Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy-loading __getattr__ in the async Kubernetes client package that imports a submodule attribute on first access and caches it.
Reasoning
The snippet is a standard PEP 562 module-level __getattr__ lazy-import idiom. It imports a submodule by name with import_module, fetches the attribute, and caches it in globals(). It runs no decoded or fetched code, and the name comes from the module's own lazy-loading table. The flag is a false positive from the dynamic-attribute signal.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy attribute loader for the async Kubernetes API subpackage that imports and caches API classes on demand.
Reasoning
This is the same PEP 562 lazy-import pattern used across the generated Kubernetes client. It resolves an API class from a fixed module table and caches it in globals(). Nothing is decoded, executed or sent over the network.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy model-class loader in the async Kubernetes client that resolves model attributes through import_module on first access.
Reasoning
The snippet is the standard PEP 562 lazy-loading __getattr__ used in generated model packages. It imports a model submodule by name and caches the result. It has no malicious indicators.
-
line length 625 characters (raw pass, confidence 0.50)
storage_version_hash: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("storageVersionHash", "storage_version_hash"), serialization_alias="storageVersionHash", description="The hash value of the storage version, the version this resource is converted to when written to the data store. Value m
-
line length 753 characters (raw pass, confidence 0.50)
binary_data: Optional[Dict[str, Union[Annotated[bytes, Field(strict=True)], Annotated[str, Field(strict=True)]]]] = Field(default=None, validation_alias=AliasChoices("binaryData", "binary_data"), serialization_alias="binaryData", description="BinaryData contains the binary data. Each key must consist of alphanumeri
-
line length 639 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
-
compression ratio 0.609 is >2σ above file mean 0.520 (raw pass, confidence 0.50)
alization_alias="requiresRepublish", description="requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false. Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVo
-
line length 678 characters (raw pass, confidence 0.50)
maximum_volume_size: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("maximumVolumeSize", "maximum_volume_size"), serialization_alias="maximumVolumeSize", description="maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology
-
line length 696 characters (raw pass, confidence 0.50)
preserve_unknown_fields: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("preserveUnknownFields", "preserve_unknown_fields"), serialization_alias="preserveUnknownFields", description="preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be
-
line length 618 characters (raw pass, confidence 0.50)
stored_versions: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("storedVersions", "stored_versions"), serialization_alias="storedVersions", description="storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for s
-
line length 538 characters (raw pass, confidence 0.50)
additional_printer_columns: Optional[List[V1CustomResourceColumnDefinition]] = Field(default=None, validation_alias=AliasChoices("additionalPrinterColumns", "additional_printer_columns"), serialization_alias="additionalPrinterColumns", description="additionalPrinterColumns specifies additional columns returned in T
-
line length 525 characters (raw pass, confidence 0.50)
status_replicas_path: StrictStr = Field(validation_alias=AliasChoices("statusReplicasPath", "status_replicas_path"), serialization_alias="statusReplicasPath", description="statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the ar
-
line length 667 characters (raw pass, confidence 0.50)
propagation_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("propagationPolicy", "propagation_policy"), serialization_alias="propagationPolicy", description="Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The defa
-
line length 588 characters (raw pass, confidence 0.50)
progress_deadline_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("progressDeadlineSeconds", "progress_deadline_seconds"), serialization_alias="progressDeadlineSeconds", description="The maximum time in seconds for a deployment to make progress before it is considered to be failed.
-
line length 504 characters (raw pass, confidence 0.50)
terminating_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("terminatingReplicas", "terminating_replicas"), serialization_alias="terminatingReplicas", description="Total number of terminating pods targeted by this deployment. Terminating pods have a non-null .metadata.deletionTimes
-
line length 593 characters (raw pass, confidence 0.50)
skip_node_operations: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("skipNodeOperations", "skip_node_operations"), serialization_alias="skipNodeOperations", description="SkipNodeOperations lists node-local resource operations (gRPC calls) that will be skipped for this allocated devic
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
line length 595 characters (raw pass, confidence 0.50)
size_limit: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("sizeLimit", "size_limit"), serialization_alias="sizeLimit", description="sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on me
-
line length 604 characters (raw pass, confidence 0.50)
deprecated_topology: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("deprecatedTopology", "deprecated_topology"), serialization_alias="deprecatedTopology", description="deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be
-
compression ratio 0.734 is >2σ above file mean 0.553 (raw pass, confidence 0.50)
capacity: Optional[V1CapacityRequirements] = None
count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
-
line length 603 characters (raw pass, confidence 0.50)
lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this
-
line length 554 characters (raw pass, confidence 0.50)
matching_precedence: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("matchingPrecedence", "matching_precedence"), serialization_alias="matchingPrecedence", description="`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among th
-
line length 504 characters (raw pass, confidence 0.50)
min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be
-
line length 506 characters (raw pass, confidence 0.50)
secret_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("secretName", "secret_name"), serialization_alias="secretName", description="secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. I
-
line length 712 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1alpha3WorkloadPodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="ResourceClaims defines which ResourceClaims may be shared among Pods in the Job. Pods consume the device
-
compression ratio 0.816 is >2σ above file mean 0.588 (raw pass, confidence 0.50)
enum: Optional[List[Any]] = None
example: Any = Field(default=None, description="JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.")
-
line length 601 characters (raw pass, confidence 0.50)
lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this fi
-
line length 575 characters (raw pass, confidence 0.50)
resource_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceVersion", "resource_version"), serialization_alias="resourceVersion", description="String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed
-
compression ratio 0.786 is >2σ above file mean 0.548 (raw pass, confidence 0.50)
failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
-
line length 576 characters (raw pass, confidence 0.50)
var_from: Optional[List[V1NetworkPolicyPeer]] = Field(default=None, validation_alias=AliasChoices("from", "_from"), serialization_alias="from", description="from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this
-
line length 954 characters (raw pass, confidence 0.50)
preferred_during_scheduling_ignored_during_execution: Optional[List[V1PreferredSchedulingTerm]] = Field(default=None, validation_alias=AliasChoices("preferredDuringSchedulingIgnoredDuringExecution", "preferred_during_scheduling_ignored_during_execution"), serialization_alias="preferredDuringSchedulingIgnoredDuringE
-
line length 529 characters (raw pass, confidence 0.50)
per_pod: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("perPod", "per_pod"), serialization_alias="perPod", description="PerPod is the flat overhead quantity allocated per pod. Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cg
-
line length 604 characters (raw pass, confidence 0.50)
disable_resize_preemption: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("disableResizePreemption", "disable_resize_preemption"), serialization_alias="disableResizePreemption", description="DisableResizePreemption lists the owners (e.g., autoscalers, operators, administrators) that h
-
line length 564 characters (raw pass, confidence 0.50)
non_resource_urls: List[StrictStr] = Field(validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example: - \"/healthz\" is legal - \"/hea*\
-
line length 690 characters (raw pass, confidence 0.50)
block_owner_deletion: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("blockOwnerDeletion", "block_owner_deletion"), serialization_alias="blockOwnerDeletion", description="If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value
-
line length 656 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 682 characters (raw pass, confidence 0.50)
persistent_volume_reclaim_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("persistentVolumeReclaimPolicy", "persistent_volume_reclaim_policy"), serialization_alias="persistentVolumeReclaimPolicy", description="persistentVolumeReclaimPolicy defines what happens to a persistent volume
-
line length 697 characters (raw pass, confidence 0.50)
volume_attributes_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeAttributesClassName", "volume_attributes_class_name"), serialization_alias="volumeAttributesClassName", description="Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not
-
line length 816 characters (raw pass, confidence 0.50)
required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
-
line length 826 characters (raw pass, confidence 0.50)
required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
-
line length 769 characters (raw pass, confidence 0.50)
unverified_user_annotations: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("unverifiedUserAnnotations", "unverified_user_annotations"), serialization_alias="unverifiedUserAnnotations", description="unverifiedUserAnnotations allow pod authors to pass additional information to the
-
line length 515 characters (raw pass, confidence 0.50)
max_unavailable: Optional[StrictInt | StrictStr] = Field(default=None, validation_alias=AliasChoices("maxUnavailable", "max_unavailable"), serialization_alias="maxUnavailable", description="maxUnavailable indicates that an eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailab
-
line length 679 characters (raw pass, confidence 0.50)
resource_claim_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceClaimName", "resource_claim_name"), serialization_alias="resourceClaimName", description="ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod. When the DRA
-
compression ratio 0.768 is >2σ above file mean 0.601 (raw pass, confidence 0.50)
lization_alias="enableServiceLinks", description="EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.")
-
line length 686 characters (raw pass, confidence 0.50)
set_hostname_as_fqdn: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("setHostnameAsFQDN", "set_hostname_as_fqdn"), serialization_alias="setHostnameAsFQDN", description="If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux contai
-
compression ratio 0.776 is >2σ above file mean 0.601 (raw pass, confidence 0.50)
volumes: Optional[List[V1Volume]] = Field(default=None, description="List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes")
openapi_types: ClassVar[Dict[str, str]] = {
"active_deadline_seconds": "int",
-
compression ratio 0.772 is >2σ above file mean 0.598 (raw pass, confidence 0.50)
start_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("startTime", "start_time"), serialization_alias="startTime", description="RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.")
-
line length 597 characters (raw pass, confidence 0.50)
non_resource_urls: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="nonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step
-
line length 570 characters (raw pass, confidence 0.50)
global_default: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("globalDefault", "global_default"), serialization_alias="globalDefault", description="globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class.
-
line length 616 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value bet
-
line length 639 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
-
compression ratio 0.761 is >2σ above file mean 0.625 (raw pass, confidence 0.50)
tion_alias="readOnlyRootFilesystem", description="Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.")
-
line length 594 characters (raw pass, confidence 0.50)
run_as_non_root: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("runAsNonRoot", "run_as_non_root"), serialization_alias="runAsNonRoot", description="Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not
-
line length 604 characters (raw pass, confidence 0.50)
image_pull_secrets: Optional[List[V1LocalObjectReference]] = Field(default=None, validation_alias=AliasChoices("imagePullSecrets", "image_pull_secrets"), serialization_alias="imagePullSecrets", description="ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in po
-
line length 593 characters (raw pass, confidence 0.50)
expiration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("expirationSeconds", "expiration_seconds"), serialization_alias="expirationSeconds", description="expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the
-
compression ratio 0.735 is >2σ above file mean 0.565 (raw pass, confidence 0.50)
serialization_alias="externalName", description="externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"Ex
-
compression ratio 0.736 is >2σ above file mean 0.565 (raw pass, confidence 0.50)
ports: Optional[List[V1ServicePort]] = Field(default=None, description="The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies")
-
line length 641 characters (raw pass, confidence 0.50)
volume_claim_templates: Optional[List[V1PersistentVolumeClaim]] = Field(default=None, validation_alias=AliasChoices("volumeClaimTemplates", "volume_claim_templates"), serialization_alias="volumeClaimTemplates", description="volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet
-
line length 532 characters (raw pass, confidence 0.50)
allowed_topologies: Optional[List[V1TopologySelectorTerm]] = Field(default=None, validation_alias=AliasChoices("allowedTopologies", "allowed_topologies"), serialization_alias="allowedTopologies", description="allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume pl
-
line length 620 characters (raw pass, confidence 0.50)
volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be use
-
line length 620 characters (raw pass, confidence 0.50)
volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be use
-
line length 504 characters (raw pass, confidence 0.50)
evaluation_error: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("evaluationError", "evaluation_error"), serialization_alias="evaluationError", description="evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and
-
line length 511 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
compression ratio 0.786 is >2σ above file mean 0.560 (raw pass, confidence 0.50)
failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
-
line length 664 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 527 characters (raw pass, confidence 0.50)
completion_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("completionTime", "completion_time"), serialization_alias="completionTime", description="completionTime tracks the time at which the Responder stopped processing the eviction request. Completion means that the responders has eit
-
line length 545 characters (raw pass, confidence 0.50)
common_encoding_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("commonEncodingVersion", "common_encoding_version"), serialization_alias="commonEncodingVersion", description="commonEncodingVersion is set to an encoding storage version if all API server instances share that same vers
-
line length 574 characters (raw pass, confidence 0.50)
renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
-
line length 633 characters (raw pass, confidence 0.50)
preemption_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("preemptionPolicy", "preemption_policy"), serialization_alias="preemptionPolicy", description="preemptionPolicy is the Policy for preempting pods/podgroups with lower priority. One of Never, PreemptLowerPriority. Defaults to
-
compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)
name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
-
line length 567 characters (raw pass, confidence 0.50)
priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
-
line length 666 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1alpha3PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices allo
-
line length 744 characters (raw pass, confidence 0.50)
partition_summary: Optional[List[V1alpha3PartitionTypeStatus]] = Field(default=None, validation_alias=AliasChoices("partitionSummary", "partition_summary"), serialization_alias="partitionSummary", description="PartitionSummary reports allocatability per (attribute, partition type) for a partitionable pool that publ
-
line length 579 characters (raw pass, confidence 0.50)
composite_pod_group_templates: Optional[List[V1alpha3CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGr
-
line length 551 characters (raw pass, confidence 0.50)
pod_group_templates: Optional[List[V1alpha3PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates i
-
compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)
name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
-
line length 567 characters (raw pass, confidence 0.50)
priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
-
compression ratio 0.690 is >2σ above file mean 0.538 (raw pass, confidence 0.50)
name: StrictStr = Field(description="Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim. Must be a DNS label and unique among all DeviceRequests in a ResourceClaim.")
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
line length 574 characters (raw pass, confidence 0.50)
renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
-
line length 656 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 665 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1beta1PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices alloc
-
line length 578 characters (raw pass, confidence 0.50)
composite_pod_group_templates: Optional[List[V1beta1CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGro
-
line length 550 characters (raw pass, confidence 0.50)
pod_group_templates: Optional[List[V1beta1PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates is
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
compression ratio 0.734 is >2σ above file mean 0.551 (raw pass, confidence 0.50)
capacity: Optional[V1beta2CapacityRequirements] = None
count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
-
line length 504 characters (raw pass, confidence 0.50)
min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be
-
line length 641 characters (raw pass, confidence 0.50)
stabilization_window_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("stabilizationWindowSeconds", "stabilization_window_seconds"), serialization_alias="stabilizationWindowSeconds", description="stabilizationWindowSeconds is the number of seconds for which past recommendations shoul
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy-loading __getattr__ in the synchronous Kubernetes client package that caches submodule attributes on first access.
Reasoning
This is the same generated PEP 562 lazy-import idiom as the async copy. It imports a submodule attribute by name and caches it in globals(). There is no decoding, execution or network activity.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy API-class loader in the synchronous Kubernetes client that imports and caches API modules on demand.
Reasoning
The code is the standard lazy-import pattern for API classes in the generated Kubernetes client. It resolves names from a fixed table with import_module and caches them. The finding is a false positive.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
value = getattr(import_module(module_name, __name__), name)
globals()[name] = value
return value
dismissed
LLM, confidence 0.92
Lazy model-class loader in the synchronous Kubernetes client that resolves model attributes on first access.
Reasoning
This is the generated PEP 562 lazy-import idiom for model classes. It imports a fixed module by name and caches the attribute. There is no evidence of malicious intent.
-
line length 625 characters (raw pass, confidence 0.50)
storage_version_hash: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("storageVersionHash", "storage_version_hash"), serialization_alias="storageVersionHash", description="The hash value of the storage version, the version this resource is converted to when written to the data store. Value m
-
line length 753 characters (raw pass, confidence 0.50)
binary_data: Optional[Dict[str, Union[Annotated[bytes, Field(strict=True)], Annotated[str, Field(strict=True)]]]] = Field(default=None, validation_alias=AliasChoices("binaryData", "binary_data"), serialization_alias="binaryData", description="BinaryData contains the binary data. Each key must consist of alphanumeri
-
line length 639 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
-
compression ratio 0.609 is >2σ above file mean 0.520 (raw pass, confidence 0.50)
alization_alias="requiresRepublish", description="requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false. Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVo
-
line length 678 characters (raw pass, confidence 0.50)
maximum_volume_size: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("maximumVolumeSize", "maximum_volume_size"), serialization_alias="maximumVolumeSize", description="maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology
-
line length 696 characters (raw pass, confidence 0.50)
preserve_unknown_fields: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("preserveUnknownFields", "preserve_unknown_fields"), serialization_alias="preserveUnknownFields", description="preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be
-
line length 618 characters (raw pass, confidence 0.50)
stored_versions: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("storedVersions", "stored_versions"), serialization_alias="storedVersions", description="storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for s
-
line length 538 characters (raw pass, confidence 0.50)
additional_printer_columns: Optional[List[V1CustomResourceColumnDefinition]] = Field(default=None, validation_alias=AliasChoices("additionalPrinterColumns", "additional_printer_columns"), serialization_alias="additionalPrinterColumns", description="additionalPrinterColumns specifies additional columns returned in T
-
line length 525 characters (raw pass, confidence 0.50)
status_replicas_path: StrictStr = Field(validation_alias=AliasChoices("statusReplicasPath", "status_replicas_path"), serialization_alias="statusReplicasPath", description="statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the ar
-
line length 667 characters (raw pass, confidence 0.50)
propagation_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("propagationPolicy", "propagation_policy"), serialization_alias="propagationPolicy", description="Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The defa
-
line length 588 characters (raw pass, confidence 0.50)
progress_deadline_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("progressDeadlineSeconds", "progress_deadline_seconds"), serialization_alias="progressDeadlineSeconds", description="The maximum time in seconds for a deployment to make progress before it is considered to be failed.
-
line length 504 characters (raw pass, confidence 0.50)
terminating_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("terminatingReplicas", "terminating_replicas"), serialization_alias="terminatingReplicas", description="Total number of terminating pods targeted by this deployment. Terminating pods have a non-null .metadata.deletionTimes
-
line length 593 characters (raw pass, confidence 0.50)
skip_node_operations: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("skipNodeOperations", "skip_node_operations"), serialization_alias="skipNodeOperations", description="SkipNodeOperations lists node-local resource operations (gRPC calls) that will be skipped for this allocated devic
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
line length 595 characters (raw pass, confidence 0.50)
size_limit: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("sizeLimit", "size_limit"), serialization_alias="sizeLimit", description="sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on me
-
line length 604 characters (raw pass, confidence 0.50)
deprecated_topology: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("deprecatedTopology", "deprecated_topology"), serialization_alias="deprecatedTopology", description="deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be
-
compression ratio 0.734 is >2σ above file mean 0.553 (raw pass, confidence 0.50)
capacity: Optional[V1CapacityRequirements] = None
count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
-
line length 603 characters (raw pass, confidence 0.50)
lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this
-
line length 554 characters (raw pass, confidence 0.50)
matching_precedence: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("matchingPrecedence", "matching_precedence"), serialization_alias="matchingPrecedence", description="`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among th
-
line length 504 characters (raw pass, confidence 0.50)
min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be
-
line length 506 characters (raw pass, confidence 0.50)
secret_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("secretName", "secret_name"), serialization_alias="secretName", description="secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. I
-
line length 712 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1alpha3WorkloadPodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="ResourceClaims defines which ResourceClaims may be shared among Pods in the Job. Pods consume the device
-
compression ratio 0.816 is >2σ above file mean 0.588 (raw pass, confidence 0.50)
enum: Optional[List[Any]] = None
example: Any = Field(default=None, description="JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.")
-
line length 601 characters (raw pass, confidence 0.50)
lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this fi
-
line length 575 characters (raw pass, confidence 0.50)
resource_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceVersion", "resource_version"), serialization_alias="resourceVersion", description="String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed
-
compression ratio 0.786 is >2σ above file mean 0.548 (raw pass, confidence 0.50)
failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
-
line length 576 characters (raw pass, confidence 0.50)
var_from: Optional[List[V1NetworkPolicyPeer]] = Field(default=None, validation_alias=AliasChoices("from", "_from"), serialization_alias="from", description="from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this
-
line length 954 characters (raw pass, confidence 0.50)
preferred_during_scheduling_ignored_during_execution: Optional[List[V1PreferredSchedulingTerm]] = Field(default=None, validation_alias=AliasChoices("preferredDuringSchedulingIgnoredDuringExecution", "preferred_during_scheduling_ignored_during_execution"), serialization_alias="preferredDuringSchedulingIgnoredDuringE
-
line length 529 characters (raw pass, confidence 0.50)
per_pod: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("perPod", "per_pod"), serialization_alias="perPod", description="PerPod is the flat overhead quantity allocated per pod. Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cg
-
line length 604 characters (raw pass, confidence 0.50)
disable_resize_preemption: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("disableResizePreemption", "disable_resize_preemption"), serialization_alias="disableResizePreemption", description="DisableResizePreemption lists the owners (e.g., autoscalers, operators, administrators) that h
-
line length 564 characters (raw pass, confidence 0.50)
non_resource_urls: List[StrictStr] = Field(validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example: - \"/healthz\" is legal - \"/hea*\
-
line length 690 characters (raw pass, confidence 0.50)
block_owner_deletion: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("blockOwnerDeletion", "block_owner_deletion"), serialization_alias="blockOwnerDeletion", description="If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value
-
line length 656 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 682 characters (raw pass, confidence 0.50)
persistent_volume_reclaim_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("persistentVolumeReclaimPolicy", "persistent_volume_reclaim_policy"), serialization_alias="persistentVolumeReclaimPolicy", description="persistentVolumeReclaimPolicy defines what happens to a persistent volume
-
line length 697 characters (raw pass, confidence 0.50)
volume_attributes_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeAttributesClassName", "volume_attributes_class_name"), serialization_alias="volumeAttributesClassName", description="Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not
-
line length 816 characters (raw pass, confidence 0.50)
required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
-
line length 826 characters (raw pass, confidence 0.50)
required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
-
line length 769 characters (raw pass, confidence 0.50)
unverified_user_annotations: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("unverifiedUserAnnotations", "unverified_user_annotations"), serialization_alias="unverifiedUserAnnotations", description="unverifiedUserAnnotations allow pod authors to pass additional information to the
-
line length 515 characters (raw pass, confidence 0.50)
max_unavailable: Optional[StrictInt | StrictStr] = Field(default=None, validation_alias=AliasChoices("maxUnavailable", "max_unavailable"), serialization_alias="maxUnavailable", description="maxUnavailable indicates that an eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailab
-
line length 679 characters (raw pass, confidence 0.50)
resource_claim_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceClaimName", "resource_claim_name"), serialization_alias="resourceClaimName", description="ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod. When the DRA
-
compression ratio 0.768 is >2σ above file mean 0.601 (raw pass, confidence 0.50)
lization_alias="enableServiceLinks", description="EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.")
-
line length 686 characters (raw pass, confidence 0.50)
set_hostname_as_fqdn: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("setHostnameAsFQDN", "set_hostname_as_fqdn"), serialization_alias="setHostnameAsFQDN", description="If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux contai
-
compression ratio 0.776 is >2σ above file mean 0.601 (raw pass, confidence 0.50)
volumes: Optional[List[V1Volume]] = Field(default=None, description="List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes")
openapi_types: ClassVar[Dict[str, str]] = {
"active_deadline_seconds": "int",
-
compression ratio 0.772 is >2σ above file mean 0.598 (raw pass, confidence 0.50)
start_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("startTime", "start_time"), serialization_alias="startTime", description="RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.")
-
line length 597 characters (raw pass, confidence 0.50)
non_resource_urls: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="nonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step
-
line length 570 characters (raw pass, confidence 0.50)
global_default: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("globalDefault", "global_default"), serialization_alias="globalDefault", description="globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class.
-
line length 616 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value bet
-
line length 639 characters (raw pass, confidence 0.50)
default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
-
compression ratio 0.761 is >2σ above file mean 0.625 (raw pass, confidence 0.50)
tion_alias="readOnlyRootFilesystem", description="Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.")
-
line length 594 characters (raw pass, confidence 0.50)
run_as_non_root: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("runAsNonRoot", "run_as_non_root"), serialization_alias="runAsNonRoot", description="Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not
-
line length 604 characters (raw pass, confidence 0.50)
image_pull_secrets: Optional[List[V1LocalObjectReference]] = Field(default=None, validation_alias=AliasChoices("imagePullSecrets", "image_pull_secrets"), serialization_alias="imagePullSecrets", description="ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in po
-
line length 593 characters (raw pass, confidence 0.50)
expiration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("expirationSeconds", "expiration_seconds"), serialization_alias="expirationSeconds", description="expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the
-
compression ratio 0.735 is >2σ above file mean 0.565 (raw pass, confidence 0.50)
serialization_alias="externalName", description="externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"Ex
-
compression ratio 0.736 is >2σ above file mean 0.565 (raw pass, confidence 0.50)
ports: Optional[List[V1ServicePort]] = Field(default=None, description="The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies")
-
line length 641 characters (raw pass, confidence 0.50)
volume_claim_templates: Optional[List[V1PersistentVolumeClaim]] = Field(default=None, validation_alias=AliasChoices("volumeClaimTemplates", "volume_claim_templates"), serialization_alias="volumeClaimTemplates", description="volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet
-
line length 532 characters (raw pass, confidence 0.50)
allowed_topologies: Optional[List[V1TopologySelectorTerm]] = Field(default=None, validation_alias=AliasChoices("allowedTopologies", "allowed_topologies"), serialization_alias="allowedTopologies", description="allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume pl
-
line length 620 characters (raw pass, confidence 0.50)
volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be use
-
line length 620 characters (raw pass, confidence 0.50)
volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be use
-
line length 504 characters (raw pass, confidence 0.50)
evaluation_error: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("evaluationError", "evaluation_error"), serialization_alias="evaluationError", description="evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and
-
line length 511 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
compression ratio 0.786 is >2σ above file mean 0.560 (raw pass, confidence 0.50)
failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
-
line length 664 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 527 characters (raw pass, confidence 0.50)
completion_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("completionTime", "completion_time"), serialization_alias="completionTime", description="completionTime tracks the time at which the Responder stopped processing the eviction request. Completion means that the responders has eit
-
line length 545 characters (raw pass, confidence 0.50)
common_encoding_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("commonEncodingVersion", "common_encoding_version"), serialization_alias="commonEncodingVersion", description="commonEncodingVersion is set to an encoding storage version if all API server instances share that same vers
-
line length 574 characters (raw pass, confidence 0.50)
renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
-
line length 633 characters (raw pass, confidence 0.50)
preemption_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("preemptionPolicy", "preemption_policy"), serialization_alias="preemptionPolicy", description="preemptionPolicy is the Policy for preempting pods/podgroups with lower priority. One of Never, PreemptLowerPriority. Defaults to
-
compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)
name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
-
line length 567 characters (raw pass, confidence 0.50)
priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
-
line length 666 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1alpha3PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices allo
-
line length 744 characters (raw pass, confidence 0.50)
partition_summary: Optional[List[V1alpha3PartitionTypeStatus]] = Field(default=None, validation_alias=AliasChoices("partitionSummary", "partition_summary"), serialization_alias="partitionSummary", description="PartitionSummary reports allocatability per (attribute, partition type) for a partitionable pool that publ
-
line length 579 characters (raw pass, confidence 0.50)
composite_pod_group_templates: Optional[List[V1alpha3CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGr
-
line length 551 characters (raw pass, confidence 0.50)
pod_group_templates: Optional[List[V1alpha3PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates i
-
compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)
name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
-
line length 567 characters (raw pass, confidence 0.50)
priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
-
compression ratio 0.690 is >2σ above file mean 0.538 (raw pass, confidence 0.50)
name: StrictStr = Field(description="Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim. Must be a DNS label and unique among all DeviceRequests in a ResourceClaim.")
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
line length 574 characters (raw pass, confidence 0.50)
renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
-
line length 656 characters (raw pass, confidence 0.50)
parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
-
line length 665 characters (raw pass, confidence 0.50)
resource_claims: Optional[List[V1beta1PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices alloc
-
line length 578 characters (raw pass, confidence 0.50)
composite_pod_group_templates: Optional[List[V1beta1CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGro
-
line length 550 characters (raw pass, confidence 0.50)
pod_group_templates: Optional[List[V1beta1PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates is
-
line length 643 characters (raw pass, confidence 0.50)
toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
-
compression ratio 0.734 is >2σ above file mean 0.551 (raw pass, confidence 0.50)
capacity: Optional[V1beta2CapacityRequirements] = None
count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
-
line length 504 characters (raw pass, confidence 0.50)
min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be
-
line length 641 characters (raw pass, confidence 0.50)
stabilization_window_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("stabilizationWindowSeconds", "stabilization_window_seconds"), serialization_alias="stabilizationWindowSeconds", description="stabilizationWindowSeconds is the number of seconds for which past recommendations shoul
Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.