feat(kir): measure canonicalizer tranche coverage#539
kern-guard: 26 new issues (+246 advisory)
ℹ️ Inline review comments — no changes.
Mode: ephemeral
Sources: ast
Changed files: 19
All findings: 273
New to this PR: 272
Shown: 26
Hidden: 246 (advisory or muted rules)
Excluded: 93 findings on paths matched by 18 install patterns
Fix suggestions: 1 shown finding
Confidence: 72%-85% on shown findings
Breakdown: ast=26
Annotations
Check warning on line 143 in scripts/kern-canonicalizer/coverage-families.mjs
kern-guard / kern-guard
unchecked-find
Result of .get() used without null check. 'registered' may be undefined.
Raw output
Confidence: 80%
Suggestion:
Add a null check before accessing 'registered', or use optional chaining (registered?.property).
Check warning on line 190 in scripts/kern-canonicalizer/coverage-profile.mjs
kern-guard / kern-guard
unused-collection
Collection 'events' is populated but never read
Raw output
Confidence: 80%
Check warning on line 4 in scripts/check-kern-canonicalizer-coverage.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×2
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./ke…(48 chars)`.
(+1 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 7 in scripts/kern-canonicalizer/coverage-catalog.mjs
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `../.…(60 chars)`.
Raw output
Confidence: 72%
Check warning on line 3 in scripts/kern-canonicalizer/coverage-families.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×3
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `../.…(60 chars)`.
(+2 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 2 in scripts/kern-canonicalizer/coverage-family-registry.json
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `kern…(49 chars)`.
Raw output
Confidence: 72%
Check warning on line 5 in scripts/kern-canonicalizer/coverage-implementation.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×4
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `../.…(49 chars)`.
(+3 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 1 in scripts/kern-canonicalizer/coverage-profile.mjs
kern-guard / kern-guard
secrets/high-entropy-string ×4
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `../.…(49 chars)`.
(+3 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 26 in scripts/kern-canonicalizer/coverage-summary.json
kern-guard / kern-guard
secrets/high-entropy-string ×6
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `if.p…(50 chars)`.
(+5 more of this rule in this file)
Raw output
Confidence: 72%
Check warning on line 7 in scripts/kern-canonicalizer/coverage.mjs
kern-guard / kern-guard
secrets/high-entropy-string
A high-entropy string that looks like a random secret was committed here. If it is a credential, move it to an env var or secret store and rotate it. Matched value: `./co…(29 chars)`.
Raw output
Confidence: 72%