src/lambdas/custodian_metrics_updater/processors/new_metrics_collector.py (10 lines):
	- line 135: # TODO: determine based on item size?
	- line 210: # TODO: support is_active
	- line 354: # TODO: maybe collect for all tenants
	- line 396: # TODO: how to determine whether to include tenant in reporting.
	- line 427: data=data,  # TODO: test whether it's ok to assign large objects to PynamoDB's MapAttribute
	- line 500: data=data,  # TODO: test whether it's ok to assign large objects to PynamoDB's MapAttribute
	- line 527: # TODO: in case these metrics are collected as of some past date the
	- line 628: # TODO: change this on Maestro side to allow multiple licenses
	- line 636: # TODO: just pass raw data to Maestro: they must format it
	- line 658: now = utc_datetime()  # TODO: allow to get from somewhere


src/services/reports.py (7 lines):
	- line 88: )  # TODO: maybe implement for timedelta step
	- line 224: # TODO: in case we need more business logic here, redesign this
	- line 295: # TODO: test how bad-performant is that..
	- line 453: # TODO: adjust the threshold and sync with shards snapshots
	- line 483: # TODO: cache for actual nearest key instead of given date in case
	- line 529: project=tenant.display_name_to_lower.lower(),  # TODO: maybe use lt attr
	- line 715: # TODO: we can possibly have values that exist in previous dict and


src/run.py (4 lines):
	- line 418: # TODO refactor, make runner not abstract and move policy
	- line 816: # TODO refactor
	- line 853: # TODO K8S request a short-lived token here from long-lived in case
	- line 1214: # TODO this exception can occur if, say, credentials are invalid.


src/services/event_processor_service.py (3 lines):
	- line 65: self.mappings_collector = {}  # TODO: fix
	- line 301: # TODO currently only AZURE events are expected. In case we want
	- line 435: # TODO EB source to list of rules is a temp solution I was able to


src/handlers/high_level_reports_handler.py (3 lines):
	- line 76: # TODO: implement this limit logic to send reports via s3
	- line 168: ),  # TODO: fix on maestro side. Not every report can have "from"
	- line 170: 'outdated_tenants': [],  # TODO: implement


src/services/report_convertors.py (2 lines):
	- line 139: # TODO: check and fix null version
	- line 140: # TODO: add mitre here


src/lambdas/custodian_license_updater/handler.py (2 lines):
	- line 83: )  # TODO cache?
	- line 162: # TODO maybe move this block to some service


src/services/health_check_service.py (2 lines):
	- line 557: # TODO check host and port
	- line 578: # TODO think how to check considering that for on-prem we make


src/handlers/ruleset_handler.py (2 lines):
	- line 281: # TODO probably remove
	- line 500: # TODO add changelog or metadata from release


cli/srecli/group/__init__.py (1 line):
	- line 159: if Path(__file__).parents[3].name == MODULAR_ADMIN:  # TODO check some other way


src/services/license_service.py (1 line):
	- line 332: TODO: used to retrieve metadata for customer. BUT:


src/lambdas/custodian_api_handler/handlers/metrics_status_handler.py (1 line):
	- line 62: # TODO api add job_service with corresponding methods


src/lambdas/custodian_api_handler/handlers/job_handler.py (1 line):
	- line 656: credentials_key = None  # TODO K8S validate whether long-lived token exists, validate whether it belongs to a cluster?


src/services/clients/jwt_management_client.py (1 line):
	- line 40: return 'PS256'  # TODO get some specific


src/services/clients/batch.py (1 line):
	- line 189: self._jobs[job_id] = job  # MOVE TODO think how to gc


src/handlers/details_handler.py (1 line):
	- line 145: # TODO _collection_response to threads?


src/handlers/license_manager_setting_handler.py (1 line):
	- line 233: # TODO check access ?


src/handlers/tenant_handler.py (1 line):
	- line 109: # TODO api implement get by account id


src/helpers/constants.py (1 line):
	- line 672: )  # TODO make PUT


src/helpers/lambda_response.py (1 line):
	- line 98: 'Accept-Version': __version__,  # TODO API think about header name


src/lambdas/custodian_metrics_updater/handler.py (1 line):
	- line 26: # TODO: fix ModularJobs for Mongo


src/models/metrics.py (1 line):
	- line 12: # TODO: optimize for mongo queries, make start and end Date objects instead of strings


src/helpers/__init__.py (1 line):
	- line 501: # TODO: maybe yield list indexes here, but they can be confused


src/validators/swagger_request_models.py (1 line):
	- line 173: # cloud_identifier: Optional[str]  # TODO API separate endpoint for this


src/onprem/api/cron_jobs.py (1 line):
	- line 46: # TODO: maybe rewrite to use celery or something


src/handlers/compliance_handler.py (1 line):
	- line 98: # TODO api implement for platform


src/services/clients/chronicle.py (1 line):
	- line 78: # TODO maybe rewrite because this logic is not ideal


src/services/coverage_service.py (1 line):
	- line 47: # TODO: allow to use Decimal if needed + validate each percent to be


src/services/rule_meta_service.py (1 line):
	- line 130: class RuleNamesResolver:  # TODO test


src/services/udm_generator.py (1 line):
	- line 461: # TODO these two convertors are kind of POC and can be improved or extended.


src/services/abs_lambda.py (1 line):
	- line 222: # TODO organize this collection somehow else


src/handlers/rule_handler.py (1 line):
	- line 52: # TODO split to get and list endpoints


src/handlers/digest_handler.py (1 line):
	- line 119: # TODO _collection_response to threads?


src/services/assemble_service.py (1 line):
	- line 26: # TODO +- duplicate in event_assembler_handler._build_common_envs


src/services/setting_service.py (1 line):
	- line 18: # TODO do not retrieve items from db before updating


src/lambdas/custodian_api_handler/handlers/health_check_handler.py (1 line):
	- line 78: # TODO add order and dependent checks. For example, in case


src/handlers/findings_handler.py (1 line):
	- line 156: # TODO _collection_response to threads?


src/helpers/reports.py (1 line):
	- line 7: # TODO: can be broken during sorting if there are two standards with the