pkg/controllers/workgenerator/controller.go (8 lines):
	- line 80: // TODO: incorporate an overriding policy if one exists
	- line 190: //TODO: check if it's user error and set a different failed reason
	- line 450: // TODO: check all work synced first before fetching the snapshots after we put ParentResourceOverrideSnapshotHashAnnotation and ParentClusterResourceOverrideSnapshotHashAnnotation in all the work objects
	- line 492: // TODO: override the content of the wrapped resource instead of the envelope itself
	- line 526: // TODO (RZ): revisit to see if we need this hack
	- line 598: // TODO: check resourceOverrideSnapshotHash and  clusterResourceOverrideSnapshotHash after all the work has the ParentResourceOverrideSnapshotHashAnnotation and ParentClusterResourceOverrideSnapshotHashAnnotation
	- line 603: // TODO: remove this block after all the work has the ParentResourceSnapshotNameAnnotation
	- line 768: // TODO: remove the compare after we did the check on all work in the sync all


pkg/utils/informer/informermanager.go (6 lines):
	- line 76: // TODO: replace this with plain context
	- line 131: // TODO (rzhang): remember the ResourceEventHandlerRegistration and remove it when the resource is deleted
	- line 132: // TODO: handle error which only happens if the informer is stopped
	- line 138: // TODO: add the Event handler back
	- line 161: // TODO: Remove the Event handler from the informer using the resourceEventHandlerRegistration during creat
	- line 183: // TODO: use a lazy initialized sync map to reduce the number of informer sync look ups


pkg/controllers/work/apply_controller.go (6 lines):
	- line 281: // TODO: do not retry on errors if the apply action is reportDiff, report the diff every 1 min instead
	- line 305: // TODO: allow orphaned manifest
	- line 429: // TODO: determine action based on conflict resolution action
	- line 608: // TODO: special handle no results
	- line 609: // TODO: special handle the apply error of type "report" drift.
	- line 828: // TODO: handle the max length (32768) of the message field


pkg/controllers/rollout/controller.go (5 lines):
	- line 93: // TODO: support the rollout all at once type of RolloutStrategy
	- line 166: // TODO: detect this situation in the FetchAllMatchingOverridesForResourceSnapshot and retry here
	- line 286: // TODO (rzhang): group all bindings pointing to the same cluster together when we calculate the rollout plan so that we can avoid this.
	- line 348: // TODO: check the size of the cro and ro to not exceed the limit
	- line 560: // TODO re-slice the array


pkg/controllers/clusterresourceplacement/resource_selector.go (4 lines):
	- line 191: // TODO: validator should enforce the mutual exclusiveness between the `name` and `labelSelector` fields
	- line 212: // TODO: validator should enforce the validity of the labelSelector
	- line 379: // TODO: Establish a way to keep the ownership relation through work-api
	- line 384: // TODO: see if there are other cases that we may have some extra fields


pkg/controllers/clusterresourceplacement/placement_controllerv1alpha1.go (3 lines):
	- line 96: // TODO: add finalizer logic if we need it in the future
	- line 104: // TODO: check on certain error (i.e. not cluster scoped) and do not retry
	- line 161: // TODO: add them to the old placement selected clusters since the work has been created although the update can still fail


pkg/utils/validator/clusterresourceplacement.go (3 lines):
	- line 81: // TODO: Ensure gvk created from resource selector is valid.
	- line 444: // TODO: Check for logical contradictions
	- line 481: // TODO: Restructure for Eq (bundle operator and value validation logic)


pkg/controllers/clusterresourceplacement/controller.go (2 lines):
	- line 55: // TODO: unify all the controllers with this pattern and make this configurable in place of the controller runtime resync period.
	- line 932: // TODO: need to track whether we have deleted the resources for the last decisions.


tools/draincluster/main.go (2 lines):
	- line 22: //TODO (arvindth): add flags for timeout, help for program.
	- line 65: // TODO (arvindth): add a flag to specify timeout for retry to keep retrying.


pkg/controllers/workv1alpha1/patch_util.go (2 lines):
	- line 46: //TODO: see if we should use something like json.ConfigCompatibleWithStandardLibrary.Marshal to make sure that
	- line 120: //TODO: see if we should use something like json.ConfigCompatibleWithStandardLibrary.Marshal to make sure that


pkg/controllers/internalmembercluster/v1alpha1/member_controller.go (2 lines):
	- line 134: // TODO: handle all the controllers uniformly if we have more
	- line 146: // TODO: handle all the controllers uniformly if we have more


pkg/resourcewatcher/change_dector.go (2 lines):
	- line 143: // TODO: Controllers also don't need to check any k8s built-in resource but there is no easy way to know
	- line 220: // TODO: add UTs for this


pkg/controllers/internalmembercluster/v1beta1/member_controller.go (2 lines):
	- line 267: // TODO: handle all the controllers uniformly if we have more
	- line 279: // TODO: handle all the controllers uniformly if we have more


pkg/controllers/workgenerator/override.go (2 lines):
	- line 51: // TODO: support customized revision history limit
	- line 84: // TODO: support customized revision history limit


pkg/utils/apiresources.go (2 lines):
	- line 35: // TODO: add more default resource configs to skip
	- line 131: // TODO: reduce cyclo


pkg/controllers/work/patch_util.go (2 lines):
	- line 48: //TODO: see if we should use something like json.ConfigCompatibleWithStandardLibrary.Marshal to make sure that
	- line 122: //TODO: see if we should use something like json.ConfigCompatibleWithStandardLibrary.Marshal to make sure that


pkg/controllers/clusterinventory/clusterprofile/controller.go (1 line):
	- line 215: // TODO: Add the generation check after Fleet member agent handle the health condition appropriately.


pkg/controllers/workapplier/process.go (1 line):
	- line 41: // TODO: We have to apply the namespace/crd/secret/configmap/pvc first


pkg/controllers/workapplier/controller.go (1 line):
	- line 361: // TODO: allow orphaned manifest


pkg/controllers/updaterun/initialization.go (1 line):
	- line 221: // TODO (wantjian): refactor this part to update PolicyObservedClusterCount in one place.


cmd/hubagent/options/validation.go (1 line):
	- line 25: // TODO: Clean up the validations we don't need and add the ones we need


cmd/memberagent/main.go (1 line):
	- line 395: // TODO (britaniar): load cloud config for Azure property provider.


pkg/utils/overrider/overrider.go (1 line):
	- line 44: // TODO: to improve the performance, we can add the index on the placement field of the override snapshots.


pkg/utils/condition/condition.go (1 line):
	- line 97: // TODO: Add a user error reason


pkg/controllers/workv1alpha1/manager.go (1 line):
	- line 55: // TODO: move this to work api definition


tools/uncordoncluster/main.go (1 line):
	- line 22: //TODO (arvindth): add flags for timeout, help for program.


pkg/controllers/work/applied_work_syncer.go (1 line):
	- line 84: // TODO: this UID may not be the current one if the resource is deleted and recreated


pkg/controllers/workv1alpha1/apply_controller.go (1 line):
	- line 236: // TODO: allow orphaned manifest


pkg/controllers/membercluster/v1beta1/membercluster_controller.go (1 line):
	- line 517: // TODO: We didn't handle condition type: clusterv1beta1.ConditionTypeMemberClusterHealthy.


apis/placement/v1alpha1/overridesnapshot_types.go (1 line):
	- line 59: // TODO: Add status fields for the controller to surface errors during reconciliation.


cmd/authtoken/main.go (1 line):
	- line 73: // TODO: this scope argument is specific for Azure provider. We should allow registering and parsing provider specific argument


tools/draincluster/drain/drain.go (1 line):
	- line 96: // TODO: add safeguards to check if eviction conditions are set to unknown.


pkg/utils/binding/binding.go (1 line):
	- line 30: // TODO: parse the reason of the condition to see if the failure is recoverable/retriable or not


charts/member-agent/values.yaml (1 line):
	- line 59: tlsClientInsecure: true #TODO should be false in the production


cmd/hubagent/workload/setup.go (1 line):
	- line 118: // TODO: Try to reduce the complexity of this last measured at 33 (failing at > 30) and remove the // nolint:gocyclo


pkg/controllers/workv1alpha1/applied_work_syncer.go (1 line):
	- line 84: // TODO: this UID may not be the current one if the resource is deleted and recreated


pkg/utils/common.go (1 line):
	- line 558: // TODO:  add more special handling for different resource kind


pkg/controllers/membercluster/v1alpha1/membercluster_controller.go (1 line):
	- line 428: // TODO: We didn't handle condition type: fleetv1alpha1.ConditionTypeMemberClusterHealthy.