PyPI / googleapis-common-protos / 1.75.5

googleapis-common-protos 1.75.5

Source: https://github.com/googleapis/google-cloud-python
Tag scanned: googleapis-common-protos-v1.75.5
Directory: packages/googleapis-common-protos (only this part of the repository was scanned)
Compared with: googleapis-common-protos-v1.75.4 (0 signals introduced since)
Files: 165 scanned, 67 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 3 info
Scan time: 3.8 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 3 of 3 warn and critical signals; 3 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-21 23:10

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:73:31

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
    ]._serialized_options = (
        b"\332A\013name,filter\202\323\344\223\002\027\022\025/v1/{name=operations}"
    )
    _globals["_OPERATIONS"].methods_by_name["GetOperation"]._loaded_options = None
```
likely benign LLM, confidence 0.97 Generated protobuf file embedding serialized method option bytes for google.longrunning operations as octal-escaped byte literals.
Reasoning
This is a standard protoc-generated Python module. The octal escapes encode serialized protobuf option bytes (HTTP annotation and method options such as google.api.http and method signature), which is the normal output format for serialized descriptors. Raw-pass octal-escape findings on generated protobuf code are a known false-positive pattern.
info ~~warn~~ → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:79:24

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
    ]._serialized_options = (
        b"\332A\004name\202\323\344\223\002\032\022\030/v1/{name=operations/**}"
    )
    _globals["_OPERATIONS"].methods_by_name["DeleteOperation"]._loaded_options = None
```
likely benign LLM, confidence 0.97 Generated protobuf file containing serialized DeleteOperation HTTP option bytes.
Reasoning
Same generated protobuf descriptor pattern: serialized HTTP rule options for DeleteOperation with a path template. No executable behavior, no decoding into code, and the surrounding code only assigns descriptor options.
info ~~warn~~ → info by review encoding-octal packages/googleapis-common-protos/google/longrunning/operations_proto_pb2.py:85:24

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
    ]._serialized_options = (
        b"\332A\004name\202\323\344\223\002\032*\030/v1/{name=operations/**}"
    )
    _globals["_OPERATIONS"].methods_by_name["CancelOperation"]._loaded_options = None
```
likely benign LLM, confidence 0.97 Generated protobuf file containing serialized CancelOperation HTTP option bytes.
Reasoning
Standard protoc output for the CancelOperation method's serialized HTTP annotation. Raw-pass byte-escape signal on a generated descriptor file; no dynamic execution or dropper behavior is present.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/googleapis/google-cloud-python google-cloud-python && cd google-cloud-python
git checkout googleapis-common-protos-v1.75.5
disclude scan --severity info --diff googleapis-common-protos-v1.75.4 packages/googleapis-common-protos