{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D4","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/D4"},{"id":"D6","name":"Cohesion (LCOM4)","shortDescription":{"text":"Cohesion (LCOM4)"},"helpUri":"https://codehealth.canine.dev/dimensions/D6"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D11","name":"Test Reliability","shortDescription":{"text":"Test Reliability"},"helpUri":"https://codehealth.canine.dev/dimensions/D11"},{"id":"D12","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/D12"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D14","name":"License Compliance","shortDescription":{"text":"License Compliance"},"helpUri":"https://codehealth.canine.dev/dimensions/D14"},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D16","name":"Bus Factor","shortDescription":{"text":"Bus Factor"},"helpUri":"https://codehealth.canine.dev/dimensions/D16"},{"id":"D17","name":"Explicit Debt","shortDescription":{"text":"Explicit Debt"},"helpUri":"https://codehealth.canine.dev/dimensions/D17"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29","relationships":[{"target":{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-89","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-94","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-77","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-79","CWE-89","CWE-78","CWE-94","CWE-77"],"owasp":"A05:2025"}},{"id":"D30","name":"Dependency Vulnerabilities","shortDescription":{"text":"Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D30","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-937","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1395","CWE-937"],"owasp":"A03:2025"}},{"id":"D31","name":"IaC \u0026 Container Security","shortDescription":{"text":"IaC \u0026 Container Security"},"helpUri":"https://codehealth.canine.dev/dimensions/D31","relationships":[{"target":{"id":"CWE-1032","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-732","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-16","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1032","CWE-732","CWE-16"],"owasp":"A02:2025"}},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D36","name":"Supply-chain Provenance \u0026 Signing","shortDescription":{"text":"Supply-chain Provenance \u0026 Signing"},"helpUri":"https://codehealth.canine.dev/dimensions/D36","relationships":[{"target":{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1357","CWE-494"],"owasp":"A03:2025"}},{"id":"D43","name":"Malicious Dependencies","shortDescription":{"text":"Malicious Dependencies"},"helpUri":"https://codehealth.canine.dev/dimensions/D43","relationships":[{"target":{"id":"CWE-506","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-506"],"owasp":"A08:2025"}},{"id":"D44","name":"Platform End-of-Life","shortDescription":{"text":"Platform End-of-Life"},"helpUri":"https://codehealth.canine.dev/dimensions/D44"},{"id":"AX10","name":"Code composition","shortDescription":{"text":"Code composition"},"helpUri":"https://codehealth.canine.dev/dimensions/AX10"},{"id":"AX3","name":"Project dependency cycles","shortDescription":{"text":"Project dependency cycles"},"helpUri":"https://codehealth.canine.dev/dimensions/AX3"},{"id":"AX4","name":"Dependency direction","shortDescription":{"text":"Dependency direction"},"helpUri":"https://codehealth.canine.dev/dimensions/AX4"},{"id":"AXB2","name":"Runtime readiness","shortDescription":{"text":"Runtime readiness"},"helpUri":"https://codehealth.canine.dev/dimensions/AXB2"},{"id":"C2","name":"Access Controls","shortDescription":{"text":"Access Controls"},"helpUri":"https://codehealth.canine.dev/dimensions/C2"},{"id":"ED5","name":"Idempotency","shortDescription":{"text":"Idempotency"},"helpUri":"https://codehealth.canine.dev/dimensions/ED5"},{"id":"M1","name":"Documentation (README)","shortDescription":{"text":"Documentation (README)"},"helpUri":"https://codehealth.canine.dev/dimensions/M1"},{"id":"M2","name":"Architecture documentation","shortDescription":{"text":"Architecture documentation"},"helpUri":"https://codehealth.canine.dev/dimensions/M2"},{"id":"M3","name":"Folder \u0026 project structure","shortDescription":{"text":"Folder \u0026 project structure"},"helpUri":"https://codehealth.canine.dev/dimensions/M3"},{"id":"M4","name":"Documentation accuracy","shortDescription":{"text":"Documentation accuracy"},"helpUri":"https://codehealth.canine.dev/dimensions/M4"},{"id":"P1","name":"CI/CD gates","shortDescription":{"text":"CI/CD gates"},"helpUri":"https://codehealth.canine.dev/dimensions/P1"},{"id":"P10","name":"Library API \u0026 versioning","shortDescription":{"text":"Library API \u0026 versioning"},"helpUri":"https://codehealth.canine.dev/dimensions/P10"},{"id":"P12","name":"CI test-gate honesty","shortDescription":{"text":"CI test-gate honesty"},"helpUri":"https://codehealth.canine.dev/dimensions/P12"},{"id":"P2","name":"Observability","shortDescription":{"text":"Observability"},"helpUri":"https://codehealth.canine.dev/dimensions/P2"},{"id":"P3","name":"Security \u0026 performance tooling","shortDescription":{"text":"Security \u0026 performance tooling"},"helpUri":"https://codehealth.canine.dev/dimensions/P3"},{"id":"P4","name":"Deployment \u0026 Rollback","shortDescription":{"text":"Deployment \u0026 Rollback"},"helpUri":"https://codehealth.canine.dev/dimensions/P4"},{"id":"P5","name":"DR \u0026 Backup","shortDescription":{"text":"DR \u0026 Backup"},"helpUri":"https://codehealth.canine.dev/dimensions/P5"},{"id":"P6","name":"Release Hygiene","shortDescription":{"text":"Release Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/P6"},{"id":"P7","name":"Outbound HTTP resilience","shortDescription":{"text":"Outbound HTTP resilience"},"helpUri":"https://codehealth.canine.dev/dimensions/P7"},{"id":"PF3","name":"Async \u0026 latency hygiene","shortDescription":{"text":"Async \u0026 latency hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/PF3"},{"id":"X1","name":"Async correctness","shortDescription":{"text":"Async correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X1"},{"id":"X10","name":"Duplicated predicate","shortDescription":{"text":"Duplicated predicate"},"helpUri":"https://codehealth.canine.dev/dimensions/X10"},{"id":"X12","name":"Unreachable branch","shortDescription":{"text":"Unreachable branch"},"helpUri":"https://codehealth.canine.dev/dimensions/X12"},{"id":"X13","name":"Undrained process stream","shortDescription":{"text":"Undrained process stream"},"helpUri":"https://codehealth.canine.dev/dimensions/X13"},{"id":"X14","name":"Bypassable address classification","shortDescription":{"text":"Bypassable address classification"},"helpUri":"https://codehealth.canine.dev/dimensions/X14"},{"id":"X15","name":"Unvalidated length from an untrusted reader","shortDescription":{"text":"Unvalidated length from an untrusted reader"},"helpUri":"https://codehealth.canine.dev/dimensions/X15"},{"id":"X16","name":"Unfloored truncation loop","shortDescription":{"text":"Unfloored truncation loop"},"helpUri":"https://codehealth.canine.dev/dimensions/X16"},{"id":"X17","name":"Uncapped recursion over a caller-supplied document","shortDescription":{"text":"Uncapped recursion over a caller-supplied document"},"helpUri":"https://codehealth.canine.dev/dimensions/X17"},{"id":"X18","name":"Disposal-pattern correctness","shortDescription":{"text":"Disposal-pattern correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X18"},{"id":"X19","name":"Unrestored process-global state","shortDescription":{"text":"Unrestored process-global state"},"helpUri":"https://codehealth.canine.dev/dimensions/X19"},{"id":"X20","name":"Mistyped argument guard","shortDescription":{"text":"Mistyped argument guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X20"},{"id":"X21","name":"Side-effecting pattern guard","shortDescription":{"text":"Side-effecting pattern guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X21"},{"id":"X22","name":"Contradicted release guard","shortDescription":{"text":"Contradicted release guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X22"},{"id":"X23","name":"Unguarded diagnostic materialisation","shortDescription":{"text":"Unguarded diagnostic materialisation"},"helpUri":"https://codehealth.canine.dev/dimensions/X23"},{"id":"X24","name":"Document value interpolated into markup unescaped","shortDescription":{"text":"Document value interpolated into markup unescaped"},"helpUri":"https://codehealth.canine.dev/dimensions/X24"},{"id":"X25","name":"Inert configuration knob","shortDescription":{"text":"Inert configuration knob"},"helpUri":"https://codehealth.canine.dev/dimensions/X25"},{"id":"X26","name":"Unsynchronised callback handoff","shortDescription":{"text":"Unsynchronised callback handoff"},"helpUri":"https://codehealth.canine.dev/dimensions/X26"},{"id":"X27","name":"Collection changed while being enumerated","shortDescription":{"text":"Collection changed while being enumerated"},"helpUri":"https://codehealth.canine.dev/dimensions/X27"},{"id":"X28","name":"Index access outside its own emptiness guard","shortDescription":{"text":"Index access outside its own emptiness guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X28"},{"id":"X29","name":"Per-element action decided by a fixed element","shortDescription":{"text":"Per-element action decided by a fixed element"},"helpUri":"https://codehealth.canine.dev/dimensions/X29"},{"id":"X3","name":"Exception handling","shortDescription":{"text":"Exception handling"},"helpUri":"https://codehealth.canine.dev/dimensions/X3"},{"id":"X30","name":"Support guard that admits what it rejects","shortDescription":{"text":"Support guard that admits what it rejects"},"helpUri":"https://codehealth.canine.dev/dimensions/X30"},{"id":"X32","name":"Type resolved by simple name across every loaded assembly","shortDescription":{"text":"Type resolved by simple name across every loaded assembly"},"helpUri":"https://codehealth.canine.dev/dimensions/X32"},{"id":"X4","name":"Structured logging","shortDescription":{"text":"Structured logging"},"helpUri":"https://codehealth.canine.dev/dimensions/X4"},{"id":"X6","name":"Hand-rolled structured-format parsing","shortDescription":{"text":"Hand-rolled structured-format parsing"},"helpUri":"https://codehealth.canine.dev/dimensions/X6"},{"id":"X7","name":"Silent fallback defaults","shortDescription":{"text":"Silent fallback defaults"},"helpUri":"https://codehealth.canine.dev/dimensions/X7"},{"id":"X9","name":"Subsumed condition operand","shortDescription":{"text":"Subsumed condition operand"},"helpUri":"https://codehealth.canine.dev/dimensions/X9"}]}},"results":[{"ruleId":"D1","level":"warning","message":{"text":"testing_util.run_test (cyclomatic 119): testing_util.run_test has cyclomatic complexity 119 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff8848bd3471e648b0533157c059e08ba7b3a2051e0dea296e0869b6f8a04a2c"}},{"ruleId":"D1","level":"warning","message":{"text":"RayPPOTrainer.fit (cyclomatic 58): RayPPOTrainer.fit has cyclomatic complexity 58 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1405}}}],"partialFingerprints":{"codehealthFindingId/v1":"bb5bc10ee8094520da83678f89b4f1f209401729e566ae77fb313ae2e48e3ba5"}},{"ruleId":"D1","level":"warning","message":{"text":"FSDPEngineWithLMHead.prepare_model_outputs (cyclomatic 49): FSDPEngineWithLMHead.prepare_model_outputs has cyclomatic complexity 49 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1344}}}],"partialFingerprints":{"codehealthFindingId/v1":"e44a17744ada8730b20c15690b0f1e37808a7a6aaea1cde6e38a2f8193b34e4a"}},{"ruleId":"D1","level":"warning","message":{"text":"grader.math_equal (cyclomatic 45): grader.math_equal has cyclomatic complexity 45 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"df55f08af5a6c15601d5bd49921d9508c59d0b4773f1b260d48a82bca422f6be"}},{"ruleId":"D1","level":"warning","message":{"text":"vLLMHttpServer.generate (cyclomatic 41): vLLMHttpServer.generate has cyclomatic complexity 41 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":572}}}],"partialFingerprints":{"codehealthFindingId/v1":"11ce6cf94c6272a6fa63a46067c7ddb1533080860d60709f2ca6f859239db868"}},{"ruleId":"D1","level":"warning","message":{"text":"rollout_corr_helper.compute_rollout_rejection_mask (cyclomatic 37): rollout_corr_helper.compute_rollout_rejection_mask has cyclomatic complexity 37 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":197}}}],"partialFingerprints":{"codehealthFindingId/v1":"f8af37e4dabff4f3ee4e56d0cd657c2b2f7bdf497426b62b3d6b56bf15c9321e"}},{"ruleId":"D1","level":"warning","message":{"text":"deepseek.encode_messages (cyclomatic 37): deepseek.encode_messages has cyclomatic complexity 37 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/deepseek.py"},"region":{"startLine":157}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c481cdaa079146234933f4fba3751c6f8e457fb63119c24a3102dd583866e5a"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronEngine.forward_backward_batch (cyclomatic 37): MegatronEngine.forward_backward_batch has cyclomatic complexity 37 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":783}}}],"partialFingerprints":{"codehealthFindingId/v1":"b6389f27ea0127ec23d2a02d922bdb1ecfbd30a9d1d8d5e272f3e93e22c746ed"}},{"ruleId":"D1","level":"warning","message":{"text":"FSDPCheckpointManager.save_checkpoint (cyclomatic 36): FSDPCheckpointManager.save_checkpoint has cyclomatic complexity 36 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/fsdp_checkpoint_manager.py"},"region":{"startLine":360}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf0754fe624d21605cb9488dbad1bc2bb85e3694c10cae01e758fab5154e3b34"}},{"ruleId":"D1","level":"warning","message":{"text":"model_forward.gptmodel_forward_model_engine (cyclomatic 35): model_forward.gptmodel_forward_model_engine has cyclomatic complexity 35 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward.py"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"adc4f9895ac7abff4b4740b80404ac869ebbff0afa054e42533c98f85ef5300a"}},{"ruleId":"D1","level":"warning","message":{"text":"util.preprocess_thd_engine (cyclomatic 35): util.preprocess_thd_engine has cyclomatic complexity 35 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f46b47fdb3715fe4fea5f22d76cf0ce9b70c1fd1f92d7105be3913869f62c59"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronEngineWithLMHead.forward_step (cyclomatic 35): MegatronEngineWithLMHead.forward_step has cyclomatic complexity 35 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":1192}}}],"partialFingerprints":{"codehealthFindingId/v1":"629673e88b8a3acd11c9c7694eae61a5ba13760e41d48f1e006a6316a9a0d770"}},{"ruleId":"D1","level":"warning","message":{"text":"vLLMHttpServer.launch_server (cyclomatic 34): vLLMHttpServer.launch_server has cyclomatic complexity 34 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":292}}}],"partialFingerprints":{"codehealthFindingId/v1":"1b5dccf810bd83838b839a2cdb5613a26be26f92d1eb71c2280c7094e5fc8de9"}},{"ruleId":"D1","level":"warning","message":{"text":"monkey_patch.apply_monkey_patch (cyclomatic 33): monkey_patch.apply_monkey_patch has cyclomatic complexity 33 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"9221eee9f01d228f2f421f679fe4a8fca9d9d6ed5e8f60243e256163624e178b"}},{"ruleId":"D1","level":"warning","message":{"text":"kernels.efficient_entropy_backward (cyclomatic 33): kernels.efficient_entropy_backward has cyclomatic complexity 33 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1518}}}],"partialFingerprints":{"codehealthFindingId/v1":"20331d548622e9f3b949d9a11014bfd4f5adb02fc20a528cffbca0bf3fe9963c"}},{"ruleId":"D1","level":"warning","message":{"text":"SGLangHttpServer.launch_server (cyclomatic 33): SGLangHttpServer.launch_server has cyclomatic complexity 33 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":267}}}],"partialFingerprints":{"codehealthFindingId/v1":"a8cc0501c95e9ceb25edb5c393c58f8a3150eb9fd0b3e56f8f4d8aa605c9eced"}},{"ruleId":"D1","level":"warning","message":{"text":"utils._process_single_case (cyclomatic 30): utils._process_single_case has cyclomatic complexity 30 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"8c3fa763b71de4ba3c1f6edc14cebd73f31daeebade987669f2f59a8aded2557"}},{"ruleId":"D1","level":"warning","message":{"text":"MultiTurnSFTDataset.__getitem__ (cyclomatic 29): MultiTurnSFTDataset.__getitem__ has cyclomatic complexity 29 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/multiturn_sft_dataset.py"},"region":{"startLine":291}}}],"partialFingerprints":{"codehealthFindingId/v1":"379f41456e2aade143d068b4bf50119d43fa266a31487867b71e6678a0d56a08"}},{"ruleId":"D1","level":"warning","message":{"text":"ToolAgentLoop._handle_processing_tools_state (cyclomatic 28): ToolAgentLoop._handle_processing_tools_state has cyclomatic complexity 28 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"35070a6a9b051d4386cedc60118691599719a44fcc6b801476939c8b794da5c8"}},{"ruleId":"D1","level":"warning","message":{"text":"SFTTrainer.fit (cyclomatic 27): SFTTrainer.fit has cyclomatic complexity 27 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":308}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a5b61a35b3cd268a86cfc08a92282f54c01540d26974ca38866008ba64881e2"}},{"ruleId":"D1","level":"warning","message":{"text":"RolloutConfig.__post_init__ (cyclomatic 27): RolloutConfig.__post_init__ has cyclomatic complexity 27 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/rollout.py"},"region":{"startLine":316}}}],"partialFingerprints":{"codehealthFindingId/v1":"c883ab91c6e5a5c8bf600c319fb8d28d640e0f916cc924b9066cf5f6fd8f6c10"}},{"ruleId":"D1","level":"warning","message":{"text":"metric_utils.process_validation_metrics (cyclomatic 26): metric_utils.process_validation_metrics has cyclomatic complexity 26 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":896}}}],"partialFingerprints":{"codehealthFindingId/v1":"2120e7f2191ccab2561d209ceaed8785c14cf7b130b2ce459508cba533bd30fa"}},{"ruleId":"D1","level":"warning","message":{"text":"HFModelConfig.__post_init__ (cyclomatic 26): HFModelConfig.__post_init__ has cyclomatic complexity 26 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/model.py"},"region":{"startLine":148}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e86b967bb7bd3d3e8ca9fe1b8a0ee7b0b494feabeafa730c62bcad5bcf33c89"}},{"ruleId":"D1","level":"warning","message":{"text":"FullyAsyncLLMServerClient.generate (cyclomatic 26): FullyAsyncLLMServerClient.generate has cyclomatic complexity 26 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":226}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3e6240b2b51f961267f1536abd441d6a752003f1548bc4ebc55d7b7519aa56d"}},{"ruleId":"D1","level":"warning","message":{"text":"SGLangHttpServer.generate (cyclomatic 25): SGLangHttpServer.generate has cyclomatic complexity 25 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":521}}}],"partialFingerprints":{"codehealthFindingId/v1":"96f19044ae25184238e5b5612dc8da396a39ea5398738847e0403db4ea10c68b"}},{"ruleId":"D1","level":"warning","message":{"text":"sparse_gather.gather_slot_entries_to_rank0 (cyclomatic 24): sparse_gather.gather_slot_entries_to_rank0 has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/delta_sync/sparse_gather.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ed30d1eead7aeac01ee5a14482801434fa5bbc875858ed4038aa29688546535"}},{"ruleId":"D1","level":"warning","message":{"text":"kimi_checkpoint_engine.receive_tensor (cyclomatic 24): kimi_checkpoint_engine.receive_tensor has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":66}}}],"partialFingerprints":{"codehealthFindingId/v1":"66e1f951b9ac293527f3a728f419102b331d3a3bda80393f966415b0d2463923"}},{"ruleId":"D1","level":"warning","message":{"text":"mtp_patch._megatron_gptmodel_postprocess (cyclomatic 24): mtp_patch._megatron_gptmodel_postprocess has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"a29da979dbd39653fec117da9685f49dcb9f2cef3ca1453c6816f201b5a6b83a"}},{"ruleId":"D1","level":"warning","message":{"text":"RayPPOTrainer.init_workers (cyclomatic 24): RayPPOTrainer.init_workers has cyclomatic complexity 24 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":772}}}],"partialFingerprints":{"codehealthFindingId/v1":"a373448d055eb5bcb346bdac60cbfebc59403648b3b485e5088f48b5e05bcd9f"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronCheckpointManager.load_checkpoint (cyclomatic 24): MegatronCheckpointManager.load_checkpoint has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":852}}}],"partialFingerprints":{"codehealthFindingId/v1":"70f523b5d9a4d527d275685b6be8f7820aa87728cb61fa959c73133b4f27913c"}},{"ruleId":"D1","level":"warning","message":{"text":"RLHFDataset._build_messages (cyclomatic 24): RLHFDataset._build_messages has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":299}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f3ea0a4a4d79d0691e4978135a33f6c783a2c0e21f40082e75b19630f1c7a53"}},{"ruleId":"D1","level":"warning","message":{"text":"router_replay_utils.get_num_layers_to_build (cyclomatic 24): router_replay_utils.get_num_layers_to_build has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"1bddcb4149c3c432cbac5f6ace8fc70e6cc3223f69bdb674cc6dc3eed7c1a7df"}},{"ruleId":"D1","level":"warning","message":{"text":"megatron_utils.make_megatron_module (cyclomatic 24): megatron_utils.make_megatron_module has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":240}}}],"partialFingerprints":{"codehealthFindingId/v1":"9babee06f5beb1476b99effeabc373cafb6cadec9797cd660743d9b78375bec4"}},{"ruleId":"D1","level":"warning","message":{"text":"megatron_utils.get_transformer_layer_offset (cyclomatic 24): megatron_utils.get_transformer_layer_offset has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":898}}}],"partialFingerprints":{"codehealthFindingId/v1":"76073dacd981cbfb61ea05dbaa6661264d626307667d6c951432c85868df8079"}},{"ruleId":"D1","level":"warning","message":{"text":"Tracking.__init__ (cyclomatic 24): Tracking.__init__ has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tracking.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"26e660527f8874c5609270dee81674bd98b67935d3ac2a7ceda78640cc1d7f43"}},{"ruleId":"D1","level":"warning","message":{"text":"ToolAgentLoop._handle_generating_state (cyclomatic 23): ToolAgentLoop._handle_generating_state has cyclomatic complexity 23 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":234}}}],"partialFingerprints":{"codehealthFindingId/v1":"2062598cf1f03b38e9dd6493976b98cc206d019811fa6d3d3ad5128176906ba0"}},{"ruleId":"D1","level":"warning","message":{"text":"qwen3_5.qwen3_5_gated_delta_net_forward (cyclomatic 23): qwen3_5.qwen3_5_gated_delta_net_forward has cyclomatic complexity 23 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":193}}}],"partialFingerprints":{"codehealthFindingId/v1":"9963a0518a779d67db982a1d39bad6a95727a988c6a0f8b9c0d9cc54b0cb3247"}},{"ruleId":"D1","level":"warning","message":{"text":"PPOTrainer._validate (cyclomatic 22): PPOTrainer._validate has cyclomatic complexity 22 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1032}}}],"partialFingerprints":{"codehealthFindingId/v1":"10ff32411b43bf3f6263cea7d9560248479e968d9e472edc3f32d278ce41f4fb"}},{"ruleId":"D1","level":"warning","message":{"text":"chat_template_checker.main (cyclomatic 21): chat_template_checker.main has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":995}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a9442dee652b568030eba38bdb59fe2458edf7f8be5fee05aeffae11dff00c9"}},{"ruleId":"D1","level":"warning","message":{"text":"ReplayBuffer.sample (cyclomatic 21): ReplayBuffer.sample has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":422}}}],"partialFingerprints":{"codehealthFindingId/v1":"97be5fbe1544a50e3d23af7a68f8f2d071a94974dd078697bde8ae8f6e3b75c8"}},{"ruleId":"D1","level":"warning","message":{"text":"PPOTrainer._setup (cyclomatic 21): PPOTrainer._setup has cyclomatic complexity 21 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"468567c64fba676bfb8c82c36d7a13d1b018af44e6c7e85762b586923cff8bcc"}},{"ruleId":"D1","level":"warning","message":{"text":"FSDPCheckpointManager.load_checkpoint (cyclomatic 21): FSDPCheckpointManager.load_checkpoint has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/fsdp_checkpoint_manager.py"},"region":{"startLine":268}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff75b7195d51b2a38c78bcb53d3a8fda083d896c785ef1bb237a5aa2d6f4e747"}},{"ruleId":"D1","level":"warning","message":{"text":"device.get_npu_versions (cyclomatic 21): device.get_npu_versions has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":195}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc93e39e554c6daec65e810d4ee28460dbd8394de29ce6b062d8c6632272730d"}},{"ruleId":"D1","level":"warning","message":{"text":"kernels.efficient_entropy_forward (cyclomatic 21): kernels.efficient_entropy_forward has cyclomatic complexity 21 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":569}}}],"partialFingerprints":{"codehealthFindingId/v1":"c62575ee464cbebcfc121d0c3d55599fa4d037337eab5dc7b0e5e10e861e9849"}},{"ruleId":"D1","level":"warning","message":{"text":"sandbox_fusion.compute_score (cyclomatic 21): sandbox_fusion.compute_score has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/__init__.py"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"65b7035f7a1a04f45395dbae11134410174b606f265cf5a3030f3c0f8747c0dc"}},{"ruleId":"D1","level":"warning","message":{"text":"patch.patch_vllm_moe_model_weight_loader (cyclomatic 21): patch.patch_vllm_moe_model_weight_loader has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/patch.py"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"775a2197f50a04f3f29f92bdde4be8907ef81904c64b3b65407a582b2e664417"}},{"ruleId":"D1","level":"warning","message":{"text":"glm4v.get_rope_index (cyclomatic 20): glm4v.get_rope_index has cyclomatic complexity 20 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"7baa5f8c7605ea05621430d967d2e47b4418e800574bd3048cbf8eac57c19cc1"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronCheckpointManager._build_checkpoint_manifest (cyclomatic 20): MegatronCheckpointManager._build_checkpoint_manifest has cyclomatic complexity 20 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":472}}}],"partialFingerprints":{"codehealthFindingId/v1":"017a96b318fd1b5275349e7bd068e57f87ae574162ad03587a63cb36e0a0d4e6"}},{"ruleId":"D1","level":"warning","message":{"text":"seqlen_balancing.rearrange_micro_batches (cyclomatic 20): seqlen_balancing.rearrange_micro_batches has cyclomatic complexity 20 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/seqlen_balancing.py"},"region":{"startLine":348}}}],"partialFingerprints":{"codehealthFindingId/v1":"b5bb4053058bb4cf878a6f78bdd499e556da4e30f7927fe4a9a4c1d69793fbb5"}},{"ruleId":"D1","level":"warning","message":{"text":"FullyAsyncRollouter._processor_worker (cyclomatic 19): FullyAsyncRollouter._processor_worker has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":902}}}],"partialFingerprints":{"codehealthFindingId/v1":"725eae3c4abe1a04a2e23429d6bdc7b6abd2857353387ee499729b5d89083432"}},{"ruleId":"D1","level":"warning","message":{"text":"rollout_corr_helper._parse_rollout_rs_thresholds (cyclomatic 19): rollout_corr_helper._parse_rollout_rs_thresholds has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":132}}}],"partialFingerprints":{"codehealthFindingId/v1":"3652a727eaacf4b5e0f99381ab95676c9b093cd0f9947c4dd1a506154e4c1e90"}},{"ruleId":"D1","level":"warning","message":{"text":"CannLinearCrossEntropy.forward (cyclomatic 19): CannLinearCrossEntropy.forward has cyclomatic complexity 19 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/npu/cann_linear_ce.py"},"region":{"startLine":289}}}],"partialFingerprints":{"codehealthFindingId/v1":"e23520430fb024401b4a6f1401180c38fd59659146d15a59b5c250153941364b"}},{"ruleId":"D1","level":"warning","message":{"text":"router_replay_utils.set_router_replay_data (cyclomatic 19): router_replay_utils.set_router_replay_data has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"53f9fc63b7adcd8e6bebdd5bad546a789857695e997a5e442b89f4524a2652c0"}},{"ruleId":"D1","level":"warning","message":{"text":"PrecisionDebuggerProfiler.start (cyclomatic 19): PrecisionDebuggerProfiler.start has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/precision_debugger_profile.py"},"region":{"startLine":183}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8cfeea1cadac55bef2af883267a5442e04b8fcfd81925d5683fad24f41201f7"}},{"ruleId":"D1","level":"warning","message":{"text":"utils.resolve_weight_name (cyclomatic 19): utils.resolve_weight_name has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/utils.py"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"1cfe9ef01645e678d82ec8ac032ec64d113fa5198b7be4852a6c3c117b7c0d75"}},{"ruleId":"D1","level":"warning","message":{"text":"FSDPEngineWithLMHead.prepare_model_inputs (cyclomatic 19): FSDPEngineWithLMHead.prepare_model_inputs has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1155}}}],"partialFingerprints":{"codehealthFindingId/v1":"3897c83188b432019186498d06724cd2f5b8cfe153a0723fcbf7caa9a58290f0"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronEngine._build_tf_config (cyclomatic 19): MegatronEngine._build_tf_config has cyclomatic complexity 19 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":273}}}],"partialFingerprints":{"codehealthFindingId/v1":"b02cdb33e1685f577a7d45eb77c693d3d3431f8009c00d886bf27ab7de5ccb67"}},{"ruleId":"D1","level":"warning","message":{"text":"resizable-sidebar.document.addEventListener(\u0022DOMContentLoaded\u0022) (cyclomatic 19): resizable-sidebar.document.addEventListener(\u0022DOMContentLoaded\u0022) has cyclomatic complexity 19 (threshold 15). Most of this is not in the body itself: 2 of the 19 points are its own statements and the rest belongs to 5 function items inside it that branch (a function literal at line 166, a function literal at line 235, setupNavigationFix, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/_static/js/resizable-sidebar.js"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5c73977c6377b08a1602c4eb11deea87d5161727ba704e1d16e80af78e574ff"}},{"ruleId":"D1","level":"warning","message":{"text":"output_validation.validate_hf_model_output (cyclomatic 18): output_validation.validate_hf_model_output has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/output_validation.py"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"425d72a2ba8c53e18c9023d277b6ad26d26e30090d1c8f2f73f018b71c114e23"}},{"ruleId":"D1","level":"warning","message":{"text":"SFTTrainer.fit (cyclomatic 18): SFTTrainer.fit has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer_ray.py"},"region":{"startLine":247}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fa15ce014efacdd2f1ca56683aac98df774d37f989dc6e34bb0d0b8c4c2a502"}},{"ruleId":"D1","level":"warning","message":{"text":"rlla.customize_format_reward_func (cyclomatic 18): rlla.customize_format_reward_func has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/rlla.py"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"1c28020940474466596924e52892b7e6a275271d1ee3e4d4cd88f2fa99bffc26"}},{"ruleId":"D1","level":"warning","message":{"text":"AutomodelEngineWithLMHead.prepare_model_outputs (cyclomatic 18): AutomodelEngineWithLMHead.prepare_model_outputs has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":586}}}],"partialFingerprints":{"codehealthFindingId/v1":"5810f20c350d329aaedeeed8432107636ecdbdc4831636f2bbbdf5f57161d6c4"}},{"ruleId":"D1","level":"warning","message":{"text":"WorkerExtension.update_weights (cyclomatic 18): WorkerExtension.update_weights has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_worker_extension.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"d61c9f0a48b19eba56b12318cc9703b1d7f670dd2fa6733cf465705bbad1caa8"}},{"ruleId":"D1","level":"warning","message":{"text":"BaseModelMerger.save_lora_adapter (cyclomatic 17): BaseModelMerger.save_lora_adapter has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/base_model_merger.py"},"region":{"startLine":325}}}],"partialFingerprints":{"codehealthFindingId/v1":"67b1364dca65d8f21eab1b3df86f5d4f81f4824e066e9ad04406f836edfd7acf"}},{"ruleId":"D1","level":"warning","message":{"text":"ReplayBuffer._dapo_filtered_keys (cyclomatic 17): ReplayBuffer._dapo_filtered_keys has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"d52c6278191c41417edafa011e8e5f4f5188ded40bbee12bebbfcd6935f77ef1"}},{"ruleId":"D1","level":"warning","message":{"text":"MegatronCheckpointManager.save_checkpoint (cyclomatic 17): MegatronCheckpointManager.save_checkpoint has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":1151}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ee2af73849c3ebd88bd824a09e39df4dcaa2ae5da7ed94429facafc07b33f38"}},{"ruleId":"D1","level":"warning","message":{"text":"fsdp_utils.collect_lora_params (cyclomatic 17): fsdp_utils.collect_lora_params has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":706}}}],"partialFingerprints":{"codehealthFindingId/v1":"06c2d8348b3d8a8679eefd9ab16de7a4e3ebb2081925ad38ad4967583fbf7115"}},{"ruleId":"D1","level":"warning","message":{"text":"router_replay_utils.merge_router_topk_indices (cyclomatic 17): router_replay_utils.merge_router_topk_indices has cyclomatic complexity 17 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b500a73291930860199255f7629beead2610830430bea032f0ca11a63143813"}},{"ruleId":"D1","level":"warning","message":{"text":"utils.check_correctness (cyclomatic 17): utils.check_correctness has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":449}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee84df27a2da215d4afee5fe382a7f11ee5af8e20d4ac9aa35eb8cecaf6c5d22"}},{"ruleId":"D1","level":"warning","message":{"text":"mtp_patch.patch_mtp_layer_checkpointed_forward (cyclomatic 16): mtp_patch.patch_mtp_layer_checkpointed_forward has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":300}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b34344ef5f002c77237aef893c7785b22fc63a368e6f451f053389a5e8b9725"}},{"ruleId":"D1","level":"warning","message":{"text":"util.preprocess_bshd_engine (cyclomatic 16): util.preprocess_bshd_engine has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":563}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc00cafeac63308d76e28ea9298dc83e9788743cbbe9efbf4534777db2a8ba8d"}},{"ruleId":"D1","level":"warning","message":{"text":"qwen2_vl.get_rope_index (cyclomatic 16): qwen2_vl.get_rope_index has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":64}}}],"partialFingerprints":{"codehealthFindingId/v1":"9bc6fe673ec430e680bec3fac0df4d9d22477807ba0c4d7b2a5180bbb39334b0"}},{"ruleId":"D1","level":"warning","message":{"text":"qwen3_vl.get_rope_index (cyclomatic 16): qwen3_vl.get_rope_index has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_vl.py"},"region":{"startLine":99}}}],"partialFingerprints":{"codehealthFindingId/v1":"839e3bac8605a8121bea1aee4d9504a47365e3113cb60b26ce54b473cf3e572c"}},{"ruleId":"D1","level":"warning","message":{"text":"PPOTrainer.fit (cyclomatic 16): PPOTrainer.fit has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":413}}}],"partialFingerprints":{"codehealthFindingId/v1":"255d3f45fc2b46d6b0e6ef7ae0c7585de296361669b893c4ed39e419f729b7f9"}},{"ruleId":"D1","level":"warning","message":{"text":"PPOTrainerSeparateAsync.on_step_end (cyclomatic 16): PPOTrainerSeparateAsync.on_step_end has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":340}}}],"partialFingerprints":{"codehealthFindingId/v1":"51ae5dff5e229ab352c05bebd13c8078504455def42413a64e69370b6727a15b"}},{"ruleId":"D1","level":"warning","message":{"text":"megatron_checkpoint_manager._to_json_safe_config_value (cyclomatic 16): megatron_checkpoint_manager._to_json_safe_config_value has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"c06e2305c73ca1b3877b0e196c5b472dc489e51ae55538c091588b956d9e6af6"}},{"ruleId":"D1","level":"warning","message":{"text":"config._validate_score_centering_config (cyclomatic 16): config._validate_score_centering_config has cyclomatic complexity 16 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/config.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"635320ed6e556246e6f1897b64c61321675ae7945c4272db740f20a9de543a8d"}},{"ruleId":"D1","level":"warning","message":{"text":"fs.verify_copy (cyclomatic 16): fs.verify_copy has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fs.py"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"cdec87fffdb68301984c5e27b5a57745f2fb428d696b8c4a5944db150e911fe6"}},{"ruleId":"D1","level":"warning","message":{"text":"fsdp_utils.layered_summon_lora_params (cyclomatic 16): fsdp_utils.layered_summon_lora_params has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":636}}}],"partialFingerprints":{"codehealthFindingId/v1":"9a7f8038ba993fb4aaee2f4bbceaa774f90d857c8d6594a17a3b17981a26de91"}},{"ruleId":"D1","level":"warning","message":{"text":"router_replay_patch.apply_router_replay_patch (cyclomatic 16): router_replay_patch.apply_router_replay_patch has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_patch.py"},"region":{"startLine":342}}}],"partialFingerprints":{"codehealthFindingId/v1":"a422d90382b254971a46b75f1208f1a4137ce3ff6968423b52a7d03c0d109e10"}},{"ruleId":"D1","level":"warning","message":{"text":"megatron_utils.offload_megatron_model_to_cpu (cyclomatic 16): megatron_utils.offload_megatron_model_to_cpu has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":460}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa3890da641015b4b01b6825bf3bb9ea312e0668b16b0a1aba8cd2b6eb77f3e5"}},{"ruleId":"D1","level":"warning","message":{"text":"megatron_utils.load_megatron_model_to_gpu (cyclomatic 16): megatron_utils.load_megatron_model_to_gpu has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":549}}}],"partialFingerprints":{"codehealthFindingId/v1":"e0aabe4974cc4472f9fc7ac04c916ffa0b8eef2852d363d62aa4f1fad9ae211d"}},{"ruleId":"D1","level":"warning","message":{"text":"DistProfiler.__init__ (cyclomatic 16): DistProfiler.__init__ has cyclomatic complexity 16 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/profile.py"},"region":{"startLine":99}}}],"partialFingerprints":{"codehealthFindingId/v1":"da8d082e23b8d158c3fa376f293971bcb734bc0c14127f01210b9eed0de01126"}},{"ruleId":"D1","level":"warning","message":{"text":"prime_math.grade_answer (cyclomatic 16): prime_math.grade_answer has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":246}}}],"partialFingerprints":{"codehealthFindingId/v1":"238c2fc04cd97beaf557eaf8775c0af4e67cf52e5cd20f48ae7ea7538439bc9a"}},{"ruleId":"D1","level":"warning","message":{"text":"npu_vllm_patch.patch_vllm_glm52_partial_wake_up (cyclomatic 16): npu_vllm_patch.patch_vllm_glm52_partial_wake_up has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/npu_vllm_patch.py"},"region":{"startLine":188}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa51a616e7cb7e123324d4a53fbfb9d67f1e96c8cb69c7c2b7f5b7df26b20cea"}},{"ruleId":"D1","level":"warning","message":{"text":"delta_export.build_export_index (cyclomatic 16): delta_export.build_export_index has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/delta_export.py"},"region":{"startLine":198}}}],"partialFingerprints":{"codehealthFindingId/v1":"7a78eabf3b1809f1b119dc11b28d885e6f807ea73344875c7b17e121ac1fa3e1"}},{"ruleId":"D1","level":"warning","message":{"text":"ActorRolloutRefWorker.init_model (cyclomatic 16): ActorRolloutRefWorker.init_model has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":575}}}],"partialFingerprints":{"codehealthFindingId/v1":"32c5edeff0401eae1ce91825ebf2195e12a3d190fbf65e8211a5b564b2f70060"}},{"ruleId":"D1","level":"warning","message":{"text":"LLMServerManager._initialize_llm_servers (cyclomatic 16): LLMServerManager._initialize_llm_servers has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":442}}}],"partialFingerprints":{"codehealthFindingId/v1":"f40ca6eb3cb20c6bb4bfb2afda0faabc14917c4b7f614bcee56fe6bd1b90a5bb"}},{"ruleId":"D1","level":"warning","message":{"text":"utils.extract_response_topk_logprobs (cyclomatic 16): utils.extract_response_topk_logprobs has cyclomatic complexity 16 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":141}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b4a346a9c519698d2cad6fbd21cb4c3c85a3b6dfdc9389c2db14af708abc278"}},{"ruleId":"D1","level":"warning","message":{"text":"vLLMColocateWorkerExtension.update_weights_from_ipc (cyclomatic 16): vLLMColocateWorkerExtension.update_weights_from_ipc has cyclomatic complexity 16 (threshold 15). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":248}}}],"partialFingerprints":{"codehealthFindingId/v1":"baa4566f9b6c562b99e0ede82953175db99dbbb4905e2c23f59e9915a3e9737f"}},{"ruleId":"D1","level":"warning","message":{"text":"vLLMHttpServer._preprocess_engine_kwargs (cyclomatic 16): vLLMHttpServer._preprocess_engine_kwargs has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1320}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f71684a3cdd312ad6578d1facfc47b7365c4529f62bf95541312084ccf64687"}},{"ruleId":"D2","level":"warning","message":{"text":"testing_util.run_test (cognitive 383): testing_util.run_test has cognitive complexity 383 (threshold 15). Drivers by points: if/else 80 (276 pts), error handling 16 (56 pts), loops 7 (28 pts), boolean chains 20, ternaries 1 (3 pts) (nesting depth added 259). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ca0217f4a710cb478b7078448c3ea1b81ac5dbb5a42ac003e09470890873dc2"}},{"ruleId":"D2","level":"warning","message":{"text":"RayPPOTrainer.fit (cognitive 150): RayPPOTrainer.fit has cognitive complexity 150 (threshold 15). Drivers by points: if/else 39 (116 pts), boolean chains 14, loops 4 (10 pts), ternaries 4 (10 pts) (nesting depth added 89). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1405}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b2aa5e8396b34a267eeb35b4c13b1e2ae7d84b62d259dfdeb3b4b317000302a"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPEngineWithLMHead.prepare_model_outputs (cognitive 123): FSDPEngineWithLMHead.prepare_model_outputs has cognitive complexity 123 (threshold 15). Drivers by points: if/else 45 (101 pts), loops 3 (13 pts), boolean chains 6, ternaries 1 (3 pts) (nesting depth added 68). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1344}}}],"partialFingerprints":{"codehealthFindingId/v1":"4db7010e28d599c47250e1223a88e355b55d947571ff4583ce17a6953bf6ca5c"}},{"ruleId":"D2","level":"warning","message":{"text":"util.preprocess_thd_engine (cognitive 77): util.preprocess_thd_engine has cognitive complexity 77 (threshold 15). Drivers by points: if/else 30 (63 pts), loops 3 (10 pts), boolean chains 3, ternaries 1 (nesting depth added 40). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"966cecf3b0d4e844ff303faa390b6fd5bffa6f10e2e9f7051abd326aa49b1fca"}},{"ruleId":"D2","level":"warning","message":{"text":"SFTTrainer.fit (cognitive 70): SFTTrainer.fit has cognitive complexity 70 (threshold 15). Drivers by points: if/else 15 (51 pts), loops 4 (11 pts), boolean chains 6, ternaries 1 (2 pts) (nesting depth added 44). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":308}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d8dec8f049887490819cf5aefcbe72b730b0ca8a557d50504f3fa849fab62a1"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.get_transformer_layer_offset (cognitive 68): megatron_utils.get_transformer_layer_offset has cognitive complexity 68 (threshold 15). Drivers by points: if/else 18 (42 pts), ternaries 7 (22 pts), boolean chains 4 (nesting depth added 39). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":898}}}],"partialFingerprints":{"codehealthFindingId/v1":"b211b5e5e7d9d89908ef490adac54ef253b8165a205212d00597ccccf131d04d"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPCheckpointManager.save_checkpoint (cognitive 67): FSDPCheckpointManager.save_checkpoint has cognitive complexity 67 (threshold 15). Drivers by points: if/else 23 (42 pts), loops 3 (11 pts), boolean chains 6, ternaries 2 (5 pts), error handling 1 (3 pts) (nesting depth added 32). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/fsdp_checkpoint_manager.py"},"region":{"startLine":360}}}],"partialFingerprints":{"codehealthFindingId/v1":"951ff9e036ffedd2872bb80b1105127a0efefd5fc18332111708afe102f04b74"}},{"ruleId":"D2","level":"warning","message":{"text":"metric_utils.process_validation_metrics (cognitive 66): metric_utils.process_validation_metrics has cognitive complexity 66 (threshold 15). Drivers by points: if/else 9 (32 pts), loops 14 (32 pts), boolean chains 2 (nesting depth added 41). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":896}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc0cdad8d85b94e7c06c07718e7a9bf0e951ee3661b7157f79d37c2fb06ce68f"}},{"ruleId":"D2","level":"warning","message":{"text":"model_forward.gptmodel_forward_model_engine (cognitive 63): model_forward.gptmodel_forward_model_engine has cognitive complexity 63 (threshold 15). Drivers by points: if/else 26 (44 pts), boolean chains 11, loops 2 (6 pts), ternaries 1 (2 pts) (nesting depth added 23). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward.py"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"fca2b0cb3fbcfc5f8741a78a4224edd937eb6dde8763e41fd392f15476bf6777"}},{"ruleId":"D2","level":"warning","message":{"text":"grader.math_equal (cognitive 63): grader.math_equal has cognitive complexity 63 (threshold 15). Drivers by points: if/else 19 (30 pts), boolean chains 16, error handling 4 (9 pts), ternaries 2 (5 pts), loops 2 (3 pts) (nesting depth added 20). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9fee933b72bc3e72601b66fc907a0602996f0fe772ca3f33b079a187e575531"}},{"ruleId":"D2","level":"warning","message":{"text":"deepseek.encode_messages (cognitive 63): deepseek.encode_messages has cognitive complexity 63 (threshold 15). Drivers by points: if/else 20 (43 pts), boolean chains 13, ternaries 2 (6 pts), loops 1 (nesting depth added 27). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/deepseek.py"},"region":{"startLine":157}}}],"partialFingerprints":{"codehealthFindingId/v1":"a761a59d27ecdb2bb4457f845a1370992e1dccaf0b010d190685f95458cbf2f4"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainer._validate (cognitive 58): PPOTrainer._validate has cognitive complexity 58 (threshold 15). Drivers by points: if/else 12 (29 pts), loops 7 (18 pts), ternaries 3 (9 pts), boolean chains 2 (nesting depth added 34). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1032}}}],"partialFingerprints":{"codehealthFindingId/v1":"16828782e0e3a576f8639569c8cb3bc01072a98b1c3503abf5e2b272039930c4"}},{"ruleId":"D2","level":"warning","message":{"text":"utils._process_single_case (cognitive 58): utils._process_single_case has cognitive complexity 58 (threshold 15). Drivers by points: if/else 21 (41 pts), boolean chains 8, ternaries 4 (8 pts), error handling 1 (nesting depth added 24). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"3df5631316baee50300bfc8fc658fb6b318d8ceb5b5e17be6820957db2e17c5b"}},{"ruleId":"D2","level":"warning","message":{"text":"ToolAgentLoop._handle_processing_tools_state (cognitive 57): ToolAgentLoop._handle_processing_tools_state has cognitive complexity 57 (threshold 15). Drivers by points: if/else 17 (41 pts), loops 5 (12 pts), boolean chains 3, ternaries 1 (nesting depth added 31). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c91cd8881ef13fa379f9651a2d0b40ee128876d0fc3a71fe76fb6364a1a343a"}},{"ruleId":"D2","level":"warning","message":{"text":"AutomodelEngineWithLMHead.prepare_model_outputs (cognitive 55): AutomodelEngineWithLMHead.prepare_model_outputs has cognitive complexity 55 (threshold 15). Drivers by points: if/else 25 (55 pts) (nesting depth added 30). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":586}}}],"partialFingerprints":{"codehealthFindingId/v1":"623d04b20275447715a5e6ddfc551915c237a83e4587820135fad107d9a731ff"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronEngine.forward_backward_batch (cognitive 55): MegatronEngine.forward_backward_batch has cognitive complexity 55 (threshold 15). Drivers by points: if/else 27 (40 pts), boolean chains 9, ternaries 3 (5 pts), loops 1 (nesting depth added 15). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":783}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d6ae929eda5b22a1ca60182adfdf96d2f2d88571b6e57d09367962ed8771cf3"}},{"ruleId":"D2","level":"warning","message":{"text":"mtp_patch._megatron_gptmodel_postprocess (cognitive 54): mtp_patch._megatron_gptmodel_postprocess has cognitive complexity 54 (threshold 15). Drivers by points: if/else 15 (31 pts), ternaries 4 (15 pts), boolean chains 5, loops 1 (3 pts) (nesting depth added 29). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"5bb7ecb2addd2df61a014402346b26b67a3fa0315ff864197208fe25fe9da2b8"}},{"ruleId":"D2","level":"warning","message":{"text":"rollout_corr_helper.compute_rollout_rejection_mask (cognitive 54): rollout_corr_helper.compute_rollout_rejection_mask has cognitive complexity 54 (threshold 15). Drivers by points: if/else 22 (43 pts), ternaries 3 (6 pts), boolean chains 3, loops 2 (nesting depth added 24). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":197}}}],"partialFingerprints":{"codehealthFindingId/v1":"3354a6f47ecdca3d9b947922fd99fcaa4395492785d004d71ec12613a531fdef"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.offload_megatron_model_to_cpu (cognitive 54): megatron_utils.offload_megatron_model_to_cpu has cognitive complexity 54 (threshold 15). Drivers by points: if/else 11 (39 pts), loops 5 (14 pts), boolean chains 1 (nesting depth added 37). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":460}}}],"partialFingerprints":{"codehealthFindingId/v1":"dbf0998ea7bd81f1d8ceac7982af4b1356a7e7074cf37ef85479aed479c2e826"}},{"ruleId":"D2","level":"warning","message":{"text":"FullyAsyncRollouter._processor_worker (cognitive 52): FullyAsyncRollouter._processor_worker has cognitive complexity 52 (threshold 15). Drivers by points: if/else 9 (27 pts), loops 7 (23 pts), boolean chains 2 (nesting depth added 34). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":902}}}],"partialFingerprints":{"codehealthFindingId/v1":"d976a082de8849d0ef4b1ea70038a0b1066a395792dca3219efe43c862a75e25"}},{"ruleId":"D2","level":"warning","message":{"text":"fsdp_utils.collect_lora_params (cognitive 52): fsdp_utils.collect_lora_params has cognitive complexity 52 (threshold 15). Drivers by points: if/else 10 (23 pts), ternaries 6 (23 pts), loops 2 (6 pts) (nesting depth added 34). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":706}}}],"partialFingerprints":{"codehealthFindingId/v1":"a476133299e1d634759622078b14d99c2b76c97f85ba9b9c7516788a80ce8923"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.load_megatron_model_to_gpu (cognitive 50): megatron_utils.load_megatron_model_to_gpu has cognitive complexity 50 (threshold 15). Drivers by points: if/else 9 (32 pts), loops 5 (15 pts), boolean chains 3 (nesting depth added 33). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":549}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1fcc5fd124d77778f05a3840b703b46d289cf13e951a817e133c50bfc444f8c"}},{"ruleId":"D2","level":"warning","message":{"text":"FullyAsyncLLMServerClient.generate (cognitive 49): FullyAsyncLLMServerClient.generate has cognitive complexity 49 (threshold 15). Drivers by points: if/else 18 (38 pts), ternaries 2 (5 pts), boolean chains 3, loops 2 (3 pts) (nesting depth added 24). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":226}}}],"partialFingerprints":{"codehealthFindingId/v1":"fde31e0c15ce07b0e95b6533d7bd6083c65c42528f293cfcce0f69aef4ee5f4a"}},{"ruleId":"D2","level":"warning","message":{"text":"RLHFDataset._build_messages (cognitive 48): RLHFDataset._build_messages has cognitive complexity 48 (threshold 15). Drivers by points: if/else 13 (35 pts), boolean chains 5, ternaries 1 (5 pts), loops 2 (3 pts) (nesting depth added 27). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":299}}}],"partialFingerprints":{"codehealthFindingId/v1":"8c95c1e00213799c63b33c83a995e05678118ddde52b3b183dcbf1145ade252d"}},{"ruleId":"D2","level":"warning","message":{"text":"vLLMHttpServer.generate (cognitive 48): vLLMHttpServer.generate has cognitive complexity 48 (threshold 15). Drivers by points: if/else 30 (38 pts), boolean chains 7, error handling 1, loops 1, ternaries 1 (nesting depth added 8). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":572}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff375cf7510ccbfc5927f921550c5fc91e5321e006642f980df36b3a2e9ddf0f"}},{"ruleId":"D2","level":"warning","message":{"text":"kimi_checkpoint_engine.receive_tensor (cognitive 46): kimi_checkpoint_engine.receive_tensor has cognitive complexity 46 (threshold 15). Drivers by points: if/else 13 (30 pts), loops 6 (9 pts), ternaries 2 (4 pts), boolean chains 3 (nesting depth added 22). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":66}}}],"partialFingerprints":{"codehealthFindingId/v1":"c6dfa63ddd3f0e1c7c4c6e6f36149d5964bf5557dcc7d6d7d325f76fd7657cc6"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronEngineWithLMHead.forward_step (cognitive 46): MegatronEngineWithLMHead.forward_step has cognitive complexity 46 (threshold 15). Drivers by points: if/else 24 (32 pts), boolean chains 11, ternaries 2 (3 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":1192}}}],"partialFingerprints":{"codehealthFindingId/v1":"bbbde9071d160c0a91b6cc46c15826b66a1e9df38106fcda57f5b6b430745a59"}},{"ruleId":"D2","level":"warning","message":{"text":"monkey_patch.apply_monkey_patch (cognitive 44): monkey_patch.apply_monkey_patch has cognitive complexity 44 (threshold 15). Drivers by points: if/else 21 (34 pts), boolean chains 7, error handling 2 (3 pts) (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"00badcdedd879b960a984397d576f4576ae6582cdcb42561f921e7a271ec7914"}},{"ruleId":"D2","level":"warning","message":{"text":"qwen3_5.qwen3_5_gated_delta_net_forward (cognitive 44): qwen3_5.qwen3_5_gated_delta_net_forward has cognitive complexity 44 (threshold 15). Drivers by points: if/else 20 (35 pts), ternaries 2 (6 pts), boolean chains 3 (nesting depth added 19). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":193}}}],"partialFingerprints":{"codehealthFindingId/v1":"22db20bf82288ae384b5e026a09f43983c9c5f844af2db7fa9d1811823861a99"}},{"ruleId":"D2","level":"warning","message":{"text":"kernels.efficient_entropy_backward (cognitive 44): kernels.efficient_entropy_backward has cognitive complexity 44 (threshold 15). Drivers by points: boolean chains 17, if/else 10 (15 pts), ternaries 5 (10 pts), loops 1 (2 pts) (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1518}}}],"partialFingerprints":{"codehealthFindingId/v1":"54628b61bb4ed5374e6db537c046a8981aa87c63bee47b9b3b1ea112dafd8e9d"}},{"ruleId":"D2","level":"warning","message":{"text":"sparse_gather.gather_slot_entries_to_rank0 (cognitive 42): sparse_gather.gather_slot_entries_to_rank0 has cognitive complexity 42 (threshold 15). Drivers by points: if/else 11 (21 pts), loops 6 (12 pts), ternaries 5 (7 pts), boolean chains 2 (nesting depth added 18). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/delta_sync/sparse_gather.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"4af439181fa323fd7289bca7b6f165e0a64e8487472d0a6115d0ccfad0646069"}},{"ruleId":"D2","level":"warning","message":{"text":"MultiTurnSFTDataset.__getitem__ (cognitive 42): MultiTurnSFTDataset.__getitem__ has cognitive complexity 42 (threshold 15). Drivers by points: if/else 15 (26 pts), ternaries 4 (7 pts), loops 5 (6 pts), boolean chains 3 (nesting depth added 15). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/multiturn_sft_dataset.py"},"region":{"startLine":291}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b02e1dab4496f1aa2551b1cc7e5f5ec7ba8cb8ed6db69f4814dfbc5bbc9c4b8"}},{"ruleId":"D2","level":"warning","message":{"text":"SGLangHttpServer.launch_server (cognitive 42): SGLangHttpServer.launch_server has cognitive complexity 42 (threshold 15). Drivers by points: if/else 23 (32 pts), boolean chains 8, ternaries 1 (2 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":267}}}],"partialFingerprints":{"codehealthFindingId/v1":"250805ef89c60a29b7b66ce5114194b4348067744c1f0d703420115cffb00bad"}},{"ruleId":"D2","level":"warning","message":{"text":"vLLMHttpServer.launch_server (cognitive 41): vLLMHttpServer.launch_server has cognitive complexity 41 (threshold 15). Drivers by points: if/else 26 (32 pts), boolean chains 6, loops 2 (3 pts) (nesting depth added 7). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":292}}}],"partialFingerprints":{"codehealthFindingId/v1":"554265909552acb72f77d09cea61029f00901a51e327fbae2cbf1e5830c05e95"}},{"ruleId":"D2","level":"warning","message":{"text":"Tracking.__init__ (cognitive 39): Tracking.__init__ has cognitive complexity 39 (threshold 15). Drivers by points: if/else 21 (31 pts), error handling 1 (3 pts), loops 2 (3 pts), boolean chains 2 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tracking.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ccd5d81d42364a0eeeb34fa63a5e51128939fc12bd2e47159a12c4fd3376048"}},{"ruleId":"D2","level":"warning","message":{"text":"HFModelConfig.__post_init__ (cognitive 38): HFModelConfig.__post_init__ has cognitive complexity 38 (threshold 15). Drivers by points: if/else 18 (28 pts), boolean chains 5, loops 1 (3 pts), error handling 1, ternaries 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/model.py"},"region":{"startLine":148}}}],"partialFingerprints":{"codehealthFindingId/v1":"622ff17fef49a64dfe288b362ee6fcba17e131d6d724ed9d8f281360ec0ad6f3"}},{"ruleId":"D2","level":"warning","message":{"text":"SFTTrainer.fit (cognitive 37): SFTTrainer.fit has cognitive complexity 37 (threshold 15). Drivers by points: if/else 7 (19 pts), loops 4 (11 pts), boolean chains 5, ternaries 1 (2 pts) (nesting depth added 20). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer_ray.py"},"region":{"startLine":247}}}],"partialFingerprints":{"codehealthFindingId/v1":"559bba615f5a8cbe7ab45ca82741f3a0d54350d936c8b3ccaffdff75f554a0ba"}},{"ruleId":"D2","level":"warning","message":{"text":"glm4v.get_rope_index (cognitive 36): glm4v.get_rope_index has cognitive complexity 36 (threshold 15). Drivers by points: if/else 9 (19 pts), loops 4 (10 pts), boolean chains 4, ternaries 1 (3 pts) (nesting depth added 18). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"265a928fb5dd66a3db4ff6ee4d3ec70f8be78c0eb5661b3be4c48caba28d61fc"}},{"ruleId":"D2","level":"warning","message":{"text":"rollout_corr_helper._parse_rollout_rs_thresholds (cognitive 36): rollout_corr_helper._parse_rollout_rs_thresholds has cognitive complexity 36 (threshold 15). Drivers by points: if/else 15 (27 pts), error handling 2 (6 pts), boolean chains 2, loops 1 (nesting depth added 16). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":132}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad7f265f7c2c663f3eee6806ee1f793b688e3eb0e98b5832ec59cd1f4cffa081"}},{"ruleId":"D2","level":"warning","message":{"text":"ReplayBuffer.sample (cognitive 36): ReplayBuffer.sample has cognitive complexity 36 (threshold 15). Drivers by points: if/else 12 (29 pts), boolean chains 6, loops 1 (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":422}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b1f33965421d23666a69ea327c495c4d81dc021364d8bbeb9af2409bbbee71e"}},{"ruleId":"D2","level":"warning","message":{"text":"TorchTitanEngineWithLMHead.prepare_model_outputs (cognitive 36): TorchTitanEngineWithLMHead.prepare_model_outputs has cognitive complexity 36 (threshold 15). Drivers by points: if/else 18 (36 pts) (nesting depth added 18). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":836}}}],"partialFingerprints":{"codehealthFindingId/v1":"45d3c25e5888a3abf3f18e8e85cae4026152c80b3d42d68a0322d48f864cefac"}},{"ruleId":"D2","level":"warning","message":{"text":"router_replay_utils.get_num_layers_to_build (cognitive 35): router_replay_utils.get_num_layers_to_build has cognitive complexity 35 (threshold 15). Drivers by points: if/else 18 (27 pts), boolean chains 8 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"9a0205278d8c9cec523b046800e0ea6c22f8116b5c1b18b25af13b7fdb0d0b13"}},{"ruleId":"D2","level":"warning","message":{"text":"model.check_target_modules (cognitive 35): model.check_target_modules has cognitive complexity 35 (threshold 15). Drivers by points: if/else 10 (22 pts), ternaries 2 (6 pts), loops 1 (4 pts), boolean chains 3 (nesting depth added 19). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/model.py"},"region":{"startLine":284}}}],"partialFingerprints":{"codehealthFindingId/v1":"9d0502b2cfc0cb330f344388622e53b354c1c741d1a18cd58652cdcbc5cbe893"}},{"ruleId":"D2","level":"warning","message":{"text":"WorkerExtension.update_weights (cognitive 35): WorkerExtension.update_weights has cognitive complexity 35 (threshold 15). Drivers by points: if/else 13 (25 pts), loops 3 (6 pts), boolean chains 3, error handling 1 (nesting depth added 15). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_worker_extension.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ee5fe41af498942a0cfa1152c34bceeed7c0bceb8a02dfa2aeaeb11e6270229"}},{"ruleId":"D2","level":"warning","message":{"text":"qwen2_vl.get_rope_index (cognitive 34): qwen2_vl.get_rope_index has cognitive complexity 34 (threshold 15). Drivers by points: if/else 10 (18 pts), ternaries 3 (10 pts), boolean chains 4, loops 1 (2 pts) (nesting depth added 16). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":64}}}],"partialFingerprints":{"codehealthFindingId/v1":"3863b97ff9c88e5d9f677e251122f7228c69adb8fee86da7e04ae388c4ea5e98"}},{"ruleId":"D2","level":"warning","message":{"text":"sandbox_fusion.compute_score (cognitive 34): sandbox_fusion.compute_score has cognitive complexity 34 (threshold 15). Drivers by points: if/else 14 (24 pts), ternaries 3 (5 pts), error handling 2 (3 pts), boolean chains 2 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/__init__.py"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9e1bb728a98db01ed68a07316c6c568deb7859d2b82317a33e63509f3beb72e"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPEngineWithLMHead.prepare_model_inputs (cognitive 34): FSDPEngineWithLMHead.prepare_model_inputs has cognitive complexity 34 (threshold 15). Drivers by points: if/else 19 (31 pts), boolean chains 3 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1155}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3675fc5e7ffdc29e242ff33ffe1bd473e8a3f40ec35a0eed57ff486940dfa08"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronModelMerger._merge_state_dicts (cognitive 33): MegatronModelMerger._merge_state_dicts has cognitive complexity 33 (threshold 15). Drivers by points: if/else 5 (17 pts), loops 4 (11 pts), ternaries 1 (4 pts), boolean chains 1 (nesting depth added 22). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":613}}}],"partialFingerprints":{"codehealthFindingId/v1":"114ba172d7585e83d6e71c3b7f6bb60378010d97dbc789dee73ccf2ecba19d3e"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronCheckpointManager.load_checkpoint (cognitive 33): MegatronCheckpointManager.load_checkpoint has cognitive complexity 33 (threshold 15). Drivers by points: if/else 14 (20 pts), boolean chains 6, error handling 2 (3 pts), loops 1 (2 pts), ternaries 1 (2 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":852}}}],"partialFingerprints":{"codehealthFindingId/v1":"3a47722b1325b9e2b6b094f675ce17ca4292a2b1a350798352435e040beb12f7"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.restore_megatron_model_from_cpu (cognitive 33): megatron_utils.restore_megatron_model_from_cpu has cognitive complexity 33 (threshold 15). Drivers by points: if/else 6 (20 pts), loops 4 (11 pts), boolean chains 2 (nesting depth added 21). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":1296}}}],"partialFingerprints":{"codehealthFindingId/v1":"71153752d0ea9168b4138301f15dc9519db68d17e118feca8786b9d3595e9ffb"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.check_correctness (cognitive 33): utils.check_correctness has cognitive complexity 33 (threshold 15). Drivers by points: if/else 10 (18 pts), ternaries 2 (8 pts), loops 2 (3 pts), boolean chains 2, error handling 1 (2 pts) (nesting depth added 16). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":449}}}],"partialFingerprints":{"codehealthFindingId/v1":"eb570d80f6b5f611c8a4cd87818d176702bc43c36c39b6c6cf31d88f6f397a36"}},{"ruleId":"D2","level":"warning","message":{"text":"RolloutConfig.__post_init__ (cognitive 33): RolloutConfig.__post_init__ has cognitive complexity 33 (threshold 15). Drivers by points: if/else 17 (25 pts), boolean chains 8 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/rollout.py"},"region":{"startLine":316}}}],"partialFingerprints":{"codehealthFindingId/v1":"9eb605af862c2a66364256ce92711ef53f923a537af405129edae1288af162ff"}},{"ruleId":"D2","level":"warning","message":{"text":"SGLangHttpServer.generate (cognitive 33): SGLangHttpServer.generate has cognitive complexity 33 (threshold 15). Drivers by points: if/else 20 (27 pts), boolean chains 5, ternaries 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":521}}}],"partialFingerprints":{"codehealthFindingId/v1":"d61602a5271f9c9222b3a875b07da97458f6d6b4be923642205ac2b18caffa7a"}},{"ruleId":"D2","level":"warning","message":{"text":"mtp_patch.patch_mtp_layer_checkpointed_forward (cognitive 32): mtp_patch.patch_mtp_layer_checkpointed_forward has cognitive complexity 32 (threshold 15). Drivers by points: if/else 9 (20 pts), loops 3 (7 pts), error handling 1 (3 pts), boolean chains 2 (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":300}}}],"partialFingerprints":{"codehealthFindingId/v1":"dec160d5bcbac26bd141559d3d7f21a8a2702832d5a97ad1c928781c435aa2ca"}},{"ruleId":"D2","level":"warning","message":{"text":"RayPPOTrainer.init_workers (cognitive 32): RayPPOTrainer.init_workers has cognitive complexity 32 (threshold 15). Drivers by points: if/else 19 (22 pts), ternaries 5 (6 pts), boolean chains 3, loops 1 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":772}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe113e0dbc1d73e6614975e5ce0493a597a10de0614577222e77dc1116b9bdf9"}},{"ruleId":"D2","level":"warning","message":{"text":"router_replay_utils.set_router_replay_data (cognitive 32): router_replay_utils.set_router_replay_data has cognitive complexity 32 (threshold 15). Drivers by points: if/else 13 (22 pts), ternaries 4 (7 pts), loops 2 (3 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6083eef1b203156acd8aff1180d82a8c46fb96aeb17d2880ef366f2b5d37b50"}},{"ruleId":"D2","level":"warning","message":{"text":"AsyncRolloutRequest.finalize (cognitive 32): AsyncRolloutRequest.finalize has cognitive complexity 32 (threshold 15). Drivers by points: if/else 10 (23 pts), loops 2 (6 pts), ternaries 1 (2 pts), boolean chains 1 (nesting depth added 18). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":591}}}],"partialFingerprints":{"codehealthFindingId/v1":"c5388194a6fac8686d5c7ecd6c656b012387d245b32bcaf4a0627126ff6e2bfc"}},{"ruleId":"D2","level":"warning","message":{"text":"ToolAgentLoop._handle_generating_state (cognitive 31): ToolAgentLoop._handle_generating_state has cognitive complexity 31 (threshold 15). Drivers by points: if/else 14 (17 pts), boolean chains 6, ternaries 4 (6 pts), loops 1 (2 pts) (nesting depth added 6). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":234}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd5bdb2015829621095d46329587683905b503dac90cca48803227a4c8f5f046"}},{"ruleId":"D2","level":"warning","message":{"text":"qwen3_vl.get_rope_index (cognitive 31): qwen3_vl.get_rope_index has cognitive complexity 31 (threshold 15). Drivers by points: if/else 11 (19 pts), ternaries 2 (6 pts), boolean chains 4, loops 1 (2 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_vl.py"},"region":{"startLine":99}}}],"partialFingerprints":{"codehealthFindingId/v1":"36de35ccecb3c9204b6ab394f594cc5de98367c62904c1fb7ec9dc69b30dfa14"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.make_megatron_module (cognitive 31): megatron_utils.make_megatron_module has cognitive complexity 31 (threshold 15). Drivers by points: if/else 14 (22 pts), boolean chains 5, error handling 2, loops 1, ternaries 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":240}}}],"partialFingerprints":{"codehealthFindingId/v1":"4cf1aed211986f8364b34b6ba3abf8513bf8ca36f9b02b8042c789436b81ea36"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPCheckpointManager.load_checkpoint (cognitive 30): FSDPCheckpointManager.load_checkpoint has cognitive complexity 30 (threshold 15). Drivers by points: if/else 12 (17 pts), ternaries 5 (8 pts), boolean chains 3, error handling 1 (2 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/fsdp_checkpoint_manager.py"},"region":{"startLine":268}}}],"partialFingerprints":{"codehealthFindingId/v1":"6955ea5df87da1258960cd4123493c44e2297bbd2f3e3e53cb0e56955b1b6963"}},{"ruleId":"D2","level":"warning","message":{"text":"seqlen_balancing.rearrange_micro_batches (cognitive 30): seqlen_balancing.rearrange_micro_batches has cognitive complexity 30 (threshold 15). Drivers by points: if/else 17 (21 pts), loops 4 (7 pts), boolean chains 2 (nesting depth added 7). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/seqlen_balancing.py"},"region":{"startLine":348}}}],"partialFingerprints":{"codehealthFindingId/v1":"460bcbe2481c2001915ad867002ba0bf0eec0469c80bfaf1662f89047fb739e5"}},{"ruleId":"D2","level":"warning","message":{"text":"DAPORewardManager.__call__ (cognitive 30): DAPORewardManager.__call__ has cognitive complexity 30 (threshold 15). Drivers by points: if/else 12 (21 pts), loops 3 (8 pts), boolean chains 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/dapo.py"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"f8c150dc8916a1a96faa7c8d1f9c8599dd6fa1b9286a4531892256ec1cf2a39f"}},{"ruleId":"D2","level":"warning","message":{"text":"output_validation.validate_hf_model_output (cognitive 29): output_validation.validate_hf_model_output has cognitive complexity 29 (threshold 15). Drivers by points: if/else 12 (20 pts), error handling 2 (4 pts), boolean chains 2, ternaries 1 (2 pts), loops 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/output_validation.py"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"a4671af301e92340c4a4c21131ae94c75a7ff503ad20292562df88e705ae3e54"}},{"ruleId":"D2","level":"warning","message":{"text":"DataProto.concat (cognitive 29): DataProto.concat has cognitive complexity 29 (threshold 15). Drivers by points: if/else 7 (20 pts), loops 4 (7 pts), ternaries 2 (nesting depth added 16). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":914}}}],"partialFingerprints":{"codehealthFindingId/v1":"98d53dd46cb4df88f506212f4029444e759223b9de8ca32b290d88ed065bfade"}},{"ruleId":"D2","level":"warning","message":{"text":"trtllm_async_server._resolve_chat_stop_tokens (cognitive 29): trtllm_async_server._resolve_chat_stop_tokens has cognitive complexity 29 (threshold 15). Drivers by points: if/else 7 (19 pts), loops 2 (5 pts), ternaries 3 (5 pts) (nesting depth added 17). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"41223ef19c8adb051bd74ffc7341b9a64ab72980ff3f20b27d22ce21ea43b0d6"}},{"ruleId":"D2","level":"warning","message":{"text":"chat_template_checker.main (cognitive 28): chat_template_checker.main has cognitive complexity 28 (threshold 15). Drivers by points: if/else 9 (15 pts), boolean chains 5, loops 2 (4 pts), error handling 2 (3 pts), ternaries 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":995}}}],"partialFingerprints":{"codehealthFindingId/v1":"de81470b40b8fa906058698818392d874d3b6e73d49b47ddef5fc5be620af390"}},{"ruleId":"D2","level":"warning","message":{"text":"tensordict_utils.get_tensordict (cognitive 28): tensordict_utils.get_tensordict has cognitive complexity 28 (threshold 15). Drivers by points: if/else 10 (16 pts), ternaries 2 (6 pts), loops 3 (5 pts), boolean chains 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tensordict_utils.py"},"region":{"startLine":377}}}],"partialFingerprints":{"codehealthFindingId/v1":"eebadf4c931c826af7f9ba7fb8dc4b2b8263b0c8002e18a82028069c7d3a651e"}},{"ruleId":"D2","level":"warning","message":{"text":"patch.patch_vllm_moe_model_weight_loader (cognitive 28): patch.patch_vllm_moe_model_weight_loader has cognitive complexity 28 (threshold 15). Drivers by points: if/else 12 (19 pts), boolean chains 5, loops 2 (3 pts), error handling 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/patch.py"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"1867df439df92c095bd5e3026360517046a424cf5089d2b8d27ed3259fbd77de"}},{"ruleId":"D2","level":"warning","message":{"text":"resizable-sidebar.document.addEventListener(\u0022DOMContentLoaded\u0022) (cognitive 28): resizable-sidebar.document.addEventListener(\u0022DOMContentLoaded\u0022) has cognitive complexity 28 (threshold 15). Drivers by points: if/else 14 (25 pts), boolean chains 3 (nesting depth added 11). Most of this is not in the body itself: 1 of the 28 points is its own statement and the rest belongs to 5 function items inside it that branch (a function literal at line 166, a function literal at line 235, setupNavigationFix, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/_static/js/resizable-sidebar.js"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fcda3258e66ed86c84b8b25bfad57eed7d114ebe93882c5f42441fd78514071"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPModelMerger._load_and_merge_state_dicts (cognitive 27): FSDPModelMerger._load_and_merge_state_dicts has cognitive complexity 27 (threshold 15). Drivers by points: if/else 10 (22 pts), loops 4 (5 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":321}}}],"partialFingerprints":{"codehealthFindingId/v1":"60e2ef0a0b4c380be4eb3b0c74a8404cb8ac54bd1e42345c573bd7190813722d"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPModelMerger._load_and_merge_state_dicts (cognitive 27): FSDPModelMerger._load_and_merge_state_dicts has cognitive complexity 27 (threshold 15). Drivers by points: if/else 10 (22 pts), loops 4 (5 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/fsdp_model_merger.py"},"region":{"startLine":167}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7189566bf1f55d376fe600d2b810ed70110977a3de25067d0caea30b95d5e21"}},{"ruleId":"D2","level":"warning","message":{"text":"ReplayBuffer._dapo_filtered_keys (cognitive 27): ReplayBuffer._dapo_filtered_keys has cognitive complexity 27 (threshold 15). Drivers by points: if/else 10 (13 pts), ternaries 4 (9 pts), loops 3, boolean chains 2 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"7c2f5bd21dfc5a6fd8bc4b49264db8e62f98e19f541e1d203a539c55b41447af"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainer._setup (cognitive 27): PPOTrainer._setup has cognitive complexity 27 (threshold 15). Drivers by points: if/else 17 (20 pts), boolean chains 3, ternaries 2 (3 pts), loops 1 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"e1fd0f36100208edd18d97aaf4a4383759afc1820653d2eed3433d22efe6aaf8"}},{"ruleId":"D2","level":"warning","message":{"text":"fsdp_utils.layered_summon_lora_params (cognitive 27): fsdp_utils.layered_summon_lora_params has cognitive complexity 27 (threshold 15). Drivers by points: if/else 10 (20 pts), ternaries 2 (4 pts), boolean chains 2, loops 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":636}}}],"partialFingerprints":{"codehealthFindingId/v1":"f57d3da460d053ab01e32328495ae4ae88e45b4bd3d3b3cfb459a916be76e455"}},{"ruleId":"D2","level":"warning","message":{"text":"groupwise.as_torch_index (cognitive 27): groupwise.as_torch_index has cognitive complexity 27 (threshold 15). Drivers by points: if/else 10 (19 pts), error handling 2 (3 pts), ternaries 1 (3 pts), boolean chains 2 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/groupwise.py"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e767563d47a9f2924d821b40439d6a829ceb73cf739c198dd66e54acd5632d6"}},{"ruleId":"D2","level":"warning","message":{"text":"router_replay_utils.pp_gather (cognitive 27): router_replay_utils.pp_gather has cognitive complexity 27 (threshold 15). Drivers by points: if/else 11 (17 pts), loops 4 (10 pts) (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":691}}}],"partialFingerprints":{"codehealthFindingId/v1":"653cc9202027f5c056a97782097bfa3471a6c45f168cb9025d1187309fefcb6e"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.offload_megatron_optimizer (cognitive 27): megatron_utils.offload_megatron_optimizer has cognitive complexity 27 (threshold 15). Drivers by points: if/else 5 (20 pts), loops 2 (5 pts), error handling 1 (2 pts) (nesting depth added 19). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":678}}}],"partialFingerprints":{"codehealthFindingId/v1":"c36c03eaa33d2e9fec7e60156009d22b1eeda0cb4836ee87cc09e1ace3e12256"}},{"ruleId":"D2","level":"warning","message":{"text":"VLContinuousTokenMixin._extract_images_from_messages (cognitive 27): VLContinuousTokenMixin._extract_images_from_messages has cognitive complexity 27 (threshold 15). Drivers by points: if/else 5 (22 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 19). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function. This shape REPEATS in the file: one other method here (DeepSeekVL2ContinuousTokenBuilder._extract_images_from_messages) has the same decision points, in the same order, at the same nesting depths \u2014 so this is one pattern written twice rather than two separate problems. Splitting this body alone leaves the other exactly as it is. Where these are variations on one operation, the change that clears both is the shared one: lift the common shape into a single routine the variants call, parameterised by whatever genuinely differs between them, and keep in each method only the part that is not shared."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1089}}}],"partialFingerprints":{"codehealthFindingId/v1":"16b06d7ed76e8a18a27cbc56f5a1dd2c07f304e23e9043d695ce86e7a2ba23ff"}},{"ruleId":"D2","level":"warning","message":{"text":"DeepSeekVL2ContinuousTokenBuilder._extract_images_from_messages (cognitive 27): DeepSeekVL2ContinuousTokenBuilder._extract_images_from_messages has cognitive complexity 27 (threshold 15). Drivers by points: if/else 5 (22 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 19). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function. This shape REPEATS in the file: one other method here (VLContinuousTokenMixin._extract_images_from_messages) has the same decision points, in the same order, at the same nesting depths \u2014 so this is one pattern written twice rather than two separate problems. Splitting this body alone leaves the other exactly as it is. Where these are variations on one operation, the change that clears both is the shared one: lift the common shape into a single routine the variants call, parameterised by whatever genuinely differs between them, and keep in each method only the part that is not shared."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1423}}}],"partialFingerprints":{"codehealthFindingId/v1":"26048b0b26e26dc4380b047d046d4d9a7d2ba81f3482ec10d6eb98e3f325974c"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronCheckpointManager._build_checkpoint_manifest (cognitive 26): MegatronCheckpointManager._build_checkpoint_manifest has cognitive complexity 26 (threshold 15). Drivers by points: if/else 15 (20 pts), boolean chains 3, ternaries 1 (3 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":472}}}],"partialFingerprints":{"codehealthFindingId/v1":"ebb3b0efc4e7db40c72b1c8af793fd75ddfee69cd9350490ead69b62013591af"}},{"ruleId":"D2","level":"warning","message":{"text":"device.get_npu_versions (cognitive 26): device.get_npu_versions has cognitive complexity 26 (threshold 15). Drivers by points: if/else 11 (16 pts), error handling 4 (6 pts), boolean chains 2, loops 2 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":195}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ec1e56a39c41ace2ff7a68eae3edd12f6e2a9d7f7c6a7d6a46cf56daf48a4bb"}},{"ruleId":"D2","level":"warning","message":{"text":"fs.copy_local_path_from_hdfs (cognitive 26): fs.copy_local_path_from_hdfs has cognitive complexity 26 (threshold 15). Drivers by points: if/else 11 (25 pts), boolean chains 1 (nesting depth added 14). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fs.py"},"region":{"startLine":232}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae5145fffc5ded17382b89922c0f6b22e9fb33288089d8f4f79ad9244f7c80c8"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.load_megatron_optimizer (cognitive 26): megatron_utils.load_megatron_optimizer has cognitive complexity 26 (threshold 15). Drivers by points: if/else 6 (21 pts), loops 2 (5 pts) (nesting depth added 18). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":728}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f48b04f2a61dad3bb77259f2a398ed569d2abff43fd11ac396fcc53842e90c3"}},{"ruleId":"D2","level":"warning","message":{"text":"model.extract_multi_modal_inputs (cognitive 26): model.extract_multi_modal_inputs has cognitive complexity 26 (threshold 15). Drivers by points: if/else 8 (17 pts), loops 3 (4 pts), error handling 1 (3 pts), ternaries 1 (2 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/model.py"},"region":{"startLine":585}}}],"partialFingerprints":{"codehealthFindingId/v1":"46bd7dd01e36ca590d6fea99c231368ae4ccc8b3f57ac344e388b80fe852d2fa"}},{"ruleId":"D2","level":"warning","message":{"text":"rlla.customize_format_reward_func (cognitive 26): rlla.customize_format_reward_func has cognitive complexity 26 (threshold 15). Drivers by points: if/else 8 (17 pts), boolean chains 6, loops 2 (3 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/rlla.py"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"a4afbd8962bbc9bb41ac86e76919a82bc76408a0f85f3be52479e2b5ad9235a8"}},{"ruleId":"D2","level":"warning","message":{"text":"VLContinuousTokenMixin.merge_context_tokens (cognitive 26): VLContinuousTokenMixin.merge_context_tokens has cognitive complexity 26 (threshold 15). Drivers by points: if/else 7 (17 pts), loops 3 (4 pts), ternaries 1 (3 pts), boolean chains 2 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1108}}}],"partialFingerprints":{"codehealthFindingId/v1":"432b900c6e29703dfca84504b17db0d6067d9af0709cecc4bd11c6c3b0791e56"}},{"ruleId":"D2","level":"warning","message":{"text":"AsyncHttpServerAdapter._make_async_request (cognitive 26): AsyncHttpServerAdapter._make_async_request has cognitive complexity 26 (threshold 15). Drivers by points: if/else 7 (15 pts), error handling 4 (8 pts), boolean chains 2, loops 1 (nesting depth added 12). This file\u0027s own header attributes it to another copyright holder, so it is code this repository carries rather than code it wrote: restructuring the body in place forks it from upstream and turns every future re-sync into a manual merge. The performable moves are to leave the body as close to its upstream form as possible and keep it behind a narrow interface of your own, and to re-sync it when upstream changes \u2014 or, if it has already diverged far enough that you maintain it here, adopt it deliberately and then split the body into named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":663}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7435478c2a6d7fd0e7ec5b27116be434bedbc4cd77364e2978ea687a7db981b"}},{"ruleId":"D2","level":"warning","message":{"text":"vLLMColocateWorkerExtension._update_weights (cognitive 26): vLLMColocateWorkerExtension._update_weights has cognitive complexity 26 (threshold 15). Drivers by points: if/else 8 (17 pts), loops 1 (4 pts), ternaries 1 (3 pts), boolean chains 2 (nesting depth added 14). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":342}}}],"partialFingerprints":{"codehealthFindingId/v1":"42059d162ac799d6d22212c68a5b92bea55a9e5cbbe37a1d6837356c8bb4cfa2"}},{"ruleId":"D2","level":"warning","message":{"text":"vLLMHttpServer._preprocess_engine_kwargs (cognitive 26): vLLMHttpServer._preprocess_engine_kwargs has cognitive complexity 26 (threshold 15). Drivers by points: if/else 14 (25 pts), boolean chains 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1320}}}],"partialFingerprints":{"codehealthFindingId/v1":"6980f0f4af00cb284c99dbed2c8a258a2544c92be73afb87cbdafdc59a2acbfb"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronModelMerger.merge_and_save (cognitive 25): MegatronModelMerger.merge_and_save has cognitive complexity 25 (threshold 15). Drivers by points: if/else 9 (21 pts), loops 1 (3 pts), boolean chains 1 (nesting depth added 14). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/megatron_model_merger.py"},"region":{"startLine":108}}}],"partialFingerprints":{"codehealthFindingId/v1":"46f85180c3a45026d0a6631af2b0069f32659da9f76f3d81b13fc5d8b3c0849a"}},{"ruleId":"D2","level":"warning","message":{"text":"mtp_patch.patch_mtp_layer_get_embeddings (cognitive 25): mtp_patch.patch_mtp_layer_get_embeddings has cognitive complexity 25 (threshold 15). Drivers by points: if/else 8 (17 pts), loops 3 (7 pts), boolean chains 1 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"a9f101d8b404371f111d1a1ce752df883500016595ec5a2eb2aa784107e7564b"}},{"ruleId":"D2","level":"warning","message":{"text":"RayPPOTrainer._validate (cognitive 25): RayPPOTrainer._validate has cognitive complexity 25 (threshold 15). Drivers by points: if/else 8 (15 pts), loops 3 (4 pts), ternaries 1 (4 pts), boolean chains 2 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":596}}}],"partialFingerprints":{"codehealthFindingId/v1":"e3dcd1e2362966b1c2f90ed5902cfd94858a3a635328b9bd47097d8fcb53425d"}},{"ruleId":"D2","level":"warning","message":{"text":"rollout_corr_helper.compute_rs_metrics (cognitive 25): rollout_corr_helper.compute_rs_metrics has cognitive complexity 25 (threshold 15). Drivers by points: if/else 15 (17 pts), ternaries 3 (6 pts), boolean chains 2 (nesting depth added 5). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":416}}}],"partialFingerprints":{"codehealthFindingId/v1":"de2d74b08f0893f3fc6dd3d59946cfed065f93c6f0ccc46d14ae85ba760f8fcb"}},{"ruleId":"D2","level":"warning","message":{"text":"kernels.efficient_entropy_forward (cognitive 25): kernels.efficient_entropy_forward has cognitive complexity 25 (threshold 15). Drivers by points: if/else 11 (12 pts), boolean chains 11, ternaries 2 (nesting depth added 1). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":569}}}],"partialFingerprints":{"codehealthFindingId/v1":"151442cc0dbb91c8358210cc99071753f58ab37e5135723112dc01a9a9ab8909"}},{"ruleId":"D2","level":"warning","message":{"text":"quantizer.fuse_global_scales (cognitive 25): quantizer.fuse_global_scales has cognitive complexity 25 (threshold 15). Drivers by points: if/else 6 (14 pts), loops 5 (9 pts), ternaries 1 (2 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/quantizer.py"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"13cfda28a4a4c45fe17da92bbb24dda8e72b725de43777f0bc9daf58ce5e67fa"}},{"ruleId":"D2","level":"warning","message":{"text":"fs.verify_copy (cognitive 24): fs.verify_copy has cognitive complexity 24 (threshold 15). Drivers by points: if/else 10 (16 pts), loops 4 (6 pts), ternaries 1 (2 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fs.py"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"22a745b8c5f72f368bdc1c35a47553865051fe2bbbbb3bf3a679ef7c52d38d38"}},{"ruleId":"D2","level":"warning","message":{"text":"router_replay_patch.apply_router_replay_patch (cognitive 24): router_replay_patch.apply_router_replay_patch has cognitive complexity 24 (threshold 15). Drivers by points: if/else 10 (17 pts), boolean chains 3, error handling 2 (3 pts), loops 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_patch.py"},"region":{"startLine":342}}}],"partialFingerprints":{"codehealthFindingId/v1":"73185c4dd8cb0c5d4b7b36faf253f509938863d7f0bb40807e2756ac0ff79313"}},{"ruleId":"D2","level":"warning","message":{"text":"PrecisionDebuggerProfiler.start (cognitive 24): PrecisionDebuggerProfiler.start has cognitive complexity 24 (threshold 15). Drivers by points: if/else 14 (20 pts), boolean chains 2, error handling 1, ternaries 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/precision_debugger_profile.py"},"region":{"startLine":183}}}],"partialFingerprints":{"codehealthFindingId/v1":"919d52f4fda6876339a587daf85e481e8f5f13b326e8448ba1f3624df6931ad3"}},{"ruleId":"D2","level":"warning","message":{"text":"prime_math.grade_answer (cognitive 24): prime_math.grade_answer has cognitive complexity 24 (threshold 15). Drivers by points: if/else 10 (14 pts), boolean chains 4, error handling 1 (4 pts), loops 1 (2 pts) (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":246}}}],"partialFingerprints":{"codehealthFindingId/v1":"505dc62b44e1001d82c3c28965c391b9da15c835a4e160d62522d1c52ad8ebb3"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.resolve_weight_name (cognitive 24): utils.resolve_weight_name has cognitive complexity 24 (threshold 15). Drivers by points: if/else 10 (16 pts), boolean chains 8 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/utils.py"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"87996583ff1e0bd20e86ba730f4905529908667290b896345514e2781eda9dfb"}},{"ruleId":"D2","level":"warning","message":{"text":"vllm_unquant_utils.stage_unquantized_moe_params (cognitive 24): vllm_unquant_utils.stage_unquantized_moe_params has cognitive complexity 24 (threshold 15). Drivers by points: if/else 8 (15 pts), loops 3 (6 pts), boolean chains 2, error handling 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_unquant_utils.py"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"86f2a3f389a95baa9a38066369c907f170e2c21fbc317c7d19295d9098016ec6"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronEngine._build_tf_config (cognitive 24): MegatronEngine._build_tf_config has cognitive complexity 24 (threshold 15). Drivers by points: if/else 13 (16 pts), boolean chains 5, loops 2 (3 pts) (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":273}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f8ff548412941b9ddc1a561cfd27a1cc9fe596fc622ed1df7b63024cb543302"}},{"ruleId":"D2","level":"warning","message":{"text":"ActorRolloutRefWorker.init_model (cognitive 24): ActorRolloutRefWorker.init_model has cognitive complexity 24 (threshold 15). Drivers by points: if/else 11 (16 pts), ternaries 3 (6 pts), boolean chains 2 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":575}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b02a083651f6b4ad44c103fa94e633ad5567c9919856dfb2c6b261c28b0f30f"}},{"ruleId":"D2","level":"warning","message":{"text":"NaiveRewardManager.__call__ (cognitive 24): NaiveRewardManager.__call__ has cognitive complexity 24 (threshold 15). Drivers by points: if/else 9 (14 pts), loops 3 (8 pts), error handling 1 (2 pts) (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/naive.py"},"region":{"startLine":90}}}],"partialFingerprints":{"codehealthFindingId/v1":"929c5c3b89f99c0269040f3f4384def2a0b22fe1fce039d8f5db01a9e6ee2695"}},{"ruleId":"D2","level":"warning","message":{"text":"AsyncTRTLLMHttpAdapter._make_async_request (cognitive 24): AsyncTRTLLMHttpAdapter._make_async_request has cognitive complexity 24 (threshold 15). Drivers by points: error handling 4 (8 pts), if/else 4 (8 pts), ternaries 2 (6 pts), boolean chains 1, loops 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":170}}}],"partialFingerprints":{"codehealthFindingId/v1":"3fe9af657ceb3919f8b84cffc495a82996b222482b71f0d342ebe6bac50597b5"}},{"ruleId":"D2","level":"warning","message":{"text":"losses.ppo_loss (cognitive 24): losses.ppo_loss has cognitive complexity 24 (threshold 15). Drivers by points: if/else 12 (16 pts), ternaries 2 (5 pts), loops 1 (2 pts), boolean chains 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/utils/losses.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"e093eabd8cc78d5d95c684823cac80ded0c3cf3f31ebb896b4ea397eb4a19eb8"}},{"ruleId":"D2","level":"warning","message":{"text":"mtp_patch.unpatch_mtp_layer_get_embeddings (cognitive 23): mtp_patch.unpatch_mtp_layer_get_embeddings has cognitive complexity 23 (threshold 15). Drivers by points: if/else 7 (16 pts), loops 3 (6 pts), boolean chains 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":344}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea51d07697e0216b20728221c12b44cf535435f84717a5ca65cf6683bd64dd35"}},{"ruleId":"D2","level":"warning","message":{"text":"rollout_corr_helper.compute_rollout_correction_weights (cognitive 23): rollout_corr_helper.compute_rollout_correction_weights has cognitive complexity 23 (threshold 15). Drivers by points: if/else 15 (21 pts), boolean chains 2 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":522}}}],"partialFingerprints":{"codehealthFindingId/v1":"24ef196f0065544840c021d46eb535d54f16e8ba59b95e3dc05ec43959a71cc5"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainer.fit (cognitive 23): PPOTrainer.fit has cognitive complexity 23 (threshold 15). Drivers by points: if/else 8 (16 pts), boolean chains 5, loops 1, ternaries 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":413}}}],"partialFingerprints":{"codehealthFindingId/v1":"8867c77edde9643fccf8aa10d34b02735fbee8b266243201f2aab5e935326689"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_checkpoint_manager._to_json_safe_config_value (cognitive 23): megatron_checkpoint_manager._to_json_safe_config_value has cognitive complexity 23 (threshold 15). Drivers by points: if/else 10 (16 pts), loops 2 (4 pts), boolean chains 3 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe715cf3b09fd3c9f0c97294d2ee02ce3fad20f94f1f1b742576d81e231b31c6"}},{"ruleId":"D2","level":"warning","message":{"text":"flops_counter._estimate_gemma3_flops (cognitive 23): flops_counter._estimate_gemma3_flops has cognitive complexity 23 (threshold 15). Drivers by points: if/else 6 (11 pts), loops 3 (7 pts), boolean chains 3, ternaries 1 (2 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":454}}}],"partialFingerprints":{"codehealthFindingId/v1":"13319bddc6a16cfdf7a586966193c0bc1cc659d23899b5342753cddba6a434f6"}},{"ruleId":"D2","level":"warning","message":{"text":"router_replay_utils.merge_router_topk_indices (cognitive 23): router_replay_utils.merge_router_topk_indices has cognitive complexity 23 (threshold 15). Drivers by points: if/else 14 (18 pts), boolean chains 2, ternaries 2, loops 1 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"935414349d7b9eb5d983f052580d997f60290b93129a1e682ea3665abd9be9f8"}},{"ruleId":"D2","level":"warning","message":{"text":"Fp8ConfigWeightQuantizer.__call__ (cognitive 23): Fp8ConfigWeightQuantizer.__call__ has cognitive complexity 23 (threshold 15). Drivers by points: if/else 6 (12 pts), loops 3 (7 pts), boolean chains 2, ternaries 1 (2 pts) (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/compressed_tensors.py"},"region":{"startLine":477}}}],"partialFingerprints":{"codehealthFindingId/v1":"c827a7fd67d91551dd5a9f2fecdefcd6328a980b1a1fce141a73fddc79ca0b5a"}},{"ruleId":"D2","level":"warning","message":{"text":"QATLinear._fake_quantize_weight (cognitive 23): QATLinear._fake_quantize_weight has cognitive complexity 23 (threshold 15). Drivers by points: if/else 8 (16 pts), loops 2 (7 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/linear.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"91074d5d16fdd562b33e6022565be41777f7772c81dccb3a607397844adf8df1"}},{"ruleId":"D2","level":"warning","message":{"text":"prime_math.match_answer (cognitive 23): prime_math.match_answer has cognitive complexity 23 (threshold 15). Drivers by points: if/else 9 (19 pts), loops 3, ternaries 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":347}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa89bf58fbf3c307169dff6e1b976e85c9c0965974a601cc036dc190ffab2d66"}},{"ruleId":"D2","level":"warning","message":{"text":"ContinuousTokenBuilder.align_response_metadata (cognitive 23): ContinuousTokenBuilder.align_response_metadata has cognitive complexity 23 (threshold 15). Drivers by points: if/else 11 (21 pts), boolean chains 1, ternaries 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":365}}}],"partialFingerprints":{"codehealthFindingId/v1":"02ed8dc4f3248f4ff61bc01c49d7157b92c873a718e91fc342d860d6a0612995"}},{"ruleId":"D2","level":"warning","message":{"text":"DeepSeekVL2ContinuousTokenBuilder._to_vl2_conversation (cognitive 23): DeepSeekVL2ContinuousTokenBuilder._to_vl2_conversation has cognitive complexity 23 (threshold 15). Drivers by points: if/else 7 (17 pts), loops 2 (4 pts), boolean chains 2 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1442}}}],"partialFingerprints":{"codehealthFindingId/v1":"5de632f1eaa2f1a53b748f8bbbca2a3351ef10c3d6b3096fbf8c3bd127959096"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPEngine._restore_w4a4_input_scales (cognitive 23): FSDPEngine._restore_w4a4_input_scales has cognitive complexity 23 (threshold 15). Drivers by points: ternaries 3 (13 pts), loops 3 (7 pts), if/else 1 (3 pts) (nesting depth added 16). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":561}}}],"partialFingerprints":{"codehealthFindingId/v1":"5bbb3a493e0502dbdec5d2b3a489a886613135a11c6f02abdb84633ef59c8edb"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPEngine.get_per_tensor_param (cognitive 23): FSDPEngine.get_per_tensor_param has cognitive complexity 23 (threshold 15). Drivers by points: if/else 12 (16 pts), boolean chains 4, ternaries 2 (3 pts) (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":981}}}],"partialFingerprints":{"codehealthFindingId/v1":"1fc816294c60524a4cb0a1cf2b3a04f2fdea15b1657367745b6851968324affb"}},{"ruleId":"D2","level":"warning","message":{"text":"TrainingWorker.train_mini_batch (cognitive 23): TrainingWorker.train_mini_batch has cognitive complexity 23 (threshold 15). Drivers by points: if/else 7 (11 pts), loops 3 (6 pts), ternaries 1 (5 pts), boolean chains 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"741750807d09385219a361faaaf511a964f462d2289233a85ce23d8ef8bf9f52"}},{"ruleId":"D2","level":"warning","message":{"text":"core_algos.agg_loss (cognitive 22): core_algos.agg_loss has cognitive complexity 22 (threshold 15). Drivers by points: if/else 10 (22 pts) (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":1140}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ec2bf032de7a10c112b8af69916da3863fa08be1d6e544fd1a1a9e36544a14b"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainerSeparateAsync.on_step_end (cognitive 22): PPOTrainerSeparateAsync.on_step_end has cognitive complexity 22 (threshold 15). Drivers by points: if/else 9 (14 pts), boolean chains 4, ternaries 2 (4 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":340}}}],"partialFingerprints":{"codehealthFindingId/v1":"430170b118de152d41a5609af3696d13090c7465b3e3b85b27c94a5a8d556cf5"}},{"ruleId":"D2","level":"warning","message":{"text":"dynamic_cp_scheduler.postprocess_dynamic_cp_batch (cognitive 22): dynamic_cp_scheduler.postprocess_dynamic_cp_batch has cognitive complexity 22 (threshold 15). Drivers by points: if/else 7 (13 pts), loops 5 (9 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dynamic_cp_scheduler.py"},"region":{"startLine":223}}}],"partialFingerprints":{"codehealthFindingId/v1":"a09b0b98ebfa041da94c000e4111bc2664f6025c389ae82bae62a237e07712e3"}},{"ruleId":"D2","level":"warning","message":{"text":"math_normalize._fix_fracs (cognitive 22): math_normalize._fix_fracs has cognitive complexity 22 (threshold 15). Drivers by points: if/else 7 (16 pts), error handling 1 (4 pts), loops 1 (2 pts) (nesting depth added 13). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/math_normalize.py"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"c407718b51bc5a1e2b1201a7e5c0a8f89d3f1699a837eae298549453fe875d47"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.postprocess_batch_func (cognitive 22): utils.postprocess_batch_func has cognitive complexity 22 (threshold 15). Drivers by points: if/else 7 (15 pts), loops 5 (7 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/utils.py"},"region":{"startLine":158}}}],"partialFingerprints":{"codehealthFindingId/v1":"22cbc9102c5278a718ae7a8bd7cdc391d5bd6c1f8722259861d34b2e97be3ded"}},{"ruleId":"D2","level":"warning","message":{"text":"converter_hf_to_mcore.convert_hf_to_mcore (cognitive 21): converter_hf_to_mcore.convert_hf_to_mcore has cognitive complexity 21 (threshold 15). Drivers by points: if/else 11 (17 pts), boolean chains 2, loops 1 (2 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/converter_hf_to_mcore.py"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"699456b73863da31908b0903be8499942f28f0261119e4918acf4672fb381cc3"}},{"ruleId":"D2","level":"warning","message":{"text":"BaseModelMerger.save_lora_adapter (cognitive 21): BaseModelMerger.save_lora_adapter has cognitive complexity 21 (threshold 15). Drivers by points: if/else 9 (14 pts), boolean chains 3, loops 2, ternaries 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/base_model_merger.py"},"region":{"startLine":325}}}],"partialFingerprints":{"codehealthFindingId/v1":"a48d6ddf0878396d33dfc59cc9a7f9974bf73be16ebed7111bae098bdd86f028"}},{"ruleId":"D2","level":"warning","message":{"text":"util.preprocess_bshd_engine (cognitive 21): util.preprocess_bshd_engine has cognitive complexity 21 (threshold 15). Drivers by points: if/else 11 (16 pts), ternaries 3, boolean chains 1, loops 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":563}}}],"partialFingerprints":{"codehealthFindingId/v1":"4af23ccfbeda439c2d74d6ad8e4f1b62256f20b213b6a1cda9681b8c71f7ccce"}},{"ruleId":"D2","level":"warning","message":{"text":"npu_patch.apply_npu_patches (cognitive 21): npu_patch.apply_npu_patches has cognitive complexity 21 (threshold 15). Drivers by points: if/else 8 (13 pts), error handling 2 (4 pts), boolean chains 3, loops 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/npu_patch.py"},"region":{"startLine":557}}}],"partialFingerprints":{"codehealthFindingId/v1":"4024654d1e78ba64529a4135ff4549750216440354e5d31efdffadcb318a59c3"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainer._init_resource_pool_mgr (cognitive 21): PPOTrainer._init_resource_pool_mgr has cognitive complexity 21 (threshold 15). Drivers by points: if/else 12 (16 pts), boolean chains 3, ternaries 1 (2 pts) (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":789}}}],"partialFingerprints":{"codehealthFindingId/v1":"654065a87ecb4df0d6c9e20ddcb13d1be98d1a8bd742d6544fc90cbb3a10948a"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronCheckpointManager.save_checkpoint (cognitive 21): MegatronCheckpointManager.save_checkpoint has cognitive complexity 21 (threshold 15). Drivers by points: if/else 11 (15 pts), boolean chains 6 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":1151}}}],"partialFingerprints":{"codehealthFindingId/v1":"4aac1195d0c792c6f13636ea45178058bd89de1e44a0e4c52b2b57169746775f"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.register_megatron_training_hooks (cognitive 21): megatron_utils.register_megatron_training_hooks has cognitive complexity 21 (threshold 15). Drivers by points: if/else 6 (17 pts), boolean chains 2, error handling 1, loops 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":1043}}}],"partialFingerprints":{"codehealthFindingId/v1":"81e788d9f8f8a81311817f77982faf60e31cb55462fa2dc6705071181ec9eb38"}},{"ruleId":"D2","level":"warning","message":{"text":"modelopt.collect_nvfp4_input_global_scales (cognitive 21): modelopt.collect_nvfp4_input_global_scales has cognitive complexity 21 (threshold 15). Drivers by points: if/else 3 (9 pts), ternaries 3 (7 pts), loops 2 (3 pts), boolean chains 2 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/modelopt.py"},"region":{"startLine":265}}}],"partialFingerprints":{"codehealthFindingId/v1":"5918b8641a7ea3dc096d9d8f6688dfea9eba6df42ea6ca60db701093acc54ca3"}},{"ruleId":"D2","level":"warning","message":{"text":"VLContinuousTokenMixin._extract_audios_from_messages (cognitive 21): VLContinuousTokenMixin._extract_audios_from_messages has cognitive complexity 21 (threshold 15). Drivers by points: if/else 4 (16 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1176}}}],"partialFingerprints":{"codehealthFindingId/v1":"356774c29a603214d01503bdbf15c6e2f8272a9b751ec9e772b7d85682168ce6"}},{"ruleId":"D2","level":"warning","message":{"text":"delta_export.build_export_index (cognitive 21): delta_export.build_export_index has cognitive complexity 21 (threshold 15). Drivers by points: if/else 9 (16 pts), boolean chains 4, loops 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/delta_export.py"},"region":{"startLine":198}}}],"partialFingerprints":{"codehealthFindingId/v1":"09029acab304c684f9940649c8d6f148d5e69769f2606845a953f0659bca673c"}},{"ruleId":"D2","level":"warning","message":{"text":"AsyncRolloutRequest.initialize_request (cognitive 21): AsyncRolloutRequest.initialize_request has cognitive complexity 21 (threshold 15). Drivers by points: if/else 12 (17 pts), loops 1 (2 pts), boolean chains 1, ternaries 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"e2bff24ec6a06fb84eb68aceff291269ce7e225a59048158048636c525907c93"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronModelMerger.__init__ (cognitive 20): MegatronModelMerger.__init__ has cognitive complexity 20 (threshold 15). Drivers by points: if/else 8 (12 pts), boolean chains 3, ternaries 1 (3 pts), loops 1 (2 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/megatron_model_merger.py"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1b173f7ee8cd3f8f4417975b760b3c21c578f3cb03f75c0acd49da2025e6d78"}},{"ruleId":"D2","level":"warning","message":{"text":"mtp_patch.unpatch_mtp_layer_checkpointed_forward (cognitive 20): mtp_patch.unpatch_mtp_layer_checkpointed_forward has cognitive complexity 20 (threshold 15). Drivers by points: if/else 6 (13 pts), loops 3 (6 pts), boolean chains 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":382}}}],"partialFingerprints":{"codehealthFindingId/v1":"d4bbd79bcb52c2cc82f06cfbe44ab2db063739e700b8c622d7a6a3f7179a30de"}},{"ruleId":"D2","level":"warning","message":{"text":"core_algos.compute_multi_turn_optimal_token_baseline_advantage (cognitive 20): core_algos.compute_multi_turn_optimal_token_baseline_advantage has cognitive complexity 20 (threshold 15). Drivers by points: if/else 7 (14 pts), loops 4, boolean chains 1, ternaries 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":991}}}],"partialFingerprints":{"codehealthFindingId/v1":"72608efab926ae10754ccfd070eb19248c7442f0c3d7d82139f8db287725b93e"}},{"ruleId":"D2","level":"warning","message":{"text":"metric_utils.infer_moe_num_experts (cognitive 20): metric_utils.infer_moe_num_experts has cognitive complexity 20 (threshold 15). Drivers by points: if/else 9 (17 pts), loops 2 (3 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"b56ea394f0e0f14fe74ce1f9b050140b922fdc4294c2161df3b75d1fd38cf1af"}},{"ruleId":"D2","level":"warning","message":{"text":"rollout_corr_helper._parse_rollout_is_threshold (cognitive 20): rollout_corr_helper._parse_rollout_is_threshold has cognitive complexity 20 (threshold 15). Drivers by points: if/else 10 (14 pts), error handling 2 (6 pts) (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":93}}}],"partialFingerprints":{"codehealthFindingId/v1":"d993a3d46ee7ab2155b47525a28464406c26ab105b18dca5ae86a3fcf2a92f5f"}},{"ruleId":"D2","level":"warning","message":{"text":"fsdp_utils.parallel_load_safetensors (cognitive 20): fsdp_utils.parallel_load_safetensors has cognitive complexity 20 (threshold 15). Drivers by points: loops 6 (15 pts), if/else 4 (5 pts) (nesting depth added 10). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":287}}}],"partialFingerprints":{"codehealthFindingId/v1":"f280776d0b145b0dace8c7707eff2e69201387c840e212f854c3674c408ebc26"}},{"ruleId":"D2","level":"warning","message":{"text":"megatron_utils.copy_megatron_model_to_cpu (cognitive 20): megatron_utils.copy_megatron_model_to_cpu has cognitive complexity 20 (threshold 15). Drivers by points: loops 4 (11 pts), if/else 4 (9 pts) (nesting depth added 12). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":1248}}}],"partialFingerprints":{"codehealthFindingId/v1":"a633c1d928d99bdd4c6ad9d80cc4823c68fac0083f18cfb39f068a0fce6f252f"}},{"ruleId":"D2","level":"warning","message":{"text":"core.setup_fusion_siblings (cognitive 20): core.setup_fusion_siblings has cognitive complexity 20 (threshold 15). Drivers by points: loops 5 (12 pts), if/else 3 (8 pts) (nesting depth added 12). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":146}}}],"partialFingerprints":{"codehealthFindingId/v1":"95f08904394fe9d60e38e7fa1d7c1c7f630623c6abff684f1959396a6ea0925f"}},{"ruleId":"D2","level":"warning","message":{"text":"rlla.compute_tool_call_reward (cognitive 20): rlla.compute_tool_call_reward has cognitive complexity 20 (threshold 15). Drivers by points: if/else 7 (15 pts), loops 2 (3 pts), boolean chains 2 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/rlla.py"},"region":{"startLine":100}}}],"partialFingerprints":{"codehealthFindingId/v1":"06d0955354ec5bd5ff21b10fe0968c6d7e8f6cc81db2d73bb03d660939a6d84a"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.offload_veomni_optimizer (cognitive 20): utils.offload_veomni_optimizer has cognitive complexity 20 (threshold 15). Drivers by points: loops 4 (10 pts), if/else 4 (9 pts), boolean chains 1 (nesting depth added 11). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline. This shape REPEATS in the file: one other method here (utils.load_veomni_optimizer) has the same decision points, in the same order, at the same nesting depths \u2014 so this is one pattern written twice rather than two separate problems. Splitting this body alone leaves the other exactly as it is. Where these are variations on one operation, the change that clears both is the shared one: lift the common shape into a single routine the variants call, parameterised by whatever genuinely differs between them, and keep in each method only the part that is not shared."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/utils.py"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"1634331a1de2777ae337d9473d6dcd7b200bea7f2c4cd21bde688b81a67df512"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.load_veomni_optimizer (cognitive 20): utils.load_veomni_optimizer has cognitive complexity 20 (threshold 15). Drivers by points: loops 4 (10 pts), if/else 4 (9 pts), boolean chains 1 (nesting depth added 11). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline. This shape REPEATS in the file: one other method here (utils.offload_veomni_optimizer) has the same decision points, in the same order, at the same nesting depths \u2014 so this is one pattern written twice rather than two separate problems. Splitting this body alone leaves the other exactly as it is. Where these are variations on one operation, the change that clears both is the shared one: lift the common shape into a single routine the variants call, parameterised by whatever genuinely differs between them, and keep in each method only the part that is not shared."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/utils.py"},"region":{"startLine":105}}}],"partialFingerprints":{"codehealthFindingId/v1":"c56f642d784b9dee9cec1b1e410d0f38b0df62611e164612ff98991c8cedf57f"}},{"ruleId":"D2","level":"warning","message":{"text":"engine_workers_tinker._apply_optim_step_params (cognitive 20): engine_workers_tinker._apply_optim_step_params has cognitive complexity 20 (threshold 15). Drivers by points: if/else 10 (16 pts), loops 3 (4 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers_tinker.py"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"f226d524df249fa8323fe085f89e5bd9e8624f298a04f732df28e42b471884c8"}},{"ruleId":"D2","level":"warning","message":{"text":"HttpServerAdapter._make_request (cognitive 20): HttpServerAdapter._make_request has cognitive complexity 20 (threshold 15). Drivers by points: if/else 5 (9 pts), error handling 4 (8 pts), boolean chains 2, loops 1 (nesting depth added 8). This file\u0027s own header attributes it to another copyright holder, so it is code this repository carries rather than code it wrote: restructuring the body in place forks it from upstream and turns every future re-sync into a manual merge. The performable moves are to leave the body as close to its upstream form as possible and keep it behind a narrow interface of your own, and to re-sync it when upstream changes \u2014 or, if it has already diverged far enough that you maintain it here, adopt it deliberately and then split the body into named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":295}}}],"partialFingerprints":{"codehealthFindingId/v1":"6c06c48f0eab4ae2e3ec20b66a858bd39a7adbad4fcd8f208be8389e0a65277a"}},{"ruleId":"D2","level":"warning","message":{"text":"TRTLLMHttpServer.generate (cognitive 20): TRTLLMHttpServer.generate has cognitive complexity 20 (threshold 15). Drivers by points: if/else 11 (13 pts), ternaries 2 (4 pts), boolean chains 3 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":306}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e836a51ffadd3752c1ce83a3035fad6b67dcd95249d0f953f7eeb55e15a147b"}},{"ruleId":"D2","level":"warning","message":{"text":"vLLMColocateWorkerExtension.update_weights_from_ipc (cognitive 20): vLLMColocateWorkerExtension.update_weights_from_ipc has cognitive complexity 20 (threshold 15). Drivers by points: loops 5 (10 pts), if/else 6, boolean chains 3, ternaries 1 (nesting depth added 5). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":248}}}],"partialFingerprints":{"codehealthFindingId/v1":"543ff64d71f24273f422bb92f279d164e589c0174174a7a661a751898a947bff"}},{"ruleId":"D2","level":"warning","message":{"text":"MultiTurnSFTDataset._build_messages (cognitive 19): MultiTurnSFTDataset._build_messages has cognitive complexity 19 (threshold 15). Drivers by points: if/else 6 (13 pts), loops 2 (3 pts), ternaries 2, boolean chains 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/multiturn_sft_dataset.py"},"region":{"startLine":243}}}],"partialFingerprints":{"codehealthFindingId/v1":"22e9a9a38cb09eb70a9365a537774cbae6f153cc1b9f26ab9d2eae879093d05e"}},{"ruleId":"D2","level":"warning","message":{"text":"FusedLinearForPPOFunction.backward (cognitive 19): FusedLinearForPPOFunction.backward has cognitive complexity 19 (threshold 15). Drivers by points: if/else 10 (16 pts), boolean chains 2, loops 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/experimental/torch_functional.py"},"region":{"startLine":156}}}],"partialFingerprints":{"codehealthFindingId/v1":"a6e7eca29535357513ff02ff5fd8b3869ab34f7509c86231ee3b12894e2aea27"}},{"ruleId":"D2","level":"warning","message":{"text":"import_utils.load_module (cognitive 19): import_utils.load_module has cognitive complexity 19 (threshold 15). Drivers by points: if/else 8 (14 pts), boolean chains 3, error handling 1 (2 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/import_utils.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"911be16196476f54081104412390f92a83b2d9fa678947b8a4bef61b98dcf855"}},{"ruleId":"D2","level":"warning","message":{"text":"CannLinearCrossEntropy.forward (cognitive 19): CannLinearCrossEntropy.forward has cognitive complexity 19 (threshold 15). Drivers by points: if/else 13, boolean chains 6. To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/npu/cann_linear_ce.py"},"region":{"startLine":289}}}],"partialFingerprints":{"codehealthFindingId/v1":"04394eea6bf71be32b997b3b386a0e7c68dab7cfc92dd4e5502cdfab77691756"}},{"ruleId":"D2","level":"warning","message":{"text":"QATQuantizer._process_layer_group (cognitive 19): QATQuantizer._process_layer_group has cognitive complexity 19 (threshold 15). Drivers by points: if/else 8 (13 pts), loops 4, boolean chains 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/quantizer.py"},"region":{"startLine":177}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6178f6d5b525c01b69c10e682f3d175fbe3612edf17b298ef72397a213e964d"}},{"ruleId":"D2","level":"warning","message":{"text":"FSDPEngine._build_lora_module (cognitive 19): FSDPEngine._build_lora_module has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (14 pts), loops 1 (4 pts), boolean chains 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":343}}}],"partialFingerprints":{"codehealthFindingId/v1":"3115ec5682fdf11cdbdf9a34d5125354880611331c009b682e431927899ce0bf"}},{"ruleId":"D2","level":"warning","message":{"text":"TorchTitanEngine.to (cognitive 19): TorchTitanEngine.to has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (11 pts), loops 2 (6 pts), boolean chains 2 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":489}}}],"partialFingerprints":{"codehealthFindingId/v1":"34b06f44aad1dc425d1da36183bba5fa28656ce9e0379995b76675d943cd1d1b"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.iter_per_tensor_params_ep (cognitive 19): utils.iter_per_tensor_params_ep has cognitive complexity 19 (threshold 15). Drivers by points: if/else 6 (10 pts), loops 5 (7 pts), ternaries 1 (2 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/utils.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"9bf4d06e90c1e1bc3713101b60d89f9eda2b7399c6cc662d58dd6edd22e7a853"}},{"ruleId":"D2","level":"warning","message":{"text":"LLMServerManager._initialize_llm_servers (cognitive 19): LLMServerManager._initialize_llm_servers has cognitive complexity 19 (threshold 15). Drivers by points: if/else 9 (12 pts), boolean chains 4, ternaries 2 (3 pts) (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":442}}}],"partialFingerprints":{"codehealthFindingId/v1":"6a50e629db90f71af75daefab1af11940a2ae95b9c0154cb671ab70488740e67"}},{"ruleId":"D2","level":"warning","message":{"text":"AsyncRolloutRequest.add_tool_response_messages (cognitive 19): AsyncRolloutRequest.add_tool_response_messages has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (15 pts), loops 2, boolean chains 1, ternaries 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":453}}}],"partialFingerprints":{"codehealthFindingId/v1":"b28036ec008557db5ff5359b8b9215ff2f158c10708b0e5cea0edb9fa3831c77"}},{"ruleId":"D2","level":"warning","message":{"text":"http_server_engine.launch_server_process (cognitive 19): http_server_engine.launch_server_process has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (12 pts), error handling 2 (4 pts), loops 2, boolean chains 1 (nesting depth added 7). This file\u0027s own header attributes it to another copyright holder, so it is code this repository carries rather than code it wrote: restructuring the body in place forks it from upstream and turns every future re-sync into a manual merge. The performable moves are to leave the body as close to its upstream form as possible and keep it behind a narrow interface of your own, and to re-sync it when upstream changes \u2014 or, if it has already diverged far enough that you maintain it here, adopt it deliberately and then split the body into named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":111}}}],"partialFingerprints":{"codehealthFindingId/v1":"ca10b9bd4cd032958984c349624bb7029af2dcde63446436c7c0836715097c82"}},{"ruleId":"D2","level":"warning","message":{"text":"delta_weight_transfer.decode_delta_payload (cognitive 19): delta_weight_transfer.decode_delta_payload has cognitive complexity 19 (threshold 15). Drivers by points: if/else 9 (14 pts), boolean chains 2, error handling 2, loops 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/delta_weight_transfer.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"94f42ead892d256ddf2d5dc88c2e8af33e8d08551018e494bbd22170159c7b89"}},{"ruleId":"D2","level":"warning","message":{"text":"manage_envs.cmd_list (cognitive 18): manage_envs.cmd_list has cognitive complexity 18 (threshold 15). Drivers by points: if/else 6 (8 pts), loops 3 (4 pts), boolean chains 2, error handling 1 (2 pts), ternaries 2 (nesting depth added 4). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"manage_envs.py"},"region":{"startLine":670}}}],"partialFingerprints":{"codehealthFindingId/v1":"c86a1cad68cb23aeaaf5eabe3e699e4566fde04f51ffb53fbcf087c5ab105e43"}},{"ruleId":"D2","level":"warning","message":{"text":"_GatherQueue._flush (cognitive 18): _GatherQueue._flush has cognitive complexity 18 (threshold 15). Drivers by points: loops 4 (12 pts), if/else 4 (5 pts), boolean chains 1 (nesting depth added 9). To reduce it, break up the iteration: give each loop body a named function, and split a multi-phase loop into one function per phase so no single body carries the whole pipeline."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/delta_checkpoint_engine.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b07be9c7cfeb262dfab8957ef1627f732e47ee2fd5f30ab9bc3c8dbb8d6716e"}},{"ruleId":"D2","level":"warning","message":{"text":"AgentLoopOutput.as_dict (cognitive 18): AgentLoopOutput.as_dict has cognitive complexity 18 (threshold 15). Drivers by points: if/else 11 (16 pts), boolean chains 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"50b4bd735cff885916c52b3067ef934bea34db641c8b978b82cf797d4592d954"}},{"ruleId":"D2","level":"warning","message":{"text":"AgentLoopWorker.generate_sequences (cognitive 18): AgentLoopWorker.generate_sequences has cognitive complexity 18 (threshold 15). Drivers by points: if/else 11 (16 pts), boolean chains 1, loops 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":597}}}],"partialFingerprints":{"codehealthFindingId/v1":"ecd9eafbcd5a6270ac5fda98c85dbf75f0634367428f53d96d295caf4b6940d0"}},{"ruleId":"D2","level":"warning","message":{"text":"ToolAgentLoop._call_tool (cognitive 18): ToolAgentLoop._call_tool has cognitive complexity 18 (threshold 15). Drivers by points: if/else 9 (13 pts), boolean chains 2, error handling 2, loops 1 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":443}}}],"partialFingerprints":{"codehealthFindingId/v1":"b0cd62d28ac7b4749962d4a74d06fd0c2f05ed7f7f5a7774fba7c88c59d21325"}},{"ruleId":"D2","level":"warning","message":{"text":"RateLimitedRewardManager.init_class (cognitive 18): RateLimitedRewardManager.init_class has cognitive complexity 18 (threshold 15). Drivers by points: if/else 11 (14 pts), boolean chains 4 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/limited.py"},"region":{"startLine":265}}}],"partialFingerprints":{"codehealthFindingId/v1":"9c58541bb6fafc54e2a99da5ff20dc72b2815885103bb50c34f30fa00b887eb5"}},{"ruleId":"D2","level":"warning","message":{"text":"metric_utils.compute_data_metrics (cognitive 18): metric_utils.compute_data_metrics has cognitive complexity 18 (threshold 15). Drivers by points: if/else 16 (17 pts), boolean chains 1 (nesting depth added 1). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":429}}}],"partialFingerprints":{"codehealthFindingId/v1":"1341e3d11c0bdf9fe5d13acfaee0a3b8767683fa34627f5422a0eb09fdf8112c"}},{"ruleId":"D2","level":"warning","message":{"text":"RLHFDataset._extract_audio_info (cognitive 18): RLHFDataset._extract_audio_info has cognitive complexity 18 (threshold 15). Drivers by points: if/else 5 (13 pts), loops 2 (3 pts), boolean chains 2 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":461}}}],"partialFingerprints":{"codehealthFindingId/v1":"5f022e93cdf6f13cf686a4fa5d106fa8beb80d469ea3e18857cf6ce1a136b09b"}},{"ruleId":"D2","level":"warning","message":{"text":"fsdp_utils.collect_merged_lora_params (cognitive 18): fsdp_utils.collect_merged_lora_params has cognitive complexity 18 (threshold 15). Drivers by points: if/else 4 (8 pts), ternaries 2 (6 pts), loops 2 (4 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":925}}}],"partialFingerprints":{"codehealthFindingId/v1":"4182098a2dcacc6b838f1525659d045c6690313fcbe6eabb20aaa344402444ba"}},{"ruleId":"D2","level":"warning","message":{"text":"kernels.efficient_entropy_backward_kernel_general_mainloop_MN (cognitive 18): kernels.efficient_entropy_backward_kernel_general_mainloop_MN has cognitive complexity 18 (threshold 15). Drivers by points: if/else 12 (16 pts), loops 2 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":774}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8932462521ca512a0ac8208eac55dde72d90d49c1ffc76d8b87db9ed87afea4"}},{"ruleId":"D2","level":"warning","message":{"text":"linear_cross_entropy.linear_cross_entropy (cognitive 18): linear_cross_entropy.linear_cross_entropy has cognitive complexity 18 (threshold 15). Drivers by points: if/else 7 (10 pts), ternaries 2 (8 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/linear_cross_entropy.py"},"region":{"startLine":219}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b2916d8dea82d4e3fa5a8ca497b4cd29f1e761fa750f2992c10cbac367a9647"}},{"ruleId":"D2","level":"warning","message":{"text":"npu_vllm_patch.patch_vllm_glm52_partial_wake_up (cognitive 18): npu_vllm_patch.patch_vllm_glm52_partial_wake_up has cognitive complexity 18 (threshold 15). Drivers by points: if/else 8 (11 pts), boolean chains 6, ternaries 1 (nesting depth added 3). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/npu_vllm_patch.py"},"region":{"startLine":188}}}],"partialFingerprints":{"codehealthFindingId/v1":"da26e136f6b99a98837b307511123f925fa3a2d89ab61ca23e3ccb77f6ded9d8"}},{"ruleId":"D2","level":"warning","message":{"text":"manage_envs._covering_combos (cognitive 17): manage_envs._covering_combos has cognitive complexity 17 (threshold 15). Drivers by points: if/else 7 (10 pts), loops 2 (5 pts), boolean chains 1, ternaries 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"manage_envs.py"},"region":{"startLine":462}}}],"partialFingerprints":{"codehealthFindingId/v1":"b7b213ce40627f309bd02442378ea707488eb1fa36309e415482fdca54a10b5b"}},{"ruleId":"D2","level":"warning","message":{"text":"NaiveRouter._make_async_request (cognitive 17): NaiveRouter._make_async_request has cognitive complexity 17 (threshold 15). Drivers by points: error handling 4 (8 pts), if/else 4 (7 pts), loops 1, ternaries 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":137}}}],"partialFingerprints":{"codehealthFindingId/v1":"1b8c4b5b40fa13fca96ad58ec9d7868fad71f3b30d9d7cebd86a3376e573ff08"}},{"ruleId":"D2","level":"warning","message":{"text":"VeOmniModelMerger.merge_and_save (cognitive 17): VeOmniModelMerger.merge_and_save has cognitive complexity 17 (threshold 15). Drivers by points: if/else 9 (13 pts), boolean chains 2, loops 1, ternaries 1 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/veomni_model_merger.py"},"region":{"startLine":336}}}],"partialFingerprints":{"codehealthFindingId/v1":"c527995e2f248d9e0d81fb23fba03679806b40c08b03602183b0d1de92f1992d"}},{"ruleId":"D2","level":"warning","message":{"text":"util.preprocess_packed_seqs (cognitive 17): util.preprocess_packed_seqs has cognitive complexity 17 (threshold 15). Drivers by points: if/else 8 (14 pts), loops 1 (2 pts), ternaries 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f18d3ab8f4e62af112dfc0d8504cc10a6f470f4c37842d77811c98f1025d685"}},{"ruleId":"D2","level":"warning","message":{"text":"RayPPOTrainer._load_checkpoint (cognitive 17): RayPPOTrainer._load_checkpoint has cognitive complexity 17 (threshold 15). Drivers by points: if/else 12 (16 pts), boolean chains 1 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1052}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa84cc21538c6feee5b67917b6ba24b4e7b70b91bc50137693992d6cfb7ab03f"}},{"ruleId":"D2","level":"warning","message":{"text":"dynamic_cp_scheduler._local_padding_mask (cognitive 17): dynamic_cp_scheduler._local_padding_mask has cognitive complexity 17 (threshold 15). Drivers by points: if/else 7 (12 pts), loops 2 (3 pts), boolean chains 1, ternaries 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dynamic_cp_scheduler.py"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"d1fbbf3d05b24883790cf262fc4dc8d237f3072f4cb8a4b8a5781f76942a8947"}},{"ruleId":"D2","level":"warning","message":{"text":"model.get_hf_auto_model_class (cognitive 17): model.get_hf_auto_model_class has cognitive complexity 17 (threshold 15). Drivers by points: if/else 6 (11 pts), loops 1 (3 pts), match/switch 1 (2 pts), boolean chains 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/model.py"},"region":{"startLine":519}}}],"partialFingerprints":{"codehealthFindingId/v1":"a48fe4d2785e96884a88cd137574f83a2260018d6a9dcaf805712f55550cc7b9"}},{"ruleId":"D2","level":"warning","message":{"text":"config.relocate_rollout_traces (cognitive 17): config.relocate_rollout_traces has cognitive complexity 17 (threshold 15). Drivers by points: if/else 4 (6 pts), ternaries 4 (6 pts), boolean chains 2, error handling 1 (2 pts), loops 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/config.py"},"region":{"startLine":415}}}],"partialFingerprints":{"codehealthFindingId/v1":"bd01e201d10a77bdd0971fc683bc8ccace053fc27ae6502611bf44be73d7659d"}},{"ruleId":"D2","level":"warning","message":{"text":"compressed_tensors.dispatch_rollout_weight_quantizer (cognitive 17): compressed_tensors.dispatch_rollout_weight_quantizer has cognitive complexity 17 (threshold 15). Drivers by points: if/else 8 (10 pts), boolean chains 4, ternaries 2 (3 pts) (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/compressed_tensors.py"},"region":{"startLine":519}}}],"partialFingerprints":{"codehealthFindingId/v1":"19cc08631f1c6f08a075d9378cc62a5c0bb22586bffb8b0d8b646821da1fe46f"}},{"ruleId":"D2","level":"warning","message":{"text":"QATQuantizer.quantize_with_fusion (cognitive 17): QATQuantizer.quantize_with_fusion has cognitive complexity 17 (threshold 15). Drivers by points: if/else 6 (10 pts), boolean chains 4, ternaries 1 (2 pts), loops 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/quantizer.py"},"region":{"startLine":262}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf6d6c7bdcdbe92c2f52adcd10476ae3210f20b41a53d54a827d4e2b3537c1a1"}},{"ruleId":"D2","level":"warning","message":{"text":"prime_code.compute_score (cognitive 17): prime_code.compute_score has cognitive complexity 17 (threshold 15). Drivers by points: error handling 4 (6 pts), if/else 4 (6 pts), loops 2 (3 pts), ternaries 1 (2 pts) (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/__init__.py"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"16e01b4e06d3b187fbddf9bb15fc1475aeef666a61aa2c7ff1b1e156882943b8"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.call_sandbox_api (cognitive 17): utils.call_sandbox_api has cognitive complexity 17 (threshold 15). Drivers by points: error handling 3 (6 pts), if/else 3 (6 pts), ternaries 2 (4 pts), loops 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"51bd21df6f6420fe9d403a77b0f30119befe07c6d7dffbe2de0a218df37c9d78"}},{"ruleId":"D2","level":"warning","message":{"text":"AutomodelEngineWithLMHead.prepare_model_inputs (cognitive 17): AutomodelEngineWithLMHead.prepare_model_inputs has cognitive complexity 17 (threshold 15). Drivers by points: if/else 12 (17 pts) (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"5927b2c0bce9f5a616e23da6141b07d9549dd5f56d2ad482445ddce6a8735429"}},{"ruleId":"D2","level":"warning","message":{"text":"MegatronEngineWithLMHead.postprocess_micro_batch_func (cognitive 17): MegatronEngineWithLMHead.postprocess_micro_batch_func has cognitive complexity 17 (threshold 15). Drivers by points: if/else 10 (15 pts), boolean chains 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":1387}}}],"partialFingerprints":{"codehealthFindingId/v1":"4209123c49337a2e26fc4ecb96ec20c88333b5974774a23f2b016e8b8eaa15cc"}},{"ruleId":"D2","level":"warning","message":{"text":"ActorRolloutRefWorker.update_weights (cognitive 17): ActorRolloutRefWorker.update_weights has cognitive complexity 17 (threshold 15). Drivers by points: if/else 11 (13 pts), boolean chains 3, ternaries 1 (nesting depth added 2). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":780}}}],"partialFingerprints":{"codehealthFindingId/v1":"18c854a27850ab863a5d7f53fd40de43189bf32b165c70b092e1ac1595f36f4a"}},{"ruleId":"D2","level":"warning","message":{"text":"ServerAdapter.__init__ (cognitive 17): ServerAdapter.__init__ has cognitive complexity 17 (threshold 15). Drivers by points: if/else 7 (8 pts), ternaries 3 (5 pts), boolean chains 4 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_rollout.py"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"231784943d6dec9f243ba6883258b8427def01a75c3f38e1db9d96a9afc06e17"}},{"ruleId":"D2","level":"warning","message":{"text":"ServerAdapter.update_weights (cognitive 17): ServerAdapter.update_weights has cognitive complexity 17 (threshold 15). Drivers by points: if/else 7 (11 pts), boolean chains 2, loops 1 (2 pts), ternaries 1 (2 pts) (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_rollout.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"ccf3088f7eddd757300c2a07791a8b35fe121b52857373a443a4907ff3f03dea"}},{"ruleId":"D2","level":"warning","message":{"text":"ServerAdapter.update_weights (cognitive 17): ServerAdapter.update_weights has cognitive complexity 17 (threshold 15). Drivers by points: if/else 8 (13 pts), boolean chains 1, error handling 1, loops 1, ternaries 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":442}}}],"partialFingerprints":{"codehealthFindingId/v1":"83eaaa943cdbe5b94b3b73e52e5828554697033109e6b803959bfd3b1e51bf53"}},{"ruleId":"D2","level":"warning","message":{"text":"chat_template_checker._extract_images (cognitive 16): chat_template_checker._extract_images has cognitive complexity 16 (threshold 15). Drivers by points: if/else 3 (11 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":726}}}],"partialFingerprints":{"codehealthFindingId/v1":"93c59de816f604cd532b69eed01316a70c0460b1806a0a473332ae0f3b958a77"}},{"ruleId":"D2","level":"warning","message":{"text":"chat_template_checker._print_results (cognitive 16): chat_template_checker._print_results has cognitive complexity 16 (threshold 15). Drivers by points: if/else 3 (7 pts), loops 2 (4 pts), ternaries 2 (4 pts), boolean chains 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":922}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fbc4e22662af1b571b49daf4f9ef683c9db6071221dffdcfb9885e4b21a76e5"}},{"ruleId":"D2","level":"warning","message":{"text":"migrate_megatron_checkpoint_layout._link_tree (cognitive 16): migrate_megatron_checkpoint_layout._link_tree has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (9 pts), error handling 1 (3 pts), loops 2 (3 pts), boolean chains 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/migrate_megatron_checkpoint_layout.py"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"cb4087e2e9c2ab087d86859cbcf2751cc3216645395fc744cc56afd238e0b2a7"}},{"ruleId":"D2","level":"warning","message":{"text":"MooncakeCheckpointEngine.receive_weights (cognitive 16): MooncakeCheckpointEngine.receive_weights has cognitive complexity 16 (threshold 15). Drivers by points: if/else 6 (10 pts), loops 3 (5 pts), boolean chains 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":239}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe7ec278ea6894b3fa3abc5536c2c74d5e9b0e8a53502b737039e4a0c2e5f894"}},{"ruleId":"D2","level":"warning","message":{"text":"NCCLCheckpointEngine.send_weights (cognitive 16): NCCLCheckpointEngine.send_weights has cognitive complexity 16 (threshold 15). Drivers by points: if/else 6 (10 pts), boolean chains 3, loops 2 (3 pts) (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":315}}}],"partialFingerprints":{"codehealthFindingId/v1":"1867c3538df4dcdf02acca2a6ce931fada71636ab3dadad5a0b6afb856829b58"}},{"ruleId":"D2","level":"warning","message":{"text":"Gemma4ToolParser._parse_arguments (cognitive 16): Gemma4ToolParser._parse_arguments has cognitive complexity 16 (threshold 15). Drivers by points: error handling 2 (9 pts), if/else 3 (6 pts), loops 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":765}}}],"partialFingerprints":{"codehealthFindingId/v1":"d941a0ae2b53fe17e55157238d1fd90accfef438ce02cf81032e7aa9bfd38719"}},{"ruleId":"D2","level":"warning","message":{"text":"SeparateRayPPOTrainer._fit_generate (cognitive 16): SeparateRayPPOTrainer._fit_generate has cognitive complexity 16 (threshold 15). Drivers by points: if/else 11 (14 pts), boolean chains 1, loops 1 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":409}}}],"partialFingerprints":{"codehealthFindingId/v1":"d113edc89dbde1a3e405b07f5308f2001e8327fd0fd8520449f918df8c370222"}},{"ruleId":"D2","level":"warning","message":{"text":"SeparateRayPPOTrainer._fit_compute_log_prob (cognitive 16): SeparateRayPPOTrainer._fit_compute_log_prob has cognitive complexity 16 (threshold 15). Drivers by points: if/else 8 (14 pts), boolean chains 2 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":502}}}],"partialFingerprints":{"codehealthFindingId/v1":"23ae43d7c52e5ed0a1b7e00e4e2c0dc2c3b09ab8c527ec513b94e9f27a9e00f6"}},{"ruleId":"D2","level":"warning","message":{"text":"VeOmniModelMerger._merge_dtensor (cognitive 16): VeOmniModelMerger._merge_dtensor has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (9 pts), loops 4 (5 pts), boolean chains 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/veomni_model_merger.py"},"region":{"startLine":206}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a1d2568fe44e09646995cdad64a6ea7fc10255004d713127a77f536677a0c11"}},{"ruleId":"D2","level":"warning","message":{"text":"qwen3_vl._get_input_embeds (cognitive 16): qwen3_vl._get_input_embeds has cognitive complexity 16 (threshold 15). Drivers by points: if/else 7 (9 pts), loops 2 (4 pts), boolean chains 3 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_vl.py"},"region":{"startLine":205}}}],"partialFingerprints":{"codehealthFindingId/v1":"cb22104f34046c233a9d4f4546f7dd3f106a41f09fd07d5e5ef0e080c9ddf623"}},{"ruleId":"D2","level":"warning","message":{"text":"ray_trainer.compute_spec_decode_metrics (cognitive 16): ray_trainer.compute_spec_decode_metrics has cognitive complexity 16 (threshold 15). Drivers by points: if/else 6 (9 pts), ternaries 5, boolean chains 2 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"bfa21cf2c363ba797373ed521bee73ffc1b93849c1842e0cc98f1a6a9be8e683"}},{"ruleId":"D2","level":"warning","message":{"text":"ReplayBuffer._sync_metadata_from_transfer_queue (cognitive 16): ReplayBuffer._sync_metadata_from_transfer_queue has cognitive complexity 16 (threshold 15). Drivers by points: if/else 4 (9 pts), match/switch 1 (4 pts), loops 2 (3 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":201}}}],"partialFingerprints":{"codehealthFindingId/v1":"71acd4baade0daf5489ed4dac2f0231f80eeb39b5b9be825272f18c2e87faecd"}},{"ruleId":"D2","level":"warning","message":{"text":"PPOTrainer._build_replay_buffer (cognitive 16): PPOTrainer._build_replay_buffer has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (8 pts), ternaries 2 (5 pts), boolean chains 3 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad9891262c38ff3864db3e1fce09f72cc46fd19b6d269c7b7205e45080668243"}},{"ruleId":"D2","level":"warning","message":{"text":"config._validate_score_centering_config (cognitive 16): config._validate_score_centering_config has cognitive complexity 16 (threshold 15). Drivers by points: if/else 9 (10 pts), boolean chains 5, loops 1 (nesting depth added 1). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/config.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"445baa6270ccf9a2c31148f3ea025d70f5321f69908257a73641e959ecebfade"}},{"ruleId":"D2","level":"warning","message":{"text":"config.validate_config (cognitive 16): config.validate_config has cognitive complexity 16 (threshold 15). Drivers by points: if/else 12 (14 pts), boolean chains 2 (nesting depth added 2). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/config.py"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"af7439a0ea76659df25222bc24a6c9b6d47aa80113bc71678b598fdaa9ecfd88"}},{"ruleId":"D2","level":"warning","message":{"text":"fsdp_utils.get_fsdp_wrap_policy (cognitive 16): fsdp_utils.get_fsdp_wrap_policy has cognitive complexity 16 (threshold 15). Drivers by points: if/else 9 (13 pts), loops 1 (2 pts), boolean chains 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":80}}}],"partialFingerprints":{"codehealthFindingId/v1":"fd091ac3b0eb7ab24d54f1c557ccb9f2ee19b304d2477b09780ac82605b8d826"}},{"ruleId":"D2","level":"warning","message":{"text":"optimizer.init_megatron_optim_config (cognitive 16): optimizer.init_megatron_optim_config has cognitive complexity 16 (threshold 15). Drivers by points: if/else 8 (13 pts), loops 1 (2 pts), boolean chains 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/optimizer.py"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"bce6d1bb31ff86867a4302be0449cf354f1d70ad8029ee47290688044a3cd976"}},{"ruleId":"D2","level":"warning","message":{"text":"PrecisionDebuggerProfiler._resolve_model (cognitive 16): PrecisionDebuggerProfiler._resolve_model has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (14 pts), loops 1, ternaries 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/precision_debugger_profile.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"cb287343cabfcf53e5072876673a487be8a228012cc8a1f5f913417bfe275749"}},{"ruleId":"D2","level":"warning","message":{"text":"compressed_tensors.build_compressed_tensors_config (cognitive 16): compressed_tensors.build_compressed_tensors_config has cognitive complexity 16 (threshold 15). Drivers by points: if/else 9 (12 pts), boolean chains 3, ternaries 1 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/compressed_tensors.py"},"region":{"startLine":190}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6a1b889bcaa1d7e6fb72a74199b5397a06d8f9d0d5d61b318f9a498be890e45"}},{"ruleId":"D2","level":"warning","message":{"text":"chat_template.initialize_turn_separator (cognitive 16): chat_template.initialize_turn_separator has cognitive complexity 16 (threshold 15). Drivers by points: if/else 7 (8 pts), boolean chains 3, error handling 1 (2 pts), loops 2, ternaries 1 (nesting depth added 2). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/chat_template.py"},"region":{"startLine":42}}}],"partialFingerprints":{"codehealthFindingId/v1":"b01bb57eb8da612c77ac4190ce37c26085d59860de48b825d6e7112559019c88"}},{"ruleId":"D2","level":"warning","message":{"text":"VLContinuousTokenMixin._extract_videos_from_messages (cognitive 16): VLContinuousTokenMixin._extract_videos_from_messages has cognitive complexity 16 (threshold 15). Drivers by points: if/else 3 (11 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1163}}}],"partialFingerprints":{"codehealthFindingId/v1":"25eb9f72eb5d265281db3b994664467f1b447da6f74de1be9ff5c0ee3fadf27c"}},{"ruleId":"D2","level":"warning","message":{"text":"rocm_vllm_moe_expert_map.restore_moe_expert_maps (cognitive 16): rocm_vllm_moe_expert_map.restore_moe_expert_maps has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (11 pts), loops 2 (3 pts), boolean chains 2 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/rocm_vllm_moe_expert_map.py"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"d63245897fe979b42a9b9d375111499f287fff740ef9de1278332d3cbde6171a"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.unfuse_moe_params (cognitive 16): utils.unfuse_moe_params has cognitive complexity 16 (threshold 15). Drivers by points: loops 3 (7 pts), if/else 3 (6 pts), boolean chains 3 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/utils.py"},"region":{"startLine":90}}}],"partialFingerprints":{"codehealthFindingId/v1":"9a23a75fe31294acb55f0b91a08a6aea9b1124e5fc40054e587ecca51fe1bace"}},{"ruleId":"D2","level":"warning","message":{"text":"delta_export._exchange_slot_tables (cognitive 16): delta_export._exchange_slot_tables has cognitive complexity 16 (threshold 15). Drivers by points: if/else 3 (7 pts), loops 4 (7 pts), ternaries 1 (2 pts) (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/delta_export.py"},"region":{"startLine":314}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd34e2e9db1fe083ff12e584a95be67cb860af3492a9fd8017b886c06ae0e7d5"}},{"ruleId":"D2","level":"warning","message":{"text":"transformer_impl._check_dcp_unsupported_features (cognitive 16): transformer_impl._check_dcp_unsupported_features has cognitive complexity 16 (threshold 15). Drivers by points: if/else 11 (14 pts), boolean chains 2 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"59118cbd9ed7953b71d554763f5e70f5e31c3ee3933b800e1516aba0266e7dcd"}},{"ruleId":"D2","level":"warning","message":{"text":"utils.extract_response_topk_logprobs (cognitive 16): utils.extract_response_topk_logprobs has cognitive complexity 16 (threshold 15). Drivers by points: if/else 10 (11 pts), boolean chains 5 (nesting depth added 1). To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":141}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc1cc74d76d64dc3680000e570211363a7d6e1a5ca2110ac51ec092dab56e98b"}},{"ruleId":"D2","level":"warning","message":{"text":"utils._get_rollout_targets (cognitive 16): utils._get_rollout_targets has cognitive complexity 16 (threshold 15). Drivers by points: if/else 3 (8 pts), loops 2 (5 pts), boolean chains 2, error handling 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":274}}}],"partialFingerprints":{"codehealthFindingId/v1":"76927b1651718cc1bc443007ca89d76c04e5816bc35c878c6503501aae33915d"}},{"ruleId":"D2","level":"warning","message":{"text":"delta_weight_transfer.is_moe_model (cognitive 16): delta_weight_transfer.is_moe_model has cognitive complexity 16 (threshold 15). Drivers by points: if/else 2 (6 pts), ternaries 2 (6 pts), loops 1 (2 pts), boolean chains 1, error handling 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/delta_weight_transfer.py"},"region":{"startLine":87}}}],"partialFingerprints":{"codehealthFindingId/v1":"3259e14b23a72635a426fab14428c374b604c58121f935a8b59b2aaee09918d7"}},{"ruleId":"D2","level":"warning","message":{"text":"ServerAdapter.__init__ (cognitive 16): ServerAdapter.__init__ has cognitive complexity 16 (threshold 15). Drivers by points: if/else 11 (12 pts), boolean chains 2, ternaries 1 (2 pts) (nesting depth added 2). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_rollout.py"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"d56016bf684f2cb4140ce72c8919d327729c31da8b1180e3ca2043e993944eeb"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: v1/trainer_base.py: FileTooLong \u2014 1395 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 895 over it, 2.79\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9475dfee32f55908b3b01b309f2548e9f9b5eb745de94278a949a9cdaa85bed6"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: kernel/kernels.py: FileTooLong \u2014 1289 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 789 over it, 2.58\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"170b6e40c78a5a3643410820931228da7cc9cc67eca8c5c13707841d2b0f0d3e"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: ppo/core_algos.py: FileTooLong \u2014 1235 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 735 over it, 2.47\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"90f9f2a56b9da42466ceaeabfcf6ec0ce6d9c4db6fd3e61daf3082c4c97237f5"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: ppo/ray_trainer.py: FileTooLong \u2014 1162 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 662 over it, 2.32\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1867d8900f2ff36c0a18315a62bef3372c097c438c3fce9be48629d5da1ca7b0"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: fsdp/transformer_impl.py: FileTooLong \u2014 1078 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 578 over it, 2.16\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0d0d1d35afa6f446b88e8b8b6e0ed799f4f1e61fdd39b8d33157283ef7335ee5"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: tokenizer/continuous_token.py: FileTooLong \u2014 1065 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 565 over it, 2.13\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"293e0ec6f9062659a530afcd9fa17a708ee7f73a9ac4f371db38ab84eadaf2c6"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: vllm_rollout/vllm_async_server.py: FileTooLong \u2014 1062 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 562 over it, 2.12\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5a3827ac4d4ca99ef0f4d60d6507e936b17fbd015d5943c4ee237a5c73429bf"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: megatron/transformer_impl.py: FileTooLong \u2014 1037 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 537 over it, 2.07\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6756827e44cee3f38230af8df4f1272b6d0ab45aac30ddd69d22e1236e8a83a4"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: PPOTrainer: TooManyMethods \u2014 59 methods. The bar is 30 methods; this is 29 over it, 1.97\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":114}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1f22adeed5f36aabd853fb0b59a829d5c30e26459714cffc73f6de151f46786"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: agent_loop/agent_loop.py: FileTooLong \u2014 859 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 359 over it, 1.72\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"24603f232cce9c128ddbc4aaeb37bc91d09f288335a843c8b28688d2ff448fc8"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: checkpoint/megatron_checkpoint_manager.py: FileTooLong \u2014 797 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 297 over it, 1.59\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9e1538c99a82a725fd81b02777120fc2edab16004d5f03229a86e351e9642d5"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: scripts/chat_template_checker.py: FileTooLong \u2014 792 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 292 over it, 1.58\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f296cb6423ba7b9e01b4f6781add81ae877a14267eede9ada0faad36d6a7c79"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: FullyAsyncRollouter: TooManyMethods \u2014 47 methods. The bar is 30 methods; this is 17 over it, 1.57\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":330}}}],"partialFingerprints":{"codehealthFindingId/v1":"90300e07fc923c22f0fea1505ae3deea6b79b3a739d376e59a8744f98baaae82"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: vLLMHttpServer: TooManyMethods \u2014 47 methods. The bar is 30 methods; this is 17 over it, 1.57\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":102}}}],"partialFingerprints":{"codehealthFindingId/v1":"414163efeca051c08d535ddffb7593c7c322796c06dd4bfad1edc360fe3c1dec"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: fully_async_policy/fully_async_rollouter.py: FileTooLong \u2014 781 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 281 over it, 1.56\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"42fbff852d81754180cf3a68daac1871e1ff959a92575462d84fccbd51fe8448"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: utils/megatron_utils.py: FileTooLong \u2014 776 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 276 over it, 1.55\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"929dcd9e71dbdafe5cbf14e147c455492e7ced75c9deb53dce62842fefa5c180"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: utils/fsdp_utils.py: FileTooLong \u2014 699 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 199 over it, 1.40\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"77213408bc17e4de575869e17fcf6a81063ca829d0a5eb5fa3307c064f9bb424"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: ray/base.py: FileTooLong \u2014 649 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 149 over it, 1.30\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b7f923b19ed7b68685a8b26f51512559e2ad9005cffd0d894dbf4c7a557c605"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: torchtitan/transformer_impl.py: FileTooLong \u2014 646 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 146 over it, 1.29\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3ae0eb9407cf680a09a8fc904b1f46d77c319d148e491ff2470a68235f356f7f"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: utils/tracking.py: FileTooLong \u2014 636 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 136 over it, 1.27\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tracking.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8631fb7ff96fcb7c39ff0cd3c6d0db12051b2e7a069623505d1b0b4f880d54bc"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: ppo/rollout_corr_helper.py: FileTooLong \u2014 622 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 122 over it, 1.24\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c9574145f0b70d58ae8ae8aaf2a2b83e49ce1245d8eeab362590f585a98681c"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: fully_async_policy/fully_async_trainer.py: FileTooLong \u2014 617 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 117 over it, 1.23\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"aae124a0b267a4ec79facc5e2760c422cd8f0776b582f83c042fcf56aa17e370"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: FSDPEngine: TooManyMethods \u2014 37 methods. The bar is 30 methods; this is 7 over it, 1.23\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f0517d5157d9dd90415577631720a9aebecc1f407973693d39dbeb4cad996d7"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: verl/protocol.py: FileTooLong \u2014 607 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 107 over it, 1.21\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6687b537c3e0261f4ef25191192148e0f889b5d114e8ae05f0fe4af6448d921f"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: sglang_rollout/async_sglang_server.py: FileTooLong \u2014 607 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 107 over it, 1.21\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"30d19e55d25601d72be0e2b7d287ccac7434d8626e831dd56c47df3cf789ebeb"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: veomni/transformer_impl.py: FileTooLong \u2014 605 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 105 over it, 1.21\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/transformer_impl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fea95c11a8ba31faaa0076ad42a2dd11cfb81adb60367c3d4c00e65a0e01f09"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: MegatronEngine: TooManyMethods \u2014 36 methods. The bar is 30 methods; this is 6 over it, 1.20\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":163}}}],"partialFingerprints":{"codehealthFindingId/v1":"828d6335344fb931a2059e67595f28a906c107cfd8285f3fc4e9f9c45aeb4b36"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: ppo/metric_utils.py: FileTooLong \u2014 594 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 94 over it, 1.19\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed6bbffb35eb26f359ad88a2840552605a940a81ed3292756698ce270fcdf376"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: mcore/util.py: FileTooLong \u2014 579 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 79 over it, 1.16\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"69b3fae9952b7ba4c4b6c905e9d1b2b23e31162078f9bda3e99116f752abe1b7"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: agent_loop/tool_parser.py: FileTooLong \u2014 572 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 72 over it, 1.14\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"29ce9a66474793170bf226afd6a48e1e3cb6623eba8deb29f8e09fcd3413cfc7"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: workers/engine_workers.py: FileTooLong \u2014 566 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 66 over it, 1.13\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f04d877aa5794e53ae49868ef5675d22ddebb8c903df0ef06774ab942f53e572"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: scripts/legacy_model_merger.py: FileTooLong \u2014 562 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 62 over it, 1.12\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"94a15df5c235cc47693a0a0f03948e5713b59c7540aaedccaa9e437712c31b69"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: SeparateRayPPOTrainer: TooManyMethods \u2014 33 methods. The bar is 30 methods; this is 3 over it, 1.10\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":52}}}],"partialFingerprints":{"codehealthFindingId/v1":"c986207f566a1d694c6eea166cd9ec5332ff135fe3731c924d09082b31f58345"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: automodel/transformer_impl.py: FileTooLong \u2014 523 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 23 over it, 1.05\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ec5fbd8c6093b7c57a262d39709d48da2df7ba55c0139c1b519cb767ccebb72"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: separation/ray_trainer.py: FileTooLong \u2014 522 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 22 over it, 1.04\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"71ed36bdd215f78168b063adb2dc728b9fcbdf317318dc11a2533bbe10a91fef"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: rollout/schemas.py: FileTooLong \u2014 522 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 22 over it, 1.04\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"db46c9e2d1bb20c9f8dd569ec7a5763e2bd3ba0ce92b8548c72242765d12520c"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: transformers/qwen3_5.py: FileTooLong \u2014 516 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 16 over it, 1.03\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e35228eb8e6c3f0317d0cf5e63f3f8a1a4ff0f60545cb19a6c00ae3b33781964"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: scripts/chat_template_mock_trajectories.py: FileTooLong \u2014 511 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 11 over it, 1.02\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_mock_trajectories.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"930c23bac79e6f7867c2ac3f1c3b811eea19456e181319e47075f6c429306163"}},{"ruleId":"D4","level":"warning","message":{"text":"Near-duplicate member family (4 members, 31 shared lines): verl/models/transformers/glm4v.py:345-391 | verl/models/transformers/qwen2_vl.py:351-399 | verl/models/transformers/qwen3_5.py:457-505 | verl/models/transformers/qwen3_vl.py:214-298 \u2014 These 4 members are variants of one another: a block of 31 lines reported below appears in every one of them, and the pairwise near-duplicate rows they would otherwise produce are collapsed into this row. Read them as one construct written 4 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 4 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":345}}}],"partialFingerprints":{"codehealthFindingId/v1":"51ac31c673938a9a6298bbec132321e96a3f1c720953995e95f78e91bb06b4c6"}},{"ruleId":"D4","level":"warning","message":{"text":"Near-duplicate member family (3 members, 16 shared lines): verl/experimental/reward_loop/router/naive_router.py:138-181 | verl/workers/rollout/sglang_rollout/http_server_engine.py:671-729 | verl/workers/rollout/trtllm_rollout/trtllm_rollout.py:178-227 \u2014 These 3 members are variants of one another: a block of 16 lines reported below appears in every one of them, and the pairwise near-duplicate rows they would otherwise produce are collapsed into this row. Read them as one construct written 3 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 3 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"cbb68e43d82525a2a51a533532eeb3f85cedc4e7ac31272f47beeb21c340a197"}},{"ruleId":"D4","level":"warning","message":{"text":"Near-duplicate member pair (52 shared lines): verl/models/transformers/qwen2_vl.py:72-161 | verl/models/transformers/qwen3_vl.py:107-202 \u2014 These two members are variants of one another: 52 of their lines are already reported as duplicated blocks below, spread through both bodies rather than gathered into one. Read them as a single construct written twice. The repair is at the members\u0027 grain \u2014 factor the shared pipeline into one implementation the two call with their differences as parameters or as an injected step, or, where the difference is systematic (sync against async, one transport against another), generate one from the other. Extracting the individual blocks below is not the same fix: it leaves the two bodies in place and the next edit still has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"5eb8344b8263955664e72675cb62606549e770ae6dd52a355bf1fbab7b4937d8"}},{"ruleId":"D4","level":"warning","message":{"text":"Edited copy of a member (63 corresponding lines): verl/models/transformers/glm4v.py:215-281 | verl/models/transformers/qwen2_vl.py:195-265 \u2014 These two members are one piece of code written twice and then edited apart: 63 consecutive lines correspond almost exactly, broken only by small local edits. Most of that correspondence is NOT reported as duplicated blocks below \u2014 the edits cut it into fragments and only the largest of them clear the block floor, so the rows below understate it. The repair is at the members\u0027 grain \u2014 factor the shared implementation into one the two call with their differences as parameters or as an injected step, or, where the difference is systematic (an extra return value, one transport against another), generate one from the other. Left alone, the next edit has to be made twice and the two will drift further apart."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":215}}}],"partialFingerprints":{"codehealthFindingId/v1":"71f581268e640d42206acb433c3b22f35c84fb407c4066d91b8c3bf7760d9132"}},{"ruleId":"D4","level":"warning","message":{"text":"Edited copy of a member (13 corresponding lines): verl/models/transformers/glm4v.py:188-200 | verl/models/transformers/qwen2_vl.py:167-179 \u2014 These two members are one piece of code written twice and then edited apart: 13 consecutive lines correspond almost exactly, broken only by small local edits. Most of that correspondence is NOT reported as duplicated blocks below \u2014 the edits cut it into fragments and only the largest of them clear the block floor, so the rows below understate it. The repair is at the members\u0027 grain \u2014 factor the shared implementation into one the two call with their differences as parameters or as an injected step, or, where the difference is systematic (an extra return value, one transport against another), generate one from the other. Left alone, the next edit has to be made twice and the two will drift further apart."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":188}}}],"partialFingerprints":{"codehealthFindingId/v1":"628c1578ea82b3f796ca4c45bb8ce3c85e674d48d5b391b3f6c67d3be46df1dd"}},{"ruleId":"D4","level":"warning","message":{"text":"Edited copy of a member (13 corresponding lines): scripts/chat_template_checker.py:239-251 | scripts/chat_template_checker.py:255-267 \u2014 These two members are one piece of code written twice and then edited apart: 13 consecutive lines correspond almost exactly, broken only by small local edits. Most of that correspondence is NOT reported as duplicated blocks below \u2014 the edits cut it into fragments and only the largest of them clear the block floor, so the rows below understate it. The repair is at the members\u0027 grain \u2014 factor the shared implementation into one the two call with their differences as parameters or as an injected step, or, where the difference is systematic (an extra return value, one transport against another), generate one from the other. Left alone, the next edit has to be made twice and the two will drift further apart."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":239}}}],"partialFingerprints":{"codehealthFindingId/v1":"478f4178912e430e3792c21f52d73f4c6324bbceaf3b028dd917e61a8f60325a"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (10 members, 50\u002B identical tokens): verl/models/transformers/dense_common.py:89-136 | verl/models/transformers/dense_common.py:157-203 | verl/models/transformers/glm4v.py:477-504 | verl/models/transformers/glm4v.py:515-542 | verl/models/transformers/qwen2_vl.py:498-525 | verl/models/transformers/qwen2_vl.py:536-563 | verl/models/transformers/qwen3_5.py:566-607 | verl/models/transformers/qwen3_5.py:620-661 | verl/models/transformers/qwen3_vl.py:352-384 | verl/models/transformers/qwen3_vl.py:395-422 \u2014 These 10 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 10 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 10 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/dense_common.py"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"409540d9979f2af243bdf9ad602de52b2301c83bb015b3c4fcb6ed89f44f533c"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (6 members, 50\u002B identical tokens): verl/utils/kernel/kernels.py:223-349 | verl/utils/kernel/kernels.py:811-969 | verl/utils/kernel/kernels.py:1016-1096 | verl/utils/kernel/kernels.py:1143-1215 | verl/utils/kernel/kernels.py:1264-1377 | verl/utils/kernel/kernels.py:1427-1515 \u2014 These 6 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 6 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 6 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":223}}}],"partialFingerprints":{"codehealthFindingId/v1":"459b283193067eab00c4a7341e286534acb8cc03c6039c665edf42f743ea1649"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (5 members, 50\u002B identical tokens): verl/models/transformers/apertus.py:50-118 | verl/models/transformers/llama.py:54-167 | verl/models/transformers/llama.py:179-241 | verl/models/transformers/qwen2.py:46-156 | verl/models/transformers/qwen2.py:168-243 \u2014 These 5 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 5 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 5 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"3724c9a374d5bcd7808c958cc172335a9197823f5754e43ee9687182842050d8"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (5 members, 50\u002B identical tokens): verl/utils/vllm/vllm_fp4_utils.py:292-318 | verl/utils/vllm/vllm_fp4_utils.py:426-441 | verl/utils/vllm/vllm_fp4_utils.py:445-460 | verl/utils/vllm/vllm_fp4_utils.py:495-512 | verl/utils/vllm/vllm_fp8_utils.py:117-129 \u2014 These 5 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 5 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 5 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":292}}}],"partialFingerprints":{"codehealthFindingId/v1":"ab887d6a07d25d710b179a720db3191f7c06e0503abdf0c265fa5d7025d4b008"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (4 members, 50\u002B identical tokens): verl/models/mcore/mtp_patch.py:262-297 | verl/models/mcore/mtp_patch.py:301-341 | verl/models/mcore/mtp_patch.py:345-379 | verl/models/mcore/mtp_patch.py:383-415 \u2014 These 4 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 4 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 4 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":262}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1fa7c869b8c39c300030bd28951f0a87117b0b00b440afe86b02a6af25b208b"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (4 members, 50\u002B identical tokens): verl/trainer/ppo/core_algos.py:276-331 | verl/trainer/ppo/core_algos.py:544-584 | verl/trainer/ppo/core_algos.py:596-636 | verl/trainer/ppo/core_algos.py:781-830 \u2014 These 4 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 4 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 4 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":276}}}],"partialFingerprints":{"codehealthFindingId/v1":"29ea731b1d92a2b4b5fcd108df502c26a7b7b556a60a8d914c92e4a60478b8ce"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (4 members, 50\u002B identical tokens): verl/utils/fsdp_utils.py:233-240 | verl/utils/fsdp_utils.py:245-252 | verl/workers/engine/automodel/utils.py:229-237 | verl/workers/engine/automodel/utils.py:242-250 \u2014 These 4 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 4 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 4 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":233}}}],"partialFingerprints":{"codehealthFindingId/v1":"1dc692a3389384ba01d6b1cf9922fabedb65914ca930918caa29b0b20651bf49"}},{"ruleId":"D4","level":"warning","message":{"text":"Members sharing a duplicated core (4 members, 50\u002B identical tokens): verl/workers/engine/automodel/transformer_impl.py:587-685 | verl/workers/engine/fsdp/transformer_impl.py:1345-1568 | verl/workers/engine/fsdp/transformer_impl.py:1622-1665 | verl/workers/engine/torchtitan/transformer_impl.py:837-911 \u2014 These 4 members share a duplicated core: a run of at least 50 identical tokens appears in every one of them. That run is NOT broken out as duplicated-block rows below \u2014 it is what admitted this row, and the blocks below cover only the part of it that clears the block floor, so they understate the correspondence. Read the members as one construct written 4 times. The repair is at the members\u0027 grain \u2014 factor the shared implementation out once and have all of them call it with their differences as parameters or as an injected step, or, where the difference is systematic, generate them from one template. Extracting the individual blocks below is not the same fix: it leaves every body in place and the next edit still has to be made 4 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":587}}}],"partialFingerprints":{"codehealthFindingId/v1":"e1affbf88df9734cf87df34cdca59706dfbc9d5c85a458e2ed0d0a6ea059a608"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (56 lines \u00D7 2): scripts/legacy_model_merger.py:324-379 | verl/model_merger/fsdp_model_merger.py:170-225 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. Note first that the copies are not typed on the same thing: \u0060DTensor\u0060 names \u0060torch.distributed._tensor\u0060 in one and \u0060torch.distributed.tensor\u0060 in another \u2014 different types that share a simple name, which is why the text matched. A single extracted unit cannot be given a parameter type that fits both, so unifying those types (or introducing a shared abstraction over them) is the step that has to come BEFORE the extraction above; if they are deliberately separate, the duplication is the price of that separation and the honest resolution is to record the decision rather than to extract."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":324}}}],"partialFingerprints":{"codehealthFindingId/v1":"346e0fa51f602808d0bfcf3960acb1428ab33fbd1a35ae63e035faaab27df25e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (45\u201348 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:438-485 | verl/trainer/ppo/ray_trainer.py:1516-1560 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/experimental/separation/ray_trainer.py:488\u0060 calls \u0060_fit_compute_reward\u0060 and \u0060verl/trainer/ppo/ray_trainer.py:1561\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":438}}}],"partialFingerprints":{"codehealthFindingId/v1":"34305292dc8d350fe8f6011453ea8f09e0d5b6c9ba0137908b3fc4a3f9cb805f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (45 lines \u00D7 2): verl/trainer/ppo/core_algos.py:1389-1433 | verl/trainer/ppo/core_algos.py:1470-1514 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":1389}}}],"partialFingerprints":{"codehealthFindingId/v1":"f40d527936e0483009578024cb3ba7cf2005c05f9414a327c51a25c19e259101"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (45 lines \u00D7 2): verl/trainer/sft_trainer.py:313-357 | verl/trainer/sft_trainer_ray.py:248-292 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":313}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a25b0f93658e5dba1ca6fd8a2cb5fed601f273290b01b0f30f597b8f6beec5d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (43\u201344 lines \u00D7 3): verl/experimental/reward_loop/reward_manager/dapo.py:64-106 | verl/experimental/reward_loop/reward_manager/gdpo.py:48-90 | verl/experimental/reward_loop/reward_manager/naive.py:54-97 \u2014 before extracting anything, compare \u0060verl/experimental/reward_loop/reward_manager/dapo.py\u0060 and \u0060verl/experimental/reward_loop/reward_manager/gdpo.py\u0060 as WHOLE FILES: 90% of the shorter file\u0027s lines also appear in the other, so this reads as one file having been copied from the other rather than as a helper waiting to be extracted. The 2 duplicated block(s) this scan matched between them are fragments of that copy, not the extent of it \u2014 treat the file pair as the unit. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/dapo.py"},"region":{"startLine":64}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f7688e03f5474fe93016c38ff4e236570071eb93e64aabbd0bc37dd11c3e86d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (44 lines \u00D7 2): verl/models/transformers/qwen3_5.py:384-427 | verl/models/transformers/qwen3_vl.py:35-78 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen3_5.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 124 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":384}}}],"partialFingerprints":{"codehealthFindingId/v1":"97cdd09456955ac2dd3036d3bc16ef5ce848fb9f40534c72d4fba4910185d4fc"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (34 lines \u00D7 2): verl/models/transformers/apertus.py:82-115 | verl/models/transformers/llama.py:205-238 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"c33797a3be0423bb49e30ce00b205be5d75c050829c14849a8ec23d350437b68"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (30\u201332 lines \u00D7 2): scripts/legacy_model_merger.py:766-795 | verl/model_merger/base_model_merger.py:156-187 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":766}}}],"partialFingerprints":{"codehealthFindingId/v1":"8576ad806a995e291aaf67e41550f9563947c257de52c85e2f56a9c8dc1e387d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (31 lines \u00D7 2): scripts/legacy_model_merger.py:408-438 | verl/model_merger/fsdp_model_merger.py:254-284 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":408}}}],"partialFingerprints":{"codehealthFindingId/v1":"f2663e3214db79d66316a8e22e1a85a1f60f5a058a6c957359f6dec2f7231009"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (31 lines \u00D7 2): verl/trainer/ppo/core_algos.py:1249-1279 | verl/trainer/ppo/core_algos.py:1331-1361 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":1249}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d63c343bab6d84247453080c8ef29b0c5f7c2ce1fa2e72d9bcda8715add7153"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (30 lines \u00D7 2): scripts/legacy_model_merger.py:159-188 | verl/model_merger/base_model_merger.py:326-355 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":159}}}],"partialFingerprints":{"codehealthFindingId/v1":"1c784ab2abf77c93008b58d4bc2509aca7d297ef9969941806b0851d471f445e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (29 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:509-537 | verl/trainer/ppo/ray_trainer.py:1574-1602 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":509}}}],"partialFingerprints":{"codehealthFindingId/v1":"c19180e1a440943d309d5373cca2c8ec6bafe1ade2806c0f2597e6ff6383acb2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (29 lines \u00D7 2): verl/workers/reward_manager/dapo.py:59-87 | verl/workers/reward_manager/naive.py:91-119 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/workers/reward_manager/dapo.py:89\u0060 calls \u0060endswith\u0060 and \u0060verl/workers/reward_manager/naive.py:121\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/dapo.py"},"region":{"startLine":59}}}],"partialFingerprints":{"codehealthFindingId/v1":"3519823efb26840b22758a1c53a9ecdd943c1e0045c3b92636a7d1286c76cf08"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (25\u201328 lines \u00D7 2): verl/models/transformers/dense_common.py:92-119 | verl/models/transformers/dense_common.py:162-186 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/dense_common.py"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9c9a59264c1f11c806c309d585434dc8095422bba033fa43dee732f7fc82df0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (28 lines \u00D7 2): verl/models/transformers/glm4v.py:246-273 | verl/models/transformers/qwen2_vl.py:229-256 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/glm4v.py:246\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":246}}}],"partialFingerprints":{"codehealthFindingId/v1":"0973511ff957165913518f83940dc7709811bbcf383176a03a807721612a1f7d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (27\u201328 lines \u00D7 2): verl/models/transformers/llama.py:79-106 | verl/models/transformers/qwen2.py:62-88 \u2014 before extracting anything, compare \u0060verl/models/transformers/llama.py\u0060 and \u0060verl/models/transformers/qwen2.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 118 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":79}}}],"partialFingerprints":{"codehealthFindingId/v1":"b5667419f71439a0d6323bca2d7b76e685e0f01ef6ddb6d759a611befb2a5363"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (26 lines \u00D7 3): verl/utils/kernel/kernels.py:1588-1613 | verl/utils/kernel/kernels.py:1631-1656 | verl/utils/kernel/kernels.py:1680-1705 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/utils/kernel/kernels.py:1615\u0060 calls \u0060stride\u0060 and \u0060verl/utils/kernel/kernels.py:1657\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1588}}}],"partialFingerprints":{"codehealthFindingId/v1":"e7d9ac61c988a8b545371f94a6a5e4d0eb2f7bd1b526213268f67d21b29acfc5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (26 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:604-629 | verl/trainer/ppo/ray_trainer.py:1650-1675 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/experimental/separation/ray_trainer.py:602\u0060 calls \u0060get\u0060 and \u0060verl/trainer/ppo/ray_trainer.py:1645\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":604}}}],"partialFingerprints":{"codehealthFindingId/v1":"312569e3a3f0ee61089bbca0bc31fb4d26c5fa95d6feba389adc82bb9fd15f2b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (26 lines \u00D7 2): verl/workers/rollout/sglang_rollout/async_sglang_server.py:191-216 | verl/workers/rollout/vllm_rollout/vllm_async_server.py:194-219 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":191}}}],"partialFingerprints":{"codehealthFindingId/v1":"fafa3705eb820f359480aa238ff62bdbfd5b801dc6fe583b722e9818ae6da2ab"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (25 lines \u00D7 2): verl/models/transformers/qwen2_vl.py:88-112 | verl/models/transformers/qwen3_vl.py:131-155 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen2_vl.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 10 separate duplicated blocks between them, totalling at least 123 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"bb78f4d0bbc6195a3f6a358efacff6cc3faeb90484f08de428be8f42f65e448e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (25 lines \u00D7 2): verl/workers/rollout/sglang_rollout/http_server_engine.py:637-661 | verl/workers/rollout/trtllm_rollout/trtllm_rollout.py:144-168 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":637}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d4ea9cf6b9445b801b67d5b08443230945c1616b20f942ce3746fc19971f6fc"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14\u201324 lines \u00D7 2): verl/experimental/fully_async_policy/dynamic_schedule/default_policy.py:212-235 | verl/experimental/fully_async_policy/dynamic_schedule/fixed_ratio_policy.py:76-89 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/dynamic_schedule/default_policy.py"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"d4d5bc9338a14f8681a212bd43b899ed0005727bd1f1084f21190c6e156788f2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (24 lines \u00D7 2): verl/utils/kernel/kernels.py:811-834 | verl/utils/kernel/kernels.py:1264-1287 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":811}}}],"partialFingerprints":{"codehealthFindingId/v1":"2919538ed3170da382eac070b130e5e08ab58a33021f869527f2109dd3d5253b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201324 lines \u00D7 2): verl/workers/config/actor.py:245-256 | verl/workers/config/critic.py:132-155 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/actor.py"},"region":{"startLine":245}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b87c1462f7cd66afd366ce876728f6c85a48408348e364763e3e37c6ec50def"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (23 lines \u00D7 2): verl/experimental/one_step_off_policy/ray_trainer.py:290-312 | verl/experimental/separation/ray_trainer.py:310-332 \u2014 \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/experimental/separation/ray_trainer.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 5 separate duplicated blocks between them, totalling at least 73 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":290}}}],"partialFingerprints":{"codehealthFindingId/v1":"38e261bebf83213e97606bb33751b0a580d73e825e3bc36f207a12ce9515f992"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (23 lines \u00D7 2): verl/experimental/reward_loop/reward_manager/naive.py:43-65 | verl/experimental/reward_loop/reward_manager/remote.py:84-106 \u2014 before extracting anything, compare \u0060verl/experimental/reward_loop/reward_manager/naive.py\u0060 and \u0060verl/experimental/reward_loop/reward_manager/remote.py\u0060 as WHOLE FILES: this scan already matched 3 separate duplicated blocks between them, totalling at least 50 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/naive.py"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ea894aaa16ed973e19ee66ef45d75b2048a4810fb4ab0f731689deaa264bb73"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (22\u201323 lines \u00D7 2): verl/trainer/ppo/core_algos.py:1436-1457 | verl/trainer/ppo/core_algos.py:1520-1542 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":1436}}}],"partialFingerprints":{"codehealthFindingId/v1":"3961efda9c967f630b97c34589c403c797af2c4a34238267c15b53b3caadd8ef"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (22\u201323 lines \u00D7 2): verl/utils/kernel/kernels.py:1055-1077 | verl/utils/kernel/kernels.py:1177-1198 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1055}}}],"partialFingerprints":{"codehealthFindingId/v1":"0bc3d3990714859c64293a3b2904eec2add26d4bbecc2757327f82757b01c19c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (23 lines \u00D7 2): verl/workers/reward_manager/dapo.py:132-154 | verl/workers/reward_manager/naive.py:153-175 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/dapo.py"},"region":{"startLine":132}}}],"partialFingerprints":{"codehealthFindingId/v1":"3be950a1c6473de3fed246f699eb5b3e8780631296ead4327f86a78a556eafda"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (21\u201322 lines \u00D7 2): scripts/legacy_model_merger.py:744-764 | verl/model_merger/base_model_merger.py:69-90 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060scripts/legacy_model_merger.py:744\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":744}}}],"partialFingerprints":{"codehealthFindingId/v1":"f0379ff78291877c0685d206ce43968c27f6537585ffe9fc7c3a85fb0e5cb4c3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (22 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:1011-1032 | verl/trainer/ppo/v1/trainer_base.py:978-999 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/trainer/ppo/ray_trainer.py:1011\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1011}}}],"partialFingerprints":{"codehealthFindingId/v1":"793d4f1fcb562c27a4d938f0d89752f5617ba2028d7992f97687b3bfc05a0f7d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (20\u201321 lines \u00D7 4): verl/models/mcore/mtp_patch.py:262-281 | verl/models/mcore/mtp_patch.py:301-320 | verl/models/mcore/mtp_patch.py:345-365 | verl/models/mcore/mtp_patch.py:383-403 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":262}}}],"partialFingerprints":{"codehealthFindingId/v1":"a032743b1e42c7386a695600dcfab3da6fe9dcfe5228712c291c28959b843684"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (21 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:480-500 | verl/trainer/ppo/v1/trainer_base.py:1264-1284 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":480}}}],"partialFingerprints":{"codehealthFindingId/v1":"9c42e002fc70a7c1817f2df93f912fa476940ab097a85b88fcdc7388ecc12e9c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19\u201321 lines \u00D7 2): verl/utils/flops_counter.py:148-168 | verl/utils/flops_counter.py:198-216 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":148}}}],"partialFingerprints":{"codehealthFindingId/v1":"eaeef06ed3970fbbe727f33a0eb80384931bc66e282f03246c9f32730aa2ba72"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (21 lines \u00D7 2): verl/utils/kernel/kernels.py:851-871 | verl/utils/kernel/kernels.py:1289-1309 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":851}}}],"partialFingerprints":{"codehealthFindingId/v1":"75d30de9228795a4b36f0944dfb73375ec959aba407c04a3a60683f621e8f530"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17\u201321 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:697-717 | verl/workers/engine/torchtitan/transformer_impl.py:921-937 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/engine/automodel/transformer_impl.py:697\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":697}}}],"partialFingerprints":{"codehealthFindingId/v1":"8b8866870cee882a0c01303be671ac89c3e8dcd1bf4acf25e25299edcf22b76b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19\u201320 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:412-430 | verl/trainer/ppo/ray_trainer.py:1486-1505 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":412}}}],"partialFingerprints":{"codehealthFindingId/v1":"50b2a71f52bfa640a9473d3854ff815a18a6f9bdf3f650529ab939774ca66394"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (20 lines \u00D7 2): verl/models/transformers/glm4v.py:221-240 | verl/models/transformers/qwen2_vl.py:204-223 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":221}}}],"partialFingerprints":{"codehealthFindingId/v1":"e61ef8abef028826dee69bd55201d3763c2a22cb8197e32b05c086f1453acf0a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (20 lines \u00D7 2): verl/utils/flops_counter.py:500-519 | verl/utils/flops_counter.py:611-630 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":500}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c45a8258bcf3ea2eccd2cc933d310c34fc8f49e89b260342b5cdd81a05bdd26"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19\u201320 lines \u00D7 2): verl/utils/kernel/kernels.py:1314-1333 | verl/utils/kernel/kernels.py:1459-1477 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/utils/kernel/kernels.py:1478\u0060 calls \u0060min\u0060 and \u0060verl/utils/kernel/kernels.py:1335\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1314}}}],"partialFingerprints":{"codehealthFindingId/v1":"3639f373b9068b9a4a7d751e79a9ccf99357230f13f94904c79a60aa6a920fbf"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18\u201319 lines \u00D7 3): verl/models/transformers/apertus.py:71-88 | verl/models/transformers/llama.py:194-211 | verl/models/transformers/qwen2.py:183-201 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/models/transformers/apertus.py:67\u0060 calls \u0060q_norm\u0060, \u0060k_norm\u0060 and \u0060verl/models/transformers/llama.py:191\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":71}}}],"partialFingerprints":{"codehealthFindingId/v1":"3601f4aa5f1eae2e3e4eb46d9320c7532d97d226b8f575efafaf6639b7ab7f28"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 3): verl/models/transformers/apertus.py:90-108 | verl/models/transformers/llama.py:213-231 | verl/models/transformers/qwen2.py:213-231 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/apertus.py:90\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":90}}}],"partialFingerprints":{"codehealthFindingId/v1":"d41a37ca22d4f9ca1f903f2111db03e891584f57b748b5b4a320c40e314aa88a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 2): verl/models/transformers/llama.py:123-141 | verl/models/transformers/qwen2.py:98-116 \u2014 before extracting anything, compare \u0060verl/models/transformers/llama.py\u0060 and \u0060verl/models/transformers/qwen2.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 118 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":123}}}],"partialFingerprints":{"codehealthFindingId/v1":"3edb92660cbeaedead959093d45cdaff9ae71d9c4bb4426c7e990e7c4d5a9ccf"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18\u201319 lines \u00D7 2): verl/utils/kernel/kernels.py:897-915 | verl/utils/kernel/kernels.py:1347-1364 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:897\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":897}}}],"partialFingerprints":{"codehealthFindingId/v1":"d1f5d2a20db0fc940d8e8901719ebf0f5ccb2130b3af342fd50cf9432049791e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 2): verl/utils/megatron_utils.py:615-633 | verl/utils/megatron_utils.py:656-674 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":615}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc0bf7e355f307bdead8a96b9e636a3dfceee51506adda57b848c277ee86530b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17\u201319 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:553-571 | verl/workers/engine/torchtitan/transformer_impl.py:798-814 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":553}}}],"partialFingerprints":{"codehealthFindingId/v1":"e17946f96ffeca38862d5a04e0812cfd9a5508bbadbbe886550eaaa77ad1ba5d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16\u201319 lines \u00D7 2): verl/workers/rollout/sglang_rollout/async_sglang_server.py:570-585 | verl/workers/rollout/vllm_rollout/vllm_async_server.py:616-634 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/sglang_rollout/async_sglang_server.py:570\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":570}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cbf337b8ce85cea4f000715c2189c1ada9281a8dba232264b17474d7d6b899b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): scripts/legacy_model_merger.py:275-292 | verl/model_merger/fsdp_model_merger.py:115-132 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on. Note first that the copies are not typed on the same thing: \u0060DTensor\u0060 names \u0060torch.distributed._tensor\u0060 in one and \u0060torch.distributed.tensor\u0060 in another \u2014 different types that share a simple name, which is why the text matched. A single extracted unit cannot be given a parameter type that fits both, so unifying those types (or introducing a shared abstraction over them) is the step that has to come BEFORE the extraction above; if they are deliberately separate, the duplication is the price of that separation and the honest resolution is to record the decision rather than to extract."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed2e0dba65f30917c0715bf016a0a1909709bd9354e336c8f05d7fb88dc157c5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:211-228 | verl/trainer/ppo/ray_trainer.py:853-870 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":211}}}],"partialFingerprints":{"codehealthFindingId/v1":"2bd8048efb5368868aedbf7143d206056d6958e66faa4fd16f8437f7ea3d2ec3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): verl/models/mcore/util.py:91-108 | verl/models/mcore/util.py:311-328 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"afba5a4147e5d239a23a48b059311d9c24bfb8f0616befa8084af86f80a86857"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17\u201318 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:101-118 | verl/workers/engine/torchtitan/transformer_impl.py:241-257 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/engine/automodel/transformer_impl.py:101\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"cef9e1519d653755e30eadde3bac5c39edab2b6df876e3ff5242d135f55d0ae2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): verl/workers/engine/automodel/utils.py:200-217 | verl/workers/engine/veomni/utils.py:58-75 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/utils.py"},"region":{"startLine":200}}}],"partialFingerprints":{"codehealthFindingId/v1":"49b8f69f316d56c575bd282d5223f50f6cf316fe82f76c243c5eefd660643260"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): verl/workers/engine/fsdp/fsdp_turbo_impl.py:127-144 | verl/workers/engine/fsdp/transformer_impl.py:821-838 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/fsdp_turbo_impl.py"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"553eb7d311ac1fa03ae58a5bdeea2e2adeb8909b7496ab99a8de1d0290a87a05"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): verl/workers/rollout/sglang_rollout/sglang_pd_replica.py:62-79 | verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:68-85 \u2014 \u0060verl/workers/rollout/sglang_rollout/sglang_pd_replica.py\u0060 and \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 3 separate duplicated blocks between them, totalling at least 35 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/sglang_rollout/sglang_pd_replica.py:62\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_pd_replica.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"51c63ec2693d72fcec94f92c9d198b14ac6c9335429843c7e10f787d15924e8d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 4): verl/models/transformers/glm4v.py:349-365 | verl/models/transformers/qwen2_vl.py:355-371 | verl/models/transformers/qwen3_5.py:461-477 | verl/models/transformers/qwen3_vl.py:219-235 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":349}}}],"partialFingerprints":{"codehealthFindingId/v1":"f056ebbb832b46b98e409cae3d171618d585acfc04d78ad75b0abf1a317dc8aa"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16\u201317 lines \u00D7 3): verl/utils/flops_counter.py:101-116 | verl/utils/flops_counter.py:137-153 | verl/utils/flops_counter.py:463-479 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"53ec5d04bbaaa1c6a2fc2564be9b68ed54b6f6922c44be52068997fe002ce632"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 3): verl/workers/engine/automodel/transformer_impl.py:701-719 | verl/workers/engine/fsdp/transformer_impl.py:1594-1612 | verl/workers/engine/torchtitan/transformer_impl.py:923-939 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/engine/automodel/transformer_impl.py:701\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":701}}}],"partialFingerprints":{"codehealthFindingId/v1":"ba6996c1f0e33852dad7c5fd9b69f9aa7490ca0b71c37bd661075f76c2f9f788"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16\u201317 lines \u00D7 2): scripts/chat_template_checker.py:497-513 | scripts/chat_template_checker.py:841-856 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060scripts/chat_template_checker.py:496\u0060 calls \u0060_clone\u0060 and \u0060scripts/chat_template_checker.py:840\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":497}}}],"partialFingerprints":{"codehealthFindingId/v1":"889a25adac193b83f54c0810cfd60a9561585ce0745fa8c612012b3468d78287"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16\u201317 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_trainer.py:937-953 | verl/trainer/ppo/ray_trainer.py:998-1013 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/fully_async_policy/fully_async_trainer.py:937\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":937}}}],"partialFingerprints":{"codehealthFindingId/v1":"6ff97cf30cd74760f27997ff2d4245d261316efffd9df1e36db2e860191b9bf8"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2): verl/trainer/ppo/core_algos.py:562-578 | verl/trainer/ppo/core_algos.py:612-628 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":562}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea32e439c310af0fa2a78e5d7945ec41568b7b36a3030d726b5da4adfdba0aad"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2): verl/utils/qat/modelopt.py:68-84 | verl/utils/qat/modelopt.py:102-118 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/modelopt.py"},"region":{"startLine":68}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e3ee06fa336a1ba4be18fba098d72b4fc30f860a79d4abbba1f72329f975b73"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2): verl/utils/tokenizer/continuous_token.py:1090-1106 | verl/utils/tokenizer/continuous_token.py:1424-1440 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":1090}}}],"partialFingerprints":{"codehealthFindingId/v1":"179ccba37a5fe35f6ada8a45da8035299476e13f7dfccedef175d02084849b94"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201316 lines \u00D7 4): verl/utils/kernel/kernels.py:280-295 | verl/utils/kernel/kernels.py:885-897 | verl/utils/kernel/kernels.py:1335-1347 | verl/utils/kernel/kernels.py:1480-1492 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:280\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/utils/kernel/kernels.py:1478\u0060 calls \u0060min\u0060 and \u0060verl/utils/kernel/kernels.py:1333\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":280}}}],"partialFingerprints":{"codehealthFindingId/v1":"c8e8fc6ce5b70a9b85a9284bf8567b804ade9aadd15e7d05d6938ac0253b0306"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15\u201316 lines \u00D7 3): verl/experimental/fully_async_policy/fully_async_rollouter.py:676-691 | verl/experimental/fully_async_policy/fully_async_trainer.py:982-996 | verl/trainer/ppo/ray_trainer.py:1054-1068 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":676}}}],"partialFingerprints":{"codehealthFindingId/v1":"e263aae326d6d377fe71cf372ca949aa133676b3ac56724f7a1b22398903fe85"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 3): verl/experimental/reward_loop/reward_manager/gdpo.py:77-92 | verl/experimental/reward_loop/reward_manager/naive.py:84-99 | verl/experimental/reward_loop/reward_manager/remote.py:115-130 \u2014 before extracting anything, compare \u0060verl/experimental/reward_loop/reward_manager/gdpo.py\u0060 and \u0060verl/experimental/reward_loop/reward_manager/naive.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 77 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/reward_loop/reward_manager/gdpo.py:77\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/gdpo.py"},"region":{"startLine":77}}}],"partialFingerprints":{"codehealthFindingId/v1":"04ae7ab0272f59f5db4608b6bb734a2ee9c49bf8e9ac2170a1ccdd3f5d69524e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 3): verl/experimental/reward_loop/router/naive_router.py:161-176 | verl/workers/rollout/sglang_rollout/http_server_engine.py:714-729 | verl/workers/rollout/trtllm_rollout/trtllm_rollout.py:212-227 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":161}}}],"partialFingerprints":{"codehealthFindingId/v1":"b83f61d7ca486d6b7e65ab693c95c3291a7f219b7f5f4803cd79db369153e51f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 3): verl/utils/flops_counter.py:93-108 | verl/utils/flops_counter.py:455-470 | verl/utils/flops_counter.py:523-538 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/flops_counter.py:93\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":93}}}],"partialFingerprints":{"codehealthFindingId/v1":"747f10cc0c3466cca359c4f3c717a922975124eb13ba41e7edbfd402413d47d1"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201316 lines \u00D7 3): verl/utils/flops_counter.py:109-124 | verl/utils/flops_counter.py:436-451 | verl/utils/flops_counter.py:663-675 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e3c937c954e80888bcbdfb794ef474ca570d7f6eb3f1a8144e1a9679d03203b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:582-597 | verl/trainer/ppo/ray_trainer.py:1630-1645 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/experimental/separation/ray_trainer.py:602\u0060 calls \u0060get\u0060 and \u0060verl/trainer/ppo/ray_trainer.py:1650\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":582}}}],"partialFingerprints":{"codehealthFindingId/v1":"900a6ef4fd0e172d494d96cb39f8f6e01eb6db51b17c794ee5cdb79bbf8b8b92"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/models/mcore/util.py:192-207 | verl/models/mcore/util.py:531-546 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":192}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5af406cc3436427f685b802aed88c95acfc8a4281b3567c04389e93083d45bb"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/models/transformers/qwen3_5.py:430-445 | verl/models/transformers/qwen3_vl.py:81-96 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen3_5.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 124 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/qwen3_5.py:430\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":430}}}],"partialFingerprints":{"codehealthFindingId/v1":"eadce7f3484e3ee24ef46a1b3c5e83fa62c7157fb6b28f3a848f93dee3ee8886"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:455-470 | verl/trainer/ppo/v1/trainer_base.py:1228-1243 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":455}}}],"partialFingerprints":{"codehealthFindingId/v1":"21565600909d49172bc772e11ffa62071dbefd14a1f291a25c6710cbf764afe4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:1336-1351 | verl/trainer/ppo/v1/trainer_base.py:1832-1847 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1336}}}],"partialFingerprints":{"codehealthFindingId/v1":"82c89e626c490846cbcc02d2a1deaf2da1183bfbdce274b9e6e6d11b4d3ffcd7"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): verl/trainer/sft_trainer.py:181-196 | verl/trainer/sft_trainer_ray.py:221-236 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":181}}}],"partialFingerprints":{"codehealthFindingId/v1":"61d183eac68b412bd0ab9f3936b41a27c6b9ec3d26400cd55d21289b9480bc4c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15\u201316 lines \u00D7 2): verl/utils/kernel/kernels.py:237-252 | verl/utils/kernel/kernels.py:832-846 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:237\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":237}}}],"partialFingerprints":{"codehealthFindingId/v1":"b38efcc844e655bcec69f4ec6213eb1167bddf5d0b1d3642c5f141b3b9b8a393"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15\u201316 lines \u00D7 2): verl/workers/engine_workers.py:379-394 | verl/workers/engine_workers_tinker.py:130-144 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":379}}}],"partialFingerprints":{"codehealthFindingId/v1":"e26667c58bcc80e8b75a2c8522ecc907f585c254bcf08542145cea5290845545"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 4): verl/models/transformers/dense_common.py:181-195 | verl/models/transformers/glm4v.py:523-537 | verl/models/transformers/qwen2_vl.py:544-558 | verl/models/transformers/qwen3_vl.py:403-417 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from all 4 call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/dense_common.py"},"region":{"startLine":181}}}],"partialFingerprints":{"codehealthFindingId/v1":"63fd9031783bee8bfb30d30282c4f3b2b814576818e222326c9ebbd5cf793298"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14\u201315 lines \u00D7 4): verl/utils/kernel/kernels.py:241-255 | verl/utils/kernel/kernels.py:835-849 | verl/utils/kernel/kernels.py:1316-1329 | verl/utils/kernel/kernels.py:1461-1474 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":241}}}],"partialFingerprints":{"codehealthFindingId/v1":"466d2e555d792689ed7bb02e9f4fb3d3333cddc25290da394f239cbb5e86d584"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201315 lines \u00D7 3): verl/workers/engine/automodel/transformer_impl.py:621-635 | verl/workers/engine/fsdp/transformer_impl.py:1415-1427 | verl/workers/engine/torchtitan/transformer_impl.py:861-873 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/engine/automodel/transformer_impl.py:621\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":621}}}],"partialFingerprints":{"codehealthFindingId/v1":"f277a56fd3d242180637015f192bbc243e39d7daa44a75d0b3d0d959d63136ae"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10\u201315 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_main.py:57-66 | verl/experimental/one_step_off_policy/main_ppo.py:56-70 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/one_step_off_policy/main_ppo.py:56\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_main.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"b67c3922951530f9cee20a6dc27879205e9a7ad5fb34901e16f69af3111d3062"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14\u201315 lines \u00D7 2): verl/experimental/one_step_off_policy/ray_trainer.py:96-110 | verl/trainer/ppo/ray_trainer.py:346-359 \u2014 before extracting anything, compare \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 5 separate duplicated blocks between them, totalling at least 55 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/trainer/ppo/ray_trainer.py:344\u0060 calls \u0060need_teacher_policy\u0060 and \u0060verl/experimental/one_step_off_policy/ray_trainer.py:94\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"04e60b0d7064c7594091031809a838690159464485eda00d2579a7659fa557f9"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14\u201315 lines \u00D7 2): verl/trainer/main_ppo_v0.py:68-82 | verl/trainer/ppo/v1/trainer_base.py:818-831 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/main_ppo_v0.py"},"region":{"startLine":68}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b3ce093f42f88e8f1f8ffa42b170250571a5088538a57a15507c8c91d58f3d8"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2): verl/trainer/ppo/metric_utils.py:474-488 | verl/trainer/ppo/metric_utils.py:493-507 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/metric_utils.py"},"region":{"startLine":474}}}],"partialFingerprints":{"codehealthFindingId/v1":"850b1a70d88aca34874fdae01d1e1c04ac5542695b615627a14e9965751250fd"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2): verl/utils/tokenizer/chat_template.py:24-38 | verl/utils/tokenizer/chat_template.py:115-129 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/chat_template.py"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"6fab921990db15f5b46c137e0c4a002f4e64b15f20bb13c0a8d55bad9e6b8d3c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2): verl/workers/engine/veomni/utils.py:86-100 | verl/workers/engine/veomni/utils.py:106-120 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/utils.py"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5181ae1172a2e0a09cadb1a428992f0081a6d666b9c08721f793c25919c2aee"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 4): verl/models/transformers/glm4v.py:367-380 | verl/models/transformers/qwen2_vl.py:373-386 | verl/models/transformers/qwen3_5.py:479-492 | verl/models/transformers/qwen3_vl.py:239-252 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":367}}}],"partialFingerprints":{"codehealthFindingId/v1":"b30979d2ce03c558e46020fbd714ad981d708b0486268d4ee6782068e99fc0db"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10\u201314 lines \u00D7 4): verl/utils/flops_counter.py:108-119 | verl/utils/flops_counter.py:143-156 | verl/utils/flops_counter.py:435-446 | verl/utils/flops_counter.py:662-671 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":108}}}],"partialFingerprints":{"codehealthFindingId/v1":"64b4b4ad5c341b0142a1ebde40c89780dc4298d5e108ed9cdb82386d33a4fecd"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 3): verl/experimental/one_step_off_policy/ray_trainer.py:238-251 | verl/experimental/separation/ray_trainer.py:465-478 | verl/trainer/ppo/ray_trainer.py:1540-1553 \u2014 \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/experimental/separation/ray_trainer.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 5 separate duplicated blocks between them, totalling at least 73 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":238}}}],"partialFingerprints":{"codehealthFindingId/v1":"330b9d10c548019b74ae16062b76a3dc869c0f3b6fa82a280381c3f4b139d530"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): scripts/legacy_model_merger.py:385-398 | verl/model_merger/fsdp_model_merger.py:231-244 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":385}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa8ec75e57e108671acbc9849ab3dfd784df045872a7a66b4b8cfada5b63f724"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): verl/checkpoint_engine/hccl_checkpoint_engine.py:275-288 | verl/checkpoint_engine/nccl_checkpoint_engine.py:364-377 \u2014 before extracting anything, compare \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py\u0060 and \u0060verl/checkpoint_engine/nccl_checkpoint_engine.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 51 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py:275\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"111fa8cbcd6f423931accd86798fb9b1cad16713869437e95972305bc94f9f41"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201314 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_rollouter.py:384-397 | verl/experimental/one_step_off_policy/main_ppo.py:74-85 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/fully_async_policy/fully_async_rollouter.py:384\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":384}}}],"partialFingerprints":{"codehealthFindingId/v1":"55d0a5b83db5f7246f98eee7ecdba596f71278f4b19e2bba449b037efd72ad07"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201314 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_trainer.py:1016-1029 | verl/trainer/ppo/ray_trainer.py:1086-1098 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/fully_async_policy/fully_async_trainer.py:1016\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":1016}}}],"partialFingerprints":{"codehealthFindingId/v1":"d0cde6b747f8925b385f6abd423812ed030170d9c3c5753c7a3ef8fa1dc7d4d4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): verl/models/transformers/qwen3_5.py:568-581 | verl/models/transformers/qwen3_5.py:622-635 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":568}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8d1b5933b2d044d2a245dd673c6101c162b6d0e86cd036b55fb3ac4d35e8ed3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201314 lines \u00D7 2): verl/trainer/ppo/core_algos.py:312-324 | verl/trainer/ppo/core_algos.py:813-826 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/trainer/ppo/core_algos.py:810\u0060 calls \u0060count_nonzero\u0060, \u0060clamp\u0060 and \u0060verl/trainer/ppo/core_algos.py:311\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6cf28d416dc5a4d2f526883e5219687ec3491cf0dba0523006a92a9e00cac28"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): verl/trainer/ppo/core_algos.py:924-937 | verl/trainer/ppo/core_algos.py:1040-1053 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":924}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d850670570466de37ad0992ffe2b2860557351254e796bcd2fa5f1786679f82"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): verl/trainer/sft_trainer.py:250-263 | verl/trainer/sft_trainer_ray.py:198-211 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/trainer/sft_trainer.py:250\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"86f5f5063eddc5149057a1d6a3b65097cd61b2af6a210bc0580b6c180034ebf4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2): verl/utils/kernel/kernels.py:655-668 | verl/utils/kernel/kernels.py:720-733 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/utils/kernel/kernels.py:653\u0060 calls \u0060stride\u0060 and \u0060verl/utils/kernel/kernels.py:719\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":655}}}],"partialFingerprints":{"codehealthFindingId/v1":"907bbf9da58026fcb30315418fec9cb5979d1eec99e858dc5f3fe26702115c18"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201313 lines \u00D7 3): verl/utils/kernel/kernels.py:820-832 | verl/utils/kernel/kernels.py:1273-1285 | verl/utils/kernel/kernels.py:1427-1438 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":820}}}],"partialFingerprints":{"codehealthFindingId/v1":"95f023882307ab679f10dd926fb93b69e0a178482c6dbf60f946c79403c1a630"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7\u201313 lines \u00D7 3): verl/workers/rollout/sglang_rollout/async_sglang_server.py:855-866 | verl/workers/rollout/trtllm_rollout/trtllm_async_server.py:662-668 | verl/workers/rollout/vllm_rollout/vllm_async_server.py:1566-1578 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/sglang_rollout/async_sglang_server.py:855\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":855}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d6b724a9db5d246d2a78374d35b7ebe471a01d2ce7c08710060e0adc14a28b9"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): scripts/veomni/moe_merge.py:62-74 | scripts/veomni/moe_split.py:59-71 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/veomni/moe_merge.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"32f21df1576781e27f0c168a89afaa9e3fa3d23115bb5a3cff4e0578450c8db5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/checkpoint_engine/hccl_checkpoint_engine.py:363-375 | verl/checkpoint_engine/nccl_checkpoint_engine.py:485-497 \u2014 before extracting anything, compare \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py\u0060 and \u0060verl/checkpoint_engine/nccl_checkpoint_engine.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 51 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py:363\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":363}}}],"partialFingerprints":{"codehealthFindingId/v1":"de2ed97f6552c94ecd27425cc458d9be7aed3a2f759ee453393f2bfb9b56bda5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/checkpoint_engine/hccl_checkpoint_engine.py:381-393 | verl/checkpoint_engine/nccl_checkpoint_engine.py:503-515 \u2014 before extracting anything, compare \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py\u0060 and \u0060verl/checkpoint_engine/nccl_checkpoint_engine.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 51 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":381}}}],"partialFingerprints":{"codehealthFindingId/v1":"3727163ddd506569b1fd02597bb334e2c592956b5cce7651a336e382f1ea7d37"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201313 lines \u00D7 2): verl/experimental/one_step_off_policy/ray_trainer.py:124-135 | verl/experimental/separation/ray_trainer.py:87-99 \u2014 \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/experimental/separation/ray_trainer.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 5 separate duplicated blocks between them, totalling at least 73 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/separation/ray_trainer.py:87\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":124}}}],"partialFingerprints":{"codehealthFindingId/v1":"f68594733079635db8acfc1b44a729a0ad6bd461234a25806f157699cec76b54"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/experimental/one_step_off_policy/ray_trainer.py:273-285 | verl/experimental/separation/ray_trainer.py:291-303 \u2014 \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/experimental/separation/ray_trainer.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 5 separate duplicated blocks between them, totalling at least 73 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":273}}}],"partialFingerprints":{"codehealthFindingId/v1":"1100b32791ad57ac5724cd5497d595b4d7a70be2dafe7425944f6db445c5b547"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:294-306 | verl/trainer/ppo/ray_trainer.py:1420-1432 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/separation/ray_trainer.py:294\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/trainer/ppo/ray_trainer.py:1434\u0060 calls \u0060init\u0060 and \u0060verl/experimental/separation/ray_trainer.py:310\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"80cc51eeeef1e5899dab141a464950b9df917e617a85784ae619ff0723f4cd4f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:591-603 | verl/trainer/ppo/v1/trainer_base.py:1755-1767 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":591}}}],"partialFingerprints":{"codehealthFindingId/v1":"279d360775aa54cf869260449a38c9ecde56542b02ba2a5c75ed50d567eda876"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/models/transformers/qwen2_vl.py:125-137 | verl/models/transformers/qwen3_vl.py:165-177 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen2_vl.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 10 separate duplicated blocks between them, totalling at least 123 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf71025800d88556ab53a9d1df06a0bfbe057e7ca36aea0b538f05a902a0ba80"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:728-740 | verl/trainer/ppo/v1/trainer_base.py:1362-1374 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":728}}}],"partialFingerprints":{"codehealthFindingId/v1":"2e4830335ad7fa8e82a55b11b8875f36e7cb27f0f188eb680840f7826fd6a760"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/trainer/sft_trainer.py:160-172 | verl/trainer/sft_trainer_ray.py:109-121 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":160}}}],"partialFingerprints":{"codehealthFindingId/v1":"067b9c7c82c6f938350c21eef2cc99151616c6d3e5585fd50ac371535a6b844a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/trainer/sft_trainer.py:236-248 | verl/trainer/sft_trainer_ray.py:184-196 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/trainer/sft_trainer.py:236\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"61561a2b3bca15a9af9f608e8d32e58aface8641bc69abd41acd48414cf55ff3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/trainer/sft_trainer.py:410-422 | verl/trainer/sft_trainer_ray.py:350-362 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/trainer/sft_trainer.py:409\u0060 calls \u0060get_data_parallel_rank\u0060 and \u0060verl/trainer/sft_trainer_ray.py:349\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":410}}}],"partialFingerprints":{"codehealthFindingId/v1":"1be4d98a0fe2a41903defc35cb5509cf2479e4c88b8e5bfd69b89fb4d3be5b37"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/utils/transferqueue_utils.py:401-413 | verl/utils/transferqueue_utils.py:453-465 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":401}}}],"partialFingerprints":{"codehealthFindingId/v1":"cf7c29c4e124a541bbae658f973beebe9ad2a5ba9205ebe051656edf76a74773"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201313 lines \u00D7 2): verl/workers/rollout/replica.py:166-177 | verl/workers/rollout/replica.py:214-226 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/replica.py:166\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. Note first that the copies are not typed on the same thing: the declarations holding them bind \u0060resource_pool\u0060 to \u0060RayResourcePool\u0060 in one and \u0060Optional[RayResourcePool] = None\u0060 in another, and the duplicated lines use it. The extracted unit therefore needs a parameter type that fits BOTH \u2014 their common supertype where they have one, or a new abstraction over them where they do not \u2014 and settling that is the step that comes BEFORE the extraction above. Where the two types are deliberately unrelated, the duplication is the price of that separation and the honest resolution is to record the decision rather than to extract."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/replica.py"},"region":{"startLine":166}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe4d80855df58287c00a456e3b621b7a870b4ad0ffdfbcf8f1cdd63b85dbf7a0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): verl/workers/rollout/schemas.py:412-424 | verl/workers/rollout/schemas.py:437-449 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/schemas.py:412\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":412}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd89acaaa499423ed5e54b745669613b127b081b518f4a1b359e915b7c7c11d2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12\u201313 lines \u00D7 2): verl/workers/rollout/sglang_rollout/async_sglang_server.py:167-179 | verl/workers/rollout/trtllm_rollout/trtllm_async_server.py:118-129 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":167}}}],"partialFingerprints":{"codehealthFindingId/v1":"2df01b03c1a8d041b073f1ad371775e6e685c5a528d1a7dff74eb82c0ee71c37"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11\u201312 lines \u00D7 8): verl/models/transformers/glm4v.py:480-490 | verl/models/transformers/glm4v.py:518-528 | verl/models/transformers/qwen2_vl.py:501-511 | verl/models/transformers/qwen2_vl.py:539-549 | verl/models/transformers/qwen3_5.py:573-583 | verl/models/transformers/qwen3_5.py:627-637 | verl/models/transformers/qwen3_vl.py:355-366 | verl/models/transformers/qwen3_vl.py:398-408 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/models/transformers/qwen3_5.py:586\u0060 calls \u0060FusedLinearForPPO\u0060, \u0060getattr\u0060 and \u0060verl/models/transformers/qwen3_vl.py:369\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":480}}}],"partialFingerprints":{"codehealthFindingId/v1":"4a6e3ebe72d5ede35be44975b5430be1bdd145aed5ef96590750ee98e71203fe"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 4): verl/utils/kernel/kernels.py:725-736 | verl/utils/kernel/kernels.py:1592-1603 | verl/utils/kernel/kernels.py:1635-1646 | verl/utils/kernel/kernels.py:1684-1695 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":725}}}],"partialFingerprints":{"codehealthFindingId/v1":"e816a6e319c5009cb78aa5f444d9995e6cd2701ad503505b27055013b5094024"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 3): verl/models/transformers/dense_common.py:117-128 | verl/models/transformers/glm4v.py:488-499 | verl/models/transformers/qwen2_vl.py:509-520 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from all 3 call sites, so a change lands once. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/glm4v.py:488\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/dense_common.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"66cbf402079c2577196ac55c8756fbb9d01e0164f05c81f0450724cd3aa2a167"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 3): verl/workers/engine/automodel/transformer_impl.py:548-559 | verl/workers/engine/fsdp/transformer_impl.py:1300-1311 | verl/workers/engine/torchtitan/transformer_impl.py:793-804 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":548}}}],"partialFingerprints":{"codehealthFindingId/v1":"a846825814d593d75b89ade782c1840c396f2ad167f79957c5f671b717fa0780"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): scripts/legacy_model_merger.py:202-213 | verl/model_merger/base_model_merger.py:411-422 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":202}}}],"partialFingerprints":{"codehealthFindingId/v1":"a675a57ea738a229d9c723f78bf3193dfa7217abecf7eff3fd8d19af6fb32497"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/experimental/agent_loop/tool_parser.py:488-499 | verl/experimental/agent_loop/tool_parser.py:543-554 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":488}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9b870067ce732b72da3099a930b868de376799ead878244b3e72536e4b977cf"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_trainer.py:997-1008 | verl/trainer/ppo/ray_trainer.py:1070-1081 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":997}}}],"partialFingerprints":{"codehealthFindingId/v1":"dff0cf2fb9ee37e921d35566e9ec211b60206a45680423f0331a9b3f65ed93d1"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/experimental/reward_loop/reward_manager/dapo.py:39-50 | verl/workers/reward_manager/dapo.py:45-56 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/dapo.py"},"region":{"startLine":39}}}],"partialFingerprints":{"codehealthFindingId/v1":"986fd72fe4c46d1c9f153654860b9a06042c2d3059c36c99bd4f5effb9dea8ff"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:559-570 | verl/trainer/ppo/v1/trainer_base.py:1213-1224 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":559}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9260fdede846dcbf649574acc1413b577315e25fbac42f730312e5254592a28"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/utils/kernel/fp8_kernel.py:201-212 | verl/utils/kernel/fp8_kernel.py:252-263 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/fp8_kernel.py"},"region":{"startLine":201}}}],"partialFingerprints":{"codehealthFindingId/v1":"4e416c200bfd97faef597f60565b3424078f926ea549c6e4ace09ff0d0938118"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2): verl/utils/rollout_trace.py:375-386 | verl/utils/rollout_trace.py:438-449 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/rollout_trace.py"},"region":{"startLine":375}}}],"partialFingerprints":{"codehealthFindingId/v1":"13f86ef8b0f86bab8c4158a18a611a6ba4ec6ea7e98c59a565c5bb12a882742e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10\u201311 lines \u00D7 5): verl/experimental/reward_loop/reward_manager/dapo.py:53-62 | verl/experimental/reward_loop/reward_manager/gdpo.py:36-45 | verl/experimental/reward_loop/reward_manager/limited.py:399-409 | verl/experimental/reward_loop/reward_manager/naive.py:35-44 | verl/experimental/reward_loop/reward_manager/remote.py:76-85 \u2014 before extracting anything, compare \u0060verl/experimental/reward_loop/reward_manager/dapo.py\u0060 and \u0060verl/experimental/reward_loop/reward_manager/gdpo.py\u0060 as WHOLE FILES: 90% of the shorter file\u0027s lines also appear in the other, so this reads as one file having been copied from the other rather than as a helper waiting to be extracted. The 2 duplicated block(s) this scan matched between them are fragments of that copy, not the extent of it \u2014 treat the file pair as the unit. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/experimental/reward_loop/reward_manager/limited.py:410\u0060 calls \u0060get\u0060, \u0060update\u0060, \u0060items\u0060 and \u0060verl/experimental/reward_loop/reward_manager/dapo.py:64\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/dapo.py"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a0e18999a3a03183cec5d23b032409ab539748a642afbf555301c582ee75dc1"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 3): verl/experimental/separation/ray_trainer.py:215-225 | verl/trainer/ppo/ray_trainer.py:857-867 | verl/trainer/ppo/v1/trainer_base.py:293-303 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":215}}}],"partialFingerprints":{"codehealthFindingId/v1":"0314b64d99957b4cfc8a9aecda8d4ad48fe6e83a7d89de1d3e61f976917ae309"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): scripts/legacy_model_merger.py:298-308 | verl/model_merger/fsdp_model_merger.py:144-154 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":298}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd12c42db0b6dd4fcbf587ccc634af60ea84bd46679f1403febb42e92fa58436"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/checkpoint_engine/hccl_checkpoint_engine.py:190-200 | verl/checkpoint_engine/nccl_checkpoint_engine.py:267-277 \u2014 before extracting anything, compare \u0060verl/checkpoint_engine/hccl_checkpoint_engine.py\u0060 and \u0060verl/checkpoint_engine/nccl_checkpoint_engine.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 51 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":190}}}],"partialFingerprints":{"codehealthFindingId/v1":"116e7e19360dd653c825c7ed9a25bcd2cbd6dd5adea2a8714e3ac86e14196c2a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/models/mcore/model_forward.py:180-190 | verl/models/mcore/model_forward.py:276-286 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward.py"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"b890b1b1b6b55e47626c4616f98dd396187eb75dae15f87deb0dc5e417b3dded"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10\u201311 lines \u00D7 2): verl/models/mcore/model_forward.py:197-207 | verl/models/mcore/model_forward.py:291-300 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/mcore/model_forward.py:197\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward.py"},"region":{"startLine":197}}}],"partialFingerprints":{"codehealthFindingId/v1":"06adcb02569304c74db21c7bddfe5c97676c140baf633e2e528ba81b7fe28490"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/trainer/sft_trainer.py:139-149 | verl/trainer/sft_trainer_ray.py:88-98 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":139}}}],"partialFingerprints":{"codehealthFindingId/v1":"41529e4aa41f517e21cee250fb8d78e152fa2db11033f4e215a7f9be06f563ec"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/utils/checkpoint/megatron_checkpoint_manager.py:756-766 | verl/utils/checkpoint/megatron_checkpoint_manager.py:971-981 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":756}}}],"partialFingerprints":{"codehealthFindingId/v1":"bc551d061d36af1baf8b6aa5c24546d2378c05463a916fdc3f4d47c33f9134c5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/utils/skip/rollout_skip.py:132-142 | verl/utils/skip/rollout_skip.py:219-229 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/skip/rollout_skip.py"},"region":{"startLine":132}}}],"partialFingerprints":{"codehealthFindingId/v1":"b91728982179fedcc3708e99c8baaaa56050492d6f8d21b1d798574fc83cfbbf"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10\u201311 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:227-236 | verl/workers/engine/fsdp/transformer_impl.py:737-747 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/engine/automodel/transformer_impl.py:227\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"46d5b77dde718bc6c024554eab4f000a4904a3595800886b83d1254d32a594fa"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9\u201311 lines \u00D7 2): verl/workers/rollout/sglang_rollout/async_sglang_server.py:771-779 | verl/workers/rollout/vllm_rollout/vllm_async_server.py:1499-1509 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/sglang_rollout/async_sglang_server.py:771\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":771}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ba1075c5b8070b90b918a0283903f2019dedc2c7737faacf68d69dcb2ed1532"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): verl/workers/rollout/sglang_rollout/sglang_rollout.py:178-188 | verl/workers/rollout/vllm_rollout/vllm_rollout.py:97-107 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_rollout.py"},"region":{"startLine":178}}}],"partialFingerprints":{"codehealthFindingId/v1":"1329608ec731a560fff46421e644943f907607e5d25f6a36da441a736271bff4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 3): verl/experimental/one_step_off_policy/ray_trainer.py:276-285 | verl/experimental/separation/ray_trainer.py:294-303 | verl/trainer/ppo/ray_trainer.py:1420-1429 \u2014 \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/experimental/separation/ray_trainer.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 5 separate duplicated blocks between them, totalling at least 73 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/one_step_off_policy/ray_trainer.py:276\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/trainer/ppo/ray_trainer.py:1434\u0060 calls \u0060init\u0060 and \u0060verl/experimental/separation/ray_trainer.py:310\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":276}}}],"partialFingerprints":{"codehealthFindingId/v1":"123a06175a013435adf863d79fec345a1db74aa61593f2fd00b1272ea355c890"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 3): verl/trainer/ppo/rollout_corr_helper.py:332-341 | verl/trainer/ppo/rollout_corr_helper.py:351-360 | verl/trainer/ppo/rollout_corr_helper.py:363-372 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/rollout_corr_helper.py"},"region":{"startLine":332}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b0a44e2837833f3ee7f1ff5d23920583269c53372e302ab0f82c2b8e2cf5504"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 3): verl/utils/dataset/multiturn_sft_dataset.py:151-160 | verl/utils/dataset/rl_dataset.py:182-191 | verl/utils/dataset/rm_dataset.py:100-109 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from all 3 call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/multiturn_sft_dataset.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"4212b4e20910ed2625ba1429f14cbcd237a07fa2cb796320940da06eb212b250"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 3): verl/workers/engine/automodel/transformer_impl.py:224-233 | verl/workers/engine/fsdp/transformer_impl.py:734-743 | verl/workers/engine/veomni/transformer_impl.py:438-447 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":224}}}],"partialFingerprints":{"codehealthFindingId/v1":"718fcd173afb62b6c33ff6c0aefecf3c8348ede9c33a379ca19c87b96e5232ae"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): scripts/chat_template_checker.py:351-360 | verl/utils/tokenizer/continuous_token.py:847-856 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":351}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e21e86fd5fee259b1374d5d623aa473c6d62cc03ae02466108bd581595e2117"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): scripts/legacy_model_merger.py:396-405 | scripts/legacy_model_merger.py:676-685 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":396}}}],"partialFingerprints":{"codehealthFindingId/v1":"c16900cb00685a7f2d23326ffb77ba76ab62af4e4631fdcf02866b2c14930d38"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): verl/experimental/reward_loop/reward_manager/dapo.py:106-115 | verl/workers/reward_manager/dapo.py:119-128 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/dapo.py"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f86b0a296fd90c24d7552ae7373c3b36df569d4238ee03d4a8c910c5dd832b3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): verl/experimental/reward_loop/reward_manager/limited.py:125-134 | verl/experimental/reward_loop/reward_manager/limited.py:149-158 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/limited.py"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b5ba53cd278a9e2a6cdaa32f6b72cec15550559f9c555e18e49358b2acd5531"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9\u201310 lines \u00D7 2): verl/models/transformers/glm4v.py:77-86 | verl/models/transformers/qwen2_vl.py:79-87 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":77}}}],"partialFingerprints":{"codehealthFindingId/v1":"75cfad747f0647dcbeac0f8b26aad9668b4b77b9f73e63d34480ccc7e5f74e1c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8\u201310 lines \u00D7 2): verl/utils/vllm/vllm_fp4_utils.py:303-312 | verl/utils/vllm/vllm_fp4_utils.py:429-436 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/vllm/vllm_fp4_utils.py:303\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":303}}}],"partialFingerprints":{"codehealthFindingId/v1":"40b8e61b2ddf29c3a3098f583e4a1cab800f76f4f334804179137c8aa7ae59fb"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): verl/utils/vllm/vllm_fp8_utils.py:167-176 | verl/utils/vllm/vllm_fp8_utils.py:224-233 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/vllm/vllm_fp8_utils.py:167\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp8_utils.py"},"region":{"startLine":167}}}],"partialFingerprints":{"codehealthFindingId/v1":"36e8f259bb612f5f1cb3510a7d0d8b8e54b66196cc4f9fd7bca6c55844ee2d07"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7\u20139 lines \u00D7 6): verl/utils/kernel/kernels.py:288-296 | verl/utils/kernel/kernels.py:891-897 | verl/utils/kernel/kernels.py:1056-1062 | verl/utils/kernel/kernels.py:1178-1184 | verl/utils/kernel/kernels.py:1341-1347 | verl/utils/kernel/kernels.py:1486-1492 \u2014 all 6 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:288\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":288}}}],"partialFingerprints":{"codehealthFindingId/v1":"3965d73de5b68aa5624c93df8a0a243929e6d161b0483bd37b066069af50469d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8\u20139 lines \u00D7 4): verl/models/transformers/apertus.py:109-116 | verl/models/transformers/llama.py:154-161 | verl/models/transformers/llama.py:232-239 | verl/models/transformers/qwen2.py:233-241 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/apertus.py:109\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"677440c1e55d63c69ebe853f417a36174f355fc1e1918ee5bb4b590309c6c7a0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 3): verl/trainer/ppo/core_algos.py:308-316 | verl/trainer/ppo/core_algos.py:565-573 | verl/trainer/ppo/core_algos.py:615-623 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":308}}}],"partialFingerprints":{"codehealthFindingId/v1":"8dcba1e6515d6c3a5ee03e80a64c531ed8f9f78c20d956f271b33908f1c7b906"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 3): verl/utils/kernel/kernels.py:1032-1040 | verl/utils/kernel/kernels.py:1160-1168 | verl/utils/kernel/kernels.py:1447-1455 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1032}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa4687cb664b26ef58d230753603b1db34955104cca4fdb31643de04396d056c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): scripts/chat_template_checker.py:728-736 | verl/utils/tokenizer/continuous_token.py:1166-1174 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":728}}}],"partialFingerprints":{"codehealthFindingId/v1":"91481cdf0e043190195dfca04c421cc26e426fd97c26917623e062ce8cf37447"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): scripts/veomni/moe_merge.py:50-58 | scripts/veomni/moe_split.py:47-55 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/veomni/moe_merge.py"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"c619e0bbc7f21da67b9c9d83031eceb5b2fec40407233e8c76cb20816c20d06b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_rollouter.py:196-204 | verl/experimental/fully_async_policy/fully_async_rollouter.py:251-259 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":196}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d087b1fc85cdcf1326f0286c7444f20c28d889ca58e336ee2f7a356cf4eccbe"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/models/mcore/util.py:77-85 | verl/models/mcore/util.py:277-285 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/models/mcore/util.py:289\u0060 calls \u0060preprocess_for_mindspeed\u0060 and \u0060verl/models/mcore/util.py:89\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":77}}}],"partialFingerprints":{"codehealthFindingId/v1":"6603dca7218789ded049c1188af80bbf8ae1f4d9cf5743aa9b6d865fc7aaee55"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/models/transformers/llama.py:159-167 | verl/models/transformers/qwen2.py:148-156 \u2014 before extracting anything, compare \u0060verl/models/transformers/llama.py\u0060 and \u0060verl/models/transformers/qwen2.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 118 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":159}}}],"partialFingerprints":{"codehealthFindingId/v1":"9aee57c36388c4f000bb784119fe00ab65fb2f943a9a5b3e27dae3de21ae25bc"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/utils/dataset/rl_dataset.py:345-353 | verl/utils/dataset/rl_dataset.py:360-368 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/dataset/rl_dataset.py:345\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/utils/dataset/rl_dataset.py:357\u0060 calls \u0060isinstance\u0060, \u0060fspath\u0060 and \u0060verl/utils/dataset/rl_dataset.py:344\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":345}}}],"partialFingerprints":{"codehealthFindingId/v1":"1d364e7df53d3ea90dc17bbbe8d040d96339c49e93451049622b0f69d09dde0e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7\u20139 lines \u00D7 2): verl/utils/fsdp_utils.py:756-764 | verl/utils/fsdp_utils.py:982-988 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":756}}}],"partialFingerprints":{"codehealthFindingId/v1":"e22283620b6e8eab78eeb3f2d49a8e464f232eb15d015042b44f28bfcdd7c16d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8\u20139 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:505-512 | verl/workers/engine/fsdp/transformer_impl.py:1205-1213 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/workers/engine/fsdp/transformer_impl.py:1204\u0060 calls \u0060offsets\u0060, \u0060to\u0060 and \u0060verl/workers/engine/automodel/transformer_impl.py:504\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":505}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1898a9b49bed17e859d92a0e3e676135206503fd83cec9516eaea5e8629c6b4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/workers/rollout/sglang_rollout/http_server_engine.py:167-175 | verl/workers/rollout/sglang_rollout/http_server_engine.py:185-193 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":167}}}],"partialFingerprints":{"codehealthFindingId/v1":"756ec30f18a9785f09ea09439bf388d5a01203ed44f08c61cd4f7b89e9f514f3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7\u20139 lines \u00D7 2): verl/workers/rollout/sglang_rollout/sglang_pd_replica.py:84-90 | verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:94-102 \u2014 \u0060verl/workers/rollout/sglang_rollout/sglang_pd_replica.py\u0060 and \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 3 separate duplicated blocks between them, totalling at least 35 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:94\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/workers/rollout/sglang_rollout/sglang_pd_replica.py:83\u0060 calls \u0060NotImplementedError\u0060 and \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:94\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_pd_replica.py"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"76f10c426fc01495e0862fe148f6141e6cbfa06b52dad5c1477e7ae35d60ee56"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 10): verl/models/transformers/dense_common.py:113-120 | verl/models/transformers/dense_common.py:180-187 | verl/models/transformers/glm4v.py:484-491 | verl/models/transformers/glm4v.py:522-529 | verl/models/transformers/qwen2_vl.py:505-512 | verl/models/transformers/qwen2_vl.py:543-550 | verl/models/transformers/qwen3_5.py:577-584 | verl/models/transformers/qwen3_5.py:631-638 | verl/models/transformers/qwen3_vl.py:360-367 | verl/models/transformers/qwen3_vl.py:402-409 \u2014 there are 10 copies across 5 file(s) \u2014 more copies than files, so at least one file holds the block twice. Extract it once into a single shared function every call site can reach and call it from all 10 sites; resolving a subset leaves the remainder to drift apart. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/models/transformers/qwen3_vl.py:370\u0060 calls \u0060isinstance\u0060, \u0060full_tensor\u0060, \u0060to\u0060 and \u0060verl/models/transformers/glm4v.py:493\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/dense_common.py"},"region":{"startLine":113}}}],"partialFingerprints":{"codehealthFindingId/v1":"072b48c0f24d18c288fb6e2447cdde764b46e0a51a19057d4ddce29cc29ecec4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3): verl/experimental/fully_async_policy/fully_async_trainer.py:98-105 | verl/experimental/one_step_off_policy/ray_trainer.py:109-116 | verl/trainer/ppo/ray_trainer.py:358-365 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/experimental/one_step_off_policy/ray_trainer.py:120\u0060 calls \u0060_create_dataloader\u0060 and \u0060verl/experimental/fully_async_policy/fully_async_trainer.py:110\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":98}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ec8436f999b5b33765278b480987c7c21b69f30f3cf38e27066e18948dfabde"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3): verl/experimental/fully_async_policy/fully_async_trainer.py:359-366 | verl/trainer/ppo/ray_trainer.py:443-450 | verl/trainer/ppo/v1/trainer_base.py:779-786 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":359}}}],"partialFingerprints":{"codehealthFindingId/v1":"f69144e2a72ea4bed3b2c82df02cabb273e63ce703288ab81b8c779ec0b4ed7b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3): verl/experimental/fully_async_policy/fully_async_trainer.py:955-962 | verl/trainer/ppo/ray_trainer.py:1015-1022 | verl/trainer/ppo/v1/trainer_base.py:981-989 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/experimental/fully_async_policy/fully_async_trainer.py:955\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":955}}}],"partialFingerprints":{"codehealthFindingId/v1":"93c513e340ab57378a7e4f9fc73ecf90b2c94f374de7654bc1d82056a7b75620"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3): verl/models/transformers/glm4v.py:172-179 | verl/models/transformers/qwen2_vl.py:151-158 | verl/models/transformers/qwen3_vl.py:192-199 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":172}}}],"partialFingerprints":{"codehealthFindingId/v1":"a802d6458aa9957ea53456a82a8e13f62df0d811b485a47cee7ce9cda2a68db0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): scripts/chat_template_checker.py:243-250 | scripts/chat_template_checker.py:259-266 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":243}}}],"partialFingerprints":{"codehealthFindingId/v1":"018205c76a35d6d6cf27332a92b90f1f117fc633a462585cd78fe364376f9c84"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/checkpoint_engine/kimi_checkpoint_engine.py:143-150 | verl/checkpoint_engine/kimi_checkpoint_engine.py:157-164 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":143}}}],"partialFingerprints":{"codehealthFindingId/v1":"3552461e09ac0a6eee61cd9f26cabe2800405bf7811465de91b7db51bf44dac7"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:550-557 | verl/trainer/ppo/ray_trainer.py:1608-1617 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/trainer/ppo/ray_trainer.py:1608\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/experimental/separation/ray_trainer.py:560\u0060 calls \u0060_fit_compute_ref_log_prob\u0060 and \u0060verl/trainer/ppo/ray_trainer.py:1618\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":550}}}],"partialFingerprints":{"codehealthFindingId/v1":"0fc42c5923dc716f7dc852074b60f473c5e6a0129cbe132650b8a1a3dcc10a58"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/models/transformers/glm4v.py:193-200 | verl/models/transformers/qwen2_vl.py:172-179 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":193}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ad261e271596a820b8046360e7a1cd8a6769cf2a1b1421a56940be4343cd4b7"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/protocol.py:85-92 | verl/utils/tensordict_utils.py:841-848 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. Note first that the copies are not typed on the same thing: the declarations holding them bind \u0060data\u0060 to \u0060\u0022DataProto\u0022\u0060 in one and \u0060TensorDict\u0060 in another, and the duplicated lines use it. The extracted unit therefore needs a parameter type that fits BOTH \u2014 their common supertype where they have one, or a new abstraction over them where they do not \u2014 and settling that is the step that comes BEFORE the extraction above. Where the two types are deliberately unrelated, the duplication is the price of that separation and the honest resolution is to record the decision rather than to extract."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9ae247d269e5f280e6c81e5a6f4cc5d4e811826738596cb485eed3e6d7d807d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:786-793 | verl/trainer/ppo/v1/trainer_base.py:247-254 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":786}}}],"partialFingerprints":{"codehealthFindingId/v1":"055f251784cd649ad73af36f2aff85753b8a4cd6fb31c3cd1b138b138bc971c6"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:1153-1160 | verl/trainer/ppo/v1/trainer_base.py:1458-1465 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1153}}}],"partialFingerprints":{"codehealthFindingId/v1":"21791057641d4c37c45bb75c3ff2dcf7bb91e57677d2016e21ed1bb59cc43942"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/utils/fsdp_utils.py:752-759 | verl/utils/fsdp_utils.py:770-777 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/fsdp_utils.py:752\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":752}}}],"partialFingerprints":{"codehealthFindingId/v1":"4082cce972c86e2b89ae212d4e5150b9252b14526d0d56fb135325588cd7725c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/utils/kernel/kernels.py:925-932 | verl/utils/kernel/kernels.py:944-957 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":925}}}],"partialFingerprints":{"codehealthFindingId/v1":"5635da29aadf924aaeb1f5327f9f4de19ca798cbb6f7bf3bb16f24b32667cc60"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/utils/kernel/kernels.py:1019-1026 | verl/utils/kernel/kernels.py:1143-1150 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/utils/kernel/kernels.py:1152\u0060 calls \u0060zeros\u0060, \u0060cdiv\u0060, \u0060arange\u0060 and \u0060verl/utils/kernel/kernels.py:1028\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1019}}}],"partialFingerprints":{"codehealthFindingId/v1":"173d17989eed7db64f0c2587caaadf912fbc64156a63eb15265f948bd30829a3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/utils/reward_score/prime_code/testing_util.py:407-414 | verl/utils/reward_score/prime_code/testing_util.py:441-448 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":407}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d6fd52a8583ce8e494e4915eb31b3ac6de124fd102842bcc6b6953924310e4d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/utils/vllm/vllm_fp4_utils.py:311-318 | verl/utils/vllm/vllm_fp8_utils.py:122-129 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":311}}}],"partialFingerprints":{"codehealthFindingId/v1":"12ab4fac62075a132a0dc8b1b2c288055f410583588dbef874bcb8d260248848"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/workers/engine/automodel/utils.py:229-236 | verl/workers/engine/automodel/utils.py:242-249 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/utils.py"},"region":{"startLine":229}}}],"partialFingerprints":{"codehealthFindingId/v1":"2b0b2eaa9d6b52cfc218c522fdca900d725e499ec1610679b00c6661e8f27ea7"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/workers/rollout/schemas.py:391-398 | verl/workers/rollout/schemas.py:610-617 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/schemas.py:391\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":391}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ba2f0a345c04fe260b3f20589dd2d64b48e55ba95b1ca8b702c04d5020049b2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/workers/rollout/sglang_rollout/delta_loader.py:92-99 | verl/workers/rollout/sglang_rollout/delta_loader.py:109-116 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/delta_loader.py"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b53ace75a1ac591353e2287aeab4cfd67810005f8f8ded4afb07c0a146b8841"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6\u20138 lines \u00D7 2): verl/workers/rollout/sglang_rollout/sglang_pd_replica.py:149-154 | verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:157-164 \u2014 \u0060verl/workers/rollout/sglang_rollout/sglang_pd_replica.py\u0060 and \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 3 separate duplicated blocks between them, totalling at least 35 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/vllm_rollout/vllm_pd_replica.py:157\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_pd_replica.py"},"region":{"startLine":149}}}],"partialFingerprints":{"codehealthFindingId/v1":"fac584e4725354e8ff901e10492fd883b12f6d6a1aca676c2b2b170637ed64b2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 5): verl/models/transformers/apertus.py:110-116 | verl/models/transformers/llama.py:155-161 | verl/models/transformers/llama.py:233-239 | verl/models/transformers/qwen2.py:143-150 | verl/models/transformers/qwen2.py:234-241 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/models/transformers/apertus.py:110\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"eb864e120b82670a6b4f95e3fb0516994d21b576995bf70df0885021a034b279"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 5): verl/utils/kernel/kernels.py:862-868 | verl/utils/kernel/kernels.py:1034-1040 | verl/utils/kernel/kernels.py:1162-1168 | verl/utils/kernel/kernels.py:1300-1306 | verl/utils/kernel/kernels.py:1449-1455 \u2014 all 5 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:862\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":862}}}],"partialFingerprints":{"codehealthFindingId/v1":"b67bcda5a9ab27033f4bc1cf4af2fdf8020a2e4b8417ec82bc80a28e95bfdfee"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 4): verl/utils/fsdp_utils.py:233-239 | verl/utils/fsdp_utils.py:245-251 | verl/workers/engine/automodel/utils.py:230-236 | verl/workers/engine/automodel/utils.py:243-249 \u2014 there are 4 copies across 2 file(s) \u2014 more copies than files, so at least one file holds the block twice. Extract it once into a single shared function every call site can reach and call it from all 4 sites; resolving a subset leaves the remainder to drift apart. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":233}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8b27faf55d6eea61c987bfc1a735b43b0b7041abcf338e5c0ece2a22969c84f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 3): scripts/chat_template_checker.py:727-733 | verl/utils/tokenizer/continuous_token.py:1165-1171 | verl/utils/tokenizer/continuous_token.py:1178-1184 \u2014 there are 3 copies across 2 file(s) \u2014 more copies than files, so at least one file holds the block twice. Extract it once into a single shared function every call site can reach and call it from all 3 sites; resolving a subset leaves the remainder to drift apart. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/utils/tokenizer/continuous_token.py:1186\u0060 calls \u0060get\u0060 and \u0060scripts/chat_template_checker.py:734\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":727}}}],"partialFingerprints":{"codehealthFindingId/v1":"bde4f4200ef205b56188f59548048779fe856c183050c6e01d0838e58a2ddfbf"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/checkpoint_engine/nccl_checkpoint_engine.py:258-264 | verl/checkpoint_engine/nixl_checkpoint_engine.py:95-101 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":258}}}],"partialFingerprints":{"codehealthFindingId/v1":"5012b616ae8fc3304e21a4e218a5e8c5ead05eb4c394118adc03753b7b2c62eb"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/experimental/fully_async_policy/detach_utils.py:258-264 | verl/trainer/ppo/v1/utils.py:93-99 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/detach_utils.py"},"region":{"startLine":258}}}],"partialFingerprints":{"codehealthFindingId/v1":"51567a568dcf338e79ff77a0588a29122e1fb296e9a1b465e8c0f3222ffc37ce"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_trainer.py:475-481 | verl/experimental/one_step_off_policy/ray_trainer.py:152-158 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"e04929cdf3f77121c8f9c38572900d4d09e21743131f63b27e83ce987cbbb38c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:185-192 | verl/trainer/ppo/ray_trainer.py:839-845 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":185}}}],"partialFingerprints":{"codehealthFindingId/v1":"f85b3c25aff8193f931d61b7d70db1fc31fccc442b774ea8f78466f18e12ec8d"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/experimental/separation/ray_trainer.py:740-746 | verl/trainer/ppo/ray_trainer.py:1783-1789 \u2014 before extracting anything, compare \u0060verl/experimental/separation/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 13 separate duplicated blocks between them, totalling at least 230 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":740}}}],"partialFingerprints":{"codehealthFindingId/v1":"ec14ddd54fddf71a2de42b187e0d0c1b7555f00a0b4194b3ee3fa2b25d4d05b3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/models/transformers/glm4v.py:385-391 | verl/models/transformers/qwen2_vl.py:393-399 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":385}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff6b06295e729346b503d2d9326efb8c2dca692ccf62b74ed506380ac22290ff"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/utils/dataset/multiturn_sft_dataset.py:281-287 | verl/utils/dataset/rl_dataset.py:375-381 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/multiturn_sft_dataset.py"},"region":{"startLine":281}}}],"partialFingerprints":{"codehealthFindingId/v1":"e855615790d48d956dfa9dfad2f4874f8dc156777ec2363249c4db246f70aa89"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/utils/reward_score/prime_code/testing_util.py:355-361 | verl/utils/reward_score/prime_code/testing_util.py:553-559 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/reward_score/prime_code/testing_util.py:355\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":355}}}],"partialFingerprints":{"codehealthFindingId/v1":"a2015e2b7fb57b74f11827ea705a3fd230c4190c8ded4aa5095e1227148bde3b"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/utils/torch_functional.py:639-645 | verl/utils/torch_functional.py:667-673 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/torch_functional.py"},"region":{"startLine":639}}}],"partialFingerprints":{"codehealthFindingId/v1":"0b3df0dd03225f86217a8027b75e11e198e6fe497778ecfc795f1359e00958ed"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 3): verl/models/transformers/glm4v.py:294-299 | verl/models/transformers/llama.py:61-70 | verl/models/transformers/qwen2_vl.py:278-283 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f2a7a3b81c67697d11e7be9775c60317e2781824dda809ea5bc6bc68a752709"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 3): verl/models/transformers/llama.py:100-106 | verl/models/transformers/qwen2.py:83-88 | verl/models/transformers/qwen2.py:195-201 \u2014 before extracting anything, compare \u0060verl/models/transformers/llama.py\u0060 and \u0060verl/models/transformers/qwen2.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 118 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":100}}}],"partialFingerprints":{"codehealthFindingId/v1":"64f6fe8b81c2b5b56b418d1b4164215290b7474491f5cd58997b4718efb6ffd1"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 3): verl/utils/reward_score/prime_code/testing_util.py:352-357 | verl/utils/reward_score/prime_code/testing_util.py:424-429 | verl/utils/reward_score/prime_code/testing_util.py:550-555 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/reward_score/prime_code/testing_util.py:352\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":352}}}],"partialFingerprints":{"codehealthFindingId/v1":"5efda031ccdb7ffc25cf4d864949d8f1f09ce357460ca9f9a4f24de6356b1e83"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/experimental/one_step_off_policy/ray_trainer.py:225-230 | verl/trainer/ppo/ray_trainer.py:1482-1489 \u2014 before extracting anything, compare \u0060verl/experimental/one_step_off_policy/ray_trainer.py\u0060 and \u0060verl/trainer/ppo/ray_trainer.py\u0060 as WHOLE FILES: this scan already matched 5 separate duplicated blocks between them, totalling at least 55 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/ray_trainer.py"},"region":{"startLine":225}}}],"partialFingerprints":{"codehealthFindingId/v1":"1166ac62ccdbdc131251b17727d48ce3f82bebd337d13e41343f8b5f9b078854"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/models/transformers/qwen2_vl.py:143-148 | verl/models/transformers/qwen3_vl.py:184-189 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen2_vl.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 10 separate duplicated blocks between them, totalling at least 123 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":143}}}],"partialFingerprints":{"codehealthFindingId/v1":"4dba7fc7bd8eb63f8943e25471efd9374165510253d8a990c9b8f057f83adaf0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/fsdp_utils.py:796-801 | verl/utils/fsdp_utils.py:802-807 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fsdp_utils.py"},"region":{"startLine":796}}}],"partialFingerprints":{"codehealthFindingId/v1":"31a4e2e071b6a1ec0931ee60041a8a380bf65cd91761f01e145d1f0bf8e66f66"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/kernel/kernels.py:318-323 | verl/utils/kernel/kernels.py:402-410 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:402\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":318}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f3f8a1cfda8f1453e0d97ee257cf2ea4500588c7f32c98aaffb36c39e690bc5"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/kernel/kernels.py:436-441 | verl/utils/kernel/kernels.py:558-563 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/kernel/kernels.py:436\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":436}}}],"partialFingerprints":{"codehealthFindingId/v1":"4bd3050dc5f829175b9b439f22e2e4cf87d9c899f0f921899d229e491bc71951"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/kernel/kernels.py:577-582 | verl/utils/kernel/kernels.py:1532-1537 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":577}}}],"partialFingerprints":{"codehealthFindingId/v1":"d03b24b5a9e55b514c8165406aa09d582580086f0c67a627c0afb6f71b1f47d0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/qat/linear.py:283-288 | verl/utils/qat/linear.py:293-298 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/linear.py"},"region":{"startLine":283}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d83d1617a88762dc0a3fa818e98a3473e52fc7d164b2924d7966dec52283150"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/utils/reward_score/prime_math/__init__.py:350-355 | verl/utils/reward_score/prime_math/__init__.py:377-382 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"26ef722261fd11d49cbfa68bc290744c791d06a71cf62b97a257352f03f1828f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/workers/engine/fsdp/transformer_impl.py:1126-1131 | verl/workers/engine/veomni/transformer_impl.py:714-719 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1126}}}],"partialFingerprints":{"codehealthFindingId/v1":"2d7dc849978310311b4b800404957125c7b843715b8004eb2aa9a4bd11d42805"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/workers/engine/megatron/delta_export.py:428-433 | verl/workers/engine/veomni/utils.py:295-300 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/delta_export.py"},"region":{"startLine":428}}}],"partialFingerprints":{"codehealthFindingId/v1":"2b695bb2542bdf98281ef485d918a1ed6e8191538d718917dcf0711322180b62"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 5): verl/utils/kernel/kernels.py:911-916 | verl/utils/kernel/kernels.py:1073-1078 | verl/utils/kernel/kernels.py:1194-1199 | verl/utils/kernel/kernels.py:1360-1365 | verl/utils/kernel/kernels.py:1500-1504 \u2014 all 5 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/utils/kernel/kernels.py:1498\u0060 calls \u0060dot\u0060 and \u0060verl/utils/kernel/kernels.py:1070\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":911}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9c42d389f6fd6c7af18411c1323753b5e60d21f2c4b33e973f3b4c3d065f8ff"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3): verl/utils/vllm/vllm_fp4_utils.py:307-312 | verl/utils/vllm/vllm_fp4_utils.py:432-436 | verl/utils/vllm/vllm_fp8_utils.py:118-123 \u2014 there are 3 copies across 2 file(s) \u2014 more copies than files, so at least one file holds the block twice. Extract it once into a single shared function every call site can reach and call it from all 3 sites; resolving a subset leaves the remainder to drift apart. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/utils/vllm/vllm_fp4_utils.py:307\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":307}}}],"partialFingerprints":{"codehealthFindingId/v1":"170549ebec343b00249cb65f7c04c93ee89674cab93c3a5c4df0f1db51891fa1"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3): verl/utils/vllm/vllm_fp4_utils.py:434-438 | verl/utils/vllm/vllm_fp4_utils.py:452-456 | verl/utils/vllm/vllm_fp4_utils.py:503-507 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"d994310e52358f3ac13ba671c97d04afdab3ea9db1104760666f24fbc40e4dee"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3): verl/workers/engine/automodel/transformer_impl.py:491-495 | verl/workers/engine/fsdp/transformer_impl.py:1185-1189 | verl/workers/engine/megatron/transformer_impl.py:1305-1309 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/workers/engine/fsdp/transformer_impl.py:1183\u0060 calls \u0060getattr\u0060 and \u0060verl/workers/engine/automodel/transformer_impl.py:489\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":491}}}],"partialFingerprints":{"codehealthFindingId/v1":"d38d63972c7cbc675096ef8d5233536c0b3caee9f6fd1bf9906379817c166960"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (3\u20135 lines \u00D7 4): verl/workers/engine/automodel/transformer_impl.py:665-669 | verl/workers/engine/fsdp/transformer_impl.py:1515-1519 | verl/workers/engine/fsdp/transformer_impl.py:1654-1658 | verl/workers/engine/torchtitan/transformer_impl.py:896-898 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/workers/engine/fsdp/transformer_impl.py:1513\u0060 calls \u0060calculate_sum_pi_squared_from_logits\u0060 and \u0060verl/workers/engine/automodel/transformer_impl.py:663\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":665}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc6372c76724e77e34e9d8de6d691c01c9b38350cede5b30b62f699914088b8f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (2\u20135 lines \u00D7 3): verl/models/transformers/glm4v.py:300-306 | verl/models/transformers/llama.py:71-72 | verl/models/transformers/qwen2_vl.py:284-288 \u2014 before extracting anything, compare \u0060verl/models/transformers/glm4v.py\u0060 and \u0060verl/models/transformers/qwen2_vl.py\u0060 as WHOLE FILES: this scan already matched 14 separate duplicated blocks between them, totalling at least 176 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":300}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b4b7e441edc930fc0bd8cfeb993d40734078fe567735fa2b552905acd57c9f3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/models/transformers/kimi_vl.py:130-134 | verl/models/transformers/monkey_patch.py:127-133 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/kimi_vl.py"},"region":{"startLine":130}}}],"partialFingerprints":{"codehealthFindingId/v1":"e674095db569fcc455a918730c6dfc419a2c255184144564aed7ed537f4dbc21"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/trainer/ppo/v1/trainer_base.py:1716-1720 | verl/trainer/ppo/v1/trainer_base.py:1738-1742 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/trainer/ppo/v1/trainer_base.py:1716\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1716}}}],"partialFingerprints":{"codehealthFindingId/v1":"eefb1defe0342612410386b01c8b192955d3d5db8d3b1874b2834e7fb0a47449"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/utils/kernel/kernels.py:384-388 | verl/utils/kernel/kernels.py:470-475 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":384}}}],"partialFingerprints":{"codehealthFindingId/v1":"303ec83a1cd245748da5c277d1f5f26d0bdb5f2bf216a558a6ab0bde60fbb8db"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/utils/kernel/kernels.py:1079-1085 | verl/utils/kernel/kernels.py:1200-1204 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":1079}}}],"partialFingerprints":{"codehealthFindingId/v1":"058fd8a27dffff266a2c3e38c08c30dee7dcca28088eabc3a603b31d5ced4a92"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/utils/profiler/config.py:150-154 | verl/utils/profiler/config.py:254-258 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/utils/profiler/config.py:149\u0060 calls \u0060isinstance\u0060 and \u0060verl/utils/profiler/config.py:253\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/config.py"},"region":{"startLine":150}}}],"partialFingerprints":{"codehealthFindingId/v1":"3cf149d3814a41013b85b395ed15ad3d5bb564fd57095c66bbcd23aa9f93e785"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (4\u20135 lines \u00D7 4): verl/workers/engine/automodel/transformer_impl.py:674-678 | verl/workers/engine/fsdp/transformer_impl.py:1552-1558 | verl/workers/engine/fsdp/transformer_impl.py:1659-1663 | verl/workers/engine/torchtitan/transformer_impl.py:901-904 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. Note that the copies do not run to the end of the range shown: their LAST lines are different code, not the same code under different names \u2014 the matched region ends inside that line. Extract the lines above it, and read the last line of each site separately. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just before the matched lines, \u0060verl/workers/engine/fsdp/transformer_impl.py:1551\u0060 calls \u0060nested_tensor_from_jagged\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py:1659\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":674}}}],"partialFingerprints":{"codehealthFindingId/v1":"2624ae8687343d16cde9c04b652da4d651c0f7eb2c868fb6daa423f0bf219c95"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/workers/rollout/schemas.py:354-358 | verl/workers/rollout/schemas.py:691-695 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060verl/workers/rollout/schemas.py:354\u0060 it does not close everything it opens, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":354}}}],"partialFingerprints":{"codehealthFindingId/v1":"3af0f907c815e40a46371434b25a066b2ad46e1326fbbce72e32759d1d467d0f"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): scripts/legacy_model_merger.py:88-92 | verl/model_merger/base_model_merger.py:133-137 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"a4ccc86b67fbec39d99c8657d1797df0f38aa3b74c276583502381665daa4763"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): scripts/legacy_model_merger.py:268-272 | verl/model_merger/fsdp_model_merger.py:108-112 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":268}}}],"partialFingerprints":{"codehealthFindingId/v1":"26594ab622f4075a4361c90b7a2f30164982060b820d86b268bb425e545e8dc7"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): scripts/legacy_model_merger.py:311-319 | verl/model_merger/fsdp_model_merger.py:157-165 \u2014 before extracting anything, compare \u0060scripts/legacy_model_merger.py\u0060 and \u0060verl/model_merger/fsdp_model_merger.py\u0060 as WHOLE FILES: this scan already matched 7 separate duplicated blocks between them, totalling at least 144 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. The two sit in different directories, so one cannot simply be deleted in favour of the other while both are reached separately: hoist the shared part into a location both already depend on and have each file call it, and retire whichever file turns out to have no caller of its own left. Extracting one helper per block leaves the fork in place. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it. Note first that the copies are not typed on the same thing: \u0060DTensor\u0060 names \u0060torch.distributed._tensor\u0060 in one and \u0060torch.distributed.tensor\u0060 in another \u2014 different types that share a simple name, which is why the text matched. A single extracted unit cannot be given a parameter type that fits both, so unifying those types (or introducing a shared abstraction over them) is the step that has to come BEFORE the extraction above; if they are deliberately separate, the duplication is the price of that separation and the honest resolution is to record the decision rather than to extract."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":311}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1213f3c9cb61d622c6341f94fe153c7ab302962221a89165c4f597204097511"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/experimental/fully_async_policy/fully_async_rollouter.py:811-817 | verl/experimental/one_step_off_policy/ray_trainer.py:198-204 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":811}}}],"partialFingerprints":{"codehealthFindingId/v1":"960c43a6e41a1625a3d9c978926c9a58ef25bb6bb3aab023b0989a5cadf6bcf6"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/experimental/reward_loop/reward_manager/gdpo.py:28-33 | verl/experimental/reward_loop/reward_manager/naive.py:28-32 \u2014 before extracting anything, compare \u0060verl/experimental/reward_loop/reward_manager/gdpo.py\u0060 and \u0060verl/experimental/reward_loop/reward_manager/naive.py\u0060 as WHOLE FILES: this scan already matched 4 separate duplicated blocks between them, totalling at least 77 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/gdpo.py"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d826909406091d96eb68d5256f6d388b27bca4ca95b1650c37702d9dd136994"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 3): verl/experimental/reward_loop/router/naive_router.py:36-49 | verl/workers/rollout/sglang_rollout/http_server_engine.py:95-108 | verl/workers/rollout/trtllm_rollout/trtllm_rollout.py:109-122 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":36}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9be1d804bef10f57f321186ddaa9b0eb1f2a2e2029f24fe9de2c72ea23cb09a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2): verl/models/mcore/model_forward_fused.py:159-167 | verl/models/mcore/mtp_patch.py:71-79 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward_fused.py"},"region":{"startLine":159}}}],"partialFingerprints":{"codehealthFindingId/v1":"e28723bae9ab46dd5057fde48ff81b9939273cacbc370b6a09b2a63eca110f6a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/models/transformers/qwen3_5.py:518-525 | verl/models/transformers/qwen3_vl.py:317-324 \u2014 before extracting anything, compare \u0060verl/models/transformers/qwen3_5.py\u0060 and \u0060verl/models/transformers/qwen3_vl.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 124 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen3_5.py"},"region":{"startLine":518}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed69979e9ec1d0fc5215802160d6e021b1e89efd3621f433bb1b19f7a3c65ca0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:508-512 | verl/trainer/ppo/v1/trainer_base.py:1292-1296 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":508}}}],"partialFingerprints":{"codehealthFindingId/v1":"fab6acdb16c18dabb5c49866b9c31a5bdb8bf30b9bf59186f4af77910b54c038"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): verl/trainer/sft_trainer.py:152-157 | verl/trainer/sft_trainer_ray.py:101-106 \u2014 before extracting anything, compare \u0060verl/trainer/sft_trainer.py\u0060 and \u0060verl/trainer/sft_trainer_ray.py\u0060 as WHOLE FILES: this scan already matched 8 separate duplicated blocks between them, totalling at least 131 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5a395cc373addf52e49678f6f51b7959c35ca6f409f8951eb647b9d9408b7bc"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 3): verl/workers/engine/fsdp/transformer_impl.py:968-979 | verl/workers/engine/megatron/transformer_impl.py:1066-1074 | verl/workers/engine/torchtitan/transformer_impl.py:611-616 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere all 3 call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made 3 times. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":968}}}],"partialFingerprints":{"codehealthFindingId/v1":"679cbbddf8b76c505aba1d8d19e4cb8dabd8dc0704586e83416e59505f12d219"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 4): verl/workers/engine/fsdp/transformer_impl.py:1113-1117 | verl/workers/engine/fsdp/transformer_impl.py:1139-1143 | verl/workers/engine/veomni/transformer_impl.py:701-705 | verl/workers/engine/veomni/transformer_impl.py:727-733 \u2014 there are 4 copies across 2 file(s) \u2014 more copies than files, so at least one file holds the block twice. Extract it once into a single shared function every call site can reach and call it from all 4 sites; resolving a subset leaves the remainder to drift apart."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1113}}}],"partialFingerprints":{"codehealthFindingId/v1":"e293b15d1fb84511c17c3cf518d92e638a04e2f580baa580af54bd516df66086"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/workers/engine/fsdp/transformer_impl.py:1146-1150 | verl/workers/engine/veomni/transformer_impl.py:736-740 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1146}}}],"partialFingerprints":{"codehealthFindingId/v1":"74ada1614c64710659d4b092091fa7f67d6236968aec7f852fce71337ccf0fd4"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/models/transformers/apertus.py:61-65 | verl/models/transformers/llama.py:187-191 \u2014 before extracting anything, compare \u0060verl/models/transformers/apertus.py\u0060 and \u0060verl/models/transformers/llama.py\u0060 as WHOLE FILES: this scan already matched 6 separate duplicated blocks between them, totalling at least 94 lines, which is the signature of one file having been copied from the other rather than of a helper waiting to be extracted. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/models/transformers/apertus.py:67\u0060 calls \u0060q_norm\u0060, \u0060k_norm\u0060 and \u0060verl/models/transformers/llama.py:194\u0060 does not \u2014 after which the two agree again for 3 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"68d26919f12b665ff909260196e7f3700c630a7a0cbed8ed24a1a4b0fc31e060"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3): verl/models/transformers/qwen2_vl.py:388-392 | verl/models/transformers/qwen3_5.py:494-498 | verl/models/transformers/qwen3_vl.py:278-282 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from all 3 call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":388}}}],"partialFingerprints":{"codehealthFindingId/v1":"723ea3b273337dde5a3567494ae08864175a64a0866a81c86b87a23763059f6c"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2): verl/trainer/ppo/core_algos.py:976-982 | verl/trainer/ppo/core_algos.py:1102-1108 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/core_algos.py"},"region":{"startLine":976}}}],"partialFingerprints":{"codehealthFindingId/v1":"bce90aa72a803413530d9a077d1afc7d663aef7ae6d223bd0993b5d3469f9683"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2): verl/trainer/ppo/ray_trainer.py:1132-1139 | verl/trainer/ppo/v1/trainer_base.py:1420-1427 \u2014 the copies span different directories, so extracting a shared function means choosing where it lives: put it somewhere both call sites can already reach \u2014 a location they all depend on today, or a new shared one if there is none \u2014 and call it from each site; until then, every change has to be made twice."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1132}}}],"partialFingerprints":{"codehealthFindingId/v1":"097f4e2e583440d302bc42464f2e65481dd870ac57185eea43f7b62919715a84"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3): verl/utils/skip/config.py:30-34 | verl/utils/skip/config.py:47-51 | verl/utils/skip/config.py:64-68 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/skip/config.py"},"region":{"startLine":30}}}],"partialFingerprints":{"codehealthFindingId/v1":"e1a3592bd692b574137d728c7cbecde48ddeb9ca55284995441df8f1a83d8f0e"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): verl/workers/engine/automodel/transformer_impl.py:476-480 | verl/workers/engine/fsdp/transformer_impl.py:1168-1172 \u2014 \u0060verl/workers/engine/automodel/transformer_impl.py\u0060 and \u0060verl/workers/engine/fsdp/transformer_impl.py\u0060 are one unit implemented once per sibling directory, so they are most likely parallel implementations of one contract rather than a copy of each other \u2014 this scan matched 10 separate duplicated blocks between them, totalling at least 98 lines. If both are selected at run time, neither can be retired in favour of the other, and the lines that DIFFER between them are the reason both exist. The move that pays here is to hoist the identical part into a shared location the whole family can reach and give what differs a parameter or a seam, so a change lands once instead of once per sibling; extracting one helper per block leaves every sibling to drift on its own. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060verl/workers/engine/fsdp/transformer_impl.py:1173\u0060 calls \u0060_is_scalar_unit_temperature\u0060 and \u0060verl/workers/engine/automodel/transformer_impl.py:481\u0060 does not \u2014 after which the two agree again for 4 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/transformer_impl.py"},"region":{"startLine":476}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ff52c1b55ffa69015076a7f79003def3de28f35900b5f80d3d5e719724daee0"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 4): examples/data_preprocess/gsm8k.py:28-32 | examples/data_preprocess/gsm8k_multiturn_sft.py:28-32 | examples/data_preprocess/gsm8k_multiturn_w_tool.py:30-34 | examples/data_preprocess/gsm8k_tool_agent_loop.py:30-34 \u2014 before extracting anything, compare \u0060examples/data_preprocess/gsm8k.py\u0060 and \u0060examples/data_preprocess/gsm8k_multiturn_sft.py\u0060 as WHOLE FILES: 83% of the shorter file\u0027s lines also appear in the other, so this reads as one file having been copied from the other rather than as a helper waiting to be extracted. The 1 duplicated block(s) this scan matched between them are fragments of that copy, not the extent of it \u2014 treat the file pair as the unit. If that is what happened, the fix is to keep one copy and have the other call it (or delete it), which resolves this row and its siblings together \u2014 extracting one helper per block leaves the fork in place. The \u0060return\u0060 at the foot of the matched lines is the enclosing body\u0027s own terminal exit, not an early one: it moves with them unchanged, and each site calls the extracted unit from the position that \u0060return\u0060 occupied \u2014 no decision has to be handed back and re-acted on. \u2605 These copies have DRIFTED, and that is worth reading before extracting anything: just after the matched lines, \u0060examples/data_preprocess/gsm8k.py:37\u0060 calls \u0060add_argument\u0060 and \u0060examples/data_preprocess/gsm8k_multiturn_sft.py:37\u0060 does not \u2014 after which the two agree again for 2 more lines. One of those two behaviours is the intended one and the other is what a copy-paste left behind, so decide which BEFORE unifying them: extracting the shared part will silently settle it, and if the copy that skips the call is the wrong one, that bug is already live."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"examples/data_preprocess/gsm8k.py"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"781e8f3bd7a95204de695a8bd3f77a41071d3b46a920f4d4454334b733ccd7d5"}},{"ruleId":"D6","level":"warning","message":{"text":"Low cohesion: FSDPEngine (LCOM4 6): FSDPEngine\u0027s methods fall into 6 groups that share no field and call none of each other, against a bar of more than 3 for this run (LCOM4, configurable \u2014 your repository\u0027s bar is the one quoted here). Each group is a set of methods reachable from one another through shared fields or direct calls, so 6 groups means the type has that many internally-connected clusters with nothing tying them together. Types whose shape makes a high count expected \u2014 and which would otherwise dominate this list \u2014 are excluded before this row is raised, so this is a genuine split candidate rather than a metric reading. It is still a shape, not a defect: confirm the groups match responsibilities you can name before splitting."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"e41206c6ce09cf37a0fb369ff5668ba3d5ca97ad732936126043d254788bb14f"}},{"ruleId":"D6","level":"warning","message":{"text":"Low cohesion: TorchTitanEngine (LCOM4 5): TorchTitanEngine\u0027s methods fall into 5 groups that share no field and call none of each other, against a bar of more than 3 for this run (LCOM4, configurable \u2014 your repository\u0027s bar is the one quoted here). Each group is a set of methods reachable from one another through shared fields or direct calls, so 5 groups means the type has that many internally-connected clusters with nothing tying them together. Types whose shape makes a high count expected \u2014 and which would otherwise dominate this list \u2014 are excluded before this row is raised, so this is a genuine split candidate rather than a metric reading. It is still a shape, not a defect: confirm the groups match responsibilities you can name before splitting."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":105}}}],"partialFingerprints":{"codehealthFindingId/v1":"77fcedfa8b5ebadd99db582dd72dff161c8e821a71f87f5b4144ac6ff63dda32"}},{"ruleId":"D6","level":"warning","message":{"text":"Low cohesion: FullyAsyncRollouter (LCOM4 4): FullyAsyncRollouter\u0027s methods fall into 4 groups that share no field and call none of each other, against a bar of more than 3 for this run (LCOM4, configurable \u2014 your repository\u0027s bar is the one quoted here). Each group is a set of methods reachable from one another through shared fields or direct calls, so 4 groups means the type has that many internally-connected clusters with nothing tying them together. Types whose shape makes a high count expected \u2014 and which would otherwise dominate this list \u2014 are excluded before this row is raised, so this is a genuine split candidate rather than a metric reading. It is still a shape, not a defect: confirm the groups match responsibilities you can name before splitting."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":330}}}],"partialFingerprints":{"codehealthFindingId/v1":"899c89df05ef675fbb9c4d4b1147872e490e0d4a3790e553765e3bed631f1acc"}},{"ruleId":"D6","level":"warning","message":{"text":"Low cohesion: DetachActorWorker (LCOM4 4): DetachActorWorker\u0027s methods fall into 4 groups that share no field and call none of each other, against a bar of more than 3 for this run (LCOM4, configurable \u2014 your repository\u0027s bar is the one quoted here). Each group is a set of methods reachable from one another through shared fields or direct calls, so 4 groups means the type has that many internally-connected clusters with nothing tying them together. Types whose shape makes a high count expected \u2014 and which would otherwise dominate this list \u2014 are excluded before this row is raised, so this is a genuine split candidate rather than a metric reading. It is still a shape, not a defect: confirm the groups match responsibilities you can name before splitting."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/engine_workers.py"},"region":{"startLine":36}}}],"partialFingerprints":{"codehealthFindingId/v1":"ab897a2403bc32f92d35d7620902ccd7e257e95c14512821b7c4027aa316a253"}},{"ruleId":"D11","level":"error","message":{"text":"Test declared unreliable: config_dir: This test is disabled or skipped with a reason naming unreliability \u2014 the repository\u0027s own words: \u0022This test is flaky when we actively load model config\u0022. A test that is skipped for flakiness is neither passing nor protecting the code it covers; either stabilise it or delete it, but do not leave it disabled indefinitely. (Found by reading the repository\u0027s own test source \u2014 the suite itself was not re-run, since the reliability runner does not support this ecosystem.)"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/workers/config/test_critic_config_on_cpu.py"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"f593ef9377c1adae93a168a3835ea28c555dade772ceec6d8c55211017340816"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/vllm_rollout/vllm_async_server.py: verl/workers/rollout/vllm_rollout/vllm_async_server.py changed 24 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 41 in vLLMHttpServer.generate at line 572. 12 of those changes were fix/bug commits, and the other 12 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/vllm_rollout/vllm_async_server.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":572}}}],"partialFingerprints":{"codehealthFindingId/v1":"6651b832f63980bec93074aa0d089122ebc915596c0c586309141799d76ff1d3"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/engine/megatron/transformer_impl.py: verl/workers/engine/megatron/transformer_impl.py changed 26 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 37 in MegatronEngine.forward_backward_batch at line 783. 11 of those changes were fix/bug commits, and the other 15 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/engine/megatron/transformer_impl.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":783}}}],"partialFingerprints":{"codehealthFindingId/v1":"fdb5f4b71496e759a57165e833e732245be34046b2cfe8fef1513f5f6e9e300c"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/engine/fsdp/transformer_impl.py: verl/workers/engine/fsdp/transformer_impl.py changed 12 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 49 in FSDPEngineWithLMHead.prepare_model_outputs at line 1344. 6 of those changes were fix/bug commits, and the other 6 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/engine/fsdp/transformer_impl.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1344}}}],"partialFingerprints":{"codehealthFindingId/v1":"17ac83ac3f34b47da789fcea506f43199c04c26b506552e343d985a448f4b86a"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/sglang_rollout/async_sglang_server.py: verl/workers/rollout/sglang_rollout/async_sglang_server.py changed 13 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 33 in SGLangHttpServer.launch_server at line 267. 9 of those changes were fix/bug commits, so the churn is repair rather than feature work. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/sglang_rollout/async_sglang_server.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":267}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ca4279be47c708ba1fc2f8d94514735b6d4e4f1c5b0912ec582a23edf1026d1"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/models/mcore/util.py: verl/models/mcore/util.py changed 12 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 35 in util.preprocess_thd_engine at line 236. 5 of those changes were fix/bug commits, and the other 7 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/models/mcore/util.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"62994c88ac1def85cb5ca67178379e3e2e46ff1615a0c1f10e07a5968509b637"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/megatron_utils.py: verl/utils/megatron_utils.py changed 14 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 24 in megatron_utils.make_megatron_module at line 240. 7 of those changes were fix/bug commits, and the other 7 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/megatron_utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":240}}}],"partialFingerprints":{"codehealthFindingId/v1":"c82602c75e678d10eb85014b581cec345315a8baddaf866da6d2fcef140aac63"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/llm_server.py: verl/workers/rollout/llm_server.py changed 12 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 26 in FullyAsyncLLMServerClient.generate at line 226. 7 of those changes were fix/bug commits, so the churn is repair rather than feature work. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/llm_server.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":226}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e584c0097b32b7f52b02266bc73d0c343024f37b324d009f0f4da7b99e1792d"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/vllm_rollout/utils.py: verl/workers/rollout/vllm_rollout/utils.py changed 16 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in vLLMColocateWorkerExtension.update_weights_from_ipc at line 248. 7 of those changes were fix/bug commits, and the other 9 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/vllm_rollout/utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":248}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a611ae835a38d3442eb56b7fc88af492e6f0557d58f2224f61135a063bc92e1"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/models/mcore/model_forward.py: verl/models/mcore/model_forward.py changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 35 in model_forward.gptmodel_forward_model_engine at line 116. 1 of those changes was a fix/bug commit, and the other 6 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/models/mcore/model_forward.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward.py"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"6da3e01a7166a7a9292acf7c47d6c40c1b767a3341c2b33667869c283d8895ee"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/engine_workers.py: verl/workers/engine_workers.py changed 14 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in ActorRolloutRefWorker.init_model at line 575. 8 of those changes were fix/bug commits, so the churn is repair rather than feature work. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/engine_workers.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":575}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a0feccaa4a0f69f0f2b77aca1f2df3637a4cc0195cb5173f8879a44921ed4a4"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/config/rollout.py: verl/workers/config/rollout.py changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 27 in RolloutConfig.__post_init__ at line 316. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/config/rollout.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/rollout.py"},"region":{"startLine":316}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ec660d746539ef66c364d75d2a5142cbec940933d4d2b43ca3585103417dfdb"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/checkpoint/fsdp_checkpoint_manager.py: verl/utils/checkpoint/fsdp_checkpoint_manager.py changed 5 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 36 in FSDPCheckpointManager.save_checkpoint at line 360. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/checkpoint/fsdp_checkpoint_manager.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/fsdp_checkpoint_manager.py"},"region":{"startLine":360}}}],"partialFingerprints":{"codehealthFindingId/v1":"50c33ea97dfbd9e9a61d8928533870824dfae68bb2ce3b8dc3407ced9fc79e8e"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/trainer/ppo/v1/trainer_separate_async.py: verl/trainer/ppo/v1/trainer_separate_async.py changed 9 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in PPOTrainerSeparateAsync.on_step_end at line 340. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/trainer/ppo/v1/trainer_separate_async.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":340}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f07588e43d990aa48204411c00c4f475d901d5420a2e5501e1764c0868c5da7"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/megatron/router_replay_utils.py: verl/utils/megatron/router_replay_utils.py changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in router_replay_utils.set_router_replay_data at line 434. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/megatron/router_replay_utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"78d6b07a901b557225e5ce4a97d1913f32db94fac01cfb8838cdd182feda8c71"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/experimental/agent_loop/tool_agent_loop.py: verl/experimental/agent_loop/tool_agent_loop.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 28 in ToolAgentLoop._handle_processing_tools_state at line 310. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/experimental/agent_loop/tool_agent_loop.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"89358e9d63d7c720e3dd948eee07ed6dc1dec48d7adc7cdd70dd8a105f5cdf96"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/trtllm_rollout/trtllm_async_server.py: verl/workers/rollout/trtllm_rollout/trtllm_async_server.py changed 6 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in TRTLLMHttpServer.generate at line 306. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/trtllm_rollout/trtllm_async_server.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":306}}}],"partialFingerprints":{"codehealthFindingId/v1":"30adc95df2e9f27ed22b9d71c7273fd6fe8d8e357556ace61e75746455f12cd4"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/vllm/utils.py: verl/utils/vllm/utils.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in utils.resolve_weight_name at line 152. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/vllm/utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/utils.py"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f769c6aa31be585e0a814d1f9af5ca841693c0055919034f4f907a848a4a39f"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/trainer/ppo/v1/replay_buffer.py: verl/trainer/ppo/v1/replay_buffer.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 17 in ReplayBuffer._dapo_filtered_keys at line 261. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/trainer/ppo/v1/replay_buffer.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"d2f6fe25d43a9783533c485439bc40139169217961ea533af25d3dd3898df02a"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/rollout/utils.py: verl/workers/rollout/utils.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in utils.extract_response_topk_logprobs at line 141. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":141}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea929e8369d7cd0a7d121f6cb3415b710dac9a060ce59117b4553a901c9a4414"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/config.py: verl/utils/config.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in config._validate_score_centering_config at line 88. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/config.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/config.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"490db3a112f944991b1f4a35cbf66909f5f1e38a1c8609e23743d494a323aa84"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/models/mcore/mtp_patch.py: verl/models/mcore/mtp_patch.py changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 24 in mtp_patch._megatron_gptmodel_postprocess at line 97. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/models/mcore/mtp_patch.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/mtp_patch.py"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"559adf898d1b3dc4587e39edb63a54d6c6b3b9079f509ed05779398daf862b6b"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/utils/vllm/patch.py: verl/utils/vllm/patch.py changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 21 in patch.patch_vllm_moe_model_weight_loader at line 89. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/vllm/patch.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/patch.py"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"e082060e113f27495f6bfcce7cbed5c2d57b8d31847facd100fe232b57905c19"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: verl/workers/utils/losses.py: verl/workers/utils/losses.py changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in losses.ppo_loss at line 57. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/utils/losses.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/utils/losses.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac83fca72f8cd829ba8a42ef1a130658f6a5af06a9773f12f6d98d1b35c19db8"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: scripts/converter_hf_to_mcore.py: scripts/converter_hf_to_mcore.py changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in converter_hf_to_mcore.convert_hf_to_mcore at line 50. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- scripts/converter_hf_to_mcore.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/converter_hf_to_mcore.py"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"4db90bbdbed544349ae28013dbc342f2268b847ac175ccff0c8b1a679aee0776"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: verl/workers/rollout/sglang_rollout/utils.py: verl/workers/rollout/sglang_rollout/utils.py changed 5 times in last 90 days and 5 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 9 (its worst body is utils.get_named_tensor_buckets at line 189), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201C[rollout, sglang] fix: use SGLang\u0027s Triton MoE runner for bf16 rollouts on Blackwell (#8230)\u201D; \u201C[sglang] fix: make DeepSeek-V4 full weight sync work with SGLang \u002B Megatron (#7369)\u201D; \u201C[sglang] fix: lora sglang e2e (#7413)\u201D; \u201C[rollout, sglang] fix: keep SGLang LoRA-free when model.lora.merge=True (#7234)\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/workers/rollout/sglang_rollout/utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/utils.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef736b88a307556362f072a52252b7d8eeb8c6f96e4122702dcc8bb219d4eb1f"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: verl/utils/tokenizer/continuous_token.py: verl/utils/tokenizer/continuous_token.py changed 7 times in last 90 days and 4 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 14 (its worst body is ContinuousTokenBuilder.align_response_metadata at line 365), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201C[rollout] fix: accept resolved media in Continuous Token merges (#8036)\u201D; \u201C[sglang, rollout] fix: forward video features to SGLang (#7802)\u201D; \u201C[rollout] fix: DeepSeek continuous token builder cannot render tool appends (#7630)\u201D; \u201C[rollout] fix: continuous token fuse generation prompt with the final append group (#7628)\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/tokenizer/continuous_token.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/continuous_token.py"},"region":{"startLine":365}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3f768f3b33438b7ed355d385479fad68ad27383da2d44f0f623ea144ffead9a"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: verl/trainer/ppo/padding_utils.py: verl/trainer/ppo/padding_utils.py changed 4 times in last 90 days and 3 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 9 (its worst body is padding_utils.construct_minimal_padding_template at line 73), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201Cfix: automatically align score centering with verified sampler support\u201D; \u201C[trainer] fix: pad teacher fields in minimal padding and support fsdp2 in forward topk loss (#7858)\u201D; \u201C[trainer] fix: make synthetic padding safe for context parallelism (#7593)\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/trainer/ppo/padding_utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/padding_utils.py"},"region":{"startLine":73}}}],"partialFingerprints":{"codehealthFindingId/v1":"c6565d8376dbe248604ab2c526d239673ae27e4f92015bb1e6f1a89871d5f1bd"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: verl/utils/transferqueue_utils.py: verl/utils/transferqueue_utils.py changed 4 times in last 90 days and 3 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 8 (its worst body is transferqueue_utils._shutdown_async_bridge_runtime at line 83), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201C[data] fix: Update TQ version and align config yaml (#8181)\u201D; \u201C[perf] fix: Prevent creating new threads/event loop for each \u0060tqbridge\u0060 call (#7162)\u201D; \u201C[worker] fix: close temporary TransferQueue event loop (#7157)\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/transferqueue_utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"848bff7de41635fc58831078c47d0447236e362373ff1320f074cace53e1e077"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: verl/utils/megatron_peft_utils.py: verl/utils/megatron_peft_utils.py changed 3 times in last 90 days and 3 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 7 (its worst body is megatron_peft_utils.count_adapter_parameters at line 17), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201C[sglang] fix: lora sglang e2e (#7413)\u201D; \u201C[vllm] fix: resolve .base_layer on the vLLM receiver for non-merged LoRA sync (#7327)\u201D; \u201CRevert \u0022[megatron] fix: Qwen3.5 LoRA \u0026 MTP support (with Megatron-Bridge) (#5599)\u0022 (#7173)\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-22..2026-10-20, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-22 09:19:27 -07:00\u0027 --until=\u00272026-10-20 09:19:27 -07:00\u0027 --full-history --no-merges -- verl/utils/megatron_peft_utils.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_peft_utils.py"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"4430f3af545548118d92608853bce9ae700143c2ea28caef43dfb01592bb4d04"}},{"ruleId":"D16","level":"note","message":{"text":"Off-boarding risk: anonymized user #1: If anonymized user #1 becomes unavailable, 2 significant file(s) lose their only recent owner: scripts/chat_template_checker.py, scripts/chat_template_mock_trajectories.py. Pair on, review, or document these before any departure."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"2b3afb7abec17c9c5be747673708b17f586c76108d4e7d310d4f77e421c868c8"}},{"ruleId":"D16","level":"note","message":{"text":"Further sole-owners (lower concentration): 5 other contributor(s) are each the sole owner of a small amount of code below the off-boarding threshold \u2014 folded into the bus-factor score and metrics (8 single-owned of 272 analysed files in total, counted over production source files of roughly 2,400 bytes or more, excluding vendored, generated and example/demo trees and test files identified by path convention, largest first; 272 of the 357 production source files in this repository met that bar). They are anonymized user #2 (2 file(s)), anonymized user #3 (1 file(s)), anonymized user #4 (1 file(s)), anonymized user #5 (1 file(s)), anonymized user #6 (1 file(s)) \u2014 spread or document their files in the same way, at lower priority than the named off-boarding risks above. The files folded here: verl/workers/rollout/sglang_rollout/delta_loader.py, verl/checkpoint_engine/delta_sync/sparse_gather.py, verl/utils/profiler/precision_debugger_profile.py, verl/workers/engine/fsdp/fsdp_turbo_impl.py, verl/model_merger/output_validation.py, verl/utils/vllm/rocm_vllm_moe_expert_map.py."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6eac528f2429e724e1a97ed868f79eefbcf1888dab4af9a9e673429369bb5b2f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: \u0022tp\u0022 is not supported yet due to the above assert \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/legacy_model_merger.py"},"region":{"startLine":301}}}],"partialFingerprints":{"codehealthFindingId/v1":"a16233ca68a4f057a6413a1320badca852bbc9c4e4f616fd1c9c86be278e7721"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: \u0022tp\u0022 is not supported yet due to the above assert \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/fsdp_model_merger.py"},"region":{"startLine":147}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7f090f60da347b7a8271513bdfb49eecd99fc50c1ce72c1f3be0056adecaa9c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(vermouth1992). We may use nested tensor too. But this requires nested over nested \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/test_protocol_v2_on_cpu.py"},"region":{"startLine":161}}}],"partialFingerprints":{"codehealthFindingId/v1":"05700e3b468071cdd56dde34173ac346bb71bd44caaa9857e961815512c47fa2"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: it\u0027s pretty hard to set these environment variables right, please consult \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/checkpoint_engine/test_correctness_on_gpu.py"},"region":{"startLine":105}}}],"partialFingerprints":{"codehealthFindingId/v1":"b6f31a657cb68e670c6ea5381714dfd0084278616757026475a5c7fec5a1e993"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: prompt with video not generate tool call as expected \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/experimental/agent_loop/test_multi_modal.py"},"region":{"startLine":249}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f0a18231dfc83fdad51a24600c193b289ac532944956757af0f9e65ecda4f97"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): add more models for test \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformers_ulysses.py"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"a0d1910a4ca092fc963e7eedcda2440b2c653400b920a9a6f82f6bbb4ce799e1"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): add more models for test \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformer.py"},"region":{"startLine":31}}}],"partialFingerprints":{"codehealthFindingId/v1":"afc1355e13da7e104b3c2167dc58022542962ff4cf89819cb850bdf38f448ab0"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: seems not work, will cause \u0060socketStartConnect: Connect to xxx failed : Software caused connection abort\u0060 \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformers_ulysses.py"},"region":{"startLine":104}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa03ae8c6662cfb7e7639550f581c62b6a56c85b3005984223beeb43ca353dd0"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): we can construct the position_ids_rmpad here \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformers_ulysses.py"},"region":{"startLine":136}}}],"partialFingerprints":{"codehealthFindingId/v1":"2cdd057dbffc8154c9979d953cb37153090849ec402a3233be1e7565ac1cbbad"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): we can construct the position_ids_rmpad here \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformers_ulysses.py"},"region":{"startLine":215}}}],"partialFingerprints":{"codehealthFindingId/v1":"4fa2731cfd187e6b38a91fb4ad4d0b89e3ebf293561e27c1ee1a77cc7c0a78a3"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): we can construct the position_ids_rmpad here \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformer.py"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"cdd6ac2a93dd7cff796ba5c3b1170972a94c2471b343f6725266bee53e977d71"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): we can construct the position_ids_rmpad here \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_transformer.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"f2cb672963c36d52a6014257bf66f1e4e03686697f9f5fe5a9450aa3dc6bd063"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: sft_loss_ is not compatible with ActorWorker until we replace DataProto with torch.jagged TensorDict \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/models/test_engine.py"},"region":{"startLine":220}}}],"partialFingerprints":{"codehealthFindingId/v1":"26b695a1e8daf6c9f787ae5d2cc34a221ba0851ccbf598619f8e8c0e06272b51"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: pass *args and **kwargs is bug prone and not very convincing \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/single_controller/test_worker_group_basics.py"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5c3495f756d9dad15ae6c81b79f3b2fd4b1aa0c15a532b4df1b478feb6a1ce3"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: pass *args and **kwargs is bug prone and not very convincing \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/single_controller/test_nested_worker.py"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"cf00e03376bdb0966bb8f8c3137ca1ba11e8cb6fa1f786e9a6c3d1186bc2aa95"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: pass *args and **kwargs is bug prone and not very convincing \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/single_controller/test_high_level_scheduling_api.py"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"5710aedceda77d0e19bde936384018b468b8fd8ea9f657dda0b79eb9b1faab6c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: this function needs error handling \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/special_e2e/check_results.py"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"d651e2973d4341777f466ba5e2cf794919393af715fae5f9a9c973a8c1016aff"}},{"ruleId":"D17","level":"warning","message":{"text":"FixmeComment: # FIXME: remove these manually included paths \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/utils/test_special_linear_cross_entropy_tp.py"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"f641f091247c67041670bf24e62b98806b6822c81e94ca1fc9af7b83aa737e10"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(zhangchi.usc1992) add consistency check \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":311}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f16b189ba0fd137aa38c0f2953fefd38fb6f9b04f42d39b15552a1d8a78fa0c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we can actually lift this restriction if needed \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":463}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d60e3e8420a09a3a8426df57da0906a49dc6027d6198599dec9d1b523ce5984"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO (zhangchi.usc1992) whether to copy \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/protocol.py"},"region":{"startLine":607}}}],"partialFingerprints":{"codehealthFindingId/v1":"f13fef56bd4437a00d6ac96cd375016beb88b4000541a4a2f26127498c6a4f8d"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): remove padding and use tensordict. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":783}}}],"partialFingerprints":{"codehealthFindingId/v1":"908bd6fc535fda7828abe73493daed14a39f0d7db9a5ca0b00cb064bee558b65"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): remove padding and use tensordict. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":866}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5b7b85d52447328f6993cc835234b31367f4d0ffdcb9f32c921cde8a050f32f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): remove padding and use tensordict. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/teacher_loop/teacher_manager.py"},"region":{"startLine":69}}}],"partialFingerprints":{"codehealthFindingId/v1":"b02ea6df4f6c4ada637b66ca0f8f4b8b979a0cf8f7b6eb2e899c58b5fae63de0"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: check path \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":988}}}],"partialFingerprints":{"codehealthFindingId/v1":"61bebfb46c04a8e67ac23a8e2c89de894559b80565111a190ca309847f8db927"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: check path \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1060}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1bf1cf9dd84ef76681f38009401e5cbdcd84f70507895d67884b57808f04fd1"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Implement dataloader recovery without losing in-flight samples. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_rollouter.py"},"region":{"startLine":660}}}],"partialFingerprints":{"codehealthFindingId/v1":"58beb379d623d390bccaa4f2d9fc9b428817e0bc6e12fe522995f93ca2fd390d"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: unify rollout config with actor_rollout_ref \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_main.py"},"region":{"startLine":234}}}],"partialFingerprints":{"codehealthFindingId/v1":"9c157ba4b9b85c1896f87864286291458e0dbb8762f95b134c3ac1ee239c377a"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: unify rollout config with actor_rollout_ref \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/one_step_off_policy/main_ppo.py"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"f13835aad9e4c50c915b2e9ea7c214c4417fe3f326263945d9752529466308a1"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO change name to: total_step \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/detach_utils.py"},"region":{"startLine":219}}}],"partialFingerprints":{"codehealthFindingId/v1":"21cf04b379cdf7e7ca98ada536b596d014722f4bf42f65b0dcf7ef4d76c85c31"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO (dyy): sglang router is not ready yet. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_model.py"},"region":{"startLine":100}}}],"partialFingerprints":{"codehealthFindingId/v1":"0589f19c81bba5466d1dd21d96376628fba9e5df74828ac0b926b07d0a7420be"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: remove this once TRT-LLM switches to TorchSampler \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":251}}}],"partialFingerprints":{"codehealthFindingId/v1":"24752b916a833b1057aa4bbffba641dd71d0a657ee259343f32643bd8ea5bb85"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we may want to add diff of probs too. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":552}}}],"partialFingerprints":{"codehealthFindingId/v1":"592912dbc08b2a31f8d40eaef6a8e270070c7ebba072ad7d6369c0cf2c52d24c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we may want to add diff of probs too. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1612}}}],"partialFingerprints":{"codehealthFindingId/v1":"0312a96fb1121bea4cfb7dec96d6b2127f5c5ece92706019dd52c25c4fdd6906"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Check separation is needed. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":710}}}],"partialFingerprints":{"codehealthFindingId/v1":"68076e45969f4049ee6a1dfcbf000bfbe29fea3192981ebd87f092eaab89db53"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: implement actual tflpo and theoretical tflpo \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":741}}}],"partialFingerprints":{"codehealthFindingId/v1":"95deb068f15939bf230b0f1b511ac09280aa5f166c4e2f76263dd52f420a1372"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: implement actual tflpo and theoretical tflpo \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1784}}}],"partialFingerprints":{"codehealthFindingId/v1":"566f1cdf8c6e3b71b1f04fbcea8a5f6c4ea377556302d6d9346fd95e6ad89991"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: make a canonical logger that supports various backend \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":762}}}],"partialFingerprints":{"codehealthFindingId/v1":"532402382e8bd5b5c2e1c7d56ec9315b6b2b6fdab9dd7dd26ab6dc68d87f91c7"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: make a canonical logger that supports various backend \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1801}}}],"partialFingerprints":{"codehealthFindingId/v1":"1ec6dfbfaa4dd59ff40a1a5ce999939e078293656d1ab9d1aa4f88d1488e8e09"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Currently, TE can only accept contiguous tensors for MLA \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/patch.py"},"region":{"startLine":432}}}],"partialFingerprints":{"codehealthFindingId/v1":"639562f42640ce9acd54c905e3724399bc31769c25c1bfe5d6391ae8bdaa2126"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Disable sp for ViT, there\u0027s no elegent way to determine whether it\u0027s ViT or not. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d116476043e191f0357dd55d5522195ffb1ee61fdb9d630fd506a2795b9b6a1"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: all_gather position_ids because \u0060prepare_fa2_from_position_ids\u0060 needs it, we can eliminate \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"68d4fd00ab65221c1a288fcea440a6255eae28ccdd2d0cb38d6f24ecc3769aff"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: VLM models only, unify monkey patch to LLM models. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":364}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e6fe99057e03ad460e9d3c93cce783909778c5b182bffd6d897e505bcc6cc8a"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Changes need to be made when transformers are adapted. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/monkey_patch.py"},"region":{"startLine":487}}}],"partialFingerprints":{"codehealthFindingId/v1":"17ca5b8bbc6ac24d7c6320104ba5e01229e828b7ebf51c3a2512a57238412e49"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: These transpose are quite inefficient but Flash Attention requires the layout \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":108}}}],"partialFingerprints":{"codehealthFindingId/v1":"1ffb2cedb936e14dead51710798874d438bc0d6bd324f2aa1b8936d397913f24"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: These transpose are quite inefficient but Flash Attention requires the layout \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/kimi_vl.py"},"region":{"startLine":157}}}],"partialFingerprints":{"codehealthFindingId/v1":"0dc21a4488add413c2bfcb5cedd329a3b0535a36f56b9911b46a205a145a09cb"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: create a class with customizable name \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":1031}}}],"partialFingerprints":{"codehealthFindingId/v1":"4741a9daf9a307d1ebedee4f00fa88a852235e528edf1dc9ed055f5ad62d83f7"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we can actual accumulate metrics for N steps and perform aggregate metrics \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer_ray.py"},"region":{"startLine":342}}}],"partialFingerprints":{"codehealthFindingId/v1":"57c721734ac4e0fc97e9f2d0f50285615c09e6b155ce0ee11143370aed332202"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we can actual accumulate metrics for N steps and perform aggregate metrics \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":397}}}],"partialFingerprints":{"codehealthFindingId/v1":"3acebc115ea3d0aefd8e00eeebcd78ebf06b14b47cddef0484e2ce54606ef8c6"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: add a unified tracking \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/sft_trainer.py"},"region":{"startLine":311}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb454254da4dde0013073172921c9ff58e91cb9d4c20426ce10cf786096c202f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: support each role have individual ray_worker_group_cls, \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ad24a70d83dc166153eb0d31d529a2fb577ac8bfa7c84f342bf0c68d803cd50"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Can we keep special tokens except for padding tokens? \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":667}}}],"partialFingerprints":{"codehealthFindingId/v1":"60f1ec2fe52c4aa7ea24e465a562cc416ebc253cc4001bedd35b1bbc035ad5a8"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: from remote not implemented yet \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1101}}}],"partialFingerprints":{"codehealthFindingId/v1":"48f5281a95a3b4d124acdaffb82c5dca69ef2a5ec89e01c89944a86f677f5b90"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: remove step 1, 2, 4 after we make the whole training tensordict and padding free \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1291}}}],"partialFingerprints":{"codehealthFindingId/v1":"6244fcd4fe3009deafe38c5e5696158a3c5a81bb7900b36ed2570d6d0008d47a"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Make \u0022temperature\u0022 single source of truth from generation. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1330}}}],"partialFingerprints":{"codehealthFindingId/v1":"5d8ae8c1e1f23a134f52257896add7605dcf95ae2620936d9291c14afd49c90b"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Use a more accurate or dynamic scaling factor. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"49e822f0bac5ec976567f939fdad6fcc85b0d453080af4cfcf08f54008abc87f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: make initialization parallel with super().init() \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":158}}}],"partialFingerprints":{"codehealthFindingId/v1":"9cd6f506777c7e091a50ea58676e3e089a3afdf521f43b92f5b9b0af97aef13e"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: maybe let workers do it? \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1506}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ceebb114ad987dba05dd0a2c1b868bffa62ca7b39b93d0a6a7baf7fe8202a95"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: DataProtoFuture support KVBatchMeta \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":1732}}}],"partialFingerprints":{"codehealthFindingId/v1":"0d01d6f8cfeb4310106c6e3dad278033ce805b8b5336a5bc97906d153d08757a"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Pass custom sampler to TransferQueue: \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":60}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d7c9b5687bd1af29caabe268d0f9cc7945195f23f97050de93b0c2f5811b6c2"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: move this file to verl.experimental.agent_loop after V1 is stable \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd8632c777b2b6df7cde13ac1deb44af39397c60b064ff914283576e034bdaf9"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): add trace support \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"89d459a454b62cab257d140fc2c4eeb4c8cd81afd1cccfd8b0f8e997e0c8b3f1"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Support output:list[AgentLoopOutput] \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":168}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1e1fe19b0cc344f3a23431f566c332cb5b1ed6c4d25670666dff87f3bcf1d00"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: uniform response_mask and loss_mask \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":203}}}],"partialFingerprints":{"codehealthFindingId/v1":"e035d1343a8feebb69e7c296861dc89d8bcfe4786749f0fd6f1363e00458aa9c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: move to the top \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":365}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa70adf2d465a674d9b1ca17a228f209ab6e40dbb70cd08e6a5c6d7ad6129223"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: add them back \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/torch_functional.py"},"region":{"startLine":679}}}],"partialFingerprints":{"codehealthFindingId/v1":"43ef9d8d9c9f4e4cdf1797ac4195826a24dd4d4e01f9a614bb6ee4deced7d5d4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(petersh6): can convert back to val directly if we are not accessing .data from the NonTensorStack \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tensordict_utils.py"},"region":{"startLine":71}}}],"partialFingerprints":{"codehealthFindingId/v1":"3aa8d9ad2e41c6925cc55039c32fa4d7887de264a8c503b1412a68e84314ef7b"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we can make this faster \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/model.py"},"region":{"startLine":223}}}],"partialFingerprints":{"codehealthFindingId/v1":"d3263f855d7180d0f8ea174e830020d0408d96a18255003169ad0ac52c4cfde3"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: It\u0027s still unclear how empty layers_pattern (None, [], or \u0022\u0022) should behave \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/model.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"8c8cc8b64ec6d71a5387239a8f3aabfd7d490babaacdaf7540f9ac4aa9e80a92"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # todo(chenyang): check wether we need to sync all ranks before dump \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":302}}}],"partialFingerprints":{"codehealthFindingId/v1":"99d21d5a3b87924bc48ca1153169038755d30a623c5b93e09c4ca3d516769e8f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(haibin.lin): \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/hdfs_io.py"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"0e9a4daa84e749cb363a5d4606756765a7a936f1fd9c2d65c0479492be87bf19"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(haibin.lin): \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/hdfs_io.py"},"region":{"startLine":102}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f4bb0b4e579aae30f548b01f9c6bfa48b60ddd02f2e0e116e2a63445c207a41"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: actually we can make this a static method \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/flops_counter.py"},"region":{"startLine":724}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ae776ae857803b0fb92f5a43a192f0bf9b0a1dc55e96dbb5c57d4da22014723"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO (FightingZhen) libnuma.so is not available in e2e_ascend CI image, remove this code after image update. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/distributed.py"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"2eef315835058a46e4bb25640b921610016f1c3b40d3f55ba2fa4d565659f47f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: add unit tests \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/checkpoint_handler.py"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef785314de746095bc73bfea5a6bdb13faded555a35fae5309ca28dc07e40fe4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): We still need a dummy tensor to make sure DataProto.batch is not empty. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":395}}}],"partialFingerprints":{"codehealthFindingId/v1":"50ef7f23c7bb3611f862dc630be0b8b22eadd3b2965fe6b44b622e033df4cbb4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO Try using element-wise operations instead of scatter? \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_patch.py"},"region":{"startLine":240}}}],"partialFingerprints":{"codehealthFindingId/v1":"9083cf6c4a2675c30f4533ee7e40b2b1604de20bcaa94cacfed068516014b4f4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(haibin.lin): try-catch should be removed after adding transformer version req to setup.py to avoid \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/tokenizer.py"},"region":{"startLine":244}}}],"partialFingerprints":{"codehealthFindingId/v1":"aeb91d84b0d9bc37e48981b7485021eb213738e5a83135c20c4f0aeb7c80ec41"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(@leisuzz): class Qwen3MoeLLMForCausalLM is not available if VLLM version \u003C 0.11.0, \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/patch.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3f6db5679706d29a28c8b5c2fcea685e89864cce43010265b79eb70c3c8b3a4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: this is not elegant and should refactor later \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"8e8a69781aeee41f16eba554cfd9cd4d3af0aecac2370b67051d89f79cb16b74"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: confirm the mtp loss IS same across dp \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":255}}}],"partialFingerprints":{"codehealthFindingId/v1":"1ac5105a51769dc83355a55bff244c7351f9130d0df25033825a74736c2d9425"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: align ref config with actor config \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":581}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef3092f7aabef2b1c695cdea301b199cc7a147b2dea06ac4277b7f619c8e4df8"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: move rollout_device_mesh into ServerAdapter \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine_workers.py"},"region":{"startLine":696}}}],"partialFingerprints":{"codehealthFindingId/v1":"f36c88a9dad1c1dc0420013c732b966b3446d0698e3d006d7d449262c346700c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: enable train_kwargs \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/rollout.py"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"5c75e07b66ad7e5291c326fcbebb2e6fe76f0e7d38e4e9945e72056049a61868"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: unify fsdp and megatron lora config \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/model.py"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1f861a5a491462b614565c136371644efc66e40089499f51b80bb46943c93d2"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: (vermouth1992). self.config.model in megatron differs from that of fsdp in the override_config. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/model.py"},"region":{"startLine":215}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7cd12c3cea4d60fedab81364d2ecfabe6a13d731f2a96d0516fb309da6ae3e3"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: rename to RouterReplayConfig after removing the legacy implementation \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/engine.py"},"region":{"startLine":46}}}],"partialFingerprints":{"codehealthFindingId/v1":"a23d25ff7f27a59ee6865b2a6820c9c7606b4e21dad428945681bc8e29165cfe"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO (this may conflict with the one in model config) \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/engine.py"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa981f0fc9462ac8e85f3b533a177103780cbc401b1aa2529126b7b08dd01daf"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: turn on this check after we reorg config \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/engine.py"},"region":{"startLine":119}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d750b49f99b1791df29c13891bea1bff7fcf98d5bbc78de8d779f7a7924315f"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(ziheng): need to improve \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":390}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf70dbced60588033ec7811af5a7dc9cb159ead17ea3550b67d8ff9e9672e703"}},{"ruleId":"D17","level":"warning","message":{"text":"FixmeComment: # FIXME: torch cumsum not support deterministic (used in vllm sampler), \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/utils.py"},"region":{"startLine":39}}}],"partialFingerprints":{"codehealthFindingId/v1":"e03c8a9372e38a183394687641f98bf60348011eb8718b8b53fff5892901620c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: set different parallelism for actor, critic, ref \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":230}}}],"partialFingerprints":{"codehealthFindingId/v1":"53dacb600b3cc3afc9e3ab4aae1e15ecfa98dee8d8690a80621b6aaaf1e6449c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: we may use the new schedule instead \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":912}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f5b8bcd0082a097ae1c8c72742648cc7b1615aaa77764d7b23f9531a82dfb37"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(baiyan): How to support hybrid context parallel with dp_group, \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":1396}}}],"partialFingerprints":{"codehealthFindingId/v1":"326857647b5631fee7c3c732272e9d32a8a3615a5e256e087aea01178208fe31"}},{"ruleId":"D17","level":"warning","message":{"text":"HackComment: # HACK Avoid cpu worker trigger cuda jit error \u2014 a workaround marked in source: record what it is compensating for and what would allow its removal (the upstream fix, the API it is waiting on, the invariant it restores), so the next reader can judge whether it is still needed rather than rediscovering why it is there."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/__init__.py"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"579fe0478c36c8a62c9b6e70d22c1132df26a7ac42e52ac9f570bfba978f7626"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: cast fp32 to bf16 to reduce weight sync overhead, need more fine-grained control, e.g MoE gate \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":693}}}],"partialFingerprints":{"codehealthFindingId/v1":"e12f9b0665521b5e5d7452523f457c05810f9191f60c62261fccc292bf4cef74"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: support Torchtitan PEFT \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":709}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad39c7138061006e757eb0ad50809f554e612e5cec6df5c828b181403e65ab6c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(jessicazhong): multimodal is not yet supported for Torchtitan engine \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":831}}}],"partialFingerprints":{"codehealthFindingId/v1":"16b90756a433b585da27b4f7fd5eba07d83e17255209cf86f90c91e7fa04eb68"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: currently only for DeepseekV4, unify all models to export weights by converter. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/transformer_impl.py"},"region":{"startLine":652}}}],"partialFingerprints":{"codehealthFindingId/v1":"3ec5dc61674c271464db1f1d7949ac2626208401b136f3183ba45def527ae0eb"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: support VeOmni LoRA \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/transformer_impl.py"},"region":{"startLine":692}}}],"partialFingerprints":{"codehealthFindingId/v1":"5853f933e84f48a408ccc96415e4554629ef7b5ef06adb516ca0a2a4789fa9a4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: Switch to eval mode after Integrating the CI environment \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/transformer_impl.py"},"region":{"startLine":731}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee767620ea34ba6c023c3c684b7b99066b1269c50cc92531e53c088ef0a325b2"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(sgm): this should be the default solution, but need to make the RolloutMode more clear. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/replica.py"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"08921b235e2e8d7f2d2e5c5e18c7b336113469409c3399aa5512f2f26c869d68"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: unify trtllm to init_hybrid \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":492}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef666e93ffa2de19e1cc5c26e8d2146c34e3cffc84df1c2d14eaf2642add1200"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: filter out the seq with no answers like ds-chat \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/hf_rollout.py"},"region":{"startLine":126}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d17f21bec46874ebeb074b704efa63931f837f0e3f33b05ba3f2c7c07156278"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(@wuxibin): switch to \u0060/generate\u0060 http endpoint once multi-modal support ready. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":563}}}],"partialFingerprints":{"codehealthFindingId/v1":"6aa0fa4dafe88c28c6011f20aeb2cd400b9562dba15b8fd4c7c6eebd13565fea"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # until continue_generation(). TODO: add a verl-side gate in front of \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":877}}}],"partialFingerprints":{"codehealthFindingId/v1":"79e9ccbf0c1341904d1295f00218a31ceda30e4f2bdc51b99af98603cce83236"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: remove this class and revert the non-VLM path in trtllm_async_server.py \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_worker_extension.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"81df9093a20ee2f8a4aab7cbf821db6a3dc63cd1740f096bb168bdbef907057b"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: once TRT-LLM WorkerExtension includes wait_for_engine_idle, \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":251}}}],"partialFingerprints":{"codehealthFindingId/v1":"1272e44f6515d7037ebef7d408816fbaa52044ca58dab218f0ba01dd704fcc7a"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: remove once TRT-LLM is upgraded to a version where pause_generation() \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":395}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe65cf6067c40a893690e1afcb1736ee206147670989d60e94841731fd8f9999"}},{"ruleId":"D17","level":"warning","message":{"text":"FixmeComment: # FIXME: fallback to lora_rank for now, we should unify lora settings. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":436}}}],"partialFingerprints":{"codehealthFindingId/v1":"2fd6738df315b90dea2e0e43d77a4d9463f34c6a278e8c9bb71412ef3a1600fa"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: use the real release_kv_cache() method after vllm supports it (vllm#44890/46438)"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":961}}}],"partialFingerprints":{"codehealthFindingId/v1":"b03493346ca49d173c7ada738e8312a32ed85be11dbdee480fdda4b0c30817dd"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: aggregate prefill \u002B decode KV/scheduler stats for PD replicas. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":991}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa8c65e2000abb758bff561ce075b23978f625db6f29654e096df523739c5653"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(petersh6): we should only abort on the server that has the request. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1637}}}],"partialFingerprints":{"codehealthFindingId/v1":"710c0215c46ebf1fc81967f4739bfec6bea5c46cc34f8877b9e0579762ed19cd"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: aggregate prefill \u002B decode snapshots for PD replicas. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1652}}}],"partialFingerprints":{"codehealthFindingId/v1":"67d06180dcfff7b004b86ff1fec3593d6ede87971af4ec0be5079fe41e93c9ed"}},{"ruleId":"D17","level":"warning","message":{"text":"FixmeComment: # FIXME: migrate vllm version https://github.com/vllm-project/vllm/blob/main/vllm/config/lora.py#L25"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":107}}}],"partialFingerprints":{"codehealthFindingId/v1":"be5aa9ec96757216825582d5e4704001e7f71a3b595c5c9425c646bf17c2714c"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: For ascend NPU, when the corresponding vllm-ascend version is upgraded to v0.13.0, \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":197}}}],"partialFingerprints":{"codehealthFindingId/v1":"6bb9de08ec26b8ce970bcc61caffd1ed1cba01e149a644eb0021c31a3e1436d3"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO(wuxibin): not need anymore for newer vllm version. \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"bfa5e906945967c845cac0928890b8aa2746bc17b899d71ce6eaaee3ccc57069"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: # TODO: support fallback to shared memory \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060# REF: #123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/bucketed_weight_transfer.py"},"region":{"startLine":226}}}],"partialFingerprints":{"codehealthFindingId/v1":"745e5dcf18ef59b677b91e634327ec514194c5c017f025925ebc7eef0db998bb"}},{"ruleId":"D26","level":"note","message":{"text":"Projects may be oversized for their cohesion: 1 of 1 project(s) overshoot their size bounds, lowering Project Cohesion to 0.0/10. The most over is \u0060(repository root)\u0060 (98640 LoC, 710 module-visible types across 74 directories). Review these for cohesion \u2014 draw the boundary inside the module first (group each responsibility into its own package or directory and keep the cross-boundary members non-public), since splitting a published package moves types between packages and breaks consumers."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d5a94650dc74886a0f1f08eb9fb6775f1fc395279ef7e901c970c9d26f767a72"}},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d5b8f11381d61a58459ffc7c595fd52d09c03c711894a63a9578043d2338412b"},"taxa":[{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0ef8aea47f4b8d6541c118e5c645303336872e9a8304d36c8b5c482083d73b24"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e78b02a4cc0c73af1edd6beed422037bded7375cec191c10f45823c241681e4b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3cf66b965c92bdca8cc3d6769e7ddfb3edaea5ff525d9453f709a20faa9942d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c87aa1e39bd774cf8bbf786cc5e33d6884e21f94e4490fb2e351828fb0c47e08"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"185b9d451ad178db190b6058260c5b99e16796e0c20dd2fa39918ff34ce17fe0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"48f121b947e3bcb7757da1cd0a26b2901356551ba33935327fc5c10c16dbed6a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"127ba21effa00a9bce16f887cef95997fa3cae05ac965f09d8a1006826970ee4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e9a3a8e5ea50683087d689310b223d278a24d3f7d1c1781958f69057b77e44f8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c849f58a90e1a9620ad8ff2835f284f9cf731046d62c00162f4a11b62d851c3e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b15dd9b257c7a4fae9d1c8b7c745225a68654f9b6b167db28322cf32c810f180"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3502ea8854bf6f3bc3bf39f60f11c8af97ad19ec1371eeb280efe1097997ecc0"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cb3b7f81d8cb31bef0310f5afaca92eefc660edb0fcf632bcc8e36a923f3cc92"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3fbee36e0d6698074c06cb7a891c07ee68e14d21aaa4674285835500e2b7f7c2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d3371dcb1f4f673f394249028edc717d2c5c8f6cac0213aa1d528dd113c7a85e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"40e0a8d89583fcd854edf25e15a41430fd53dfb1177f4e00ca15b6a3e1b7c1fb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"92d8cfe9e59c1a93790eb8ca8cdd2973e72dc592432daaefd544bf655a06a7b0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3950b6cda6aaf8a953a4e961cfa836b8918a7ff409cb50736fa74226c54b8d3b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"01ec8428c5f0f0f22a7811ba481145b6637c315033e8594bf638151e6a2db6e3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"be1a6effca7a3f2ba9c2e08ca541d1c37bf89deaceb5579e7cf1f707d82a933f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"59da430551f6e60a088ac242bba05132af665b27158003595cc3307ce2e89ea9"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fd583c716a530bda42fb9057c18e48a9c27a7366081879453fe0ec7c50571660"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9229eb2149bf6ae94f9a366dd3fb50af0ca3b746ffb93c30d07a971fa05e263c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ad49b241b9f9aae21bf8854415f7fcb1601668df1ab1fb74ee011f2a76e574c2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3c3336382ac72e1f136134c31c6dcf7cb3dabaeb59e56203eda0ec15bed8b317"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"989b505123fe5f958aa4e5dea6ad130fd6e878b3e7b61f890f33badabda3cb5e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cfa8c0f7dabe774d7e9e15846a597d05e7cd554e21bb6a9d68dbe5d04c713c60"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2f345a0b3a18c2cbc0b8ecd82759d4d6ebead3ca2173d15e50275345840e3e29"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4a9c835c1f3610f2b8945dd1f8fc2989ebe11f40a2aab08bcf1d4c276208f46d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c26488eaefa1d2dd992c46962ce9c775aa767d73bace519c34c7cf6fda0d08e5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b377835ec2661db39f87a129af3ddbb49fa93c48f1c2819ba5065c972b847029"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b97c23cde9959c14b3cb1115346bf9702d88ed8afbea95f390581a8abd9c1551"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ab5e80ba6c8dab8ab8f47f800717a6fa9c57815b194cffa316d928814724e62"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fff5c2d6b062695cb19b6570aad4b22db5876c63458683fd2f9e7b9ceef3c281"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"59180a2d87527e8545639eeb816f875803aece171e823f1a7d10b6e5bee48ae4"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"efc18ace09198760c6f8b6acc56f3367fb0cd2a3fc813050d2bbce782b53e216"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b90b2e039fbd3dddd7058b303bd8e21634fc7589d55e6082a51ad007e19b49b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"724e482a5fb04885aa06bc4f72263cbd61c7dc8ec0504f8dbd87d9b8668aecd3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"95fe17189de2ae36f7cba50fb65f161be797513fc46feb6a4b06a6381e7c0fc3"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb459e0061832c06d3e303ce45ef90cf2dac8ead0b18aad0349da7080de4b1d5"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8b8e5ad2295551e0df7827acb78a8aa51ce385eca2feabfcc4f40890b68accbc"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e7b24c4635596dd95ffe8ddffff4a433998207ca01fa028a871716f43e4fafe0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f10db0d90bcc94f1216ab332c20b791523ec535d8fefe341acc104d2663fbf9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d8576d4d30732e168973c11f630bfce496518acc1684f8ec2bf37d0f48f97bb7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"286ad0c8c572c8c016bc0e26709756c4e7a0c9afb0b594bd996389cd98f3cd91"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b1d0d42a51ced6760afef7bb8d44b8910836276e9c688a79042d2eb07ca0e063"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d4932a11ad0d87efd3f66698d41b40497aac1e0e924d1a37f27f3a2a542fd54c"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b6f2b9195f7a6f33c93b0c05b74cb8c82d2110eacbc93557d4b6e05459ffdb6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8868648e4793b06e29ccfe52df8bbabac627fd0588ed2f12d6dbe2276e2b7bdf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a23edfa1dfa240e199f963f640804006dad8c9c88202e890a4cefddf0090f100"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a41961e3f846c068dc7f7c1ded7fc03ae8eb96ac3a703c608a3bd6a243383be1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"81868ded12a0b22ade725daad9d8441c2d50b5a0ef5711ca1b0999d9de4a2d32"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f85228b32826f2820b0eddbe5b0b9416c88959edec1a7d98e00a4aa7d3fbc36d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5232b105b68e775f63fb3aecb79e4dbd0a6e8c82e7e5e7d8638a833bef669969"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6486cdc911ec7b2afb55fd9409b538f424ef09c9e75e0f4aec3da65913e3188b"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"431874a5517e11f659567d82a4231c4f72f023fd12592d5452273155ebe88060"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6e6cd9272e5540b500837707fc79d2daad63905715edbd1f5775d95c9bcbe2a9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"452030a254b8a34f9cbb1aa431f06460d1a519d2f52021e1a19cf26d3e5ce0e0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"144eb6749f9cf4177b5ba9c4f0da4ded7ee0b1e8d49c187bada930bb0b742c03"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1dcca66a40087c46cc94c7e16a0ee90fcd3909643bf2b7ba5efea35556304a1f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1f30e0ccae2e7c97774aad51dcded1b2e95cb2000ebe72f28f287f786cccb3ec"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d602309e93d5b72abf6148dc736bd4389d94fe92458af85853fa7e9a918c26b6"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"deb34c21d3820a5cb0d01183f4ac4a03102d3398a0a96471acfa7852263e4b17"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"514b64be9b78099e2f4e84c74fd35266e209a993b2ab270bd765d8f3c9ece57d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"be4ae268d879325f237a5ed42b2bed1b0d5368181c955f263f2a04b8b89debc8"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"825d830ce37d1e6f35967e3b05bcd0c8c70d412f915a260e26b9ec9ec2c006c6"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb93a03988fb1060b437072f168c90f43ae6b07894ee0db796d0d5a3f9cd41a2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a7a71eb77c2c11bdbb714234ddb19552ac9155fae38d8fb90a32b41122bf954a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ee10c267e94843ec77cd9855e68e9d2551c097df49242ef9c357f5c5e9af6335"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5a46d8361bae868036f34018b9fcf2754370d359aa6a851e17babdd694fa875c"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"984b6f088563384b0ff44ebd9113fa201b7c8957afe6e244f79f29c69bb5b382"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0782b7f64622f9cb2bf1214ecbeeecaa42ce34a8e8faa4a70d1c902f3191867d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8d60a64dd2c8ac627b3449d1fba986bfba8f2d5e0cd199c777918c609a13b4a1"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d235247ffd2eb3a398be970c107e6510f3396972b85d1778eadf53b3b698f8b3"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4728412d23b534690a3cc879171c7f12bf9d4959758d3ab9b011fca5a89ab276"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e5d199b7d51d5f656cdc33bed64c752264264480a77c59d1b67883f8df7de801"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ad6399c982522af158d3188716b27303d973573adba2827ccc5bfe52335c1bf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"db867cc11a8cf92ceb18477fb6de2a2297b15e13fd17c286b4bcbca424c784c0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"304704cd5d72cc49379531c5795b9c9212beea756a4e2e9f97027b22d752a806"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"95bfcdb8005c531521642cb28e88cbe6dfc26c73166a34097ecc2359b4ce9c2a"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c35b45cfbc10def7d5d9eaf2b0d0e9263fd9b20207e49394e9ef068f24f76574"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"706f1228992a414b7e8c37aa587b6eb57e25903d58f6a3304373074cf8a4f451"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6837b70d60da01d0d520824c564079e2d63560c546e7f10e36b4eeb0c45a05b1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6c84f8753b67cc76815a1211682fe6ee04108bcc000390475a477a7daa7311b8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ed5f9289e3cc4e999d72d06722e950b28001f27c4ba038876f74436b1d0ee09"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4bf97a04a0d78ac55d5fe3c01f28e5618b40ab4d51ec840d1b5c569b119e9e4c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"52e8a9d61e4ba9d3bd2400dd19c697bf4f46dbb12a488d1fe74d8190c7028cfd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"27f96406abf7fc631547837fb4d374ade4c72ba4017e736eca6d1d04da73e75a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9450df214288704142d5832f6bf102096f542647c005ef5fee0bd4515f5d351b"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"04db22889ccda20e53cfa82bc670c41ef5ba8579202f153efb49860e2b0b5dc8"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7ba7d5d9fa662676a16535ffe532d365280777e9578a9c2a683d97d44a601208"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9912b000c7280b2b2c4ef7a2575a0e1c5165bf83fe95fd43d679056b2474847a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a92fbe4ba69248adae91b1adfc95dc944f83ba8fc0062109d2141646615bd82e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1123615e2722744d6f5bcb7172f813fd8edf829464ef794fdb4e057c0916aba5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b5caef4627459b0de4b67370538b9a3bfec6907e09727df059419a21c1a0c59b"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"05367adf81ebb7b5864a7f29f45b805dacb684906c59c1da8998527ad095319b"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4c4191740bad6be6f7bb79e7fec60448e90988644f22898f9c9a3016dbf39da9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"815a337dfcbf554c796f117f8ab39a3730907010f7558dee31f91f650e55e55d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"84767497c9ebb5c7c5040c55ff25d2f77a26871ca13e3dbb82ff3212cf7f5c1f"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"db87e63a6dc09c7fafe6a8bcd350b727d90978f26e8ac8693512816279b7b48b"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1a8ff4fcd29290da34c6fbb6227ff5091f2107963ead8671b57102b6cf256dda"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"129b4f6ae94c575d6913b185fbe1e1ce66f9b4d240b458d289811a50043a6345"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"12df8a3028c7775d2085df2fae601ddc0d7dd9f08a34f4571f1ce71918bfe65c"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6353c7dbcec667ffee06dc160491c358f52115540d865cc0a6d6e9d27549002a"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6fbba9d077a515a09dc1e55e903363b8313434100df9a0b61b033d54126e8350"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1d00cfa7ea4994ec8bb007d8e12cd2aaeca9dfb02863a3e2c172e9e1daf8e240"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"997dfcb078ca50ee0314a2191e9b3501ad178197c7cb3b341ed3a7d422a9c5de"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fda1a99c8df265e4774025571a4382b0f31b23b597539eebbe3d24ee95a92390"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4db7ffa3b9f95a8e4aa0db2bba90c28b2c9ecd588379f24d44317a8ed6c28caf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"043b36050ac0572203f33187a0fd1256d024bbdc700f9c37064ec25a34c0d4d7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9b23979158666eb7bddffa98b34de4399417aa0b75124ead00a14852c0ef0a20"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"834e9a4b1effa24e9f0ae2085a318db3160e19d23e854b440ba686d7d7fdfe41"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f2038696f0fa8b4c6fe0a28aab466994525f2ce5f44260ee85d6be54b20ca9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ee0da4eb4b0e6fff67f7b7ec06383ceb057c7372a57e665708fd32e210d1976d"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cc62ce20ab95997c1177a806a9e8eb4e01e103831f16bf6d41546bec27312108"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3d5037ce06d2f16cba0ea18b3e7d2d5be77b5a5ae343893fbc41c3aa46e4e23b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a1e6abb90cce1420e8ab95bdb84eeff5540a7ec3804630f885c136653240da5b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ac03b0c4ba7ad25c5e7f872ae18a49d196f7252770228cbb9d1554834dd49363"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b20d5dd0cf1635cb1b7f5a5aede2e82815b4f9cc64483d16a40f07b6a393538f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b709061c5ac085e8ce2afdf6f1730f8f61c799ba6b1e0102c59a92b6af7bf8b2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e1b6351ff1ca5f25c612644b46fa765b7831bfc240e1d401dc0882c3f5b5429a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e1926c50b6682ba51a9459e7c2043ba129670faac254cae4f69248e496a6544f"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"db51513f03c500c4728133d21958c31ab3a2cca40d2eb946e8dca3c61f5c398d"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"854cdc97cd792930f69a393d73e28012a91a97c938bb73d4490968477880570b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"caef7863ed8e4d3be74f0b96ead73f57cf16fb45b7d719f1270c964cdce015bc"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8434f1d702905539832ed164a886a8a85d81a361f0091e2c3629645c79149526"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f99caca090f1b1ac12f385cb8134c309ab3120da0bb3a7e8175dcc1b3c101389"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"045418297f8fa0723765d60a9bb4cf17a9141894ff00d929188de31dc6aeb3fd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6efa88973acc7785acb0e1517672805dae4d52dff3a12b2a61e032094f795421"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7e1dc20d287b97178c0817a62ca7a8cb0ac60027b17ac6143a5cf140b951ad21"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"abdec8a9abe6d9f367d12642221506c6d04cba838cd75536fc32b009513f4897"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bc88d364c8adcedbaff9361f79a48eb5411302a38d30af58dace91dafe56c36d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"29b38558275b71d64a3b43a0e49f691faf8485b02db44f55053c33394476bf05"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4374da975ce039d80cdb811c1bd6cc86febd1562412b6d67a91bd83f1df1580f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bd69056eed17b54b65dd4d355248521f9010b2facf17d591302804d537aeaac2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9d201afca877d63a0bcdedc3ac5c633feed62ea9321ace1f903975f9c096b137"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bc0eafaa4ce34b48be471ad2bccd5775fff98396714fa17ba296590a858ed838"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d57b862cc5be5942bbf78105c3d4fddabfc003c27cba09be12791200d75d91e3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e1db1d0699994583b5362f379f2a358cab035976681afe0f7f64f1f4bfd2aaec"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ba9200efc94c45e6cd782e599f11d0f544b3c2e187a35b0066eb08bd9fa99df2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b0d1b6a414b2e7dc028b287c54a5f7197c6a4b92a0933292d4519c56d1364674"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b7044e89e1619a90c3b4b59144df52984fe7e4a23cb24987da16223b684c7bc4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7676adca01997bbff5c97d177d98e72ece7842bbb22df5b1f6a417242f8e9600"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"52e8e0dbbeeae82fbdf1976c3842e6d8d9c444642f0d28c8f58e2a1cc5d5ec4f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6ee874ab702f9e88a3fff0681d84c5c6c70ff454c3c0994dcaaab61592136667"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5a5524a49533431c29f2e3e3465d0616a785047fe18abcb527831c29f88cb3c0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ac18249c3d16faa943d5e37f47367a4b13340bbdbb7087a1ea5c20619a29dba"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a475befcba6f7e5d4ee860d0686b46bd031d1d7e1397b3dda709e73dd53f1d4b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0329dc6536f998f473b3eba129315b3e8f70c25752c26b106c0c1459b0d20b56"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9f90933e4b064989d0e1b663ebf2115e526a60a3bdf547fa2810cf97c0a00d66"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"917f3b98131763b16f5855e4426870e53c5264eba976ae6145bf1a1d9de8441e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7990c22013c327fb3ca2c72dd9508c29f6764480d842c069ea21377aa13379c1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ec522235c488609d0f6609b982943ee3218153075f354ceaae96cf5b12581f59"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fab35e3b75fbe0394f2003c4f55d02883992d29a059561239dbc2ab7d2565ce4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4ae63e3316db7bbd4b7f38f34e6fd37c995d146c9b58660a8099a49f6706eb70"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a368e5ca2486daf9ce829469fd4e7959a4b311c946d0c44573f0e9cc1531d7a3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4279afeca4d5d14cadb0f1b4cf72108c994536b8ab9a422c6a8902be23573d71"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0ca45d37cf6c974e77dcb4d99d350f6a4efe30412456d4b9c442dd00cdaf5120"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"64a87a87e2e8a575c5f82a3674957623fedc2a8f46069bc451f832d561995a8e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dd63df3973846c2291bab7cca7b5321ca6e52b586808c9549554399d71424b7a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2465d863d937b7920873a2bdbec191ce2fc4be85a92c2f61b4ec54cc9aaf5e2a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"713062c6ef552c5ae6551910e12ce05e4114a3c19334361709b59f3f5d188a15"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ca14f22fa4e6b7bf71f560b183decd14430c9d69c2cff519694b56f24790909c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6ccde81f48d3ec9c2b5dedf5a9730e19cb49b1b7c3b812414c2480b66409c022"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a6d1b6656c5850d023d05669f9e5c76b7595749cff5d2b98a243e4cd0bdd241b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"67cbbc309130f4643b1ca19b934ff5b0181bfb73719ce3df876350e7f7a9cada"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7e7c5cb51fa1bce22b22cf068c7a8130b1dc39d22b1e1e9096c6dc43ae95b353"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4b6fdcdc495be976a9231eeddf8276f3b248f455abc9f73a18e2c59d7d1e6f73"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e669c71e21b302a5bd202426ddd79385947700359f37992ffbfb61ed08a2fc29"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"37cc814d82abfbdaaaa13e5a7b08b2052d10179f1a98e3040ca31663e234c2bb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f2504607070afb1897cdea2dfaa1b5dc2b7cbc0408707f1472638dfa35f423ce"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"436a7a9bafd9583b87a5a9b52de6297d21d27db0f10e5a9bc9123842de86c659"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d952232a6c86107bd32b721c3780030e344d6ca82f028780124cdd989f914f37"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1d4c331e9ddc3d7cf4fa99f5f749dfbd90c57445119e7fc3a90a9816c52f4d97"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"723810657ce34d72da1fe281d6d91ea93609594503d7315ac98ed07f092dd1df"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"862e1e08fb14df0d35e1478c54d124ae39d4d67500d9128ffd1d9e2fd79d18c9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"95aa246ef3cadfe89a553df82312dd18d48ab9925498280a1e269fb1d7f4efb1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2401e233d3163b95fd9c823895de9a54f17fd1574707e11ca4649b024fdd121c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b1a494b13f862f3a48d16ac46a757cba92b4ff87b2368551c97a815b0153606a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"698f862ee24d117feae9aff1e92c9cb2cd89d59f6bc0272b77920ccef72e8ab0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f889664c5030784fbe906b7650bd44619f2dbdd30d563bdd25d478d4fbe086d6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3e7abeb75ae05530ddeb3d27e078c84caed54b1b311236938f8e1beea737163"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"511c20f50d13f9452b5ef31a20b961b91616e11d44e79fc9bdbdbf82b361a7f7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7cf761e6a546cc67601293755f418fda8e413c367b674425790da813e4c05a17"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"140ce26cf2a67cd983705f7e58c0e1fe49ca516cde7c56cc19bcb6ad692ba0e6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4e3641298ffced3102372c5587853bd8300509461382d3d38725e01c9e979b45"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eba7d8fb1ecbb092bccee992304708eae4d98f5a6b1dfc57bcbe63354874f6db"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4056a031fda00c897e9fbfcabc1181ed1c267fcbf20006090a848604cfd9b839"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7898bc8f91367f776274f34cdc8d2c659837100339da009648f6f6b9ca01226a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e6d67b4737fce750b5ac7a354323974239cec86cf54267e76463fe96898e9ed4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a213301e6a0b2b0a4362636cee519790385dfa98741763203b4c67c6108dd4d5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1644ff3581092a0c48fb3e33946c944beb36866d9f8a8a761fe8b1cd6083614e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2a593afbda796e29687ef827cb762489ff8efbb183ae8fecac8e2dca5e203792"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4d1312e52b77b4e1b2e485d09c7aadca1e66685561c467adcd466991f3d2f0da"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1827f39d49b90431d5c14123c1509d6c53477774fd23ce0c176f6439e95b9b8f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"95982b7e600ea51ac7ec94ab34fbb1587e79421d79aae64b4b9225da6198d8b3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b751e992849645ff8bfb2f17f481168980ce085094ac29959c7c2cb0e0261198"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"03b274c2462f950d6b4626f284e9d72bfe4f20f7795bd67d56a260dfc2857449"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2dbce0ad1c2005484f426c31ae5b05ce60b6ba2017f332eeb0c87a7daf9b0a3f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b85cd21938900871bdef6cb6075502c97d5d33296520efdb729819cf3c4f26d0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8e0aa4e831beab3110f4f148957560c7e5a95558677b122c8d3c62a8b46d9356"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4ead821b6b82ac24a07c5746cdbcca463bf2b6ad3c5f2ac41e21d0b4ff3b1092"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6012ceb3db662dda0aef80fccaa5e4ded6b4197ab15fdb56e371c954374a90f3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"944297739a89c159760da3c306a8e4eb1e1331755154017c7172ca0a6a0406f4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"253f35b2045ecc0ddcc5e8ff22c15f7a02c6940c2cd0dacebdda32ad6239e22d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"404b3045e80134aa665f4e132e84a6376184161c273bb6f412cd787473f54075"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7f2e50fb7118eba33746e04037d95fb59932f0005860195d6dace158ec6e7a73"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"413341b9c2bf2dc6ae4a45399b68f08099834a0fae1101cadd016b5a2155aea4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b85b7b5cae01d8044d679a11640a92908470bc532166d2746480c88ed8f5966c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"569749767cf55fbfe51b3230d0014a92b4fb27394b5bb332b6a2a90826690378"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e990885b52872fdc37f3c36e0dcbea23f54b5601fd778b2e3a3ad31309e49797"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"98cd81b7d4961b1fa3deba62b82911a2c99ea58402e59744ca2c91b9390f061c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"54ac06a171abb12b4d18a684210d3bfee3614f7ab27a53ae6c3a243ebfff7e76"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7cf1bc30ca548418f768ac5f1c868875fd6a0d63484e0452ec2f3dc265712a37"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"70448732d4ed8d34dcf59f0cdd161e544b8f2c262a2a5af5e4c8ae9290b2d606"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ff6576968f48d45471ef7bef37e22be0b7961fa6686e611214db6b2cb277d5e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a82508d145d8d0ce54e6ceb7bff8f81af3b94f014d340cc17036f965c707126e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fe7dab1031be0ea63121865499d78476de8892ae48e7034cf6ae6e00339f860e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fd055898ca1d7c303df1d8aefc5241014ce8fa1fbc57629e8349965fe992fddf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"32deeb59c9fd9047735e5064a90007f528519af7d251e22cb185bd71c8c16fbb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"776fff0e3a73ec50003bb01787b2d8e8aeb18d2b59c016c02fb965910afaec17"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a9a546fb181f687044ef2fc84cb73ac5e90f2a067cdd72a209a23f8eac03cf4b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"378a91f205dd09651110a48a5ef6384448bfdbec284b9259a27dde742018b1c6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2b44b756b1193928df85070ee662d274796c9cf84e250ce037ecdcb04b6abf3e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"864a15c05b0873a43c06e2c9cb6d6dc0e12c9379dc68bcdd08362bf5e0f5affb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eae8926636aea5290bfb61acdc908d2adecd407b35a5df0ff99d7b7d3be69314"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6b14128b203310705ed7ec3a61656e05be39614a3ea7f95081da7b4b68360286"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"16f458450f5f0bc7e38621caf28c3cc409d7368d1f9f317ffafb9aa2598ab4ff"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2528f8df6e9922f5ba7225d735d1b78ba74c1afc391c9f6365c44d57d87e2f09"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"752956b1dfeda88b6869ebb4891f4c8080e4e25bade95ba5b1c56a7b22bee45e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f4389366b84c99b43672d3b920e040b84c37020283f2e51d0860ff4ed6b29551"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d8cbaae712f9af998181770e6c66abf731bb69b0d58a4b316b93692e788e3176"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bdf77cee5842e9301509b2fc5b9f4fe432a1c2edffe558372b30417536c24ee0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bc7c419174fbeda6675edda93f892a15eeacb06486441de0c328a904beb47382"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f861dbf60ad8c9bbac493e4d703ca9c08f6947dc98ae7cfe681ba157b6322b87"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"49d7bfdf2ca171d434d0449c5d776044d75647c389aad79dcdcaa298919ea0b2"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e56bd8405b8ed45bb27dc47a9b9ce8e56115d725dcd8561797b07362222762b5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bdbc9f316be3ed94c17f28eaaab37292630c2b4348a60cb2d22e25b49b6c2462"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6b84a7be1456c613cce3d78abf2d939aa07818fec696c9e1047f13f5c0496543"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d6e33e6db730fc8df178dce9562cddd723919a8f927242f639813b15b5011d61"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"93db60616657f9c2ee3e2f169ca4c10cff23ce6bb4e797482423c94b42c8541d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e7480506c5852f7e2ea939c97f86f53bd864d70de2ae77c64bfa007b83d8d0c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3d668d297de2ed6168347fa1dc2ddb11f46e1b9923c4fcdc3367eda229f47530"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"19bce8012c1f1dbfb66a719a79e05eb22f40b29be85bad4d616eeb1618fedb6d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"de6304ffff7a938802572b8bd844d16d8b33f552dd29e5b36e23f54a4a0364c2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"420700c66e3c519e246e1a32377f2be3e4de73f5244d187f4486565e30357d85"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b11dcb8e5c80297cca608afdcb5a6efcc894c6fa3b51ec4fa3d3dbe89bdfd966"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7f6c333aec2dfd3b7249c790798e8ce682a015b47dc0b0e0178051eca72f4786"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c469a854629be5a7f60d4827f7dcc7ac3444a22f98fdb0e8f8811f9be832a1a8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"db0b9c64b1d177e9d9824c6458268804fb064fe75eb9664495d43381f8daa17f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8dabb7b8ea89a74f22baaf3cfdc70e8c9883c08e001a4aee7c1fcde46986e26d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ca1f69335ad77059a769b897f777183ad0d0954f692b38d02d7e34d43e0c7221"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b5bcdc6dfde583f416606eefda4a7a1e2b03bb1e3e70117bcc1f97431a124616"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c22a838ecd9485383c0cd2ecd867225a4df43b3eec87133b140293f51e283a0a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b608a4063f8d2eae0bbef4cf1ecfa694d79d899ddeb4fcf0523801c771c7efd9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3ca132218ef23c0413ee4b864bcf6d65ad0c2cd57f819e8b6f7b52cc3c8597ab"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dbd4e31672faf1a624446e3ea11c075ef423f2a26a889b338fa4095f2be142aa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"657760eb77ee7655740b332b628146edcea3fb8dae58d757bcb6d685b46f7830"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb169755aa916fd562a697f7ec944028be1dfd61048fd8e4f5c5f086a0be4bb4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b5f9a7e634398c31b6e1445a4e3daef08ae6eb4978cfb94dc5f4ef8d94e497e6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d6a9a0e9fb18c4c28e94752acbadbfde7a16a1a4f4d7e512d8421fe9e4b6c76f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c891eb49cd2b541cf1c50a1853b062c9052f5a9157cf88cc415eb830476c60aa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d09bc68f5fca959a109cac50b6230bafdba217ef0703955d1e83725c455a1f39"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a130a8e46d40e70f34a92a8c353b649256d90ace21afd7725c99e50cd976e7e0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b37b863a6504681a8a79b286ec0cf1c209cb49fd2c5f02f234aed291fe0aa88c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"447dd4e00bb0ed6997037871454e682d82a20fc571a3dfd1a664d60f5e6ec9ff"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0d6be15d26eb1e4b2ce4dfb3205f9ab398876e83253d91b119bb9847c2d46162"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d39cf4a653db601372db6c0c79ba54f42d2ebb6c1e5d43e37abae041cbbaffd1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"25740cf9ad2dd3371e72fa3f7ab579a75cb5e89ee4149476dc1c41bdb3945817"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4da582fe6c2ad3d73046c0b1af31bc3e1367c9728c3742a9dc00fc210e79c2eb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"df92547d4d7dc30c1bed4a83a8623437a8819017439f0254aac6673b0e384c3f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e3dc8f19aca6f485dc24716a1e0f259c164db38416a6fc7e7023518fde843cbc"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dc8d8ff52eb1b5df7e225a703b11175c61c0d70834e52974b10a5ffd007de6fd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb3b6ce18dc7ba59c8d8186467fc81c305293d623349eb291a39ae58ddc264a2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6ed059458dc0d864f79fffc2c8cd3f09ac2213f256b255ba1e07734350228541"},"taxa":[{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1acd236dbd7a869bcdac9a271974030f6492e6c140570918ebf25716be756f9a"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f5d849bd38ffae9b7eb914b8664f2ec9d5dce25f71738136e7aa004d12db10b7"},"taxa":[{"id":"CWE-95","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a9264bf77f718a58e0ab538201012b34039223e70eedbc268d765f7dc076ad76"},"taxa":[{"id":"CWE-95","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4207c958df5380a54cc6fbf7b01f0ae9b5ae64dad28ea65da8461ebb54847456"},"taxa":[{"id":"CWE-95","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"736d5e6686a496490a3503307b6f04e619d19dda8d50197e0b9d8f7288cb70a5"},"taxa":[{"id":"CWE-95","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3c73c4e0f9ff67f6697ceb21753c8146a286f3a403a8866f308ae7515393c5a6"},"taxa":[{"id":"CWE-95","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d9fe88a5e0965effb4bd4971f7b6a43e344d118149349a9bc3add5655861632c"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e0ce09490bb796004aa54e9c191acc5ca87e45c2e6d1d15dbed2725b84e7ea1"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"19255d707c1d816deefa626eacea0cb5ce1425a3a9de3bab95d1aabec77e1062"},"taxa":[{"id":"CWE-327","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7ea6c03b0aa9dd294399940e5c9520dfa9fcace047b6d5e60875cce5d3cb867c"},"taxa":[{"id":"CWE-327","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ee73add97951d02302db5c87789ac3a5fe34b8a8c4b5141821ddd4d890c1eaf9"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"30c1429ecd6d3c0713eb0ba1aaa55281aab16aebf98dbedc54dbf7ff477f726f"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"76d4b1f40e9e79d604ac3e09f8303f86e89686416b8d76aeadb8be151cb6b823"},"taxa":[{"id":"CWE-532","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A09:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2828a026ef598b1eb0447c8e7d592a16848cf5adecf2b9af75eef6b3398a3ec8"},"taxa":[{"id":"CWE-532","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A09:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e0772234422fb48d06e83f068ea41de9c2606fc44aa5479c60b1f0a691a86493"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"995ad37ece5a38a2f0bf273dc9aa6cb35b7fdbad6bf4e43b90b5f00966b8cce0"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"15212dfc1d1a017b985c39c5765aead8bab2a5878fdbc716d1c0a49479941980"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8624ceee8fb57c43e177c3de72406ce85fbc618083ba3ab449c393cec08ed7fc"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2a3fabde4c6041faff772b94332a55260f1ab6755ff0ad05ea77dcdea542045d"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6787dd3cf2ef5068e2ce84a23bf1ccdb681fb8ef1c4e8f90245fd446b3a66231"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"31fcd4cdc8a9c012be7cabc126307fdaef1ae800055681bd2c7ba676238dbab2"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7e5e6c57f11fceb218d17332565f285d6d10dee89f6d3443372ee3a16a9e68c5"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ca551ce9eb651b4b4b264867b538cdf4418282b957605382198d4cd9ead36bf6"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7c78387729d93b972f13b84c75c0b92e193300b1e1e296790fdee8873bd11782"},"properties":{"dependency":{"package":"gitpython","version":"3.1.50","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-3783","PYSEC-2026-3784","PYSEC-2026-3785","PYSEC-2026-3786","PYSEC-2026-3787","PYSEC-2026-3788","PYSEC-2026-3836","PYSEC-2026-3837","PYSEC-2026-3838","PYSEC-2026-3839","PYSEC-2026-3840","PYSEC-2026-3841","PYSEC-2026-3842","PYSEC-2026-3843","PYSEC-2026-3947","PYSEC-2026-3948","PYSEC-2026-3949","PYSEC-2026-3950","PYSEC-2026-3951","PYSEC-2026-3952","PYSEC-2026-3953","PYSEC-2026-3981","PYSEC-2026-3982","PYSEC-2026-3984","PYSEC-2026-3995"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d546733b9ca45c1bd162da0b0b01ea42af530b6ed35676e28a14281b1424acd0"},"properties":{"dependency":{"package":"anyio","version":"4.13.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[GHSA redacted]","PYSEC-2026-4024","PYSEC-2026-4025"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"041ce66dfaf19f7320f95af54b0addd19bef1651ee4639465d26bbef12a137a0"},"properties":{"dependency":{"package":"pyjwt","version":"2.13.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-4140","PYSEC-2026-4141","PYSEC-2026-4142","PYSEC-2026-4143","PYSEC-2026-4144","PYSEC-2026-4145","PYSEC-2026-4146","PYSEC-2026-4147","PYSEC-2026-4148","PYSEC-2026-4149","PYSEC-2026-4150","PYSEC-2026-4151","PYSEC-2026-4152","PYSEC-2026-4183"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"10e04b22e35243729294f2c63d26777ab5e2f09392f1c7f89a239026644367c0"},"properties":{"dependency":{"package":"fsspec","version":"2026.4.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-4217"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"004f87d3ec0057704a5f63052b8513860331a63233db73df591737d95806b1db"},"properties":{"dependency":{"package":"hydra-core","version":"1.3.3","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[GHSA redacted]","PYSEC-2026-3850","PYSEC-2026-4221"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9695b4caeb9dd0b4d8037117fdebda587e828c3e1f1a8f807fb1a3f7060e7ce3"},"properties":{"dependency":{"package":"pillow","version":"12.2.0","advisory":"[GHSA redacted]","aliases":["BIT-pillow-2026-54058","BIT-pillow-2026-54059","BIT-pillow-2026-54060","BIT-pillow-2026-55379","BIT-pillow-2026-55380","BIT-pillow-2026-55798","BIT-pillow-2026-59197","BIT-pillow-2026-59198","BIT-pillow-2026-59199","BIT-pillow-2026-59200","BIT-pillow-2026-59203","BIT-pillow-2026-59204","BIT-pillow-2026-59205","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453","PYSEC-2026-3454","PYSEC-2026-3493","PYSEC-2026-3494","PYSEC-2026-3495","PYSEC-2026-3496"],"reachability":{"kind":"production","file":"scripts/chat_template_mock_trajectories.py","line":32}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ad4a622d4c80364e7f8e6dae074bf8f6eb842484394dd312c7e2c864fb2136e6"},"properties":{"dependency":{"package":"msgpack","version":"1.2.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-3625"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9b5e6c724e2d9fbecec38db96b486258cb3d81491d88c77293de316804488e2b"},"properties":{"dependency":{"package":"flash-attn","version":"2.8.3","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-2477"],"reachability":{"kind":"production","file":"verl/models/transformers/glm4v.py","line":47}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f268873f65bdaa9fa0eb6931555627e85a8ff8143ca35ae482b4a7d5ea5ae3e9"},"properties":{"dependency":{"package":"urllib3","version":"2.7.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-4175","PYSEC-2026-4176","PYSEC-2026-4177"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b15eb4d07b66f3b83d597e3dc6b3e2953a8473357bf9c7a44640164ceeedc9d8"},"properties":{"dependency":{"package":"pyasn1","version":"0.6.3","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-3455","PYSEC-2026-3456","PYSEC-2026-3457"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a4c205a4262a5c19852b5b8ad8a58185dcea01e5173f3b510d3ca3597430ef75"},"properties":{"dependency":{"package":"virtualenv","version":"21.5.0","advisory":"[GHSA redacted]","aliases":["BIT-virtualenv-2026-102925","BIT-virtualenv-2026-102930","BIT-virtualenv-2026-102937","BIT-virtualenv-2026-102938","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-4011","PYSEC-2026-4012","PYSEC-2026-4013","PYSEC-2026-4014"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"006bc09fe1c8f368204de0316eff374aa31b7c81c27de1cd301ae024f2a90b4d"},"properties":{"dependency":{"package":"cryptography","version":"49.0.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-3552"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"47c69918c9e1c4c9fb9c1a11ab98e1cdeddd9b9d4d39cdaa4ea2687215d5e5b8"},"properties":{"dependency":{"package":"ray","version":"2.55.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-2273"],"reachability":{"kind":"production","file":"scripts/megatron_merge_lora.py","line":30}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cc4848d14530685808968a045958e1af707477217d71b84cc70e0f706b40b8a2"},"properties":{"dependency":{"package":"mcp","version":"1.27.2","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[GHSA redacted]","PYSEC-2026-3483"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a848c382c8b8d7071a123cc620adc049527f5e7c02d12e6b43294a21f8ace908"},"properties":{"dependency":{"package":"aiohttp","version":"3.14.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-3545","PYSEC-2026-3546","PYSEC-2026-3547"],"reachability":{"kind":"production","file":"examples/tutorial/agent_loop_get_started/sandbox.py","line":16}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b4c5ab475778386f3baecd24b925bb2d47f1465f8adceee7916e87ab86ff6b31"},"properties":{"dependency":{"package":"vllm","version":"0.29.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","[GHSA redacted]","PYSEC-2026-3996","PYSEC-2026-3999","PYSEC-2026-4000","PYSEC-2026-4004","PYSEC-2026-4005","PYSEC-2026-4006","PYSEC-2026-4007","PYSEC-2026-4008","PYSEC-2026-4184","PYSEC-2026-4198","PYSEC-2026-4199","PYSEC-2026-4306","PYSEC-2026-4307","PYSEC-2026-4308","PYSEC-2026-4309","PYSEC-2026-4310","PYSEC-2026-4319"],"reachability":{"kind":"production","file":"verl/checkpoint_engine/hccl_checkpoint_engine.py","line":23}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"91aabcbc80841d7613e48bded99bff95f9e1d6b21e7380ef7837b8a31042afde"},"properties":{"dependency":{"package":"datasets","version":"5.0.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-3716"],"reachability":{"kind":"production","file":"examples/data_preprocess/aime2024_multiturn_w_tool.py","line":23}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"31a4626c8a479d5df95800c40726de18cd5967079c672e4107288cbea5492fb2"},"properties":{"dependency":{"package":"accelerate","version":"1.14.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-3804"],"reachability":{"kind":"production","file":"scripts/legacy_model_merger.py","line":51}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4422028c03a32871e5233403e0308e8f6b20d31e756da7763ac9c84f419ace4d"},"properties":{"dependency":{"package":"pydantic-settings","version":"2.14.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d2f69292b7500f63f60d9273f140d50be816fe0dca2dfb24841c4450b5194153"},"properties":{"dependency":{"package":"multidict","version":"6.7.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-4244"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"280263fed5c37842baef8ddc8f1615c1fe3539466d708b7560628ae74cd91c66"},"properties":{"dependency":{"package":"werkzeug","version":"3.1.8","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-4312"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"13586fc0c39afd311c8f68b33f2e89fbb1618f43b2d8bc54d4d00cd4d7925790"},"properties":{"dependency":{"package":"setuptools","version":"80.10.2","advisory":"[GHSA redacted]","aliases":["BIT-setuptools-2026-59890","[CVE redacted]","PYSEC-2026-3447"],"reachability":{"kind":"test-or-tooling","file":"setup.py","line":19}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b98ad1ea8092868c51ef0db67d9f6cf7de03d4bce9baa0b58913e8a2ce2b8d14"},"properties":{"dependency":{"package":"onnx","version":"1.21.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[GHSA redacted]","PYSEC-2026-2689","PYSEC-2026-3587"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"192d71e31f5b218b409fbc8278ed8879311fdc1a2ee38721d0d47695d04f91f5"},"properties":{"dependency":{"package":"diskcache","version":"5.6.3","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","PYSEC-2026-2447"],"reachability":{"kind":"unknown"}}}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fb255d0b13e0597d21c7f287f57a7e5335399418dd58e1cc672464be2058e42d"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"206856b873a7974272c51d982fb1dddc3b57d372d118825de6ee71eb35153912"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0250c4c5b0974ebbb381ae66e3a9d93c3e4feb9079c6601a8f14ee18ca5aec2f"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"587212a6a4a1da9dca0ef2b1954d0cc86a3de84f2121defbc14952bb8d0bb6de"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c8c48d3e58be7b720450d20962a36a04dd8463862f86c6103a10907622b4ed9c"},"taxa":[{"id":"CWE-295","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"73438a3a67a9c86f09d2b49153582cdb5bddb8282280962d307488a6908f09f2"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"02d6f13b2e93bfeb9f677503d0d1ae6d5f385abe8c463dc4e20c31e2d2a766f2"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b0bb8928ddbd336adde036218c292894180576b97e04bb4c011e59656df7dd52"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fcf915c47dd6de9d3707e19ac800cc1e6907b8a08bdba548d6fbfe274044aad3"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ce8400873fc501eb6a4c488188835acf7f652b690c07f93aec47403a063d81bd"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"615e5250c0e96f88b0360dcb38947fb12354bd10acd41cf48534fdf4ca8433bc"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"afa3ac31c4147ed78cc9c7644928946eecf2801b1e9e3783cc6aca57a6c42933"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b1d9f739ee34a020924a5a46f41da70f6aa7412a21f46394b0cacc873b425e9a"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fa8213bd5c8b2522be1357292f020653e2e9cf25e7d762b1ed88ddeb00997d58"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8c517c500f888b5aa8f55f95770960c51514550e835e2ae02b3e1a8820da7e36"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1ce7ea0791ae57f7b84311e1a737d1cc0ee19f82268ce79de13681eea4fdc52d"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ddc1106580cbcd89bdb3a03d6aac192e2b926e34cf9b6e4258a8aa1dfa27b313"},"taxa":[{"id":"CWE-345","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"69287c5864d5f68f1496a8aa99beecf60d298dfcc395aef51381cec9b1f773b4"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a21c511b92010be8cb366188dd42f78a8467fbd90db490c1b0cfd150bf22a22f"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c71cd88c9f14ce7ce24c4d483e73b3f9646d7c5c97660c6a5ee6af60f9ad5d27"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"df77da6ddf6d56c4aa70a8399cc96938928c2e551ec4a284206c785a70e28ca1"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c88fcf9ea84290e750909cd7800b047d417d506e543fb7a7f38ab8e54b89ef69"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b5b9bd97b81c731891fd3067062519948210b0b177f376638d03396ef4f97e2a"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"39d45728372625bc5e2a099e70157e3a26456dae471e0393631398da0861acdf"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb7e456991768270997bbed12f6191e4454c7b1fbc7ef9ac4bf81326807be536"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fb394e17d1fe94511bbf723b00260094454ac5d37488386a21f037a4d0b8494d"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"06046117ceb9b8a25750931c1f4793183c923bb765aad6fd680206f8643319a3"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9c2ebd40c3c4d43327d57ccf163a26907b7f3446f74296aaf449ee8ded5402fc"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cb6d098dd610f8bdfbb4fc85b8af7f804d4c6c9718a279899a0c4830b2577901"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f0681869ffe836da6b8164b134bb3cbbbb521989a03c63a58fddf1904e43c48d"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8665e7a63b62b58c5eb480453578aacb66a4f4585972c913ce64277daca5d6f5"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"73d4af7072afc4f2b66adfe3f838b10a7c1b895fa01e321d31547ccea75a8922"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"faef2a541ca0b0736c3ecd05d6805f94485b847c87a2b19c102e3be3409bebc4"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ebf7acc92eab51ddf852e3086b38511d2ae322aee3f0863c2dde3b24ef1bb5f"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d6593aab55fe8cfada3b7a1b11c1bbb8f773baa9ae1de232548fa6beb875c7da"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"920f5f75867308ce7065263516e82b76839d6898df2391d51bd46c58e1fc40ee"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c82865a2ae0ff9cd7f2efcf15e82ec191d71a0298250dcd53bf948211288bbdf"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1bf9839167922ed3868df510da5b74e3b510f1389e140517e834244801774957"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d630ab59eda8612c5130b1a045504f1b33fdccf56cf0a9f89686a85222dbfbd8"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bc5169846a9d2dcffe6efd9f8a1b16879e72d5609fc3ac6eab6a431721deb354"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1642104f7081c00ba3db8d4569b72b73971754771bf5b418db4db87e160e897c"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fd4ac647e6d0c79ff83afcc27f5e5f5302f4a0652e5e0bc67e7718bfd64af729"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cc97e45d43d49284b1ea27410bd1047eabfaeda21989a71d124e4f0a940b6ca5"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8d998be822a8f385b6df75c1aec0289665880a347e43e9c1e016e5926ed3075f"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a50773f9686e9e47c88ca67e94c5e713a8fa9f68c7295c7424f7ebb9c5cc2f69"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"526d3c18090757999184bac47f2373e09cdb51cef2d5f5897d75fc7a752d5793"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a3b696a41ae937b65aa3f6e3ea20879c053e2aed23e0c49bb7644d50b0f6eecc"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3bc694df2d37c07722003693e23be3f4c09f673e9521918de1bc978c0e917ba4"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5f073a422aa2d9c4b38de9165168b7ce492ef0909544e62ae8875523342b2532"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"85cc06f8f110db9b46600bb6ccb938394eb24c4f04a2f7273985b9d163d9dcf7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d8f2b80be2939dc4dcc2c97d92935c70f6cb4cf7d9dd517517088f83a3d53fa7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c7e95ecd6b285ca4d9a30615b3d325cb15e2420db3bfedb7c9204ce62db14b5d"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5b53f23d40d6e5076d915391b945d7a2d88efa89c446fc342d5dc193bec9699c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"59cd62d2af1eabeeed4835f733c13188b2ef8f43eb68e836ee09a9e79c3a2dbb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7a1859add890d0bfb834ee004e858322f090243d5b5e0c4a13222a9db24ef8f4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fbdc2175e5d85ab4251c85db8ff7f1f18f3ce21842df3ffc118efb5d0ca3a1e2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3253caea12c1924dab5d40f0e01114ef03de2f0a705629673e9eec6624931136"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"24e7667b2c9b666d2dda6f34b58d13040d8bcc53dd038f7909752121e045519e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ba58702a81e8d107bef38c09a6ce41dce82e379404d70e014c65520343ed11d2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"29d79f6d8bd10505f4e2141a6749dc56ae22a695b777c6bd4776d1ea6625d1f9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"09af0a2cbce60be5e61fa867e7d2facd6d05c5786fc85a15413bda6732ac8232"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"39366f922ff645683a8baa0c9ebb218619c732ba7629258bef0241b44a246865"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb6758095e86745db7e711aa45a3501b4f0d48ce2bec774d296c7596b590b22e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"81a03deb167b45a83d0e543c5492db7e196bd2a57064d3b0be22a894a4076c6e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"65c1042bfcfb708af89b66a8978f8cc32bea1ff4791d2ed0cc014084e01deb41"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ceac4a2711a64944e6b27e4815c09761ee5775a328b8ce9c5cfc2d1f82f93a7a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0b83de4c8490e3e958321df8bd4902e8dcf8b43f4ede958214a5343e13610fd6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9172e239e8e6a6de8f263bb4cb08610e9768c0fd5b5c6930afe7f21dd101b14f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"89667be1281d060cb0ea0ff8e3ac30b2709ecf66b07620b2b2510daafc9cfc9f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6207e153acef54f68e455a4a5eb05fcca2831ee7f4dd9bf60df303df1d86ee50"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4bb9c97d2416ae8ebabed9cc00755028ad5a1efcd8007dce6b46f7380ca930c4"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ad83c4da1c9d8c9bf88585013b42417963a88b208c25cdabbb5da5c380327831"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d3ec0aeaa4a8e640b7afe52807c67523e151ec899fab43e00c09c813c22eee61"},"taxa":[{"id":"CWE-1188","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-693","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"46c1473eb211a8bb75ca70208fd8fa2d5613539efdb8942bd8384c54bcfafedc"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"75e10512107fa6839301233bfc37f925df22e72801dad9b7462d01ccd8181788"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0cd1fc8f927bb316ed0e54fd16cb5ade7bb0ad023dd5f53ad58535869e98eae7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5db27cd9ca59883e6947d9ba0046864b33edab056c64eec0e5ebb4747dac0423"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d3633b58b08a3feda4ae817abe85c3277518968e3abc7ab365a5b898646a269e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6375a4d75dc69cae9b90467c9d43ffdf3a90682818561c243fa5d9c276e68cf7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"51dffe085a4ae4c9a1045e035cd48f1b4b5fc760bbe3db4372ffa6e05e3d3d41"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"740f9bb681ce614392365760f6aa004e55c00feee650ab5c1ee6186a6f0e9584"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"313303c81c06c21c8615e771d19ea69ddd60dc7d384caa508c9d12b91fa5dbc9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a2f65ec366eb8d20ac4096a235f48f744773721223b4666eedaa5a70799eb777"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"17baebcccebd8d739440e7ac6b32cb4966329f35f3f26a57a1de211e023acb4d"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1c5daecdf87a11068b21787c6f01c08ad93dca66cebe24e8ae703a4402cc49ce"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9a5f04b6b536ac7ba8dc6f458cc65ee4ddc4ca8d1689573734725f286f58003a"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fa023a05c89ee6db1aac435557788083ee3058673bcf6ff6aca2ce39eed8437c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6ee0aa8a93b53ace1a0ffcde1a433b776bdacfd64de7d1fe3862912e9fbb7a36"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c241f2969de02561b59e9c567ad92938cc1aa8d18bd3c1b8f77b8b7b1efeb0f9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e65d655a37020b5f5d6667fa18fdd1ebb6617c8544062319e2137f4ba7418069"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"08f9af6afeaa6358a8d7aae0777629820db73bbbbe382f4e55208b66c9ad9e0c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"91f4d0264718881d5c2e47d88af5d262250d10e32354867f65b42e3c843a6ffb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c61c23445315b630314ce372eee0827de24f2f9e1f1a19c49e2b464bebc1983c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ed32cdd35418a308ce1d68b5bb81fcad84fb40b017d4d8d7ac169daeb0ffa1b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0592b53dd847d2b48067a0f2662bdbb6437297425ebd37ab9bf5506ba0f37885"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9aa4e3961f080d7bfebb15de12e909d1c508031e7c0cfae6094f8195ed372dea"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8de9a9cc06dcb4554dfe4bb15e1cc3e0d0ddc6b8ef393cdd44fe3eeafa68c074"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"503111d8b3d2ee3f876b345648322e45e172f9ee8fe576b7f19e08a9e96ce2a6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9f7c63b85072ca583d3bdd8a92af4c138a54f4cfcc714cd8ab534935286dcbf3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ec6bdd4c414124c1e55e0aaafc51f018edd1e99b43c670b0d2e226430f8ac16c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d5d2d528f958af224543afadb86a5eb71127d498182383836b3e19824164610d"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"388c21f35c30b399ead47df0a85a419047ed6a2ad69a2c5ed97eb024a078e238"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4032d0d2a53362f15b785cd1155869755981b17a0982a18fab63992896ac0afe"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7624815cf10472917c7c616160f01125c64a93dee46ca067c2411fe93ecb49c0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"99c7c3625e77c249d11becc2cd0a2798b019847d594470011cbf37e5faad41ea"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d24d622c401ed2fef276962be16677494c6c83f1ab189afed0b699f961857c45"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7b812922c84d357b1b8f15c7a2090b264fac1ccceb32dd52f31aa5b946ed5b3d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4cd37dda098e17235de326d8eb00469695e3805888ef0a220db2051523718e85"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"85df0e16fb3951c6f910eb7051bbaa31f6e0186810910b33ffe587dc4edb7991"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"60c8b22aafcfe3456833bd3349c1fd4cbca2c83aa7dafe775f6d7c8c394e5d10"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1553f6edaa2c76e984ad9ce9c4f3ba652ce095f754ef001d40f8ea3e9fd7af1e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a5313e9743dad4de2eea73c6f8415b75ecf5c6c34611d3702b01d80aecdc51ec"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fec79db6166beb7ab4efbdae3dc41eeda4e595e1dbe0f50d0121c4852a3edecd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a9905f98254538d86d26ce508842665c76a752cbb132dd87c3fef913900f2b20"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"81cdefcdcd574e2bc6ce7094d1cfa7be52a15fc1a43e82e063b397cfd595bd94"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"86f426753f8c0016574b98f76c3bfb286dcfdbe2f3e86f227aaccf5762ad714d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"843c7fd867c4b53db61462b0f70f8efff6b370067d48c952c827339bb3bd121e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8ea5b3d1735169814537310d6a63e6e1fe0b0146d04ec860220b418f7e3adeda"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f2e0693517c2a1d2de952cab05e0f53faffb370e66a3f97c9f990b1c2f6912de"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d7ca93bbbcf545f1c79bab704a97613e3f6161fd03543be773db810fd02df4ee"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3a827f07d69467f3a3c691e611a31773e27b0c26d43f91286518943f98a68ed0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9b9550f391302012cf6f7a577d3c84169f220948d2c1b7dcfe6570d1a18dc08b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"716c5b4b6133a0f87af165805f89625daf500a0bfebbdd5c45fee2c2d7518d76"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ddc45e2f5783fe785f614fccf4132f779df586f45d5ff79eec0b475876488145"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"75898ad492e2fec3e2c204690c1c94c9f6c260121166a2094e8e28ef5a4c70a7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"990c3120cc914dc85ee58c2728007dae419c0fae41ff1834166c0abc930b4192"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b2f17470f981cd574e6a1b8cca7f9180a5b77cd2d1ca2863dbe293913de07782"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c81d4e22f9c3c92a2efd7e3a26cf9c802d691868ef89beede7bf37d9dafbf1bd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c72615dc5c113271b9a9a6811c7c339d59329965f92a52733e1fea9322c3fd97"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"71a934167fa95a6bdb22cc04f2d7bc2ffb8aa11c25e96417f61c26eac03e1f41"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f4a0dd4d196402ec5abbccc1b1ea930951bbe848af4fa5d7845df3bc2d37aa2"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9e31fd1422d2b93e04251318c2a183629626ba71d246e3ec2891503b6b0e8e00"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"06b75644f808f6ff25443115edf8be9c55b4fd48f99d9cdd65b2e4539605cc6a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8ea0cd5f1ca1d793666f2261c81a66edc2ca86142034a56f64bb24b9818b7387"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9f69d49dde27026422f63302dc34717f10fd2a95b2e94b78b3c69f3e0b1ebf98"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8b8263b6c0aaa6e20fe88b1d05d12166d7070e597723bbc1c96b198162ed1344"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"557fe5833bc97ee88bc39e8576fcff2938357282fd8bdcc17de86a1bd31afedd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"01e71aa44ddf3e865ccee3bb83d14b210e8e2ad7ac3123f34cd0a385ef0913cf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"867d0704c25c9c70f570ac92600017c9d817863f00c9f4ab09c8022fed45b8c7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d949244ece2eaf2cef0d2a8440463e266adddaffce98ab56b99c170b90c99b43"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"908ec6c158db7ca5fff8aa0360345ac75dfb4e8ff39d28da7b0191d5adc5c77d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"274103c719de63039eae56cb96b4407c16b62e39d8736ea59eaf9e53dc0a1bbe"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9a7b1d5e707dfcf2af5c31fa445ccbb0062a861ddb4281912bfff04e9d68e84c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6823976f9540880cf8c237c5c7400610cab32469117e6694b3be43523be6dbee"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0d1038e80eedc92dc334b474869ad6a22006f520aa3965fa5a4e78de22c49637"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e11ad25ca36f1133109f27a484b479aca4db1812dc1fc919436b04f2b333eafa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"234b51094581f4aec42f99c91716d39af0537c5d1d3ea49a3e4b81b7d1c71f01"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"400a7f0295188d13330318d8461eb10a9442de975cf099960354601add7c3ad7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3b106624c8e9b7f52e3f561f4ffc45de2db073eb2f0a96fc6b4c9a0a1d2159dc"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"45b6b556b67188553b18e30d03d1580afd772ecc67d9a5aecf96618c46c7a9e2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"74b6e53dd81c0278187c43f1d15a9862b07def3b255bf413085aa7d5d35f4c72"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8df72e6e2051e7e795a63dbebaa034135b0babc6ae6e6a4897dae9b9aaf60bc2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"118d5c821bac8862b853b18d0e6dde061532f73106447ca3f1bcd026e9940276"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e98226dca513422d5baae9b53d2b99f378c0cdb190551e9d13d0a3325eacb7c0"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9666ba0989a10c192202c2c385cc646fb1ff097207e54b4d37390b594fa5cd93"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a733dc81343501dad92b5ee882d094ca0257b9f58ce674be68c15762bf7d24da"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a3d8bc31fe5a70c6945855e15e23c52ab516f21bb424128bcc1b70b7233754b5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e7e1a4f67f0cbca2303ba7314f04d024892bfdb621db2dbb300f32bcc621dc72"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1a2b82a4b7c383f494ec4f959bb8bbf80b99c129da6f5a23ad31286585eced0d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"46a877af5aada816e5a08e5c6c542220c992c07b6c34f730589838df50bdfc37"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"506dc14d2f43656a435eb6d7c405747ebaad954232ed63060a79ad44267cf1e6"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"debe074eb23a918473d7e92d7d7daa23e5f70cbef8adb48297229cf7485cfb15"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"910bbea26257e509291052d4df68c27a3a389fce624c2d217be233fac4e484ac"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a9cbb9133bd60569d4f7a28eec04c8b5a49368f16bcdcf1864fd0c0420824b95"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a0277d924fafaa13b037b78103f12e560e46304c58c14c04d418611863ba481e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0a4d70205dd04b8db112b15b2163ce61624d69e4aee4a393eb8af669d6cce78e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a2031bea7eac27a08dca95463136253a8d5ecfb2503470d1d9862233fda5b214"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"da41112742f8ad951c7e7ab4dcce81e0dbdc34e3b93c5c15ff7c05ac1d4dc636"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4da4efca0f862a482b77c89598796f7f1ac8d79c402ed916a35e3e03ec1d6832"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bef421f8bfc3c62f6f25dfdff6f8cac97cb8b7fe2191dc07165b25572269bb1d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"af9a135faa2548a321d8a801c1cc98c90d6437f90a90601e18db190a9747222c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b40d6aba035dae2b8427ae59dc4207eb4a8a22db81edcc1058294951e78f9637"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0cc09f5b49a26f8afe6ea7b6bbd0c784dfbc303258fcc274a151caa7c7c833dd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c848cc929a05772e77c6bef37a342be2be6da27a3ceb118479eb7ac1fabc7a5e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1cc396d9457a9418c4ff3fd126bb129ce2234f6512f736a9145a7b0a138233af"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5beb51ae43e266721ebb8e6c38f88142eab9107109d055a688c34c8e9bb4e084"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2675d3c219910935950ef227a2b5c8b2c6bfc7d6c42c8725597ada4f89012b44"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7782e0ac2d2a6b3ce695e371b21958fb6701b0ae6da267ee1a36ab1cc8b4b874"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"346d67234f30f92aaacae5d6ade8f934c8fb251d3126fef87079b6e900d673ae"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4bc64d08c8c8df1f4fa9cb48b4da4cf42ad3e155381277ae07dd00f5f925d94e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"881862c8e4b91b1f5f5b3325a97f806e7519bb84238743b712fd46d20aaabdd5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"13025a21d588de037432df8a7eaddce62b8d8edf48cb1f5439bfa72879a26fbe"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c94333b61227434212e6fd71947608461eae0595a7d6290d578acd151474d453"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"20e4bbecc360e0c2a32227c056e7eeb658119f109dfb944a1068cc1ad5c5e0c9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f3bd4abe3a62021d854da15fd17c5d3831b5ea4af9ac89a45b89a78f435b2dd9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"78add8441890082322990e076324ac013abb8be8ddd7e5cc9a41fa76029bc525"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"49fc36b1f9701afc751e57d4ae63652188c5956b758b29af12febeaa77d21e5a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"46652f819ffb700e3c194d1fedcbc431b640b22e9ebb09283d531f3601eaea75"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2f97674f4eb622b4bf0b53b62a6c547b9c8071afb239ed70539b2d11b68a3fc1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b8ee10c6c01fa0d99288e02a576b6da032fd2e5e91f651dd7ba61ef6382221f3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"51a5d5a2e8ea855899147054b4f7b296d6771032b79f586ee08eb5c6867c7d03"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7cc6c5e7677ede47a8e68c0f8fd744fb21c0b541b68ebe751670e57b9f81ef73"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"331048eca78ea350144c7edfd6c9b7e9d5c6254a5904af7a45301280953520a5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3292edc8859b678190511bc721e27459d4290f54c686826955f4268a18833b9a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"64d38865e297a1b64d5676747a7b132d49df200cc790ff8f52140ad872c1560c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"34b74c586c1af63f45c1931be064e14465e2ff9ca01ef786509b9ea81ca27fab"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"538d182909f2da05608036b199fa97c272c87b42e9543e79db0a37c47d1dccd5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"adb42bad229373f7629412275ab3960a6a9ccde20bd77d9eaafc9e8a7e3d3c84"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6214f8449cb154fcd3954038d7f4d6a1757ae97675ea43d1308159695004623e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ff32e931d90095fb4372c46cce894a4b77e5d325aa1d7b3f6054fdf4c30cc565"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c97b80eca02da8871067adddb80c7bc9c624f0b3e841258a44899fe793fb809c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a49ec2ef692f00644b4f99bafeacff05d70bb8a9ca672d95d9cfcc543dbe3ddd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8014386c9a2f3b7e5f718ba494cfa83ffd05163a10201aff4bfc21de6fb72792"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"023a11e91a77e98fd226dabc9edc42707b4d2270fd54fcbf6c2bead2dc553824"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f1596a3706ac7f4ba57068aab6023b1f78ceeb5c2afcf94cc4cd56e8c03173e9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6911937b0e3f34a44b1533f5eecd0155f9f83af3d4cbe501d0fd7846c3e198f7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8f2fa88e69744e99d0846abe3f4a38229662469f2f10b48cd7cc1a396a017740"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8f8d3e353308837198a059b90c93a5b709ce0eb65b194ce7883534b3dfec7504"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"287354e089de798f45478cd06e96e0ceb63cea9df4aa6d537ddedea0c8e3b3c3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2554bf42797cd0f3c4663a01bb1df9bb1e894f724a9b14bf3d3c420e4653efc3"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3d34a69131ded2567dc949dcac73448abf13a84341c5e1cf9a29224668dc4d69"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"260ce5eaf33effd177d02612f4205f3f52e99665eaaa769e5c19375f82914a01"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"82eacd2c0bdb604a107c875198e8332ed486cd5057e5dddbdb27abc27964b8a8"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e826f1c00e4f6296999628434854d0366156c70e2f4ce7044491fe73fc3805c9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1f0aa37a870f2ded0654092b5a63e34ed2ee88e0d045609e3045d5c1098574ca"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3314ebae4de7bd78993a87efc324b28e1b7e25b54e11ade72aeea44ff2d68c25"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"13071dfcf26fad6a2b63d8058c95fb37c0ccabba570b8ac00b6fb67910759069"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e7314f258fc64383dc1cd3e861eb58ea59fe5c2b74eef1261946bd9d60ba1164"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"25fd156adec4ecff775662f289cc97c35eaa0dfb1e397bbac56eb205457f94b9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6d74ef3522e2d6207450da8bf522d6a47774f878e78fad14918cd0f7870b9b5e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"49cfdef9e9f87d60fce300431784debf1bdf3362113556fa6844837bdee42dfe"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aed65d2c19ef71987e63d58e0acb30aa68e62cb611674f58f5d1b74934dd0554"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f2170ab721c45041cdae0cbb2ca7c4c352f27f040776aa447f938b98fa63f41e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"db872ee43aa879efe98d0781f6f1f24e53e0a04f452e1a891142da4f38c9281c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ba0cae08ccb207dde4884151bcf5ea15868a069a6d1c303e1d88b051b94092c4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c1765a4795d261235884ef9eff6ad955498d5fa36952dc232430c3defaf65203"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"78108fe438bc9507814b1e40706e86f475cc2d4dad9c4a2becabd5c50fd3bb16"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dfe8acd66d1b0e0b17c104e3ec34f430c0369e6a7ad604e43270c332ed0d6c1a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a7571e690568272afa6b42176ff0c59331bc1b31268d2cbab6a2e120713ac5a8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"57f07d5a587eb8de17fd59f963ecf87508f07be3df82276e0d853a3aab226dcf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"03b69f8da47932b95378ee84c9204715ebdbc4c999c9a3332b96946eb45be3ab"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"817be1217699bdf8985923ad68a4b232b0a21953cae2e8b5e22dfec3863e26ef"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"19656f65e0bf9f9cc33e9b2154cc6d4a3bc9c1f29faaa5ca5b311a866442da20"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"36c1b01ba8ee0f552cb328ce222ad4dc1baa9c9c6cd5f1a5ce83a7b558efb7a0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fb9e589e25eb339b8158a70bae36f91a0fa295cdb7a262b6ff8ecf7cddaedd11"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"de0b400eae51126fc69808b0fee6464a565681686944824985347d3dc8bc275e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8dac77d799f898fd21091eb0fae2549536440bbfb16dbd5a7becf2fcf0842fe6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dc68a3f852f4328410a731134eea9223a0434c00e56978d9f41a98ce640f835e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4e0ac67d85aeaed7e95ca13dbe64ec407519efec2dc8bf4b450c41acc2c05dc2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4c6fdfaa5db9b47cce5bb72cd8e25c40b1946af875f043654f8a0d344b562cd8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"34964f61519c54bcf997dfe9e378edcb61c49a5aaabb901271afbe693174c450"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a64e35040b9ca087d534f20f673c1e2afc578f0eaef4369ca7a681c2c9ef58c9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5947f52b8f6c960737046cdfeeac6cede8f8d5e9aca607824dd6987bd153b207"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cda08820744a170ce94be6021c3a6f463328250c5fc0ec7d514fbf973154d827"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c5fbdc6014d1d8ee3f9e1af84268fcba06133e882ad30d8092330970d6e7ee11"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ef53aadec44d59a63b99a5fef07b577dc578062881b5a30d4d38cff0c625a910"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0a1dfd4bdf3f31408ac43637d5aa82ba608b9a78e3e1ea97d5f5365b300e75cf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2407f043825151160fc2ad543eef23c8e862ab1d6cc5605006e25e4425fef84f"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1ac8771616e46af3bda76a9599f6d751917a3efc5ff66409d7dae21863b71e16"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3ba9237402d20e53acab4577bcb7ab34250a669bd345f06325a03ef19d70e486"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"54891809825a6bdb3ab8e5326e28fa22b8080e7eae251e5b9f97802fb8d6ea89"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8c50e578bd719f8796bc170df2dd609d6bc055f47a427524416c11c8546e1734"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f13f573a006c26a089aaba7a67ec69b5787d01be72bb491e5342ede14dec3094"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3cdd9dbc96c22d78fc6d4702fdd30f688cc3ddf74be082c09a12913552724852"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"46d00f9ee30eef40f397986152922c0d6f5044833d134363a3be55d5f8554249"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"542b7e24fb5c8ee0c0d8b50ab8213b1ee6f248475669aa13c2d6f6f72a91945a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d1fd07b7cc75c7bcc5300d91d1f2ce583a264c4ae988fc769a35cd26475d1283"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b477930e56337a587607604634de313e78d9d9ad7f87e6a9fe592318fe13d9f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"653551e6f2002f942c619c21d37e9b11dfa132308f53f4839f5372be3966dc18"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6584144f8f48ed7ea3dae658b53f5285321d9a57a4480508a8e7b762481871f7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"23f794471d9c427a3937031d303b3e69a4d89b53a2c490d68675b1cb5b9c2df5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"45454ad406ea41d22d731cc6a59281eaf73ae3de0f492e8227c07415106c25af"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f47ca96c6095f25293d304129c722347b195d1c0baa2a0e7b536938ff6b3fc23"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c2ea2b15677903c1ed82497c7f239beadf58c1765b57609286df07b1970a1dcb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6fb91b452cc6b9aedffde018324163dc0a0f18bdbf75b1e1b28c9e8d16d29a71"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1e08e5043c69fa0fdbbcab4664a658b71beb613781623e96e93f9e531c5fe3b3"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0f32d7b0ecd9e9c754b59bca0661b20f69e69e9fd2acd41254b0ae34f8564451"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8a009cfe5029d809b90386a0445ea2b724674ed14cdfd7b506d994c0e88a0b3e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c371889aefb471a44c02f087689749828dfe10123ea2f833d48eed57014b5fb8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"26a72472abad23e090960852ac955726beabae9d190097e3f6bf6d34e56bf65d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d1b3463fae2e4c4b5b087c2b7a47de7dc915e10842f137f8f9024813d245c2c9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"037534c7f675f063644507aaadb02b236ce18ec8ead6a5581453c5edcf69c0b2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"422265833e09ce7e674d88d8fb7bf18d04671b95b6495b7cf2e80d40ddc9fef6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"726e31fff597a6f23502651846e37cd804ea88d59968632bdbb422fdd873b0d2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c09c389ccfe852e11072d91947ac94e8acdaece8cfd4e84b6746946800365f4d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d63785387b8971364d68bde2e967569b0244845b0099bb4b1ab9cdb8383a7c98"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d4c63265b6247fe9a9d5e5f149ebf339dd0da93c70179636415529472bbf112b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b20fc674b311aa0f3cb6d9acc2833df094b768583992bcbb98c82a9e2fe78acd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dd7efa3e61ebac83b1fa2d7d2f249bac1d630300d05a7ee00afedb19d23e7d17"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c4f3943395f87b75aab5b6cc5d19c5fc29a73a168e17f372ef0bf833543ad0c8"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e802d310d2dc8a36b945f2664f3aeeaa16e88f254b9b4a237d7690ec847e829b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fc50bd22b8379fbcfae4cd5c733451358a4b0eb56abf1838e015e00cca355782"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9aa3bdb07afe606d008b7f19402e95de42c482e38603db02a1b65cd7193c0536"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3163da97f22c134d1fe05c6a247e0692c83ecfa7c306288d681da06e5a7a068f"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7f41ea056d1829ff813ae3e8aa9ace731d06fa5b733c3ea45a63d0d9cc19e2f5"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ea664fedd7fffe27d01870a6a496e0cd5af32ff8e0f033c0a8e1f78c2c21100"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9101a5984a2a56f65d843078a0af9a2394aa070eeea9730b011969ef697694d9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ef7989a2231afca209bb377828363a7c3b9b0d2c969dc8be01cb474436eeb8a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"260a060667cb81d7ee7b53a002a5a859444aae277d3e965f9c036540a4a027d5"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7dd58f7d3d8f544ad310d618861357b115b090769a265eb9b80296ab40074849"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e6363e89e8156bf3883d52c0cdde75af85bc941035f46ebe9d7ecb6e08ff92cd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"73759f78ec843c197a5b455202a372f05747e5ba787381afe2fb5d1c082093f0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3961bb3700153a1cec22b6b0edefbee40dccd26b71bce2d3630807f513c2e24"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4aeed0be6bbb2febda0790bc55c0cb4bcc6391987fcdaeba427d545e7523af26"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"da7c0104af9997945e6a4a22f2a1e3bcc2898a9304d915e6cf0b9c40f276ac8b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1e653aadb13b1273456fbc3006123530cf6c7d8518405dbc0c3be338990d96cd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e7780909d00ae6a8aa195802862f00c3352e725d744f205af174bee7eddf120"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3524ed0975c27571957323b1ecd881e65a828c33f2eeac184a805c85fdd7d11a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5cdf83cc972cc6fce3130f785b724683804eb20d6c2aec374010a6ac41783a43"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4f09388ded6c6af25417d2c952a73e3dbcb30770472315dfa10d63e661b768a5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8f504bcfa264b39a7c6e5133bf07f0092adea55a4dc8bdfe6aa63aeb800af752"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"10d339a5ccec8faa56ce8030d0423e533d8327ad24ea2f83ec0c560b851283b2"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aa90935e793050888a3cca469d4daa0adcbbdfbc00dac0cd414d201dd98c6480"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5ea70766cb5f58c3528065d6a6bcac81d3d62248c942d3dc436f521cff737e18"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b679653c9a8d156c7af93feb970ab8fcc0990718be2d5b9713c2cab6e8e5cfb2"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b778ea3e06b7f7c69278045b8b853c9ebedc7d414e8481764389a6c512502729"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4e84804e334f9b2c3e34faafd705b611f39078fe218c6807deb90007de82f5e3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"26c887a1a953b11136c6ff1b127041e675d6f36864cd427cfb6cb84541adc618"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dd2cbd4b30197f4973e55bef83ed463a28ef5f1575ca6dfca83f63e7dbcd3f11"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"05cff57954e4f260ddd41ec814a72baea8efbf05a8bb58c857725ecb04512db1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"950be1d6ff47a5ec8b84a9478bfbb4d82d27859306b9a5fa1a4e81e681fec0f5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5ddf1b5e80a9e7f162362eced660ebf804cca250e797206ce1407de8cd4566f4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3119c7dc5e2fb12647ee5f25dba35805cd7635aaa71348fce74aadbdcdccada4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aaf3e77a751d550832cefb48e1b53e31ed8869ade53f4f4d8f2e819e8b6c6819"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"760222dc186dbb9079c0796f4fd8f7aebc3fdac43f9d4b82590de80c98fb5006"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3c0c75e6fbcd385a86868c7610a1eca435f1c27d0d6d543dc1efb34b023a6b44"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"17c4b1dc27736872be6248b0617da3108a8dbe6ce952606dffd72bc66224844e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bf62833c5d5e0d9c777e6178af8357506d7044f0468bc1d702cc11dcf71cc6db"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e1593889e12212893b890ddad27b8c8a83377a0eb7adbaf6d00427e17de8d84a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"70335ef3357c5e3e98fc07ebd5f78902514bc93896c37b6538c5fea0ff0c4184"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"63043e8585192e017479a8c38a416d23270e0361b86e752abe8c4042d3b824b8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"44f40e2507c4335aa6c8c41536e5665e0dc6c3c39e6f4dfd428cdee2589d0665"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"30da1f4f6fcd2ddf69f706e208777c007c57a40bf925ee8980c964541ca0802b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"834cc6ec2b25e2ebe1d80f6caed0d0ba86fd7140df7b4788e74ed3d38ca99230"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"615b57f8aafc378c9a847065ddf88f9989a2d6809e97bfc0f4d7eacd3d6aab89"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"651b9ba83f4557377228394cc87a982a795156a44a4ae524d4715b5b146e500b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b77b4e650e08995d3496e86c073a2170da2bfa6285aba5342a236d75419e7871"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d1368ce3bafd39a1fafb5f745b8d8152c7d8f4ea2c0032dc7cff89691b4814cb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3eb0ff60f172fa35a4c9201e48ba34c7e2fcee66389102c5cd1f8fa1bd5db07c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e937ad0c5e93cf2927cf03cd607987b37bf7b3a947319ced891479e5783b7efb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"edb6cb2f4150af1ed78e9240b0e600061f0a3e3dc246baa52db5e4341bb2c94d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c78f94f04a01d2bd0e396e3c60deb504d7fed33afe284a424b7ebd618220f2fc"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"262d37108069c660358689c06eab40730f9269a0224a1f3dd99035f32d4da0a8"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"42a7dfcc21508e06ae919f17691b06c9b044e39911760f84cc7fc1e311464ec2"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3bd0e3637a4877b8010d6f036d2dae4587411156f9462961caeb4cd0efa8c5f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f11c857f3585f59a02cead103bdc74aed92efbc4c08d194aa7dd885a0bf865ca"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"63e5d02043823a90c932562820a97eb84e4be56a9a7d1c0b45fe61f0e1b620f2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"802269f6afec33ea50807f160cf3e75d85e4e7b8f74bba5f6c9b9c883886cb1d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e243f09a3349bbc6e3a51ccf389b52efdbfa33fcb8838b51e2956714cf53dec1"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ac0f05a59e90bb88e417d5a7dd4a140fb2c8853c628ad229d28abe40cae553c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b358184295c0c5f83b5e1618c544bce1484148ba7313b487c4daa21bdb9530de"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cb67ea722c1981db3d6ef8d9025ede0c19e2900b0d6f31276c8038a01df10ade"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"99573b50d17c33dd88d7b9fb66e92dcdc6010e7757ead39a99caa476d2606e04"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"09abcbba9db8779e52dbdb4aee2afd011d7614a7f9eb3eb835547c02cc88080e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cec49ddeeead2c822f04e264bb34278e57f69dba701f5adca01bee120cff160c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2a211b41ac6e47455db379cf79349fc286848f3f1df3036ea27e599bee16b619"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e5122db9b0af58204723c85b241c70bbe03781eebced96f6ec5490e03d438303"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d0baac303f6e168a8207afe2856b0a62417d1101d73144f055e5b106af2fe594"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"14881ca838bc2fb7e77817d58458d80bc23ee08be3a890790a8ed7502018af89"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"da5cca5eaa5aa5fbe349839a9d7a9b47ce7da6733896ddae13cb7e7558e8b139"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e464c9f40267141565018993a7e710732805e2611103b65142a9701f845bb8bb"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3c2e6897765275025652cd778623c4daf1c88b267d315553b4b0902305e2f589"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cdc5062dca3c32cb6cc2b2344c7e1f9ca3ac99747c80f665e619fc1d09c6b276"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aa9653889f7d523a9159a33608409b90750afcae2d24a19fec9653d4aa2a1aa9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e05eae770e773778793f251b2c48fe404ef909e69fd5f399fc4ba7a83b8e482"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e7c5b229f7cde5b21acce0a586f5862094b9d6b705029d4d5f603d77fa48d3c8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6fa429ebded2fbd84c7f92f599c3ae7b056ffe120ee7613fd7d49d3e09e70b9f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e9b7920ef7ba794107bbc3e3227deb5dea95c10d6fcdf621233340e92c1f0650"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bd08623920af6b49f6a0262bd68da57f238de821d6949e23ed581e026f598a83"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5b019ca5bdc3a2230d6b3203ac9d280c8fa291647c84257face576ea94241cab"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"60b813dd7aef65aa32b9fc114e133d92e9d2834bbfa0af457153062d760c9ce5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cbeadaa7ef26d47729d514a68286ecded4a4ad2c838a3ef4ac72fdba7303b4b4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ffbd9065b98522f621cad9cb074b7e9566f2d50a8dfb3a67718b7d47b7da188f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e0aeea9cfe22a9dc463f7253f4b3c63c5875bb9c309f70dee077ea9783b99c81"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f8b264a8b55cb935889afad03a8b95bf6caca0c88a6d50ef698cbc23e85ac1ab"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"714fe18a30ccd5799ddada882f978483d70cd599a9ed4e9013da7290fd674f49"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d102d1310d8908669af09c320f0bd1bf3eb16e2a558471f1af09237c76d322e8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8056c98891df9de10c28334c845df457f0ac760fabc16ccc54fb1dd44efc0172"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6aa2e47301fccd889c8fd15fe6b2086b259abda7959b54b6c454631a8c551d51"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"012afcbd4d34182276b228cd782414727cae0b6012eb7580ecffd5051ff55da8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a37135edaeca672fd83224d33763402c735f00e60b40cf7855baa9b75295e5fb"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"532ef0e51668c2ddae2d954d988a3fa03a802ef6e283559b4428b4e081f0fe8c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"57221f20e6eb5ed158b8801865aed965c98b64948bbdbdb9c5b5b3bcffa113c8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9e9cc77728530a76e915b112cab57235193ce4834d25eac4de5f594ee7ee139e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"15a98fdb1bda9cd83871cfa91a663445bf831e33d90295ebd6cd4750be24d9f5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dc2d10e0cbe59b3006b8c7a4838bbce539f0aadf2846951736f911bbfa55fa78"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e3518366e33b4942cd5fc7f91badf3815726c6a8901d414b859d51465b48eec3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"01ac7bc3333a8bd1859129394c8516f2ff7502a42e8e7774931b7621f141ef36"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a8ac20ccffec385fed810702785aa50549daff6654ab7765cb91ea3f81a86184"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bd6a6c3003a7a9f844d4833d1de518b85a6075d3361bfb2508abce4714204ab2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9092effc98d83462ea332e5429b420a39f060b13398d45a025a3cf568d86f2f2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2b38c2b77b64c222eda9023cc73d78848312bf0db62f610d8f767d6b18844d03"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"96fc1afbe120d491ca0ca89c9226d673d3278229f0feaebb7bfadd8ab4048da9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb939d2e915ba1182699f022dff60089001616684321ccd412b89ae7790b6092"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d426646c1e2f2558a48fe38b5469729744771b031e5e1fbbb776d5271ef17ea1"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"80922cef179a39f33af5e0d68eff3939568ceb5fbee4525d580eec90631b41ba"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"163c2d5c5d00cdb3fa8407d7360fe3602a006c718fb8b35180125ceca9d11230"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f6618f85b7e97d1e2fb4c8c884f0d525f9c85c9f57d28288e27e19ba59fe77b3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5ca0adb3b88bb6c731a253eb8bc9123c0ebe3924c2ba54d844f6898ae43747d0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"efe91cfd6e20bd764f5a86f6b2542c45c4c5935534ceb2ba5f20024d219bf41c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2a28e8e66094b067002fc8df699e9ff51c83b0827be941d6d5cfcbd25ccd1730"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"53f1aca828b6c6b0c2285ec22153513ac5b0e81bcdf20f1e6fe1b46b1711281b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"545f25cc7bdcdbd664b7b308fbc5ead419a7ae0160e994748cac8f365dbb1165"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1474a785ae72643735f5ca89f60c90b17a993364254ee168758d54808e5ec239"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"12844961e5ab0bf58be606a42e6b18b74bcea8cf230deb5e90363cc4fa9c2455"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b729e03edb60cf075efff6aac95fb9bb4de581ade962dc50d1c86d635e8020d9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ecadf3fb1b1814b0840438f962c9d95e8ed5ff66f87c9ae13e4dd96f6ab34c9c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e5f93a83bbb6db058d390fb37c1d01ef46a9afce5259e4a9efbeaeb7c6a7912f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d0cf0c34f4b7442c5cdeccb1299be9453b73c9da13c0f3a1899a7e886645fe4e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"08cfedef66eb4fa1882a2ba7a3b476318a6012955aad1c9346601654aa4f5f9c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5ba4d019a451881f8bb4a855d4089c285005ee0d61d4a611fd7744248f8d2597"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ca5093bb9fd02cbe3d71e87001f38ed0cec200366d1f826c27c410616e256978"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1d9b703e78db362d520e196b3d667b94b294ae8c58387ef48944b53e717b1775"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e589ecb2cd4241a85082dd8c8922a7ecb45aac4f6a098b7fd0f3e055133047f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3f7004d40d26eea23c4e85dde79571b23132a974cab67fa9a2f396c7f831a886"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2f0ebc7c02d18663dd3c8e94f82710f3b4e3eceb466706dc35aa074d2f01c953"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a1a68f40ea66490745eac1b22b55d57a58707010946c48ef1033f71c9087bd90"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0bfabf3a86a453029b403d7c17b9fb5904389487b2d82a3026d4cf7b9049f24b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6655288bf7b4229533f4af118b2156ff82f6a7f4eb0d71c87c21a62380f82d79"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f98b64c5eba71b6b52fa4e4a48addb7e23a16c0c4a034c40bb153445b829e8f7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d53fef7d2ebd54c049f7f94d6108c54dc3138d9d2fc6e25261605c786f0a330d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"21f28182d5ead1b8d6bc7bfb744f71226a2845e0b7f552c68be3cfe4b9203f52"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e29f957eb8d0cdfc6fe15b80c83258c4aabec585d5e1d24daa886f032a51db45"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ff3be7a03ec958d5dc9af87475af51722197eefb8c19550c339328ff897b512"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"099f180d9df1c7589b4606a58ff1570ba22606e7921b7bca4d160585c2a3dddd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dae02aa0122fc29f4b44e67843d49c2330e93b23662be7c5dafd7a078fe9736a"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a28b036bb291b5f8567e8e34f9ca4d552a8d5220f0ec2b3c229f7c2a0b5beeae"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a52143fa8747f68c9e043416fcecb2d1231e419573c2cea662771f15a59118aa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b65062353ea8da9cb75a728cc188589f05e15aa9fb94afb076527df88c5fc956"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4bc419c9a1a3b1790e3325dc27a3b262fda70f27d5ea99543bdd91a6900fa32b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cc57236da3b22c297ef2333b9a662eba7ef1ac509d13611e737a53af7ea61b0a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"50455c4b41c6cd2c68c7c495537b9a69559e86a805d59d3e7185cac26f617d71"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2709ab63bb38c4e178c85553bca3396acd279800d317852b0bbeb099acd188a6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"88b2e0a62c6d2395e2a3f4c180ced6a46907c16e9df8f4867aa1fb030aaa1518"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2e56d6a54a00806553df8d52118527c8ea2cda08676f0446000915c1494d3fee"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb1b85fce1165f648e2fb44bfa64aa82886d36159d89a7061f221a37d061856b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a94a49941413acab0f4088fb062ff2b345b2ebf6e5a65629addab6ae7c30cd82"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d4af2fd285ab4970830eca2bfbf8728cf0c1f567c5939dfbb2ebeac9e5ddda87"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"abae725a377005f7fdef42cf69ccfc513e03a653bd8130329546dd19db938a4e"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3a6699fa82a2ac71803b1bf2c86955736bd7790b647f15837b489d938a542315"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e36ad62639b194a5dd174f32baf5f40fb97e6518103c1041f472dfa7e667613f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3c0af1f0e5f1a52427dd8e0bfb44d4f03ba48019e2a95dee4ba6a2af20d0e132"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7ca346e1d5a2a54652b0939ea6b8f0006deccbf312424459ef2eaf62b62511d2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f17df672d240d5cdd293a9a3a91b38e2f60c3bbe0e7fbe0c25b67b2b15526599"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"145bc85ec117636b9cc5f136d7e7b0cacaf583296e1759ae8235e750346831e1"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"afc4fab8aaf91231e1d26c3b60d8f60807059f47d6c77d7eb8a16b56047a3862"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b95ad44cf754565285173f17ae0ee2dc4df461f774deee472fac3316b743dcec"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ffe2247fad47c51aa7c8d7432c55c5a2a39e488316213ac8c1ec4ce3c9c1dbb4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ff48d7431a8cc4cb14b38c66c8c50f1336311e17e92907bc224c6a7ea43a882e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"abb201b09c59038d18afbe04e4e3c4a455536fc1aa80544ba65bce0eea3f09bc"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"78f75b17ac257b3accc4249ec5e296669a92a23863373b0661e180e9b0f5aad8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"da8a52e13c68844d0a1857f6979c5198996df47bdda290870b40c940cacfbe14"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d12dbe3a8c25fc1ebfa6df2f483d838b131f59382b8d3d1be626c099861f6d45"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3078db401bdab8fcf6e8f30853fba99c4bc6fe76c4ba1fd3cc6bbe7dec4fa7ed"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"424e072d1504282c4207fa12953617d1052e87ec5787ed0ba5b4ae4edfb2da9b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f76fe00711849116c2be44cf08e0557be3818f1fe0b6099ad069d97e63188745"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"95a825567cfa732b1ea347f242876bb3b3aeb1a436a00bb06b4f77e1f65914ed"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8bf6b1cc005634e5854aff13676632df8bb9c6dabd9397554af1e7edba69a1af"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5f4de742a77cbd6df9c81e820993d4c9d6aa017c1f3d0ab88b292988ecc68a48"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b895c7d6561f5e81e947ce899a9c251804c34ce6ee09876363392af37b9d38cd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"56ad0bb6ff4740538cd6c1633647c69be4a483df96ff24f0497de00532c1a17d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1f81d2d6a02b6f66e9f43b59565465196aab4b4f888dd0f1d0c5577b2f07ca19"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fb62ff1820e8c1f791b9465d7ddb1200cbd0cd63faec56740e033cdf41ee3024"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b858e22d4a61c8cdacb920313657bd1cc47afb93300e1ef156d85bc28d5920ef"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c2b3fd563a341671f76105f6b127a824097ee4135dd5a61ab6cbc6a58333dbfd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5287e0243f31aacdc8d058e67da2333502aa36805fb40861701f0685d5d473f9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7365e2c262a2cd385189efd6bec02b0ad4462e9db5374b444e4bbbba4defe3c1"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4796d7d9a122e42793ac79dc98f643f0e2ced0e3429dd5b269d543073e1e1443"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6341a1e99eccf5696a214539ae6cdef034bb07e470c5740c289d8ca486a5a170"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"be2e7682233e88e7f77e89ebb19a96ecff34bd68c8c36ccbb3a274a2995e77dd"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c9323bdcf244e9c16fe2c61be6c69e35c033ea73d3807997d3ea9f366b252e5d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b2418c04de4142d3d5ecc8c63dca6ea251f30de82754e610400dbeeb24ae34fb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3a50c63875ff9e0778a47c85f289ddc57124f55fefe07c5c057e0c082c252eb2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d358b9cd1187a757ed1a23445f032fd037b5900884c89fe19bbee62c4f7cf646"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2c00946b57dd6a0e9cac8348b25e74c347ece004540c72d812e7f3a0824650f5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"631b6736ce5ca6236ac1ef8362bf0a2353c094abee54040136e71f5e4531dc76"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"56044b3c18382e0a0e32cdd541f991e6fb5e3b817facd8f177a596387e2f5e91"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c45b6c04d17681dd3a88a6135d33c5c3c6b8788748479fb909d25637be987ebe"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6a77124d15e09b4b8a3f20cd30d93da93fb27e7c1fb70945b3150b39403f8105"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"57e7e18bc5a3fa03cf9ca181aad22ded79dd29aa162d4d6b621a3db70171f967"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"76b8b2696c3c9069fa463911a15431df9b13f234e5342667d874bd51dd05ac30"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"989799f7339c02bd1f9450768266f6390d4e3170216cdec8e41f9eff747f4ee3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ba9b7b8e1a69cfd9aed708ccec1231e1b2bdda28a2d5f3bdbb7b1c7253ef9b40"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"38590a87af3483cac101254650ad7cb961b9534b5a90885da63b67fb14ba3755"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b02bacaa32323277bb665581ca46782c5ca22f46acfd238ff11e2ff709ffbaa3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0b1d3145dbfad6b87ef0a02e92648c6e6a2fdde8f4a97d1bed507dec04bf1546"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"55d0cc2a2bc6711d9b66af5cf35b77afa25a067a9ea19822a36105b7673d85ee"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ae81188c44515c6f77d621f39f504d4d79ac07d7a8fc4f7319feb8b84db38bc5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"19218c5e0bb819e70438a33e0259520750f950bc7bc5ba36e77a9863f3df14d3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"04ca360f059de57a2ca769a745e52cccfa58d2f7a1683ee4e92b5344d79e1bd5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8e2cd164e8e2b9da4770f2855f0834bffba92e7bcd7510f2a4b88869a297d258"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1e69d5362ad5af4fdb13319a9407971d58347f783e6b786e9c484bbde13abe88"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7354457b562779a7a80638bc854b4d605dafab4abe17160e97e96c6f59a0df19"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"673187c20d9a986de03fa01869810dc04311ef040619fcefa473d8bdcb488f62"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c361c756d417e007180f6c7dcbb134fc7d72993eabc7ef8099f295b67d4ff151"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"79609bb248f571cdff42ca576d2870bc7610ae954d22b49d519ea7d67e5b206d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5f39e4aec141b594e4190d3b019f49c96f8a7d9588bbbc0e61cc19c26c7a78f5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"791e96bb0ef46377fa35bcea930a97c207815af0d0e61963bd150ee2d04a1743"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c7a8c0e6cb05a2017c3cce39c75478bfc55edec095fee6bf077b7cc2d6e7d07f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b717124613cfb2e4cc0ffff8a5f2d89c91cd454f45f416c05ea9dc407415cf9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c40dcb91de007fbaf19b6b6a88150c40ee201e929a1f4e6859fe2c7d8944fd6c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cf3132f732beba1888d05b30b7a33564ab8aa65d173d6c88559454aec57023ac"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"607b42f0491b4a8bbe6cb26c8d7e3a089d26b03433448430ec8bc947817a6a00"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"61bea20c26a1c96f82d39971bab72293bff25b006cb53add12a2e71b4e0eda03"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"32607ef14c9f70136057288bdeca35d7753aa1ccc7c93d230b26487791599cc8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dc1079255e8d16e1c0943950a8729acc71932c230fed9accd1023581f77fc8d6"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f619cf24e6e151504d3382552bd8642749af62b9c5e1831bea390fe447c3603f"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"448df7f88b5a98b5a6fd2fae006a401199e2ead7683d80935847f6b845fabde6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8dc2b25d8fe6d8c38a4eb6e87e8d5f7d73dc676599bbbfa9601bf8086dafbd2a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f414c58c219f135c13b7b3ee9460f062556d7759596169a4b37727656530f3c7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"277c5f0e2cc3ceaf1787be61c509ac06b42c5c7b5b182e1d657dedec5b4c8437"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e9e1c20f67994c706ca5199df9c6cd86f747e14cff60711643517e883564025e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"294f9acd7fd4ef3ef4b6beb4376745a5b0f1df5e153cd7b9a986ce211f86c4ee"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ea54dc91bd7fe4e0bbb2c78c10c2e08300992d1030d6583754329e298b313db5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7786a887522d61d9e6f5c9853efe4fc1838b5e0ee45a86ead9cf04bc145f53a8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"977d89c8779406e43d7996d84364ed9f0137daa17c6bb678d9a896a7f80bd405"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"221f70bbced46a5b39c3c47321d27e98787fa9799b678310d76a2e96fc8d6aca"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7d99c2ebc9385665f2caa3119a2db4d7e51c2e64fadec2150db55533b99161e4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c0e37062180518da7014712c257958ec099e61c006c2e9ea7969d451f0b2add8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"39c3365115e567b9310d73abf755417b6018dbd4082d1c8903689ce02f5f44b0"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f7749adf3e41c505c207180ddc667376f7fe678d7657ea4eca22f1587d4922f3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9593956817166fb5c2acb18fa49ef219505405aeea33520309018733c08a7506"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0ed417d4ef8a04a1a4b9dbe02f209772c78ae332c0a3dfd346858a1eaca0c1b2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aaf40926bac04d83beb07b398438d6bcc4343d5cbd15d8620ae87fd4560ee6b6"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e2d843dca8e985a4fe8d65b58bf561d1e235e029e14b39da8aec70a57d7fcd99"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1509ef5c9ff7a2df38ce714b443836ae2e6633ac666327af388078b5b5a58f61"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ea9fb99db1f296efc086b5b66f362a776604b339d9a4c429249a59113f36a6e9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"450c8ad7734ccea158218a1e9000c7f4a9cc49633ad68c468f5e36629fc806d1"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8b26fb2da6438f164d754f027d1ecd769ba64f9e22f95650a1d5068cc155f3a4"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8af827a5c879c95740ac9e90e14914679deb90162295ebd5d47c168b5e3eb0fa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5e58afc46a5444697bb386e7d9ee01749bdae1f676e85aabaf05207b1b1706bb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb5ac266b5b96af99cd5db4b7ae08c3b14be1f26ff73ee8ab11021172825b8c5"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0d073669cb27848911d55821d831c1a37c16137087939cf097d0139510d6a32a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4df9a24cd52032c6b2e6f4d1259b9e579528e0ccf9d8604f79ca04b4ac342f59"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ae56a8e1030c43da64b175ab1bc5775779c31a4e6b17095290f6bb51ea2798e2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d0073ee9f921e228907508e7a178ce4211bad7f97246ac9dca55503f935a0320"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1f3efbf45f6a641ca43a047c72281600cf752e4ad3f2b1370e00e1b2d221dfb3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"601de87261fdd1e2e9ee38778c7b38a91ae9f0f1868e91821065fe0795061302"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"09255419cf70dba72e214004c913183fa3e2370ed0d6658ef201ab7b0310f03f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f4858a918304c4fe596fa8672b0daef4832f91fc7a7d2f3653cac0893bb68b12"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b506389cba7b47a5ba0674d2e2e32f5e1954606afe2efe399dcb2c8bf7fa4fd3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3b7c654392b48f4610a0af9bd6f9a3081b0abea356d0730152e25a503a7e6962"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ae7298cecff0a7e60fcc18d2d91fe1f8ba7ce6fb73d7e6cb3c9d497175399dcf"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1c2cdb9a9a28982dd65f1381fd598b7af95537945038f841c7949e08c12e590a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dbfd30753c29d08cd92348e16b3582afc2cfac2b7511e4da30cf56757d822808"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dede1d687eee88229905f21b55d22c641718c582c07606dc4f90613f3a8136d9"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7be6d6ff22f3197121cf3240197ba0bd224d0fae0d54c7cb83fb266d57301665"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"781961994b3b88f3dedca59e873f194065170c69322f3e0476e8b2cc2551e01d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a8796a53c6b80f59e009a3c6637a4e4004f44635e3e9f46e135c8dd0c70fbc70"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1df9126d55f73ef4d1a5d9a0c2b1c95d602c0997ca385a5fe34fc8bb19ec8a97"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1454d51c417a23cafd2f404528f3005733e7693a1d8f4fd2f7df9bfc9f81332c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"03b8f291df6a6bc94799f9f234df707df43ef01a8b5a1c8c6b1a31761c963fad"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"331fcb0b13622026297ef7b389d7a482da05487e6fed64187dfb94a101d5b5bd"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2d84345c028442565dfb0cdd7caf1435b707ac8f0a0142127ad9d4baa25b7e0c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b416d71485dac08e3a46c16d729dc6ee1a1ad0711a26ce648183f549865761c"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e63e91f4501a5c0434e72564931f6207a9ea00c6beac0bf5d3da72b389b15a24"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b901e8b2240f72ed20fdc7cf0ce76ca198b7d8296261ccd33d2405785e8f694a"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"76c7aadadbde5be18cc9b7b390c9b947153ccd3bd3c3da82b13095163dbf7024"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"011640849db72e1d86be6628e6f1e2c5c0f072dbee5c31e24d8566a19bbd2b4c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d153c18ae43e082d291a4f5e66102d4d1bf340979625da81355cf7d93e999a9a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"08868765e2200d6019258a5ab7ba4d82b60959ae7667e7593219e437c425904c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dc41a6fbe06284e32cabab073b1fd77d89d4c851f112fa8af87870bcd9ba4030"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"268d5c5f780e351800b73a3836e7d3d147707994b717b4a151a8e931b3c4d37f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9a8777144f1dca694fe3f2315b9ae175db5331f9138997c0fe6a8710f91c77ee"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3dc95906912883e93f514c631de491ae453b6a3cd8e0845606e576f0de8c1631"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"72d212fe2a33ab9686505a9fc6766cae4069c13c3be0510d3196f03687baa93f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fe6c026b30e7ba2ef73b3e749e2dcf15eb1f95ea106c59b72456f0299173ea56"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"892b8e8caf22a61d7081b2d4c2e7eebe40ecb9cfba573cca042440c41ba87acb"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9ad46c7048b0615afef979e372a33ec241e37d284ad48e005b1cd3b5dc225265"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b3e631831cd29c6ab93085d0101612977bd690fad50cf22d61b870926309ab7e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a6fe2cc993a3c150599d2b51344bfd399cb0b788c6ef9a24084fa64f71a4e1a7"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b555ef5e5ce19abc94290aaa0d3ccee6f31f75eec04d57decc212c4ac98b602f"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"90af37a3c712d318e35eeac71fa2ad45c33f24e8ffea00d0c96ed2bf87ce5655"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b34581f61573fff7870e200a1ddb6bce7c4370dea99740ef17731df23af7b292"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2b62046d354de1b6b3d5baf362e764d89bca9cb8b764c4301244e0ee27651d72"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0d95333f040b693ae8911919fa91d7e61d42464257efdab9f806bd2733bb00d8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"90e7bc3c1596446534a45b5b1c31510f072b0bbce471945b23ab75ba7cac0f35"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0d7eb611f22c5aa22f3675286b9b43846bceeb7b37d3f73d5635bf72aeb28737"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b5a322c8b4562d5ccd8a1c2999bfc5634df29981104c316715b7f8036164fe51"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb5903039494c0b973e43bc0d5fde9a4befa088e259cb7e37f93e8b9556c111b"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"581019fe13c2e0f6b66d4f052dfc7570a4555264741fb29c5aa0fcf85784ebfa"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a076e66d02a48a36f08af5fafee889dd3ec54773ed5681c7aae4b1e77bec3aef"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8d901eefeff29765eb6dab5283dfcf601755e4750d3739b433d5f575f3cedf6c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d511640d0d9870dfa49e345e2625ad4da20a0599056617ac9e51330d91a1e96f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ac25bea618a95ba46eed752eed814e2fe28a3fdb93215b02b031b7e3a41468c3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"39cf98a0754ae53000f91b315907faee9e2d475b7977a53e010f3dcdfde26c9d"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b33902bdc2680de50045b765dcee061c805460ce7372206cb52c256705d5dd2d"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a5ea695c6d68fc93e9536007d188e3d4b31f9cce71e7b51d3bd79fc362e772e5"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5fc1498fb920fe3c8eb3947ea147c0cd30b62b71f288bb7b7a47f768a44ff21c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7072c92a1ca3dcf312db691ef18bfcc0324c98f3cd2a413c75ee8b8a409db578"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"65c666c5560160d4ca555440be61c104dea0198eab7c18bea08cba8d612deae6"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3838aed1d133a67474cb8a0c9ddcd722cec22f8b02a8d75a975db1afe737ac54"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9626acaa684f6ec7be842cc42098b5d7e18e1b9b72bc58929b0d3c609988542c"}},{"ruleId":"D34","level":"error","message":{"text":"Orphaned knowledge: No living knowledge remains for this large file \u2014 its last meaningful change has decayed away; if it breaks, no one currently understands it. Schedule a read-through / add characterisation tests before it bites."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d3c29f3c5084cd0f2498c6c3e9987669fa3ec49e73f27d66323a27b3da69d715"}},{"ruleId":"D34","level":"error","message":{"text":"Orphaned knowledge: No living knowledge remains for this large file \u2014 its last meaningful change has decayed away; if it breaks, no one currently understands it. Schedule a read-through / add characterisation tests before it bites."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef881417d12aa102453e44307a643a8dc0c6b60abfef5bc5a1ac0d5e25c87812"}},{"ruleId":"D34","level":"error","message":{"text":"Orphaned knowledge: No living knowledge remains for this large file \u2014 its last meaningful change has decayed away; if it breaks, no one currently understands it. Schedule a read-through / add characterisation tests before it bites."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"7c799f70fe2dbf47688a4fc54ca4739d2f20b884610095e168f533e74a540093"}},{"ruleId":"D34","level":"error","message":{"text":"Orphaned knowledge: No living knowledge remains for this large file \u2014 its last meaningful change has decayed away; if it breaks, no one currently understands it. Schedule a read-through / add characterisation tests before it bites."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/activation_offload.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b2065bd538da0f091c8ec876a17fa8cb933ac93bf088af46fa8a6171a3685a6"}},{"ruleId":"D34","level":"error","message":{"text":"Orphaned knowledge: No living knowledge remains for this large file \u2014 its last meaningful change has decayed away; if it breaks, no one currently understands it. Schedule a read-through / add characterisation tests before it bites."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/rollout_viewer.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"dfad9e2b82ffc3741e5d87ee76b8906b0f5d200857f0ff323cbb63a3639fb7da"}},{"ruleId":"D34","level":"note","message":{"text":"Further orphaned files (smaller): 35 smaller file(s) also have no living knowledge \u2014 folded into the freshness score and metrics rather than raised one row each \u2014 most significant first: verl/utils/reward_score/prime_math/grader.py, verl/utils/kernel/fp8_kernel.py, verl/utils/reward_score/prime_math/__init__.py, verl/utils/fs.py, verl/models/transformers/llama.py, verl/utils/profiler/performance.py, verl/single_controller/base/worker_group.py, verl/workers/engine/automodel/utils.py (and 27 more) (40 orphaned of 272 analysed files in total, counted over production source files of roughly 2,400 bytes or more, excluding vendored, generated and example/demo trees and test files identified by path convention, largest first; 272 of the 357 production source files in this repository met that bar). Attach the read to the next change that touches one of them: have a second person review that change, and leave behind a short comment or test recording what the file is for, so the knowledge comes back at the cost of a change you were making anyway."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"ce861fd78f6935114d3a342cb90ad25870f984e1042954fcbbe27c0e23be3658"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ac08c1ceafb954bf0edc07b110a52d37e020d781e9977f7744a68262a559aea"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/fp8_kernel.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"7cd3f70b08d380b80d884aa77b9e5e70bb55a4ecf875ecff1f81c375f84f1375"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"48014708549200f44d2d38ad8420f3f36a1e56557d840c7bd64b8915f8d4a312"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fs.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5513309715dd7cfccf08d0c055f66cfe59c72906842ecb6df59be0466072ed03"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/llama.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae2c8fc72f886a5509c689402b675dac8fd4c6fbd80b4cfa5feb15cba7104bf7"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/performance.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a84a5c428826fc0450ecba5c260412f74508f6a38fd2b4dd76aa05e1192cac86"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/base/worker_group.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"99dde8f197246b09a5049f9050448d78249aa495b1d8878d4229b9030ad775a5"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/automodel/utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4388e7580aa05fdde9e4d1ad82227a902c98eca1a3683105da21f2f6cf88f08d"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/checkpoint_handler.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"dfef9272831b8cbdb322b76f32e040ee9fecc8f9c5ae9889349a31b25bfe6940"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/rlla.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c7a7016a662e8ddda5595ed1ee94b18692acac2350b90b543d1ba094fdf2f28b"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/tiled_mlp.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e7ebe3c75feff3e94ce7add33e4c447cb162d85b8dee8799cc35b5e63abf7468"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/kimi_vl.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1d0798f4229f0404a86e0d212accdc98e28edea9d76c33b8f28b4ab9d2209625"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/hf_rollout.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b18cac2d1f7d07ef8b32a6681a4cfff75ce787a9f7e31631f1bb5da1faf79409"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/prefix_grouper_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed77e1e1c47364b798b0cff73a9f1d45b48018cc1c018dd9fc16582c877ad47d"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/main_generation_server.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d3714a48cd90b802526898a39b7f3328217f2c24d89ecaf17532dd289bd0ecc"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/unittest/simple_streaming_demo.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6ce790cd9a18cf80759cafbfa75f09c3a38f315b81e7a3d30b2f1679b43abb59"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/math_normalize.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e719686ca23b484e470c7607254602fa685e817af064ee99a0939c355f86fbf"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rm_dataset.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b309e1e5dcf36799a6cc42980bf3dc66faee75665860ab5a3942f2b6be4ee216"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/tokenizer.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"abeca56c6e703d55e13f6a6b532273e15867d25ef66436d136d8e5380ed4cac7"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/batch.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a14c79b7bf07f9abd49ddc4d6ca69010dbdfdfa52a4f698e32feb88644ae125a"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/__init__.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d87336ffd735dd425967a7f697262ad5a57381b5fe03336696051bf76661694a"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/naive/naive_rollout.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e28efa4c0666f3216d4a246f42c89c34f02a573769d196f0205f443d63369862"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/logger/aggregate_logger.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7cc35d8eef287d79671eefda375e23c8cfd4e62177f090a1f5d7f2422dac395"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/apertus.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9361f2492fcd91138595232fcd969b2e50d8c187048ea729037950af498afb87"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fp8_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"044a74b0194b9a748a0e9771c9d8b112569a7e92f1e82469f41168af567cfdbe"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/hdfs_io.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"852c806874cfb49dc544d9e5f68cbefc676fb9e8f007f9a33354879f004ab587"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/vision_utils.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa2bcb8d5be9f681abf7bbbef84ae3f0f410fc9d48dc990885e995e5dde63427"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/tools/schemas.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ddbc05d6a23410593a4dddcf6aa3966aa113f66ea39979e084c957c66bb67db"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/gdpo.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc781dffe634550694d7ef097022588b85c5f5b6045b15dc1669693f22242211"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/base_config.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"32081dcafda4f619944c6c8d5f41de113a9ac472d4ce12b375064384e9957b7c"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/debug/trajectory_tracker.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"96b0de4ec29e0d218f8003c555f69338166ea45161542eeb4234c790417f84b4"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/__init__.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b4c65dfbcaa93f0ac3b6e5c5fda61b3c5eed3bcf3a5e9912de4da658e6b407c"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/rendezvous/ray_backend.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"12a371513857b5c35a0d5895f283ccba5caa420871de7d3678bff164537e4298"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/gsm8k.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e831b9f877a71b95f79532cd9c65c487ac379def407ae53edf54b70785ca4f82"}},{"ruleId":"D34","level":"note","message":{"text":"Orphaned file: No one still active in this repository holds living knowledge of this file: everyone who made a meaningful change to it has gone quiet, or what the current team did to it (moves, reformatting, log-level or import edits, renames) never needed understanding it. If it breaks, no one currently understands it. Attach the read to the next change that touches it: have a second person review that change, and leave behind a short comment or test recording what the file is for."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/pipeline_parallel.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ce3b1e00df78adb2d328d948d4124e0c2a3315e16aac4e6debea35f4f1a13c2"}},{"ruleId":"D35","level":"warning","message":{"text":"Change coupling: engine.py \u2194 __init__.py: \u0060verl/workers/config/engine.py\u0060 and \u0060verl/workers/engine/__init__.py\u0060 change together 62% of the time (8 of the 13 commits that touched whichever of the two files changed less often, counting a file under its earlier names as well \u2014 a repo-wide or module-wide sweep is evidence about the sweep rather than about any pair inside it and is left out of BOTH sides of this ratio, while a dependency bump, a formatter/rename sweep, or a commit whose edit to one of the two files was a tool directive such as //go:generate or whitespace only is left out of the shared count ONLY, so the two sides are not taken over identical commit sets) with no explicit dependency \u2014 the edge is real but nothing declares it. Read the pair before acting: if one registers itself into the other through a hook or an initialiser, the missing dependency is DELIBERATE \u2014 the registration is the link, and it is meant not to be an import \u2014 and the thing to add is a comment on each side naming the other, not a merge; if they simply belong together, co-locate them; if neither holds, the coupling is hidden and worth breaking. You can check this without leaving the row: of the 8 shared commits counted here, the most recent 3 are \u0060d4701e4e\u0060 [ci, trainer] feat: add fsdpturbo backend engine support. (#7362); \u0060859c7129\u0060 [ci, trainer] feat: remove mindspeedllm backend engine support. (#7374); \u00602eb9cb86\u0060 [ci, trainer] fix: fix code, scripts and st for mindspeedllm backend \u2026 \u2014 run \u0060git show\u0060 on any of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/engine.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"70070171b082e5f906d751186493f4c50bc2695612f630d9df61395331e04379"}},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b213f6eedd4b140d0bc37bdf1496f72811a643f34064f12518b32e9e83bcfc7"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0e17f71490e4d120a48b2b2881ab866c93b272bef2febb673a3e8e42b2c288ab"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb00976a698a5d68999b7ee6d27206fd374e916853e7ff1ead5eed42386f043f"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"90f83b4fa27db32740afe9540c905f3c0499caed87f61049a8a903ecc95b41c3"},"taxa":[{"id":"CICD-SEC-8","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"39c32d0f845dca349436077a6f11f7c837d534ed0d683d701205015118275ed8"}},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6e75019280a5555f27d96fece081c25f35bfdc1c56189b562ed54998ef7fed35"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4053a7e92c9dcc1fc8084e7d4ef09bf2e9ea065677f0132d5648b556c19bf452"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9a440d38c6b3ba91438cfbeb95592b16f7e61699c8048e7e8c31256c046b91bc"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4371e0d464297b921068e9fd990f1f9247710afe512e7cd250279009e2644f39"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a24d61b8b662facd9716341aeb00188e6004e10bb69682b94e61ab21de5370e8"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"70d500c2e98df18f65474c427261419cf79d7f7dd7a0fb38a96b86fb17f188f3"},"taxa":[{"id":"CICD-SEC-4","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bd665683c92e5c94f09b2f3695697756f5c79f54c06e58f7fc5c422d92624e40"},"taxa":[{"id":"CICD-SEC-4","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d657599f6f99da1927d3377533dfc0888b34c4d84aa7d5579841fd72d0e39bce"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"C2","level":"note","message":{"text":"Thin authorization enforcement: Authorization rules exist but no route guard, auth middleware or handler that refuses a caller was found."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"1240e406e864a89e38d5e3fa370dee11971db94808c3db2fda9b41bf2e5b8efb"}},{"ruleId":"M2","level":"note","message":{"text":"No ADRs: No Architecture Decision Records found \u2014 no conventional ADR directory, no numbered \u0060NNNN-title\u0060 documents in any markup this check reads, and nothing ADR-shaped by content. Design rationale recorded elsewhere (a design-notes tree, a mailing list, pull-request discussion) is not visible to this check and is not re-findable per decision, so a future maintainer cannot ask why one choice was made and get an answer."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"670b3d6e36a756d63097d0dfbf90afd5fc761308800b9354894a07c3f4e4aa14"}},{"ruleId":"M3","level":"note","message":{"text":"No src/ separation: Production code isn\u0027t grouped under a src/ folder \u2014 it\u0027s spread across several top-level directories, so there\u0027s no one place that says \u0027this is the product\u0027."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"fdf7f5b24e313364d10170a5c2542959902fe0d26ed70edef3eaa10ec5bcdb1d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: README.md names \u0060recipe/dapo\u0060, but no file or folder \u0060recipe/dapo\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"b85864071a30ab325207b0475304e4f6aa1b79c8e2996b50e4173a6d35a328ea"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docker/README.md names \u0060docker/Dockerfile.uv.cu129\u0060, but no file or folder \u0060docker/Dockerfile.uv.cu129\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docker/README.md"},"region":{"startLine":194}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c319c0c76069edb471425c312c4b98119c3c81acc73723c98a9cba2cd90002f"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: tests/README.md names \u0060on_cpu.py\u0060, but no file or folder \u0060on_cpu.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/README.md"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"036db9f9bbb27c5ba030209e402dd01b8139ed10dd15c6c54d0d706fb914ab0c"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: .github/workflows/README.md names \u0060run_one_step_off_policy.sh\u0060, but no file or folder \u0060run_one_step_off_policy.sh\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/README.md"},"region":{"startLine":128}}}],"partialFingerprints":{"codehealthFindingId/v1":"244fc51d0a34f7554a4014f5934a9cc8e09f0107e97749464e5b895be1b4b4be"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: .github/workflows/README.md names \u0060run_fully_async_policy_opd.sh\u0060, but no file or folder \u0060run_fully_async_policy_opd.sh\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/README.md"},"region":{"startLine":129}}}],"partialFingerprints":{"codehealthFindingId/v1":"81fd8ac4acecdbfd9c27c908d067a79d9ea23044180e4772cad7c6df8e2f0df4"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060megatron_kl_loss.py\u0060, but no file or folder \u0060megatron_kl_loss.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8ca7728ec35b01c4177aa2aa91fc4bd747bb3a94178a0b9356164af1b1aa1f5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060perf/mfu/actor\u0060, but no file or folder \u0060perf/mfu/actor\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":211}}}],"partialFingerprints":{"codehealthFindingId/v1":"3202c5231b4fa5fc011324f5a1afb6551dd64b70990bb995249baeed1b1da655"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060perf/max_memory_allocated_gb\u0060, but no file or folder \u0060perf/max_memory_allocated_gb\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":211}}}],"partialFingerprints":{"codehealthFindingId/v1":"4a8d962ed0eebe633930c4a56dc336305167704b059ab0300d4b02a56b207c1a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060perf/cpu_memory_used_gb\u0060, but no file or folder \u0060perf/cpu_memory_used_gb\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":211}}}],"partialFingerprints":{"codehealthFindingId/v1":"434028c3c6f8b9d1127948766b327599061a5f10eff1994c9f592f0716e4d48d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060actor/kl_loss\u0060, but no file or folder \u0060actor/kl_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"f39699f65d2785e329e5fca619209b8973cd3d12a7d536975092301c412534d8"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060actor/grad_norm\u0060, but no file or folder \u0060actor/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"43233620f9264f9bebc066ece691a1d26ce27a0c10ccc4c987b5943d717f6b9e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060actor/lr\u0060, but no file or folder \u0060actor/lr\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"4465311ebaf939b35ec0b91c38cb0e4b32773f8fd80e208c60bd2024360b877f"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/async-on-policy-distill.md names \u0060config/runtime_env.yaml\u0060, but no file or folder \u0060config/runtime_env.yaml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/async-on-policy-distill.md"},"region":{"startLine":239}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8c336d13bca5f0a1e7fc103d05039ce12b50070599801b89c789c866c4eb984"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/checkpoint.rst names \u0060ckpt_contents.json\u0060, but no file or folder \u0060ckpt_contents.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/checkpoint.rst"},"region":{"startLine":171}}}],"partialFingerprints":{"codehealthFindingId/v1":"51d51cdf9f1516a8d78cd39923545f1acbfdd9c616671216a6e05327a63ceb58"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/fully_async.md names \u0060trainer/idle_ratio\u0060, but no file or folder \u0060trainer/idle_ratio\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/fully_async.md"},"region":{"startLine":237}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ead2a1b562eab6db297bff907c6e44289f817575c782976b46fa9fd9dab9c26"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/fully_async.md names \u0060recipe/retool\u0060, but no file or folder \u0060recipe/retool\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/fully_async.md"},"region":{"startLine":512}}}],"partialFingerprints":{"codehealthFindingId/v1":"2eb9cc8956929fce989382fc2380f712cec34929b8959b3ad164194e629c06f6"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060GF_SERVER_HTTP_PORT\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"a199bd1ddf0c770e8f07cb53a3bc8134565ef20e1e985c6d2e188bd7d7565027"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060PROMETHEUS_PORT\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e7d02875cb38db393c4b87e180a43c5e90a7ff83aa76fb3f3819bc2407c370f"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060RAY_HEAD_PORT\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"f47ff5b469a906dd6776b424cf1182945afae7e36983c28b376bc0bd7cecd6f2"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060RAY_DASHBOARD_PORT\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ee064ea5c1809b7c0e595f84263c9335d06e8a784b441c26935cd473d885942"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060GRAFANA_PATHS_DATA\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":51}}}],"partialFingerprints":{"codehealthFindingId/v1":"6174a7d1e370ef94a7393412cdb3cc06db101dc697b7e3bd439f8498a3bdc1ff"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060RAY_GRAFANA_HOST\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":52}}}],"partialFingerprints":{"codehealthFindingId/v1":"c943854559b585c583cae6a98e5579048beed883b95acd85fb2e173b841fc119"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/grafana_prometheus.md documents the environment variable \u0060RAY_PROMETHEUS_HOST\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/grafana_prometheus.md"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f6c0d6023734d08482c92a9aaf1a06d8491b72a43b71a6f475a9f31491acf0e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/advance/ppo_lora.rst names \u0060adapter_config.json\u0060, but no file or folder \u0060adapter_config.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/advance/ppo_lora.rst"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"7061b0156a63c587d4a7c3c566cd33f4acd98b5ba8aa4a3454ce87e445c69455"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/dapo.md runs \u0060bash prepare_dapo_data.sh # This downloads the datasets to ${HOME}/verl/data by default\u0060, but \u0060prepare_dapo_data.sh\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/dapo.md"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"f2e7deda98368ce81c9c791997adf2a0ac10533cb3cafb8fde8b08aedc137058"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/dapo.md runs \u0060bash recipe/dapo/run_dapo_qwen2.5_32b.sh # or other scripts\u0060, but \u0060recipe/dapo/run_dapo_qwen2.5_32b.sh\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/dapo.md"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"844ffb0d15c79634187b7c1c792ad0b0e88d342fb60fdccdf69f48428ab70333"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/dppo.md runs \u0060bash prepare_dapo_data.sh # This downloads the datasets to ${HOME}/verl/data by default\u0060, but \u0060prepare_dapo_data.sh\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/dppo.md"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"3dcc7830214ba6f2adb909086ed27e547de1aa7031f13866b1784d7734efe94e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/entropy.md runs \u0060bash recipe/dapo/32b_kl_cov.sh\u0060, but \u0060recipe/dapo/32b_kl_cov.sh\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/entropy.md"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"cdb2f5d902a1b4a4bb9df843c6e27facc3829e008bba9bea07b4dcffa6084453"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/loss\u0060, but no file or folder \u0060actor/distillation/loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":635}}}],"partialFingerprints":{"codehealthFindingId/v1":"f3337f974c21a86cd36147f148907ff26fbb4d390ed65b2c5bacf15b27e0cce9"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/pg_loss\u0060, but no file or folder \u0060actor/pg_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":636}}}],"partialFingerprints":{"codehealthFindingId/v1":"8923dc18b9facda5afeb31d19033c46623a1989690f8ecb2ece11b7267c82df4"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/abs_loss\u0060, but no file or folder \u0060actor/distillation/abs_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":638}}}],"partialFingerprints":{"codehealthFindingId/v1":"c0baacae1a9840ddba4790e225805114488698a6c6e408070e3c864c994cb452"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/loss_min\u0060, but no file or folder \u0060actor/distillation/loss_min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":641}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d99627617e3112f6dc1a601b7123e69b9262432340c6b2707bc82ae3a2688a3"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/loss_max\u0060, but no file or folder \u0060actor/distillation/loss_max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":641}}}],"partialFingerprints":{"codehealthFindingId/v1":"997c72e39da2c7a08e9bc3c6b918d582c527bf1b852145fd2e4922367134f0fe"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/student_mass\u0060, but no file or folder \u0060actor/distillation/student_mass\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":648}}}],"partialFingerprints":{"codehealthFindingId/v1":"671ceda0c8d41457298e227fe69a5f9a493b8233d5e531fafa20847911803252"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/teacher_mass\u0060, but no file or folder \u0060actor/distillation/teacher_mass\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":651}}}],"partialFingerprints":{"codehealthFindingId/v1":"1131463b5e0d09d53e09bce38aeace86754ef48a26cd42034de8a2ed9f87e857"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/student_mass_min\u0060, but no file or folder \u0060actor/distillation/student_mass_min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":654}}}],"partialFingerprints":{"codehealthFindingId/v1":"b957ce76705f6da7bca9c4dcfbcaa3c634e06b5bc9477c0b81333e3a9763f594"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/student_mass_max\u0060, but no file or folder \u0060actor/distillation/student_mass_max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":654}}}],"partialFingerprints":{"codehealthFindingId/v1":"1014c8463eae443d191c4c839912f5354883ee5298b640bf95cfaa420abeb832"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/teacher_mass_min\u0060, but no file or folder \u0060actor/distillation/teacher_mass_min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":657}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9bb08eb65d5f1c71e80e8ab4d0ed099bbc929d562130b23ac0569389a7e5104"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/teacher_mass_max\u0060, but no file or folder \u0060actor/distillation/teacher_mass_max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":657}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5cd813be097593b3a8df823645979a77e9ef4eaaa8abdc5e60718b5c5286e54"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/tail_loss\u0060, but no file or folder \u0060actor/distillation/tail_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":660}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a6a5d3320ce73b51e0510b1cf1b0fff719718b24181c9f145d80679132164cb"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/topk_loss\u0060, but no file or folder \u0060actor/distillation/topk_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":664}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae7e646694e95d0ed5fe9b58b6db67a74dd61a30b208e881d37c4c165ad7c145"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/teacher_tail_mass\u0060, but no file or folder \u0060actor/distillation/teacher_tail_mass\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":668}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5400bb9f52a569e3379514217e17a4f42c265cf62d95181942b00e0da3f9455"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/student_tail_mass\u0060, but no file or folder \u0060actor/distillation/student_tail_mass\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":668}}}],"partialFingerprints":{"codehealthFindingId/v1":"356ce200faaaf14a0a36f74e5d46e6a4ab2f5a9a783074f37bf34a016cf40783"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/overlap_ratio\u0060, but no file or folder \u0060actor/distillation/overlap_ratio\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":672}}}],"partialFingerprints":{"codehealthFindingId/v1":"a57259db6fcce6a07475078021d0099e865745cb5c4c93e8305291f103fa304c"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/opd.md names \u0060actor/distillation/overlap_token_advantage\u0060, but no file or folder \u0060actor/distillation/overlap_token_advantage\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/opd.md"},"region":{"startLine":679}}}],"partialFingerprints":{"codehealthFindingId/v1":"f78faf50fd6fb38bb8fd42a02dd5e7206152bf8261eac0fd3117ec2a830d083d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/rollout_corr.md names \u0060actor/sc_correction\u0060, but no file or folder \u0060actor/sc_correction\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/rollout_corr.md"},"region":{"startLine":679}}}],"partialFingerprints":{"codehealthFindingId/v1":"d6cdbbad9c54958d441c3d5bd69ae30106e782cf8204e7ba7a2a78bbe6bbd4c5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/rollout_corr.md names \u0060actor/sc_train_head_mass\u0060, but no file or folder \u0060actor/sc_train_head_mass\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/rollout_corr.md"},"region":{"startLine":679}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f12a46d89de7de7bed33694d91db286e5ae03110e75b0407d640cc4c3d2c627"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/rollout_corr.md names \u0060actor/sc_support_aligned\u0060, but no file or folder \u0060actor/sc_support_aligned\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/rollout_corr.md"},"region":{"startLine":680}}}],"partialFingerprints":{"codehealthFindingId/v1":"01d212fff7a97d9179627760ccabeea5c6ada96cbc64bedd596a6450e48cd3b5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/rollout_corr.md names \u0060actor/sc_support_unknown\u0060, but no file or folder \u0060actor/sc_support_unknown\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/rollout_corr.md"},"region":{"startLine":680}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f6ec349c87cdae2010237d5ba044251fa88ec98b4a926ee94a6b70127b4bd38"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/spin.md names \u0060spin_trainer.py\u0060, but no file or folder \u0060spin_trainer.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/spin.md"},"region":{"startLine":45}}}],"partialFingerprints":{"codehealthFindingId/v1":"5345ef6b4bef7c04b66826d2e3fa285c54d50354d07409c38f3e3b8fedd44e09"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/spin.md names \u0060main_spin.py\u0060, but no file or folder \u0060main_spin.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/spin.md"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"d1957d6f4754c00e4dfa3ddcdc4df4e5c54d3c786354078484b9177d47c65bc2"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/spin.md names \u0060fsdp_workers.py\u0060, but no file or folder \u0060fsdp_workers.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/spin.md"},"region":{"startLine":156}}}],"partialFingerprints":{"codehealthFindingId/v1":"c8b69633fe7fb82952f05ad51830760dde26a85326fc3518921ba1c6fd55da13"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/spin.md names \u0060dp_actor.py\u0060, but no file or folder \u0060dp_actor.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/spin.md"},"region":{"startLine":157}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee13293a3c7d4a884ba4257791216d673a1a7687c623c2ec597f2f7250eeff8c"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/spin.md names \u0060config/spin_trainer.yaml\u0060, but no file or folder \u0060config/spin_trainer.yaml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/spin.md"},"region":{"startLine":159}}}],"partialFingerprints":{"codehealthFindingId/v1":"c111ce94627826d8a08212231adadf2457eeffb962404b4e681c32f733ac6c0a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/algo/sppo.md runs \u0060bash recipe/sppo/run_qwen2.5-7b_rm.sh\u0060, but \u0060recipe/sppo/run_qwen2.5-7b_rm.sh\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/algo/sppo.md"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"702b4c8ce7619a069d344d07dec2bc9fc410c2438cf57824f051fbbc20b6e324"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/data/transfer_queue.md links to \u0060docs/storage_backends/openyuanrong_datasystem.md\u0060, but \u0060docs/data/docs/storage_backends/openyuanrong_datasystem.md\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/data/transfer_queue.md"},"region":{"startLine":78}}}],"partialFingerprints":{"codehealthFindingId/v1":"66507d272e6f4f87222de9e520caa21a9917d3565950866acddc7e60f448088d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/low_precision/qat.md documents the environment variable \u0060FP8_DEFAULT_CFG\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/low_precision/qat.md"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"a89c42ebf63a76ec4ededef5408cc2b7ba24edb1da13833c40bb44790ac10324"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/perf/nsight_profiling.md names \u0060docker/Dockerfile.vllm.sglang.megatron\u0060, but no file or folder \u0060docker/Dockerfile.vllm.sglang.megatron\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/perf/nsight_profiling.md"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"08f286d815540414cee8c81f25d8a25e9b1714c57036c9af46879700f8a72839"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/perf/perf_tuning.rst documents the environment variable \u0060BACKWARD_POST\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/perf/perf_tuning.rst"},"region":{"startLine":290}}}],"partialFingerprints":{"codehealthFindingId/v1":"242e85400fc963f359944ccff726660203d0f75b74c3e44d05ddd73f47f25395"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/perf/torch_profiling.md names \u0060.json.gz\u0060, but no file or folder \u0060.json.gz\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/perf/torch_profiling.md"},"region":{"startLine":347}}}],"partialFingerprints":{"codehealthFindingId/v1":"006d37887ca4615b1c21a586ce137806c85cb0a852a27046ae75d62210d6e7b5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/perf/verl_profiler_system.md names \u0060nvtx_profiler.py\u0060, but no file or folder \u0060nvtx_profiler.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/perf/verl_profiler_system.md"},"region":{"startLine":59}}}],"partialFingerprints":{"codehealthFindingId/v1":"58d105f4267f01c5dd834e0a90526881bf6f35beb6af0b15d15820fb4b526a6e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/sglang_multiturn/sandbox_fusion.rst names \u0060tests/special_e2e/run_gsm8k_fsdp_sgl_multiturn_sf_tool.sh\u0060, but no file or folder \u0060tests/special_e2e/run_gsm8k_fsdp_sgl_multiturn_sf_tool.sh\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/sglang_multiturn/sandbox_fusion.rst"},"region":{"startLine":221}}}],"partialFingerprints":{"codehealthFindingId/v1":"e88401eb6882c30abe134eab29bb3c00ed71e34a0462e05e53ecc704d3f46ea4"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/checkpoint_engine/README.md documents the environment variable \u0060HCCL_WHITELIST_DISABLE\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/README.md"},"region":{"startLine":39}}}],"partialFingerprints":{"codehealthFindingId/v1":"9c884c8709e8bf502b265465b4810c1833f7fd8409d05d294c68856653c22ddb"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/checkpoint_engine/README.md documents the environment variable \u0060HCCL_INTRA_ROCE_ENABLE\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/README.md"},"region":{"startLine":52}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c9b8857515b80716aac85c99172522259b9211e74beee656f80f6ff6158c287"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/experimental/fully_async_policy/README.md names \u0060trainer/idle_ratio\u0060, but no file or folder \u0060trainer/idle_ratio\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/README.md"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"9dfba6364c412258cfb8d01be7e1125db085f7b8eb16955f113fd51a0bc226cb"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/experimental/fully_async_policy/README.md names \u0060recipe/retool\u0060, but no file or folder \u0060recipe/retool\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/README.md"},"region":{"startLine":511}}}],"partialFingerprints":{"codehealthFindingId/v1":"989e854f58a091e828b58e0a726b65437d78e2b2b4b2ea32b2a8a10e826d3e56"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/experimental/fully_async_policy/README_zh.md names \u0060trainer/idle_ratio\u0060, but no file or folder \u0060trainer/idle_ratio\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/README_zh.md"},"region":{"startLine":193}}}],"partialFingerprints":{"codehealthFindingId/v1":"134245039725c9f213b94ec5eafe735476410114181cf3a50f74fa3429df3633"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/experimental/fully_async_policy/README_zh.md names \u0060recipe/retool\u0060, but no file or folder \u0060recipe/retool\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/README_zh.md"},"region":{"startLine":437}}}],"partialFingerprints":{"codehealthFindingId/v1":"0e48e506ed8d6728f0af23f04249f47ec33e31cccb8c508d1f7c51589423dbcb"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/contribution_guide/ascend_ci_guide.rst names \u0060_ascend.yml\u0060, but no file or folder \u0060_ascend.yml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/contribution_guide/ascend_ci_guide.rst"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"d105026b37a754deb3e553bc371c82764e465f4a5fa0de6b896b6f6dba3f802c"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/contribution_guide/ascend_ci_guide.rst names \u0060_ascend.yml\u0060, but no file or folder \u0060_ascend.yml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/contribution_guide/ascend_ci_guide.rst"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"e673284364d040b05b892145ea962905aec3809503abfe0e54ec4df4f6356cbb"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: verl/experimental/fully_async_policy/dynamic_schedule/README.md links to \u0060./fully_async.md\u0060, but \u0060verl/experimental/fully_async_policy/dynamic_schedule/fully_async.md\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/dynamic_schedule/README.md"},"region":{"startLine":173}}}],"partialFingerprints":{"codehealthFindingId/v1":"b49a957c1ec6849877b735142a90c9a3a364ba8abd764425bf7d1d27cf4f3801"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_loss\u0060, but no file or folder \u0060actor/pg_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":655}}}],"partialFingerprints":{"codehealthFindingId/v1":"b7b83ea9631eba2efdd9c0889337c52206d34da11bb3fff952e4f41ed8af6b55"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/kl_loss\u0060, but no file or folder \u0060actor/kl_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":656}}}],"partialFingerprints":{"codehealthFindingId/v1":"ec1be39c443839b2b79825531903c045a04bca78ef9d65ec7a43edab0da4d91e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/entropy\u0060, but no file or folder \u0060actor/entropy\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":657}}}],"partialFingerprints":{"codehealthFindingId/v1":"a438dbbd24065eb0c6fd1fe20b38b7afde103ad392ca18b83cbb769ea4563d10"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/grad_norm\u0060, but no file or folder \u0060actor/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":658}}}],"partialFingerprints":{"codehealthFindingId/v1":"1fa173e540d6505e5f980713feaa7522220119a359f3d82a3d1a51f8584f5b8a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/lr\u0060, but no file or folder \u0060actor/lr\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":659}}}],"partialFingerprints":{"codehealthFindingId/v1":"fdcef17c09902e8ad606109ff3e6337d6b385869af17788bdfbde0a9749f9620"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_clipfrac\u0060, but no file or folder \u0060actor/pg_clipfrac\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":660}}}],"partialFingerprints":{"codehealthFindingId/v1":"c8e8dd8886a572d2ffac148d2d5da72612fa6b76362b9ce973f3daa4022e5bca"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/ppo_kl\u0060, but no file or folder \u0060actor/ppo_kl\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":661}}}],"partialFingerprints":{"codehealthFindingId/v1":"d1bd1dd19c4ca7cecffe7f59121bf8e3c0363df53215fffa4a7a2851c74f5289"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_clipfrac_lower\u0060, but no file or folder \u0060actor/pg_clipfrac_lower\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":662}}}],"partialFingerprints":{"codehealthFindingId/v1":"87d543be125835663871f6197417e8b4b179b5134012de1bb30fd7a2255b9979"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/reward_kl_penalty\u0060, but no file or folder \u0060actor/reward_kl_penalty\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":663}}}],"partialFingerprints":{"codehealthFindingId/v1":"d787b6536d866c0f7174d024076964af89d4c36a3271c935fef475c53d5527ab"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/reward_kl_penalty_coeff\u0060, but no file or folder \u0060actor/reward_kl_penalty_coeff\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":664}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa85ae4d305ce7c8d4467eba869cd50d360f38bf8d8fc477c769344e441fed8a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/kl_coef\u0060, but no file or folder \u0060actor/kl_coef\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":665}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c0af66c1be566c40da7fd1f39fd97c3b242e40d6e586d253f074304dd0f6b0e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_loss\u0060, but no file or folder \u0060critic/vf_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":671}}}],"partialFingerprints":{"codehealthFindingId/v1":"0fcb583dfdff839a92bce7bc6aa98a620b70bf37f97a4fa611f682d42394f4b2"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_clipfrac\u0060, but no file or folder \u0060critic/vf_clipfrac\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":672}}}],"partialFingerprints":{"codehealthFindingId/v1":"19003b600277dd631df7406e1d8cb02ebf7ac5d6948de2e9ab3bb9cf880b390e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vpred_mean\u0060, but no file or folder \u0060critic/vpred_mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":673}}}],"partialFingerprints":{"codehealthFindingId/v1":"e0835392b18f1e1369ac3034346144bf489d78f4498a128cf84574cf98f56e0a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/grad_norm\u0060, but no file or folder \u0060critic/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":674}}}],"partialFingerprints":{"codehealthFindingId/v1":"63644511e49627738a53862991f89b1bf80555f25b78a3ac23a77a4362bc74b5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/lr\u0060, but no file or folder \u0060critic/lr\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":675}}}],"partialFingerprints":{"codehealthFindingId/v1":"259aa75ea875d775c9a3e426b865ad2cef0b53f8909f5820ae9739b2a02dfdb2"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_explained_var\u0060, but no file or folder \u0060critic/vf_explained_var\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":676}}}],"partialFingerprints":{"codehealthFindingId/v1":"4df7bad4eb89d528146afdb9045c863a900f705ddd92a47efcf664405f694bce"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/mean\u0060, but no file or folder \u0060critic/score/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":682}}}],"partialFingerprints":{"codehealthFindingId/v1":"a0ec81e4c3f42e9ab07f598d0a0f440536b77d91b2bb5f9fd8a3ba43180650f0"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/max\u0060, but no file or folder \u0060critic/score/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":683}}}],"partialFingerprints":{"codehealthFindingId/v1":"43f23dae1c13bd66d8c696352622e71d1f7d3f3e1c4fc21ff571611454de436a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/min\u0060, but no file or folder \u0060critic/score/min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":684}}}],"partialFingerprints":{"codehealthFindingId/v1":"89f12974323654efca85809710f658d393acc7a8945c6ad90da246dbccac3c83"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/mean\u0060, but no file or folder \u0060critic/rewards/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":685}}}],"partialFingerprints":{"codehealthFindingId/v1":"256594b42aebe56e2b4ae9bb99d0fcd596c8884a04be35d9e4077835f1fe96aa"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/max\u0060, but no file or folder \u0060critic/rewards/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":686}}}],"partialFingerprints":{"codehealthFindingId/v1":"a151dbb76eb490df105ac36205dad3b52ed1a6e479dadbd48d0aab83e387f8b8"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/min\u0060, but no file or folder \u0060critic/rewards/min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":687}}}],"partialFingerprints":{"codehealthFindingId/v1":"b123576eb8d3b07a7116898fdff753e2350a8379facaeaab5050f27df51f8cde"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/advantages/mean\u0060, but no file or folder \u0060critic/advantages/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":688}}}],"partialFingerprints":{"codehealthFindingId/v1":"04933e9dc60e29809c792add1ee9e0e9242d81c86d6ec353208ab8853a453f26"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/advantages/max\u0060, but no file or folder \u0060critic/advantages/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":689}}}],"partialFingerprints":{"codehealthFindingId/v1":"8eb175c0f441e9a446c1338745e1b3f5b944b2543fbb483b2c61f0f8460f6c3b"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/en/dev_guide/performance/ascend_profiling.rst names \u0060sglang/python/sglang/srt/model_executor/model_runner.py\u0060, but no file or folder \u0060sglang/python/sglang/srt/model_executor/model_runner.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/en/dev_guide/performance/ascend_profiling.rst"},"region":{"startLine":321}}}],"partialFingerprints":{"codehealthFindingId/v1":"d518c95663f71d8d44262c52034607c6d61c0bef3bc8be4a375702c0193b2f3d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_loss\u0060, but no file or folder \u0060actor/pg_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":655}}}],"partialFingerprints":{"codehealthFindingId/v1":"cbe552dd26246aa74ad83fc575b1c881c5b84acd1bc61250d20ad6ae5babceba"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/kl_loss\u0060, but no file or folder \u0060actor/kl_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":656}}}],"partialFingerprints":{"codehealthFindingId/v1":"efef1f40e3773b9faf548f0ed6c912bb408b82c49c5f671ce6461a534e4d63b6"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/entropy\u0060, but no file or folder \u0060actor/entropy\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":657}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fe672b41ab07d2a7804ce59c0fe67521c0a6d3b0a739a685b300c5b6bad4178"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/grad_norm\u0060, but no file or folder \u0060actor/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":658}}}],"partialFingerprints":{"codehealthFindingId/v1":"b495e2bc78ff906924499dfacda1a36f65fb1ceb1d7f2a0da617873ddb801d43"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/lr\u0060, but no file or folder \u0060actor/lr\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":659}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8cb45e1df1936bdc288bf73904429ee314312422ce7611f6ea4da2e33461dcf"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_clipfrac\u0060, but no file or folder \u0060actor/pg_clipfrac\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":660}}}],"partialFingerprints":{"codehealthFindingId/v1":"7bad1d220d60b0e6089673e17c2193de25147e5d50b97fa6c257187d84247f78"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/ppo_kl\u0060, but no file or folder \u0060actor/ppo_kl\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":661}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e32bde88406f2070bb8622c78393fc13a5ff10623d39b954c0e51a97a9a60aa"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/pg_clipfrac_lower\u0060, but no file or folder \u0060actor/pg_clipfrac_lower\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":662}}}],"partialFingerprints":{"codehealthFindingId/v1":"38aa191b513d43413c544710e1f80a4fa5d6ded5bca089d799ead7b7ea4ed88d"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/reward_kl_penalty\u0060, but no file or folder \u0060actor/reward_kl_penalty\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":663}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1112b6e1ce450914fda269ea543f65348b4c80461f90657cd64caf5fd20bbd5"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/reward_kl_penalty_coeff\u0060, but no file or folder \u0060actor/reward_kl_penalty_coeff\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":664}}}],"partialFingerprints":{"codehealthFindingId/v1":"e53cb3662366304e69bfafdde24cda8e5f807ce9417ab2e3bf60541a6bc1c095"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060actor/kl_coef\u0060, but no file or folder \u0060actor/kl_coef\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":665}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea9ba5dd35715e895dd80bb724088f2a267033c1a23e8045e286a2bf0facd768"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_loss\u0060, but no file or folder \u0060critic/vf_loss\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":671}}}],"partialFingerprints":{"codehealthFindingId/v1":"fc6b98355a60b4c302f6589a9a92d067ad4c1198b4f458291b05339144db1d8a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_clipfrac\u0060, but no file or folder \u0060critic/vf_clipfrac\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":672}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e17fac3d6d0dfa817131a73be9da226c227b17f8a07b2254728ae34a80e8eae"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vpred_mean\u0060, but no file or folder \u0060critic/vpred_mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":673}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae99d69db8861361986a3731dcddf887fcb7658386b7dbe753a5abe5a3ca9b6a"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/grad_norm\u0060, but no file or folder \u0060critic/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":674}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ec3c4e2ff01fcd5af4b1c728d6a9585b5009535533ce41f8109d179d0cfd3ae"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/lr\u0060, but no file or folder \u0060critic/lr\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":675}}}],"partialFingerprints":{"codehealthFindingId/v1":"09943961b784aeebc670bdda78ab8a67d6329cd2c35ce52deb8bf837a27c3521"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/vf_explained_var\u0060, but no file or folder \u0060critic/vf_explained_var\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":676}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1d94c2debbba71c8d2560d09e74b8d2876061c1cc5f670ada1e79d22d1c02ac"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/mean\u0060, but no file or folder \u0060critic/score/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":682}}}],"partialFingerprints":{"codehealthFindingId/v1":"297b432d1084cec39cdb34b645964baaf44534aeb9df0d8ee15fce524ca14b4e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/max\u0060, but no file or folder \u0060critic/score/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":683}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a13fa260446df8039f5ebb916edd6af25595191254382b80afd4ef7f8577350"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/score/min\u0060, but no file or folder \u0060critic/score/min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":684}}}],"partialFingerprints":{"codehealthFindingId/v1":"5652a80e076a794408d791ee630daf46a9de696a1957527b2cd38f2090a8f390"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/mean\u0060, but no file or folder \u0060critic/rewards/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":685}}}],"partialFingerprints":{"codehealthFindingId/v1":"fbcc2f399dfc849de5a3c4c1f8caa56ffa2838ea1cd06fcef849779e0c04baf1"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/max\u0060, but no file or folder \u0060critic/rewards/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":686}}}],"partialFingerprints":{"codehealthFindingId/v1":"540b0f268cac381ac0294fb71607287e699c75240200b8a2892ca047fab5eb10"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/rewards/min\u0060, but no file or folder \u0060critic/rewards/min\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":687}}}],"partialFingerprints":{"codehealthFindingId/v1":"e32c28c93fb8310b3bba332dec6da25d77623e4a172cf042f4ffa52ad83fddd2"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/advantages/mean\u0060, but no file or folder \u0060critic/advantages/mean\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":688}}}],"partialFingerprints":{"codehealthFindingId/v1":"6af132eaee05a33e9222711e8fd6408880b02cf5340eadaaabea6f99dc646833"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md names \u0060critic/advantages/max\u0060, but no file or folder \u0060critic/advantages/max\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/parameter_and_metrics.md"},"region":{"startLine":689}}}],"partialFingerprints":{"codehealthFindingId/v1":"8679ca5ea17fecc755623ee250ea4e7bff42b47c9844fbf95762210b202ddd88"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/model_dev/transfer_to_npu_guide.md names \u0060actor/grad_norm\u0060, but no file or folder \u0060actor/grad_norm\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/model_dev/transfer_to_npu_guide.md"},"region":{"startLine":73}}}],"partialFingerprints":{"codehealthFindingId/v1":"e0087be92b623ddf64d4ec7a88ed98f8ae614aa7f017c58be5fb159e6c2d8328"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/ascend_tutorial/zh/dev_guide/performance/ascend_profiling.rst names \u0060sglang/python/sglang/srt/model_executor/model_runner.py\u0060, but no file or folder \u0060sglang/python/sglang/srt/model_executor/model_runner.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/ascend_tutorial/zh/dev_guide/performance/ascend_profiling.rst"},"region":{"startLine":320}}}],"partialFingerprints":{"codehealthFindingId/v1":"d238b8b7975e75b4807f00d7ac2a193c4016b855d055c479cb0578a16ff23edf"}},{"ruleId":"P3","level":"warning","message":{"text":"SAST runs, but gates no merge: \u0060scorecard.yml\u0060 run(s) a static-analysis scan, but no workflow that runs one is triggered by a pull request (or a merge queue, or an unfiltered push) \u2014 the scan fires on a schedule or a manual dispatch only. A vulnerable change therefore merges clean and is reported on the next scheduled run, by which time it is on the default branch and the only remedy is a follow-up fix. Add the pull-request trigger to the workflow that runs the scan so the finding arrives before the merge rather than after it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"73211886541038635ced0208da9cedd27ed1caa9132fd6aa5e44d2976a4de6d6"}},{"ruleId":"P6","level":"note","message":{"text":"No changelog: No CHANGELOG/HISTORY/RELEASES file \u2014 what shipped when isn\u0027t easy to reconstruct for support or audit. (Versioning/tagging makes releases traceable, but a changelog records the what.)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"dda5aa5aed8cbb292c3ef2b733bc138f614293ae6426c85e98bf31ef330d9415"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060\u0022routed_experts\u0022 in batch.batch and \u0022routed_experts\u0022 in old_log_prob.batch\u0060 appears character-identically in 2 files \u2014 verl/experimental/separation/ray_trainer.py, verl/trainer/ppo/ray_trainer.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/separation/ray_trainer.py"},"region":{"startLine":537}}}],"partialFingerprints":{"codehealthFindingId/v1":"39660a558fc363610ceb99b48cb0ee9f9f38bfdd3f8b99718583b33db3652b72"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060calculate_sum_pi_squared and use_fused_kernels\u0060 appears character-identically in 2 files \u2014 verl/workers/engine/fsdp/transformer_impl.py, verl/workers/engine/megatron/transformer_impl.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":1356}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b0d6ffe6e34ddba60d24faed3ae52feada0ccdccc88c2061f6b4e79cdf304e1"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060config.async_training.use_trainer_do_validate or config.async_training.get( \u0022use_dynamic_resource_scheduling\u0022, False )\u0060 appears character-identically in 2 files \u2014 verl/experimental/fully_async_policy/fully_async_main.py, verl/experimental/fully_async_policy/fully_async_trainer.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_main.py"},"region":{"startLine":170}}}],"partialFingerprints":{"codehealthFindingId/v1":"90fffd32882854509bc5e46ba41caece0b376d01062539f8c05d5e40c63d967b"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060config.num_layers_in_first_pipeline_stage is not None or config.num_layers_in_last_pipeline_stage is not None\u0060 appears character-identically in 2 files \u2014 verl/utils/megatron/router_replay_utils.py, verl/utils/megatron_utils.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_utils.py"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"c802178700298041df18856485334a8736e767bbacac248c1dac9b2c1c0ff74a"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060converter is not None and hasattr(converter, \u0022export_weights\u0022)\u0060 appears character-identically in 2 files \u2014 verl/model_merger/veomni_model_merger.py, verl/workers/engine/veomni/transformer_impl.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/model_merger/veomni_model_merger.py"},"region":{"startLine":353}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fc3f4aa0d9f65f2b75535b94742e1e9987ced67dfa689c76f023b8d05002768"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060disagg is not None and getattr(disagg, \u0022enabled\u0022, False)\u0060 appears character-identically in 3 files \u2014 verl/workers/rollout/llm_server.py, verl/workers/rollout/sglang_rollout/sglang_rollout.py, verl/workers/rollout/vllm_rollout/vllm_rollout.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/llm_server.py"},"region":{"startLine":460}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d5f810046885a60f1633909a47a294cfbdd140a1470d963bc08806fe5b4ff5a"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060distillation_use_topk and not distillation_loss_cfg.use_task_rewards and not distillation_loss_cfg.use_policy_gradient\u0060 appears character-identically in 2 files \u2014 verl/trainer/ppo/ray_trainer.py, verl/trainer/ppo/v1/trainer_base.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1348}}}],"partialFingerprints":{"codehealthFindingId/v1":"f16b5da3d00a128545891c1f76d1d305e112271adcd8537ff8841b47481f9b48"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060drafter is not None and hasattr(drafter, \u0022model\u0022)\u0060 appears character-identically in 2 files \u2014 verl/utils/vllm/vllm_quant_utils.py, verl/workers/rollout/vllm_rollout/utils.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_quant_utils.py"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7fc9d4e3bf112eac79dee45c86d29250e47b83fcaf7da30f0e0da4e57f81c06"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060get_device_name() != \u0022cpu\u0022 and is_device_available()\u0060 appears character-identically in 2 files \u2014 verl/utils/checkpoint/checkpoint_manager.py, verl/utils/checkpoint/megatron_checkpoint_manager.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/checkpoint_manager.py"},"region":{"startLine":207}}}],"partialFingerprints":{"codehealthFindingId/v1":"c6d3ffa419bbde8a7ec2d72530fa7f97261a9c8d0f09ffc7be2297ad087d41c7"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060hasattr(model, \u0022language_model\u0022) and isinstance(model.language_model, GPTModel)\u0060 appears character-identically in 2 files \u2014 verl/models/mcore/model_forward_fused.py, verl/models/mcore/mtp_patch.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/model_forward_fused.py"},"region":{"startLine":163}}}],"partialFingerprints":{"codehealthFindingId/v1":"44bda158d84337cba90f674cead6b6cad643aee82c0fd13a1c1dfa2f85c6f4ee"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060hidden.dim() == 2 and weight.dim() == 2 and labels.dim() == 1\u0060 appears character-identically in 2 files \u2014 verl/utils/kernel/kernels.py, verl/utils/kernel/npu/cann_linear_ce.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":582}}}],"partialFingerprints":{"codehealthFindingId/v1":"bc46c75bfd2ae9b1df2261b304d9534bfe615e50edf3c7b8f118cfc2c12994ee"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060hidden.shape[0] == labels.shape[0] and hidden.shape[1] == weight.shape[1]\u0060 appears character-identically in 2 files \u2014 verl/utils/kernel/kernels.py, verl/utils/kernel/npu/cann_linear_ce.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/kernels.py"},"region":{"startLine":585}}}],"partialFingerprints":{"codehealthFindingId/v1":"b05ce408b12a9ae30cca7e584838889fd9a010e37aa41a6e23b7264b78808de7"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060image_grid_thw is not None or video_grid_thw is not None\u0060 appears character-identically in 3 files \u2014 verl/models/transformers/glm4v.py, verl/models/transformers/qwen2_vl.py, verl/models/transformers/qwen3_vl.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/glm4v.py"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"13d0f2ce1ca9343a8e43e358b8e093903e7ec2f09231a7d41c4b966e0cea7c65"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060image_token_id in input_tokens and remain_images \u003E 0\u0060 appears character-identically in 2 files \u2014 verl/models/transformers/qwen2_vl.py, verl/models/transformers/qwen3_vl.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/transformers/qwen2_vl.py"},"region":{"startLine":99}}}],"partialFingerprints":{"codehealthFindingId/v1":"54d3fd55e8b215055a4706273406fe9e84d39dc023f33e11010472f791ad4f56"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060images is None and videos is None and audios is None\u0060 appears character-identically in 2 files \u2014 verl/utils/dataset/rl_dataset.py, verl/utils/tokenizer/continuous_token.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":220}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c5aab8d3ca9868eb07ddbaeeee3299743af29c192dc16118252230aab4248c9"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060is_last_step or self.global_steps % self.config.trainer.test_freq == 0\u0060 appears character-identically in 2 files \u2014 verl/trainer/ppo/ray_trainer.py, verl/trainer/ppo/v1/trainer_base.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/ray_trainer.py"},"region":{"startLine":1728}}}],"partialFingerprints":{"codehealthFindingId/v1":"2019fa3d62eb510d856c31f8254269d9396d096c4fb09d6f6f68c30f306794d0"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060isinstance(decode_peers, list) and decode_peers\u0060 appears character-identically in 2 files \u2014 verl/workers/rollout/sglang_rollout/async_sglang_server.py, verl/workers/rollout/vllm_rollout/vllm_async_server.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":242}}}],"partialFingerprints":{"codehealthFindingId/v1":"e68eee24c9fa8d68c9d2db8c07d6557508f62279d6e63b62c2f1184ed277b2bb"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060isinstance(token_id, int) and token_id \u003E= 0\u0060 appears character-identically in 2 files \u2014 scripts/chat_template_checker.py, verl/experimental/agent_loop/tool_parser.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":776}}}],"partialFingerprints":{"codehealthFindingId/v1":"f82dfa0dcb3608370db88b5571cd45cdd59ec05e62df2e94b8eb5db8a337a45f"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060lora_rank \u003E 0 or config.actor_rollout_ref.model.get(\u0022lora_adapter_path\u0022) is not None\u0060 appears character-identically in 5 files \u2014 verl/experimental/fully_async_policy/fully_async_trainer.py, verl/experimental/one_step_off_policy/ray_trainer.py, verl/trainer/main_ppo_v0.py, verl/trainer/ppo/ray_trainer.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/fully_async_trainer.py"},"region":{"startLine":100}}}],"partialFingerprints":{"codehealthFindingId/v1":"d140e16a2465e682e5e75f722360c8d95e156092a30ece5d5812dfb132f603e7"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060mbs is not None and mbs_per_gpu is not None\u0060 appears character-identically in 3 files \u2014 verl/utils/config.py, verl/workers/config/actor.py, verl/workers/config/critic.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/config.py"},"region":{"startLine":191}}}],"partialFingerprints":{"codehealthFindingId/v1":"36373fa6e7e6f036b970cd9b1a915074e98473f33148c1ba28c9a0e2cf93efed"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060need_reference_policy(config) and not ref_in_actor\u0060 appears character-identically in 2 files \u2014 verl/trainer/main_ppo_v0.py, verl/trainer/ppo/v1/trainer_base.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/main_ppo_v0.py"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"50e3ba7ada21ecb7cb13c44d6563d3b8414ba01eecca606bde14d911a7819c98"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060new_data.shape != param.shape or new_data.dtype != param.dtype\u0060 appears character-identically in 2 files \u2014 verl/utils/vllm/vllm_fp4_utils.py, verl/utils/vllm/vllm_fp8_utils.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/vllm/vllm_fp4_utils.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9a7e672a117e936fd73a056103584593203f9c0141f9cc6605a420cbcae59a4"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060node[\u0022Alive\u0022] and node[\u0022Resources\u0022].get(\u0022CPU\u0022, 0) \u003E 0\u0060 appears character-identically in 2 files \u2014 verl/experimental/agent_loop/agent_loop.py, verl/experimental/reward_loop/reward_loop.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/agent_loop.py"},"region":{"startLine":1243}}}],"partialFingerprints":{"codehealthFindingId/v1":"51a1039cd0ea4110d36b19d63ee03a4e18ec7f376b31b77e946e379054f99588"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060not hasattr(self, \u0022_rollouter\u0022) or self._rollouter is None\u0060 appears character-identically in 2 files \u2014 verl/experimental/fully_async_policy/dynamic_schedule/default_policy.py, verl/experimental/fully_async_policy/dynamic_schedule/fixed_ratio_policy.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/dynamic_schedule/default_policy.py"},"region":{"startLine":223}}}],"partialFingerprints":{"codehealthFindingId/v1":"5dba5f7b9aaa5f20f942326c00b2280028ae66259f36109573e3e1a3c96b203b"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060not isinstance(token_id, int) or token_id \u003C 0\u0060 appears character-identically in 2 files \u2014 scripts/chat_template_checker.py, verl/utils/tokenizer/continuous_token.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":358}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1ee596584707a6d30d0c63ed16f5c7952a1f1abd36927f668befea0bdb53202"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":205}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf5003f325d85c7b7fb3b2e28baf3f64de04742c09599410c36ab41dd100f441"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":230}}}],"partialFingerprints":{"codehealthFindingId/v1":"e97e52acda6257c513ea734315e0911b6a6ad9b780502d9110d8d290e0d93192"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":404}}}],"partialFingerprints":{"codehealthFindingId/v1":"8e273e665e28992de8dd515b01f069b074da8379cd4e4ced89221df53abf3d8a"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":469}}}],"partialFingerprints":{"codehealthFindingId/v1":"11aa19a2d9e6ac0c67a64b83d083b0fce55c26bd4c1abe8267ce2e52699d0522"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":527}}}],"partialFingerprints":{"codehealthFindingId/v1":"14cca81314f5d73212c6c651435751642160d9a7574135b7b3613f9eed692983"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"d54b53c6a45d70ad88dbff4b6d5506b4953e864966e1eac93074670820f55f03"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/patch.py"},"region":{"startLine":73}}}],"partialFingerprints":{"codehealthFindingId/v1":"dcc81cf82fd451b480dcc324bfcd147a49bfe00cffd7d6f4f1cfb3eddc44b635"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/groupwise.py"},"region":{"startLine":146}}}],"partialFingerprints":{"codehealthFindingId/v1":"87cbf2f8bed898749a68ca7c9220c2e2e7e71dd4f54e055d5690df43a215957c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":209}}}],"partialFingerprints":{"codehealthFindingId/v1":"56045d0609313616a28d286acf7b0b76618036377933d536b4e7619e5a3370e9"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":870}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a955482c409c7ddde2ece7ca35d22c92eeb657cbaaf08b248d886a18df3fee3"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/checkpoint/megatron_checkpoint_manager.py"},"region":{"startLine":1011}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fd7a73c64245e42c48dcb0c16008c53740d3f1ba4aa1f0204bcddeb1fbed145"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_patch.py"},"region":{"startLine":407}}}],"partialFingerprints":{"codehealthFindingId/v1":"68222cbba4a0299ca5428c6ab1214175463c01443db07878610482a5c699a244"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/dist_checkpointing.py"},"region":{"startLine":69}}}],"partialFingerprints":{"codehealthFindingId/v1":"513c02f61a6e42c9d7933b82be3d748f6e07707a9ecb1a88b2a7f97bc3735b34"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/torch_profile.py"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"5f23cf55764d1fd106b7fe0dd4189cf549726e668587a2cce07f0bc52b9dab0c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/torch_profile.py"},"region":{"startLine":60}}}],"partialFingerprints":{"codehealthFindingId/v1":"b978f96cb09418b0da551f09c3e0cbae3e2655a8cf498baf42fe9cd8ca87b06f"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/torch_profile.py"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"2fa6f029fe5a6481cd7ae1b255c030a63cd9dc811b865ada99dd8c10f2322856"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/torch_memory_profile.py"},"region":{"startLine":170}}}],"partialFingerprints":{"codehealthFindingId/v1":"859f0143a1decb5a69f8777c1a89d2b7428f563b6b77610ee504f9a91d1499b8"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/rlla.py"},"region":{"startLine":186}}}],"partialFingerprints":{"codehealthFindingId/v1":"534c8246b7987f84921421185d7400a7c66150a13f89fd228a6a78eedadbbc77"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/math_reward.py"},"region":{"startLine":45}}}],"partialFingerprints":{"codehealthFindingId/v1":"c492c553df74790b2fd4e8002f4da2ca104a2ece105329e24c5fe13f540b424a"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/math_reward.py"},"region":{"startLine":102}}}],"partialFingerprints":{"codehealthFindingId/v1":"6422e8b10260350547009acae0e25e0e2751a4ec8c659c7d9834ddea057cbc12"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/math_reward.py"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"d737f07918b1e035414352cd5c0f46011ca1c972fdac9a6dcb1bbdcbf57f8ba3"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":164}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa99ecabeda989017b25968bbf1212d5cf467fff07eeffeca8b047c595e1d3c3"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"b59558f457a1684320d4702ade711820f614eeceef0fe0d6d9772c6a8cb01506"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":255}}}],"partialFingerprints":{"codehealthFindingId/v1":"1eaab6b4f6ecdcd59b1002fee46233b42d6fb94c7be69db2ed3b8f7c874389e9"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":260}}}],"partialFingerprints":{"codehealthFindingId/v1":"0d9483bd2cab26d20f76facd88be6f701cdc21e7720a711e3737fc7e5dee706c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":290}}}],"partialFingerprints":{"codehealthFindingId/v1":"40b82b9b505b721e5d5103102c154d7217b2466513ec627796515ad499346e90"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":471}}}],"partialFingerprints":{"codehealthFindingId/v1":"f51bc3f65ba0b3d243c5306f2d5a5220439ed9ba0de29994cbeea165f8955283"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/testing_util.py"},"region":{"startLine":489}}}],"partialFingerprints":{"codehealthFindingId/v1":"c0da6280d1baa57d0c7733963ebd119c9810df70ea68dec5bc2c6b12150fad56"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/__init__.py"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"807d70b787d524ea105aac59b5735071d3d1e299344cdc1296c42be46aff1893"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_code/__init__.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e81c0b18ba41a5627e8bce4ffd0be66b9a8974801597893d0c0c1158b83d93a"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/math_normalize.py"},"region":{"startLine":54}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c7af29e9b4eaf1c6888c2f18714b1088bfd8ab871b3f00b964f8ec8ca3e3f1d"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/math_normalize.py"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"12fc01d6c74145a7ecf99b3af5e24b09edfcc0d0dda412015fa06eb78fadd93b"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/math_normalize.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"a588c158f1d79d656ca20ef6a3e79aa584fd83f31b5d9adbc63b27187e791225"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":211}}}],"partialFingerprints":{"codehealthFindingId/v1":"2255112a23478576d587214bce10a0c2ef6eba6bdf7b6969d76095234d403257"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":214}}}],"partialFingerprints":{"codehealthFindingId/v1":"811d843a3df7fa5f1c3fbe106894855477930ce6111ae18da4641a3d1e512571"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":296}}}],"partialFingerprints":{"codehealthFindingId/v1":"3089b0e673aab542debaf9f0e1eb22829eded1c860d5df4a74fb534b10e19178"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":318}}}],"partialFingerprints":{"codehealthFindingId/v1":"daccd146083e8b7d9be96292352bb78c33d1090de98a254351e6375a36c2c860"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":333}}}],"partialFingerprints":{"codehealthFindingId/v1":"80bdefd5691c302538942f297fdba31340d52c5389e763fb9de4316ec0668521"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":347}}}],"partialFingerprints":{"codehealthFindingId/v1":"669b163a9d2b25f01ec1cd3817ed8574323a990bf4fef6c961efe0bb03df1d06"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/grader.py"},"region":{"startLine":357}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8dadb64028e459fe0494f7918329305ca041ca2aa2726a7f150346877b4655c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"41df9ff6a3799bac110e9a78a7244bb11eff82bc7bb36d25f9c8e18af324d7ff"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":95}}}],"partialFingerprints":{"codehealthFindingId/v1":"98449fd920a71cb64e4e868e9200c218969dc8ead01dfa4486849542cf7dcbe3"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":222}}}],"partialFingerprints":{"codehealthFindingId/v1":"a02b89c19d666bc631cef29700a6f51dfdf7e53de6776d6eb5d4443977c048b8"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":313}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f6f14ae3fdf218785d0c4d68dade9d05012116627a85ee13761a7018c2ccbf1"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/prime_math/__init__.py"},"region":{"startLine":408}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f5b4c7fa6d076cfa2ba0375becf98b7acceb07bb6032c1366752bac7f94be88"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/skip/skip_manager.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"019f8accaf3c4f52174e0c8d17ee0d2393d5d9009af19816f6da1cbf5b3b5bbd"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tokenizer/chat_template.py"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"b5d878bcf426902825ee8ad7a727677adf8295a9023d81385b7066b177ee81a0"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/reward_manager/prime.py"},"region":{"startLine":75}}}],"partialFingerprints":{"codehealthFindingId/v1":"b5d76118e03f23c885b808e9e6039a10d26bd54fdf19d1b62f21db65049b31c7"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":103}}}],"partialFingerprints":{"codehealthFindingId/v1":"9753be09f3da7f3a6cba27930ca48ed260ed42cc8b53b55849e0ede39de56481"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"0aef366de5c030900f266f80b969194579dc4de0e32584de171bc2113ab2e798"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed31c722d57793321a2ccfdb5392ed058b218bd4f92506e50c1427b8e4b60e6a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 174 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"0910adb459509158592fd1a980cc7afec464078669416c30a76841585cdafcef"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 226 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":226}}}],"partialFingerprints":{"codehealthFindingId/v1":"be5e78de3a6b61373f82167de01323bb183c2cc76c21ae70bf8c2c9f23ec661d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 235 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":235}}}],"partialFingerprints":{"codehealthFindingId/v1":"7b46b1943c32f997d1c36a7e64dad40b0da37696a1edff224a3c3c7ab0c50027"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 344 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":344}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae0e1ce570b3c686a1b9cead0335df1822623f110d0dc2ad4879028ce9b568fc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 437 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":437}}}],"partialFingerprints":{"codehealthFindingId/v1":"802c23166309eaac81447c267613275af25fc4105a222957b0a45b5e76dbed91"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 529 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nixl_checkpoint_engine.py"},"region":{"startLine":529}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f1b718ad2e837acf59f8ae53520795ab584b2539c146cbd0fcfc847a103d596"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 234 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":234}}}],"partialFingerprints":{"codehealthFindingId/v1":"f8ae10d51bda1a2fe6590e1b410a731744b248ffc023fd063a22e7ad5a0c25a0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 312 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f81660b0005020d55ed448f6bc8a0389484abe24eedc8f4adee1eaa11bb44aa"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 405 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":405}}}],"partialFingerprints":{"codehealthFindingId/v1":"d289f93bc4af6fd3d0a40f2bcc4199200c5d736f782ebbdf7f94e0c352cf21dc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 434 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"747031dfb4a1b9241477a8ecef1655bc3dc0d57b86a7ae484c70f3f46ffe9e78"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 512 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/nccl_checkpoint_engine.py"},"region":{"startLine":512}}}],"partialFingerprints":{"codehealthFindingId/v1":"79520a6ed092b0d0f327d3e6d1352525ea176f8f3616f620b57237d1367840e4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 93 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":93}}}],"partialFingerprints":{"codehealthFindingId/v1":"3991b312b2206d9ac86cbc68aa6003d2c0d2c5f6ce8264859e71b7f7058ac9c3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 97 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"a161ee2778946debf43479e6d0e3422f09e37c3174f39b6e581110556ece7e20"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 122 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"8b0e4a25a57cc5b2f7414566374092aa14570c5c5528dae0e176fa36ba53f315"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 140 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ca1e6d5cfb1bb9fef97ad31663cb693480b6ec3a2c651d485fdaee888f22147"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 147 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":147}}}],"partialFingerprints":{"codehealthFindingId/v1":"daa8575d42ee31c05d83b06424cf582bb9da04e353b2467e5c9a6d6469dad163"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 167 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":167}}}],"partialFingerprints":{"codehealthFindingId/v1":"627536021adf6501633105aaaa4fb80df6d028ead929cd18a34f951259232e68"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 233 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":233}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8a2caeab8cbdaa7022facf97b2009f9adb19c02bde09bb63e4730308887b92e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 325 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/mooncake_checkpoint_engine.py"},"region":{"startLine":325}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d42f7ac860fea222638da30b4dd5bf1695caaa77ff62b0791d4d897a04fcf1e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 358 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":358}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f0bfc4d68db876ffea23e348cc23ef7b20456481cdf0313c795299351d4b059"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 363 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":363}}}],"partialFingerprints":{"codehealthFindingId/v1":"6691a6a100f50561ed4c94c2328d44a92b0b5abd998f7abe36ee980736157235"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 388 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/kimi_checkpoint_engine.py"},"region":{"startLine":388}}}],"partialFingerprints":{"codehealthFindingId/v1":"94f00b62a7bb13b56f4d3a8220b821dc092b559ea5adbb88f74b9ca3e9a2c8d3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 234 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":234}}}],"partialFingerprints":{"codehealthFindingId/v1":"39aa74d18271e16659c21c9ead54b20c54e44ad74d75d24d5c193a6bf841e2d0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 312 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"848fe3eeb8e9a01d4075ffb2008effe2b68d04d4606dbfab4f24b759a058a533"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 390 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/checkpoint_engine/hccl_checkpoint_engine.py"},"region":{"startLine":390}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d178ae6a33de267032b66faa94438a0567eacc13c9153e3bf221098fcc55cf1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 124 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":124}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6e109d12a7831378c31ab28044251e1ba4046fef3607eee8d3d7967895c88e6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 181 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":181}}}],"partialFingerprints":{"codehealthFindingId/v1":"243c482fd9c2c940a5a3a7cb2de3d1a1b241a45e292eeaffeeff5bb79f24aa9e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 221 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":221}}}],"partialFingerprints":{"codehealthFindingId/v1":"fff6da7ace2c5dab28a37f4475ef14c5952343b618a3e96c637321eabb396cef"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 231 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":231}}}],"partialFingerprints":{"codehealthFindingId/v1":"e7a8acfb830906d18e07a80a8b4ddd5f3f8a616952ff933265a1966ff5adadb0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 253 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":253}}}],"partialFingerprints":{"codehealthFindingId/v1":"5df596609d052ad9edd79532bb4080c94d34af85ce9592a7fc2be2b81e32b66c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 265 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":265}}}],"partialFingerprints":{"codehealthFindingId/v1":"fffafd249196ac8475cf93fbf8039a177fa54a9a9fb0961c529327cab84fe8a1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 273 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":273}}}],"partialFingerprints":{"codehealthFindingId/v1":"ec7d89d6ea9ff21c98513bac0cb64c6f2627023efb5b3e363ec90214723d1d77"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 284 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":284}}}],"partialFingerprints":{"codehealthFindingId/v1":"30c2f96a1f7e52faec2c57701c30ca1a2b3f860b78018974d27d705cb1a9de16"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 294 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":294}}}],"partialFingerprints":{"codehealthFindingId/v1":"d7668264ebae74c81491704e56410ecd77bf6dd272bcb3d198dda9a8336e21ff"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 303 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":303}}}],"partialFingerprints":{"codehealthFindingId/v1":"0942d5472db7fd1222a6daff02f6f97b910a79f75374a87adcce5e20e98e0a24"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 314 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":314}}}],"partialFingerprints":{"codehealthFindingId/v1":"a24af50e5f8e4f14b34a77371e517c46c58132c122b2863a29c7b30eefdc811c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 373 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":373}}}],"partialFingerprints":{"codehealthFindingId/v1":"97dbc2cc648f2d792b6b8792858b8633a3e0e05312afde3b8ce73786be342549"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 445 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":445}}}],"partialFingerprints":{"codehealthFindingId/v1":"6084545755176f528fbf7dbba20c0b52dae32af0013d8d7b4cfd373a5d312252"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 504 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":504}}}],"partialFingerprints":{"codehealthFindingId/v1":"b08b82beda81894f73fc39de8645b29df3c14bb04a249b63cc322b2b5b696d23"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 557 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":557}}}],"partialFingerprints":{"codehealthFindingId/v1":"40a6d4dc93b4435d505027fdd5c00e74ae6f908a0047d5b1077ae2a3a79226f0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 697 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":697}}}],"partialFingerprints":{"codehealthFindingId/v1":"b34a194d456a6dc0c5d64f812c506beef27732f1bbabd83fc4d611dc4799b673"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 725 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":725}}}],"partialFingerprints":{"codehealthFindingId/v1":"54121894ac614f43d8b5e747e75d19e18fbea7b6ee44c51d99a92144a2ec786c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 812 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_parser.py"},"region":{"startLine":812}}}],"partialFingerprints":{"codehealthFindingId/v1":"a8800c399267637ffb10d975e472a5fff9fa014b428ba3bbc344c3ef09e21f0d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 179 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":179}}}],"partialFingerprints":{"codehealthFindingId/v1":"d2b97c73abf91de2278dd7d90fbac40e0c94e5fa6c9191d99328381e5172d4b5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 424 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":424}}}],"partialFingerprints":{"codehealthFindingId/v1":"fec6b2e7881f57092074e39d1a6fa073042b91cc7634cbc83d98fdef03b33663"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 491 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/agent_loop/tool_agent_loop.py"},"region":{"startLine":491}}}],"partialFingerprints":{"codehealthFindingId/v1":"823a8ed0a7d678d53d2c0648ff936397749713542b35b2eea9cca75c70be8a68"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 126 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/fully_async_policy/message_queue.py"},"region":{"startLine":126}}}],"partialFingerprints":{"codehealthFindingId/v1":"357fdd7119e56026b04d50521b7c1d6c9ba021a6e91a595839c6ec92f5095a70"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 171 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":171}}}],"partialFingerprints":{"codehealthFindingId/v1":"7decd8530f3246ff5bc3048711b33f4fe594a272e8fef4bbe8d6e7ce75766163"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 174 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"9bc3a633f2f115bf08f36191f55ec5d88d07ad6db9be1b9b956b457b2321ad92"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 180 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"a264232ee462ba190739e16557026ead768adbac827d430815892ba91285a1dc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 183 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":183}}}],"partialFingerprints":{"codehealthFindingId/v1":"e2d1733163680f35fab748fdabd9b864098ddfb51064df915fb3ae452293426b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 193 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":193}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f10296054520b6b8ed0021b692ecc34f45dfcc4ef3a35ff16a56de897146968"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 266 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_loop.py"},"region":{"startLine":266}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1df15180e34e588fb4345e0eb109cbf93f3b81de25fa1af5ee1d0e7556152df"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 288 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/limited.py"},"region":{"startLine":288}}}],"partialFingerprints":{"codehealthFindingId/v1":"886315b9a4aa1cc34a6b07af17cf28abbe2b39907d52a51b2f31d61241a94536"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 452 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/limited.py"},"region":{"startLine":452}}}],"partialFingerprints":{"codehealthFindingId/v1":"fef97680ccec33b16983db3adea0224da3f3b0af1825786f27a0de74e585dff5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 461 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/reward_manager/limited.py"},"region":{"startLine":461}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b1c02dead83714f3a3fd523cdf26ba9b7d5bfd25af9d46188618cee42adccaa"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 74 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":74}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d09813acf6c2523c00e3af2723273f40f0612cd29c243d9a2f0f8887a3e685a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 128 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":128}}}],"partialFingerprints":{"codehealthFindingId/v1":"33a9faacd9972d540404f4d8225b4298400f3ebda1875f5498570e92591e0e58"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 151 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"f15d0059fed297e46440d49d4118c36c8bbd9884db3f8d86be4d4afe8d397bfa"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 162 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":162}}}],"partialFingerprints":{"codehealthFindingId/v1":"1396988f56ab3973b8b6baa9f474ec4139f9c74f2ffdabb0dc19573c7462ece2"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 164 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":164}}}],"partialFingerprints":{"codehealthFindingId/v1":"1bbdc1701298fd77e0f08b80f6f8cb11d8bfd41955471adc45c3e91619e8be48"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 166 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":166}}}],"partialFingerprints":{"codehealthFindingId/v1":"4810f6aaad4ee1e4d38ddee3f6322cd94909d8a8b4f67184ee7d3c3cb06de44d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 169 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":169}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b71a163c9599e6ce02e8105d0fdacf173db826b19da8281cb7fef8db428ee95"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 65 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/inner_sglang_router.py"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"09cb2ccf6ecde3928e61d9c6758ef8cf31c4bab6f38c55f13f31087a25ec5fa5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 72 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/inner_sglang_router.py"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c8b79504a5d7f135efae925fdfd75d47b0c78cb6feb9a0840a778feecc3bff3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 231 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/util.py"},"region":{"startLine":231}}}],"partialFingerprints":{"codehealthFindingId/v1":"9228151eac6dced9e02da4e65f8de904c1476dd15062e05198ea6a33bd175896"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 555 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/patch.py"},"region":{"startLine":555}}}],"partialFingerprints":{"codehealthFindingId/v1":"32584e0381bdb8d9f9a9f8705eb0ba4ee2cd9e489ba74c6cadbb02b22177c426"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 591 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/patch.py"},"region":{"startLine":591}}}],"partialFingerprints":{"codehealthFindingId/v1":"6c1d1f457d677aea4fe905ccf3f0cf3fe82204029d3978f7b62b9eff059288d9"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 600 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/models/mcore/patch.py"},"region":{"startLine":600}}}],"partialFingerprints":{"codehealthFindingId/v1":"888cd058bdef19856d29a204749328f8cf5b92b6b14067d0c57e19aa183e80e1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 118 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/base/worker_group.py"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"80c64e2f3203cdbd743d78dc4e37dc8f493ef564e264761d3667ff0c62ba41b3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 145 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"a4f7d96e9975c44020a995347d1420d29e9f1f222d58c22176f709f52f62d042"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 543 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":543}}}],"partialFingerprints":{"codehealthFindingId/v1":"9a49bad33211d3cb7bc9dcf0ebd2b2c4ae322c20df611cc01d791f7a2a9f9fea"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 670 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":670}}}],"partialFingerprints":{"codehealthFindingId/v1":"642cb2b4c236048d773e31b770790fe21546e40e41d498234c5b99fc3728109d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 673 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/single_controller/ray/base.py"},"region":{"startLine":673}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1ffa7b21c2fff6082512895201eebcc1a8109db6e24f15854871259cdf3fe77"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 195 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":195}}}],"partialFingerprints":{"codehealthFindingId/v1":"e0042c019519883cd01bb9c67a3e0a1f41e8cda85a8bd9bb356a14a8c4072b83"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 296 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_separate_async.py"},"region":{"startLine":296}}}],"partialFingerprints":{"codehealthFindingId/v1":"89236e8f0233b7d65b931ccbcc1fb9db47ed8c521e4ec341b9e4181a77377337"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 305 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":305}}}],"partialFingerprints":{"codehealthFindingId/v1":"21a0e90074a8da6c6465cbfed5df4b806eb4ec138896adf12c3db2bd7fa00f41"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 318 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":318}}}],"partialFingerprints":{"codehealthFindingId/v1":"48052805a708094d39686d11d158d0d6467226d97747b9d3cbd94a9bf7ae4e4a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 642 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":642}}}],"partialFingerprints":{"codehealthFindingId/v1":"0472deebbb7e091eb6a64118f6e1f24bc43c665307d1d2de09a52bb1cb1d4fb8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 649 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":649}}}],"partialFingerprints":{"codehealthFindingId/v1":"f944ef92f5540a6fe8fc853ce53965744fc2efab57847b9c75aecbf61bf7441c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 736 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":736}}}],"partialFingerprints":{"codehealthFindingId/v1":"14f48e05b333d6bf9c8a00bcae80e4f1844f3f557f90d00c14af9c0ee41e0aa3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 761 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":761}}}],"partialFingerprints":{"codehealthFindingId/v1":"c00b9263e2095d1915fab51cc33cbba33a260945e03eed58ee1dc4992d606691"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 773 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":773}}}],"partialFingerprints":{"codehealthFindingId/v1":"eb6f035cad1089ce0262e1cfe8cc7c8bca3086b43a4f22a6aaecfe20e9ba17a4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 787 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":787}}}],"partialFingerprints":{"codehealthFindingId/v1":"c44ea8d55577692dd46d2ef602b5b69b5d0cf5dd87e19dab8d4513f9065d957a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 874 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":874}}}],"partialFingerprints":{"codehealthFindingId/v1":"cf4072b8f0343ca9e831463a7afd3f8e93bbc811f7a0aa3d34d6abb742bc3208"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 878 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":878}}}],"partialFingerprints":{"codehealthFindingId/v1":"32ce3171036a49632e350bdd079cd203403fbdb4929b368aed7a31ca290c8814"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 899 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":899}}}],"partialFingerprints":{"codehealthFindingId/v1":"16f09588e5cc6b8397eb88c4f31186159b6e04ece1b7e333b26ca88e0d5dd86b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 906 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":906}}}],"partialFingerprints":{"codehealthFindingId/v1":"789035d77bf2f41d059434a7ae794bfffb034a4313472f8d836d18fc0d09b3dc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 909 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":909}}}],"partialFingerprints":{"codehealthFindingId/v1":"dbc842fe8629e44f8586d810993d2340e8a1b525765a064529b0b02531194667"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 943 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":943}}}],"partialFingerprints":{"codehealthFindingId/v1":"ffc671b910c3bf270d73560ca32f49a210c58d1fc537e8b9bf3f31357a0cfc04"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 956 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/trainer_base.py"},"region":{"startLine":956}}}],"partialFingerprints":{"codehealthFindingId/v1":"f957c425dcc3d87224cf9dae91b671faa457903e1c5dc4f765d18fad80daecd7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 412 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/replay_buffer.py"},"region":{"startLine":412}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7b07a31a26f3753dc47f1f961a3b20d8a525e6d571956980861e14aa1daa8a4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 103 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":103}}}],"partialFingerprints":{"codehealthFindingId/v1":"afc7ea7f33b0915e40f948b0886cba5fd1babca2cc2fce1b806ca1815d15f4b3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 141 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":141}}}],"partialFingerprints":{"codehealthFindingId/v1":"72bc53196ec723701f7601ba1f1b04d25f4571287c03cdce6964ba80f41f2650"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 150 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":150}}}],"partialFingerprints":{"codehealthFindingId/v1":"e2360134b7c5722439f3c7afcd8527e1e275c93d79904fd633b16e10d6cb616b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 162 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/trainer/ppo/v1/agent_loop_tq.py"},"region":{"startLine":162}}}],"partialFingerprints":{"codehealthFindingId/v1":"c81dc54cb8dc7e2b358a137d5d6bf3b030405eeb3a52f373caea835f98974267"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 200 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":200}}}],"partialFingerprints":{"codehealthFindingId/v1":"d01801c9392aff2bee29361b81ef1a34c7e2d77577db81eb15f99f53d788587a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 395 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":395}}}],"partialFingerprints":{"codehealthFindingId/v1":"bee3f5f0fb725f6fc0ea9e8428b8142823e9d9edee7ea835e10947d21fd1a6e7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 447 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/transferqueue_utils.py"},"region":{"startLine":447}}}],"partialFingerprints":{"codehealthFindingId/v1":"d5371d7857ea9fb731d42db062dd84854225cf14a5a3c227563b24603c296b57"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 506 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/tracking.py"},"region":{"startLine":506}}}],"partialFingerprints":{"codehealthFindingId/v1":"7184ed205f9bf2897e4951c17fb9b6d6df57cacb6f39095e3de2990c4ad53127"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 68 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":68}}}],"partialFingerprints":{"codehealthFindingId/v1":"e861655ef3a1588ae1f7b8c14bec20114e2ae95c3381628be377fc818ffd0d96"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 110 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"2391d7c14ad2396ed97a1573f808e94e573d97c114521d85ab8f1c94fa30ebfa"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 245 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":245}}}],"partialFingerprints":{"codehealthFindingId/v1":"d482b097646e0476740b15a8fa9cfc257cf990c8859d22e92e41245ef08fae86"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 257 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":257}}}],"partialFingerprints":{"codehealthFindingId/v1":"8b475e6071945062ebae2950c0a8fce912e13b65fc2904578cb3de434245cb48"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 321 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":321}}}],"partialFingerprints":{"codehealthFindingId/v1":"cf245eb36b17583f11c4e10d62bf84c166a4320ef77679f8440ae6f00111c15f"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 324 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/memory_utils.py"},"region":{"startLine":324}}}],"partialFingerprints":{"codehealthFindingId/v1":"f4aae3669189444ee1543298c5f4eef64bc02f6a8b7904119c853d7fca71edaf"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 135 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/hdfs_io.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"fabc73a6c40222b9d1c2fe1cae46d0f9beec68d29edbcf4f5467dd765dba30bc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 79 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fp8_utils.py"},"region":{"startLine":79}}}],"partialFingerprints":{"codehealthFindingId/v1":"294df671147931655676fe2ad9bcea7975c7a9c7e39af3d09892d68efe4c3a08"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 83 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fp8_utils.py"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"81b03d508104253ca5f3e6c73833055f5064fef3fef54669d5fa8dfd99bcbb19"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 114 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fp8_utils.py"},"region":{"startLine":114}}}],"partialFingerprints":{"codehealthFindingId/v1":"a6ab2624e10bf2bd14fada59e2b1da8773862dc9f2655805f9f13a6a168e3b7e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 130 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/fp8_utils.py"},"region":{"startLine":130}}}],"partialFingerprints":{"codehealthFindingId/v1":"052f575503d9129cdeedafff8cc1a4250db254c7a5e75390fdb33b8eeaadbc1a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 162 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":162}}}],"partialFingerprints":{"codehealthFindingId/v1":"681b4419003ddc8cefe62c4b9d1a0b738628623cdc44052c7efe9a6b016e6be7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 346 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":346}}}],"partialFingerprints":{"codehealthFindingId/v1":"83906ef3379d71900ba311fa65fc6332e14a53b6f6ccaf77ff37f7bf3e6d7630"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 348 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/device.py"},"region":{"startLine":348}}}],"partialFingerprints":{"codehealthFindingId/v1":"e9bb547de46a0c5f87613be3eb23bcf97116ca49d7cfe107ca53ca9bef137210"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 539 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/activation_offload.py"},"region":{"startLine":539}}}],"partialFingerprints":{"codehealthFindingId/v1":"6807722bc64d549194132f0dfed3cc002dd03639df19596d412289a2d21fab8b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 543 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/dataset/rl_dataset.py"},"region":{"startLine":543}}}],"partialFingerprints":{"codehealthFindingId/v1":"f1c9097aea55390a343398fa737a4fcb2edcbe7fe9b7a5401ccaaf139f62ea28"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 91 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/debug/metrics.py"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8de43c7a81d20c9f0c9ee5c1d14ba1878f23c429af74f6253e24d066c286377"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 208 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/fp8_kernel.py"},"region":{"startLine":208}}}],"partialFingerprints":{"codehealthFindingId/v1":"fbf45f63afc292b5059f006618a69e7ce5b7db9584306a8857bcc2c392cd3fd4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 259 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/fp8_kernel.py"},"region":{"startLine":259}}}],"partialFingerprints":{"codehealthFindingId/v1":"e14e14198321192428d7ebce92a13b1ce9a2b4c428856f15aecb1bf250ae83cc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060log\u0060 at line 86 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.log(logging.INFO, \u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/logger/aggregate_logger.py"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1a523db0533a98bda6f0010d0a35c21e44fea0c95cf64e42d481e23bac8d38d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060log\u0060 at line 140 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.log(logging.INFO, \u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/logger/aggregate_logger.py"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"d39b1521001fde5daf5e810631d9dd5c5a2309b2e0cae973b9190b066d3ebcc8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 135 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/torch_memory_profile.py"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"c26569ac8ecc7706dc445b54e67b8a8f4bbfa235edd3fdf75689d6aa604d0c73"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 80 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/mstx_profile.py"},"region":{"startLine":80}}}],"partialFingerprints":{"codehealthFindingId/v1":"83fc182ec9c86675e932a4736982e22c3276b2d93f127a9ee5e5016fcb5d3b73"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 82 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/profiler/mstx_profile.py"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"ca8611d5b34514f092d3ff6cff71d3195f7b548ab869d23497692474660dd611"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 285 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/quantizer.py"},"region":{"startLine":285}}}],"partialFingerprints":{"codehealthFindingId/v1":"3145383a27b19660557278d8be8c63fec36095940c6c521bdf12fc6ddc26df1c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 47 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"68c666e338779a5d3ecc299aac0a47cd351843ca16042041af60fbfec0749727"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 56 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"5a8e6f5333e0cb3055047ce04617b41f0f46d3015ae727b44c8c329ecb425630"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 71 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":71}}}],"partialFingerprints":{"codehealthFindingId/v1":"c6f9208f271e47c98492cfbf0587dd1869c48d2261f53a7d3c30b73393cb0fa3"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 75 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":75}}}],"partialFingerprints":{"codehealthFindingId/v1":"8457d2c99a125e7e07f5b03a691c9caa9425d2f7b718231bc5fcd33eb8d62c1e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 79 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":79}}}],"partialFingerprints":{"codehealthFindingId/v1":"860aae091429c0757f56e5c2dc60056c07512cf86992a67ecaf329afbb9f7d17"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 102 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":102}}}],"partialFingerprints":{"codehealthFindingId/v1":"f466c410ed337363e1e437860fb84b7a587add61f189dcac74b633c78adec794"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 109 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"b98b900a2cff788dccce9e1c792339590aae9e2394fa3a1925cb09d9e5f8a6d6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 126 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":126}}}],"partialFingerprints":{"codehealthFindingId/v1":"0181bdf10f06cc59e5c7eb30020d54ee331864a19706119b9acdc1cca38eacc0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 173 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":173}}}],"partialFingerprints":{"codehealthFindingId/v1":"2b0f72835d0dbe95608ade645091b43b99e7e0143d252f386f3774ef78339131"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 196 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/qat/core.py"},"region":{"startLine":196}}}],"partialFingerprints":{"codehealthFindingId/v1":"50b5c734daed8193a8a64b6ba03225582390ace5009afac117d53975f68e39e1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 121 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":121}}}],"partialFingerprints":{"codehealthFindingId/v1":"422597614db2141b6348aed29c79c03e39b241d757a1cabcde65938b930fbf0d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 143 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":143}}}],"partialFingerprints":{"codehealthFindingId/v1":"889f1d9d41a7a3ca59f563a12c885958d9c4802f2df99c5fbabb86b1ebca1329"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 151 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"25db9c1fba0d8156c5a2c72c63a4fa5532e5e0152f1349e2b767c4255cf606c6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 168 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":168}}}],"partialFingerprints":{"codehealthFindingId/v1":"c49aeffa29312c4c7d36309b12ce00511449271ba173577df3c9322bb7f46633"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 189 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"49b4a747373fb645dcf72d63c6e10b9b2f7736a67b1bdd946bdb383ea5620741"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 321 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":321}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9ae254071b0a8a5d2d26861cdc5bf2a9048e6bb99c195b6e751b0d749b8a077"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 346 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":346}}}],"partialFingerprints":{"codehealthFindingId/v1":"963fea793fb76a7a6eb0dd18a527d2fc7048b828dfb896071aaa0e839a6914f6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 349 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":349}}}],"partialFingerprints":{"codehealthFindingId/v1":"74abe89ec94c461c94150ddf65797b493bed93bfe672e865714c960e0ad769d1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 350 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"7175f5d046304ffa961c38949c01f74dbfcf455a7a437223beeebe639cc86ec0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 353 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":353}}}],"partialFingerprints":{"codehealthFindingId/v1":"a301886aec9e36a0e5c093b1ad0c7f274fe9d59b889837ebabc16429e011b56c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 381 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":381}}}],"partialFingerprints":{"codehealthFindingId/v1":"e151e33177626fdd415a1973113fa18a61fec63723f5657ca9c46875320a11d6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 382 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":382}}}],"partialFingerprints":{"codehealthFindingId/v1":"bc56a58f39b6d24ca6a8b3f566eb84663f9e9fd6add70aa8e17e41303ed449f8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 383 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":383}}}],"partialFingerprints":{"codehealthFindingId/v1":"1b93f63253076dc4a109436971c430adee8017d7ef8ff5b0d89922e51d0b6812"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 414 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":414}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c2742c2165047b5970b154049cd761408615b9e861c3780a897889313f44829"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 439 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":439}}}],"partialFingerprints":{"codehealthFindingId/v1":"e72fa09f3edc8236970ed25ad067ae339d4373ff64cec987286d7dd3198730c5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 445 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":445}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae3ab26cf29d3d3b73b856071f957c6f1ee2c2e7dcaa27dca5b9b6fb6f59f9cd"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 496 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":496}}}],"partialFingerprints":{"codehealthFindingId/v1":"4982a0f6254aec8c57a8a7f4fbf24d3511298636704dba46298651f6f3d9cac7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 502 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":502}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e86e906b66624b7cb3a194a374f8d1fcea3e7879bbe0d784895b2a17683891a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 545 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":545}}}],"partialFingerprints":{"codehealthFindingId/v1":"80c99f6bd7f654f598b2925401db92a56e7a7ff33b3c49e3d2c58c6f99dc15f7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 558 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":558}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8c778d19fcb190e88870dafa06e98b158d681c3929a4e08990bd3c3b5e4d4b1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 577 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/utils.py"},"region":{"startLine":577}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3190080fae07f2cecc70d87ef51992f8bccadc3abc52491cf8ab666f155c107"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 68 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/__init__.py"},"region":{"startLine":68}}}],"partialFingerprints":{"codehealthFindingId/v1":"f2123fbb32e1dc705229ec197a181569852f72cf3fb81582cf78c936b30420d9"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 114 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/reward_score/sandbox_fusion/__init__.py"},"region":{"startLine":114}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1107311f0a02fcebe55ade484940b97d76b0dc453cd534dda077a353ea5f45e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 472 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/config/engine.py"},"region":{"startLine":472}}}],"partialFingerprints":{"codehealthFindingId/v1":"a01dbec2cd14a451c41b2456890e31f5bc2364532fa24133bead21e675ddc968"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 176 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":176}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9168b098b067562258db5b93278bc86551f5cbcd76833a88a95c182b909240b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 293 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":293}}}],"partialFingerprints":{"codehealthFindingId/v1":"77fa03f1e6cd1cf777308a32d43f1aaf957467a2ed2467dcaa2d944b4767db47"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 380 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":380}}}],"partialFingerprints":{"codehealthFindingId/v1":"6796cf5e3d0ee65e6d9739c4c82b95e0b6668b350124477e05c8da78fd14efd0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 590 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/fsdp/transformer_impl.py"},"region":{"startLine":590}}}],"partialFingerprints":{"codehealthFindingId/v1":"28520775b4b48cfef70b66d2e8c78eb17cecd558e3e4a433cbbf95ab8e44a7a8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 207 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":207}}}],"partialFingerprints":{"codehealthFindingId/v1":"7b4e8ecb72bddbb4a5fd9e7c62662d9064c9730a7cb866754055423966aa527c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 212 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/megatron/transformer_impl.py"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"7120c571a518949e573cfefaebcc004f43dde52b92a687edabf2de1ea29699a4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 138 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/utils.py"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"5bd35c42e34c30e470786d27aa4c7168527c858ceda29528cc175fd9bb44fc77"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 477 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/torchtitan/transformer_impl.py"},"region":{"startLine":477}}}],"partialFingerprints":{"codehealthFindingId/v1":"43505742803ec9149c569bb2f786ead19bba22494b7fad0a4f26f290b0490174"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 94 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/engine/veomni/transformer_impl.py"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"4216cbd438719c7d822ac7f0ee05c3ea61fdfb72d548cf94a04a59eb7e43f329"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 79 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":79}}}],"partialFingerprints":{"codehealthFindingId/v1":"501c488c979191c16eeacd3efd0c49202208cddca84ca6ad17dfdde90fda2137"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 378 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/utils.py"},"region":{"startLine":378}}}],"partialFingerprints":{"codehealthFindingId/v1":"fbce05c5e5d88c0619781d21feb315557f04f7d111b2e26d26b1d54519351657"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 191 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":191}}}],"partialFingerprints":{"codehealthFindingId/v1":"83f2275138d64d111129b9119b5f4fff1415a0f6fa0ef68496208cf47c6d551e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 637 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":637}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee1d6823e88ffda9819d81227ced638ceaa17f08fb7daa131fc132868e82e33e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 643 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":643}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd13daedb07d9bec4c6521ab7e6980336fad65d27b937ebd12811f46ce96d673"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 664 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":664}}}],"partialFingerprints":{"codehealthFindingId/v1":"76acd7d781e2f91da738a613553a2fc9d4d92e76baf0e3bf7c9a525f35c71e0d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 669 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":669}}}],"partialFingerprints":{"codehealthFindingId/v1":"aea395d22a40a10fb3361a575d16d7fe1d57b533eb9802c1b3104627a5b75608"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 681 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/schemas.py"},"region":{"startLine":681}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f96e687187f60df042e2c51e35100537c469d267e0d01580b7eeb479815a716"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 240 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/router.py"},"region":{"startLine":240}}}],"partialFingerprints":{"codehealthFindingId/v1":"203203cf7cd742df3df3992f3cb2a1f8f8a2601c68fb5c4b4d2a7a6df25a406b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 253 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/router.py"},"region":{"startLine":253}}}],"partialFingerprints":{"codehealthFindingId/v1":"afc64758566fbfc2a156edfd795b8fbc8ec81123bf81875e669ec646c7068f75"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 278 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/router.py"},"region":{"startLine":278}}}],"partialFingerprints":{"codehealthFindingId/v1":"c9830555bd2e38e5a4c8a238aadeb818acac3dc2b01cc4a14b256bcb652705bf"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 239 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_rollout.py"},"region":{"startLine":239}}}],"partialFingerprints":{"codehealthFindingId/v1":"d6e6a0c9d2c1a915e94e7f40b5a1bcc5f7a1b470be2adee65220fb46e53412b9"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 176 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/sglang_pd_replica.py"},"region":{"startLine":176}}}],"partialFingerprints":{"codehealthFindingId/v1":"3afcbe2e8def37697a1baeafa306ed2b5e46bcd1dab320bb6e18553a1172ccb4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 91 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"1c73a2cb3a027c74ee24dda0a16552aa96bf6eb00e308c7913d975bf03d6b670"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 144 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":144}}}],"partialFingerprints":{"codehealthFindingId/v1":"6c3a7c2ad59e671431549038ecea43b82bc27213ca32f7c82d8b3baa055efec7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 171 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":171}}}],"partialFingerprints":{"codehealthFindingId/v1":"150dfd8626da37c69aecf3b989e47b468fbfd93aee31c88a73a645d7566b5586"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 176 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":176}}}],"partialFingerprints":{"codehealthFindingId/v1":"36e47d38f9b72185f16a45a6402933adfb8149d05def7047d651da492d027387"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 189 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad5bcb56c9c3d3ed1b9e7b058f195de4f83376e979e00e763c8eca5cfac22080"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 264 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":264}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8f75ec5443267b426dcb13f7839cc4810b49188ec35d631ead0b4f9c09c9e92"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 292 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":292}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6a8e113f18499dd4cf5a4566e754fd8129e925641bff3a6fdd92d17e9adaca1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 339 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":339}}}],"partialFingerprints":{"codehealthFindingId/v1":"4cfd70890e1767fcfa57d23c6a68a1f99fc2cba02520095c877d440672934731"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 341 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":341}}}],"partialFingerprints":{"codehealthFindingId/v1":"ceee55fb8e294f8e138e4ab934bf274445cc88b046690160c1eab6d8455b8ab4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 346 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":346}}}],"partialFingerprints":{"codehealthFindingId/v1":"57a8a64c5a41a7aa76df6db694e99df1e816222fb6c077f635b2c1450e782298"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 419 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":419}}}],"partialFingerprints":{"codehealthFindingId/v1":"85e6094833f802ba4cbfe54a4e00a0741447d320a118aabc9ce54d2d774c5a23"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 427 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":427}}}],"partialFingerprints":{"codehealthFindingId/v1":"77683da3dc0e33acfb0d583af1512698a34a9a063c2d704c31776bf3d2838a17"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 533 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":533}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7d324cb4ebdeea0cff3d4a2b703dcbf68c6f440892f882ac2af23391ba9eb35"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 715 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":715}}}],"partialFingerprints":{"codehealthFindingId/v1":"9edd00c4a8297d98d71770a1ac0c9fa1550a28c10baa64f91af212dc685fe59d"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 717 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":717}}}],"partialFingerprints":{"codehealthFindingId/v1":"b44c66a75233a1f107fd6cf6ab5486e5ac633b106d033c8a817bb33a1e0f4d92"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 719 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":719}}}],"partialFingerprints":{"codehealthFindingId/v1":"d646d69bc8fde9d58ebddad30b74f4cd05044df3ad6cc33d711b2c7217cf21af"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 722 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":722}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d0742159deb223dd992eaf422e93ea9d2a7bf9ee316ed65ace253452b3dfb32"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 841 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":841}}}],"partialFingerprints":{"codehealthFindingId/v1":"1eb24b27fc2c6fccc0a951846120bc66ccfae6b7a58184785c751c06e658c7b2"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 201 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":201}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5f9a162b7ce2f742a885d33b18637e1efa73362f372fde604aa9cb22a10d441"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 227 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"7fdb38f034f4f0d212e8a3eafebf0119c57c3d70d3b8fe301fde2950815403d8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 253 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":253}}}],"partialFingerprints":{"codehealthFindingId/v1":"cf23c8b26aa22dacfcdff723ae126e60c36872500a21c67112d7b2bd16825aa0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 265 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":265}}}],"partialFingerprints":{"codehealthFindingId/v1":"d4f7abc9a6dd4c72a0739d57dff96cd08897e81ea9edcb76220b449998095dd2"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 310 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":310}}}],"partialFingerprints":{"codehealthFindingId/v1":"4752a06581eef494bcb7c40aa5b370a8c9fce37cc21885ddf2cfe5e0e5bfecaf"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 650 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":650}}}],"partialFingerprints":{"codehealthFindingId/v1":"e1d32a1e19ae79e8dfaf7219a172dd97c6948e526bae2e4c01cbd291b649d56a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 791 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/async_sglang_server.py"},"region":{"startLine":791}}}],"partialFingerprints":{"codehealthFindingId/v1":"88e8f97a12043af7dbaa8b213e85241c33122c6ffc9d875ada5cf7be8b8a18dc"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 213 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":213}}}],"partialFingerprints":{"codehealthFindingId/v1":"f0aaa6cd4ef6fad7060d036d800238f43ebda38711c83e6b7c4dbc5dc42f7e34"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 215 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":215}}}],"partialFingerprints":{"codehealthFindingId/v1":"e7ef22b38e7910989f8281503cca7a452b73e3abed7eb15dc57ea76f41753e8e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 217 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":217}}}],"partialFingerprints":{"codehealthFindingId/v1":"a50aab596ccfa5706890af472815bbefef029e26abf7c2192ed37baf2d486564"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 220 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":220}}}],"partialFingerprints":{"codehealthFindingId/v1":"edb9fb608fbe1edc225dc5e41623fda3d2a6cf1884bf47d0d3f797e2030c5edf"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 316 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":316}}}],"partialFingerprints":{"codehealthFindingId/v1":"7c40e6f18d4e984a52bc343ae1d63875438f2253db480cc16c27ed09cac866b8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 317 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":317}}}],"partialFingerprints":{"codehealthFindingId/v1":"ec99147ceba8adcdc5666039d4cd9193f81aefb276035a87cfce502657ab196a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 318 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":318}}}],"partialFingerprints":{"codehealthFindingId/v1":"08b491f1e28801179af9865a5a492a2c658985f506c6626239bbc34dfc05d4a9"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 345 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":345}}}],"partialFingerprints":{"codehealthFindingId/v1":"42b756761ae9885dab1f8dd91503db0e7d9a111ba94dfec847e68368945700c2"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 348 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":348}}}],"partialFingerprints":{"codehealthFindingId/v1":"de0f1ef6218c05efafa8ab3ab214e3e95ce77ae694a89b31311307e6a56ec91c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 375 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":375}}}],"partialFingerprints":{"codehealthFindingId/v1":"9d9d3c70b5769a693cea46cd6f67acbdcc5250fac0458f4db7e1afc1e63d206e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 465 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":465}}}],"partialFingerprints":{"codehealthFindingId/v1":"835fbb5a486297edc564b6ef7001548451cb15f6ba88291cdff3d9c072acfb3a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 80 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":80}}}],"partialFingerprints":{"codehealthFindingId/v1":"f00135e686617abdfb1ba8b73f608c5d833da7ef1bd6dbbde2b843064a84a2b4"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 151 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":151}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fd97187214f44d3bfca8e8f4fd073fa9eaabb358289edd7a4ce576b9608cd8c"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 155 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"6f3c05c1936ea66370a84f6487e47765016924c1c5f05298c9f219d826c146a8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 175 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":175}}}],"partialFingerprints":{"codehealthFindingId/v1":"c5b4a8eac4101dbb74157e487daecbdb9568aa7747a318101f9719ce7732b5ed"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 504 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_async_server.py"},"region":{"startLine":504}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c5aaaf5b3a8a8eb11222cb12a21ad908783b19b6e458be511a36508db65e4eb"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 253 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_rollout.py"},"region":{"startLine":253}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e22c442ad833a48fc1d107e6706c544ad0f7d61eab8c027410beb122ca205fd"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 204 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":204}}}],"partialFingerprints":{"codehealthFindingId/v1":"0645e2e8f3947ac98ae86da68a7a883fc3687d0ecf93d851e9a6a92b389d4077"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 312 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f77620609282097f8b0b2d3b260a220aec76765ec79ab706f9178074cfc9940"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 314 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":314}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa160979c05e8aa966ee2efe8b67f0d3d82420847435a440fc233aea95ac488b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 544 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":544}}}],"partialFingerprints":{"codehealthFindingId/v1":"b72fe2ef5296373d425dff30bda25635d24d6b0c24bc2f865e567551aec5dd94"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 561 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":561}}}],"partialFingerprints":{"codehealthFindingId/v1":"010899e0cfdaa460731d989af5775455155712a5c6f1aa6671b8fe0bd01955c6"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060exception\u0060 at line 565 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.exception(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.exception(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":565}}}],"partialFingerprints":{"codehealthFindingId/v1":"83e25252da6f963085317161407acd173b7c1efcda6a76ba899e14c0035a607a"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 1183 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1183}}}],"partialFingerprints":{"codehealthFindingId/v1":"5d99d7a9ab4ef11dbd66e3dbb2602b51c7cccf17bc0490d4e7dd894389dc3a4f"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 1266 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1266}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d7d11f2da631ea74875dd8ba305f10bfd0cb9fc25c06445675027635bd5ee1e"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 1268 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1268}}}],"partialFingerprints":{"codehealthFindingId/v1":"a0cd0db87f9deb8c4ec1c15c3b3960444529d90d4bc8c6633a4ebd31b9363519"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060error\u0060 at line 1272 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.error(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.error(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1272}}}],"partialFingerprints":{"codehealthFindingId/v1":"35c796ddbf6f3a32d3ded488f2949fd37b6954a0b2b8a4ca361538a694ebfef5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warning\u0060 at line 1300 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.warning(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.warning(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1300}}}],"partialFingerprints":{"codehealthFindingId/v1":"d5c9d89061a4cab5a28083d7c91e45eeb15d73b7473114677abe80b3b96d76c1"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 1309 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1309}}}],"partialFingerprints":{"codehealthFindingId/v1":"591ca951b1ceee7472e253b1bed78804f223f4f72bdd041b7d0a84468db88669"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 1415 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/vllm_async_server.py"},"region":{"startLine":1415}}}],"partialFingerprints":{"codehealthFindingId/v1":"151eb794f9c7fee553f594fcf8767c74144a2397e6a95d6352fba74dfc4d5be7"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 360 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":360}}}],"partialFingerprints":{"codehealthFindingId/v1":"befce604d493484894e9b8637110523e2445ed9c741da8aa713449b9aec9e5c5"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 366 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":366}}}],"partialFingerprints":{"codehealthFindingId/v1":"5d5ddb38a1cac5c307389e984ce9273984f441c67a3c22bb0a0fa71774e5c059"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 374 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":374}}}],"partialFingerprints":{"codehealthFindingId/v1":"20a336a5d17a6f2edea6cf5cb8b2de025d523103e1d76931140a476ffe64546b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 388 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.info(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.info(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/utils.py"},"region":{"startLine":388}}}],"partialFingerprints":{"codehealthFindingId/v1":"8286d5e0427dd94f45df250d2d2c01bfa03ba6a2ec95de1608a46a0c82ba4d74"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060debug\u0060 at line 225 is handed an f-string as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, every occurrence reads as a different message, and the string is built even when the record is filtered out. Pass the values beside a constant message instead: \u0060logger.debug(\u0022order %s moved to %s\u0022, order_id, status)\u0060 with the standard library\u0027s \u0060logging\u0060, which keeps the message and its arguments apart on the record, or \u0060log.debug(\u0022order moved\u0022, order_id=order_id, status=status)\u0060 with structlog."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/vllm_rollout/bucketed_weight_transfer.py"},"region":{"startLine":225}}}],"partialFingerprints":{"codehealthFindingId/v1":"6a9d8e0dc4414be5778f2d7ad2ef9b57c9aa3b621ea0d914250323868a69388d"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_token_repr\u0060 swallows every exception into \u0060return \u0027?\u0027\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":205}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed7704286835fd9d31e56fc363edacff15e3944f1d3e3458accfa1e8adf189ba"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_diff_context\u0060 swallows every exception into \u0060return \u0027\u0027\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"scripts/chat_template_checker.py"},"region":{"startLine":230}}}],"partialFingerprints":{"codehealthFindingId/v1":"a00e29b524f523f4b8968c25d26f22edf8209c31f739f5c85d2ff45a0a4a9da0"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_read_async_response\u0060 swallows every exception into \u0060return {}\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/experimental/reward_loop/router/naive_router.py"},"region":{"startLine":44}}}],"partialFingerprints":{"codehealthFindingId/v1":"658faa741c62f277379f93ab9de46b2ec21d28d2ab808510a07cc7fa25eec346"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default on parse failure: \u0060_missing_cann_api_hint\u0060 returns \u0060\u0027torch_npu is not installed\u0027\u0060 when \u0060ImportError\u0060 is raised, with no log or raise \u2014 a malformed value silently becomes that default. Log the input or fail validation. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/kernel/npu/cann_linear_ce.py"},"region":{"startLine":90}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea93b1eca073307013b7b2a2346d9f6be3f807d279de20a751ed9705a72a229f"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default on parse failure: \u0060_get_aux_loss_coeff\u0060 returns \u00600.0\u0060 when \u0060(ValueError, IndexError)\u0060 is raised, with no log or raise \u2014 a malformed value silently becomes that default. Log the input or fail validation. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron/router_replay_patch.py"},"region":{"startLine":258}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e9799d10bbc0c8132edf785371c4dc71d2bedb8996d5bb8b66c0de06e344dff"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default on parse failure: \u0060get_megatron_module_device\u0060 returns \u0060\u0027cpu\u0027\u0060 when \u0060StopIteration\u0060 is raised, with no log or raise \u2014 a malformed value silently becomes that default. Log the input or fail validation. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/utils/megatron_utils.py"},"region":{"startLine":1125}}}],"partialFingerprints":{"codehealthFindingId/v1":"67ded036f09c5f1614b8419353667938278d858be229912f66d8b88b0099df8d"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_read_async_response\u0060 swallows every exception into \u0060return {}\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/sglang_rollout/http_server_engine.py"},"region":{"startLine":103}}}],"partialFingerprints":{"codehealthFindingId/v1":"35b990b2613a8d6ee0fb64d30c8a8d1a6ef56d52368dd0901cb31a1ad81605a6"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_read_async_response\u0060 swallows every exception into \u0060return {}\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"verl/workers/rollout/trtllm_rollout/trtllm_rollout.py"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf8ec466096d6467789ce07718ee171314803afd3becb8b0739ed7c0bfb0e720"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","informationUri":"https://cwe.mitre.org/","isComprehensive":false,"shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1032","guid":"5f21e517-68aa-a650-9a25-5771ef024637","name":"OWASP Top Ten \u2014 Security Misconfiguration category","shortDescription":{"text":"OWASP Top Ten \u2014 Security Misconfiguration category"},"helpUri":"https://cwe.mitre.org/data/definitions/1032.html"},{"id":"CWE-1188","guid":"90b5d93c-2e8f-7d58-b831-915e7ee4a150","name":"CWE-1188","shortDescription":{"text":"CWE-1188"},"helpUri":"https://cwe.mitre.org/data/definitions/1188.html"},{"id":"CWE-1357","guid":"e4d2e772-757e-0a5c-bd7d-77052949d866","name":"Reliance on Insufficiently Trustworthy Component","shortDescription":{"text":"Reliance on Insufficiently Trustworthy Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1357.html"},{"id":"CWE-1395","guid":"800e09e7-c11a-8654-9fa6-86f398995fed","name":"Dependency on Vulnerable Third-Party Component","shortDescription":{"text":"Dependency on Vulnerable Third-Party Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1395.html"},{"id":"CWE-16","guid":"659db3ea-affc-8453-8add-c1218fbfcb92","name":"Configuration","shortDescription":{"text":"Configuration"},"helpUri":"https://cwe.mitre.org/data/definitions/16.html"},{"id":"CWE-259","guid":"ae9ad959-fbb6-9d5e-892d-3dca66da0b69","name":"Use of Hard-coded Password","shortDescription":{"text":"Use of Hard-coded Password"},"helpUri":"https://cwe.mitre.org/data/definitions/259.html"},{"id":"CWE-295","guid":"a706c4e2-1232-8859-ae2e-17aa2d41f8e2","name":"Improper Certificate Validation","shortDescription":{"text":"Improper Certificate Validation"},"helpUri":"https://cwe.mitre.org/data/definitions/295.html"},{"id":"CWE-319","guid":"7af97476-9f0d-4458-9163-3d2043918a1a","name":"Cleartext Transmission of Sensitive Information","shortDescription":{"text":"Cleartext Transmission of Sensitive Information"},"helpUri":"https://cwe.mitre.org/data/definitions/319.html"},{"id":"CWE-327","guid":"e51910ff-67b5-3c51-aa3d-92837d9eab90","name":"Use of a Broken or Risky Cryptographic Algorithm","shortDescription":{"text":"Use of a Broken or Risky Cryptographic Algorithm"},"helpUri":"https://cwe.mitre.org/data/definitions/327.html"},{"id":"CWE-345","guid":"d80d4b65-bbbe-b65d-958e-7ac466af18f9","name":"Insufficient Verification of Data Authenticity","shortDescription":{"text":"Insufficient Verification of Data Authenticity"},"helpUri":"https://cwe.mitre.org/data/definitions/345.html"},{"id":"CWE-353","guid":"09d7e902-d4ee-f05d-ae6c-0a1554d0c18f","name":"Missing Support for Integrity Check","shortDescription":{"text":"Missing Support for Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/353.html"},{"id":"CWE-494","guid":"b8a65e0d-e459-4a55-a931-fc1136482375","name":"Download of Code Without Integrity Check","shortDescription":{"text":"Download of Code Without Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/494.html"},{"id":"CWE-502","guid":"f7d3b296-aac0-5c5a-b706-e07faba26c36","name":"Deserialization of Untrusted Data","shortDescription":{"text":"Deserialization of Untrusted Data"},"helpUri":"https://cwe.mitre.org/data/definitions/502.html"},{"id":"CWE-506","guid":"401d6455-56e3-0552-9a39-f77461673e3f","name":"Embedded Malicious Code","shortDescription":{"text":"Embedded Malicious Code"},"helpUri":"https://cwe.mitre.org/data/definitions/506.html"},{"id":"CWE-522","guid":"71fb233e-ce6a-ae57-9419-ef8373540b09","name":"Insufficiently Protected Credentials","shortDescription":{"text":"Insufficiently Protected Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/522.html"},{"id":"CWE-532","guid":"1cd8877a-76e8-ce54-b40b-779af23364a0","name":"Insertion of Sensitive Information into Log File","shortDescription":{"text":"Insertion of Sensitive Information into Log File"},"helpUri":"https://cwe.mitre.org/data/definitions/532.html"},{"id":"CWE-693","guid":"b9b141dc-018a-9c59-8953-1e3c4e020745","name":"Protection Mechanism Failure","shortDescription":{"text":"Protection Mechanism Failure"},"helpUri":"https://cwe.mitre.org/data/definitions/693.html"},{"id":"CWE-732","guid":"1da27e8f-b330-7650-ab63-bd61953eae5d","name":"Incorrect Permission Assignment for Critical Resource","shortDescription":{"text":"Incorrect Permission Assignment for Critical Resource"},"helpUri":"https://cwe.mitre.org/data/definitions/732.html"},{"id":"CWE-77","guid":"332c8ade-6612-9f56-a06b-d8d90b1a8750","name":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","guid":"2e31ceaf-c7ae-2e5e-9661-cfb1362789cf","name":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/78.html"},{"id":"CWE-79","guid":"fd45580b-e8c4-fc5e-8c2f-aa8fab0b4dbf","name":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)","shortDescription":{"text":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-798","guid":"5e8f057d-fee3-995a-a0cb-9fc5b0d174d1","name":"Use of Hard-coded Credentials","shortDescription":{"text":"Use of Hard-coded Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/798.html"},{"id":"CWE-829","guid":"13c33925-97fb-5a5e-b40c-56d328b8a4d7","name":"Inclusion of Functionality from Untrusted Control Sphere","shortDescription":{"text":"Inclusion of Functionality from Untrusted Control Sphere"},"helpUri":"https://cwe.mitre.org/data/definitions/829.html"},{"id":"CWE-89","guid":"6d08fdad-37eb-c150-bbf0-d7d946863407","name":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-937","guid":"16f316ae-415c-b354-a59b-1f7905f756e9","name":"Using Components with Known Vulnerabilities","shortDescription":{"text":"Using Components with Known Vulnerabilities"},"helpUri":"https://cwe.mitre.org/data/definitions/937.html"},{"id":"CWE-94","guid":"75e7f50c-6c2f-dd52-bf40-bf6c52b861fd","name":"Improper Control of Generation of Code (\u0027Code Injection\u0027)","shortDescription":{"text":"Improper Control of Generation of Code (\u0027Code Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/94.html"},{"id":"CWE-95","guid":"400bba4e-483c-5c50-a695-114fa9168003","name":"Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/95.html"}]},{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61","version":"2025","organization":"OWASP Foundation","informationUri":"https://top10.owasp.org/2025/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10:2025 web application security risks."},"taxa":[{"id":"A02:2025","guid":"668dee9e-41bc-6354-97d0-fdf8f40c50c1","name":"Security Misconfiguration","shortDescription":{"text":"Security Misconfiguration"},"helpUri":"https://top10.owasp.org/2025/A02_2025-Security_Misconfiguration/"},{"id":"A03:2025","guid":"168e227c-7735-2e57-bc6e-997affe644c5","name":"Software Supply Chain Failures","shortDescription":{"text":"Software Supply Chain Failures"},"helpUri":"https://top10.owasp.org/2025/A03_2025-Software_Supply_Chain_Failures/"},{"id":"A04:2025","guid":"6a9f5bfd-1a56-6453-beec-a7eff0ba3007","name":"Cryptographic Failures","shortDescription":{"text":"Cryptographic Failures"},"helpUri":"https://top10.owasp.org/2025/A04_2025-Cryptographic_Failures/"},{"id":"A05:2025","guid":"87e86033-3231-8458-8e4a-5cb82743553a","name":"Injection","shortDescription":{"text":"Injection"},"helpUri":"https://top10.owasp.org/2025/A05_2025-Injection/"},{"id":"A06:2025","guid":"491554d7-b8e4-9652-91a9-53700dc92ece","name":"Insecure Design","shortDescription":{"text":"Insecure Design"},"helpUri":"https://top10.owasp.org/2025/A06_2025-Insecure_Design/"},{"id":"A07:2025","guid":"334ddd78-539d-d35c-83dd-253647eb7eaf","name":"Authentication Failures","shortDescription":{"text":"Authentication Failures"},"helpUri":"https://top10.owasp.org/2025/A07_2025-Authentication_Failures/"},{"id":"A08:2025","guid":"84b0c297-710e-9a5f-9335-936ecb260c36","name":"Software or Data Integrity Failures","shortDescription":{"text":"Software or Data Integrity Failures"},"helpUri":"https://top10.owasp.org/2025/A08_2025-Software_or_Data_Integrity_Failures/"},{"id":"A09:2025","guid":"78892bc9-3c98-495d-881c-8af1390d643c","name":"Security Logging \u0026 Alerting Failures","shortDescription":{"text":"Security Logging \u0026 Alerting Failures"},"helpUri":"https://top10.owasp.org/2025/A09_2025-Security_Logging_and_Alerting_Failures/"}]},{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35","organization":"OWASP Foundation","informationUri":"https://owasp.org/www-project-top-10-ci-cd-security-risks/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10 CI/CD Security Risks."},"taxa":[{"id":"CICD-SEC-3","guid":"458c83a6-ebf7-cf55-8cc3-b4d949bbf271","name":"Dependency Chain Abuse","shortDescription":{"text":"Dependency Chain Abuse"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-03-Dependency-Chain-Abuse"},{"id":"CICD-SEC-4","guid":"c859d8ea-8b24-a157-9406-94929c10397a","name":"Poisoned Pipeline Execution (PPE)","shortDescription":{"text":"Poisoned Pipeline Execution (PPE)"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution"},{"id":"CICD-SEC-6","guid":"f2ee2486-b260-2952-a41f-6b67fa713940","name":"Insufficient Credential Hygiene","shortDescription":{"text":"Insufficient Credential Hygiene"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-06-Insufficient-Credential-Hygiene"},{"id":"CICD-SEC-8","guid":"b6b2dacf-a168-4957-876e-a8c73ee00eb0","name":"Ungoverned Usage of 3rd Party Services","shortDescription":{"text":"Ungoverned Usage of 3rd Party Services"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-08-Ungoverned-Usage-of-3rd-Party-Services"},{"id":"CICD-SEC-9","guid":"b3d36727-0395-5b51-94c4-5e173d62eab3","name":"Improper Artifact Integrity Validation","shortDescription":{"text":"Improper Artifact Integrity Validation"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-09-Improper-Artifact-Integrity-Validation"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":918,"secretScannerRunsExcluded":0}},"redactionTokens":["A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."]}]}