Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
identifier `с` contains homoglyph candidates: с (0441)→c (raw pass, confidence 0.70)
`python tests/slo/src/ table-create localhost:2136 /local -t tableName
--min-partitions-count 6 --max-partitions-count 1000 --partition-size 1 -с 1000
--write-timeout 10000`
suspicious
LLM, confidence 0.55
A Cyrillic lookalike character in a documented CLI flag (-с 1000) in the SLO README.
Reasoning
A Cyrillic 'с' (U+0441) appears in a shell command in the README, where a Latin 'c' is expected. This is a genuine homoglyph and not a legitimate choice, but it most likely came from copy-paste or a keyboard layout slip, and it would break the command rather than hide anything. The impact is low, though it is worth fixing.
-
base64-like blob (2008 bytes over 32 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE
BhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQK
DA9TU0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZp
-
base64-like blob (876 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC
VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0
-
base64-like blob (2028 bytes over 32 lines, compression ratio 0.70) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV
BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE
CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy
-
base64-like blob (888 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMC
VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
U0wgQ29ycG9yYXRpb24xNDAyBgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZp
-
base64-like blob (1888 bytes over 30 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg
MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh
bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx
-
base64-like blob (828 bytes over 13 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQsw
CQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91
bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwg
-
base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBH
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
-
base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBH
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
-
base64-like blob (1808 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH
bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x
-
base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBF
eHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMx
-
base64-like blob (2176 bytes over 34 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw
WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw
MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x
-
base64-like blob (1228 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD
VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU
ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH
-
base64-like blob (748 bytes over 12 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG
EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx
IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw
-
base64-like blob (1988 bytes over 32 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQEL
BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n
-
base64-like blob (1848 bytes over 29 lines, compression ratio 0.70) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFZTCCA02gAwIBAgIKUlD06gAAAAAAGDANBgkqhkiG9w0BAQ0FADAfMR0wGwYD
VQQDExRZYW5kZXhJbnRlcm5hbFJvb3RDQTAeFw0xODA2MjgxMTE0NTdaFw0zMjA2
MjgxMTI0NTdaMFsxEjAQBgoJkiaJk/IsZAEZFgJydTEWMBQGCgmSJomT8ixkARkW
-
base64-like blob (1748 bytes over 28 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFGTCCAwGgAwIBAgIQJMM7ZIy2SYxCBgK7WcFwnjANBgkqhkiG9w0BAQ0FADAf
MR0wGwYDVQQDExRZYW5kZXhJbnRlcm5hbFJvb3RDQTAeFw0xMzAyMTExMzQxNDNa
Fw0zMzAyMTExMzUxNDJaMB8xHTAbBgNVBAMTFFlhbmRleEludGVybmFsUm9vdENB
-
`require` called with a non-literal specifier (ast pass, confidence 0.60)
require(Modules.AI);
require(Modules.ASR);
require(Modules.Player);
likely benign
LLM, confidence 0.85
Loads Voximplant built-in modules (AI, ASR, Player) via require on a Modules constant.
Reasoning
Voximplant scenarios load platform modules through require(Modules.X), where Modules is a platform-provided constant. The non-literal specifier is the platform's normal module-loading style, not a hidden dynamic load.
-
`require` called with a non-literal specifier (ast pass, confidence 0.60)
require(Modules.AI);
require(Modules.ASR);
require(Modules.Player);
likely benign
LLM, confidence 0.85
Repeats the Voximplant built-in module loading calls for the demo bot.
Reasoning
Same platform module-loading pattern as line 1. Nothing in the snippet fetches or executes untrusted code.
-
`require` called with a non-literal specifier (ast pass, confidence 0.60)
require(Modules.ASR);
require(Modules.Player);
let mycall = null,
likely benign
LLM, confidence 0.85
Further Voximplant module require calls in the reservations demo scenario.
Reasoning
Same platform module-loading pattern in a demo scenario file. The flagged require resolves against a fixed set of platform modules.
-
identifier `К` contains homoglyph candidates: К (041A)→K (in string/comment) (raw pass, confidence 0.35)
Logger.write("text: " + result.text);
msg += " К сожалению не нашлось подходящих столиков. Простите! ";
} else {
Logger.write('OK');
-
31 rows of base64-like lines, lines 13-14 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)
PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3UpPLj8Xw
likely benign
LLM, confidence 0.80
Test fixture containing a PEM-formatted private key string for credential tests.
Reasoning
A PEM private key header and base64 body inside a test file. The raw pass flags base64-like lines, which is a high-false-positive signal. Test fixtures commonly use fake or throwaway keys, and nothing here shows real credential misuse.
-
35 rows of base64-like lines, lines 15-18 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)
RIVATE_KEY_CONTENT = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3U
likely benign
LLM, confidence 0.80
Test-only PEM private key constant used by OAuth2 token exchange tests.
Reasoning
Same PEM-style base64 key fixture as other test files, in an OAuth token exchange test. The raw base64 signal fires on expected test data.
-
31 rows of base64-like lines, lines 7-8 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)
PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3UpPLj8Xw
likely benign
LLM, confidence 0.80
Test fixture PEM private key for OAuth2 token source tests.
Reasoning
The same PEM key fixture reappears in a token source test. It is test data, and the base64 finding is a raw-pass pattern match on that data.
-
`sh -c` called with a dynamic string — equivalent to eval (ast pass, confidence 0.88)
sh -c "docker stop ${nodeForChaos} -t 10"
sh -c "docker start ${nodeForChaos}"
likely benign
LLM, confidence 0.80
Chaos test script stops and starts a docker container via sh -c with a node name variable.
Reasoning
The script runs sh -c with an interpolated node name for docker stop and start. This is a local chaos-testing harness, and the interpolated value is a container name the operator sets, not untrusted input. It is a shell-injection smell at most, not malicious.
-
`sh -c` called with a dynamic string — equivalent to eval (ast pass, confidence 0.88)
sh -c "docker stop ${nodeForChaos} -t 10"
sh -c "docker start ${nodeForChaos}"
sleep 20
likely benign
LLM, confidence 0.80
Chaos script restarts a docker node after a stop, using sh -c with an interpolated name.
Reasoning
Same sh -c docker start with the node variable in a chaos-testing harness. Operator-controlled input with no sign of obfuscation or remote fetch.
-
`sh -c` called with a dynamic string — equivalent to eval (ast pass, confidence 0.88)
sh -c "docker restart ${nodeForChaos} -t 0"
sleep 20
likely benign
LLM, confidence 0.80
Chaos test script restarts a docker container with sh -c and a node name.
Reasoning
Docker restart via sh -c in a chaos-test script. The interpolated variable is local configuration, and the pattern is an ordinary test harness shortcut.
-
`sh -c` called with a dynamic string — equivalent to eval (ast pass, confidence 0.88)
sh -c "docker kill -s SIGKILL ${nodeForChaos}"
likely benign
LLM, confidence 0.80
Chaos script kills a docker node with SIGKILL via sh -c for fault injection.
Reasoning
Docker kill with SIGKILL via sh -c in the chaos harness. This is deliberate fault injection for testing, with no evidence of hidden or remote payloads.
-
reach-by-name through `globals` (ast pass, confidence 0.60)
module = importlib.import_module("." + name, __name__)
globals()[name] = module
return module
raise AttributeError("module {!r} has no attribute {!r}".format(__name__, name))
likely benign
LLM, confidence 0.92
Module-level __getattr__ that lazily imports and caches ydb submodules by name.
Reasoning
This is the standard PEP 562 lazy-import pattern: importlib imports a submodule by name, caches it in globals(), and raises AttributeError otherwise. It is a common library idiom and does not hide malicious behavior.
-
line length 591 characters (raw pass, confidence 0.50)
dependencies=[protos_dot_annotations_dot_validation__pb2.DESCRIPTOR,protos_dot_ydb__common__pb2.DESCRIPTOR,protos_dot_ydb__issue__message__pb2.DESCRIPTOR,protos_dot_ydb__operation__pb2.DESCRIPTOR,protos_dot_ydb__query__stats__pb2.DESCRIPTOR,protos_dot_ydb__value__pb2.DESCRIPTOR,protos_dot_ydb__scheme__pb2.DESCRIPTOR,
-
line length 742 characters (raw pass, confidence 0.50)
nested_types=[_STREAMREADMESSAGE_PARTITIONSESSION, _STREAMREADMESSAGE_FROMCLIENT, _STREAMREADMESSAGE_FROMSERVER, _STREAMREADMESSAGE_INITREQUEST, _STREAMREADMESSAGE_INITRESPONSE, _STREAMREADMESSAGE_READREQUEST, _STREAMREADMESSAGE_READRESPONSE, _STREAMREADMESSAGE_COMMITOFFSETREQUEST, _STREAMREADMESSAGE_COMMITOFFSETRESP
-
line length 684 characters (raw pass, confidence 0.50)
def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
-
line length 817 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
-
line length 639 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
-
line length 801 characters (raw pass, confidence 0.50)
def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
-
line length 523 characters (raw pass, confidence 0.50)
def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
-
line length 730 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
-
line length 920 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
-
line length 651 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
-
line length 696 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
-
line length 1159 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
-
line length 1534 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
-
line length 803 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
-
line length 824 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
-
line length 604 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
-
line length 782 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
-
line length 1539 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
-
line length 619 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
-
line length 582 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
-
line length 1191 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
-
line length 1134 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
-
line length 510 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
-
line length 766 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
-
line length 1043 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
-
line length 789 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
-
line length 717 characters (raw pass, confidence 0.50)
def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ...,
-
line length 1047 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration,
-
line length 753 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
-
line length 810 characters (raw pass, confidence 0.50)
def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
-
line length 1104 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
-
line length 894 characters (raw pass, confidence 0.50)
def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
-
line length 697 characters (raw pass, confidence 0.50)
def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
-
line length 684 characters (raw pass, confidence 0.50)
def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
-
line length 817 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
-
line length 639 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
-
line length 801 characters (raw pass, confidence 0.50)
def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
-
line length 523 characters (raw pass, confidence 0.50)
def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
-
line length 730 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
-
line length 920 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
-
line length 651 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
-
line length 696 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
-
line length 1159 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
-
line length 1534 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
-
line length 803 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
-
line length 824 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
-
line length 604 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
-
line length 782 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
-
line length 1539 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
-
line length 619 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
-
line length 582 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
-
line length 1191 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
-
line length 1134 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
-
line length 510 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
-
line length 766 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
-
line length 1043 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
-
line length 789 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
-
line length 717 characters (raw pass, confidence 0.50)
def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ...,
-
line length 1047 characters (raw pass, confidence 0.50)
def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration,
-
line length 753 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
-
line length 810 characters (raw pass, confidence 0.50)
def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
-
line length 1104 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
-
line length 894 characters (raw pass, confidence 0.50)
def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
-
line length 697 characters (raw pass, confidence 0.50)
def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
-
line length 801 characters (raw pass, confidence 0.50)
def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
-
line length 639 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
-
line length 817 characters (raw pass, confidence 0.50)
def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
-
line length 684 characters (raw pass, confidence 0.50)
def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
-
line length 523 characters (raw pass, confidence 0.50)
def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
-
line length 730 characters (raw pass, confidence 0.50)
def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
-
line length 651 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
-
line length 696 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
-
line length 920 characters (raw pass, confidence 0.50)
def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
-
line length 1159 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
-
line length 1534 characters (raw pass, confidence 0.50)
def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
-
line length 803 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
-
line length 824 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
-
line length 604 characters (raw pass, confidence 0.50)
def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
-
line length 782 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
-
line length 619 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
-
line length 582 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
-
line length 1191 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
-
line length 1539 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
-
line length 1134 characters (raw pass, confidence 0.50)
def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
-
line length 766 characters (raw pass, confidence 0.50)
def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
-
line length 733 characters (raw pass, confidence 0.50)
def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
-
line length 510 characters (raw pass, confidence 0.50)
def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
-
line length 810 characters (raw pass, confidence 0.50)
def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
-
line length 1104 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
-
line length 753 characters (raw pass, confidence 0.50)
def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
-
line length 789 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
-
line length 1047 characters (raw pass, confidence 0.50)
def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration,
-
line length 717 characters (raw pass, confidence 0.50)
def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ...,
-
line length 1043 characters (raw pass, confidence 0.50)
def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
-
line length 894 characters (raw pass, confidence 0.50)
def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
-
line length 697 characters (raw pass, confidence 0.50)
def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
-
file imports decoder module(s) gzip and calls `.decompress()` — embedded payload decompressed at runtime (ast pass, confidence 0.75)
assert gzip.decompress(mess.get_data_bytes()) == gzip.decompress(expected_datas[i])
else:
assert mess.get_data_bytes() == expected_datas[i]
likely benign
LLM, confidence 0.93
Test assertion that decompresses gzip message payloads to compare them with expected data.
Reasoning
The flagged call is gzip.decompress applied to message data inside a test assertion. The test compares decompressed message payloads against expected data, which is ordinary test logic for a topic writer client. No hidden payload is executed or dropped, and the snippet shows no dynamic execution.
-
base64-like blob (1188 bytes over 19 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
likely benign
LLM, confidence 0.96
PEM-encoded GlobalSign root CA certificate in a default trust bundle.
Reasoning
The blob is a standard PEM-encoded X.509 root CA certificate (GlobalSign Root CA, with the DER-style ASN.1 header 'MIID...' and 'BQAwVzEL'). Base64 is the normal encoding for PEM, and a bundled default CA list is expected in a database SDK. The raw-pass base64 heuristic is a false positive here.
-
base64-like blob (1280 bytes over 20 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4G
A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNp
Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1
likely benign
LLM, confidence 0.96
PEM-encoded root CA certificate in the default trust bundle.
Reasoning
This is a standard PEM certificate block (GlobalSign root, ASN.1 DER base64 starting 'MIIDuj'). It is part of a default CA bundle, which is normal for TLS configuration. The high-entropy base64 signal reflects certificate encoding, not obfuscation.
-
base64-like blob (1428 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML
RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp
bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5
likely benign
LLM, confidence 0.96
PEM-encoded Entrust root CA certificate in the default trust bundle.
Reasoning
The snippet is a PEM certificate (Entrust root, ASN.1 base64 'MIIEKj'). Certificate bundles are expected in this file, which is named default_pem. The base64 match is structural encoding, not a payload.
-
base64-like blob (1188 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX
likely benign
LLM, confidence 0.96
PEM-encoded Baltimore CyberTrust root CA certificate.
Reasoning
The snippet is a PEM certificate for the Baltimore CyberTrust root (ASN.1 base64 'MIIDdz'). It is a standard trust anchor in a default CA bundle, so the base64 flag is a false positive.
-
base64-like blob (1564 bytes over 25 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
likely benign
LLM, confidence 0.96
PEM-encoded Entrust root CA certificate in the trust bundle.
Reasoning
The snippet is a PEM certificate for an Entrust root (ASN.1 base64 'MIIEkTCCA3'). It matches the normal structure of a bundled CA certificate and shows no executable or obfuscated content.
-
base64-like blob (1144 bytes over 18 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDVDCCAjygAwIBAgIDAjRWMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i
YWwgQ0EwHhcNMDIwNTIxMDQwMDAwWhcNMjIwNTIxMDQwMDAwWjBCMQswCQYDVQQG
likely benign
LLM, confidence 0.96
PEM-encoded GeoTrust Global CA root certificate.
Reasoning
The snippet is a PEM certificate for GeoTrust Global CA (ASN.1 base64 'MIIDVD'). Certificate bundles produce this base64 signal by design, so it is a false positive.
-
base64-like blob (1852 bytes over 29 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFaDCCA1CgAwIBAgIBATANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJVUzEW
MBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEeMBwGA1UEAxMVR2VvVHJ1c3QgVW5pdmVy
c2FsIENBMB4XDTA0MDMwNDA1MDAwMFoXDTI5MDMwNDA1MDAwMFowRTELMAkGA1UE
likely benign
LLM, confidence 0.96
PEM-encoded GeoTrust Universal CA root certificate.
Reasoning
The snippet is a PEM certificate for the GeoTrust Universal CA (ASN.1 base64 'MIIFaD'). It is a standard root certificate in a default trust store, and the base64 signal reflects normal certificate encoding.
-
base64-like blob (1856 bytes over 29 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFbDCCA1SgAwIBAgIBATANBgkqhkiG9w0BAQUFADBHMQswCQYDVQQGEwJVUzEW
MBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVy
c2FsIENBIDIwHhcNMDQwMzA0MDUwMDAwWhcNMjkwMzA0MDUwMDAwWjBHMQswCQYD
likely benign
LLM, confidence 0.96
PEM-encoded GeoTrust Universal CA 2 root certificate.
Reasoning
The snippet is a PEM certificate for GeoTrust Universal CA 2 (ASN.1 base64 'MIIFbD'). It is a normal trust anchor in a bundled CA file, so the base64 flag is a false positive.
-
base64-like blob (1440 bytes over 23 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb
MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow
GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj
likely benign
LLM, confidence 0.96
PEM-encoded Comodo CA root certificate in the default trust bundle.
Reasoning
The snippet is a PEM certificate for a Comodo CA root (ASN.1 base64 'MIIEMj'). It is standard certificate data in a default trust bundle, with no executable or hidden payload behavior.
-
base64-like blob (1956 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV
likely benign
LLM, confidence 0.96
A PEM-encoded X.509 root CA certificate embedded in the SDK's default certificate bundle.
Reasoning
The snippet is a standard PEM certificate block (BEGIN CERTIFICATE header, DER-encoded X.509 base64 body beginning with typical ASN.1 structure). The file is a default bundle of root CA certificates for a database SDK. The raw-pass base64 heuristic fires on ordinary certificate data, which is expected for this content.
-
base64-like blob (2264 bytes over 36 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
b3QgQ0EgMzAeFw0wNjExMjQxOTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNV
likely benign
LLM, confidence 0.96
A PEM-encoded root CA certificate in the default certificate bundle.
Reasoning
Same pattern: a PEM certificate block with a standard DER/ASN.1 base64 body inside a root CA bundle. No executable code, decoding logic, or obfuscation is present, so the raw base64 heuristic is a false positive here.
-
base64-like blob (1072 bytes over 17 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDIDCCAgigAwIBAgIBHTANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJGSTEP
MA0GA1UEChMGU29uZXJhMRkwFwYDVQQDExBTb25lcmEgQ2xhc3MyIENBMB4XDTAx
MDQwNjA3Mjk0MFoXDTIxMDQwNjA3Mjk0MFowOTELMAkGA1UEBhMCRkkxDzANBgNV
likely benign
LLM, confidence 0.96
A PEM-encoded Sonera Class 2 root CA certificate in the default bundle.
Reasoning
A PEM certificate block (Sonera Class2 CA) with standard ASN.1 base64 structure within a trust-store file. This is legitimate certificate data, not an encoded payload.
-
base64-like blob (1864 bytes over 30 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFcjCCA1qgAwIBAgIQH51ZWtcvwgZEpYAIaeNe9jANBgkqhkiG9w0BAQUFADA/
MQswCQYDVQQGEwJUVzEwMC4GA1UECgwnR292ZXJubWVudCBSb290IENlcnRpZmlj
YXRpb24gQXV0aG9yaXR5MB4XDTAyMTIwNTEzMjMzM1oXDTMyMTIwNTEzMjMzM1ow
likely benign
LLM, confidence 0.96
A PEM-encoded government root CA certificate in the default bundle.
Reasoning
A PEM certificate block (a government root certification authority) with a standard DER base64 body inside a CA bundle. The raw heuristic is matching expected certificate encoding.
-
base64-like blob (1264 bytes over 20 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
likely benign
LLM, confidence 0.96
A PEM-encoded DigiCert Global Root CA certificate in the default bundle.
Reasoning
A PEM certificate block (DigiCert Global Root CA) with standard ASN.1 base64 content in a trust bundle. No code execution or hidden payload is present.
-
base64-like blob (1292 bytes over 21 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
likely benign
LLM, confidence 0.96
A PEM-encoded DigiCert High Assurance root CA certificate in the default bundle.
Reasoning
A PEM certificate block (DigiCert High Assurance root) with a standard base64-encoded DER body. This is normal certificate-bundle content and matches the file's purpose.
-
base64-like blob (1224 bytes over 20 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDkjCCAnqgAwIBAgIRAIW9S/PY2uNp9pTXX8OlRCMwDQYJKoZIhvcNAQEFBQAw
PTELMAkGA1UEBhMCRlIxETAPBgNVBAoTCENlcnRwbHVzMRswGQYDVQQDExJDbGFz
cyAyIFByaW1hcnkgQ0EwHhcNOTkwNzA3MTcwNTAwWhcNMTkwNzA2MjM1OTU5WjA9
likely benign
LLM, confidence 0.96
A PEM-encoded Certplus Class 2 primary root CA certificate in the default bundle.
Reasoning
A PEM certificate block (Certplus Class 2 Primary CA) with standard X.509 base64 content in a CA bundle. The base64 flag reflects ordinary certificate encoding.
-
base64-like blob (1128 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/
MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow
likely benign
LLM, confidence 0.96
A PEM-encoded DST Root CA X3 certificate in the default bundle.
Reasoning
A PEM certificate block (DST Root CA X3) with standard base64-encoded ASN.1 structure in the trust store. Certificate data like this triggers the raw base64 heuristic without indicating malice.
-
base64-like blob (1960 bytes over 31 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln
biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF
likely benign
LLM, confidence 0.96
A PEM-encoded SwissSign Gold root CA certificate in the default bundle.
Reasoning
A PEM certificate block (SwissSign Gold root CA) with a standard DER base64 body in a certificate bundle. No executable or obfuscated content is present.
-
base64-like blob (1964 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UE
BhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWdu
IFNpbHZlciBDQSAtIEcyMB4XDTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0Nlow
likely benign
LLM, confidence 0.96
A PEM-encoded SwissSign Silver root CA certificate in the default bundle.
Reasoning
A PEM certificate block (SwissSign Silver root CA) with standard X.509 base64 encoding in a CA bundle. This is expected content for the file and not a payload.
-
base64-like blob (1196 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDfDCCAmSgAwIBAgIQGKy1av1pthU6Y2yv2vrEoTANBgkqhkiG9w0BAQUFADBY
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo
R2VvVHJ1c3QgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEx
likely benign
LLM, confidence 0.96
A PEM-encoded GeoTrust Primary root CA certificate in the default bundle.
Reasoning
A PEM certificate block (GeoTrust Primary root CA) with standard base64 DER content in the trust bundle. The raw heuristic is a false positive on certificate data.
-
base64-like blob (1276 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI
MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz
likely benign
LLM, confidence 0.95
A PEM-encoded CA root certificate (SecureTrust) in a default certificate bundle.
Reasoning
The blob is a PEM-encoded X.509 root CA certificate inside a standard CA bundle module. Base64 is the expected encoding for PEM, and the raw pass has a high false-positive rate on such data.
-
base64-like blob (1280 bytes over 20 lines, compression ratio 0.70) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBK
MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
GTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkx
likely benign
LLM, confidence 0.95
A PEM-encoded CA root certificate (Secure Global CA) in a default certificate bundle.
Reasoning
This is another PEM certificate block in the same CA bundle file. The base64 content is a normal DER certificate encoding, with no decoding or execution path.
-
base64-like blob (1412 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB
gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
likely benign
LLM, confidence 0.95
A PEM-encoded COMODO CA root certificate in a default certificate bundle.
Reasoning
Standard PEM certificate block in a CA bundle; the base64 is a legitimate X.509 structure with recognizable ASN.1 headers.
-
base64-like blob (1352 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIID8TCCAtmgAwIBAgIQQT1yx/RrH4FDffHSKFTfmjANBgkqhkiG9w0BAQUFADCB
ijELMAkGA1UEBhMCQ0gxEDAOBgNVBAoTB1dJU2VLZXkxGzAZBgNVBAsTEkNvcHly
aWdodCAoYykgMjAwNTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNl
likely benign
LLM, confidence 0.95
A PEM-encoded WISeKey/OISTE CA certificate in a default certificate bundle.
Reasoning
PEM certificate block in a trust store file. The base64 decodes to ordinary certificate fields, consistent with a CA bundle.
-
base64-like blob (1256 bytes over 20 lines, compression ratio 0.70) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV
BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X
DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ
likely benign
LLM, confidence 0.95
A PEM-encoded Certigna CA certificate in a default certificate bundle.
Reasoning
PEM-encoded CA certificate (Dhimyotis/Certigna) in a standard bundle. The base64 is expected for certificate storage and carries no executable payload.
-
base64-like blob (1244 bytes over 20 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYG
A1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2Jh
bCBSb290MB4XDTA2MTIxNTA4MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UE
likely benign
LLM, confidence 0.95
A PEM-encoded Cybertrust Global Root CA certificate in a default certificate bundle.
Reasoning
Standard PEM certificate block (Cybertrust Global Root) in a CA bundle. The high-entropy base64 is the normal encoding of a DER certificate.
-
base64-like blob (1948 bytes over 31 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
likely benign
LLM, confidence 0.95
A PEM-encoded Chunghwa/ePKI root CA certificate in a default certificate bundle.
Reasoning
Large PEM certificate block for a national root CA, typical of a certificate bundle. The base64 is legitimate certificate data, not an encoded dropper.
-
base64-like blob (1104 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT
AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD
QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP
likely benign
LLM, confidence 0.95
A PEM-encoded certSIGN root CA certificate in a default certificate bundle.
Reasoning
PEM certificate for certSIGN root CA inside a trust bundle. The base64 is ordinary certificate encoding with no decoding or execution code.
-
base64-like blob (1368 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIID/jCCAuagAwIBAgIQFaxulBmyeUtB9iepwxgPHzANBgkqhkiG9w0BAQsFADCB
mDELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsT
MChjKSAyMDA4IEdlb1RydXN0IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25s
likely benign
LLM, confidence 0.95
A PEM-encoded GeoTrust CA certificate in a default certificate bundle.
Reasoning
PEM-encoded GeoTrust CA certificate in a CA bundle. The base64 encodes standard X.509 fields, and the surrounding file is a certificate store.
-
base64-like blob (872 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICiDCCAg2gAwIBAgIQNfwmXNmET8k9Jj1Xm67XVjAKBggqhkjOPQQDAzCBhDEL
MAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE4MDYGA1UECxMvKGMp
IDIwMDcgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxJDAi
likely benign
LLM, confidence 0.95
A PEM-encoded thawte ECDSA root CA certificate in a default certificate bundle.
Reasoning
PEM certificate block for a thawte root CA in a trust store. The ECDSA certificate base64 is expected content for this file type.
-
base64-like blob (1428 bytes over 23 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEKjCCAxKgAwIBAgIQYAGXt0an6rS0mtZLL/eQ+zANBgkqhkiG9w0BAQsFADCB
rjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
likely benign
LLM, confidence 0.95
A PEM-encoded thawte CA certificate in a default certificate bundle.
Reasoning
Standard PEM certificate for a thawte CA in a bundle file. The base64 is normal certificate encoding with no obfuscation or code execution.
-
base64-like blob (920 bytes over 15 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICrjCCAjWgAwIBAgIQPLL0SAoA4v7rJDteYD7DazAKBggqhkjOPQQDAzCBmDEL
MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChj
KSAyMDA3IEdlb1RydXN0IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (GeoTrust) in the ydb Python package.
Reasoning
The snippet is a PEM-encoded X.509 certificate body (BEGIN CERTIFICATE header, DER base64 with GeoTrust text). This is the standard embedded CA bundle in a database driver, not obfuscation.
-
base64-like blob (1620 bytes over 26 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIQQBrEZCGzEyEDDrvkEhrFHTANBgkqhkiG9w0BAQsFADCB
vTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwOCBWZXJp
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (VeriSign) in a trust bundle.
Reasoning
Standard base64 DER certificate block for a VeriSign root CA, consistent with a bundled trust store in default_pem.py.
-
base64-like blob (1400 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG
EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3
MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (NetLock) in a trust bundle.
Reasoning
Certificate block with NetLock issuer strings, typical of a PEM trust bundle. Base64 length is inherent to certificate encoding.
-
base64-like blob (1984 bytes over 31 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFyjCCA7KgAwIBAgIEAJiWjDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJO
TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFh
dCBkZXIgTmVkZXJsYW5kZW4gUm9vdCBDQSAtIEcyMB4XDTA4MDMyNjExMTgxN1oX
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (Staat der Nederlanden) in a trust bundle.
Reasoning
Standard X.509 certificate PEM (Staat der Nederlanden root) encoded in base64 DER; expected in a CA bundle file.
-
base64-like blob (1176 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDEr
MCkGA1UEChMiSmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoG
A1UEAxMTU2VjdXJlU2lnbiBSb290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (SecureSign) in a trust bundle.
Reasoning
Certificate PEM block (SecureSign Japan root) with normal DER structure; the high base64 entropy is inherent to certificates.
-
base64-like blob (1156 bytes over 19 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (GlobalSign R3) in a trust bundle.
Reasoning
GlobalSign root certificate in PEM form, a normal entry in a bundled CA file.
-
base64-like blob (2080 bytes over 33 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UE
BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h
cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEy
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (ACA/Spanish) in a trust bundle.
Reasoning
Spanish CA certificate PEM block with standard DER base64; consistent with a bundled trust store.
-
base64-like blob (2036 bytes over 32 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4
MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6
ZW5wZS5jb20wHhcNMDcxMjEzMTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYD
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (IZENPE) in a trust bundle.
Reasoning
PEM-encoded IZENPE CA certificate; standard base64 DER content found in CA bundles.
-
base64-like blob (1292 bytes over 21 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (GoDaddy) in a trust bundle.
Reasoning
GoDaddy root certificate in PEM form, a routine trust-store entry; the base64 is just DER encoding.
-
base64-like blob (1324 bytes over 21 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx
EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (Starfield) in a trust bundle.
Reasoning
Starfield root certificate PEM block; standard trust-store content, and the raw base64 signal is a known false positive for certificates.
-
base64-like blob (1348 bytes over 22 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx
EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVs
likely benign
LLM, confidence 0.97
Embedded PEM root CA certificate (Starfield) in a trust bundle.
Reasoning
Another Starfield root certificate PEM in the bundle; the flagged base64 is ordinary certificate data in a raw-pass heuristic false positive.
-
base64-like blob (1132 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UE
BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
dCBDb21tZXJjaWFsMB4XDTEwMDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDEL
likely benign
LLM, confidence 0.97
A PEM-encoded AffirmTrust Commercial root CA certificate embedded in a CA bundle.
Reasoning
The blob is a standard base64-encoded X.509 certificate in a PEM block. Its subject names (AffirmTrust Commercial) match a public root CA bundle, and a raw base64 match on certificate data is expected. The file is a bundled CA store, so this is a false positive.
-
base64-like blob (1132 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UE
BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
dCBOZXR3b3JraW5nMB4XDTEwMDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDEL
likely benign
LLM, confidence 0.97
A PEM-encoded AffirmTrust Networking root CA certificate in a CA bundle.
Reasoning
The blob is a standard base64-encoded X.509 certificate in a PEM block. Its subject names (AffirmTrust Networking) match a public root CA, and the file is a bundled CA store. This is a raw-pass false positive on legitimate certificate data.
-
base64-like blob (1808 bytes over 29 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UE
BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVz
dCBQcmVtaXVtMB4XDTEwMDEyOTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkG
likely benign
LLM, confidence 0.97
A PEM-encoded AffirmTrust Premium root CA certificate in a CA bundle.
Reasoning
This is a standard base64-encoded X.509 certificate in a PEM block with AffirmTrust Premium subject names. It sits in a public CA bundle, so the base64 signal reflects normal certificate encoding rather than obfuscation.
-
base64-like blob (688 bytes over 11 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMC
VVMxFDASBgNVBAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQ
cmVtaXVtIEVDQzAeFw0xMDAxMjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJ
likely benign
LLM, confidence 0.97
A PEM-encoded AffirmTrust Premium ECC root CA certificate in a CA bundle.
Reasoning
This is a standard base64-encoded ECC X.509 certificate in a PEM block (AffirmTrust Premium ECC). It is a public root CA entry in a bundle, and the base64 match is a false positive.
-
base64-like blob (1280 bytes over 20 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM
MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D
ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU
likely benign
LLM, confidence 0.97
A PEM-encoded Certum root CA certificate in a CA bundle.
Reasoning
The block is a standard base64 PEM certificate with Unizeto/Certum subject fields, consistent with a public root CA store. Nothing in the snippet suggests executable payloads or obfuscation beyond normal certificate encoding.
-
base64-like blob (1188 bytes over 19 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDEl
MCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMe
U2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoX
likely benign
LLM, confidence 0.97
A PEM-encoded SECOM root CA certificate in a CA bundle.
Reasoning
This is a standard base64 PEM certificate with SECOM Trust Systems subject names, part of a public root CA bundle. The raw base64 signal is a false positive on certificate data.
-
base64-like blob (1436 bytes over 23 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1Ix
RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p
likely benign
LLM, confidence 0.97
A PEM-encoded Hellenic Academic and Research Institutions root CA certificate in a CA bundle.
Reasoning
The block is a standard base64 PEM certificate with Hellenic Academic and Research Institutions subject names, typical of a public CA bundle. The base64 match reflects normal certificate encoding.
-
base64-like blob (1964 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE
BhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8w
MzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290
likely benign
LLM, confidence 0.97
A PEM-encoded Actalis root CA certificate in a CA bundle.
Reasoning
This is a standard base64 PEM certificate with Actalis subject names, part of a public root CA store. The raw-pass base64 signal is a false positive on legitimate certificate data.
-
base64-like blob (1168 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDZzCCAk+gAwIBAgIQGx+ttiD5JNM2a/fH8YygWTANBgkqhkiG9w0BAQUFADBF
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPVHJ1c3RpcyBMaW1pdGVkMRwwGgYDVQQL
ExNUcnVzdGlzIEZQUyBSb290IENBMB4XDTAzMTIyMzEyMTQwNloXDTI0MDEyMTEx
likely benign
LLM, confidence 0.97
A PEM-encoded Trustis FPS root CA certificate in a CA bundle.
Reasoning
The block is a standard base64 PEM certificate with Trustis FPS subject fields, consistent with a public CA bundle. Nothing indicates executable content or hidden payloads.
-
base64-like blob (1832 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
Q2xhc3MgMiBSb290IENBMB4XDTEwMTAyNjA4MzgwM1oXDTQwMTAyNjA4MzgwM1ow
likely benign
LLM, confidence 0.97
A PEM-encoded Buypass Class 2 root CA certificate in a CA bundle.
Reasoning
This is a standard base64 PEM certificate with Buypass Class 2 subject names, part of a public root CA bundle. The base64 signal is a false positive on certificate data.
-
base64-like blob (1832 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
Q2xhc3MgMyBSb290IENBMB4XDTEwMTAyNjA4Mjg1OFoXDTQwMTAyNjA4Mjg1OFow
likely benign
LLM, confidence 0.97
A PEM-encoded Buypass Class 3 root CA certificate in a CA bundle.
Reasoning
The block is a standard base64 PEM certificate with Buypass Class 3 subject names, consistent with a public CA bundle. The raw-pass base64 match is a false positive on legitimate certificate encoding.
-
base64-like blob (1376 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEAzCCAuugAwIBAgIQVID5oHPtPwBMyonY43HmSjANBgkqhkiG9w0BAQUFADB1
MQswCQYDVQQGEwJFRTEiMCAGA1UECgwZQVMgU2VydGlmaXRzZWVyaW1pc2tlc2t1
czEoMCYGA1UEAwwfRUUgQ2VydGlmaWNhdGlvbiBDZW50cmUgUm9vdCBDQTEYMBYG
dismissed
LLM, confidence 0.95
A PEM-encoded root CA certificate embedded in the YDB SDK's default certificate bundle.
Reasoning
The snippet is a PEM-encoded X.509 certificate (BEGIN CERTIFICATE header, DER structure beginning with a standard ASN.1 sequence). The file is a bundled CA root store for the YDB Python SDK, so the base64 is an expected encoding, not obfuscation. The raw pass flags any long base64 run, which is a known false-positive pattern here.
-
base64-like blob (1852 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNV
BAYTAlNLMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMu
MRkwFwYDVQQDExBDQSBEaXNpZyBSb290IFIyMB4XDTEyMDcxOTA5MTUzMFoXDTQy
dismissed
LLM, confidence 0.95
A PEM-encoded Disig Root R2 CA certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for the Disig Root R2 CA with a standard ASN.1 header. It is data in a bundled trust store in a certificate module, with no executable or decoding logic, so the base64 flag is a false positive.
-
base64-like blob (2676 bytes over 42 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UE
AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw
CQYDVQQGEwJFUzAeFw0xMTA1MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQ
dismissed
LLM, confidence 0.95
A PEM-encoded ACCV root CA certificate in the bundled trust store.
Reasoning
The snippet is a standard PEM certificate block (an ACCV root CA) inside a default certificate bundle. The high base64 density is inherent to certificate encoding and is not evidence of malicious intent.
-
base64-like blob (1800 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcx
EjAQBgNVBAoTCVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMT
VFdDQSBHbG9iYWwgUm9vdCBDQTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5
dismissed
LLM, confidence 0.95
A PEM-encoded TWCA Global Root CA certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for the TWCA Global Root CA, a legitimate trust anchor listed in a certificate bundle. Nothing in the snippet decodes or executes the data.
-
base64-like blob (1788 bytes over 28 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
dismissed
LLM, confidence 0.95
A PEM-encoded TeliaSonera Root CA v1 certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for the TeliaSonera Root CA v1, a standard entry in a certificate bundle. The base64 pattern is the normal encoding of an X.509 certificate.
-
base64-like blob (1188 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
dismissed
LLM, confidence 0.95
A PEM-encoded Atos TrustedRoot 2011 CA certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for an Atos TrustedRoot CA in a default certificate bundle. It is static certificate data with no decoding or execution logic around it.
-
base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQEL
BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00
dismissed
LLM, confidence 0.95
A PEM-encoded QuoVadis Root CA 1 G3 certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for QuoVadis Root CA 1 G3, a legitimate trust anchor. Long base64 runs are expected for certificates, and this raw-pass finding does not indicate obfuscation.
-
base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL
BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00
dismissed
LLM, confidence 0.95
A PEM-encoded QuoVadis Root CA 2 G3 certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for QuoVadis Root CA 2 G3 in a certificate bundle. The base64 is ordinary certificate encoding in a static data file.
-
base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQEL
BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMyBHMzAeFw0xMjAxMTIyMDI2MzJaFw00
dismissed
LLM, confidence 0.95
A PEM-encoded QuoVadis Root CA 3 G3 certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for QuoVadis Root CA 3 G3, a standard trust anchor. The base64 flag reflects normal certificate data, not a hidden payload.
-
base64-like blob (1220 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
dismissed
LLM, confidence 0.95
A PEM-encoded DigiCert Global Root CA certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for the DigiCert Global Root G2 CA, a widely used legitimate root. It is static data in a certificate bundle, so the raw base64 finding is a false positive.
-
base64-like blob (772 bytes over 13 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
dismissed
LLM, confidence 0.95
A PEM-encoded DigiCert Global Root G3 certificate in the bundled trust store.
Reasoning
The snippet is a PEM certificate for the DigiCert Global Root G3 CA (ECDSA), a legitimate trust anchor. It is standard certificate encoding inside a bundled CA file, with no decoding or execution logic.
-
base64-like blob (1904 bytes over 30 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
dismissed
LLM, confidence 0.96
A PEM-encoded X.509 root CA certificate (DigiCert) inside a bundled CA certificate file.
Reasoning
The snippet is a PEM certificate block with a standard DigiCert root header and ASN.1/DER base64 structure. This is expected content for a bundled CA certificate file, and the raw-pass base64 heuristic fires on it by design.
-
base64-like blob (1868 bytes over 30 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJO
TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFh
dCBkZXIgTmVkZXJsYW5kZW4gUm9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloX
dismissed
LLM, confidence 0.96
A PEM-encoded root CA certificate (Staat der Nederlanden) in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a Dutch government root CA (Staat der Nederlanden). The base64 is ordinary DER-encoded certificate data in a CA bundle, a known false-positive pattern for the raw base64 heuristic.
-
base64-like blob (1864 bytes over 30 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJO
TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFh
dCBkZXIgTmVkZXJsYW5kZW4gRVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0y
dismissed
LLM, confidence 0.96
A PEM-encoded EV root CA certificate (Staat der Nederlanden) in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a Dutch root CA with normal ASN.1 structure. It is standard trust-store content, and the base64 flag is a false positive.
-
base64-like blob (1840 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu
VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw
dismissed
LLM, confidence 0.96
A PEM-encoded IdenTrust commercial root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for IdenTrust, with readable DER structure and issuer names. This is typical CA bundle content and not obfuscation.
-
base64-like blob (1848 bytes over 29 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVu
VHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcN
dismissed
LLM, confidence 0.96
A PEM-encoded IdenTrust public sector root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for IdenTrust's public sector root. The structure is standard X.509 DER in base64, consistent with a trust-store bundle.
-
base64-like blob (1020 bytes over 16 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkG
A1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3
d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVu
dismissed
LLM, confidence 0.96
A PEM-encoded Entrust elliptic-curve root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for an Entrust ECC root, with the expected ECDSA certificate structure. The base64 flag reflects the format of the certificate, not a hidden payload.
-
base64-like blob (1900 bytes over 30 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJD
TjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9y
aXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkx
dismissed
LLM, confidence 0.96
A PEM-encoded China Financial Certification Authority EV root CA in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a China Financial Certification Authority root. It is standard certificate data in a bundle, and the base64 heuristic fires on the format.
-
base64-like blob (1272 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBt
MQswCQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUg
Rm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9i
dismissed
LLM, confidence 0.96
A PEM-encoded WISeKey/OISTE global root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a WISeKey/OISTE root, with recognizable issuer strings in the base64 header. This is ordinary CA bundle content.
-
base64-like blob (1184 bytes over 19 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL
BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6
ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw
dismissed
LLM, confidence 0.96
A PEM-encoded Polish SZAFIR root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a Polish root CA (Krajowa Izba Rozliczeniowa / SZAFIR). The base64 is normal DER certificate encoding, and this is expected trust-store data.
-
base64-like blob (1992 bytes over 32 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCB
gDELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIG
dismissed
LLM, confidence 0.96
A PEM-encoded Certum/Unizeto root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a Unizeto/Certum root CA. The structure is standard X.509 DER and the flag is a raw-pass false positive on certificate data.
-
base64-like blob (948 bytes over 15 lines, compression ratio 0.71) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzAN
BgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
c2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hl
dismissed
LLM, confidence 0.96
A PEM-encoded Hellenic Academic and Research Institutions root CA certificate in a CA bundle.
Reasoning
The snippet is a PEM certificate block for a Hellenic Academic and Research Institutions root CA with readable issuer naming. This is standard bundled trust-store content.
-
base64-like blob (1856 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
dismissed
LLM, confidence 0.95
A PEM-encoded root CA certificate in a bundled trust store.
Reasoning
The snippet is a standard PEM-encoded X.509 root CA certificate (ISRG Root X1 issuer names). Base64 is the normal encoding for PEM, and a bundled CA file in a database SDK is expected. The raw-pass base64 heuristic fires on this legitimate data.
-
base64-like blob (1888 bytes over 30 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsx
CzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJ
WiBGTk1ULVJDTTAeFw0wODEwMjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJ
dismissed
LLM, confidence 0.95
A PEM-encoded CA certificate inside a default certificate bundle.
Reasoning
The snippet is a PEM-encoded CA certificate (ASN.1 DER in base64 with recognizable issuer strings). This is ordinary certificate-bundle content, so the base64 blob flag is a false positive.
-
base64-like blob (1116 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
dismissed
LLM, confidence 0.95
A PEM-encoded Amazon root CA certificate.
Reasoning
The snippet is a PEM certificate for an Amazon Root CA, identifiable from its standard base64 DER header and issuer text. Certificate bundles in SDKs are legitimate, and the raw pass flags their encoding by design.
-
base64-like blob (1800 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF
ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL
dismissed
LLM, confidence 0.95
A PEM-encoded Amazon root CA certificate in a bundle.
Reasoning
The snippet is a PEM-encoded Amazon Root CA 2 certificate with standard DER structure. It is ordinary trust-store data and not obfuscated payload.
-
base64-like blob (592 bytes over 10 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
dismissed
LLM, confidence 0.95
A PEM-encoded Amazon root CA certificate using EC keys.
Reasoning
The snippet is a PEM-encoded Amazon Root CA 3 certificate, an EC key certificate with standard ASN.1 base64 content. Base64 blob detection on certificate data is a known false positive.
-
base64-like blob (672 bytes over 11 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
dismissed
LLM, confidence 0.95
A PEM-encoded Amazon root CA certificate using EC keys.
Reasoning
The snippet is a PEM-encoded Amazon Root CA 4 certificate. Its structure is standard and the content is public trust-store data.
-
base64-like blob (1972 bytes over 31 lines, compression ratio 0.74) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFwzCCA6ugAwIBAgIUCn6m30tEntpqJIWe5rgV0xZ/u7EwDQYJKoZIhvcNAQEL
BQAwRjELMAkGA1UEBhMCTFUxFjAUBgNVBAoMDUx1eFRydXN0IFMuQS4xHzAdBgNV
BAMMFkx1eFRydXN0IEdsb2JhbCBSb290IDIwHhcNMTUwMzA1MTMyMTU3WhcNMzUw
dismissed
LLM, confidence 0.95
A PEM-encoded LuxTrust root CA certificate.
Reasoning
The snippet is a PEM-encoded LuxTrust Global Root 2 certificate with recognizable issuer names. It is standard certificate bundle data, and the base64 flag is a false positive.
-
base64-like blob (1504 bytes over 24 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIx
GDAWBgNVBAcTD0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxp
bXNlbCB2ZSBUZWtub2xvamlrIEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0w
dismissed
LLM, confidence 0.95
A PEM-encoded TUBITAK root CA certificate.
Reasoning
The snippet is a PEM-encoded Turkish TUBITAK root CA certificate with standard DER base64 and Turkish issuer text. This is legitimate trust-store content.
-
base64-like blob (1896 bytes over 30 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UE
BhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ
IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0
dismissed
LLM, confidence 0.95
A PEM-encoded GDCA root CA certificate.
Reasoning
The snippet is a PEM-encoded GDCA TrustAUTH root certificate with standard base64 DER structure. Certificate bundles naturally contain this encoding, so the finding is a false positive.
-
base64-like blob (1436 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYD
VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
dismissed
LLM, confidence 0.95
A PEM-encoded TrustCor root CA certificate.
Reasoning
The snippet is a PEM-encoded TrustCor root CA certificate with standard DER base64 and issuer strings. It is ordinary trust-store data.
-
base64-like blob (2116 bytes over 34 lines, compression ratio 0.73) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNV
BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw
IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy
dismissed
LLM, confidence 0.95
A PEM-encoded TrustCor root CA certificate.
Reasoning
The snippet is a PEM-encoded TrustCor CA certificate with standard base64 DER content. It is legitimate certificate bundle data, and the raw-pass base64 heuristic is a false positive here.
-
base64-like blob (1416 bytes over 23 lines, compression ratio 0.72) (raw pass, confidence 0.60)
-----BEGIN CERTIFICATE-----
MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD
VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
dismissed
LLM, confidence 0.97
A bundled PEM certificate (TrustCor root CA data) in the ydb SDK's default certificate module.
Reasoning
The snippet is a PEM-encoded X.509 certificate (BEGIN CERTIFICATE header, standard base64 lines, DER structure starting MIIE...), and the file name default_pem.py matches a bundled CA certificate store as used by the ydb Python SDK. The base64 blob is the expected encoding of a certificate, not an obfuscated payload. The raw pass flags it only because base64 text is long, which is a known false-positive pattern.
Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
disclude.io