PyPI / googleapis-common-protos / 1.75.5

googleapis-common-protos 1.75.5

Source

https://github.com/googleapis/google-cloud-python

Tag scanned

googleapis-common-protos-v1.75.5

Directory

packages/googleapis-common-protos (only this part of the repository was scanned)

Compared with

googleapis-common-protos-v1.75.4 (0 signals introduced since)

Files

164 scanned, 68 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 3 info

Scan time

3.3 s

LLM review

Reviewed by claude-haiku-5-5 (Anthropic): 3 of 3 warn and critical signals; 3 demoted to info.

Disclude version

4.0.0

Scanned (UTC)

2026-10-14 18:18

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info warn → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:73:31

   8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)

       ]._serialized_options = (
           b"\332A\013name,filter\202\323\344\223\002\027\022\025/v1/{name=operations}"
       )
       _globals["_OPERATIONS"].methods_by_name["GetOperation"]._loaded_options = None

   likely benign LLM, confidence 0.97 Generated protobuf serialized method options for the Operations service (GetOperation HTTP rule and method signature bytes).

   Reasoning

   This is a protoc-generated Python module from the googleapis longrunning proto. The octal escapes encode serialized protobuf option bytes (google.api.http and method_signature annotations), which is the standard output format of protoc for _serialized_options. The raw-pass octal flag is a false positive on generated serialization data.

2. info warn → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:79:24

   8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)

       ]._serialized_options = (
           b"\332A\004name\202\323\344\223\002\032\022\030/v1/{name=operations/**}"
       )
       _globals["_OPERATIONS"].methods_by_name["DeleteOperation"]._loaded_options = None

   likely benign LLM, confidence 0.97 Generated protobuf serialized options for the DeleteOperation RPC.

   Reasoning

   Same generated protoc file; the escaped bytes are serialized google.api.http and method signature options for DeleteOperation with the path /v1/{name=operations/**}. No execution or decoding logic is present; this is a data literal typical of protobuf codegen.

3. info warn → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:85:24

   6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

       ]._serialized_options = (
           b"\332A\004name\202\323\344\223\002\032*\030/v1/{name=operations/**}"
       )
       _globals["_OPERATIONS"].methods_by_name["CancelOperation"]._loaded_options = None

   likely benign LLM, confidence 0.97 Generated protobuf serialized options for the CancelOperation RPC.

   Reasoning

   Generated protoc output for CancelOperation's HTTP annotation bytes. The file is a standard googleapis longrunning stub, and the escape sequences are binary protobuf encoding, not a payload or dropper.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/googleapis/google-cloud-python google-cloud-python && cd google-cloud-python
git checkout googleapis-common-protos-v1.75.5
disclude scan --severity info --diff googleapis-common-protos-v1.75.4 packages/googleapis-common-protos