles/gcloud/buckets/bucket.py | 233 | def process_data(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/shared_modules/utils/socketWrapper.hpp | 467 | // TODO: Handle error | COMMENT |
| LOW | src/shared_modules/utils/socketWrapper.hpp | 472 | // TODO: Handle error | COMMENT |
| LOW | src/shared_modules/utils/socketWrapper.hpp | 616 | // TODO: Handle error | COMMENT |
| LOW | src/shared_modules/utils/socketWrapper.hpp | 621 | // TODO: Handle error | COMMENT |
| LOW | src/shared_modules/utils/socketWrapper.hpp | 775 | // TODO: Handle error | COMMENT |
| LOW | src/shared_modules/utils/socketWrapper.hpp | 780 | // TODO: Handle error | COMMENT |
| LOW | src/engine/source/base/include/base/utils/ipUtils.hpp | 32 | // TODO: implement | COMMENT |