Rule CRYP001

Current calibration: action=watch · severity override: (none) · TP rate 47% / FP rate 36% · 115 total votes · last updated 2026-05-17 02:05

Findings in corpus: 982 critical: 0 high: 0 medium: 982 low: 0

Recent True-Positive votes

TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context
TP: [codex-heuristic-judge] HTTP URL outside dev/test context

Recent False-Positive votes

FP: [codex-heuristic-judge] Non-prod HTTP URL
FP: [codex-heuristic-judge] Non-prod HTTP URL
FP: [claude-auto-night] Non-production context HTTP URL
FP: [claude-auto-night] Non-production context HTTP URL
FP: [codex-heuristic-judge] Non-prod HTTP URL
FP: [codex-heuristic-judge] Non-prod HTTP URL
FP: [claude-auto-night] Non-production context HTTP URL
FP: [claude-auto-night] Non-production context HTTP URL

Sample findings

medium apps/python-sdk/firecrawl/v2/watcher_async.py:58 Crypto — plaintext HTTP for sensitive endpoint
medium terraform/aws-ecs/modules/mcp-gateway/ecs-services.tf:305 Crypto — plaintext HTTP for sensitive endpoint
medium src/mcp_memory_service/web/api/memories.py:7 Crypto — plaintext HTTP for sensitive endpoint
medium backend/alembic/versions/0082_add_bookmark_sources_batch2.py:318 Crypto — plaintext HTTP for sensitive endpoint
medium src/mcp_memory_service/utils/system_detection.py:7 Crypto — plaintext HTTP for sensitive endpoint
medium apps/api/src/lib/validateUrl.test.ts:6 Crypto — plaintext HTTP for sensitive endpoint
medium tests/e2e/launchd-node-boot-wrapper.test.ts:444 Crypto — plaintext HTTP for sensitive endpoint
medium tests/agent/test_model_metadata.py:579 Crypto — plaintext HTTP for sensitive endpoint
medium src/mcp_memory_service/web/api/analytics.py:7 Crypto — plaintext HTTP for sensitive endpoint
medium registry/core/nginx_service.py:409 Crypto — plaintext HTTP for sensitive endpoint

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.