← Back to scan
File as GitHub Issue repo: apache/arrow

Push this scan report to apache/arrow

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Bare except continues silently: Bare `except:` (or `except Exception

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… cpp/src/arrow/util/bpacking_simd_codege…:275
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… cpp/src/arrow/acero/hash_join_graphs.py:71
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… cpp/src/arrow/acero/hash_join_graphs.py:47
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… cpp/build-support/asan_symbolize.py:130
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… cpp/build-support/asan_symbolize.py:93
MED MINED109 [MINED109] Mutable default argument in `get_flight` (dict): `def get_flight(... = []/{}/s… python/examples/flight/client.py:89
MED MINED109 [MINED109] Mutable default argument in `push_data` (dict): `def push_data(... = []/{}/set… python/examples/flight/client.py:77
MED MINED109 [MINED109] Mutable default argument in `do_action` (dict): `def do_action(... = []/{}/set… python/examples/flight/client.py:66
MED MINED109 [MINED109] Mutable default argument in `list_flights` (dict): `def list_flights(... = []/… python/examples/flight/client.py:28
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… python/pyarrow/pandas_compat.py:284
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/lang/python.py:180
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/docker/core.py:278
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/docker/core.py:245
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/integration/runner.…:574
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/integration/runner.…:524
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/integration/runner.…:450
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/integration/runner.…:320
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/archery/archery/utils/lint.py:100
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… dev/merge_arrow_pr.py:135
MED SEC115 [SEC115] Decompression without size cap (zip/gzip bomb): Decompressing untrusted archives… python/pyarrow/util.py:293
MED SEC012 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation all… python/pyarrow/util.py:293
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… dev/archery/archery/integration/tester.…:270
MED SEC123 [SEC123] Production stack trace / debug output exposed: Debug mode left on in production … cpp/tools/parquet/parquet_dump_footer.cc:120
MED SEC134 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum… cpp/src/arrow/telemetry/telemetry_test.…:104
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … cpp/src/arrow/compute/function_benchmar…:94
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … cpp/src/arrow/acero/partition_util.h:65
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … .github/workflows/dev_pr/helpers.js:37
MED COMP001 [COMP001] High cognitive complexity: Function `print_unpack_k` has cognitive complexity 1… cpp/src/arrow/util/bpacking_scalar_code…:125
MED COMP001 [COMP001] High cognitive complexity: Function `organize_tests` has cognitive complexity 1… cpp/src/arrow/acero/hash_join_graphs.py:77
MED DKR003 Compose service `impala` image uses the latest tag compose.yaml:1891
MED MINED124 [MINED124] requirements.txt: `myst-parser[linkify]` has no version pin: Unpinned pip requ… docs/requirements.txt:9
MED MINED124 [MINED124] requirements.txt: `linuxdoc` has no version pin: Unpinned pip requirement mean… docs/requirements.txt:8
MED MINED124 [MINED124] requirements.txt: `ipython` has no version pin: Unpinned pip requirement means… docs/requirements.txt:7
MED MINED124 [MINED124] requirements.txt: `cython>3.1.1` has no version pin: Unpinned pip requirement … docs/requirements.txt:6
MED MINED124 [MINED124] requirements.txt: `breathe` has no version pin: Unpinned pip requirement means… docs/requirements.txt:5
MED MINED124 [MINED124] requirements.txt: `scikit-build-core` has no version pin: Unpinned pip require… python/requirements-build.txt:5
MED MINED124 [MINED124] requirements.txt: `build` has no version pin: Unpinned pip requirement means e… python/requirements-build.txt:1
MED MINED124 [MINED124] requirements.txt: `pytz` has no version pin: Unpinned pip requirement means ev… python/requirements-test.txt:7
MED MINED124 [MINED124] requirements.txt: `pytest-xdist` has no version pin: Unpinned pip requirement … python/requirements-test.txt:6
MED MINED124 [MINED124] requirements.txt: `pytest` has no version pin: Unpinned pip requirement means … python/requirements-test.txt:5
MED MINED124 [MINED124] requirements.txt: `pandas` has no version pin: Unpinned pip requirement means … python/requirements-test.txt:4
MED MINED124 [MINED124] requirements.txt: `packaging` has no version pin: Unpinned pip requirement mea… python/requirements-test.txt:3
MED MINED124 [MINED124] requirements.txt: `hypothesis` has no version pin: Unpinned pip requirement me… python/requirements-test.txt:2
MED MINED124 [MINED124] requirements.txt: `cffi` has no version pin: Unpinned pip requirement means ev… python/requirements-test.txt:1
MED MINED124 [MINED124] requirements.txt: `pandas` has no version pin: Unpinned pip requirement means … python/requirements-wheel-test.txt:21
MED MINED124 [MINED124] requirements.txt: `pytz` has no version pin: Unpinned pip requirement means ev… python/requirements-wheel-test.txt:6
MED MINED124 [MINED124] requirements.txt: `pytest` has no version pin: Unpinned pip requirement means … python/requirements-wheel-test.txt:5
MED MINED124 [MINED124] requirements.txt: `packaging` has no version pin: Unpinned pip requirement mea… python/requirements-wheel-test.txt:4
MED MINED124 [MINED124] requirements.txt: `hypothesis` has no version pin: Unpinned pip requirement me… python/requirements-wheel-test.txt:3
MED MINED124 [MINED124] requirements.txt: `cython` has no version pin: Unpinned pip requirement means … python/requirements-wheel-test.txt:2
MED MINED124 [MINED124] requirements.txt: `cffi` has no version pin: Unpinned pip requirement means ev… python/requirements-wheel-test.txt:1
MED MINED124 [MINED124] requirements.txt: `wheel` has no version pin: Unpinned pip requirement means e… python/requirements-wheel-build.txt:8
MED MINED124 [MINED124] requirements.txt: `setuptools_scm` has no version pin: Unpinned pip requiremen… python/requirements-wheel-build.txt:7
MED MINED124 [MINED124] requirements.txt: `scikit-build-core` has no version pin: Unpinned pip require… python/requirements-wheel-build.txt:6
MED MINED124 [MINED124] requirements.txt: `build` has no version pin: Unpinned pip requirement means e… python/requirements-wheel-build.txt:1
MED DKR002 Compose service `postgres` image has no explicit tag compose.yaml:1883
MED DKC015 Database service has no healthcheck compose.yaml:1883
MED DKR001 Docker final stage has no non-root USER python/examples/minimal_build/Dockerfil…:18
MED DKR001 Docker final stage has no non-root USER python/examples/minimal_build/Dockerfil…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-r…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-r…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-r…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-r…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-r…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow-a…:18
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/y…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/y…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/y…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/y…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/y…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/tasks/linux-packages/apache-arrow/a…:19
MED DKR001 Docker final stage has no non-root USER dev/release/binary/Dockerfile:18
MED DKC005 Compose service adds dangerous Linux capabilities compose.yaml:621
MED SEC005 [SEC005] Command Injection Risk: Unsafe shell execution or eval of user input. cpp/src/arrow/compute/kernels/scalar_ca…:130
LOW DKC010 Compose service lacks no-new-privileges hardening python/examples/minimal_build/compose.y…:46
LOW DKC010 Compose service lacks no-new-privileges hardening python/examples/minimal_build/compose.y…:38
LOW DKC010 Compose service lacks no-new-privileges hardening python/examples/minimal_build/compose.y…:30
LOW DKC010 Compose service lacks no-new-privileges hardening python/examples/minimal_build/compose.y…:20
LOW DKC010 Compose service lacks no-new-privileges hardening cpp/examples/tutorial_examples/compose.…:20
LOW DKC010 Compose service lacks no-new-privileges hardening cpp/examples/minimal_build/compose.yaml:40
LOW DKC010 Compose service lacks no-new-privileges hardening cpp/examples/minimal_build/compose.yaml:30
LOW DKC010 Compose service lacks no-new-privileges hardening cpp/examples/minimal_build/compose.yaml:20
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:2036
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:2007
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1956
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1915
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1891
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1839
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1804
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1771
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1740
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1716
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1687
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1658
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1625
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1577
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1551
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1520
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1461
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1427
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1414
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1403
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1396
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1379
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1363
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1346
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1326
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1303
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1283
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1247
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1225
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1203
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1162
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1137
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1103
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1085
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1061
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1039
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:1017
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:965
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:933
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:903
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:877
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:847
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:818
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:790
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:757
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:730
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:704
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:670
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:621
LOW DKC010 Compose service lacks no-new-privileges hardening compose.yaml:567
LOW DKC006 Compose service does not declare a runtime user python/examples/minimal_build/compose.y…:46
LOW DKC006 Compose service does not declare a runtime user python/examples/minimal_build/compose.y…:38
LOW DKC006 Compose service does not declare a runtime user python/examples/minimal_build/compose.y…:30
LOW DKC006 Compose service does not declare a runtime user python/examples/minimal_build/compose.y…:20
LOW DKC006 Compose service does not declare a runtime user cpp/examples/tutorial_examples/compose.…:20
LOW DKC006 Compose service does not declare a runtime user cpp/examples/minimal_build/compose.yaml:40
LOW DKC006 Compose service does not declare a runtime user cpp/examples/minimal_build/compose.yaml:30
LOW DKC006 Compose service does not declare a runtime user cpp/examples/minimal_build/compose.yaml:20
LOW DKC006 Compose service does not declare a runtime user compose.yaml:2036
LOW DKC006 Compose service does not declare a runtime user compose.yaml:2007
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1956
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1915
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1891
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1839
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1804
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1771
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1740
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1716
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1687
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1658
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1625
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1577
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1551
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1520
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1461
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1427
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1414
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1403
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1396
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1379
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1363
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1346
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1326
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1303
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1283
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1247
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1225
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1203
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1162
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1137
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1103
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1085
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1061
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1039
LOW DKC006 Compose service does not declare a runtime user compose.yaml:1017
LOW DKC006 Compose service does not declare a runtime user compose.yaml:965
LOW DKC006 Compose service does not declare a runtime user compose.yaml:933
LOW DKC006 Compose service does not declare a runtime user compose.yaml:903
LOW DKC006 Compose service does not declare a runtime user compose.yaml:877
LOW DKC006 Compose service does not declare a runtime user compose.yaml:847
LOW DKC006 Compose service does not declare a runtime user compose.yaml:818
LOW DKC006 Compose service does not declare a runtime user compose.yaml:790
LOW DKC006 Compose service does not declare a runtime user compose.yaml:757
LOW DKC006 Compose service does not declare a runtime user compose.yaml:730
LOW DKC006 Compose service does not declare a runtime user compose.yaml:704
LOW DKC006 Compose service does not declare a runtime user compose.yaml:670
LOW DKC006 Compose service does not declare a runtime user compose.yaml:621
LOW DKC006 Compose service does not declare a runtime user compose.yaml:567
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `apache/arrow`

**Score: 66/100 (B+)**  ·  493 findings  ·  scanned 2026-06-05 21:28 UTC  ·  542,740 LOC

| Severity | Count |
|---|---|
| CRITICAL | 44 |
| HIGH | 126 |
| MEDIUM | 84 |
| LOW | 169 |

📊 [Full filterable report](https://repobility.com/scan/22ac6ece-0010-4fbd-8208-25335a665c2d/)  ·  ![scorecard](https://repobility.com/scan/22ac6ece-0010-4fbd-8208-25335a665c2d/report.png?v=1780694928-s2)

### Top findings

1. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `cpp/src/arrow/util/bpacking_simd_codegen.py:275` · ✓ Repobility
2. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `cpp/src/arrow/acero/hash_join_graphs.py:71` · ✓ Repobility
3. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `cpp/src/arrow/acero/hash_join_graphs.py:47` · ✓ Repobility
4. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `cpp/build-support/asan_symbolize.py:130` · ✓ Repobility
5. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `cpp/build-support/asan_symbolize.py:93` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/22ac6ece-0010-4fbd-8208-25335a665c2d/_
Already filed
'apache' is on the known-megaproject org list. These projects use auto-triage bots and established security disclosure channels. Unsolicited automated issues from Repobility would be perceived as AI-generated spam. For security findings, follow the project's SECURITY.md policy. For non-security findings, open a focused PR or community discussion instead.
Megaproject â high spam risk
Could not determine 'apache/arrow' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.