Feat/kern 5 r2 m3 31b2c2 resumable helper class effects#537
kern-guard: 41 new issues (+4 on existing code) (+593 advisory)
ℹ️ Inline review comments — no changes.
Mode: ephemeral
Sources: ast
Changed files: 71
All findings: 846
New to this PR: 638
Shown: 45 (41 on changed code, 4 advisory)
Hidden: 593 (advisory or muted rules)
Excluded: 480 findings on paths matched by 18 install patterns
Confidence: 72%-85% on shown findings
Breakdown: ast=45
Advisory findings outside changed code (4)
4 findings listed here are outside the changed code for this PR — they appear in the summary because GitHub can't pin annotations off-diff. Advisory only; they do not affect the check conclusion.
packages/core/src/ir/semantics/internal-effect-machine-helper-runtime.ts · 3 findings
Warning
L243 · boundary-mutation (outside diff)
Global/shared state mutation — consider encapsulating in a store or module
Warning
L261 · boundary-mutation (outside diff)
Global/shared state mutation — consider encapsulating in a store or module
Warning
L266 · boundary-mutation (outside diff)
Global/shared state mutation — consider encapsulating in a store or module
packages/core/src/kir-structural/node.ts · 1 finding
Warning
L230 · boundary-mutation (outside diff)
Global/shared state mutation — consider encapsulating in a store or module
ℹ️ RAG grounding — 4 AI findings dropped for lacking a verifiable rule citation (Tier A). 0 findings passed grounding.
Annotations
Check warning on line 17 in packages/core/src/ir/semantics/deferred-expression-preflight.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(54 chars)`.
Raw output
Confidence: 72%
Check warning on line 16 in packages/core/src/ir/semantics/internal-effect-machine-class-graph.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(41 chars)`.
Raw output
Confidence: 72%
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./po…(27 chars)`.
Raw output
Confidence: 72%
Check warning on line 2 in packages/core/src/ir/semantics/internal-effect-machine-helper-contract.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(41 chars)`.
Raw output
Confidence: 72%
Check warning on line 12 in packages/core/src/ir/semantics/internal-effect-machine-helper-graph.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(41 chars)`.
Raw output
Confidence: 72%
Check warning on line 10 in packages/core/src/ir/semantics/internal-effect-machine-helper-runtime.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(41 chars)`.
Raw output
Confidence: 72%
Check warning on line 2 in packages/core/src/ir/semantics/internal-effect-machine-structure-state.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(40 chars)`.
Raw output
Confidence: 72%
Check warning on line 4 in packages/core/src/ir/semantics/internal-effect-machine-types.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./in…(41 chars)`.
Raw output
Confidence: 72%
Check warning on line 5 in packages/core/src/kir-structural/types.ts
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `kern…(35 chars)`.
Raw output
Confidence: 72%
Check warning on line 9 in packages/core/src/runner-capability-plan.ts
kern-guard / kern-guard
secrets/high-entropy-string ×2
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./ru…(38 chars)`.
(+1 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 16 in scripts/kir-v1/alpha-receipt-policy.json
kern-guard / kern-guard
secrets/high-entropy-string ×2
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(48 chars)`.
(+1 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 514 in scripts/kir-v1/coverage-witness-ledger.json
kern-guard / kern-guard
secrets/high-entropy-string ×4
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `kir-…(38 chars)`.
(+3 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 930 in scripts/kir-v1/eligibility.json
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `kir-…(38 chars)`.
Raw output
Confidence: 72%
Check warning on line 5 in scripts/source-runner-class-frame-convergence.mjs
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(54 chars)`.
Raw output
Confidence: 72%
Check warning on line 10 in scripts/source-runner-class-helper-convergence.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×3
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(70 chars)`.
(+2 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 9 in scripts/source-runner-class-super-method-convergence.mjs
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(54 chars)`.
Raw output
Confidence: 72%
Check warning on line 9 in scripts/source-runner-class-virtual-method-convergence.mjs
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(54 chars)`.
Raw output
Confidence: 72%
Check warning on line 117 in scripts/source-runner-convergence-manifest.json
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(76 chars)`.
Raw output
Confidence: 72%
Check warning on line 5 in scripts/source-runner-module-ownership-convergence.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×8
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `pack…(73 chars)`.
(+7 more of this rule in this file)
Raw output
Confidence: 72%