Issue Codes

A supported cache directory exceeds the configured size threshold.

Module

cache

Introduced

1.7.0

A supported cache directory is not writable.

Module

cache

Introduced

1.7.0

A Laravel cache artifact exists.

Module

cache

Introduced

1.7.0

No supported cache directories or artifacts were detected.

Module

cache

Introduced

1.7.0

Cache diagnostics found no actionable issues.

Module

cache

Introduced

1.7.0

The baseline output file already exists.

Module

ci

Introduced

0.11.1

The baseline file is invalid.

Module

ci

Introduced

0.11.1

The requested baseline file is missing.

Module

ci

Introduced

0.11.1

A baseline report summarizes active, suppressed, and resolved fingerprints.

Module

ci

Introduced

1.35.0

An unknown CI module was requested.

Module

ci

Introduced

0.8.0

An unknown CI policy profile was requested.

Module

ci

Introduced

1.34.0

The Composer binary is unavailable.

Module

composer

Introduced

0.8.0

A required PHP extension is missing.

Module

composer

Introduced

0.8.0

composer.json is invalid.

Module

composer

Introduced

0.8.0

composer.lock is missing.

Module

composer

Introduced

0.8.0

composer.lock may be older than composer.json.

Module

composer

Introduced

0.8.0

The path is not a Composer project.

Module

composer

Introduced

0.8.0

An installed package is marked abandoned.

Module

composer

Introduced

0.8.0

The current PHP version does not satisfy composer.json.

Module

composer

Introduced

0.8.0

Composer diagnostics found no actionable issues.

Module

composer

Introduced

0.8.0

A Composer install or update script may be risky.

Module

composer

Introduced

0.8.0

Composer validation failed.

Module

composer

Introduced

0.8.0

The vendor directory is missing.

Module

composer

Introduced

0.8.0

A CMake project does not expose compile_commands.json.

Module

cpp

Introduced

1.20.0

A CMake file appears to hard-code a generator assumption.

Module

cpp

Introduced

1.20.0

CMake cache appears in the source root.

Module

cpp

Introduced

1.20.0

Multiple C/C++ dependency managers were detected.

Module

cpp

Introduced

1.20.0

The path is not a C/C++ project.

Module

cpp

Introduced

1.20.0

C/C++ diagnostics found no actionable issues.

Module

cpp

Introduced

1.20.0

A C/C++ build file contains compiler flags that can hide important diagnostics.

Module

cpp

Introduced

1.20.0

A C/C++ build file contains a Unix shell assumption.

Module

cpp

Introduced

1.20.0

The optional database connection check failed.

Module

db

Introduced

1.6.0

The optional database connection check succeeded.

Module

db

Introduced

1.6.0

The database connection name is missing.

Module

db

Introduced

1.6.0

The database connection name is not recognized.

Module

db

Introduced

1.6.0

The matching PDO database driver is unavailable.

Module

db

Introduced

1.6.0

The configured database port is invalid.

Module

db

Introduced

1.6.0

Database diagnostics found no actionable issues.

Module

db

Introduced

1.6.0

A required database environment key is missing.

Module

db

Introduced

1.6.0

The configured SQLite database file is missing.

Module

db

Introduced

1.6.0

The Docker binary is unavailable.

Module

docker

Introduced

0.8.0

Docker Compose config validation failed.

Module

docker

Introduced

0.8.0

The requested Compose file is missing.

Module

docker

Introduced

0.8.0

The Compose file cannot be parsed.

Module

docker

Introduced

0.8.0

A container is unhealthy or restarting.

Module

docker

Introduced

0.8.0

The Docker daemon is unavailable.

Module

docker

Introduced

0.8.0

A Compose environment reference is unresolved.

Module

docker

Introduced

0.8.0

A Compose host port is already in use.

Module

docker

Introduced

0.8.0

No Compose project was detected.

Module

docker

Introduced

0.8.0

Docker diagnostics found no actionable issues.

Module

docker

Introduced

0.8.0

.NET restore lock mode is enabled but packages.lock.json is missing.

Module

dotnet

Introduced

1.19.0

Multiple .NET solution files were detected.

Module

dotnet

Introduced

1.19.0

The path is not a .NET project.

Module

dotnet

Introduced

1.19.0

.NET diagnostics found no actionable issues.

Module

dotnet

Introduced

1.19.0

NuGet config uses an insecure HTTP package source.

Module

dotnet

Introduced

1.19.0

.NET SDK version is not pinned with global.json.

Module

dotnet

Introduced

1.19.0

.NET target frameworks span multiple major platform versions.

Module

dotnet

Introduced

1.19.0

An environment key is declared more than once.

Module

env

Introduced

0.8.0

An environment key has an empty value.

Module

env

Introduced

0.8.0

The environment example file is missing.

Module

env

Introduced

0.8.0

The environment file is missing.

Module

env

Introduced

0.8.0

A forbidden conditional environment value is present.

Module

env

Introduced

0.8.0

An environment value is not in the allowed set.

Module

env

Introduced

0.8.0

The DevDoctor environment configuration is invalid.

Module

env

Introduced

0.8.0

An environment key name is invalid.

Module

env

Introduced

0.8.0

An environment value does not match its configured type.

Module

env

Introduced

0.8.0

A key from the example file is missing in the environment file.

Module

env

Introduced

0.8.0

A key from the environment file is missing in the example file.

Module

env

Introduced

0.8.0

Debug mode is enabled for a production environment.

Module

env

Introduced

0.8.0

Environment diagnostics found no actionable issues.

Module

env

Introduced

0.8.0

A required environment key is missing.

Module

env

Introduced

0.8.0

A conditionally required environment key is missing.

Module

env

Introduced

0.8.0

A likely secret appears in an example environment file.

Module

env

Introduced

0.8.0

pubspec.yaml uses a local path or Git dependency source.

Module

flutter

Introduced

1.26.0

pubspec.yaml declares dependencies but pubspec.lock is missing.

Module

flutter

Introduced

1.26.0

The path is not a Flutter or Dart project.

Module

flutter

Introduced

1.26.0

Flutter project metadata exists but platform markers are missing.

Module

flutter

Introduced

1.26.0

Flutter and Dart diagnostics found no actionable issues.

Module

flutter

Introduced

1.26.0

pubspec.yaml does not declare a Dart SDK constraint.

Module

flutter

Introduced

1.26.0

A frontend project has no package.json build script.

Module

frontend

Introduced

1.14.0

The path is not a frontend project.

Module

frontend

Introduced

1.14.0

A frontend project preset was detected.

Module

frontend

Introduced

1.14.0

Frontend diagnostics found no actionable issues.

Module

frontend

Introduced

1.14.0

The branch is ahead of or behind its upstream.

Module

git

Introduced

0.8.0

The Git binary is unavailable.

Module

git

Introduced

0.8.0

The repository contains unresolved conflicts.

Module

git

Introduced

0.8.0

The repository is in detached HEAD state.

Module

git

Introduced

0.8.0

The worktree contains changes.

Module

git

Introduced

0.8.0

An environment file is not ignored by Git.

Module

git

Introduced

0.8.0

A large untracked file was found.

Module

git

Introduced

0.8.0

The path is not a Git repository.

Module

git

Introduced

0.8.0

The current branch has no upstream.

Module

git

Introduced

0.8.0

Git diagnostics found no actionable issues.

Module

git

Introduced

0.8.0

A sensitive file is tracked by Git.

Module

git

Introduced

0.8.0

A sensitive file is untracked.

Module

git

Introduced

0.8.0

The Go module path looks invalid or is missing.

Module

go

Introduced

1.16.0

No Go module or workspace was detected.

Module

go

Introduced

1.16.0

Go diagnostics found no actionable issues.

Module

go

Introduced

1.16.0

A Go replace directive points to a local path.

Module

go

Introduced

1.16.0

go.mod declares dependencies but go.sum is missing.

Module

go

Introduced

1.16.0

A Go toolchain directive is declared.

Module

go

Introduced

1.16.0

Go vendor directory metadata is present.

Module

go

Introduced

1.16.0

go.work references a directory without go.mod.

Module

go

Introduced

1.16.0

An unknown health module was requested.

Module

health

Introduced

1.5.0

A production HTTP URL does not use HTTPS.

Module

http

Introduced

1.9.0

A production HTTP URL points at a local host.

Module

http

Introduced

1.9.0

HTTP URL diagnostics found no actionable issues.

Module

http

Introduced

1.9.0

An HTTP URL is invalid.

Module

http

Introduced

1.9.0

No HTTP URL targets were found.

Module

http

Introduced

1.9.0

Terraform backend or provider config appears to contain a literal secret.

Module

iac

Introduced

1.24.0

Provider requirements are declared but no Terraform/OpenTofu lockfile was found.

Module

iac

Introduced

1.24.0

The path is not a Terraform, OpenTofu, or Terragrunt project.

Module

iac

Introduced

1.24.0

IaC diagnostics found no actionable issues.

Module

iac

Introduced

1.24.0

A Terraform or Terragrunt remote module source appears to be unpinned.

Module

iac

Introduced

1.24.0

A Terraform variable default appears to contain a secret-like value.

Module

iac

Introduced

1.24.0

A Terraform provider version constraint is too broad.

Module

iac

Introduced

1.24.0

Multiple Java build systems were detected.

Module

java

Introduced

1.18.0

The path is not a Java/JVM project.

Module

java

Introduced

1.18.0

Java diagnostics found no actionable issues.

Module

java

Introduced

1.18.0

A Java build file contains shell execution that should be reviewed.

Module

java

Introduced

1.18.0

A Spring production profile appears to enable debug logging.

Module

java

Introduced

1.18.0

Java version declarations disagree across build files.

Module

java

Introduced

1.18.0

A Maven or Gradle wrapper is missing.

Module

java

Introduced

1.18.0

A Helm chart declares dependencies but Chart.lock is missing.

Module

kube

Introduced

1.25.0

A Kubernetes manifest mounts a hostPath volume.

Module

kube

Introduced

1.25.0

A Kubernetes manifest uses a mutable or implicit image tag.

Module

kube

Introduced

1.25.0

A Kubernetes service exposes a NodePort.

Module

kube

Introduced

1.25.0

The path is not a Kubernetes or Helm project.

Module

kube

Introduced

1.25.0

A Kubernetes manifest enables a privileged container.

Module

kube

Introduced

1.25.0

Kubernetes and Helm diagnostics found no actionable issues.

Module

kube

Introduced

1.25.0

A Helm values file appears to contain a literal secret.

Module

kube

Introduced

1.25.0

APP_KEY is missing or empty.

Module

laravel

Introduced

1.3.0

APP_URL is missing or still set to a default localhost value.

Module

laravel

Introduced

1.3.0

Laravel config cache exists and may need rebuilding after environment changes.

Module

laravel

Introduced

1.3.0

An expected Laravel runtime directory is missing.

Module

laravel

Introduced

1.3.0

An expected Laravel runtime directory is not writable.

Module

laravel

Introduced

1.3.0

The Laravel .env file is missing.

Module

laravel

Introduced

1.3.0

The path is not a Laravel project.

Module

laravel

Introduced

1.3.0

APP_DEBUG is enabled while APP_ENV is production.

Module

laravel

Introduced

1.3.0

Laravel diagnostics found no actionable issues.

Module

laravel

Introduced

1.3.0

An Android manifest enables debuggable mode.

Module

mobile

Introduced

1.27.0

An Android project does not include a Gradle wrapper.

Module

mobile

Introduced

1.27.0

iOS entitlements appear to allow debug task access.

Module

mobile

Introduced

1.27.0

Podfile exists but Podfile.lock is missing.

Module

mobile

Introduced

1.27.0

The path is not a native Android or iOS project.

Module

mobile

Introduced

1.27.0

Mobile diagnostics found no actionable issues.

Module

mobile

Introduced

1.27.0

Workspace metadata exists but no JavaScript package manager lockfile was found.

Module

monorepo

Introduced

1.28.0

Multiple monorepo orchestration tools were detected.

Module

monorepo

Introduced

1.28.0

The path is not a supported monorepo project.

Module

monorepo

Introduced

1.28.0

Monorepo diagnostics found no actionable issues.

Module

monorepo

Introduced

1.28.0

A root package script downloads or executes remote shell content.

Module

monorepo

Introduced

1.28.0

The Node.js binary is unavailable.

Module

node

Introduced

1.2.0

package.json declares dependencies but no supported lockfile is present.

Module

node

Introduced

1.2.0

A Node.js package manager lockfile is older than package.json.

Module

node

Introduced

1.14.0

The node_modules directory is missing.

Module

node

Introduced

1.2.0

Multiple Node.js package manager lockfiles are present.

Module

node

Introduced

1.2.0

The path is not a Node.js project.

Module

node

Introduced

1.2.0

package.json is invalid.

Module

node

Introduced

1.2.0

The declared package manager does not match committed lockfiles.

Module

node

Introduced

1.2.0

Node.js diagnostics found no actionable issues.

Module

node

Introduced

1.2.0

A package.json script may be risky.

Module

node

Introduced

1.2.0

Node.js version requirements disagree across project files.

Module

node

Introduced

1.2.0

The active Node.js version does not satisfy the project requirement.

Module

node

Introduced

1.2.0

The PHP binary is unavailable.

Module

php

Introduced

1.1.0

composer.json cannot be parsed for PHP diagnostics.

Module

php

Introduced

1.1.0

A required PHP extension is missing from the active runtime.

Module

php

Introduced

1.1.0

The active PHP runtime has no loaded php.ini file.

Module

php

Introduced

1.1.0

The active PHP memory_limit is below the configured threshold.

Module

php

Introduced

1.1.0

PHP diagnostics found no actionable issues.

Module

php

Introduced

1.1.0

The active PHP version does not satisfy composer.json.

Module

php

Introduced

1.1.0

Xdebug is enabled while running in CI mode.

Module

php

Introduced

1.1.0

Port diagnostics found no actionable issues.

Module

ports

Introduced

0.8.0

A requested port is invalid.

Module

ports

Introduced

0.8.0

A requested port is in use.

Module

ports

Introduced

0.8.0

A port has multiple listeners.

Module

ports

Introduced

0.8.0

A requested port is privileged.

Module

ports

Introduced

0.8.0

No supported port inspection provider is available.

Module

ports

Introduced

0.8.0

A supported project preset was detected.

Module

presets

Introduced

0.9.0

No supported project preset was detected.

Module

presets

Introduced

0.9.0

A Python dependency manager lockfile is missing.

Module

python

Introduced

1.15.0

Multiple Python dependency managers were detected.

Module

python

Introduced

1.15.0

The path is not a Python project.

Module

python

Introduced

1.15.0

Python diagnostics found no actionable issues.

Module

python

Introduced

1.15.0

A Python dependency source should be reviewed before install.

Module

python

Introduced

1.15.0

Python version constraints disagree across project files.

Module

python

Introduced

1.15.0

No local Python virtual environment marker was detected.

Module

python

Introduced

1.15.0

Queue connection configuration is missing.

Module

queue

Introduced

1.8.0

Queue connection configuration uses an unknown driver.

Module

queue

Introduced

1.8.0

Database queue configuration is missing database settings.

Module

queue

Introduced

1.8.0

Queue diagnostics found no actionable issues.

Module

queue

Introduced

1.8.0

A required queue environment key is missing.

Module

queue

Introduced

1.8.0

The sync queue driver is configured for production.

Module

queue

Introduced

1.8.0

Rails database config appears to contain a literal credential.

Module

ruby

Introduced

1.23.0

A Ruby application Gemfile is missing Gemfile.lock.

Module

ruby

Introduced

1.23.0

The path is not a Ruby or Rails project.

Module

ruby

Introduced

1.23.0

Rails encrypted credentials are present without a local master key marker.

Module

ruby

Introduced

1.23.0

Ruby diagnostics found no actionable issues.

Module

ruby

Introduced

1.23.0

A Ruby dependency source should be reviewed before install.

Module

ruby

Introduced

1.23.0

Ruby version declarations disagree across project files.

Module

ruby

Introduced

1.23.0

Cargo package does not declare an edition.

Module

rust

Introduced

1.17.0

A Rust dependency uses a Git source.

Module

rust

Introduced

1.17.0

A Rust application appears to be missing Cargo.lock.

Module

rust

Introduced

1.17.0

The path is not a Rust Cargo project.

Module

rust

Introduced

1.17.0

A Rust dependency uses a local path source.

Module

rust

Introduced

1.17.0

Rust diagnostics found no actionable issues.

Module

rust

Introduced

1.17.0

Rust release profile keeps debug-like settings.

Module

rust

Introduced

1.17.0

A Rust toolchain file is declared.

Module

rust

Introduced

1.17.0

A Cargo workspace member is missing Cargo.toml.

Module

rust

Introduced

1.17.0

A Compose service enables privileged mode.

Module

security

Introduced

1.4.0

A Compose service mounts the Docker socket.

Module

security

Introduced

1.4.0

.gitignore does not explicitly ignore .env files.

Module

security

Introduced

1.4.0

Security diagnostics found no actionable issues.

Module

security

Introduced

1.4.0

A Composer script may execute risky shell code.

Module

security

Introduced

1.4.0

A package.json script may execute risky shell code.

Module

security

Introduced

1.4.0

A likely secret appears in an example environment file.

Module

security

Introduced

1.4.0

A file contains a likely hard-coded secret pattern.

Module

security

Introduced

1.4.0

The Symfony environment file is missing.

Module

symfony

Introduced

1.22.0

The path is not a Symfony project.

Module

symfony

Introduced

1.22.0

Symfony debug mode is enabled for a production environment.

Module

symfony

Introduced

1.22.0

Symfony diagnostics found no actionable issues.

Module

symfony

Introduced

1.22.0

Symfony Flex recipe metadata appears to be missing expected config files.

Module

symfony

Introduced

1.22.0

A Symfony Composer script may execute risky shell code.

Module

symfony

Introduced

1.22.0

An expected Symfony runtime directory is missing.

Module

symfony

Introduced

1.22.0

APP_SECRET is missing, empty, or still uses a default placeholder.

Module

symfony

Introduced

1.22.0

A web entry file references a local asset that is missing.

Module

web

Introduced

1.21.0

A web project has a build script but no common build output entry file.

Module

web

Introduced

1.21.0

A web server config contains an insecure default that should be reviewed.

Module

web

Introduced

1.21.0

The path is not a generic web project.

Module

web

Introduced

1.21.0

Web port configuration disagrees across project files.

Module

web

Introduced

1.21.0

A public web config file appears to contain secret-like keys.

Module

web

Introduced

1.21.0

Generic web diagnostics found no actionable issues.

Module

web

Introduced

1.21.0