{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-c1f98576d00f3a7f", "name": "Insecure pattern 'exec_used' in extensions/subagents/index.test.ts:73", "shortDescription": {"text": "Insecure pattern 'exec_used' in extensions/subagents/index.test.ts:73"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23825"}, "properties": {"repository": "a1f/pi-dev", "repoUrl": "https://github.com/a1f/pi-dev", "branch": "main"}, "results": [{"ruleId": "scanner-c1f98576d00f3a7f", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in extensions/subagents/index.test.ts:73"}, "properties": {"repobilityId": "838db20fda1bb596", "scanner": "scanner-primary", "fingerprint": "c1f98576d00f3a7f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "extensions/subagents/index.test.ts"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "0cbddfbdf93f1195", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}]}]}