PyPI / ydb / 3.30.0

ydb 3.30.0

Source
https://github.com/ydb-platform/ydb-python-sdk
Artifact scanned
ydb-3.30.0-py3-none-any.whl (wheel · 1.4 MB · SHA-256 edb987dad9d6…)
Compared with
ydb-3.29.7-py2.py3-none-any.whl (0 signals introduced since)
Files
767 scanned, 5 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 8 warn · 201 info
Scan time
67.6 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): the 100 most severe of 108 warn and critical signals (100 with a verdict); 100 demoted to info. The rest are unreviewed.
Disclude version
4.3.0
Scanned (UTC)
2026-10-23 06:08

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. warn encoding-base64 ydb/default_pem.py:4360:1

    base64-like blob (1808 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9
    MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH
    bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x
  2. warn encoding-base64 ydb/default_pem.py:4399:1

    base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBH
    MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBF
    eHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMx
  3. warn encoding-base64 ydb/default_pem.py:4438:1

    base64-like blob (2176 bytes over 34 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw
    WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw
    MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x
  4. warn encoding-base64 ydb/default_pem.py:4482:1

    base64-like blob (1228 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD
    VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU
    ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH
  5. warn encoding-base64 ydb/default_pem.py:4564:1

    base64-like blob (748 bytes over 12 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG
    EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx
    IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw
  6. warn encoding-base64 ydb/default_pem.py:4586:1

    base64-like blob (1988 bytes over 32 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQEL
    BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
    SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n
  7. warn encoding-base64 ydb/default_pem.py:4620:1

    base64-like blob (1848 bytes over 29 lines, compression ratio 0.70) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFZTCCA02gAwIBAgIKUlD06gAAAAAAGDANBgkqhkiG9w0BAQ0FADAfMR0wGwYD
    VQQDExRZYW5kZXhJbnRlcm5hbFJvb3RDQTAeFw0xODA2MjgxMTE0NTdaFw0zMjA2
    MjgxMTI0NTdaMFsxEjAQBgoJkiaJk/IsZAEZFgJydTEWMBQGCgmSJomT8ixkARkW
  8. warn encoding-base64 ydb/default_pem.py:4651:1

    base64-like blob (1748 bytes over 28 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFGTCCAwGgAwIBAgIQJMM7ZIy2SYxCBgK7WcFwnjANBgkqhkiG9w0BAQ0FADAf
    MR0wGwYDVQQDExRZYW5kZXhJbnRlcm5hbFJvb3RDQTAeFw0xMzAyMTExMzQxNDNa
    Fw0zMzAyMTExMzUxNDJaMB8xHTAbBgNVBAMTFFlhbmRleEludGVybmFsUm9vdENB
  9. info warn → info by review encoding-base64 tests/auth/test_credentials.py:13:44

    31 rows of base64-like lines, lines 13-14 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)

    PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3UpPLj8Xw
    likely benign LLM, confidence 0.80 A PEM private-key string literal used as test data for credential handling.
    Reasoning

    A PEM-formatted private key appears as a string constant in a test module. Test fixtures often embed throwaway keys to exercise credential parsing, and the raw base64 signal is a low-precision pass. Nothing in the snippet shows the key being decoded, executed, or sent anywhere. A real key in a test file would still be worth a look.

  10. info warn → info by review encoding-base64 tests/oauth2_token_exchange/test_token_exchange.py:15:61

    35 rows of base64-like lines, lines 15-18 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)

    RIVATE_KEY_CONTENT = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3U
    likely benign LLM, confidence 0.80 A PEM private-key string literal in an OAuth2 test module.
    Reasoning

    Same PEM private-key-shaped string constant in an OAuth2 token-exchange test. It is a fixture pattern, and the raw encoding signal alone does not show obfuscation or execution.

  11. info warn → info by review encoding-base64 tests/oauth2_token_exchange/test_token_source.py:7:44

    31 rows of base64-like lines, lines 7-8 (first: base64-like blob (65 bytes, compression ratio 1.17)) (raw pass, confidence 0.60)

    PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC75/JS3rMcLJxv\nFgpOzF5+2gH+Yig3RE2MTl9uwC0BZKAv6foYr7xywQyWIK+W1cBhz8R4LfFmZo2j\nM0aCvdRmNBdW0EDSTnHLxCsFhoQWLVq+bI5f5jzkcoiioUtaEpADPqwgVULVtN/n\nnPJiZ6/dU30C3jmR6+LUgEntUtWt3eq3xQIn5lG3zC1klBY/HxtfH5Hu8xBvwRQT\nJnh3UpPLj8Xw
    likely benign LLM, confidence 0.80 A PEM private-key string literal used as test fixture data.
    Reasoning

    Identical PEM-style key fixture in a token-source test. Test data of this kind is common, and the snippet shows no runtime decoding or network use.

  12. info warn → info by review dynamic-attribute ydb/__init__.py:43:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            module = importlib.import_module("." + name, __name__)
            globals()[name] = module
            return module
        raise AttributeError("module {!r} has no attribute {!r}".format(__name__, name))
    likely benign LLM, confidence 0.85 Lazy submodule import via module __getattr__ that caches results in globals().
    Reasoning

    This is a module-level __getattr__ that lazily imports submodules with importlib and caches them in globals(). It is a standard lazy-loading idiom. The name comes from the module's own submodule list and nothing suspicious is reached.

  13. line length 591 characters (raw pass, confidence 0.50)

      dependencies=[protos_dot_annotations_dot_validation__pb2.DESCRIPTOR,protos_dot_ydb__common__pb2.DESCRIPTOR,protos_dot_ydb__issue__message__pb2.DESCRIPTOR,protos_dot_ydb__operation__pb2.DESCRIPTOR,protos_dot_ydb__query__stats__pb2.DESCRIPTOR,protos_dot_ydb__value__pb2.DESCRIPTOR,protos_dot_ydb__scheme__pb2.DESCRIPTOR,
  14. line length 742 characters (raw pass, confidence 0.50)

      nested_types=[_STREAMREADMESSAGE_PARTITIONSESSION, _STREAMREADMESSAGE_FROMCLIENT, _STREAMREADMESSAGE_FROMSERVER, _STREAMREADMESSAGE_INITREQUEST, _STREAMREADMESSAGE_INITRESPONSE, _STREAMREADMESSAGE_READREQUEST, _STREAMREADMESSAGE_READRESPONSE, _STREAMREADMESSAGE_COMMITOFFSETREQUEST, _STREAMREADMESSAGE_COMMITOFFSETRESP
  15. line length 684 characters (raw pass, confidence 0.50)

        def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
  16. line length 817 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
  17. line length 639 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
  18. line length 801 characters (raw pass, confidence 0.50)

        def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
  19. line length 523 characters (raw pass, confidence 0.50)

        def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
  20. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
  21. line length 730 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
  22. line length 920 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
  23. line length 651 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
  24. line length 696 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
  25. line length 1159 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
  26. line length 1534 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
  27. line length 803 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
  28. line length 824 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
  29. line length 604 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
  30. line length 782 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
  31. line length 1539 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
  32. line length 619 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
  33. line length 582 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
  34. line length 1191 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
  35. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
  36. line length 1134 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
  37. line length 510 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
  38. line length 766 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
  39. line length 1043 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
  40. line length 789 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
  41. line length 717 characters (raw pass, confidence 0.50)

            def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., 
  42. line length 1047 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, 
  43. line length 753 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
  44. line length 810 characters (raw pass, confidence 0.50)

            def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
  45. line length 1104 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
  46. line length 894 characters (raw pass, confidence 0.50)

        def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
  47. line length 697 characters (raw pass, confidence 0.50)

        def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
  48. line length 684 characters (raw pass, confidence 0.50)

        def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
  49. line length 817 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
  50. line length 639 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
  51. line length 801 characters (raw pass, confidence 0.50)

        def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
  52. line length 523 characters (raw pass, confidence 0.50)

        def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
  53. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
  54. line length 730 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
  55. line length 920 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
  56. line length 651 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
  57. line length 696 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
  58. line length 1159 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
  59. line length 1534 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
  60. line length 803 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
  61. line length 824 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
  62. line length 604 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
  63. line length 782 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
  64. line length 1539 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
  65. line length 619 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
  66. line length 582 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
  67. line length 1191 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
  68. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
  69. line length 1134 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
  70. line length 510 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
  71. line length 766 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
  72. line length 1043 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
  73. line length 789 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
  74. line length 717 characters (raw pass, confidence 0.50)

            def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., 
  75. line length 1047 characters (raw pass, confidence 0.50)

        def __init__(self, self_: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, 
  76. line length 753 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
  77. line length 810 characters (raw pass, confidence 0.50)

            def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
  78. line length 1104 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
  79. line length 894 characters (raw pass, confidence 0.50)

        def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
  80. line length 697 characters (raw pass, confidence 0.50)

        def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
  81. line length 801 characters (raw pass, confidence 0.50)

        def __init__(self, common: _Optional[_Union[CommonMeta, _Mapping]] = ..., submitted_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., started_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., finished_at: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., execute_mode: _Optio
  82. line length 639 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., content: _Optional[_Union[QueryContent, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., transient_issue: _Optional[_Iterable[_Union[_
  83. line length 817 characters (raw pass, confidence 0.50)

        def __init__(self, meta: _Optional[_Union[CommonMeta, _Mapping]] = ..., text: _Optional[str] = ..., query_meta: _Optional[_Union[QueryMeta, _Mapping]] = ..., plan: _Optional[_Union[QueryPlan, _Mapping]] = ..., issue: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., statistics: _Opt
  84. line length 684 characters (raw pass, confidence 0.50)

        def __init__(self, ydb_database: _Optional[_Union[YdbDatabase, _Mapping]] = ..., clickhouse_cluster: _Optional[_Union[ClickHouseCluster, _Mapping]] = ..., data_streams: _Optional[_Union[DataStreams, _Mapping]] = ..., object_storage: _Optional[_Union[ObjectStorageConnection, _Mapping]] = ..., monitoring: _Optional[_
  85. line length 523 characters (raw pass, confidence 0.50)

        def __init__(self, table_name: _Optional[str] = ..., key_prefix: _Optional[_Union[_ydb_value_pb2.TypedValue, _Mapping]] = ..., path_column_prefix: _Optional[str] = ..., path_column_delimiter: _Optional[str] = ..., continuation_token: _Optional[bytes] = ..., start_after_key_suffix: _Optional[_Union[_ydb_value_pb2.Ty
  86. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., row_consistency: _Optional[_Union[ConsistencyLevelRow, _Mapping]] = ..., global_consistency: _Optional[_Union[ConsistencyLevelGlobal, _Mapping]] = ..., items: _
  87. line length 730 characters (raw pass, confidence 0.50)

        def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., connection_params: _Optional[_Union[ConnectionParams, _Mapping]] = ..., running: _Optional[_Union[DescribeTransferResult.RunningState, _Mapping]] = ..., error: _Optional[_Union[DescribeTransferResult.ErrorState, _Mapping]] = ..., do
  88. line length 651 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., resources: _Optional[_Union[Resources, _Mapping]] = ..., shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources,
  89. line length 696 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., state: _Optional[_Union[GetDatabaseStatusResult.State, str]] = ..., required_resources: _Optional[_Union[Resources, _Mapping]] = ..., required_shared_resources: _Optional[_Union[Resources, _Mapping]] = ..., serverless_resources: _Optional[_Union[ServerlessResources, _M
  90. line length 920 characters (raw pass, confidence 0.50)

        def __init__(self, path: _Optional[str] = ..., computational_units_to_add: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., computational_units_to_remove: _Optional[_Iterable[_Union[ComputationalUnits, _Mapping]]] = ..., storage_units_to_add: _Optional[_Iterable[_Union[StorageUnits, _Mapping]]] = .
  91. line length 1159 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionRequest.PingPong, _Mapping]] = ..., session_start: _Optional[_Union[SessionRequest.SessionStart, _Mapping]] = ..., session_stop: _Optional[_Union[SessionRequest.SessionStop, _Mapping]] = ..., unsupport
  92. line length 1534 characters (raw pass, confidence 0.50)

        def __init__(self, ping: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., pong: _Optional[_Union[SessionResponse.PingPong, _Mapping]] = ..., failure: _Optional[_Union[SessionResponse.Failure, _Mapping]] = ..., session_started: _Optional[_Union[SessionResponse.SessionStarted, _Mapping]] = ..., session_st
  93. line length 803 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ExportToS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ExportToS3Settings.Item, _Mapping]]] = ..., description: _Optional[s
  94. line length 824 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ImportFromS3Settings.Item, _Mapping]]] = ..., description: _Option
  95. line length 604 characters (raw pass, confidence 0.50)

        def __init__(self, endpoint: _Optional[str] = ..., scheme: _Optional[_Union[ImportFromS3Settings.Scheme, str]] = ..., bucket: _Optional[str] = ..., access_key: _Optional[str] = ..., secret_key: _Optional[str] = ..., items: _Optional[_Iterable[_Union[ListObjectsInS3ExportSettings.Item, _Mapping]]] = ..., number_of_r
  96. line length 782 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., exec_mode: _Optional[_Union[ExecMode, str]] = ..., tx_control: _Optional[_Union[TransactionControl, _Mapping]] = ..., query_content: _Optional[_Union[QueryContent, _Mapping]] = ..., parameters: _Optional[_Mapping[str, _ydb_value_pb2.TypedValue]] = ..., stats_mode
  97. line length 619 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., virtual_timestamps: bool = ..., initial_scan: bool = ..., attributes: _O
  98. line length 582 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., mode: _Optional[_Union[ChangefeedMode.Mode, str]] = ..., format: _Optional[_Union[ChangefeedFormat.Format, str]] = ..., state: _Optional[_Union[ChangefeedDescription.State, str]] = ..., virtual_timestamps: bool = ..., attributes: _Optional[_Mapping[str, str]] = ..., aw
  99. line length 1191 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., profile: _Optional[_Union[TableProfile, _Mapping]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationP
  100. line length 1539 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., add_columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., drop_columns: _Optional[_Iterable[str]] = ..., operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., alter_columns: _Optional[_It
  101. line length 1134 characters (raw pass, confidence 0.50)

        def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., columns: _Optional[_Iterable[_Union[ColumnMeta, _Mapping]]] = ..., primary_key: _Optional[_Iterable[str]] = ..., shard_key_bounds: _Optional[_Iterable[_Union[_ydb_value_pb2.TypedValue, _Mapping]]] = ..., indexes: _Optional[_Iterable
  102. line length 766 characters (raw pass, confidence 0.50)

        def __init__(self, name: _Optional[str] = ..., labels: _Optional[_Mapping[str, str]] = ..., default_storage_policy: _Optional[str] = ..., allowed_storage_policies: _Optional[_Iterable[str]] = ..., default_compaction_policy: _Optional[str] = ..., allowed_compaction_policies: _Optional[_Iterable[str]] = ..., default_
  103. line length 733 characters (raw pass, confidence 0.50)

        def __init__(self, table_profile_presets: _Optional[_Iterable[_Union[TableProfileDescription, _Mapping]]] = ..., storage_policy_presets: _Optional[_Iterable[_Union[StoragePolicyDescription, _Mapping]]] = ..., compaction_policy_presets: _Optional[_Iterable[_Union[CompactionPolicyDescription, _Mapping]]] = ..., parti
  104. line length 510 characters (raw pass, confidence 0.50)

        def __init__(self, session_id: _Optional[str] = ..., path: _Optional[str] = ..., key_range: _Optional[_Union[KeyRange, _Mapping]] = ..., columns: _Optional[_Iterable[str]] = ..., ordered: bool = ..., row_limit: _Optional[int] = ..., use_snapshot: _Optional[_Union[_ydb_common_pb2.FeatureFlag.Status, str]] = ..., bat
  105. line length 810 characters (raw pass, confidence 0.50)

            def __init__(self, init_request: _Optional[_Union[StreamReadMessage.InitRequest, _Mapping]] = ..., read_request: _Optional[_Union[StreamReadMessage.ReadRequest, _Mapping]] = ..., commit_offset_request: _Optional[_Union[StreamReadMessage.CommitOffsetRequest, _Mapping]] = ..., partition_session_status_request: _O
  106. line length 1104 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamReadMessage.InitResponse, _Mapping]] = ..., read_response: _Optional[_Union[Stream
  107. line length 753 characters (raw pass, confidence 0.50)

            def __init__(self, status: _Optional[_Union[_ydb_status_codes_pb2.StatusIds.StatusCode, str]] = ..., issues: _Optional[_Iterable[_Union[_ydb_issue_message_pb2.IssueMessage, _Mapping]]] = ..., init_response: _Optional[_Union[StreamDirectReadMessage.InitResponse, _Mapping]] = ..., start_direct_read_partition_sess
  108. line length 789 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., retention_storage_mb: _
  109. line length 1047 characters (raw pass, confidence 0.50)

        def __init__(self_, self: _Optional[_Union[_ydb_scheme_pb2.Entry, _Mapping]] = ..., partitioning_settings: _Optional[_Union[PartitioningSettings, _Mapping]] = ..., partitions: _Optional[_Iterable[_Union[DescribeTopicResult.PartitionInfo, _Mapping]]] = ..., retention_period: _Optional[_Union[_duration_pb2.Duration, 
  110. line length 717 characters (raw pass, confidence 0.50)

            def __init__(self, last_read_offset: _Optional[int] = ..., committed_offset: _Optional[int] = ..., read_session_id: _Optional[str] = ..., partition_read_session_create_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., last_read_time: _Optional[_Union[_timestamp_pb2.Timestamp, _Mapping]] = ..., 
  111. line length 1043 characters (raw pass, confidence 0.50)

        def __init__(self, operation_params: _Optional[_Union[_ydb_operation_pb2.OperationParams, _Mapping]] = ..., path: _Optional[str] = ..., alter_partitioning_settings: _Optional[_Union[AlterPartitioningSettings, _Mapping]] = ..., set_retention_period: _Optional[_Union[_duration_pb2.Duration, _Mapping]] = ..., set_rete
  112. line length 894 characters (raw pass, confidence 0.50)

        def __init__(self, type_id: _Optional[_Union[Type.PrimitiveTypeId, str]] = ..., decimal_type: _Optional[_Union[DecimalType, _Mapping]] = ..., optional_type: _Optional[_Union[OptionalType, _Mapping]] = ..., list_type: _Optional[_Union[ListType, _Mapping]] = ..., tuple_type: _Optional[_Union[TupleType, _Mapping]] = .
  113. line length 697 characters (raw pass, confidence 0.50)

        def __init__(self, bool_value: bool = ..., int32_value: _Optional[int] = ..., uint32_value: _Optional[int] = ..., int64_value: _Optional[int] = ..., uint64_value: _Optional[int] = ..., float_value: _Optional[float] = ..., double_value: _Optional[float] = ..., bytes_value: _Optional[bytes] = ..., text_value: _Option
  114. info warn → info by review decoder-decompress-payload ydb/_topic_writer/topic_writer_asyncio_test.py:889:24

    file imports decoder module(s) gzip and calls `.decompress()` — embedded payload decompressed at runtime (ast pass, confidence 0.75)

                    # compare the decompressed payload instead of the raw bytes.
                    assert gzip.decompress(mess.get_data_bytes()) == gzip.decompress(expected_datas[i])
                else:
                    assert mess.get_data_bytes() == expected_datas[i]
    likely benign LLM, confidence 0.92 Test assertion that decompresses gzip message payloads to compare them.
    Reasoning

    This is a test assertion that gunzips expected and received message payloads for comparison. The payloads are test data, and gzip is used here as an ordinary data-handling step, not as hidden execution.

  115. info warn → info by review encoding-base64 ydb/default_pem.py:10:1

    base64-like blob (1188 bytes over 19 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
    A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
    b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
    dismissed LLM, confidence 0.93 A PEM CA-certificate bundle block (GlobalSign root).
    Reasoning

    The file is a bundle of PEM root CA certificates, which is the expected content for a default certificate store. Base64 blobs are the format itself, so the raw encoding signal is a false positive here.

  116. info warn → info by review encoding-base64 ydb/default_pem.py:39:1

    base64-like blob (1280 bytes over 20 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4G
    A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNp
    Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1
    dismissed LLM, confidence 0.93 A PEM CA-certificate block in the default root bundle.
    Reasoning

    Another certificate block in the same standard root CA bundle. Certificates are base64 by definition, so this is a legitimate pattern.

  117. info warn → info by review encoding-base64 ydb/default_pem.py:101:1

    base64-like blob (1428 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML
    RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp
    bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5
    dismissed LLM, confidence 0.93 A PEM CA-certificate block (Entrust root) in the default bundle.
    Reasoning

    Standard root CA certificate in the default PEM bundle. Its base64 content is expected for certificate data.

  118. info warn → info by review encoding-base64 ydb/default_pem.py:134:1

    base64-like blob (1188 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
    RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
    VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX
    dismissed LLM, confidence 0.93 A PEM CA-certificate block (Baltimore CyberTrust) in the default bundle.
    Reasoning

    Standard root CA certificate (CyberTrust) in the default bundle. The base64 content is the normal certificate encoding.

  119. info warn → info by review encoding-base64 ydb/default_pem.py:196:1

    base64-like blob (1564 bytes over 25 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC
    VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
    Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
    dismissed LLM, confidence 0.93 A PEM CA-certificate block (Entrust) in the default bundle.
    Reasoning

    Standard root CA certificate (Entrust) in the default PEM bundle. Base64 encoding is expected here.

  120. info warn → info by review encoding-base64 ydb/default_pem.py:231:1

    base64-like blob (1144 bytes over 18 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDVDCCAjygAwIBAgIDAjRWMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT
    MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i
    YWwgQ0EwHhcNMDIwNTIxMDQwMDAwWhcNMjIwNTIxMDQwMDAwWjBCMQswCQYDVQQG
    dismissed LLM, confidence 0.93 A PEM CA-certificate block (GeoTrust) in the default bundle.
    Reasoning

    Standard root CA certificate (GeoTrust) in the default PEM bundle. Its base64 content is ordinary certificate data.

  121. info warn → info by review encoding-base64 ydb/default_pem.py:259:1

    base64-like blob (1852 bytes over 29 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFaDCCA1CgAwIBAgIBATANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJVUzEW
    MBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEeMBwGA1UEAxMVR2VvVHJ1c3QgVW5pdmVy
    c2FsIENBMB4XDTA0MDMwNDA1MDAwMFoXDTI5MDMwNDA1MDAwMFowRTELMAkGA1UE
    dismissed LLM, confidence 0.95 A PEM-encoded root CA certificate in the SDK's default certificate bundle.
    Reasoning

    The blob is a standard base64-encoded X.509 certificate between PEM BEGIN/END markers. The file is a default CA bundle for the YDB Python SDK, so this is an expected data pattern and the raw-pass base64 signal is a false positive.

  122. info warn → info by review encoding-base64 ydb/default_pem.py:298:1

    base64-like blob (1856 bytes over 29 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFbDCCA1SgAwIBAgIBATANBgkqhkiG9w0BAQUFADBHMQswCQYDVQQGEwJVUzEW
    MBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVy
    c2FsIENBIDIwHhcNMDQwMzA0MDUwMDAwWhcNMjkwMzA0MDUwMDAwWjBHMQswCQYD
    dismissed LLM, confidence 0.95 A PEM-encoded GeoTrust root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is another PEM certificate block (GeoTrust Universal CA 2) in the same default CA bundle. The base64 content is ordinary certificate encoding and the raw-pass signal is a false positive.

  123. info warn → info by review encoding-base64 ydb/default_pem.py:337:1

    base64-like blob (1440 bytes over 23 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb
    MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow
    GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj
    dismissed LLM, confidence 0.95 A PEM-encoded Comodo root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This PEM block is a Comodo CA certificate inside the default trust bundle. The base64 is standard certificate DER encoding, so the finding reflects a normal pattern.

  124. info warn → info by review encoding-base64 ydb/default_pem.py:412:1

    base64-like blob (1956 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
    GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
    b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV
    dismissed LLM, confidence 0.95 A PEM-encoded QuoVadis root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is a QuoVadis root certificate in a PEM block inside the default CA bundle. Base64 certificate data is expected here, and the raw signal is a false positive.

  125. info warn → info by review encoding-base64 ydb/default_pem.py:453:1

    base64-like blob (2264 bytes over 36 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
    GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
    b3QgQ0EgMzAeFw0wNjExMjQxOTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNV
    dismissed LLM, confidence 0.95 A PEM-encoded QuoVadis root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This PEM certificate block is another QuoVadis root CA in the default trust bundle. The base64 matches normal X.509 encoding and carries no execution or hiding behaviour.

  126. info warn → info by review encoding-base64 ydb/default_pem.py:527:1

    base64-like blob (1072 bytes over 17 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDIDCCAgigAwIBAgIBHTANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJGSTEP
    MA0GA1UEChMGU29uZXJhMRkwFwYDVQQDExBTb25lcmEgQ2xhc3MyIENBMB4XDTAx
    MDQwNjA3Mjk0MFoXDTIxMDQwNjA3Mjk0MFowOTELMAkGA1UEBhMCRkkxDzANBgNV
    dismissed LLM, confidence 0.95 A PEM-encoded Sonera root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is a Sonera root certificate in PEM form within the default CA bundle. Base64 certificate encoding is the expected content, so the finding is a false positive.

  127. info warn → info by review encoding-base64 ydb/default_pem.py:651:1

    base64-like blob (1864 bytes over 30 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFcjCCA1qgAwIBAgIQH51ZWtcvwgZEpYAIaeNe9jANBgkqhkiG9w0BAQUFADA/
    MQswCQYDVQQGEwJUVzEwMC4GA1UECgwnR292ZXJubWVudCBSb290IENlcnRpZmlj
    YXRpb24gQXV0aG9yaXR5MB4XDTAyMTIwNTEzMjMzM1oXDTMyMTIwNTEzMjMzM1ow
    dismissed LLM, confidence 0.95 A PEM-encoded government root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This PEM block is a Taiwan Government Root CA certificate in the default trust bundle. The base64 is standard certificate data and the raw-pass signal does not indicate obfuscation.

  128. info warn → info by review encoding-base64 ydb/default_pem.py:721:1

    base64-like blob (1264 bytes over 20 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
    dismissed LLM, confidence 0.95 A PEM-encoded DigiCert root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is a DigiCert Global Root certificate in a PEM block within the default CA bundle. Standard base64 certificate encoding, so the signal is a false positive.

  129. info warn → info by review encoding-base64 ydb/default_pem.py:751:1

    base64-like blob (1292 bytes over 21 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
    dismissed LLM, confidence 0.95 A PEM-encoded DigiCert root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This PEM block is a DigiCert High Assurance root certificate in the default trust bundle. The base64 content is expected certificate data and not obfuscation.

  130. info warn → info by review encoding-base64 ydb/default_pem.py:782:1

    base64-like blob (1224 bytes over 20 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDkjCCAnqgAwIBAgIRAIW9S/PY2uNp9pTXX8OlRCMwDQYJKoZIhvcNAQEFBQAw
    PTELMAkGA1UEBhMCRlIxETAPBgNVBAoTCENlcnRwbHVzMRswGQYDVQQDExJDbGFz
    cyAyIFByaW1hcnkgQ0EwHhcNOTkwNzA3MTcwNTAwWhcNMTkwNzA2MjM1OTU5WjA9
    dismissed LLM, confidence 0.95 A PEM-encoded Certplus root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is a Certplus class 2 root certificate in PEM form inside the default CA bundle. Base64 certificate encoding is the normal content here, so this is a false positive.

  131. info warn → info by review encoding-base64 ydb/default_pem.py:812:1

    base64-like blob (1128 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/
    MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
    DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow
    dismissed LLM, confidence 0.95 A PEM-encoded DST root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This PEM block is a DST Root CA X3 certificate in the default trust bundle. The base64 is standard X.509 data and the raw-pass finding carries no real indicator of malice.

  132. info warn → info by review encoding-base64 ydb/default_pem.py:840:1

    base64-like blob (1960 bytes over 31 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
    BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln
    biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF
    dismissed LLM, confidence 0.95 A PEM-encoded SwissSign root CA certificate in the SDK's default certificate bundle.
    Reasoning

    This is a SwissSign Gold root certificate in a PEM block inside the default CA bundle. The base64 is expected certificate encoding, so the finding is a false positive.

  133. info warn → info by review encoding-base64 ydb/default_pem.py:881:1

    base64-like blob (1964 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UE
    BhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWdu
    IFNpbHZlciBDQSAtIEcyMB4XDTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0Nlow
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate in the ydb SDK's default certificate bundle.
    Reasoning

    The snippet is a PEM-encoded X.509 certificate (SwissSign Silver CA) with standard DER-in-base64 structure. A default root CA bundle in a database SDK is expected, and the raw-pass base64 signal fires on any certificate.

  134. info warn → info by review encoding-base64 ydb/default_pem.py:922:1

    base64-like blob (1196 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDfDCCAmSgAwIBAgIQGKy1av1pthU6Y2yv2vrEoTANBgkqhkiG9w0BAQUFADBY
    MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo
    R2VvVHJ1c3QgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEx
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (GeoTrust) in the ydb default trust bundle.
    Reasoning

    The snippet is a GeoTrust Primary Certification Authority PEM certificate, a standard trusted root. Its base64 body is what the raw pass flags, and it is expected in a default CA bundle.

  135. info warn → info by review encoding-base64 ydb/default_pem.py:1020:1

    base64-like blob (1276 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI
    MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
    FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (SecureTrust) in the ydb default trust bundle.
    Reasoning

    The snippet is a SecureTrust CA PEM certificate with ordinary DER base64 content. It fits a bundle of public root certificates in a client library.

  136. info warn → info by review encoding-base64 ydb/default_pem.py:1050:1

    base64-like blob (1280 bytes over 20 lines, compression ratio 0.70) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBK
    MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
    GTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkx
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (Secure Global CA) in the ydb default trust bundle.
    Reasoning

    The snippet is a PEM certificate for the Secure Global CA, a standard trusted root. The base64 body is typical certificate encoding, and the file is a bundle of such certificates.

  137. info warn → info by review encoding-base64 ydb/default_pem.py:1080:1

    base64-like blob (1412 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB
    gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
    A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (COMODO) in the ydb default trust bundle.
    Reasoning

    The snippet is a COMODO CA PEM certificate with standard ASN.1 base64 structure. It is a legitimate root certificate in a default trust store.

  138. info warn → info by review encoding-base64 ydb/default_pem.py:1168:1

    base64-like blob (1352 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIID8TCCAtmgAwIBAgIQQT1yx/RrH4FDffHSKFTfmjANBgkqhkiG9w0BAQUFADCB
    ijELMAkGA1UEBhMCQ0gxEDAOBgNVBAoTB1dJU2VLZXkxGzAZBgNVBAsTEkNvcHly
    aWdodCAoYykgMjAwNTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNl
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (WISeKey/OISTE) in the ydb default trust bundle.
    Reasoning

    The snippet is a WISeKey/OISTE PEM root certificate. Its base64 content is ordinary certificate encoding, and this is one entry in a bundle of public roots.

  139. info warn → info by review encoding-base64 ydb/default_pem.py:1200:1

    base64-like blob (1256 bytes over 20 lines, compression ratio 0.70) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV
    BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X
    DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (Certigna) in the ydb default trust bundle.
    Reasoning

    The snippet is a Dhimyotis/Certigna PEM certificate with standard base64 DER content. It is a public root certificate expected in a CA bundle.

  140. info warn → info by review encoding-base64 ydb/default_pem.py:1260:1

    base64-like blob (1244 bytes over 20 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYG
    A1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2Jh
    bCBSb290MB4XDTA2MTIxNTA4MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UE
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (Cybertrust) in the ydb default trust bundle.
    Reasoning

    The snippet is a CyberTrust Global Root PEM certificate. Its base64 body is standard certificate encoding, and this is a legitimate root in a default CA list.

  141. info warn → info by review encoding-base64 ydb/default_pem.py:1290:1

    base64-like blob (1948 bytes over 31 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
    MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
    ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (Chunghwa ePKI) in the ydb default trust bundle.
    Reasoning

    The snippet is a Chunghwa Telecom ePKI root PEM certificate. The base64 content is ordinary ASN.1 DER, and the flagged blob is the expected certificate body.

  142. info warn → info by review encoding-base64 ydb/default_pem.py:1331:1

    base64-like blob (1104 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT
    AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD
    QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (certSIGN) in the ydb default trust bundle.
    Reasoning

    The snippet is a certSIGN ROOT CA PEM certificate with standard base64 encoding. It is a public root certificate in a bundle, and the raw-pass base64 heuristic matches any certificate.

  143. info warn → info by review encoding-base64 ydb/default_pem.py:1359:1

    base64-like blob (1368 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIID/jCCAuagAwIBAgIQFaxulBmyeUtB9iepwxgPHzANBgkqhkiG9w0BAQsFADCB
    mDELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsT
    MChjKSAyMDA4IEdlb1RydXN0IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25s
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (GeoTrust) in the ydb default trust bundle.
    Reasoning

    The snippet is a GeoTrust PEM certificate with a standard base64 body. Its presence in a trust bundle is expected, and the finding comes from the raw pass, which has a high false-positive rate.

  144. info warn → info by review encoding-base64 ydb/default_pem.py:1391:1

    base64-like blob (872 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICiDCCAg2gAwIBAgIQNfwmXNmET8k9Jj1Xm67XVjAKBggqhkjOPQQDAzCBhDEL
    MAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE4MDYGA1UECxMvKGMp
    IDIwMDcgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxJDAi
    likely benign LLM, confidence 0.96 Embedded PEM root CA certificate (thawte ECC) in the ydb default trust bundle.
    Reasoning

    The snippet is a thawte PEM certificate using an ECDSA public key, with standard base64 DER content. It is a legitimate root certificate in a default bundle, and the flag comes from the raw base64 heuristic.

  145. info warn → info by review encoding-base64 ydb/default_pem.py:1415:1

    base64-like blob (1428 bytes over 23 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEKjCCAxKgAwIBAgIQYAGXt0an6rS0mtZLL/eQ+zANBgkqhkiG9w0BAQsFADCB
    rjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
    Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
    likely benign LLM, confidence 0.95 A PEM root CA certificate (Thawte-issued) inside the bundled default certificate store.
    Reasoning

    The snippet is a PEM-encoded X.509 certificate with the standard BEGIN CERTIFICATE header, and the file is a bundled default CA store. Base64 of DER certificate data is expected here. The raw-pass base64 signal is a known false positive for this content.

  146. info warn → info by review encoding-base64 ydb/default_pem.py:1448:1

    base64-like blob (920 bytes over 15 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICrjCCAjWgAwIBAgIQPLL0SAoA4v7rJDteYD7DazAKBggqhkjOPQQDAzCBmDEL
    MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChj
    KSAyMDA3IEdlb1RydXN0IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2
    likely benign LLM, confidence 0.95 A PEM root CA certificate (GeoTrust) in the bundled default certificate store.
    Reasoning

    The snippet is a standard PEM certificate block (GeoTrust root) in a default CA bundle. The base64 content is ordinary DER encoding of an X.509 certificate, not an obfuscated payload.

  147. info warn → info by review encoding-base64 ydb/default_pem.py:1473:1

    base64-like blob (1620 bytes over 26 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEuTCCA6GgAwIBAgIQQBrEZCGzEyEDDrvkEhrFHTANBgkqhkiG9w0BAQsFADCB
    vTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
    ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwOCBWZXJp
    likely benign LLM, confidence 0.95 A PEM root CA certificate (VeriSign) in the bundled default certificate store.
    Reasoning

    This is a standard PEM certificate block (VeriSign root) within a certificate bundle. The high base64 density is inherent to certificate data and carries no obfuscation or execution risk.

  148. info warn → info by review encoding-base64 ydb/default_pem.py:1538:1

    base64-like blob (1400 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG
    EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3
    MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl
    likely benign LLM, confidence 0.95 A PEM root CA certificate (NetLock) in the bundled default certificate store.
    Reasoning

    The snippet is a PEM certificate (NetLock) with the standard header. It is data in a CA bundle file, and the base64 signal is a false positive.

  149. info warn → info by review encoding-base64 ydb/default_pem.py:1570:1

    base64-like blob (1984 bytes over 31 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFyjCCA7KgAwIBAgIEAJiWjDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJO
    TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFh
    dCBkZXIgTmVkZXJsYW5kZW4gUm9vdCBDQSAtIEcyMB4XDTA4MDMyNjExMTgxN1oX
    likely benign LLM, confidence 0.95 A PEM root CA certificate (Staat der Nederlanden) in the bundled default certificate store.
    Reasoning

    A standard PEM certificate block (Staat der Nederlanden root) in the CA bundle. The base64 is DER certificate data, consistent with the file's purpose.

  150. info warn → info by review encoding-base64 ydb/default_pem.py:1639:1

    base64-like blob (1176 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDEr
    MCkGA1UEChMiSmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoG
    A1UEAxMTU2VjdXJlU2lnbiBSb290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0
    likely benign LLM, confidence 0.95 A PEM root CA certificate (SecureSign) in the bundled default certificate store.
    Reasoning

    A PEM certificate (SecureSign Japan root) with the standard header inside a default CA bundle. The encoded content is expected certificate data.

  151. info warn → info by review encoding-base64 ydb/default_pem.py:1700:1

    base64-like blob (1156 bytes over 19 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
    A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
    Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
    likely benign LLM, confidence 0.95 A PEM root CA certificate (GlobalSign) in the bundled default certificate store.
    Reasoning

    A standard PEM certificate block (GlobalSign root) in the CA bundle. The base64 signal reflects normal certificate encoding.

  152. info warn → info by review encoding-base64 ydb/default_pem.py:1729:1

    base64-like blob (2080 bytes over 33 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UE
    BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h
    cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEy
    likely benign LLM, confidence 0.95 A PEM root CA certificate (Spanish national CA) in the bundled default certificate store.
    Reasoning

    A standard PEM certificate block (Spanish CA root) in the bundled certificate store. The base64 is ordinary DER data for an X.509 certificate.

  153. info warn → info by review encoding-base64 ydb/default_pem.py:1772:1

    base64-like blob (2036 bytes over 32 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4
    MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6
    ZW5wZS5jb20wHhcNMDcxMjEzMTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYD
    likely benign LLM, confidence 0.95 A PEM root CA certificate (IZENPE) in the bundled default certificate store.
    Reasoning

    A PEM certificate (IZENPE) with the standard header in a default CA bundle. The base64 density is typical of certificates and is not a sign of hidden code.

  154. info warn → info by review encoding-base64 ydb/default_pem.py:1913:1

    base64-like blob (1292 bytes over 21 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
    EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
    EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
    likely benign LLM, confidence 0.95 A PEM root CA certificate (GoDaddy) in the bundled default certificate store.
    Reasoning

    A standard PEM certificate block (GoDaddy root) in the CA bundle. The encoded content is expected certificate data and the finding is a raw-pass false positive.

  155. info warn → info by review encoding-base64 ydb/default_pem.py:1944:1

    base64-like blob (1324 bytes over 21 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx
    EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
    HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs
    likely benign LLM, confidence 0.95 A PEM root CA certificate (Starfield) in the bundled default certificate store.
    Reasoning

    A PEM certificate (Starfield root) with standard formatting in a CA bundle. The base64 is DER certificate content, not an obfuscated payload.

  156. info warn → info by review encoding-base64 ydb/default_pem.py:1975:1

    base64-like blob (1348 bytes over 22 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx
    EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
    HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVs
    likely benign LLM, confidence 0.95 A PEM root CA certificate (Starfield) in the bundled default certificate store.
    Reasoning

    A PEM certificate (Starfield root) in the default CA bundle. The base64 signal is a false positive, since the content is ordinary X.509 certificate encoding.

  157. info warn → info by review encoding-base64 ydb/default_pem.py:2007:1

    base64-like blob (1132 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UE
    BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
    dCBDb21tZXJjaWFsMB4XDTEwMDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDEL
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (BEGIN CERTIFICATE header, base64 DER body for an AffirmTrust root). Base64 is the standard PEM encoding, and the file is a bundled CA certificate list for the YDB SDK, so the raw base64 signal is a false positive.

  158. info warn → info by review encoding-base64 ydb/default_pem.py:2035:1

    base64-like blob (1132 bytes over 18 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UE
    BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
    dCBOZXR3b3JraW5nMB4XDTEwMDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDEL
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (AffirmTrust Networking root) inside a bundled CA trust file. The base64 body is the normal encoding of a DER certificate, so the signal is a false positive.

  159. info warn → info by review encoding-base64 ydb/default_pem.py:2063:1

    base64-like blob (1808 bytes over 29 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UE
    BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVz
    dCBQcmVtaXVtMB4XDTEwMDEyOTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkG
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (AffirmTrust Premium root) in a bundled CA trust file. The base64 body is standard certificate encoding, not obfuscation.

  160. info warn → info by review encoding-base64 ydb/default_pem.py:2102:1

    base64-like blob (688 bytes over 11 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMC
    VVMxFDASBgNVBAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQ
    cmVtaXVtIEVDQzAeFw0xMDAxMjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJ
    dismissed LLM, confidence 0.95 A base64-encoded elliptic-curve X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (AffirmTrust Premium ECC root) in a bundled CA trust file. The base64 is ordinary certificate encoding, so the raw-pass flag is a false positive.

  161. info warn → info by review encoding-base64 ydb/default_pem.py:2123:1

    base64-like blob (1280 bytes over 20 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM
    MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D
    ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Certum root, Unizeto) in a bundled CA trust file. Base64 DER inside PEM is expected, so this is a false positive.

  162. info warn → info by review encoding-base64 ydb/default_pem.py:2182:1

    base64-like blob (1188 bytes over 19 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDEl
    MCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMe
    U2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoX
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (SECOM Trust root) in a bundled CA trust file. The base64 body is standard certificate encoding, not a hidden payload.

  163. info warn → info by review encoding-base64 ydb/default_pem.py:2211:1

    base64-like blob (1436 bytes over 23 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1Ix
    RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
    dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Hellenic Academic root) in a bundled CA trust file. The base64 is ordinary DER-in-PEM encoding, so the raw signal is a false positive.

  164. info warn → info by review encoding-base64 ydb/default_pem.py:2244:1

    base64-like blob (1964 bytes over 31 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE
    BhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8w
    MzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Actalis root) in a bundled CA trust file. Base64 certificate encoding is expected here, so this is a false positive.

  165. info warn → info by review encoding-base64 ydb/default_pem.py:2285:1

    base64-like blob (1168 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDZzCCAk+gAwIBAgIQGx+ttiD5JNM2a/fH8YygWTANBgkqhkiG9w0BAQUFADBF
    MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPVHJ1c3RpcyBMaW1pdGVkMRwwGgYDVQQL
    ExNUcnVzdGlzIEZQUyBSb290IENBMB4XDTAzMTIyMzEyMTQwNloXDTI0MDEyMTEx
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Trustis FPS root) in a bundled CA trust file. The base64 body is standard certificate encoding, not obfuscation.

  166. info warn → info by review encoding-base64 ydb/default_pem.py:2314:1

    base64-like blob (1832 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
    MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
    Q2xhc3MgMiBSb290IENBMB4XDTEwMTAyNjA4MzgwM1oXDTQwMTAyNjA4MzgwM1ow
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Buypass Class 2 root) in a bundled CA trust file. Base64 DER inside PEM is expected, so the raw-pass signal is a false positive.

  167. info warn → info by review encoding-base64 ydb/default_pem.py:2353:1

    base64-like blob (1832 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
    MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
    Q2xhc3MgMyBSb290IENBMB4XDTEwMTAyNjA4Mjg1OFoXDTQwMTAyNjA4Mjg1OFow
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (Buypass Class 3 root) in a bundled CA trust file. The base64 is normal certificate encoding, so this is a false positive.

  168. info warn → info by review encoding-base64 ydb/default_pem.py:2423:1

    base64-like blob (1376 bytes over 22 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEAzCCAuugAwIBAgIQVID5oHPtPwBMyonY43HmSjANBgkqhkiG9w0BAQUFADB1
    MQswCQYDVQQGEwJFRTEiMCAGA1UECgwZQVMgU2VydGlmaXRzZWVyaW1pc2tlc2t1
    czEoMCYGA1UEAwwfRUUgQ2VydGlmaWNhdGlvbiBDZW50cmUgUm9vdCBDQTEYMBYG
    dismissed LLM, confidence 0.95 A base64-encoded X.509 CA certificate in a bundled PEM trust store.
    Reasoning

    The snippet is a PEM certificate block (EE Certification Centre root) in a bundled CA trust file. Base64 certificate encoding is expected, so the raw signal is a false positive.

  169. info warn → info by review encoding-base64 ydb/default_pem.py:2521:1

    base64-like blob (1852 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNV
    BAYTAlNLMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMu
    MRkwFwYDVQQDExBDQSBEaXNpZyBSb290IFIyMB4XDTEyMDcxOTA5MTUzMFoXDTQy
    dismissed LLM, confidence 0.95 A PEM-encoded Disig root CA certificate in the YDB SDK's bundled CA file.
    Reasoning

    The snippet is a PEM-encoded X.509 certificate (Disig Root R2) inside a CA bundle module. Base64 of DER certificate data is the expected format, and the raw pass flags it only because it is high-entropy base64. This is a legitimate trust-store entry.

  170. info warn → info by review encoding-base64 ydb/default_pem.py:2560:1

    base64-like blob (2676 bytes over 42 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UE
    AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw
    CQYDVQQGEwJFUzAeFw0xMTA1MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQ
    dismissed LLM, confidence 0.95 A PEM-encoded ACCV root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate block (ACCV root) within a standard CA bundle. The base64 body is normal certificate encoding and the raw-pass finding is a false positive.

  171. info warn → info by review encoding-base64 ydb/default_pem.py:2612:1

    base64-like blob (1800 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcx
    EjAQBgNVBAoTCVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMT
    VFdDQSBHbG9iYWwgUm9vdCBDQTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5
    dismissed LLM, confidence 0.95 A PEM-encoded TWCA global root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (TWCA Global Root CA) in a CA bundle. Base64 DER data is expected here, so the encoding-base64 hit is benign.

  172. info warn → info by review encoding-base64 ydb/default_pem.py:2651:1

    base64-like blob (1788 bytes over 28 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
    NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
    b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
    dismissed LLM, confidence 0.95 A PEM-encoded TeliaSonera root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (Telia Sonera Root CA v1) inside a standard trust bundle. The base64 blob is ordinary certificate data.

  173. info warn → info by review encoding-base64 ydb/default_pem.py:2764:1

    base64-like blob (1188 bytes over 19 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
    AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
    EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
    dismissed LLM, confidence 0.95 A PEM-encoded Atos TrustedRoot CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (Atos TrustedRoot 2011) in the CA bundle. The base64 body is normal DER encoding, so the raw-pass finding is a false positive.

  174. info warn → info by review encoding-base64 ydb/default_pem.py:2793:1

    base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQEL
    BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
    BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00
    dismissed LLM, confidence 0.95 A PEM-encoded QuoVadis root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (QuoVadis Root CA 1 G3) in the CA bundle. Base64-encoded certificate data is expected, so this is a benign raw-pass hit.

  175. info warn → info by review encoding-base64 ydb/default_pem.py:2832:1

    base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL
    BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
    BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00
    dismissed LLM, confidence 0.95 A PEM-encoded QuoVadis root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (QuoVadis Root CA 2 G3) in the CA bundle. The base64 blob is standard certificate encoding, not an obfuscated payload.

  176. info warn → info by review encoding-base64 ydb/default_pem.py:2871:1

    base64-like blob (1840 bytes over 29 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQEL
    BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
    BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMyBHMzAeFw0xMjAxMTIyMDI2MzJaFw00
    dismissed LLM, confidence 0.95 A PEM-encoded QuoVadis root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (QuoVadis Root CA 3 G3) in the CA bundle. The encoding-base64 finding reflects ordinary DER-in-PEM data.

  177. info warn → info by review encoding-base64 ydb/default_pem.py:2963:1

    base64-like blob (1220 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
    dismissed LLM, confidence 0.95 A PEM-encoded DigiCert global root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (DigiCert Global Root G2 / Global Root CA) in the CA bundle. This is a standard trust anchor and the base64 hit is a false positive.

  178. info warn → info by review encoding-base64 ydb/default_pem.py:2993:1

    base64-like blob (772 bytes over 13 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw
    CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
    ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
    dismissed LLM, confidence 0.95 A PEM-encoded DigiCert ECDSA root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (DigiCert Global Root G3, ECDSA) in the CA bundle. Base64 DER data is expected, so the raw-pass flag is benign.

  179. info warn → info by review encoding-base64 ydb/default_pem.py:3016:1

    base64-like blob (1904 bytes over 30 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
    dismissed LLM, confidence 0.95 A PEM-encoded DigiCert trusted root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (DigiCert Trusted Root G4) in the CA bundle. The base64 body is normal certificate data and the finding is a raw-pass false positive.

  180. info warn → info by review encoding-base64 ydb/default_pem.py:3207:1

    base64-like blob (1868 bytes over 30 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJO
    TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFh
    dCBkZXIgTmVkZXJsYW5kZW4gUm9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloX
    dismissed LLM, confidence 0.95 A PEM-encoded Dutch government root CA certificate in the bundled CA file.
    Reasoning

    The snippet is a PEM certificate (Staat der Nederlanden Root CA G3) in the CA bundle. Base64-encoded DER is expected in this file, so this is a benign hit.

  181. info warn → info by review encoding-base64 ydb/default_pem.py:3247:1

    base64-like blob (1864 bytes over 30 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJO
    TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFh
    dCBkZXIgTmVkZXJsYW5kZW4gRVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0y
    dismissed LLM, confidence 0.95 A PEM-encoded root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a standard PEM-encoded X.509 root certificate (Staat der Nederlanden EV Root CA) inside a CA trust bundle. Base64 certificate data is the expected content of such a file, and the raw-pass encoding heuristic fires on it by design.

  182. info warn → info by review encoding-base64 ydb/default_pem.py:3287:1

    base64-like blob (1840 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK
    MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu
    VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw
    dismissed LLM, confidence 0.95 A PEM-encoded IdenTrust root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a standard PEM certificate for IdenTrust Commercial Root CA 1 within a CA bundle. The base64 blob is ordinary certificate encoding, and the raw-pass heuristic is a false positive here.

  183. info warn → info by review encoding-base64 ydb/default_pem.py:3326:1

    base64-like blob (1848 bytes over 29 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBN
    MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVu
    VHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcN
    dismissed LLM, confidence 0.95 A PEM-encoded IdenTrust root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a standard PEM certificate for the IdenTrust Public Sector Root CA within a trust bundle. The base64 content is expected certificate data and not obfuscation.

  184. info warn → info by review encoding-base64 ydb/default_pem.py:3398:1

    base64-like blob (1020 bytes over 16 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkG
    A1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3
    d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVu
    dismissed LLM, confidence 0.95 A PEM-encoded Entrust root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the Entrust root CA with an ECDSA key, typical of a CA bundle. Base64 certificate content triggers the raw heuristic without any malicious indicator.

  185. info warn → info by review encoding-base64 ydb/default_pem.py:3424:1

    base64-like blob (1900 bytes over 30 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJD
    TjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9y
    aXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkx
    dismissed LLM, confidence 0.95 A PEM-encoded CFCA EV root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the China Financial Certification Authority EV root within a CA bundle. The base64 is ordinary certificate encoding, so this is a false positive.

  186. info warn → info by review encoding-base64 ydb/default_pem.py:3464:1

    base64-like blob (1272 bytes over 20 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBt
    MQswCQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUg
    Rm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9i
    dismissed LLM, confidence 0.95 A PEM-encoded OISTE/WISeKey root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the WISeKey OISTE global root CA within a CA bundle. The base64 blob is expected certificate data.

  187. info warn → info by review encoding-base64 ydb/default_pem.py:3494:1

    base64-like blob (1184 bytes over 19 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL
    BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6
    ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw
    dismissed LLM, confidence 0.95 A PEM-encoded SZAFIR root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the Krajowa Izba Rozliczeniowa (SZAFIR) root CA within a CA bundle. The base64 content is normal certificate encoding.

  188. info warn → info by review encoding-base64 ydb/default_pem.py:3523:1

    base64-like blob (1992 bytes over 32 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCB
    gDELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
    QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIG
    dismissed LLM, confidence 0.95 A PEM-encoded Certum root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the Unizeto/Certum root CA within a CA bundle. The base64 blob is expected certificate data and not an obfuscated payload.

  189. info warn → info by review encoding-base64 ydb/default_pem.py:3608:1

    base64-like blob (948 bytes over 15 lines, compression ratio 0.71) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzAN
    BgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
    c2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hl
    dismissed LLM, confidence 0.95 A PEM-encoded HARICA/Hellenic Academic root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the Hellenic Academic and Research Institutions root CA within a CA bundle. Base64 certificate content is the expected encoding.

  190. info warn → info by review encoding-base64 ydb/default_pem.py:3633:1

    base64-like blob (1856 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
    TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
    cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
    dismissed LLM, confidence 0.95 A PEM-encoded ISRG Root X1 certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the ISRG Root X1 (Let's Encrypt) within a CA bundle. The base64 content is ordinary certificate data.

  191. info warn → info by review encoding-base64 ydb/default_pem.py:3672:1

    base64-like blob (1888 bytes over 30 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsx
    CzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJ
    WiBGTk1ULVJDTTAeFw0wODEwMjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJ
    dismissed LLM, confidence 0.95 A PEM-encoded FNMT-RCM root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the FNMT-RCM root CA within a CA bundle. The base64 blob is expected certificate encoding and not a concealed payload.

  192. info warn → info by review encoding-base64 ydb/default_pem.py:3712:1

    base64-like blob (1116 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
    ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
    b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
    dismissed LLM, confidence 0.95 A PEM-encoded Amazon root CA certificate in a bundled certificate store.
    Reasoning

    The snippet is a PEM certificate for the Amazon Root CA 1 within a CA bundle. The base64 content is standard certificate data, so the raw-pass heuristic is a false positive.

  193. info warn → info by review encoding-base64 ydb/default_pem.py:3740:1

    base64-like blob (1800 bytes over 29 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF
    ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
    b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL
    dismissed LLM, confidence 0.96 A PEM-encoded Amazon root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (Amazon Root CA) in a bundled default CA file. Its base64 content is ordinary DER certificate data, which the raw pass flags on length and entropy alone. This is a legitimate pattern and a known raw-pass false positive.

  194. info warn → info by review encoding-base64 ydb/default_pem.py:3779:1

    base64-like blob (592 bytes over 10 lines, compression ratio 0.76) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5
    MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
    Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
    dismissed LLM, confidence 0.96 A PEM-encoded Amazon root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (Amazon Root CA 3) inside a bundled CA certificate file. The base64 is standard X.509 DER and is expected there, so this is a benign raw-pass false positive.

  195. info warn → info by review encoding-base64 ydb/default_pem.py:3799:1

    base64-like blob (672 bytes over 11 lines, compression ratio 0.77) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5
    MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
    Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
    dismissed LLM, confidence 0.96 A PEM-encoded Amazon root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (Amazon Root CA 4) in a bundled CA certificate file. The base64 is standard certificate encoding, so this is a benign raw-pass false positive.

  196. info warn → info by review encoding-base64 ydb/default_pem.py:3820:1

    base64-like blob (1972 bytes over 31 lines, compression ratio 0.74) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFwzCCA6ugAwIBAgIUCn6m30tEntpqJIWe5rgV0xZ/u7EwDQYJKoZIhvcNAQEL
    BQAwRjELMAkGA1UEBhMCTFUxFjAUBgNVBAoMDUx1eFRydXN0IFMuQS4xHzAdBgNV
    BAMMFkx1eFRydXN0IEdsb2JhbCBSb290IDIwHhcNMTUwMzA1MTMyMTU3WhcNMzUw
    dismissed LLM, confidence 0.96 A PEM-encoded LuxTrust root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (LuxTrust Global Root 2) in a bundled CA file. The base64 is ordinary DER certificate data, so the blob flag is a false positive.

  197. info warn → info by review encoding-base64 ydb/default_pem.py:3861:1

    base64-like blob (1504 bytes over 24 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIx
    GDAWBgNVBAcTD0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxp
    bXNlbCB2ZSBUZWtub2xvamlrIEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0w
    dismissed LLM, confidence 0.96 A PEM-encoded TUBITAK root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (TUBITAK root CA) in a bundled CA file. The base64 is standard certificate encoding and this is not obfuscation.

  198. info warn → info by review encoding-base64 ydb/default_pem.py:3895:1

    base64-like blob (1896 bytes over 30 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UE
    BhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ
    IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0
    dismissed LLM, confidence 0.96 A PEM-encoded GDCA root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (GDCA TrustAUTH root) in a bundled CA file. The base64 is ordinary X.509 data, so the raw-pass flag is a false positive.

  199. info warn → info by review encoding-base64 ydb/default_pem.py:3935:1

    base64-like blob (1436 bytes over 23 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYD
    VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
    MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
    dismissed LLM, confidence 0.96 A PEM-encoded TrustCor root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (TrustCor root CA) in a bundled CA file. The base64 is standard certificate data and is expected in this context.

  200. info warn → info by review encoding-base64 ydb/default_pem.py:3968:1

    base64-like blob (2116 bytes over 34 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNV
    BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw
    IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy
    dismissed LLM, confidence 0.96 A PEM-encoded TrustCor root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (TrustCor root CA) in a bundled CA file. The base64 is ordinary DER encoding, so this is a benign raw-pass false positive.

  201. info warn → info by review encoding-base64 ydb/default_pem.py:4012:1

    base64-like blob (1416 bytes over 23 lines, compression ratio 0.72) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD
    VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
    MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
    dismissed LLM, confidence 0.96 A PEM-encoded TrustCor root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (TrustCor root CA) in a bundled CA file. The base64 is standard certificate encoding, so the blob flag does not indicate malice.

  202. info warn → info by review encoding-base64 ydb/default_pem.py:4045:1

    base64-like blob (2008 bytes over 32 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE
    BhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQK
    DA9TU0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZp
    dismissed LLM, confidence 0.96 A PEM-encoded SSL.com root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (SSL.com root CA) in a bundled CA file. The base64 is ordinary X.509 data, so this is a benign raw-pass false positive.

  203. info warn → info by review encoding-base64 ydb/default_pem.py:4087:1

    base64-like blob (876 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC
    VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
    U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0
    dismissed LLM, confidence 0.96 A PEM-encoded SSL.com ECC root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (SSL.com root CA, ECC) in a bundled CA file. The base64 is standard certificate encoding and is expected there.

  204. info warn → info by review encoding-base64 ydb/default_pem.py:4111:1

    base64-like blob (2028 bytes over 32 lines, compression ratio 0.70) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV
    BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE
    CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy
    dismissed LLM, confidence 0.96 A PEM-encoded SSL.com EV root CA certificate in ydb's bundled default CA file.
    Reasoning

    The snippet is a PEM certificate block (SSL.com EV root CA) in a bundled CA file. The base64 is ordinary DER data, so the raw-pass flag is a false positive.

  205. info warn → info by review encoding-base64 ydb/default_pem.py:4153:1

    base64-like blob (888 bytes over 14 lines, compression ratio 0.75) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMC
    VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
    U0wgQ29ycG9yYXRpb24xNDAyBgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZp
    likely benign LLM, confidence 0.97 A PEM root CA certificate (SSL.com EV Root) embedded in the ydb default certificate bundle.
    Reasoning

    The snippet is a PEM-encoded X.509 certificate (BEGIN CERTIFICATE header, DER base64 with standard ASN.1 prefixes like MIIC...). The bundled CA root store in a database client library is legitimate; base64 is the standard encoding for PEM, not obfuscation.

  206. info warn → info by review encoding-base64 ydb/default_pem.py:4177:1

    base64-like blob (1888 bytes over 30 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg
    MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh
    bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx
    likely benign LLM, confidence 0.97 A PEM-encoded GlobalSign root CA certificate in the ydb default trust bundle.
    Reasoning

    Standard PEM certificate block for a GlobalSign root CA, with recognizable DER/ASN.1 base64 structure. Expected content for a default trust store file; the base64 flag is a false positive from the raw pass.

  207. info warn → info by review encoding-base64 ydb/default_pem.py:4217:1

    base64-like blob (828 bytes over 13 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQsw
    CQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91
    bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwg
    likely benign LLM, confidence 0.97 A PEM-encoded WISeKey/OISTE root CA certificate in the bundled trust store.
    Reasoning

    PEM certificate block (WISeKey/OISTE root) with normal base64 ASN.1 encoding. A CA bundle is the expected content of default_pem.py; no execution or concealment is present.

  208. info warn → info by review encoding-base64 ydb/default_pem.py:4240:1

    base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBH
    MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
    QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
    likely benign LLM, confidence 0.97 A PEM-encoded Google Trust Services GTS Root R1 certificate in the trust bundle.
    Reasoning

    Standard PEM certificate for a Google Trust Services root (GTS Root R1) with valid DER base64 structure. Expected in a CA bundle; raw base64 detection is a false positive here.

  209. info warn → info by review encoding-base64 ydb/default_pem.py:4279:1

    base64-like blob (1832 bytes over 29 lines, compression ratio 0.73) (raw pass, confidence 0.60)

    -----BEGIN CERTIFICATE-----
    MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBH
    MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
    QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
    likely benign LLM, confidence 0.97 A PEM-encoded Google Trust Services GTS Root R2 certificate in the trust bundle.
    Reasoning

    Another PEM root certificate (GTS Root R2) in the same bundle, with normal base64 X.509 structure. This is a routine trust-store entry, not an obfuscated payload.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o ydb-3.30.0-py3-none-any.whl https://files.pythonhosted.org/packages/fc/86/c4b6beb29f8664bd103b509e0a8f147fa25e94a9a835fae407a77146a9b5/ydb-3.30.0-py3-none-any.whl
printf '%s  %s\n' edb987dad9d6a519a174f43014d80cc0d28bf7e526d043df66f16309f5a66702 ydb-3.30.0-py3-none-any.whl | shasum -a 256 -c -
unzip -q ydb-3.30.0-py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg