openai/codex-security
Code Volume
Analysis scope, overview of main, test, generated, deployment, build, and other code.
Source Code Analysis Scope
Files includes and excluded from analyses
mjs
gitattributes
jsonl
cmd
prettierignore

scoping details...
  • 23 extensions are included in analyses: ts, py, md, json, mjs, yaml, yml, gitignore, js, sh, toml, txt, rs, tsx, cjs, css, dockerignore, gitattributes, jsonl, ps1, html, cmd, prettierignore
  • 9 criteria are used to exclude files from analysis:
    • exclude files with path like ".*/bin/.*" (Binaries for distribution) (2 files).
    • exclude files with path like ".*\.d\.ts" (Typescript definition files) (2 files).
    • exclude files with path like ".*/docs/.*" (Documentation) (8 files).
    • exclude files with path like ".*/git[-]commit[-]trailers[.]txt" (Git history trailers) (1 file).
    • exclude files with path like ".*/git[-]history[.]txt" (Git history) (1 file).
    • exclude files with path like ".*/git[-][a-zA-Z0-9_]+[.]txt" (Git data exports for sokrates analyses) (1 file).
    • exclude files with path like ".*/_sokrates/.*" (Sokrates files) (0 files).
    • exclude files with path like ".*/_sokrates_landscape/.*" (Sokrates landscape files) (0 files).
    • exclude files with path like ".*/sokrates_.*?[.]json" (Sokrates conventions and configurations) (0 files).
Overview of Analyzed Files
Basic stats on analyzed files
Intro
For analysis purposes we separate files in scope into several categories: main, test, generated, deployment and build, and other.
main89002 LOC (29%) 324 files
test170822 LOC (56%) 288 files
generated4665 LOC (1%) 3 files
build and deployment17950 LOC (5%) 47 files
other19072 LOC (6%) 142 files
Main Code
All manually created or maintained source code that defines logic of the product that is run in a production environment.
mjs
cmd
Explore:   circles  |  sunburst

ts60248 LOC (67%) 199 files
py20393 LOC (22%) 41 files
mjs5356 LOC (6%) 37 files
tsx1249 LOC (1%) 3 files
yaml508 LOC (<1%) 29 files
css473 LOC (<1%) 1 file
rs441 LOC (<1%) 4 files
js91 LOC (<1%) 3 files
cjs90 LOC (<1%) 1 file
toml80 LOC (<1%) 4 files
cmd55 LOC (<1%) 1 file
html18 LOC (<1%) 1 file

scope details...
  • The following criteria are used to filter files:
    • files with paths like ".*".
  • 324 files match defined criteria (89,002 LOC, 100.0% vs. main code):
    • 199 ts files (60,248 LOC)
    • 41 py files (20,393 LOC)
    • 37 mjs files (5,356 LOC)
    • 3 tsx files (1,249 LOC)
    • 29 yaml files (508 LOC)
    • 1 css files (473 LOC)
    • 4 rs files (441 LOC)
    • 3 js files (91 LOC)
    • 1 cjs files (90 LOC)
    • 4 toml files (80 LOC)
    • 1 cmd files (55 LOC)
    • 1 html files (18 LOC)
Test Code
Used only for testing of the product. Normally not deployed in a production environment.
mjs
jsonl
Explore:   circles  |  sunburst

ts137768 LOC (80%) 222 files
py31714 LOC (18%) 55 files
yaml942 LOC (<1%) 6 files
mjs384 LOC (<1%) 2 files
ps17 LOC (<1%) 1 file
js5 LOC (<1%) 1 file
jsonl2 LOC (<1%) 1 file

scope details...
  • The following criteria are used to filter files:
    • files with paths like ".*/[Tt]ests/.*".
    • files with paths like ".*[.][Tt]est[.].*".
    • files with paths like ".*[.]test[.].*".
    • files with paths like ".*/test_.*".
    • files with paths like ".*[-]test[-].*".
  • 288 files match defined criteria (170,822 LOC, 191.9% vs. main code):
    • 222 ts files (137,768 LOC)
    • 55 py files (31,714 LOC)
    • 6 yaml files (942 LOC)
    • 2 mjs files (384 LOC)
    • 1 ps1 files (7 LOC)
    • 1 js files (5 LOC)
    • 1 jsonl files (2 LOC)
Generated Code
Automatically generated files, not manually changed after generation.
Explore:   circles  |  sunburst

json4665 LOC (100%) 3 files

scope details...
  • The following criteria are used to filter files:
    • files with paths like ".*/package[-]lock[.]json".
  • 3 files match defined criteria (4,665 LOC, 5.2% vs. main code). All matches are in json files.
Build and Deployment Code
Source code used to configure or support build and deployment process.
gitattributes
prettierignore
Explore:   circles  |  sunburst

yaml17450 LOC (97%) 29 files
toml219 LOC (1%) 2 files
sh195 LOC (1%) 6 files
gitignore51 LOC (<1%) 7 files
dockerignore15 LOC (<1%) 1 file
gitattributes14 LOC (<1%) 1 file
prettierignore6 LOC (<1%) 1 file

scope details...
  • The following criteria are used to filter files:
    • files with paths like ".*[.]git[a-z]+".
    • files with paths like ".*/[.]gitignore".
    • files with paths like ".*/pnpm.*[.]ya?ml".
    • files with paths like ".*/package[.]json".
    • files with paths like ".*/package[-]lock[.]json".
    • files with paths like ".*[.]sh".
    • files with paths like ".*/Cargo[.]toml".
    • files with paths like ".*/pyproject[.]toml".
    • files with paths like ".*/[.]dockerignore".
    • files with paths like "(.*/)?[.]dockerignore".
    • files with paths like ".*/[.]prettierignore".
    • files with paths like "(.*/)?[.]prettierignore".
    • files with paths like ".*/azure[-]pipelines[.]ya?ml".
    • files with paths like ".*/[.]github/workflows/.*[.]ya?ml".
    • files with paths like ".*/[.]github/actions/.*[.]ya?ml".
    • files with paths like ".*/action[.]ya?ml".
    • files with paths like ".*/[.]gitattributes".
  • 47 files match defined criteria (17,950 LOC, 20.2% vs. main code):
    • 29 yaml files (17,450 LOC)
    • 2 toml files (219 LOC)
    • 6 sh files (195 LOC)
    • 7 gitignore files (51 LOC)
    • 1 dockerignore files (15 LOC)
    • 1 gitattributes files (14 LOC)
    • 1 prettierignore files (6 LOC)
Other Code
mjs
Explore:   circles  |  sunburst

json10672 LOC (55%) 55 files
md5306 LOC (27%) 71 files
mjs1233 LOC (6%) 8 files
css793 LOC (4%) 1 file
rs688 LOC (3%) 1 file
yaml268 LOC (1%) 2 files
js59 LOC (<1%) 1 file
txt53 LOC (<1%) 3 files

scope details...
  • The following criteria are used to filter files:
    • files with paths like ".*[.]md".
    • files with paths like ".*/README[.][a-z0-9]+".
    • files with paths like ".*[.]json".
    • files with paths like ".*[.]txt".
    • files with paths like ".*/[Ee]xamples/.*".
  • 142 files match defined criteria (19,072 LOC, 21.4% vs. main code):
    • 55 json files (10,672 LOC)
    • 71 md files (5,306 LOC)
    • 8 mjs files (1,233 LOC)
    • 1 css files (793 LOC)
    • 1 rs files (688 LOC)
    • 2 yaml files (268 LOC)
    • 1 js files (59 LOC)
    • 3 txt files (53 LOC)
About This Analysis
learn more about scopes (main, test, generated, build, other)...

  • The main category contains all manually created source code files that are being used in the production.
  • Files in the main category are used as input for other analyses: logical decomposition, concerns, duplication, file size, unit size, and conditional complexity.
  • Test source code files are used only for testing of the product. These files are normally not deployed to production.
  • Build and deployment source code files are used to configure or support build and deployment process.
  • Generated source code files are automatically generated files that have not been manually changed after generation.
  • While a source code folder may contain a number of files, we are primarily interested in the source code files that are being written and maintained by developers.
  • Files containing binaries, documentation, or third-party libraries, for instance, are excluded from analysis. The exception are third-party libraries that have been changed by developers.

learn more about used code analyzers...
  • *.ts files are analyzed with TypeScriptAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • No dependency analysis
  • *.py files are analyzed with PythonAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • Basic heuristic dependency analysis
  • *.mjs files are analyzed with DefaultLanguageAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Basic code cleaning (empty lines removed for LOC calculations and duplication calculations)
    • No unit size analysis
    • No conditional complexity analysis
    • No dependency analysis
  • *.tsx files are analyzed with TypeScriptAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • No dependency analysis
  • *.yaml files are analyzed with YamlAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • No unit size analysis
    • No conditional complexity analysis
    • No dependency analysis
  • *.css files are analyzed with CssAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • No unit size analysis
    • No conditional complexity analysis
    • No dependency analysis
  • *.rs files are analyzed with RustAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • No dependency analysis
  • *.js files are analyzed with JavaScriptAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • No dependency analysis
  • *.cjs files are analyzed with JavaScriptAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • No dependency analysis
  • *.toml files are analyzed with DefaultLanguageAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Basic code cleaning (empty lines removed for LOC calculations and duplication calculations)
    • No unit size analysis
    • No conditional complexity analysis
    • No dependency analysis
  • *.cmd files are analyzed with DefaultLanguageAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Basic code cleaning (empty lines removed for LOC calculations and duplication calculations)
    • No unit size analysis
    • No conditional complexity analysis
    • No dependency analysis
  • *.html files are analyzed with HtmlAnalyzer:
    • All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)
    • Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)
    • Unit size analysis
    • Conditional complexity analysis
    • Advanced heuristic dependency analysis