zed-industries/zed

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	100.0	0.25	25.00
`testing_score`	22.0	0.20	4.40
`documentation_score`	91.0	0.15	13.65
`practices_score`	76.0	0.15	11.40
`code_quality`	44.0	0.10	4.40
Overall		1.00	67.9

low Security checks quality Quality conf 1.00 ✓ Repobility [MINED013] Password In Url: https://user:password@host — leaks creds via logs, referrer, error messages.

Review and fix per the pattern semantics. See CWE-200 / A07:2021 for context.

crates/client/src/proxy/http_proxy.rs:181

critical Security checks cicd CI/CD security conf 0.96 Compose service contains a literal secret environment value

Rotate the value if real. Move it to Docker Compose secrets, a platform secret manager, or an uncommitted environment file.

compose.yml:1 CI/CD securitycontainers

low Security checks cicd CI/CD security conf 0.35 ✓ Repobility 25 occurrences Workflow references repository secrets in a pull_request workflow

Fork pull_request runs do not receive normal repository secrets on GitHub Actions. Review this as a reliability/intent signal, not as direct fork-secret exfiltration. Raise severity only for pull_request_target or another trusted-context path that runs untrusted PR code with secrets.

lines 20, 21, 32, 59, 60, 71, 98, 99, +17 more

.github/workflows/run_bundling.yml:20, 21, 32, 59, 60, 71, 98, 99, +17 more (25 hits)

CI/CD securityworkflow secretsGitHub Actions

critical System graph security Secrets conf 1.00 Possible secret in crates/client/src/proxy/http_proxy.rs

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

crates/client/src/proxy/http_proxy.rs:189

critical System graph security Secrets conf 1.00 Possible secret in crates/client/src/proxy/socks_proxy.rs

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

crates/client/src/proxy/socks_proxy.rs:206

critical System graph security Secrets conf 1.00 Possible secret in crates/collab/.env.toml

Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager.

crates/collab/.env.toml:6

critical System graph security Secrets conf 1.00 Possible secret in crates/language_models/src/provider/deepseek.rs

Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager.

crates/language_models/src/provider/deepseek.rs:649

critical System graph security Secrets conf 1.00 Possible secret in crates/language_models/src/provider/open_ai.rs

Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager.

crates/language_models/src/provider/open_ai.rs:566

critical System graph security Secrets conf 1.00 Possible secret in crates/language_models/src/provider/opencode.rs

Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager.

crates/language_models/src/provider/opencode.rs:755

critical System graph security Secrets conf 1.00 2 occurrences Possible secret in crates/repl/src/outputs.rs

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 1190, 1203

crates/repl/src/outputs.rs:1190, 1203 (2 hits)

high Security checks software dependencies conf 0.90 ✓ Repobility [MINED118] Dockerfile FROM `rust:1.95.0` not pinned by digest: `FROM rust:1.95.0` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM rust:1.95.0@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

crates/eval_cli/Dockerfile:9

high Security checks software dependencies conf 0.90 ✓ Repobility 4 occurrences [MINED126] Workflow container/services image `postgres:15` unpinned: `container/services image: postgres:15` without `@sha256:...` pulls a mutable tag at workflow-run time. Treat workflow container references with the same supply-chain discipline as Dockerfile FROM lines.

Replace with `postgres:15@sha256:<digest>`. Re-pin via Dependabot Docker scope.

4 files, 4 locations

.github/workflows/deploy_collab.yml:76

.github/workflows/release.yml:103

.github/workflows/release_nightly.yml:86

.github/workflows/run_tests.yml:402

high Security checks software dependencies conf 0.90 ✓ Repobility [MINED134] Binary file `crates/zed/resources/windows/bin/x64/OpenConsole.exe` committed in source repo: `crates/zed/resources/windows/bin/x64/OpenConsole.exe` is a .exe binary (1,145,344 bytes) committed to a repo that otherwise has 1865 source files. Trojan binaries inside otherwise-normal source repos are a known supply-chain attack: a compromised dependency or PR slips in a binary that gets executed by build scripts.

Audit the binary's provenance. If it's vendored library code, document it in a VENDORED.md. If it's a build artifact, add the extension to .gitignore and rebuild from source.

crates/zed/resources/windows/bin/x64/OpenConsole.exe:1

high Security checks security path traversal conf 0.80 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.

Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads.

crates/gpui_linux/src/linux/x11/xim_handler.rs:37

high Security checks software Resource exhaustion conf 1.00 [SEC035] Unbounded Resource Allocation — DoS risk: Allocating resources (buffers, recursion stack, large ranges) based on user input without an upper bound. Attackers send `size=10000000` to exhaust memory, or trigger expensive computation. CWE-770/400. Examples: CVE-2023-44487 (HTTP/2 Rapid Reset), countless YAML/XML billion-laughs variants.

Cap user-controlled sizes BEFORE allocation: size = min(int(request.args.get('n', 100)), MAX_SIZE) Set framework-level limits: Flask: app.config['MAX_CONTENT_LENGTH'] = 10 * 1024 * 1024 FastAPI: use middleware to enforce request size Django: DATA_UPLOAD_MAX_MEMORY_SIZE in settings.py …

crates/http_client/src/async_body.rs:68

high Security checks cicd CI/CD security conf 0.84 Database service publishes a host port

Use `expose` for service-to-service access, bind to 127.0.0.1 for local-only access, or protect the port with firewall rules.

compose.yml:1 CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.92 Dockerfile copies the entire context without .dockerignore

Create .dockerignore before using broad context copies, or copy only the required files and directories.

crates/eval_cli/Dockerfile:39 CI/CD securitycontainers

medium Security checks cicd CI/CD security conf 0.90 ✓ Repobility 8 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `digitalocean/action-doctl` pinned to mutable ref `@v2`: `uses: digitalocean/action-doctl@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-ch…

2 files, 8 locations

.github/workflows/deploy_collab.yml:90, 120 (4 hits)

.github/workflows/run_tests.yml:797, 802 (4 hits)

CI/CD securitySupply chainGitHub Actions

high Security checks cicd CI/CD security conf 0.90 ✓ Repobility 2 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `zed-industries/zed/.github/workflows/deploy_docs.yml` pinned to mutable ref `@main`: `uses: zed-industries/zed/.github/workflows/deploy_docs.yml@main` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files com…

2 files, 2 locations

.github/workflows/after_release.yml:44

.github/workflows/deploy_nightly_docs.yml:13

CI/CD securitySupply chainGitHub Actions

high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch

zed-industries/zed/.github/workflows/deploy_docs.yml@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.

.github/workflows/after_release.yml:44 CI/CD securitySupply chainGithub actions

high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch

zed-industries/zed/.github/workflows/deploy_docs.yml@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.

.github/workflows/deploy_nightly_docs.yml:13 CI/CD securitySupply chainGithub actions

high System graph security security conf 1.00 Insecure pattern 'eval_used' in crates/agent/src/tools/evals.rs:27

Found a known-risky pattern (eval_used). Review and replace if possible.

crates/agent/src/tools/evals.rs:27 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in crates/agent_ui/src/inline_assistant.rs:2058

Found a known-risky pattern (eval_used). Review and replace if possible.

crates/agent_ui/src/inline_assistant.rs:2058 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in crates/gpui_macos/src/platform.rs:316

Found a known-risky pattern (eval_used). Review and replace if possible.

crates/gpui_macos/src/platform.rs:316 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in crates/project/src/lsp_store.rs:14140

Found a known-risky pattern (eval_used). Review and replace if possible.

crates/project/src/lsp_store.rs:14140 Eval used

medium Security checks quality Quality Average file size is 751 lines (recommend <300)

Refactor large files by extracting related functions into separate modules. Target files with 300+ lines first. Use the Single Responsibility Principle — each module should have one clear purpose.

low Security checks quality Error handling conf 0.55 ✓ Repobility Broad exception handler needs review

This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.

script/github-track-duplicate-bot-effectiveness.py:497 Error handlingquality

low Security checks quality Error handling conf 0.55 ✓ Repobility Broad exception handler needs review

This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.

script/github-assign-contributor-issue.py:334 Error handlingquality

medium Security checks cicd CI/CD security conf 0.84 Database data bind mount is inside the Docker build context

Prefer a named volume or a host path outside the build context. If a repo-local path is required, add it to .dockerignore and .gitignore and verify backups separately.

compose.yml:1 CI/CD securitycontainers

medium Security checks cicd CI/CD security conf 0.90 Docker build context has no .dockerignore

Add .dockerignore with at least .git, .env, private keys, dependency folders, build outputs, and local databases.

.dockerignore CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.82 Docker final stage has no non-root USER

Add a non-root USER in the final runtime stage after files and permissions are prepared.

ci/Dockerfile.namespace:4 CI/CD securitycontainers

high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell

Publish a package-manager install path or add checksum/signature verification before execution. For docs, show the inspect-then-run flow and pin the downloaded artifact version.

.github/workflows/background_agent_mvp.yml:47

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — docs/theme/[email protected]:1

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — docs/theme/plugins.js:165

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph hardware Security conf 1.00 Dockerfile runs as root: crates/eval_cli/Dockerfile

No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.

Container

medium System graph cicd CI/CD security conf 1.00 3 occurrences GitHub Actions workflow grants broad write permissions

CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.

3 files, 3 locations

.github/workflows/background_agent_mvp.yml

.github/workflows/docs_suggestions.yml

.github/workflows/extension_auto_bump.yml

CI/CD securitySupply chainGithub actions

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/flatpak/convert-release-notes.py:58

`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-assign-contributor-issue.py:75

`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-check-new-issue-for-duplicates.py:101

`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-clean-issue-types.py:49

`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-community-pr-board.py:142

`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-find-top-duplicated-bugs.py:112

`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-label-issues-to-triage.py:48

`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/github-track-duplicate-bot-effectiveness.py:152

`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — script/update_top_ranking_issues/main.py:107

`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.

runtime safetyRobustness

medium System graph network Security conf 1.00 Privileged port 16 in use

Port 16 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.

.github/workflows/bump_collab_staging.yml Ports

medium System graph quality Tests conf 1.00 Very low test-to-source ratio

133 test file(s) for 1718 source file(s) (ratio 0.08). Consider adding integration or unit tests for critical paths.

Coverage

high Security checks cicd CI/CD security conf 0.56 Compose service does not declare a runtime user

Set a non-root `user:` in Compose or ensure the final image stage has a non-root USER directive.

compose.yml:13 CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.62 Compose service lacks no-new-privileges hardening

Add `security_opt: ["no-new-privileges:true"]` unless the service has a documented need for privilege escalation.

compose.yml:13 CI/CD securitycontainers

low Security checks cicd CI/CD security conf 0.72 Database service has no healthcheck

Add a database-native healthcheck such as pg_isready, mysqladmin ping, redis-cli ping, or the vendor's readiness command.

compose.yml:1 CI/CD securitycontainers

low Security checks cicd CI/CD security conf 0.72 Dockerfile installs recommended OS packages

Add `--no-install-recommends` and explicitly list only packages the image needs.

ci/Dockerfile.namespace:9 CI/CD securitycontainers

low Security checks cicd CI/CD security conf 0.74 Dockerfile leaves apt package indexes in the image layer

End the apt install layer with `rm -rf /var/lib/apt/lists/*`.

ci/Dockerfile.namespace:9 CI/CD securitycontainers

low Security checks quality Quality conf 0.60 30 occurrences Duplicated implementation block across source files

Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.

12 files, 15 locations

crates/agent/src/tools/delete_path_tool.rs:112, 221 (2 hits)

crates/agent/src/tools/rename_tool.rs:43, 84 (2 hits)

crates/dap_adapters/src/javascript.rs:183, 202 (2 hits)

crates/agent/src/thread_store.rs:124

crates/agent/src/tools/create_directory_tool.rs:139

crates/agent/src/tools/evals/write_file.rs:100

crates/agent/src/tools/get_code_actions_tool.rs:41

crates/agent/src/tools/go_to_definition_tool.rs:37

duplicationquality

low Security checks quality Quality conf 0.68 Multiple AI-agent scaffold marker files are present

Keep one current agent instruction file if it helps contributors, remove stale progress/completion markers, and make sure the README, tests, and CI describe the real supported behavior.

AGENTS.md:1

high Security checks quality Quality conf 0.62 Source file name looks like an AI patch artifact

Rename it to the domain concept it implements or merge it into the existing module it was meant to change.

crates/auto_update/src/auto_update.rs:1

low System graph quality Maintenance conf 1.00 266 TODO/FIXME markers

High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.

low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: rust:1.95.0

Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.

crates/eval_cli/Dockerfile:9 containersPinned dependencies

low System graph software Dead code candidate conf 1.00 File has no detected symbols: script/danger/dangerfile.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

low System graph software Dead code conf 1.00 Possibly dead Python function: install

No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.

crates/eval_cli/zed_eval/agent.py:103

low System graph software Dead code conf 1.00 Possibly dead Python function: is_untriaged

No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.

script/github-label-issues-to-triage.py:63

low System graph software Dead code conf 1.00 Possibly dead Python function: matches

No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.

script/github-check-new-issue-for-duplicates.py:409

low System graph software Dead code conf 1.00 Possibly dead Python function: populate_context_post_run

No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.

crates/eval_cli/zed_eval/agent.py:348

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — docs/theme/[email protected]:1

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — docs/theme/plugins.js:25

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — script/cargo-timing-info.js:101

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph quality Complexity conf 1.00 Very large file: crates/acp_thread/src/acp_thread.rs (6106 lines)