← Back to scan
File as GitHub Issue repo: daytonaio/daytona

Push this scan report to daytonaio/daytona

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Bare except continues silently: Bare `except:` (or `except Exception

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_utils/erro…:205
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/handle/asyn…:247
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/handle/pty_…:274
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/handle/pty_…:244
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/sand…:417
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/dayt…:215
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/dayt…:221
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/file…:529
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/file…:961
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_async/file…:1171
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/sandb…:432
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/dayto…:199
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/dayto…:205
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/files…:482
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/files…:993
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/src/daytona/_sync/files…:920
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/scripts/chart_data_extr…:511
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… libs/sdk-python/scripts/chart_data_extr…:313
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… apps/daemon/pkg/toolbox/process/coderun…:514
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… apps/daemon/pkg/toolbox/process/coderun…:317
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… apps/daemon/pkg/toolbox/process/interpr…:184
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… apps/daemon/pkg/toolbox/process/interpr…:165
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… apps/daemon/pkg/toolbox/process/interpr…:38
MED SEC123 [SEC123] Production stack trace / debug output exposed: Debug mode left on in production … guides/python/langchain/data-analysis/a…:54
MED SEC046 [SEC046] Client-side open redirect — window.location = server-supplied URL: Assigning win… apps/docs/src/components/menu/LocaleSel…:40
MED SEC041 [SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blan… apps/dashboard/src/pages/Dashboard.tsx:39
MED SEC041 [SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blan… apps/dashboard/src/hooks/useDocsSearchC…:98
MED SEC041 [SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blan… apps/dashboard/src/components/sandboxes…:172
MED SEC014 [SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing ma… apps/daemon/pkg/git/clone.go:134
MED SEC091 [SEC091] Go: net/http server without timeouts: HTTP server without ReadHeaderTimeout/Read… apps/proxy/pkg/proxy/proxy.go:238
MED SEC091 [SEC091] Go: net/http server without timeouts: HTTP server without ReadHeaderTimeout/Read… apps/daemon/pkg/terminal/server.go:42
MED SEC091 [SEC091] Go: net/http server without timeouts: HTTP server without ReadHeaderTimeout/Read… apps/cli/auth/auth.go:31
MED SEC134 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum… apps/dashboard/src/components/ui/storie…:38
MED SEC134 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum… apps/api/src/config/dto/configuration.d…:152
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … apps/daemon/pkg/toolbox/process/interpr…:127
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … apps/api/src/docker-registry/services/e…:48
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … apps/api/src/common/utils/docker-image.…:153
MED COMP001 [COMP001] High cognitive complexity: Function `print_chart` has cognitive complexity 19 (… examples/python/charts/_async/main.py:116
MED COMP001 [COMP001] High cognitive complexity: Function `run` has cognitive complexity 16 (SonarSou… apps/daemon/pkg/toolbox/process/interpr…:169
MED COMP001 [COMP001] High cognitive complexity: Function `execute_code` has cognitive complexity 22 … apps/daemon/pkg/toolbox/process/interpr…:105
MED DKR003 Compose service `minio` image uses the latest tag docker/docker-compose.yaml:260
MED DKR003 Compose service `redis` image uses the latest tag docker/docker-compose.yaml:210
MED DKR003 Compose service `minio` image uses the latest tag .devcontainer/docker-compose.yaml:75
MED DKR003 Compose service `redis` image uses the latest tag .devcontainer/docker-compose.yaml:40
MED AUC001 [AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks… —
MED DKR002 Compose service `maildev` image has no explicit tag docker/docker-compose.yaml:253
MED DKR002 Compose service `ssh-gateway` image has no explicit tag docker/docker-compose.yaml:153
MED DKR002 Compose service `runner` image has no explicit tag docker/docker-compose.yaml:128
MED DKR002 Compose service `proxy` image has no explicit tag docker/docker-compose.yaml:106
MED DKR002 Compose service `api` image has no explicit tag docker/docker-compose.yaml:2
MED DKR002 Compose service `maildev` image has no explicit tag .devcontainer/docker-compose.yaml:72
MED DKC015 Database service has no healthcheck docker/docker-compose.yaml:180
MED DKC015 Database service has no healthcheck .devcontainer/docker-compose.yaml:18
MED DKR009 Dockerfile separates apt update from install .devcontainer/Dockerfile:13
MED DKR009 Dockerfile separates apt update from install .devcontainer/Dockerfile:6
MED DKR001 Docker final stage has no non-root USER hack/computer-use/Dockerfile:1
MED DKR001 Docker final stage has no non-root USER guides/typescript/agentkit-inngest/codi…:1
MED DKR001 Docker final stage has no non-root USER guides/python/claude/claude-managed-age…:6
MED DKR001 Docker final stage has no non-root USER guides/python/claude/claude-managed-age…:1
MED DKR001 Docker final stage has no non-root USER apps/ssh-gateway/Dockerfile:39
MED DKR001 Docker final stage has no non-root USER apps/snapshot-manager/Dockerfile:39
MED DKR001 Docker final stage has no non-root USER apps/runner/Dockerfile:58
MED DKR001 Docker final stage has no non-root USER apps/proxy/Dockerfile:43
MED DKR001 Docker final stage has no non-root USER apps/otel-collector/Dockerfile:44
MED DKR001 Docker final stage has no non-root USER apps/docs/Dockerfile:53
MED DKR001 Docker final stage has no non-root USER apps/dashboard/Dockerfile:30
MED DKR001 Docker final stage has no non-root USER apps/api/Dockerfile:42
MED DKR001 Docker final stage has no non-root USER .devcontainer/Dockerfile:1
MED AIC001 Parallel implementation file sits beside a canonical file libs/billing-api-client/src/models/orga…:1
MED WEB003 Public web service has no security.txt .well-known/security.txt
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore guides/typescript/agentkit-inngest/codi…:8
MED DKR004 Docker build secret exposed through ARG apps/docs/Dockerfile:41
MED DKR004 Docker build secret exposed through ARG apps/docs/Dockerfile:29
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:186
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:183
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:180
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:177
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:174
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:171
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:168
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:165
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:162
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:159
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:156
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:153
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:150
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/interceptors/metrics.inter…:147
MED JRN003 Frontend API reference is not matched by discovered backend routes apps/api/src/docker-registry/services/d…:466
MED AUC002 [AUC002] Low visible authorization coverage in route inventory: Only 31.2% of discovered … —
MED DKC013 Database service has no persistent data volume docker/docker-compose.yaml:210
MED DKC013 Database service has no persistent data volume .devcontainer/docker-compose.yaml:40
MED WEB015 Public web app has no Content Security Policy index.html
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/sandbox/controllers/runner…:74
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/sandbox/controllers/snapsh…:164
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/sandbox-telemetry/controll…:35
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/audit/controllers/audit.co…:29
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/common/decorators/throttle…:24
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/webhook/controllers/webhoo…:33
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/api-key/api-key.controller…:153
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/api-key/api-key.controller…:137
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/api-key/api-key.controller…:37
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … apps/api/src/user/user.controller.ts:195
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/runner.c…:100
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/runner.c…:49
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/organiza…:191
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/organiza…:138
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/organiza…:98
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/organiza…:44
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/audit.co…:28
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/docker-r…:29
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/snapshot…:50
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… apps/api/src/admin/controllers/snapshot…:30
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. apps/cli/cmd/auth/login.go:177
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. apps/cli/auth/auth.go:50
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. apps/cli/apiclient/api_client.go:84
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… apps/api/src/sandbox/entities/build-inf…:15
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/process/execute…:6
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/lsp/typescript_…:21
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/git/push.go:12
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/fs/set_file_per…:27
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/fs/move_file.go:29
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/fs/list_files.go:14
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/fs/get_file_inf…:18
LOW AIC003 Duplicated implementation block across source files apps/daemon/pkg/toolbox/fs/download_fil…:22
LOW AIC003 Duplicated implementation block across source files apps/cli/views/volume/list.go:2
LOW AIC003 Duplicated implementation block across source files apps/cli/views/volume/info.go:29
LOW AIC003 Duplicated implementation block across source files apps/cli/views/snapshot/info.go:34
LOW AIC003 Duplicated implementation block across source files apps/cli/cmd/snapshot/push.go:108
LOW AIC003 Duplicated implementation block across source files apps/cli/cmd/organization/use.go:17
LOW AIC003 Duplicated implementation block across source files apps/cli/cmd/common/ssh_windows.go:1
LOW AIC003 Duplicated implementation block across source files apps/api/src/usage/entities/sandbox-usa…:21
LOW AIC003 Duplicated implementation block across source files apps/api/src/region/dto/update-region.d…:4
LOW AIC003 Duplicated implementation block across source files apps/api/src/organization/dto/update-or…:7
LOW AIC003 Duplicated implementation block across source files apps/api/src/organization/dto/region-qu…:21
LOW AIC003 Duplicated implementation block across source files apps/api/src/organization/controllers/o…:383
LOW AIC003 Duplicated implementation block across source files apps/api/src/docker-registry/providers/…:9
LOW AIC003 Duplicated implementation block across source files apps/api/src/audit/controllers/audit.co…:44
LOW AIC003 Duplicated implementation block across source files apps/api/src/api-key/dto/api-key-respon…:14
LOW DKR010 Dockerfile leaves apt package indexes in the image layer .devcontainer/Dockerfile:17
LOW WEB002 Public web app has no sitemap sitemap.xml
LOW DKC015 Database service has no healthcheck docker/docker-compose.yaml:260
LOW DKC015 Database service has no healthcheck docker/docker-compose.yaml:210
LOW DKC015 Database service has no healthcheck .devcontainer/docker-compose.yaml:75
LOW DKC015 Database service has no healthcheck .devcontainer/docker-compose.yaml:40
LOW DKR011 Dockerfile installs recommended OS packages images/sandbox-slim/Dockerfile:4
LOW DKR011 Dockerfile installs recommended OS packages images/sandbox/Dockerfile:4
LOW DKR011 Dockerfile installs recommended OS packages hack/computer-use/Dockerfile:11
LOW DKR008 .dockerignore misses sensitive defaults .dockerignore
LOW DKC016 App service does not wait for database health docker/docker-compose.yaml:191
LOW DKC016 App service does not wait for database health docker/docker-compose.yaml:2
LOW WEB008 Public docs site has no llms.txt llms.txt
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:274
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:253
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:235
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:215
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:191
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:167
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:153
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:128
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:106
LOW DKC010 Compose service lacks no-new-privileges hardening docker/docker-compose.yaml:2
LOW DKC010 Compose service lacks no-new-privileges hardening .devcontainer/docker-compose.yaml:3
LOW AIC002 Source file name looks like an AI patch artifact guides/typescript/flue/.flue/agents/bug…:1
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:274
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:253
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:235
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:215
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:167
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:153
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:128
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:106
LOW DKC006 Compose service does not declare a runtime user docker/docker-compose.yaml:2
LOW DKC006 Compose service does not declare a runtime user .devcontainer/docker-compose.yaml:3
LOW WEB011 Public web app has no humans.txt humans.txt
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. guides/typescript/openclaw/src/index.ts:133
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. guides/typescript/openai/codex-sdk/agen…:91
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. guides/typescript/anthropic/multi-agent…:155
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. guides/python/recursive-language-models…:13
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. guides/python/recursive-language-models…:21
INFO MINED062 [MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model. guides/python/recursive-language-models…:10
INFO MINED069 [MINED069] Debug True Prod: Django/Flask DEBUG=True or app.debug=True in non-test files. guides/python/langchain/data-analysis/a…:54
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… guides/python/recursive-language-models…:28
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… guides/python/claude/claude-managed-age…:37
INFO MINED063 [MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) — file can be replaced/de… examples/go/fromimage/main.go:146
INFO MINED058 [MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escapi… apps/dashboard/src/hooks/useDocsSearchC…:118
INFO MINED058 [MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escapi… apps/dashboard/src/components/ui/chart.…:75
INFO MINED056 [MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re… apps/dashboard/src/components/Compariso…:44
INFO MINED056 [MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re… apps/dashboard/src/components/CodeBlock…:51
INFO MINED056 [MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re… apps/dashboard/src/components/BillingIn…:103
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… apps/cli/cmd/common/organization.go:20
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… apps/cli/cmd/auth/login.go:27
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… apps/cli/apiclient/api_client.go:119
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… apps/api/src/sandbox/dto/create-build-i…:13
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… apps/api/src/sandbox/dto/build-info.dto…:12
INFO MINED044 [MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger … apps/api/src/tracing.ts:74
INFO MINED044 [MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger … apps/api/src/generate-openapi.ts:59
INFO MINED044 [MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger … apps/api/src/common/providers/openfeatu…:37
INFO MINED054 [MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely. apps/docs/src/components/DocSearchSidep…:102
INFO MINED054 [MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely. apps/dashboard/src/components/SandboxTa…:21
INFO MINED054 [MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely. apps/api/src/common/guards/authenticate…:32
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `daytonaio/daytona`

**Score: 65/100 (B)**  ·  361 findings  ·  scanned 2026-06-05 08:09 UTC  ·  604,294 LOC

| Severity | Count |
|---|---|
| CRITICAL | 20 |
| HIGH | 104 |
| MEDIUM | 112 |
| LOW | 62 |

📊 [Full filterable report](https://repobility.com/scan/91c78baa-9673-483f-a92b-06479adf8c58/)  ·  ![scorecard](https://repobility.com/scan/91c78baa-9673-483f-a92b-06479adf8c58/report.png?v=1780646957-s2)

### Top findings

1. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `libs/sdk-python/src/daytona/_utils/errors.py:205` · ✓ Repobility
2. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `libs/sdk-python/src/daytona/handle/async_pty_handle.py:247` · ✓ Repobility
3. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `libs/sdk-python/src/daytona/handle/pty_handle.py:274` · ✓ Repobility
4. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `libs/sdk-python/src/daytona/handle/pty_handle.py:244` · ✓ Repobility
5. **MEDIUM** `MINED111` — Bare except continues silently: Bare `except:` (or `except Exception
   `libs/sdk-python/src/daytona/_async/sandbox.py:417` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/91c78baa-9673-483f-a92b-06479adf8c58/_
Already filed
This repo publishes a SECURITY.md policy and the scan contains 33 Critical/High security finding(s). Public issue filing would violate coordinated disclosure. Submit privately via the project's security reporting channel.
Megaproject â high spam risk
Could not determine 'daytonaio/daytona' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.