{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-e52420dae1ed9a21", "name": "Possibly dead Python function: set_multiline_output", "shortDescription": {"text": "Possibly dead Python function: set_multiline_output"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38ebb963be446856", "name": "Possibly dead Python function: smoke_test", "shortDescription": {"text": "Possibly dead Python function: smoke_test"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce3a45d67ff72d0a", "name": "Possibly dead Python function: run_eval_job", "shortDescription": {"text": "Possibly dead Python function: run_eval_job"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-324af4ed96c2ba1b", "name": "Possibly dead Python function: replace_repo_root_path", "shortDescription": {"text": "Possibly dead Python function: replace_repo_root_path"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf8a8a8f15377c4c", "name": "Possibly dead Python function: replace_windows_path", "shortDescription": {"text": "Possibly dead Python function: replace_windows_path"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0594d629900fb687", "name": "Possibly dead Python function: visit_Attribute", "shortDescription": {"text": "Possibly dead Python function: visit_Attribute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1c291ff3430f40a", "name": "Possibly dead Python function: visit_Import", "shortDescription": {"text": "Possibly dead Python function: visit_Import"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74fd98228a204fc7", "name": "Possibly dead Python function: visit_ImportFrom", "shortDescription": {"text": "Possibly dead Python function: visit_ImportFrom"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-203621450580bc9c", "name": "Possibly dead Python function: visit_Call", "shortDescription": {"text": "Possibly dead Python function: visit_Call"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b66b027d185c4a55", "name": "Possibly dead Python function: is_sample_failed", "shortDescription": {"text": "Possibly dead Python function: is_sample_failed"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08114a9920580ec0", "name": "Possibly dead Python function: visit_FunctionDef", "shortDescription": {"text": "Possibly dead Python function: visit_FunctionDef"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24f8dd06d40b6e05", "name": "Possibly dead Python function: visit_Call", "shortDescription": {"text": "Possibly dead Python function: visit_Call"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edeed654b89a64ef", "name": "Possibly dead Python function: normalized_levenshtein_similiarity_score", "shortDescription": {"text": "Possibly dead Python function: normalized_levenshtein_similiarity_score"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5826483709891e15", "name": "Possibly dead Python function: construct_include", "shortDescription": {"text": "Possibly dead Python function: construct_include"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b379ba9546540f2d", "name": "Possibly dead Python function: quoted_presenter", "shortDescription": {"text": "Possibly dead Python function: quoted_presenter"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69f56f4426a80a11", "name": "Possibly dead Python function: day_has_conflicts", "shortDescription": {"text": "Possibly dead Python function: day_has_conflicts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-368eb92297c11b31", "name": "Possibly dead Python function: placeholder_ground_truth", "shortDescription": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-47f196eb1dd83c5f", "name": "Possibly dead Python function: placeholder_ground_truth", "shortDescription": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ed1c480cabe7cc1", "name": "Possibly dead Python function: placeholder_ground_truth", "shortDescription": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94439dbcf6661e36", "name": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-pr", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.js:13"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54ddf55b59be529d", "name": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-pa", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:6"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d91abde95289684", "name": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/sta", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:55"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa07d06c9e1868da", "name": "Privileged port 256 in use", "shortDescription": {"text": "Privileged port 256 in use"}, "fullDescription": {"text": "Port 256 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f2a4e9290a02787", "name": "Privileged port 99 in use", "shortDescription": {"text": "Privileged port 99 in use"}, "fullDescription": {"text": "Port 99 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f65aba8e2fc8d55", "name": "Privileged port 151 in use", "shortDescription": {"text": "Privileged port 151 in use"}, "fullDescription": {"text": "Port 151 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11903623043280c3", "name": "Privileged port 1000 in use", "shortDescription": {"text": "Privileged port 1000 in use"}, "fullDescription": {"text": "Port 1000 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbfd3bb281b71ba0", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6a6fba48bff9bb0", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4d8d5b485fb22ac", "name": "Privileged port 18 in use", "shortDescription": {"text": "Privileged port 18 in use"}, "fullDescription": {"text": "Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a68a84b8bcff547e", "name": "Privileged port 65 in use", "shortDescription": {"text": "Privileged port 65 in use"}, "fullDescription": {"text": "Port 65 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72a81630d0d54eb8", "name": "Privileged port 1001 in use", "shortDescription": {"text": "Privileged port 1001 in use"}, "fullDescription": {"text": "Port 1001 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6082d7a6e3e6d9f", "name": "Dockerfile runs as root: tests/utils/test_artifacts/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tests/utils/test_artifacts/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f4e5f07809e1e09", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-043112fc1aa10b41", "name": "Dockerfile runs as root: src/inspect_evals/vimgolf_challenges/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/vimgolf_challenges/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea056e073e8c45ee", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-863ce3c1d4d102be", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8c92754ff91848a", "name": "Dockerfile runs as root: src/inspect_evals/class_eval/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/class_eval/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-898c46835b6011db", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d63e3ddfcd1fbe0d", "name": "Dockerfile runs as root: src/inspect_evals/kernelbench/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/kernelbench/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce11d886d02fb7c5", "name": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4502ed2a9b66df7f", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7a85a0f8604560d", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c496aedcf4b2a68", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d458884b8354ab42", "name": "Dockerfile runs as root: src/inspect_evals/cybench/agent_sandbox/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/agent_sandbox/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06167ac32e9e3391", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/locktalk/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/locktalk/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60c1bb9a01147cca", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:edge", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:edge"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcdd68999841c07f", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac4a9e5477553d24", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e62833befc21ca9", "name": "Docker base image is tag-pinned but not digest-pinned: gradle:7.5-jdk11", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gradle:7.5-jdk11"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-038287db1b9288e6", "name": "Docker base image is tag-pinned but not digest-pinned: openjdk:11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: openjdk:11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df58468e5d3d395b", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/skilift/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/skilift/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cacc8c38c29b3b64", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5c9088ccafc8d4a", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.8-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.8-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b689b930aabad242", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d953ff9754287dee", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisier_crc/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisier_crc/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2aa1bbd756a99e21", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7aa5352294049e2e", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/failproof/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/failproof/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2af9eaf41efe0076", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43915aa041b9a99f", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/robust_cbc/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/robust_cbc/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-118e8897278cbc66", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:focal", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:focal"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ef1f4787c0d1b74", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/flag_command/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/flag_command/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-703fc204c1809420", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-908a3911be29f719", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/back_to_the_past/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/back_to_the_past/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2eff839ba30305e", "name": "Docker base image is tag-pinned but not digest-pinned: nginx:1.23.2", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.23.2"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-531fb75ccc751b57", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/diffecient/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/diffecient/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ceb305c4b6d4b22", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0250b1da2016bdb3", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/shuffled_aes/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/shuffled_aes/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0ed1c4a85a42f89", "name": "Docker base image is tag-pinned but not digest-pinned: rust:alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: rust:alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07694c40bf7fb158", "name": "Docker base image uses a mutable or implicit tag: alpine", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-254bb7473722c2fb", "name": "Docker base image uses a mutable or implicit tag: alpine:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f677e63cc2f2a528", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/just_another_pickle_jail/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/just_another_pickle_jail/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efbf5f80633cdb61", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee8da7162400a766", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/network_tools/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/network_tools/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00254693827878e4", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12c17367a4c39b1a", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff214b8a61b65486", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/labyrinth_linguist/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/labyrinth_linguist/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-417bf68d05725adb", "name": "Docker base image is tag-pinned but not digest-pinned: maven:3.8.5-openjdk-11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: maven:3.8.5-openjdk-11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2ca7f0049e32c94", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/avatar/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/avatar/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80ac912524450d93", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-637296affc5f9e4d", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/nginx/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/nginx/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-226db4228fbab5d4", "name": "Docker base image is tag-pinned but not digest-pinned: nginx:1.18.0", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.18.0"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce07e25bf444b8e2", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/rcache/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/rcache/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27739f574d2813b9", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.20", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.20"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81297f301790311f", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/blog/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/blog/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-725a675b4f3ffb7b", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02f5bbe14bf3ae1c", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisy_crc/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisy_crc/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c63a6d1926b33864", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1077c13830b84ba4", "name": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/ezmaze/images/victim/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/ezmaze/images/victim/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7146bad042652d06", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c11eb34b549baf4e", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-buster", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-buster"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea784c2eed88f806", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/evasion_debugger/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/evasion_debugger/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f35432246bb51fbc", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88e739948cfc4a45", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/web_navigation/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/web_navigation/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-019b17cd5b7fb43a", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b9d0d12928960ef", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/resourcedevelopment_signing/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/resourcedevelopment_signing/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f268bb48434660d", "name": "Docker base image uses a mutable or implicit tag: alpine:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf49f796be5416bb", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/python_repl_factorial10/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/python_repl_factorial10/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1731701b34df0c39", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94adee667a3a8263", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d492280622c1408", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/find_all_users/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/find_all_users/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e718ce9e3105a1a", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02b417343243b7a1", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/binpwn_gdb_repl/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/binpwn_gdb_repl/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-668793ad4a6dfd8d", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eda1f1b8a105b2c9", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/impact_defacing/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/impact_defacing/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ed406b785d4c771", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a43ba3285c0c7c4", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/nmap/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/nmap/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d527e8e353ddf9e7", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71019dc7a1355316", "name": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/initialaccess_mail_link/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/initialaccess_mail_link/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9037606df472f8eb", "name": "Docker base image is tag-pinned but not digest-pinned: debian:stable", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7b00f3d557c8952", "name": "Docker base image uses a mutable or implicit tag: alpine:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed9e1beedd47ab42", "name": "Dockerfile runs as root: src/inspect_evals/bigcodebench/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/bigcodebench/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b6b2c61cef498e9", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-315cdd45bc4eb55a", "name": "Dockerfile runs as root: src/inspect_evals/gdm_stealth/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_stealth/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6749a3375952c5ac", "name": "Docker base image uses a mutable or implicit tag: ubuntu:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: ubuntu:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-888ad577e6dd65d9", "name": "Dockerfile runs as root: src/inspect_evals/ifevalcode/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/ifevalcode/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-998d67417f93e69b", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f6fe68142ca7e0db", "name": "Dockerfile runs as root: src/inspect_evals/cyberseceval_2/vulnerability_exploit/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cyberseceval_2/vulnerability_exploit/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02ca5f810fa8edfc", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9220c45d57569a01", "name": "Dockerfile runs as root: src/inspect_evals/mlrc_bench/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/mlrc_bench/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d34575dd7b32c5aa", "name": "Docker base image is tag-pinned but not digest-pinned: mambaorg/micromamba:jammy", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: mambaorg/micromamba:jammy"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ac6b28baba95a82", "name": "Dockerfile runs as root: src/inspect_evals/paperbench/images/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/paperbench/images/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3fcda8929abee0d", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d492cfc5ae348e2b", "name": "Dockerfile runs as root: src/inspect_evals/compute_eval/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/compute_eval/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ef99d79bca8fb89", "name": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6282a87fcf494abe", "name": "Dockerfile runs as root: src/inspect_evals/osworld/container/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/osworld/container/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f3eb9cbad357895", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-computer-tool:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-computer-tool:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cbbd4996b355f642", "name": "Dockerfile runs as root: src/inspect_evals/ipi_coding_agent/docker/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/ipi_coding_agent/docker/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21335b28e916359f", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff952f461ee2ac94", "name": "Dockerfile runs as root: src/inspect_evals/core_bench/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/core_bench/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2c123ccc108530c", "name": "Docker base image is tag-pinned but not digest-pinned: cruizba/ubuntu-dind:focal-latest", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: cruizba/ubuntu-dind:focal-latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5555f819024f9884", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_watch_video/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_watch_video/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74654d48aac9c931", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfc345303eaa32a5", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_stock_analysis_slides/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_stock_analysis_slides/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80300f413f26b8af", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c1ac56797fa9a89", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_create_sqlite_database/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_create_sqlite_database/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f3261719125f557", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8605e1a682efb69a", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_invoice_matching/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_invoice_matching/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f154507545d42a02", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b032b4c70a1a254", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_coffee_shop_database_management/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_coffee_shop_database_management/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82c390c2af3ea740", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07686856ada83e58", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_translate_sales_chat/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_translate_sales_chat/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e27ac3c461481698", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f31abefdbf57bdf5", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_visualize_data_in_pie_and_bar_chart/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_visualize_data_in_pie_and_bar_chart/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-541f229ab3454c5b", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-af027195097bcd98", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_create_employee_manual/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_create_employee_manual/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f5da1e8db08e6bd", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83f887519b03faa8", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_predictive_modeling/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_predictive_modeling/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ee6488448ffd8f0", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d837f481cd722fcf", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_budget_variance/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_budget_variance/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-282c05c734ca06e1", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fc2e61eda974ab6", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_owncloud_file_reading/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_owncloud_file_reading/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36910ebad7c527a7", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48cbe95d2446d3c4", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18d5eb68aee1cfae", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95ccea8ffa4ab63c", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_generate_gradcam/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_generate_gradcam/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e00a7eb29068998", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0aba037295daf40e", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_mass_forms_filling/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_mass_forms_filling/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bcc654e217de5a3c", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85aa55b446d73cdb", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_install_permissions/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_install_permissions/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f650f01099555b1", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2f4ccb6091f9ae1", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_copy_table_from_pdf_to_xlsx/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_copy_table_from_pdf_to_xlsx/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12df0d96fcf332d3", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-297f96b05abe1b6e", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_answer_numerical_data_question/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_answer_numerical_data_question/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48854f0d825779f9", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dcb8412da99dfc0", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_nonqualified_bill_ask_for_reimburse/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_nonqualified_bill_ask_for_reimburse/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa4cf88f9f0dfb7b", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd53a4cb7c795c1d", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cae23b71c9e48657", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bc45edb906db08f", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_one_day/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_one_day/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77524d5010dc5e6d", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51f989f1fd8f563f", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days_department/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days_department/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8025e7c46a82489f", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45ba77d831f767ed", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_organize_talent_info/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_organize_talent_info/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-410426479e501a3b", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0c1291d22c8541d", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_basic_llm_judge/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_basic_llm_judge/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bdb9455c70c52264", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d56c913ff9c3946", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_remove_pages_pdf/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_remove_pages_pdf/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51ac7f6687b24e80", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d577b36e7aab86ae", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_fix_table_values_and_missing_answers/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_fix_table_values_and_missing_answers/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dc48471341dc9b2", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f65f3c1b2b70026", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_grade_exam/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_grade_exam/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c927322726369480", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-428304fe21fec462", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe0f2df41fe50f3a", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e95cd609adb50c67", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_new_grad_job_description/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_new_grad_job_description/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0c5bf582010a8af", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7f4211eb006a99c", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_find_meeting_spreadsheet/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_find_meeting_spreadsheet/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69ba523d8c03dd43", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c87a3d78e883ff91", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_sql_exercise/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_sql_exercise/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02d5a9c4fe1d5b3c", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8c95521ba5995a9", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_format_excel_sheets/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_format_excel_sheets/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4472bd23833d171f", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3411a33302fce853", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_make_spreadsheet/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_make_spreadsheet/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a89fc3b60c12c16", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51eadfef5355ce79", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_evaluator_helpers/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_evaluator_helpers/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22a41b33d630ced7", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f485a08e22396343", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/research_answer_questions_on_paper/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/research_answer_questions_on_paper/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdd24dabd86a0f5a", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-28bcd7ae289a25cf", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_expense_validation/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_expense_validation/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4d759c7393fe9eb", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84fb1251ddc320bf", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_run_rising_wave_locally/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_run_rising_wave_locally/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f5e52956b7d73f4", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68d6980cf67da7bc", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_resume_categorization/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_resume_categorization/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ea18089529082dd", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca1c1b7751222826", "name": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_check_attendance_payroll/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_check_attendance_payroll/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9c420b4a4bcaa10", "name": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8728b8c5fb920540", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99f7858c6ca0bf82", "name": "Dockerfile runs as root: src/inspect_evals/cybergym/task_template/controller/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/cybergym/task_template/controller/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6aadd80be39c6a16", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24c36f8f61778d1c", "name": "Dockerfile runs as root: src/inspect_evals/ds1000/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/ds1000/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b30563800cc8fb83", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6574c3370b047d5", "name": "Dockerfile runs as root: src/inspect_evals/scicode/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/scicode/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1de13f229914013", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd8d3eae9c0d8706", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62c708b97b0ec063", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/attacker/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/attacker/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1139d6712bff3556", "name": "Docker base image uses a mutable or implicit tag: marshw/kali-base", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: marshw/kali-base"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-762c6dd651023f45", "name": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-014b2df80d45beaf", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_bash/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_bash/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-680a9ee23fa4b13d", "name": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7411ec8427af3310", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_sed/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_sed/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c71f728be8329f65", "name": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08ea3c8199183c12", "name": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3cd6483007a9cf3", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/ssh/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/ssh/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd4c5325b49fc361", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.18.2", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.18.2"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90d99a104db7cd73", "name": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e54c1154b345704", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/webmin/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/webmin/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b84211dfb68c4de0", "name": "Docker base image is tag-pinned but not digest-pinned: vulhub/webmin:1.910", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: vulhub/webmin:1.910"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd3d43aa794b8a7f", "name": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcb35e66ad9dcd42", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/grafana/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/grafana/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9247a9f96e2e277", "name": "Docker base image is tag-pinned but not digest-pinned: grafana/grafana:8.3.0", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: grafana/grafana:8.3.0"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79e09a5a67daadca", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_find/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_find/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34cddfa299784a5c", "name": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b7ec2fd25cadeca", "name": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_7z/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_7z/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a31bec9477467e7d", "name": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3db56d69772c7131", "name": "Docker base image is tag-pinned but not digest-pinned: postgres:alpine3.18", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: postgres:alpine3.18"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cbee37513cd63456", "name": "Insecure pattern 'eval_used' in README.md:83", "shortDescription": {"text": "Insecure pattern 'eval_used' in README.md:83"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7952b5ff164b3029", "name": "Insecure pattern 'eval_used' in tools/dep_bump_impact.py:219", "shortDescription": {"text": "Insecure pattern 'eval_used' in tools/dep_bump_impact.py:219"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c7a95efc60376e8a", "name": "Insecure pattern 'subprocess_shell_true' in tools/run_evals.py:196", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in tools/run_evals.py:196"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1bb6fab5f32909bc", "name": "Insecure pattern 'eval_used' in tools/generate_readmes.py:311", "shortDescription": {"text": "Insecure pattern 'eval_used' in tools/generate_readmes.py:311"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-adccedd37c59ce75", "name": "Insecure pattern 'eval_used' in src/register_tooling/deriver.py:297", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/register_tooling/deriver.py:297"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-405ade57066a8eba", "name": "Insecure pattern 'eval_used' in src/inspect_evals/sevenllm/README.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sevenllm/README.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b83dea28ac0a9af0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/docvqa/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/docvqa/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5d509cb413f258bc", "name": "Insecure pattern 'eval_used' in src/inspect_evals/instrumentaleval/README.md:95", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/instrumentaleval/README.md:95"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-34826287e7a76181", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agentdojo/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentdojo/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bcb8487ae4f54395", "name": "Possible secret in src/inspect_evals/agentdojo/task_suites/banking/user_tasks.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentdojo/task_suites/banking/user_tasks.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-e592dcddb9368cb3", "name": "Insecure pattern 'eval_used' in src/inspect_evals/niah/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/niah/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-58d9ea0ddf4153dd", "name": "Insecure pattern 'eval_used' in src/inspect_evals/vimgolf_challenges/README.md:64", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vimgolf_challenges/README.md:64"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c84707503216a2c", "name": "Insecure pattern 'eval_used' in src/inspect_evals/boolq/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/boolq/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-56a37b202f78f5ad", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mmiu/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmiu/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a59f55622105119", "name": "Insecure pattern 'eval_used' in src/inspect_evals/b3/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/b3/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3ac8f05d0beb15af", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mask/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mask/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-96342a1453bac3ca", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/README.md:82", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/README.md:82"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6807f9cc1bf59959", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/php/eval_use.yaml:", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/php/eval_use.yaml:4"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-198195c013a9a8f8", "name": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.yaml:7"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71353a40cebb4fdb", "name": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.py", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.py:9"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7688dc90c2970a2b", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.py", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.py:9"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-57596b1a5fec637d", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.ya", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.yaml:6"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-997363b9eb51f75b", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/os_s", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/os_system_use.yaml:6"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-02bda4f0fa2c178d", "name": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.ya", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.yaml:6"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b3c7de5d6307bd8", "name": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.py:11"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-37a3f1a859a29696", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/md5_use.yaml:4", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/md5_use.yaml:4"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f9426f29a06470f", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/sha1_use.yaml:4", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/sha1_use.yaml:4"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4baeced47799273a", "name": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascrip", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.js:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f19f50dcd5c70edf", "name": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascrip", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.yaml:31"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87fa0a8f792f8bf4", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-p", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml:13"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-008e52979f4312fa", "name": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript", "shortDescription": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml:36"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-515dcb23a4fa4e56", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-p", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:6"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-759cf790df647ce8", "name": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript", "shortDescription": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:131"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f6cb7570967448f", "name": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascri", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/dangerously-set-inner-html.yaml:11"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22546e447ffc2dbb", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/csharp/third-party", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/csharp/third-party/crypto_weak_hashing_function.yaml:18"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e96455445663db67", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_cybe", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_cyberseceval.json:451"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d295716c8979fb5e", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_cy", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_cyberseceval.json:451"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d01182b06882b797", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_code", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_codeshield.json:350"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-882c52234a22eff7", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_codeshield.json:205"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dbae8008c79b600", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_cy", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_cyberseceval.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8c488c357b479f2f", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javasc", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:367"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eb3c9f009eaa4741", "name": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated", "shortDescription": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:405"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-53099ce5aedc3f0a", "name": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generate", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7336654bf986b3c0", "name": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generat", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:289"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b274ca1dc188a16", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_co", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_codeshield.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf9fec2d353b750b", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_co", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_codeshield.json:350"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7247e199944d27e", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:146"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df3d21f4bfa710d8", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:227"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e62366423a0f69e", "name": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_gener", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:329"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cfec4d866e72e994", "name": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:175"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de738f2e003c36f5", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javasc", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:367"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7ff65440fbd6848f", "name": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated", "shortDescription": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:405"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d2c3a9b0284f9d0", "name": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generate", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6716be914a21b09", "name": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generat", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:289"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-daacc43e73371007", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:198"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bd02770a749d80ce", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:306"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-35cedae02f17f76b", "name": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_gener", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:408"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2eeb593ec6def9e6", "name": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:227"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9463ce5d81ffcaf6", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_cyberseceval.json:205"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5da344d720b7739", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/java.yaml:68", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/java.yaml:68"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecbb73491c54d7ac", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/c.yaml:25", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/c.yaml:25"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26145bd0f24ed44d", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/python.yaml:7", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/python.yaml:7"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f31f0b3b1558648", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/threat_intel_reasoning/report_questions.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/threat_intel_reasoning/report_questions.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c86206c035d87b2", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/malware_analysis/questions.json:866", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/malware_analysis/questions.json:866"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c1d2e9ff8accdca5", "name": "Insecure pattern 'eval_used' in src/inspect_evals/vstar_bench/README.md:56", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vstar_bench/README.md:56"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95dda02749beaab5", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gdpval/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdpval/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dca2178b6aae898d", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a3291e1d6210a59a", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mmmu/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmmu/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30cfa1358157d377", "name": "Insecure pattern 'eval_used' in src/inspect_evals/sosbench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sosbench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cef2b3a79ea98112", "name": "Insecure pattern 'eval_used' in src/inspect_evals/class_eval/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/class_eval/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3a2bb3d12d1327a", "name": "Insecure pattern 'eval_used' in src/inspect_evals/swe_lancer/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/swe_lancer/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ef661079d2c8e66", "name": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/README.md:80", "shortDescription": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/README.md:80"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd40018fb58b277c", "name": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/scorers.py:279", "shortDescription": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/scorers.py:279"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41f2e7cd3ad02bc9", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gpqa/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gpqa/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6076ca5b3371d3ea", "name": "Insecure pattern 'eval_used' in src/inspect_evals/humaneval/README.md:42", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/humaneval/README.md:42"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-70ad093ae5850957", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gaia/README.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gaia/README.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1645104fc3bf0fdd", "name": "Insecure pattern 'eval_used' in src/inspect_evals/arc/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/arc/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-073bd7f84183a51d", "name": "Insecure pattern 'eval_used' in src/inspect_evals/frontierscience/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/frontierscience/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffc9791421900d17", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_self_reasoning/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_self_reasoning/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1b581e94e0303747", "name": "Insecure pattern 'exec_used' in src/inspect_evals/gdm_self_reasoning/solvers/max_tokens.py:120", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/gdm_self_reasoning/solvers/max_tokens.py:120"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1ec2a4821d2a1134", "name": "Insecure pattern 'eval_used' in src/inspect_evals/kernelbench/README.md:52", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/kernelbench/README.md:52"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ce026cca0f6268aa", "name": "Insecure pattern 'eval_used' in src/inspect_evals/air_bench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/air_bench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5929b5f30e2a9496", "name": "Insecure pattern 'eval_used' in src/inspect_evals/simpleqa/README.md:55", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/simpleqa/README.md:55"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0bac7e36e31c356e", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cve_bench/README.md:62", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cve_bench/README.md:62"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f9b72f5c728240ca", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mathvista/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mathvista/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0ac9c7d56225453", "name": "Insecure pattern 'eval_used' in src/inspect_evals/ifeval/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ifeval/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ff88e18f48e58da0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/scbench/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/scbench/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-89471d70df230a82", "name": "Insecure pattern 'eval_used' in src/inspect_evals/bbh/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bbh/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-39a3739831cfeb08", "name": "Insecure pattern 'eval_used' in src/inspect_evals/swe_bench/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/swe_bench/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3cf9182fff3e7465", "name": "Insecure pattern 'eval_used' in src/inspect_evals/bbq/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bbq/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-287dca71ded83859", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d09171a764e1228", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/were_pickle_phreaks_revenge/solution/solve.py:33", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/were_pickle_phreaks_revenge/solution/solve.py:33"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-255d21182379d01f", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisier_crc/solution/solve.py:207", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisier_crc/solution/solve.py:207"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-43785623f46317ed", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/failproof/solution/solve.py:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/failproof/solution/solve.py:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4c8be4739c87a2ee", "name": "Insecure pattern 'debug_true' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/run.py:3", "shortDescription": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/run.py:3"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-400abb20d0aa6a33", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challe", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:32"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d608ec4f474a2f29", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/delulu/solution/solve.py:9", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/delulu/solution/solve.py:9"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b40a7c4b93e7be4d", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/just_another_pickle_jail/solution/gen_pkl.py", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/just_another_pickle_jail/solution/gen_pkl.py:115"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-281aca9241728312", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/avatar/images/victim/chall/chall.py:9", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/avatar/images/victim/chall/chall.py:9"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-99ee3d72b890a3bc", "name": "Insecure pattern 'exec_used' in src/inspect_evals/cybench/challenges/permuted/solution/solve.py:122", "shortDescription": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cybench/challenges/permuted/solution/solve.py:122"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1bcdb27280d23ed", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisy_crc/solution/new_solve.py:67", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisy_crc/solution/new_solve.py:67"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-857fb9c9b193ec79", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/ezmaze/solution/solve.py:9", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/ezmaze/solution/solve.py:9"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d4af0f81cb2d3dcf", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/images/victim/challenge/main.py:84", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/images/victim/challenge/main.py:84"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ab898802620a371", "name": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/unbreakable/solution/solve.py:8", "shortDescription": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/unbreakable/solution/solve.py:8"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dc03581ffb22d6d0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/resources/main.py:84", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/resources/main.py:84"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a8d0a559ecf233fc", "name": "Insecure pattern 'eval_used' in src/inspect_evals/musr/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/musr/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ead04600ff84c3b7", "name": "Insecure pattern 'eval_used' in src/inspect_evals/ape/README.md:67", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ape/README.md:67"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-144ddb15e306c773", "name": "Insecure pattern 'eval_used' in src/inspect_evals/usaco/README.md:44", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/usaco/README.md:44"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8c9c581b3f25a351", "name": "Insecure pattern 'eval_used' in src/inspect_evals/wmdp/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/wmdp/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8e5b362b1bd4c2d0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/threecb/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/threecb/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-466871639ea3a18e", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_intercode_ctf/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_intercode_ctf/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1423ed84c75a258", "name": "Insecure pattern 'eval_used' in src/inspect_evals/winogrande/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/winogrande/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8271dea75526ae6b", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agent_bench/README.md:42", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agent_bench/README.md:42"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-083258f7202ea22c", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gsm8k/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gsm8k/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87084ea399392178", "name": "Insecure pattern 'eval_used' in src/inspect_evals/tac/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tac/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a5248fe8de19767", "name": "Insecure pattern 'eval_used' in src/inspect_evals/bigcodebench/README.md:109", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bigcodebench/README.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3227a6c543a28d1", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_stealth/README.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_stealth/README.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e521d898d17eec71", "name": "Possible secret in src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/ticket.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/ticket.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7c6bda9054526c22", "name": "Insecure pattern 'eval_used' in src/inspect_evals/pubmedqa/README.md:42", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/pubmedqa/README.md:42"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79f7a3ff95da275a", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agieval/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agieval/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-417d6cb1d9af3766", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu_pro/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu_pro/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d8be72e7cf4d9c6", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cybermetric/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybermetric/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ea0d60a3e955a325", "name": "Insecure pattern 'eval_used' in src/inspect_evals/commonsense_qa/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/commonsense_qa/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffc9aea58dbc8343", "name": "Insecure pattern 'eval_used' in src/inspect_evals/ifevalcode/README.md:46", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ifevalcode/README.md:46"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aae9d62ef2dcebbf", "name": "Insecure pattern 'eval_used' in src/inspect_evals/browse_comp/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/browse_comp/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-794a989a985a3339", "name": "Insecure pattern 'eval_used' in src/inspect_evals/strong_reject/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/strong_reject/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3b4bc2fbd7db79e4", "name": "Insecure pattern 'eval_used' in src/inspect_evals/sycophancy/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sycophancy/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-efadf137dfa81326", "name": "Insecure pattern 'eval_used' in src/inspect_evals/macbench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/macbench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23affeb49d37b4f1", "name": "Insecure pattern 'eval_used' in src/inspect_evals/lab_bench/README.md:54", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/lab_bench/README.md:54"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eadd3f76a8a28448", "name": "Insecure pattern 'eval_used' in src/inspect_evals/coconot/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/coconot/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1dcb26237fb99aeb", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_2/README.md:55", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_2/README.md:55"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-62b6d732bf9933de", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agent_threat_bench/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agent_threat_bench/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5d066f194f895ef", "name": "Insecure pattern 'eval_used' in src/inspect_evals/infinite_bench/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/infinite_bench/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1774b85cab4b7063", "name": "Insecure pattern 'eval_used' in src/inspect_evals/math/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/math/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffe037f91932c2d8", "name": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/README.md:55", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/README.md:55"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c3d499d5e0988709", "name": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/common/tools.py:44", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/common/tools.py:44"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6db343210c566604", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mlrc_bench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mlrc_bench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2039c63a5b3e836f", "name": "Insecure pattern 'eval_used' in src/inspect_evals/apps/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/apps/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1785b8310b5e3bbd", "name": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_3/README.md:61", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_3/README.md:61"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a843c5f8151c91d5", "name": "Insecure pattern 'eval_used' in src/inspect_evals/race_h/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/race_h/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f44f9a2df1d03dc", "name": "Insecure pattern 'eval_used' in src/inspect_evals/truthfulqa/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/truthfulqa/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52ef5c3921ff7c03", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agentic_misalignment/README.md:46", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentic_misalignment/README.md:46"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-713b0cbe639f0112", "name": "Insecure pattern 'eval_used' in src/inspect_evals/bold/README.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bold/README.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ecc7c1815fa26f9", "name": "Insecure pattern 'eval_used' in src/inspect_evals/livecodebench_pro/README.md:39", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/livecodebench_pro/README.md:39"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5f6c6d1ebbabc2f0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/compute_eval/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/compute_eval/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3fbd4291824f13d0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/osworld/README.md:54", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/osworld/README.md:54"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab28c0992b8bafff", "name": "Insecure pattern 'eval_used' in src/inspect_evals/piqa/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/piqa/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ad5e5e375072d3db", "name": "Insecure pattern 'eval_used' in src/inspect_evals/drop/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/drop/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-066d536b344e88e0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/writingbench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/writingbench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-18369b658400f9af", "name": "Insecure pattern 'eval_used' in src/inspect_evals/paws/README.md:37", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/paws/README.md:37"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-89e5434625ecb3ce", "name": "Insecure pattern 'eval_used' in src/inspect_evals/stereoset/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/stereoset/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-abd9c91ab0e5c92a", "name": "Insecure pattern 'eval_used' in src/inspect_evals/squad/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/squad/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5a1c3a868e521482", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mbpp/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mbpp/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af17222effbe32b1", "name": "Insecure pattern 'eval_used' in src/inspect_evals/anima/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/anima/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca1c6c75db6e1a26", "name": "Insecure pattern 'eval_used' in src/inspect_evals/core_bench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/core_bench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-39dafa5c49531954", "name": "Insecure pattern 'eval_used' in src/inspect_evals/aime2024/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/aime2024/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a1eeadb12178f7c0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/healthbench/README.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/healthbench/README.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8dc38c7764fdbeae", "name": "Insecure pattern 'eval_used' in src/inspect_evals/persistbench/README.md:53", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/persistbench/README.md:53"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-07016f448c75ddc6", "name": "Insecure pattern 'eval_used' in src/inspect_evals/livebench/README.md:56", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/livebench/README.md:56"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f275dff7b6f1244d", "name": "Insecure pattern 'eval_used' in src/inspect_evals/theagentcompany/README.md:52", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/theagentcompany/README.md:52"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-adfe5fbace94e0fb", "name": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-30722ce13dc3b732", "name": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/evaluator.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/evaluator.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-b614294817b18013", "name": "Insecure pattern 'eval_used' in src/inspect_evals/mle_bench/README.md:60", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mle_bench/README.md:60"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-98df665b056030aa", "name": "Possible secret in src/inspect_evals/cybergym/scorers.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/cybergym/scorers.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-922884773e775e57", "name": "Possible secret in src/inspect_evals/cybergym/task_template/controller/server.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/cybergym/task_template/controller/server.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-e920fa88055507f2", "name": "Insecure pattern 'eval_used' in src/inspect_evals/ds1000/README.md:95", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ds1000/README.md:95"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bc8d30ea70838bda", "name": "Insecure pattern 'eval_used' in src/inspect_evals/medqa/README.md:39", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/medqa/README.md:39"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e6bf5f65c1255c5b", "name": "Insecure pattern 'eval_used' in src/inspect_evals/scicode/README.md:45", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/scicode/README.md:45"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7030188efe68ba3", "name": "Insecure pattern 'eval_used' in src/inspect_evals/sad/README.md:57", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sad/README.md:57"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-beeacf906e30df37", "name": "Insecure pattern 'eval_used' in src/inspect_evals/pre_flight/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/pre_flight/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0f4512c3a5363583", "name": "Insecure pattern 'eval_used' in src/inspect_evals/frontier_cs/README.md:49", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/frontier_cs/README.md:49"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8567fb7b6ad92efe", "name": "Insecure pattern 'eval_used' in src/inspect_evals/novelty_bench/README.md:51", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/novelty_bench/README.md:51"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-58179fa81e85142e", "name": "Insecure pattern 'eval_used' in src/inspect_evals/chembench/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/chembench/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bfcb44f4f297b0cc", "name": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_in_house_ctf/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_in_house_ctf/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9eda2bee537c05fa", "name": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py:30", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py:30"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ede2ee5eb80b4c2", "name": "Insecure pattern 'eval_used' in src/inspect_evals/sec_qa/README.md:63", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sec_qa/README.md:63"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fc84f5c24eb4b7e4", "name": "Insecure pattern 'eval_used' in src/inspect_evals/hellaswag/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/hellaswag/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67406437b52dacc0", "name": "Insecure pattern 'eval_used' in src/inspect_evals/lingoly/README.md:48", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/lingoly/README.md:48"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5a4cb2e8032a4aa3", "name": "Insecure pattern 'eval_used' in src/inspect_evals/vqa_rad/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vqa_rad/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3d5d135c80a300e", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/README.md:92", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/README.md:92"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ecb18a4535c87f0", "name": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/dataset.py:134", "shortDescription": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/dataset.py:134"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-455180ecf47e81ac", "name": "Insecure pattern 'eval_used' in src/inspect_evals/personality/README.md:63", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/personality/README.md:63"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86c20574c0350571", "name": "Insecure pattern 'eval_used' in src/inspect_evals/agentharm/README.md:68", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentharm/README.md:68"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c95122608e3e918e", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d69a9ccef8aee800", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3a2be572a14ecb4d", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py"}, "fullDescription": {"text": "Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d4e33f69840bbd0a", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/content/api_keys.json", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/content/api_keys.json"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-41bbfa8b332fc4dc", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py"}, "fullDescription": {"text": "Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-eb4cdd646b101385", "name": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/content/api_keys.json", "shortDescription": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/content/api_keys.json"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-65a9ac193b53e32a", "name": "Insecure pattern 'eval_used' in src/inspect_evals/abstention_bench/README.md:46", "shortDescription": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/abstention_bench/README.md:46"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffb9385208cb1ecf", "name": "Insecure pattern 'eval_used' in register/machiavelli/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/machiavelli/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19859810fed8d744", "name": "Insecure pattern 'eval_used' in register/medcalc-bench/README.md:46", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/medcalc-bench/README.md:46"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-24bf3819e89a95c4", "name": "Insecure pattern 'eval_used' in register/hangman-bench/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/hangman-bench/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-12c6058f5f579b75", "name": "Insecure pattern 'eval_used' in register/arxivrollbench/README.md:44", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/arxivrollbench/README.md:44"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f80fadcd6a711f1", "name": "Insecure pattern 'eval_used' in register/tarantubench/README.md:43", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/tarantubench/README.md:43"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15850bdde89a0620", "name": "Insecure pattern 'eval_used' in register/mcptox/README.md:46", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/mcptox/README.md:46"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2a53189b1c8e2ab", "name": "Insecure pattern 'eval_used' in register/frames/README.md:52", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/frames/README.md:52"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-75a5b16a8c442b2b", "name": "Insecure pattern 'eval_used' in register/lab_bench_2/README.md:47", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/lab_bench_2/README.md:47"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6ef40e63acc2947a", "name": "Insecure pattern 'eval_used' in register/ahb/README.md:41", "shortDescription": {"text": "Insecure pattern 'eval_used' in register/ahb/README.md:41"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-212aab3c338c34a7", "name": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/README.md:26", "shortDescription": {"text": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/README.md:26"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-537ed939ae09b36f", "name": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/check_pytest_marks.py:141", "shortDescription": {"text": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/check_pytest_marks.py:141"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2119df6589d9dee3", "name": "Insecure pattern 'eval_used' in .claude/skills/code-quality-review-all/SKILL.md:3", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/skills/code-quality-review-all/SKILL.md:3"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-69c9569a5bca4bd4", "name": "Insecure pattern 'eval_used' in .claude/skills/security-audit-eval/SKILL.md:35", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/skills/security-audit-eval/SKILL.md:35"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-64685656223ff68f", "name": "Insecure pattern 'tls_verify_false' in .claude/skills/security-audit-eval/SKILL.md:109", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in .claude/skills/security-audit-eval/SKILL.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-516a8fe8f74cbc4c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63fef1dc2dc3d22f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e030bfd697608d4c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9704c1ba5689906", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14ce8614dd03f409", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-baa377116bb3ac5a", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb7562fcd003a857", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c9ac8419df62bbd", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47e70e3727d3c96e", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f929cbb563fcfd3c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb6d5edc4aabdec5", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7acfe63df13bc7ec", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cca89fc56300123d", "name": "Very large file: src/inspect_evals/agentdojo/task_suites/travel/user_tasks.py (2371 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentdojo/task_suites/travel/user_tasks.py (2371 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d1374d2ee0bbee6", "name": "Very large file: src/inspect_evals/agentdojo/task_suites/workspace/user_tasks.py (1588 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentdojo/task_suites/workspace/user_tasks.py (1588 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78399cb5d05d2f9c", "name": "Very large file: src/inspect_evals/tau2/banking/BankingAgentTools.py (3432 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/tau2/banking/BankingAgentTools.py (3432 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f5f0022bfe76402a", "name": "Very large file: src/inspect_evals/persistbench/prompts.py (1640 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/persistbench/prompts.py (1640 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c781db437b25d2d3", "name": "Very large file: src/inspect_evals/agentharm/benchmark/benign_grading_functions.py (3233 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/benign_grading_functions.py (3233 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d348db9ee62150c8", "name": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py (3029 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py (3029 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f50ad9ff67bc82d2", "name": "Very large file: src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py (2340 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py (2340 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0fd357bd17b244c", "name": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_tools/get_webpage.py (2545 lines)", "shortDescription": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_tools/get_webpage.py (2545 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d53e6fc6e96b42a4", "name": "43 TODO/FIXME markers", "shortDescription": {"text": "43 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 704 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 64 placeholder/mock markers across 37 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-365ee5dcc74047c1", "name": "Agent authority lacks a verifier contract: src/inspect_evals/moru/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: src/inspect_evals/moru/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ef56fe5aa5b74e4", "name": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8a44e5f7a5e6520", "name": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/references/test-patterns.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/references/test-patterns.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-813ad3bbd75a8ce2", "name": "Agent authority lacks a verifier contract: .claude/skills/code-quality-review-all/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-quality-review-all/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e7c1c8bd51d998f", "name": "Agent authority lacks a verifier contract: .claude/skills/code-quality-fix-all/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-quality-fix-all/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83274fe66f2f9076", "name": "Agent instruction contains unpinned remote install: .claude/skills/security-audit-eval/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/security-audit-eval/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ba4a39b2a656288a", "name": "Agent authority lacks a verifier contract: .claude/skills/eval-validity-review/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/eval-validity-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88031ab966f8ac2e", "name": "Agent authority lacks a verifier contract: .claude/skills/prepare-release/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/prepare-release/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4972f9b2f2f8f87", "name": "Agent authority lacks a verifier contract: .claude/skills/create-eval/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-eval/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1269fa31d4438b13", "name": "Agent authority lacks a verifier contract: .claude/skills/read-eval-logs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/read-eval-logs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71c0e7370b3583ef", "name": "Agent authority lacks a verifier contract: .claude/skills/ci-maintenance-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ci-maintenance-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f66cdb40fc688686", "name": "Commented-code block (5 lines) in tests/test_generate_readmes.py:144", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_generate_readmes.py:144"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d5210df17f2b1341", "name": "Legacy-named symbol `model_copy` in tests/agentdojo/test_deepdiff_wrappers.py:54", "shortDescription": {"text": "Legacy-named symbol `model_copy` in tests/agentdojo/test_deepdiff_wrappers.py:54"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7133cd367359f2cc", "name": "Commented-code block (6 lines) in tests/mask/test_core_metrics.py:187", "shortDescription": {"text": "Commented-code block (6 lines) in tests/mask/test_core_metrics.py:187"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f7fd448f56bc5cff", "name": "Commented-code block (7 lines) in tests/swe_bench/test_scorer.py:74", "shortDescription": {"text": "Commented-code block (7 lines) in tests/swe_bench/test_scorer.py:74"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5e5cbce6ff814026", "name": "Legacy-named symbol `nonOld` in tests/bbq/test_bbq.py:80", "shortDescription": {"text": "Legacy-named symbol `nonOld` in tests/bbq/test_bbq.py:80"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-281a3c23761077a0", "name": "Commented-code block (6 lines) in tests/strong_reject/test_scorer_model_resolution.py:150", "shortDescription": {"text": "Commented-code block (6 lines) in tests/strong_reject/test_scorer_model_resolution.py:150"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca39b8422ab08cf7", "name": "Legacy-named symbol `test_undo_edit_script_no_backup` in tests/mlrc_bench/test_mlrc_low_level_actions.py:108", "shortDescription": {"text": "Legacy-named symbol `test_undo_edit_script_no_backup` in tests/mlrc_bench/test_mlrc_low_level_actions.py:108"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7560ca707d8f3b56", "name": "Legacy-named symbol `mock_backup` in tests/mlrc_bench/test_mlrc_high_level_actions.py:117", "shortDescription": {"text": "Legacy-named symbol `mock_backup` in tests/mlrc_bench/test_mlrc_high_level_actions.py:117"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87f4f67f5f1f7455", "name": "Legacy-named symbol `squad_v2` in tests/squad/test_squad.py:80", "shortDescription": {"text": "Legacy-named symbol `squad_v2` in tests/squad/test_squad.py:80"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a12079e86b67c38", "name": "Commented-code block (6 lines) in tests/healthbench/test_epoch_compatibility.py:154", "shortDescription": {"text": "Commented-code block (6 lines) in tests/healthbench/test_epoch_compatibility.py:154"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9091647e767cae0e", "name": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_record_to_sample.py:182", "shortDescription": {"text": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_record_to_sample.py:182"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f728a121ba05af6c", "name": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_decide_scorer.py:33", "shortDescription": {"text": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_decide_scorer.py:33"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b12559a58692e4c7", "name": "Legacy-named symbol `test_ds_predictive_modeling_checkpoint_thresholds_match_legacy` in tests/theagentcompany/test_score", "shortDescription": {"text": "Legacy-named symbol `test_ds_predictive_modeling_checkpoint_thresholds_match_legacy` in tests/theagentcompany/test_scorers.py:149"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6dcbd582d292814", "name": "Commented-code block (5 lines) in tests/novelty_bench/test_partition.py:252", "shortDescription": {"text": "Commented-code block (5 lines) in tests/novelty_bench/test_partition.py:252"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9aa5c1937c010a2f", "name": "Commented-code block (6 lines) in tests/novelty_bench/test_score.py:580", "shortDescription": {"text": "Commented-code block (6 lines) in tests/novelty_bench/test_score.py:580"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7431feeaaec9a81a", "name": "Legacy-named symbol `secqa_v1` in tests/sec_qa/test_sec_qa_dataset.py:18", "shortDescription": {"text": "Legacy-named symbol `secqa_v1` in tests/sec_qa/test_sec_qa_dataset.py:18"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0611a86dca73e2ad", "name": "Legacy-named symbol `sec_qa_v1` in tests/sec_qa/test_sec_qa.py:7", "shortDescription": {"text": "Legacy-named symbol `sec_qa_v1` in tests/sec_qa/test_sec_qa.py:7"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3590785d1ee56b00", "name": "Network/subprocess call without timeout or try/except \u2014 .github/scripts/run_targeted_tests.py:100", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 .github/scripts/run_targeted_tests.py:100"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa61e4b10ac80aee", "name": "Commented-code block (5 lines) in .github/scripts/register_submission/validate_trigger.py:80", "shortDescription": {"text": "Commented-code block (5 lines) in .github/scripts/register_submission/validate_trigger.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d06dbabfd6799fd9", "name": "Commented-code block (5 lines) in .github/scripts/register_submission/find_duplicates.py:52", "shortDescription": {"text": "Commented-code block (5 lines) in .github/scripts/register_submission/find_duplicates.py:52"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fa3d2a836aa63ba1", "name": "Network/subprocess call without timeout or try/except \u2014 tools/dep_bump_impact.py:30", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/dep_bump_impact.py:30"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4925c1cefe648c28", "name": "Network/subprocess call without timeout or try/except \u2014 tools/run_evals.py:196", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/run_evals.py:196"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9af979b6e757e71", "name": "Commented-code block (6 lines) in tools/generate_readmes.py:774", "shortDescription": {"text": "Commented-code block (6 lines) in tools/generate_readmes.py:774"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9848633d5725decd", "name": "Network/subprocess call without timeout or try/except \u2014 tools/generate_asset_manifest.py:26", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/generate_asset_manifest.py:26"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ef13cc5944612c1", "name": "Network/subprocess call without timeout or try/except \u2014 tools/check_undeclared_assets.py:12", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/check_undeclared_assets.py:12"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8de4c46e570f6d93", "name": "Commented-code block (6 lines) in tools/clean.py:150", "shortDescription": {"text": "Commented-code block (6 lines) in tools/clean.py:150"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9c7ff4afba9837be", "name": "Network/subprocess call without timeout or try/except \u2014 tools/debug_sandbox.py:151", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/debug_sandbox.py:151"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59d11cf36ab5af74", "name": "Legacy-named symbol `model_copy` in tools/report_utils.py:552", "shortDescription": {"text": "Legacy-named symbol `model_copy` in tools/report_utils.py:552"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b707244a791022cf", "name": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/_registry.py:229", "shortDescription": {"text": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/_registry.py:229"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f00b53ca4db0e4a9", "name": "Commented-code block (5 lines) in src/inspect_evals/b3/dataset.py:83", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/b3/dataset.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-36034e6ebd57803f", "name": "Commented-code block (7 lines) in src/inspect_evals/b3/experiments/constants.py:34", "shortDescription": {"text": "Commented-code block (7 lines) in src/inspect_evals/b3/experiments/constants.py:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-01fe2ef8d02cab72", "name": "Legacy-named symbol `signature_copy` in src/inspect_evals/cyberseceval_4/malware_analysis.py:336", "shortDescription": {"text": "Legacy-named symbol `signature_copy` in src/inspect_evals/cyberseceval_4/malware_analysis.py:336"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fce2c55a79a7cf0b", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/se", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.py:11"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b48837cb2426c89", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/java", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:45"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a35d6c4bf300d489", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autopatching/dataset.py:16", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autopatching/dataset.py:16"}, "fullDescription": {"text": "`urllib.request.urlopen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eec2a8c14fc7bf89", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autonomous_uplift/dataset.py:19", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autonomous_uplift/dataset.py:19"}, "fullDescription": {"text": "`urllib.request.urlopen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b208c1dd41906626", "name": "Commented-code block (6 lines) in src/inspect_evals/swe_lancer/utils.py:322", "shortDescription": {"text": "Commented-code block (6 lines) in src/inspect_evals/swe_lancer/utils.py:322"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-100844f0e240b420", "name": "Commented-code block (5 lines) in src/inspect_evals/swe_lancer/dataset.py:257", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/swe_lancer/dataset.py:257"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6c26953e87d44a5", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/utils/docker_utils.py:22", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/utils/docker_utils.py:22"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4e0b25d54a4547c", "name": "Legacy-named symbol `metric_result_copy` in src/inspect_evals/fortress/scorer.py:114", "shortDescription": {"text": "Legacy-named symbol `metric_result_copy` in src/inspect_evals/fortress/scorer.py:114"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72d72e36a3a99391", "name": "Commented-code block (5 lines) in src/inspect_evals/bfcl/data.py:260", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/data.py:260"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7cc1d27e23a4b809", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/data.py:59", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/data.py:59"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fccb4abad9024cbf", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/backends/downloader.py:13", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/backends/downloader.py:13"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85e0a1c143428447", "name": "Commented-code block (5 lines) in src/inspect_evals/bfcl/backends/loader.py:38", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/backends/loader.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fcb6aa473c3eeccc", "name": "Commented-code block (5 lines) in src/inspect_evals/bfcl/utils/task_categories.py:197", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/utils/task_categories.py:197"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-febeff2a65ae519a", "name": "Legacy-named symbol `model_results_copy` in src/inspect_evals/bfcl/score/multi_turn_scorer.py:323", "shortDescription": {"text": "Legacy-named symbol `model_results_copy` in src/inspect_evals/bfcl/score/multi_turn_scorer.py:323"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0ba3ad4d5e5e18f", "name": "Legacy-named symbol `model_copy` in src/inspect_evals/bbh/bbh.py:136", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/bbh/bbh.py:136"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f9c2993c864d2fba", "name": "Legacy-named symbol `model_copy` in src/inspect_evals/bbq/bbq.py:120", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/bbq/bbq.py:120"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48029771a7a42ca7", "name": "Commented-code block (8 lines) in src/inspect_evals/bbq/bbq.py:3", "shortDescription": {"text": "Commented-code block (8 lines) in src/inspect_evals/bbq/bbq.py:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c07de5ee6639850e", "name": "Commented-code block (6 lines) in src/inspect_evals/bbq/huggingface_artifact/bbq.py:157", "shortDescription": {"text": "Commented-code block (6 lines) in src/inspect_evals/bbq/huggingface_artifact/bbq.py:157"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2b978226282df0e2", "name": "Legacy-named symbol `model_copy` in src/inspect_evals/cybench/cybench.py:127", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/cybench/cybench.py:127"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d6c1a2d433bc31c", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/locktalk/solution/solve.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/locktalk/solution/solve.py:77"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-288b57b8d56d3943", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets/scripts/chart.component.js:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8de0468b4b36115a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets/scripts/index.js:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76781b55de4dbab9", "name": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/randsubware/solution/solve.py:135", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/randsubware/solution/solve.py:135"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-26a56dcd305cba65", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:46"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bee08eba2a405bab", "name": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/walking_to_the_sea_side/solution/pure_python_solu", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/walking_to_the_sea_side/solution/pure_python_solution.py:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38b9108a9ab3a577", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/admi", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/admin/admin.py:17"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f730af0ca6cbeebc", "name": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/usaco.py:112", "shortDescription": {"text": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/usaco.py:112"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18052da983c8f0bc", "name": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/dataset.py:98", "shortDescription": {"text": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/dataset.py:98"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2b5018f4a851b86", "name": "Commented-code block (5 lines) in src/inspect_evals/gdm_intercode_ctf/dataset.py:74", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/gdm_intercode_ctf/dataset.py:74"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c2cdea146c5433d", "name": "Commented-code block (5 lines) in src/inspect_evals/tac/prompts.py:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/tac/prompts.py:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-332b9fa80a68906c", "name": "Stub function `deescalate_time_passes` (body is just `pass`/`return`) \u2014 src/inspect_evals/gdm_stealth/solver/strategic_r", "shortDescription": {"text": "Stub function `deescalate_time_passes` (body is just `pass`/`return`) \u2014 src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/oversight.py:221"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b292e9fe71d475b1", "name": "Commented-code block (5 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/ge", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/generator.py:360"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cbf5d9dd5675c87a", "name": "Commented-code block (10 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/e", "shortDescription": {"text": "Commented-code block (10 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/examples.py:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6f6abbe8857a5da0", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenge", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/examples.py:308"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ee6f7609d6b229c", "name": "Commented-code block (7 lines) in src/inspect_evals/infinite_bench/infinite_bench.py:137", "shortDescription": {"text": "Commented-code block (7 lines) in src/inspect_evals/infinite_bench/infinite_bench.py:137"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b5eb1aa36f11c9f1", "name": "Commented-code block (6 lines) in src/inspect_evals/math/utils.py:254", "shortDescription": {"text": "Commented-code block (6 lines) in src/inspect_evals/math/utils.py:254"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f846654b5c48d510", "name": "Commented-code block (5 lines) in src/inspect_evals/tau2/banking/BankingAgentTools.py:235", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/tau2/banking/BankingAgentTools.py:235"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6fc0e009769f11cf", "name": "Legacy-named symbol `model_copy` in src/inspect_evals/tau2/telecom/TelecomUserTools.py:589", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/tau2/telecom/TelecomUserTools.py:589"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-898c69c8dd2599f3", "name": "Commented-code block (11 lines) in src/inspect_evals/mlrc_bench/mlrc_low_level_actions.py:341", "shortDescription": {"text": "Commented-code block (11 lines) in src/inspect_evals/mlrc_bench/mlrc_low_level_actions.py:341"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d27ecff2e45274e1", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/dataset.py:290", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/dataset.py:290"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-713644413ec2bd84", "name": "Commented-code block (5 lines) in src/inspect_evals/mlrc_bench/orig_benchmark_corrections/MLAgentBench/utils.py:38", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/mlrc_bench/orig_benchmark_corrections/MLAgentBench/utils.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ec176f1d65edc66", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/orig_benchmark_corrections/product-", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/orig_benchmark_corrections/product-rec/scripts/prepare.py:13"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb4d1e89eb05f7b9", "name": "Legacy-named symbol `model_copy` in src/inspect_evals/paperbench/score/task_node.py:168", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/paperbench/score/task_node.py:168"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa7d83fff50e4a7b", "name": "Stub function `get_grader_input` (body is just `pass`/`return`) \u2014 src/inspect_evals/agentic_misalignment/classifiers/cla", "shortDescription": {"text": "Stub function `get_grader_input` (body is just `pass`/`return`) \u2014 src/inspect_evals/agentic_misalignment/classifiers/classifier.py:20"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2acbbebb7a80020f", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/sparse_clone.py:34", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/sparse_clone.py:34"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a985a0136edcee1", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/container/code/config.py:111", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/container/code/config.py:111"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-39ec6603b45245f3", "name": "Legacy-named symbol `squad_v2` in src/inspect_evals/squad/squad.py:24", "shortDescription": {"text": "Legacy-named symbol `squad_v2` in src/inspect_evals/squad/squad.py:24"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f5fa05126e5cca9", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/core_bench/dataset.py:220", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/core_bench/dataset.py:220"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a881116af7697148", "name": "Legacy-named symbol `web_of_lies_v2` in src/inspect_evals/livebench/scorer.py:44", "shortDescription": {"text": "Legacy-named symbol `web_of_lies_v2` in src/inspect_evals/livebench/scorer.py:44"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28be2d0f04d36ff3", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybergym/task_template/executor/http_entrypoin", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybergym/task_template/executor/http_entrypoint.py:86"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3898770472e25ef", "name": "Commented-code block (6 lines) in src/inspect_evals/sad/download_data.py:49", "shortDescription": {"text": "Commented-code block (6 lines) in src/inspect_evals/sad/download_data.py:49"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-411d28643d4fd7a1", "name": "Commented-code block (5 lines) in src/inspect_evals/frontier_cs/scorer.py:441", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/frontier_cs/scorer.py:441"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-323dd4e9a7100759", "name": "Legacy-named symbol `remove_revoked_deprecated` in src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py:65", "shortDescription": {"text": "Legacy-named symbol `remove_revoked_deprecated` in src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py:65"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a68c182247d8d92", "name": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py:45"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ebebd6c65bb088f", "name": "Legacy-named symbol `secqa_v1` in src/inspect_evals/sec_qa/sec_qa.py:28", "shortDescription": {"text": "Legacy-named symbol `secqa_v1` in src/inspect_evals/sec_qa/sec_qa.py:28"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1aa0b491f33912f4", "name": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/sec_qa/__init__.py:6", "shortDescription": {"text": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/sec_qa/__init__.py:6"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-515a8e926db37ffb", "name": "Commented-code block (5 lines) in src/inspect_evals/vqa_rad/vqa_rad.py:11", "shortDescription": {"text": "Commented-code block (5 lines) in src/inspect_evals/vqa_rad/vqa_rad.py:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2810311b664e2ad0", "name": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py:2955", "shortDescription": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py:2955"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc1c94743e279fcb", "name": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py:68", "shortDescription": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py:68"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21c1b4140769d2f1", "name": "Legacy-named symbol `file_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/query_google_search.py:29", "shortDescription": {"text": "Legacy-named symbol `file_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/query_google_search.py:29"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-531be3d325ad99ae", "name": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py:871", "shortDescription": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py:871"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3173993dbaa1460", "name": "Legacy-named symbol `squad_v2` in src/inspect_evals/abstention_bench/recipe/abstention_datasets/squad.py:22", "shortDescription": {"text": "Legacy-named symbol `squad_v2` in src/inspect_evals/abstention_bench/recipe/abstention_datasets/squad.py:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ntools/create_markdown_files_from_trajectories.py:format_content_item, tools/create_markdown_files_from_trajectories.py:format_content\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ntools/run_autolint/checks/best_practices.py:visit_FunctionDef, tools/run_autolint/checks/best_practices.py:visit_FunctionDef, tools/run_autolint/checks/best_practices.py:visit_FunctionDef\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/inspect_evals/agentdojo/tools/cloud_drive_client.py:search_files_by_filename, src/inspect_evals/agentdojo/tools/cloud_drive_client.py:search_files, src/inspect_evals/agentdojo/tools/cloud_drive_client.py:search_files_by_filename, src/inspect_evals/agentdojo/tools/cloud_drive_client.py:search_files\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5177fe09702ad01d", "name": "Flask mutation route `index` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/vi", "shortDescription": {"text": "Flask mutation route `index` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:24"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f414d65b86d6f44", "name": "Flask mutation route `transaction` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/ima", "shortDescription": {"text": "Flask mutation route `transaction` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:39"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d6d69658a5d88ac2", "name": "Flask mutation route `join_glacier_club` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchan", "shortDescription": {"text": "Flask mutation route `join_glacier_club` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:50"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2de9c2f808b2dc65", "name": "Flask mutation route `signup` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/ap", "shortDescription": {"text": "Flask mutation route `signup` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:39"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86e168548c797fa3", "name": "Flask mutation route `login` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app", "shortDescription": {"text": "Flask mutation route `login` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:53"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4177326b10a008cd", "name": "Flask mutation route `create_post` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/s", "shortDescription": {"text": "Flask mutation route `create_post` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:76"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f0ca0f49e8d31c10", "name": "Flask mutation route `sample` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py:78", "shortDescription": {"text": "Flask mutation route `sample` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py:78"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6d3fc7dfc289aa0", "name": "Flask mutation route `_login` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/spray/app.py:27", "shortDescription": {"text": "Flask mutation route `_login` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/spray/app.py:27"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-286a3d648685b1e1", "name": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript", "shortDescription": {"text": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:45)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:45` calls `GET http://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/example.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2808f75af3afcdb5", "name": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript", "shortDescription": {"text": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:47)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:47` calls `GET http://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/example.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9aaeb6ae31adf58", "name": "Dangling fetch: GET http://localhostexample.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/j", "shortDescription": {"text": "Dangling fetch: GET http://localhostexample.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:51)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:51` calls `GET http://localhostexample.com` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhostexample.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5c7dffd3bafe83f", "name": "Dangling fetch: GET http://localhost (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/u", "shortDescription": {"text": "Dangling fetch: GET http://localhost (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:53)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:53` calls `GET http://localhost` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-054bd0c228b41f8b", "name": "Dangling fetch: GET http://localhost/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/", "shortDescription": {"text": "Dangling fetch: GET http://localhost/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:55)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:55` calls `GET http://localhost/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9991dd8fb0d8bcf", "name": "Dangling fetch: GET http://localhost:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascr", "shortDescription": {"text": "Dangling fetch: GET http://localhost:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:57)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:57` calls `GET http://localhost:1234` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:1234`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d098a37b0e6b358c", "name": "Dangling fetch: GET http://localhost:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep", "shortDescription": {"text": "Dangling fetch: GET http://localhost:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:59)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:59` calls `GET http://localhost:1234/abc.txt` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:1234/abc.txt`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9362164a0e27faad", "name": "Dangling fetch: GET http://127.0.0.1 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/u", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:61)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:61` calls `GET http://127.0.0.1` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5035b39baed917e4", "name": "Dangling fetch: GET http://127.0.0.1/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:63)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:63` calls `GET http://127.0.0.1/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3cf5af4e2c8abf45", "name": "Dangling fetch: GET http://127.0.0.1:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascr", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:65)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:65` calls `GET http://127.0.0.1:1234` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:1234`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6162638e20e6e32", "name": "Dangling fetch: GET http://127.0.0.1:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:67)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:67` calls `GET http://127.0.0.1:1234/abc.txt` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:1234/abc.txt`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d14044539e963a32", "name": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascrip", "shortDescription": {"text": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:70)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:70` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/example.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-231f8ab4a308fb34", "name": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascrip", "shortDescription": {"text": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:72)"}, "fullDescription": {"text": "`src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:72` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/example.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1a6d91f2236825bf", "name": "Unused endpoint: ANY /", "shortDescription": {"text": "Unused endpoint: ANY /"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/locktalk/images/victim/challenge/app/main/routes.py` declares `ANY /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b650b80894e23df5", "name": "Unused endpoint: ANY /get_ticket", "shortDescription": {"text": "Unused endpoint: ANY /get_ticket"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/locktalk/images/victim/challenge/app/api/routes.py` declares `ANY /get_ticket` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a59fb4e98ebdfef2", "name": "Unused endpoint: ANY /chat/<int:chat_id>", "shortDescription": {"text": "Unused endpoint: ANY /chat/<int:chat_id>"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/locktalk/images/victim/challenge/app/api/routes.py` declares `ANY /chat/<int:chat_id>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9cea1daacb0ec2b", "name": "Unused endpoint: ANY /flag", "shortDescription": {"text": "Unused endpoint: ANY /flag"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/locktalk/images/victim/challenge/app/api/routes.py` declares `ANY /flag` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ee6bd47c6725a59", "name": "Unused endpoint: ANY /assets/<path:path>", "shortDescription": {"text": "Unused endpoint: ANY /assets/<path:path>"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py` declares `ANY /assets/<path:path>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-815ec3b59e606520", "name": "Unused endpoint: ANY /api/data/fetch/<path:coin>", "shortDescription": {"text": "Unused endpoint: ANY /api/data/fetch/<path:coin>"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py` declares `ANY /api/data/fetch/<path:coin>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-daa6e0d339cc27df", "name": "Unused endpoint: ANY /signup", "shortDescription": {"text": "Unused endpoint: ANY /signup"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /signup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c7ad61ba1b23915", "name": "Unused endpoint: ANY /login", "shortDescription": {"text": "Unused endpoint: ANY /login"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9e449c3b9e73b73", "name": "Unused endpoint: ANY /logout", "shortDescription": {"text": "Unused endpoint: ANY /logout"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d010a82306d9adb6", "name": "Unused endpoint: ANY /create_post", "shortDescription": {"text": "Unused endpoint: ANY /create_post"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /create_post` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b0d3435692eb5fb", "name": "Unused endpoint: ANY /post/<user_id>/<post_id>", "shortDescription": {"text": "Unused endpoint: ANY /post/<user_id>/<post_id>"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /post/<user_id>/<post_id>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56f496cb925a89c9", "name": "Unused endpoint: ANY /<user_id>/.well-known/jwks.json", "shortDescription": {"text": "Unused endpoint: ANY /<user_id>/.well-known/jwks.json"}, "fullDescription": {"text": "`src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py` declares `ANY /<user_id>/.well-known/jwks.json` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ad2412d6d823e62", "name": "Unused endpoint: POST /submit-vulnerable", "shortDescription": {"text": "Unused endpoint: POST /submit-vulnerable"}, "fullDescription": {"text": "`src/inspect_evals/cybergym/task_template/controller/server.py` declares `POST /submit-vulnerable` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9c73b6982f2e697", "name": "Unused endpoint: POST /submit-fixed", "shortDescription": {"text": "Unused endpoint: POST /submit-fixed"}, "fullDescription": {"text": "`src/inspect_evals/cybergym/task_template/controller/server.py` declares `POST /submit-fixed` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56088cfe992e03f3", "name": "Unused endpoint: GET /search/{keyword}", "shortDescription": {"text": "Unused endpoint: GET /search/{keyword}"}, "fullDescription": {"text": "`src/inspect_evals/cti_realm/docker/mitre_service/mitre_api.py` declares `GET /search/{keyword}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d60220f3eae43c49", "name": "Unused endpoint: GET /tactic/{tactic}", "shortDescription": {"text": "Unused endpoint: GET /tactic/{tactic}"}, "fullDescription": {"text": "`src/inspect_evals/cti_realm/docker/mitre_service/mitre_api.py` declares `GET /tactic/{tactic}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4e853430d82968c", "name": "Unused endpoint: ANY /models", "shortDescription": {"text": "Unused endpoint: ANY /models"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py` declares `ANY /models` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa83bf989936ed65", "name": "Unused endpoint: ANY /sample", "shortDescription": {"text": "Unused endpoint: ANY /sample"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py` declares `ANY /sample` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-844f255ceef7cc7d", "name": "Unused endpoint: ANY /users", "shortDescription": {"text": "Unused endpoint: ANY /users"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py` declares `ANY /users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04cf0fab2af7b4ac", "name": "Unused endpoint: ANY /users/<login>", "shortDescription": {"text": "Unused endpoint: ANY /users/<login>"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py` declares `ANY /users/<login>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-baebe42c1606eaf4", "name": "Unused endpoint: ANY /home", "shortDescription": {"text": "Unused endpoint: ANY /home"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/idor/app.py` declares `ANY /home` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15238e18166634a2", "name": "Unused endpoint: ANY /accounts", "shortDescription": {"text": "Unused endpoint: ANY /accounts"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/idor/app.py` declares `ANY /accounts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d7ab2aac740b5f5", "name": "Unused endpoint: ANY /creds", "shortDescription": {"text": "Unused endpoint: ANY /creds"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/idor/app.py` declares `ANY /creds` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5120198814d972d", "name": "Unused endpoint: ANY /creds/<account_id>", "shortDescription": {"text": "Unused endpoint: ANY /creds/<account_id>"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/idor/app.py` declares `ANY /creds/<account_id>` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-224ffd18c69f8469", "name": "Unused endpoint: ANY /network", "shortDescription": {"text": "Unused endpoint: ANY /network"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py` declares `ANY /network` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cac8b4bfbbc69ef4", "name": "Unused endpoint: ANY /about", "shortDescription": {"text": "Unused endpoint: ANY /about"}, "fullDescription": {"text": "`src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py` declares `ANY /about` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21892"}, "properties": {"repository": "UKGovernmentBEIS/inspect_evals", "repoUrl": "https://github.com/UKGovernmentBEIS/inspect_evals", "branch": "main"}, "results": [{"ruleId": "scanner-e52420dae1ed9a21", "level": "note", "message": {"text": "Possibly dead Python function: set_multiline_output"}, "properties": {"repobilityId": "cf173c74b5a7f557", "scanner": "scanner-primary", "fingerprint": "e52420dae1ed9a21", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/register_submission/_github.py:137"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38ebb963be446856", "level": "note", "message": {"text": "Possibly dead Python function: smoke_test"}, "properties": {"repobilityId": "3c9072926d676ea0", "scanner": "scanner-primary", "fingerprint": "38ebb963be446856", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run_evals.py:215"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce3a45d67ff72d0a", "level": "note", "message": {"text": "Possibly dead Python function: run_eval_job"}, "properties": {"repobilityId": "fdafdc9e4b644aec", "scanner": "scanner-primary", "fingerprint": "ce3a45d67ff72d0a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run_evals.py:274"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-324af4ed96c2ba1b", "level": "note", "message": {"text": "Possibly dead Python function: replace_repo_root_path"}, "properties": {"repobilityId": "59a511ca35a5d28e", "scanner": "scanner-primary", "fingerprint": "324af4ed96c2ba1b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/generate_readmes.py:926"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf8a8a8f15377c4c", "level": "note", "message": {"text": "Possibly dead Python function: replace_windows_path"}, "properties": {"repobilityId": "5deebcba5c118690", "scanner": "scanner-primary", "fingerprint": "bf8a8a8f15377c4c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/generate_readmes.py:958"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0594d629900fb687", "level": "note", "message": {"text": "Possibly dead Python function: visit_Attribute"}, "properties": {"repobilityId": "91b4d72b3a087b4d", "scanner": "scanner-primary", "fingerprint": "0594d629900fb687", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/check_posix_code.py:94"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1c291ff3430f40a", "level": "note", "message": {"text": "Possibly dead Python function: visit_Import"}, "properties": {"repobilityId": "66cd6a2eba488b69", "scanner": "scanner-primary", "fingerprint": "f1c291ff3430f40a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/check_posix_code.py:106"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74fd98228a204fc7", "level": "note", "message": {"text": "Possibly dead Python function: visit_ImportFrom"}, "properties": {"repobilityId": "9943a88b95a56d70", "scanner": "scanner-primary", "fingerprint": "74fd98228a204fc7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/check_posix_code.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-203621450580bc9c", "level": "note", "message": {"text": "Possibly dead Python function: visit_Call"}, "properties": {"repobilityId": "83d516a32f6d02f1", "scanner": "scanner-primary", "fingerprint": "203621450580bc9c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/check_posix_code.py:128"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b66b027d185c4a55", "level": "note", "message": {"text": "Possibly dead Python function: is_sample_failed"}, "properties": {"repobilityId": "ee718b9b3fb15af9", "scanner": "scanner-primary", "fingerprint": "b66b027d185c4a55", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/create_markdown_files_from_trajectories.py:443"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08114a9920580ec0", "level": "note", "message": {"text": "Possibly dead Python function: visit_FunctionDef"}, "properties": {"repobilityId": "7a354842f176b228", "scanner": "scanner-primary", "fingerprint": "08114a9920580ec0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run_autolint/checks/best_practices.py:240"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24f8dd06d40b6e05", "level": "note", "message": {"text": "Possibly dead Python function: visit_Call"}, "properties": {"repobilityId": "83d516a32f6d02f1", "scanner": "scanner-primary", "fingerprint": "24f8dd06d40b6e05", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run_autolint/checks/best_practices.py:169"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-edeed654b89a64ef", "level": "note", "message": {"text": "Possibly dead Python function: normalized_levenshtein_similiarity_score"}, "properties": {"repobilityId": "1070468d87b13c1a", "scanner": "scanner-primary", "fingerprint": "edeed654b89a64ef", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/docvqa/docvqa.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5826483709891e15", "level": "note", "message": {"text": "Possibly dead Python function: construct_include"}, "properties": {"repobilityId": "e19ed300bfb56fab", "scanner": "scanner-primary", "fingerprint": "5826483709891e15", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/yaml_loader.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b379ba9546540f2d", "level": "note", "message": {"text": "Possibly dead Python function: quoted_presenter"}, "properties": {"repobilityId": "e344490c36e0f08c", "scanner": "scanner-primary", "fingerprint": "b379ba9546540f2d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/yaml_loader.py:67"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69f56f4426a80a11", "level": "note", "message": {"text": "Possibly dead Python function: day_has_conflicts"}, "properties": {"repobilityId": "ccdd61a63563c7b8", "scanner": "scanner-primary", "fingerprint": "69f56f4426a80a11", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/tools/calendar_client.py:104"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-368eb92297c11b31", "level": "note", "message": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "properties": {"repobilityId": "cd0c36464099d83e", "scanner": "scanner-primary", "fingerprint": "368eb92297c11b31", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/task_suites/workspace_plus/injection_tasks.py:30"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47f196eb1dd83c5f", "level": "note", "message": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "properties": {"repobilityId": "cd0c36464099d83e", "scanner": "scanner-primary", "fingerprint": "47f196eb1dd83c5f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/task_suites/travel/injection_tasks.py:408"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9ed1c480cabe7cc1", "level": "note", "message": {"text": "Possibly dead Python function: placeholder_ground_truth"}, "properties": {"repobilityId": "cd0c36464099d83e", "scanner": "scanner-primary", "fingerprint": "9ed1c480cabe7cc1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/task_suites/banking/injection_tasks.py:561"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94439dbcf6661e36", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.js:13"}, "properties": {"repobilityId": "d778523096a298fa", "scanner": "scanner-primary", "fingerprint": "94439dbcf6661e36", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-54ddf55b59be529d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:6"}, "properties": {"repobilityId": "752b48a5b5ed86c4", "scanner": "scanner-primary", "fingerprint": "54ddf55b59be529d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7d91abde95289684", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:55"}, "properties": {"repobilityId": "a6ff00482caa3525", "scanner": "scanner-primary", "fingerprint": "7d91abde95289684", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fa07d06c9e1868da", "level": "warning", "message": {"text": "Privileged port 256 in use"}, "properties": {"repobilityId": "0ec1f2d0c9e6da94", "scanner": "scanner-primary", "fingerprint": "fa07d06c9e1868da", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/agent_sandbox/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f2a4e9290a02787", "level": "warning", "message": {"text": "Privileged port 99 in use"}, "properties": {"repobilityId": "78349e9298b9fc49", "scanner": "scanner-primary", "fingerprint": "5f2a4e9290a02787", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/agent_sandbox/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f65aba8e2fc8d55", "level": "warning", "message": {"text": "Privileged port 151 in use"}, "properties": {"repobilityId": "416257cedd6a8fdd", "scanner": "scanner-primary", "fingerprint": "7f65aba8e2fc8d55", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/eval_me/resources/extract.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11903623043280c3", "level": "warning", "message": {"text": "Privileged port 1000 in use"}, "properties": {"repobilityId": "5ac9fc9372cfe169", "scanner": "scanner-primary", "fingerprint": "11903623043280c3", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mlrc_bench/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbfd3bb281b71ba0", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "dbfd3bb281b71ba0", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/eval.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6a6fba48bff9bb0", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "c6a6fba48bff9bb0", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/eval.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4d8d5b485fb22ac", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "b4d8d5b485fb22ac", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/eval.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a68a84b8bcff547e", "level": "warning", "message": {"text": "Privileged port 65 in use"}, "properties": {"repobilityId": "91f4542de5d09e32", "scanner": "scanner-primary", "fingerprint": "a68a84b8bcff547e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cti_realm/docker/compose.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72a81630d0d54eb8", "level": "warning", "message": {"text": "Privileged port 1001 in use"}, "properties": {"repobilityId": "eb126d41479634e4", "scanner": "scanner-primary", "fingerprint": "72a81630d0d54eb8", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cti_realm/docker/compose.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6082d7a6e3e6d9f", "level": "warning", "message": {"text": "Dockerfile runs as root: tests/utils/test_artifacts/Dockerfile"}, "properties": {"repobilityId": "904caa8a05010a43", "scanner": "scanner-primary", "fingerprint": "c6082d7a6e3e6d9f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8f4e5f07809e1e09", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "0e3d367fc031f69d", "scanner": "scanner-primary", "fingerprint": "8f4e5f07809e1e09", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/utils/test_artifacts/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-043112fc1aa10b41", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/vimgolf_challenges/Dockerfile"}, "properties": {"repobilityId": "2dcd0b15d94e29d4", "scanner": "scanner-primary", "fingerprint": "043112fc1aa10b41", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ea056e073e8c45ee", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "35b967b044596971", "scanner": "scanner-primary", "fingerprint": "ea056e073e8c45ee", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vimgolf_challenges/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-863ce3c1d4d102be", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-bookworm"}, "properties": {"repobilityId": "a8cb2159f3252692", "scanner": "scanner-primary", "fingerprint": "863ce3c1d4d102be", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdpval/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-c8c92754ff91848a", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/class_eval/Dockerfile"}, "properties": {"repobilityId": "af048ae9b8a80965", "scanner": "scanner-primary", "fingerprint": "c8c92754ff91848a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-898c46835b6011db", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim"}, "properties": {"repobilityId": "b2bef8b13f756cd9", "scanner": "scanner-primary", "fingerprint": "898c46835b6011db", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/class_eval/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-d63e3ddfcd1fbe0d", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/kernelbench/Dockerfile"}, "properties": {"repobilityId": "9e6d360245bd0c10", "scanner": "scanner-primary", "fingerprint": "d63e3ddfcd1fbe0d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ce11d886d02fb7c5", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04"}, "properties": {"repobilityId": "a93dfe256a613683", "scanner": "scanner-primary", "fingerprint": "ce11d886d02fb7c5", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/kernelbench/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4502ed2a9b66df7f", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "196df2ea3a8056c5", "scanner": "scanner-primary", "fingerprint": "4502ed2a9b66df7f", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/kernelbench/Dockerfile"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-e7a85a0f8604560d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "58123e96e93b6a73", "scanner": "scanner-primary", "fingerprint": "e7a85a0f8604560d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scbench/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-7c496aedcf4b2a68", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "652c000d025497c2", "scanner": "scanner-primary", "fingerprint": "7c496aedcf4b2a68", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scbench/Dockerfile"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-7c496aedcf4b2a68", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "f9d8a7d19e861bde", "scanner": "scanner-primary", "fingerprint": "7c496aedcf4b2a68", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scbench/Dockerfile"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-d458884b8354ab42", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/agent_sandbox/Dockerfile"}, "properties": {"repobilityId": "5553c720a05582d3", "scanner": "scanner-primary", "fingerprint": "d458884b8354ab42", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-06167ac32e9e3391", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/locktalk/images/victim/Dockerfile"}, "properties": {"repobilityId": "fc1ae10ae9585a8e", "scanner": "scanner-primary", "fingerprint": "06167ac32e9e3391", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-60c1bb9a01147cca", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:edge"}, "properties": {"repobilityId": "8be26e2b5d2ba9cc", "scanner": "scanner-primary", "fingerprint": "60c1bb9a01147cca", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/locktalk/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcdd68999841c07f", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/Dockerfile"}, "properties": {"repobilityId": "2f8ce5799ff7119a", "scanner": "scanner-primary", "fingerprint": "fcdd68999841c07f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ac4a9e5477553d24", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-alpine"}, "properties": {"repobilityId": "68a13c8718ea2c3e", "scanner": "scanner-primary", "fingerprint": "ac4a9e5477553d24", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e62833befc21ca9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gradle:7.5-jdk11"}, "properties": {"repobilityId": "23b414d5a8249f55", "scanner": "scanner-primary", "fingerprint": "2e62833befc21ca9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/frog_waf/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-038287db1b9288e6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: openjdk:11-slim"}, "properties": {"repobilityId": "ec3b6261ec0a0161", "scanner": "scanner-primary", "fingerprint": "038287db1b9288e6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/frog_waf/images/victim/Dockerfile"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-df58468e5d3d395b", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/skilift/images/victim/Dockerfile"}, "properties": {"repobilityId": "eb0a2595b69618a3", "scanner": "scanner-primary", "fingerprint": "df58468e5d3d395b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cacc8c38c29b3b64", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "989738be863bcdc5", "scanner": "scanner-primary", "fingerprint": "cacc8c38c29b3b64", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/skilift/images/victim/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-cacc8c38c29b3b64", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "41179f4ad3033f04", "scanner": "scanner-primary", "fingerprint": "cacc8c38c29b3b64", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/skilift/images/victim/Dockerfile"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-b5c9088ccafc8d4a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.8-slim-buster"}, "properties": {"repobilityId": "6002ae86c657c4f7", "scanner": "scanner-primary", "fingerprint": "b5c9088ccafc8d4a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/were_pickle_phreaks_revenge/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b689b930aabad242", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "7da5ea3a40ae375d", "scanner": "scanner-primary", "fingerprint": "b689b930aabad242", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/randsubware/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d953ff9754287dee", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisier_crc/images/victim/Dockerfile"}, "properties": {"repobilityId": "aee1e80ab9488457", "scanner": "scanner-primary", "fingerprint": "d953ff9754287dee", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2aa1bbd756a99e21", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "cc8d3b1b5d6bf6a5", "scanner": "scanner-primary", "fingerprint": "2aa1bbd756a99e21", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/noisier_crc/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7aa5352294049e2e", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/failproof/images/victim/Dockerfile"}, "properties": {"repobilityId": "f3426f8e6916cc1b", "scanner": "scanner-primary", "fingerprint": "7aa5352294049e2e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2af9eaf41efe0076", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "4f42d933b004ce6e", "scanner": "scanner-primary", "fingerprint": "2af9eaf41efe0076", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/failproof/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43915aa041b9a99f", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/robust_cbc/images/victim/Dockerfile"}, "properties": {"repobilityId": "290fa17d0300428c", "scanner": "scanner-primary", "fingerprint": "43915aa041b9a99f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-118e8897278cbc66", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:focal"}, "properties": {"repobilityId": "708cae772369b782", "scanner": "scanner-primary", "fingerprint": "118e8897278cbc66", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/robust_cbc/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ef1f4787c0d1b74", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/flag_command/images/victim/Dockerfile"}, "properties": {"repobilityId": "ef01f05a646eab2b", "scanner": "scanner-primary", "fingerprint": "5ef1f4787c0d1b74", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-703fc204c1809420", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-alpine"}, "properties": {"repobilityId": "66346f126d25d955", "scanner": "scanner-primary", "fingerprint": "703fc204c1809420", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/flag_command/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-908a3911be29f719", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/back_to_the_past/images/victim/Dockerfile"}, "properties": {"repobilityId": "99ece53f20c266f2", "scanner": "scanner-primary", "fingerprint": "908a3911be29f719", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a2eff839ba30305e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.23.2"}, "properties": {"repobilityId": "d16644c57f46873a", "scanner": "scanner-primary", "fingerprint": "a2eff839ba30305e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/back_to_the_past/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-531fb75ccc751b57", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/diffecient/images/victim/Dockerfile"}, "properties": {"repobilityId": "2a9674464ebe6d7d", "scanner": "scanner-primary", "fingerprint": "531fb75ccc751b57", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8ceb305c4b6d4b22", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "fadf61d2d43fb16a", "scanner": "scanner-primary", "fingerprint": "8ceb305c4b6d4b22", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/diffecient/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0250b1da2016bdb3", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/shuffled_aes/images/victim/Dockerfile"}, "properties": {"repobilityId": "eb916546083fb92e", "scanner": "scanner-primary", "fingerprint": "0250b1da2016bdb3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f0ed1c4a85a42f89", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: rust:alpine"}, "properties": {"repobilityId": "e95a4b155852388e", "scanner": "scanner-primary", "fingerprint": "f0ed1c4a85a42f89", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/shuffled_aes/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07694c40bf7fb158", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: alpine"}, "properties": {"repobilityId": "8d47ac0c446bf0a7", "scanner": "scanner-primary", "fingerprint": "07694c40bf7fb158", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/shuffled_aes/images/victim/Dockerfile"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-254bb7473722c2fb", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "properties": {"repobilityId": "48bffc6eab647b02", "scanner": "scanner-primary", "fingerprint": "254bb7473722c2fb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/delulu/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f677e63cc2f2a528", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/just_another_pickle_jail/images/victim/Dockerfile"}, "properties": {"repobilityId": "722b2b0aa3a634c3", "scanner": "scanner-primary", "fingerprint": "f677e63cc2f2a528", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-efbf5f80633cdb61", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11"}, "properties": {"repobilityId": "a6a8bc35c5415f8c", "scanner": "scanner-primary", "fingerprint": "efbf5f80633cdb61", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/just_another_pickle_jail/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee8da7162400a766", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/network_tools/images/victim/Dockerfile"}, "properties": {"repobilityId": "83cec81db8241839", "scanner": "scanner-primary", "fingerprint": "ee8da7162400a766", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-00254693827878e4", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "54e79cb10c4f8f19", "scanner": "scanner-primary", "fingerprint": "00254693827878e4", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/network_tools/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12c17367a4c39b1a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "801d35e345e2aa70", "scanner": "scanner-primary", "fingerprint": "12c17367a4c39b1a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/walking_to_the_sea_side/images/walking-to-the-sea-side/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff214b8a61b65486", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/labyrinth_linguist/images/victim/Dockerfile"}, "properties": {"repobilityId": "3faa6529645b035b", "scanner": "scanner-primary", "fingerprint": "ff214b8a61b65486", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-417bf68d05725adb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: maven:3.8.5-openjdk-11-slim"}, "properties": {"repobilityId": "2fa1c5e32434cd96", "scanner": "scanner-primary", "fingerprint": "417bf68d05725adb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/labyrinth_linguist/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b2ca7f0049e32c94", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/avatar/images/victim/Dockerfile"}, "properties": {"repobilityId": "6c9707518a4087c7", "scanner": "scanner-primary", "fingerprint": "b2ca7f0049e32c94", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-80ac912524450d93", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-alpine"}, "properties": {"repobilityId": "8266233a697dba68", "scanner": "scanner-primary", "fingerprint": "80ac912524450d93", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/avatar/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-637296affc5f9e4d", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/nginx/Dockerfile"}, "properties": {"repobilityId": "3b8d84141b072961", "scanner": "scanner-primary", "fingerprint": "637296affc5f9e4d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-226db4228fbab5d4", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.18.0"}, "properties": {"repobilityId": "79627efbf170043f", "scanner": "scanner-primary", "fingerprint": "226db4228fbab5d4", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/nginx/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce07e25bf444b8e2", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/rcache/Dockerfile"}, "properties": {"repobilityId": "a2316f226a7d18af", "scanner": "scanner-primary", "fingerprint": "ce07e25bf444b8e2", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-27739f574d2813b9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.20"}, "properties": {"repobilityId": "175e07d164121151", "scanner": "scanner-primary", "fingerprint": "27739f574d2813b9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/rcache/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81297f301790311f", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/chunky/images/blog/Dockerfile"}, "properties": {"repobilityId": "0a93e62e0009a91c", "scanner": "scanner-primary", "fingerprint": "81297f301790311f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-725a675b4f3ffb7b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "dcc0575dd52a3024", "scanner": "scanner-primary", "fingerprint": "725a675b4f3ffb7b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/blog/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02f5bbe14bf3ae1c", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/noisy_crc/images/victim/Dockerfile"}, "properties": {"repobilityId": "cb0887afcda7be0f", "scanner": "scanner-primary", "fingerprint": "02f5bbe14bf3ae1c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c63a6d1926b33864", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "43c9444a62beaff4", "scanner": "scanner-primary", "fingerprint": "c63a6d1926b33864", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/noisy_crc/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1077c13830b84ba4", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybench/challenges/ezmaze/images/victim/Dockerfile"}, "properties": {"repobilityId": "4be6639f974fa5aa", "scanner": "scanner-primary", "fingerprint": "1077c13830b84ba4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7146bad042652d06", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.9-slim-buster"}, "properties": {"repobilityId": "60d606ec578dc842", "scanner": "scanner-primary", "fingerprint": "7146bad042652d06", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/ezmaze/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c11eb34b549baf4e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim-buster"}, "properties": {"repobilityId": "65ba5f83d482151f", "scanner": "scanner-primary", "fingerprint": "c11eb34b549baf4e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/unbreakable/images/victim/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea784c2eed88f806", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/evasion_debugger/Dockerfile"}, "properties": {"repobilityId": "b3667ca7a74475be", "scanner": "scanner-primary", "fingerprint": "ea784c2eed88f806", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f35432246bb51fbc", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14"}, "properties": {"repobilityId": "a0165060be4284c8", "scanner": "scanner-primary", "fingerprint": "f35432246bb51fbc", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/evasion_debugger/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88e739948cfc4a45", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/web_navigation/Dockerfile"}, "properties": {"repobilityId": "6f8d423e5bed028b", "scanner": "scanner-primary", "fingerprint": "88e739948cfc4a45", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-019b17cd5b7fb43a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "7a35b505f0c537a6", "scanner": "scanner-primary", "fingerprint": "019b17cd5b7fb43a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/web_navigation/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b9d0d12928960ef", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/resourcedevelopment_signing/Dockerfile"}, "properties": {"repobilityId": "5b6ef7d317250e78", "scanner": "scanner-primary", "fingerprint": "9b9d0d12928960ef", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3f268bb48434660d", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "properties": {"repobilityId": "16026bbb6ab42072", "scanner": "scanner-primary", "fingerprint": "3f268bb48434660d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/resourcedevelopment_signing/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf49f796be5416bb", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/python_repl_factorial10/Dockerfile"}, "properties": {"repobilityId": "651bcf2f3391b568", "scanner": "scanner-primary", "fingerprint": "bf49f796be5416bb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1731701b34df0c39", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "f941db61eb479bc1", "scanner": "scanner-primary", "fingerprint": "1731701b34df0c39", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/python_repl_factorial10/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94adee667a3a8263", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "4908cc7b186e5053", "scanner": "scanner-primary", "fingerprint": "94adee667a3a8263", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/escalation_setuid/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d492280622c1408", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/find_all_users/Dockerfile"}, "properties": {"repobilityId": "e47d3903ed12fd69", "scanner": "scanner-primary", "fingerprint": "6d492280622c1408", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6e718ce9e3105a1a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.14"}, "properties": {"repobilityId": "0d1ec38ee7ba7aa2", "scanner": "scanner-primary", "fingerprint": "6e718ce9e3105a1a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/find_all_users/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02b417343243b7a1", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/binpwn_gdb_repl/Dockerfile"}, "properties": {"repobilityId": "18412a70e2eb88aa", "scanner": "scanner-primary", "fingerprint": "02b417343243b7a1", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-668793ad4a6dfd8d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "5056f1dfa96d9a6f", "scanner": "scanner-primary", "fingerprint": "668793ad4a6dfd8d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/binpwn_gdb_repl/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eda1f1b8a105b2c9", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/impact_defacing/Dockerfile"}, "properties": {"repobilityId": "82ac3e01f3701eff", "scanner": "scanner-primary", "fingerprint": "eda1f1b8a105b2c9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5ed406b785d4c771", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "d4e9110df16a4011", "scanner": "scanner-primary", "fingerprint": "5ed406b785d4c771", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/impact_defacing/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a43ba3285c0c7c4", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/nmap/Dockerfile"}, "properties": {"repobilityId": "8ad34bdabae9cf08", "scanner": "scanner-primary", "fingerprint": "6a43ba3285c0c7c4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d527e8e353ddf9e7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "144e715a0fec3a97", "scanner": "scanner-primary", "fingerprint": "d527e8e353ddf9e7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/nmap/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71019dc7a1355316", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/threecb/task_configs/initialaccess_mail_link/Dockerfile"}, "properties": {"repobilityId": "1c5c3fef29a18f99", "scanner": "scanner-primary", "fingerprint": "71019dc7a1355316", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9037606df472f8eb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:stable"}, "properties": {"repobilityId": "d83f63aacbdb3890", "scanner": "scanner-primary", "fingerprint": "9037606df472f8eb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/initialaccess_mail_link/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7b00f3d557c8952", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: alpine:latest"}, "properties": {"repobilityId": "13409965f194d248", "scanner": "scanner-primary", "fingerprint": "d7b00f3d557c8952", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/task_configs/null_writing/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed9e1beedd47ab42", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/bigcodebench/Dockerfile"}, "properties": {"repobilityId": "5ed80dffe9bf75b2", "scanner": "scanner-primary", "fingerprint": "ed9e1beedd47ab42", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-4b6b2c61cef498e9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "77cc76710c1862fc", "scanner": "scanner-primary", "fingerprint": "4b6b2c61cef498e9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/bigcodebench/Dockerfile"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-315cdd45bc4eb55a", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_stealth/Dockerfile"}, "properties": {"repobilityId": "e1c2e8e1cbc3b70d", "scanner": "scanner-primary", "fingerprint": "315cdd45bc4eb55a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6749a3375952c5ac", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: ubuntu:latest"}, "properties": {"repobilityId": "2f713e815e391f33", "scanner": "scanner-primary", "fingerprint": "6749a3375952c5ac", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_stealth/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-888ad577e6dd65d9", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/ifevalcode/Dockerfile"}, "properties": {"repobilityId": "6c745658846a4679", "scanner": "scanner-primary", "fingerprint": "888ad577e6dd65d9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-998d67417f93e69b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "0974189050e44212", "scanner": "scanner-primary", "fingerprint": "998d67417f93e69b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ifevalcode/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6fe68142ca7e0db", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cyberseceval_2/vulnerability_exploit/Dockerfile"}, "properties": {"repobilityId": "dafa243ff81b88db", "scanner": "scanner-primary", "fingerprint": "f6fe68142ca7e0db", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-02ca5f810fa8edfc", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10"}, "properties": {"repobilityId": "e649f6a19bdac107", "scanner": "scanner-primary", "fingerprint": "02ca5f810fa8edfc", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_2/vulnerability_exploit/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-9220c45d57569a01", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/mlrc_bench/Dockerfile"}, "properties": {"repobilityId": "378d0881423170a6", "scanner": "scanner-primary", "fingerprint": "9220c45d57569a01", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d34575dd7b32c5aa", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: mambaorg/micromamba:jammy"}, "properties": {"repobilityId": "1e1d07a1aa8336c1", "scanner": "scanner-primary", "fingerprint": "d34575dd7b32c5aa", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mlrc_bench/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-7ac6b28baba95a82", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/paperbench/images/Dockerfile"}, "properties": {"repobilityId": "2e04b02735d917c6", "scanner": "scanner-primary", "fingerprint": "7ac6b28baba95a82", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f3fcda8929abee0d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12"}, "properties": {"repobilityId": "e3a3d970c216eb71", "scanner": "scanner-primary", "fingerprint": "f3fcda8929abee0d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/paperbench/images/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d492cfc5ae348e2b", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/compute_eval/Dockerfile"}, "properties": {"repobilityId": "bdd142a2ee125074", "scanner": "scanner-primary", "fingerprint": "d492cfc5ae348e2b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9ef99d79bca8fb89", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nvidia/cuda:12.9.0-devel-ubuntu24.04"}, "properties": {"repobilityId": "3a608c318ee15bc5", "scanner": "scanner-primary", "fingerprint": "9ef99d79bca8fb89", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/compute_eval/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6282a87fcf494abe", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/osworld/container/Dockerfile"}, "properties": {"repobilityId": "d41f32407d197053", "scanner": "scanner-primary", "fingerprint": "6282a87fcf494abe", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1f3eb9cbad357895", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-computer-tool:latest"}, "properties": {"repobilityId": "b8eceb1f75dc90dd", "scanner": "scanner-primary", "fingerprint": "1f3eb9cbad357895", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/osworld/container/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cbbd4996b355f642", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/ipi_coding_agent/docker/Dockerfile"}, "properties": {"repobilityId": "94ab764cfd5b049d", "scanner": "scanner-primary", "fingerprint": "cbbd4996b355f642", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-21335b28e916359f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-bookworm"}, "properties": {"repobilityId": "482e0413a0284ade", "scanner": "scanner-primary", "fingerprint": "21335b28e916359f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ipi_coding_agent/docker/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff952f461ee2ac94", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/core_bench/Dockerfile"}, "properties": {"repobilityId": "dda30c6aa5358526", "scanner": "scanner-primary", "fingerprint": "ff952f461ee2ac94", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d2c123ccc108530c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: cruizba/ubuntu-dind:focal-latest"}, "properties": {"repobilityId": "489fa12f6ca333cf", "scanner": "scanner-primary", "fingerprint": "d2c123ccc108530c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/core_bench/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5555f819024f9884", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_watch_video/Dockerfile"}, "properties": {"repobilityId": "ba4f4f348ed93a27", "scanner": "scanner-primary", "fingerprint": "5555f819024f9884", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-74654d48aac9c931", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "38c837948bfdd4c8", "scanner": "scanner-primary", "fingerprint": "74654d48aac9c931", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/admin_watch_video/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfc345303eaa32a5", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_stock_analysis_slides/Dockerfile"}, "properties": {"repobilityId": "4949ca996d7f6cf1", "scanner": "scanner-primary", "fingerprint": "dfc345303eaa32a5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-80300f413f26b8af", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "a9a66fe1d41aece8", "scanner": "scanner-primary", "fingerprint": "80300f413f26b8af", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_stock_analysis_slides/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c1ac56797fa9a89", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_create_sqlite_database/Dockerfile"}, "properties": {"repobilityId": "95b063fbfda01b16", "scanner": "scanner-primary", "fingerprint": "6c1ac56797fa9a89", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3f3261719125f557", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "5e6f33c280474531", "scanner": "scanner-primary", "fingerprint": "3f3261719125f557", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/sde_create_sqlite_database/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8605e1a682efb69a", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_invoice_matching/Dockerfile"}, "properties": {"repobilityId": "24bd828777702576", "scanner": "scanner-primary", "fingerprint": "8605e1a682efb69a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f154507545d42a02", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "6c572a56ea623da3", "scanner": "scanner-primary", "fingerprint": "f154507545d42a02", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/finance_invoice_matching/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b032b4c70a1a254", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_coffee_shop_database_management/Dockerfile"}, "properties": {"repobilityId": "e6b92cf4a6a94605", "scanner": "scanner-primary", "fingerprint": "6b032b4c70a1a254", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-82c390c2af3ea740", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "bd51626dcadc211a", "scanner": "scanner-primary", "fingerprint": "82c390c2af3ea740", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_coffee_shop_database_management/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07686856ada83e58", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_translate_sales_chat/Dockerfile"}, "properties": {"repobilityId": "2b5ac54951eb6095", "scanner": "scanner-primary", "fingerprint": "07686856ada83e58", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e27ac3c461481698", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "6bfa33940689f589", "scanner": "scanner-primary", "fingerprint": "e27ac3c461481698", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/admin_translate_sales_chat/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f31abefdbf57bdf5", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_visualize_data_in_pie_and_bar_chart/Dockerfile"}, "properties": {"repobilityId": "2f641d2066ff2047", "scanner": "scanner-primary", "fingerprint": "f31abefdbf57bdf5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-541f229ab3454c5b", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "990e9ef21f81dd85", "scanner": "scanner-primary", "fingerprint": "541f229ab3454c5b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_visualize_data_in_pie_and_bar_chart/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af027195097bcd98", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_create_employee_manual/Dockerfile"}, "properties": {"repobilityId": "6aeac13dfd771cc7", "scanner": "scanner-primary", "fingerprint": "af027195097bcd98", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2f5da1e8db08e6bd", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "2ca041daeb733672", "scanner": "scanner-primary", "fingerprint": "2f5da1e8db08e6bd", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_create_employee_manual/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83f887519b03faa8", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_predictive_modeling/Dockerfile"}, "properties": {"repobilityId": "20c3497f2b955877", "scanner": "scanner-primary", "fingerprint": "83f887519b03faa8", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9ee6488448ffd8f0", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "4ee1affcabf64a60", "scanner": "scanner-primary", "fingerprint": "9ee6488448ffd8f0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_predictive_modeling/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d837f481cd722fcf", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_budget_variance/Dockerfile"}, "properties": {"repobilityId": "c5ca1f115f86b5bf", "scanner": "scanner-primary", "fingerprint": "d837f481cd722fcf", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-282c05c734ca06e1", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "0b7adaef33c028f9", "scanner": "scanner-primary", "fingerprint": "282c05c734ca06e1", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/finance_budget_variance/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1fc2e61eda974ab6", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_owncloud_file_reading/Dockerfile"}, "properties": {"repobilityId": "385abdfda6369a70", "scanner": "scanner-primary", "fingerprint": "1fc2e61eda974ab6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-36910ebad7c527a7", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "2f382e425014a07d", "scanner": "scanner-primary", "fingerprint": "36910ebad7c527a7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/test_owncloud_file_reading/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48cbe95d2446d3c4", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/Dockerfile"}, "properties": {"repobilityId": "b2a6ce47339d099c", "scanner": "scanner-primary", "fingerprint": "48cbe95d2446d3c4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-18d5eb68aee1cfae", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "a769a39234cc59f5", "scanner": "scanner-primary", "fingerprint": "18d5eb68aee1cfae", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95ccea8ffa4ab63c", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_generate_gradcam/Dockerfile"}, "properties": {"repobilityId": "eee2d5eb380f83d9", "scanner": "scanner-primary", "fingerprint": "95ccea8ffa4ab63c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-0e00a7eb29068998", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "8313c417c00ba982", "scanner": "scanner-primary", "fingerprint": "0e00a7eb29068998", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ml_generate_gradcam/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0aba037295daf40e", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_mass_forms_filling/Dockerfile"}, "properties": {"repobilityId": "bf18c2aa4168dfb8", "scanner": "scanner-primary", "fingerprint": "0aba037295daf40e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-bcc654e217de5a3c", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "c06162d7bf1b73c3", "scanner": "scanner-primary", "fingerprint": "bcc654e217de5a3c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/admin_mass_forms_filling/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85aa55b446d73cdb", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_install_permissions/Dockerfile"}, "properties": {"repobilityId": "591bfbaf56a4f4d0", "scanner": "scanner-primary", "fingerprint": "85aa55b446d73cdb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6f650f01099555b1", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "079d8894d3cef2f7", "scanner": "scanner-primary", "fingerprint": "6f650f01099555b1", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/test_install_permissions/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2f4ccb6091f9ae1", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_copy_table_from_pdf_to_xlsx/Dockerfile"}, "properties": {"repobilityId": "a1ff987b20e5b054", "scanner": "scanner-primary", "fingerprint": "f2f4ccb6091f9ae1", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-12df0d96fcf332d3", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "3dcd09311583ac0a", "scanner": "scanner-primary", "fingerprint": "12df0d96fcf332d3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/sde_copy_table_from_pdf_to_xlsx/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-297f96b05abe1b6e", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_answer_numerical_data_question/Dockerfile"}, "properties": {"repobilityId": "409ea9dba1686e2c", "scanner": "scanner-primary", "fingerprint": "297f96b05abe1b6e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-48854f0d825779f9", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "7c28a44adaa5e570", "scanner": "scanner-primary", "fingerprint": "48854f0d825779f9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_answer_numerical_data_question/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7dcb8412da99dfc0", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_nonqualified_bill_ask_for_reimburse/Dockerfile"}, "properties": {"repobilityId": "4829ad47cc58016e", "scanner": "scanner-primary", "fingerprint": "7dcb8412da99dfc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-fa4cf88f9f0dfb7b", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "00ee428a0e6248c3", "scanner": "scanner-primary", "fingerprint": "fa4cf88f9f0dfb7b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/finance_nonqualified_bill_ask_for_reimburse/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd53a4cb7c795c1d", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/Dockerfile"}, "properties": {"repobilityId": "fd609ca7f4c15b1e", "scanner": "scanner-primary", "fingerprint": "bd53a4cb7c795c1d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cae23b71c9e48657", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "a136c6ee6d12bbf5", "scanner": "scanner-primary", "fingerprint": "cae23b71c9e48657", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bc45edb906db08f", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_one_day/Dockerfile"}, "properties": {"repobilityId": "2de0465e888118b6", "scanner": "scanner-primary", "fingerprint": "4bc45edb906db08f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-77524d5010dc5e6d", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "0dc9b7064d7d993b", "scanner": "scanner-primary", "fingerprint": "77524d5010dc5e6d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_one_day/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51f989f1fd8f563f", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days_department/Dockerfile"}, "properties": {"repobilityId": "be112824b113c52c", "scanner": "scanner-primary", "fingerprint": "51f989f1fd8f563f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8025e7c46a82489f", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "6063e8ccf0250a30", "scanner": "scanner-primary", "fingerprint": "8025e7c46a82489f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_check_attendance_multiple_days_department/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45ba77d831f767ed", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_organize_talent_info/Dockerfile"}, "properties": {"repobilityId": "6741a2d742cbacc4", "scanner": "scanner-primary", "fingerprint": "45ba77d831f767ed", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-410426479e501a3b", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "e393d7b96cd77020", "scanner": "scanner-primary", "fingerprint": "410426479e501a3b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_organize_talent_info/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0c1291d22c8541d", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_basic_llm_judge/Dockerfile"}, "properties": {"repobilityId": "6dfac9d838da48e9", "scanner": "scanner-primary", "fingerprint": "f0c1291d22c8541d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-bdb9455c70c52264", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "7540d1b009a9be35", "scanner": "scanner-primary", "fingerprint": "bdb9455c70c52264", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/test_basic_llm_judge/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d56c913ff9c3946", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_remove_pages_pdf/Dockerfile"}, "properties": {"repobilityId": "3f9323634f8e8f17", "scanner": "scanner-primary", "fingerprint": "2d56c913ff9c3946", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-51ac7f6687b24e80", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "ea15f5f70b186d7c", "scanner": "scanner-primary", "fingerprint": "51ac7f6687b24e80", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/admin_remove_pages_pdf/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d577b36e7aab86ae", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_fix_table_values_and_missing_answers/Dockerfile"}, "properties": {"repobilityId": "d701896d64a9711c", "scanner": "scanner-primary", "fingerprint": "d577b36e7aab86ae", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7dc48471341dc9b2", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "9288002d27d43fee", "scanner": "scanner-primary", "fingerprint": "7dc48471341dc9b2", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_fix_table_values_and_missing_answers/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f65f3c1b2b70026", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ml_grade_exam/Dockerfile"}, "properties": {"repobilityId": "b4dcb1d165a7d44e", "scanner": "scanner-primary", "fingerprint": "7f65f3c1b2b70026", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c927322726369480", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "743ef6c8aadcb431", "scanner": "scanner-primary", "fingerprint": "c927322726369480", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ml_grade_exam/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-428304fe21fec462", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/Dockerfile"}, "properties": {"repobilityId": "97f12ebba6e63ae9", "scanner": "scanner-primary", "fingerprint": "428304fe21fec462", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-fe0f2df41fe50f3a", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "4ba2bf49e391ebc3", "scanner": "scanner-primary", "fingerprint": "fe0f2df41fe50f3a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e95cd609adb50c67", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_new_grad_job_description/Dockerfile"}, "properties": {"repobilityId": "43a5b17342483f25", "scanner": "scanner-primary", "fingerprint": "e95cd609adb50c67", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b0c5bf582010a8af", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "cea5161f268b9331", "scanner": "scanner-primary", "fingerprint": "b0c5bf582010a8af", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_new_grad_job_description/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7f4211eb006a99c", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_find_meeting_spreadsheet/Dockerfile"}, "properties": {"repobilityId": "f2c1f51a486731d9", "scanner": "scanner-primary", "fingerprint": "b7f4211eb006a99c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-69ba523d8c03dd43", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "a1d83798c9b09c55", "scanner": "scanner-primary", "fingerprint": "69ba523d8c03dd43", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_find_meeting_spreadsheet/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c87a3d78e883ff91", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_sql_exercise/Dockerfile"}, "properties": {"repobilityId": "0d7d04491524b4fa", "scanner": "scanner-primary", "fingerprint": "c87a3d78e883ff91", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-02d5a9c4fe1d5b3c", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "5b0cf93a32bd1af9", "scanner": "scanner-primary", "fingerprint": "02d5a9c4fe1d5b3c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_sql_exercise/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8c95521ba5995a9", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/ds_format_excel_sheets/Dockerfile"}, "properties": {"repobilityId": "3545ce639316e27c", "scanner": "scanner-primary", "fingerprint": "b8c95521ba5995a9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-4472bd23833d171f", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "244bfe66f166abbc", "scanner": "scanner-primary", "fingerprint": "4472bd23833d171f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/ds_format_excel_sheets/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3411a33302fce853", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/admin_make_spreadsheet/Dockerfile"}, "properties": {"repobilityId": "685cb7ccc4e29602", "scanner": "scanner-primary", "fingerprint": "3411a33302fce853", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5a89fc3b60c12c16", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "545eabb1a9966c72", "scanner": "scanner-primary", "fingerprint": "5a89fc3b60c12c16", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/admin_make_spreadsheet/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51eadfef5355ce79", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/test_evaluator_helpers/Dockerfile"}, "properties": {"repobilityId": "2f1b190b0fdc64a7", "scanner": "scanner-primary", "fingerprint": "51eadfef5355ce79", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-22a41b33d630ced7", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "064a6ee889d38875", "scanner": "scanner-primary", "fingerprint": "22a41b33d630ced7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/test_evaluator_helpers/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f485a08e22396343", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/research_answer_questions_on_paper/Dockerfile"}, "properties": {"repobilityId": "6814d89f47492ec6", "scanner": "scanner-primary", "fingerprint": "f485a08e22396343", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cdd24dabd86a0f5a", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "79d025697a8a6e25", "scanner": "scanner-primary", "fingerprint": "cdd24dabd86a0f5a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/research_answer_questions_on_paper/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28bcd7ae289a25cf", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_expense_validation/Dockerfile"}, "properties": {"repobilityId": "f2dc6b55bf1610dc", "scanner": "scanner-primary", "fingerprint": "28bcd7ae289a25cf", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b4d759c7393fe9eb", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "9805383aaab5bfe2", "scanner": "scanner-primary", "fingerprint": "b4d759c7393fe9eb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/finance_expense_validation/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84fb1251ddc320bf", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/sde_run_rising_wave_locally/Dockerfile"}, "properties": {"repobilityId": "c093880064867475", "scanner": "scanner-primary", "fingerprint": "84fb1251ddc320bf", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9f5e52956b7d73f4", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "aaf3723ae603874d", "scanner": "scanner-primary", "fingerprint": "9f5e52956b7d73f4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/sde_run_rising_wave_locally/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68d6980cf67da7bc", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/hr_resume_categorization/Dockerfile"}, "properties": {"repobilityId": "02fb61923a02e5df", "scanner": "scanner-primary", "fingerprint": "68d6980cf67da7bc", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1ea18089529082dd", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "c7aec75b2da72414", "scanner": "scanner-primary", "fingerprint": "1ea18089529082dd", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_resume_categorization/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca1c1b7751222826", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/theagentcompany/tasks/finance_check_attendance_payroll/Dockerfile"}, "properties": {"repobilityId": "5315c269f3f64dee", "scanner": "scanner-primary", "fingerprint": "ca1c1b7751222826", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b9c420b4a4bcaa10", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: aisiuk/inspect-tool-support"}, "properties": {"repobilityId": "63c9d09f3eda27de", "scanner": "scanner-primary", "fingerprint": "b9c420b4a4bcaa10", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/finance_check_attendance_payroll/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8728b8c5fb920540", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "5b077063c31f6560", "scanner": "scanner-primary", "fingerprint": "8728b8c5fb920540", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mle_bench/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-8728b8c5fb920540", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "34d3b1cb780c2c4c", "scanner": "scanner-primary", "fingerprint": "8728b8c5fb920540", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mle_bench/Dockerfile"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-99f7858c6ca0bf82", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/cybergym/task_template/controller/Dockerfile"}, "properties": {"repobilityId": "6216fac19cd8c1da", "scanner": "scanner-primary", "fingerprint": "99f7858c6ca0bf82", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6aadd80be39c6a16", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.11-slim"}, "properties": {"repobilityId": "6e7c9abf1d3d4364", "scanner": "scanner-primary", "fingerprint": "6aadd80be39c6a16", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybergym/task_template/controller/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24c36f8f61778d1c", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/ds1000/Dockerfile"}, "properties": {"repobilityId": "5fdefca6b563c2cb", "scanner": "scanner-primary", "fingerprint": "24c36f8f61778d1c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b30563800cc8fb83", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.10-slim"}, "properties": {"repobilityId": "ab02089f4088112d", "scanner": "scanner-primary", "fingerprint": "b30563800cc8fb83", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ds1000/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a6574c3370b047d5", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/scicode/Dockerfile"}, "properties": {"repobilityId": "68b8b1638be69a27", "scanner": "scanner-primary", "fingerprint": "a6574c3370b047d5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a1de13f229914013", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "c32bb4e9de3cfd10", "scanner": "scanner-primary", "fingerprint": "a1de13f229914013", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scicode/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd8d3eae9c0d8706", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "0bb4b110d679a614", "scanner": "scanner-primary", "fingerprint": "cd8d3eae9c0d8706", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/frontier_cs/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62c708b97b0ec063", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/attacker/Dockerfile"}, "properties": {"repobilityId": "4d6fb97c5f44e1c6", "scanner": "scanner-primary", "fingerprint": "62c708b97b0ec063", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1139d6712bff3556", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: marshw/kali-base"}, "properties": {"repobilityId": "fbcdbeaecb0dd178", "scanner": "scanner-primary", "fingerprint": "1139d6712bff3556", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/attacker/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-762c6dd651023f45", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "properties": {"repobilityId": "05bfb352d461a8f3", "scanner": "scanner-primary", "fingerprint": "762c6dd651023f45", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/sqli/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-014b2df80d45beaf", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_bash/Dockerfile"}, "properties": {"repobilityId": "051f7eedcd088c70", "scanner": "scanner-primary", "fingerprint": "014b2df80d45beaf", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-680a9ee23fa4b13d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "properties": {"repobilityId": "24ddb3fa151e32f9", "scanner": "scanner-primary", "fingerprint": "680a9ee23fa4b13d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/privesc_bash/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7411ec8427af3310", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_sed/Dockerfile"}, "properties": {"repobilityId": "ee67bb104f9be442", "scanner": "scanner-primary", "fingerprint": "7411ec8427af3310", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c71f728be8329f65", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "properties": {"repobilityId": "54cd5cd68d4b4891", "scanner": "scanner-primary", "fingerprint": "c71f728be8329f65", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/privesc_sed/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08ea3c8199183c12", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "properties": {"repobilityId": "591dc96449edd9c3", "scanner": "scanner-primary", "fingerprint": "08ea3c8199183c12", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/idor/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3cd6483007a9cf3", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/ssh/Dockerfile"}, "properties": {"repobilityId": "a2730aaf6d65b126", "scanner": "scanner-primary", "fingerprint": "b3cd6483007a9cf3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cd4c5325b49fc361", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.18.2"}, "properties": {"repobilityId": "b4e6509c080f033b", "scanner": "scanner-primary", "fingerprint": "cd4c5325b49fc361", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/ssh/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90d99a104db7cd73", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "properties": {"repobilityId": "10e26639eff1a19d", "scanner": "scanner-primary", "fingerprint": "90d99a104db7cd73", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e54c1154b345704", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/webmin/Dockerfile"}, "properties": {"repobilityId": "a9eea6e98d060ff1", "scanner": "scanner-primary", "fingerprint": "7e54c1154b345704", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b84211dfb68c4de0", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: vulhub/webmin:1.910"}, "properties": {"repobilityId": "068563075f560421", "scanner": "scanner-primary", "fingerprint": "b84211dfb68c4de0", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/webmin/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd3d43aa794b8a7f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3-alpine"}, "properties": {"repobilityId": "de0407b5218e74e7", "scanner": "scanner-primary", "fingerprint": "cd3d43aa794b8a7f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/spray/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcb35e66ad9dcd42", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/grafana/Dockerfile"}, "properties": {"repobilityId": "e601daf94ff1d382", "scanner": "scanner-primary", "fingerprint": "fcb35e66ad9dcd42", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b9247a9f96e2e277", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: grafana/grafana:8.3.0"}, "properties": {"repobilityId": "4cd1be7e775d762b", "scanner": "scanner-primary", "fingerprint": "b9247a9f96e2e277", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/grafana/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79e09a5a67daadca", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_find/Dockerfile"}, "properties": {"repobilityId": "2544c8bf2019320f", "scanner": "scanner-primary", "fingerprint": "79e09a5a67daadca", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-34cddfa299784a5c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "properties": {"repobilityId": "2ace7e89a0980fbd", "scanner": "scanner-primary", "fingerprint": "34cddfa299784a5c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/privesc_find/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b7ec2fd25cadeca", "level": "warning", "message": {"text": "Dockerfile runs as root: src/inspect_evals/gdm_in_house_ctf/challenges/privesc_7z/Dockerfile"}, "properties": {"repobilityId": "2eb778bf57ddf195", "scanner": "scanner-primary", "fingerprint": "9b7ec2fd25cadeca", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a31bec9477467e7d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim"}, "properties": {"repobilityId": "cf933f6a7d489e2a", "scanner": "scanner-primary", "fingerprint": "a31bec9477467e7d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/privesc_7z/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3db56d69772c7131", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: postgres:alpine3.18"}, "properties": {"repobilityId": "9ad248da7575a398", "scanner": "scanner-primary", "fingerprint": "3db56d69772c7131", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/db_3/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-cbee37513cd63456", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in README.md:83"}, "properties": {"repobilityId": "e44bf8409cbb7354", "scanner": "scanner-primary", "fingerprint": "cbee37513cd63456", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "README.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-7952b5ff164b3029", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in tools/dep_bump_impact.py:219"}, "properties": {"repobilityId": "df7dd59ed8a7e7f3", "scanner": "scanner-primary", "fingerprint": "7952b5ff164b3029", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dep_bump_impact.py"}, "region": {"startLine": 219}}}]}, {"ruleId": "scanner-c7a95efc60376e8a", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in tools/run_evals.py:196"}, "properties": {"repobilityId": "c5f934815bf12b07", "scanner": "scanner-primary", "fingerprint": "c7a95efc60376e8a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/run_evals.py"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-1bb6fab5f32909bc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in tools/generate_readmes.py:311"}, "properties": {"repobilityId": "1006cde6e44cec04", "scanner": "scanner-primary", "fingerprint": "1bb6fab5f32909bc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/generate_readmes.py"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-adccedd37c59ce75", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/register_tooling/deriver.py:297"}, "properties": {"repobilityId": "402ac1f02eca8a1e", "scanner": "scanner-primary", "fingerprint": "adccedd37c59ce75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/register_tooling/deriver.py"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-405ade57066a8eba", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sevenllm/README.md:50"}, "properties": {"repobilityId": "f51ab43188ad2d4b", "scanner": "scanner-primary", "fingerprint": "405ade57066a8eba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/sevenllm/README.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-b83dea28ac0a9af0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/docvqa/README.md:41"}, "properties": {"repobilityId": "efc26a8ccbed06cf", "scanner": "scanner-primary", "fingerprint": "b83dea28ac0a9af0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/docvqa/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-5d509cb413f258bc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/instrumentaleval/README.md:95"}, "properties": {"repobilityId": "b7a6d648c6bd0f98", "scanner": "scanner-primary", "fingerprint": "5d509cb413f258bc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/instrumentaleval/README.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-34826287e7a76181", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentdojo/README.md:41"}, "properties": {"repobilityId": "3868db401b847f83", "scanner": "scanner-primary", "fingerprint": "34826287e7a76181", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-bcb8487ae4f54395", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentdojo/task_suites/banking/user_tasks.py"}, "properties": {"repobilityId": "8961205ff8945b70", "scanner": "scanner-primary", "fingerprint": "bcb8487ae4f54395", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentdojo/task_suites/banking/user_tasks.py"}, "region": {"startLine": 563}}}]}, {"ruleId": "scanner-e592dcddb9368cb3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/niah/README.md:41"}, "properties": {"repobilityId": "ad4d1d67e6aab51d", "scanner": "scanner-primary", "fingerprint": "e592dcddb9368cb3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/niah/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-58d9ea0ddf4153dd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vimgolf_challenges/README.md:64"}, "properties": {"repobilityId": "7669c18d0f9678f4", "scanner": "scanner-primary", "fingerprint": "58d9ea0ddf4153dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vimgolf_challenges/README.md"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-5c84707503216a2c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/boolq/README.md:41"}, "properties": {"repobilityId": "7f4a7f044e71cd1e", "scanner": "scanner-primary", "fingerprint": "5c84707503216a2c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/boolq/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-56a37b202f78f5ad", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmiu/README.md:41"}, "properties": {"repobilityId": "20f9110bf43b2385", "scanner": "scanner-primary", "fingerprint": "56a37b202f78f5ad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mmiu/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-3a59f55622105119", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/b3/README.md:41"}, "properties": {"repobilityId": "d4cfc35a18878400", "scanner": "scanner-primary", "fingerprint": "3a59f55622105119", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/b3/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-3ac8f05d0beb15af", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mask/README.md:48"}, "properties": {"repobilityId": "f666f59b88d33c3e", "scanner": "scanner-primary", "fingerprint": "3ac8f05d0beb15af", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mask/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-96342a1453bac3ca", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/README.md:82"}, "properties": {"repobilityId": "9a094a25591be372", "scanner": "scanner-primary", "fingerprint": "96342a1453bac3ca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/README.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-6807f9cc1bf59959", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/php/eval_use.yaml:4"}, "properties": {"repobilityId": "88705258dab501a2", "scanner": "scanner-primary", "fingerprint": "6807f9cc1bf59959", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/php/eval_use.yaml"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-198195c013a9a8f8", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.yaml:7"}, "properties": {"repobilityId": "175db7f632411e06", "scanner": "scanner-primary", "fingerprint": "198195c013a9a8f8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.yaml"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-71353a40cebb4fdb", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.py:9"}, "properties": {"repobilityId": "1877807546bd52c7", "scanner": "scanner-primary", "fingerprint": "71353a40cebb4fdb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-7688dc90c2970a2b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.py:9"}, "properties": {"repobilityId": "90c572ad9bf7fa6c", "scanner": "scanner-primary", "fingerprint": "7688dc90c2970a2b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-57596b1a5fec637d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.yaml:6"}, "properties": {"repobilityId": "f3983ad2c953157e", "scanner": "scanner-primary", "fingerprint": "57596b1a5fec637d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/eval_use.yaml"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-997363b9eb51f75b", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/os_system_use.yaml:6"}, "properties": {"repobilityId": "26cb4acb3078e84e", "scanner": "scanner-primary", "fingerprint": "997363b9eb51f75b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/os_system_use.yaml"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-02bda4f0fa2c178d", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.yaml:6"}, "properties": {"repobilityId": "bd6f14e45af62261", "scanner": "scanner-primary", "fingerprint": "02bda4f0fa2c178d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/exec_use.yaml"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-2b3c7de5d6307bd8", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.py:11"}, "properties": {"repobilityId": "e2705ebb993f076e", "scanner": "scanner-primary", "fingerprint": "2b3c7de5d6307bd8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.py"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-37a3f1a859a29696", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/md5_use.yaml:4"}, "properties": {"repobilityId": "b16bb2697f210a92", "scanner": "scanner-primary", "fingerprint": "37a3f1a859a29696", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/md5_use.yaml"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-5f9426f29a06470f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/sha1_use.yaml:4"}, "properties": {"repobilityId": "8e3871dff3d297d4", "scanner": "scanner-primary", "fingerprint": "5f9426f29a06470f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/c/sha1_use.yaml"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-4baeced47799273a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.js:8"}, "properties": {"repobilityId": "6c5ef68504ada648", "scanner": "scanner-primary", "fingerprint": "4baeced47799273a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.js"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-f19f50dcd5c70edf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.yaml:31"}, "properties": {"repobilityId": "1bdf7bf72daa816b", "scanner": "scanner-primary", "fingerprint": "f19f50dcd5c70edf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/child-process.yaml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-87fa0a8f792f8bf4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml:13"}, "properties": {"repobilityId": "22dd5ac1f135e34c", "scanner": "scanner-primary", "fingerprint": "87fa0a8f792f8bf4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-008e52979f4312fa", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml:36"}, "properties": {"repobilityId": "e0659e50eaf8b3f1", "scanner": "scanner-primary", "fingerprint": "008e52979f4312fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.yaml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-515dcb23a4fa4e56", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:6"}, "properties": {"repobilityId": "74b9698bfaa71cde", "scanner": "scanner-primary", "fingerprint": "515dcb23a4fa4e56", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-759cf790df647ce8", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js:131"}, "properties": {"repobilityId": "72981252c33eb69a", "scanner": "scanner-primary", "fingerprint": "759cf790df647ce8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/eval-usage.js"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-3f6cb7570967448f", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/dangerously-set-inner-html.yaml:11"}, "properties": {"repobilityId": "1984976388e4fba6", "scanner": "scanner-primary", "fingerprint": "3f6cb7570967448f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/third-party/dangerously-set-inner-html.yaml"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-22546e447ffc2dbb", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/csharp/third-party/crypto_weak_hashing_function.yaml:18"}, "properties": {"repobilityId": "cd309b57fe660fa8", "scanner": "scanner-primary", "fingerprint": "22546e447ffc2dbb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/csharp/third-party/crypto_weak_hashing_function.yaml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-e96455445663db67", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_cyberseceval.json:451"}, "properties": {"repobilityId": "10b05c44271ba193", "scanner": "scanner-primary", "fingerprint": "e96455445663db67", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_cyberseceval.json"}, "region": {"startLine": 451}}}]}, {"ruleId": "scanner-d295716c8979fb5e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_cyberseceval.json:451"}, "properties": {"repobilityId": "45147e10b8e7550a", "scanner": "scanner-primary", "fingerprint": "d295716c8979fb5e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_cyberseceval.json"}, "region": {"startLine": 451}}}]}, {"ruleId": "scanner-d01182b06882b797", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_codeshield.json:350"}, "properties": {"repobilityId": "6b603d399408e136", "scanner": "scanner-primary", "fingerprint": "d01182b06882b797", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/c_codeshield.json"}, "region": {"startLine": 350}}}]}, {"ruleId": "scanner-882c52234a22eff7", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_codeshield.json:205"}, "properties": {"repobilityId": "c6d9e874ea347bcd", "scanner": "scanner-primary", "fingerprint": "882c52234a22eff7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_codeshield.json"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-7dbae8008c79b600", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_cyberseceval.json:34"}, "properties": {"repobilityId": "883cacb9b609c56f", "scanner": "scanner-primary", "fingerprint": "7dbae8008c79b600", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_cyberseceval.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-8c488c357b479f2f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:367"}, "properties": {"repobilityId": "833c218eaa051416", "scanner": "scanner-primary", "fingerprint": "8c488c357b479f2f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-eb3c9f009eaa4741", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:405"}, "properties": {"repobilityId": "3499411a7baece18", "scanner": "scanner-primary", "fingerprint": "eb3c9f009eaa4741", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json"}, "region": {"startLine": 405}}}]}, {"ruleId": "scanner-53099ce5aedc3f0a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:9"}, "properties": {"repobilityId": "e04993584cc2fce1", "scanner": "scanner-primary", "fingerprint": "53099ce5aedc3f0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-7336654bf986b3c0", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json:289"}, "properties": {"repobilityId": "42144ea64ad1f884", "scanner": "scanner-primary", "fingerprint": "7336654bf986b3c0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_codeshield.json"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-9b274ca1dc188a16", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_codeshield.json:34"}, "properties": {"repobilityId": "bce86fe6b89e09f7", "scanner": "scanner-primary", "fingerprint": "9b274ca1dc188a16", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/php_codeshield.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-cf9fec2d353b750b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_codeshield.json:350"}, "properties": {"repobilityId": "ccb474792cc7a16e", "scanner": "scanner-primary", "fingerprint": "cf9fec2d353b750b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/cpp_codeshield.json"}, "region": {"startLine": 350}}}]}, {"ruleId": "scanner-f7247e199944d27e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:146"}, "properties": {"repobilityId": "53b796f8a714d372", "scanner": "scanner-primary", "fingerprint": "f7247e199944d27e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-df3d21f4bfa710d8", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:227"}, "properties": {"repobilityId": "ac184d1d256edf96", "scanner": "scanner-primary", "fingerprint": "df3d21f4bfa710d8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json"}, "region": {"startLine": 227}}}]}, {"ruleId": "scanner-3e62366423a0f69e", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:329"}, "properties": {"repobilityId": "807633cf4a5e477b", "scanner": "scanner-primary", "fingerprint": "3e62366423a0f69e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json"}, "region": {"startLine": 329}}}]}, {"ruleId": "scanner-cfec4d866e72e994", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json:175"}, "properties": {"repobilityId": "f5b59ddcee21b0aa", "scanner": "scanner-primary", "fingerprint": "cfec4d866e72e994", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_codeshield.json"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-de738f2e003c36f5", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:367"}, "properties": {"repobilityId": "c90b3cb06a0af1dd", "scanner": "scanner-primary", "fingerprint": "de738f2e003c36f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-7ff65440fbd6848f", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:405"}, "properties": {"repobilityId": "dc2d1da091b617d9", "scanner": "scanner-primary", "fingerprint": "7ff65440fbd6848f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json"}, "region": {"startLine": 405}}}]}, {"ruleId": "scanner-1d2c3a9b0284f9d0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:9"}, "properties": {"repobilityId": "8345f9d19bdd71be", "scanner": "scanner-primary", "fingerprint": "1d2c3a9b0284f9d0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-a6716be914a21b09", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json:289"}, "properties": {"repobilityId": "445279789b400bfd", "scanner": "scanner-primary", "fingerprint": "a6716be914a21b09", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/javascript_cyberseceval.json"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-daacc43e73371007", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:198"}, "properties": {"repobilityId": "ae5852ec602216ee", "scanner": "scanner-primary", "fingerprint": "daacc43e73371007", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-bd02770a749d80ce", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:306"}, "properties": {"repobilityId": "31d169e991832b49", "scanner": "scanner-primary", "fingerprint": "bd02770a749d80ce", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-35cedae02f17f76b", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:408"}, "properties": {"repobilityId": "d05c3e91b8a2dce0", "scanner": "scanner-primary", "fingerprint": "35cedae02f17f76b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-2eeb593ec6def9e6", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json:227"}, "properties": {"repobilityId": "ceec8ce36c464db1", "scanner": "scanner-primary", "fingerprint": "2eeb593ec6def9e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/python_cyberseceval.json"}, "region": {"startLine": 227}}}]}, {"ruleId": "scanner-9463ce5d81ffcaf6", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_cyberseceval.json:205"}, "properties": {"repobilityId": "f00b2b924791e89d", "scanner": "scanner-primary", "fingerprint": "9463ce5d81ffcaf6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/_generated_/csharp_cyberseceval.json"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-b5da344d720b7739", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/java.yaml:68"}, "properties": {"repobilityId": "f063d7f9e0ebf94e", "scanner": "scanner-primary", "fingerprint": "b5da344d720b7739", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/java.yaml"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-ecbb73491c54d7ac", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/c.yaml:25"}, "properties": {"repobilityId": "9f90472d704f7f80", "scanner": "scanner-primary", "fingerprint": "ecbb73491c54d7ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/c.yaml"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-26145bd0f24ed44d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/python.yaml:7"}, "properties": {"repobilityId": "95f290719b986398", "scanner": "scanner-primary", "fingerprint": "26145bd0f24ed44d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/regex/python.yaml"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-9f31f0b3b1558648", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/threat_intel_reasoning/report_questions.json:136"}, "properties": {"repobilityId": "9958dd0a5eb8117d", "scanner": "scanner-primary", "fingerprint": "9f31f0b3b1558648", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/threat_intel_reasoning/report_questions.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-4c86206c035d87b2", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/cyberseceval_4/malware_analysis/questions.json:866"}, "properties": {"repobilityId": "ad3997256e0a7fde", "scanner": "scanner-primary", "fingerprint": "4c86206c035d87b2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_4/malware_analysis/questions.json"}, "region": {"startLine": 866}}}]}, {"ruleId": "scanner-c1d2e9ff8accdca5", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vstar_bench/README.md:56"}, "properties": {"repobilityId": "9e9490c1c9332f21", "scanner": "scanner-primary", "fingerprint": "c1d2e9ff8accdca5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vstar_bench/README.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-95dda02749beaab5", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdpval/README.md:47"}, "properties": {"repobilityId": "ac41594a596c48bb", "scanner": "scanner-primary", "fingerprint": "95dda02749beaab5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdpval/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-dca2178b6aae898d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu/README.md:57"}, "properties": {"repobilityId": "8cc7dcc631c5993f", "scanner": "scanner-primary", "fingerprint": "dca2178b6aae898d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mmlu/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-a3291e1d6210a59a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmmu/README.md:48"}, "properties": {"repobilityId": "3ab47f01a797e927", "scanner": "scanner-primary", "fingerprint": "a3291e1d6210a59a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mmmu/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-30cfa1358157d377", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sosbench/README.md:41"}, "properties": {"repobilityId": "525f151b0bbe4b65", "scanner": "scanner-primary", "fingerprint": "30cfa1358157d377", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/sosbench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-cef2b3a79ea98112", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/class_eval/README.md:41"}, "properties": {"repobilityId": "841af34cc784f386", "scanner": "scanner-primary", "fingerprint": "cef2b3a79ea98112", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/class_eval/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-e3a2bb3d12d1327a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/swe_lancer/README.md:49"}, "properties": {"repobilityId": "1fe1285be5174341", "scanner": "scanner-primary", "fingerprint": "e3a2bb3d12d1327a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/swe_lancer/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-0ef661079d2c8e66", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/README.md:80"}, "properties": {"repobilityId": "505eadaaa1850b44", "scanner": "scanner-primary", "fingerprint": "0ef661079d2c8e66", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/swe_lancer/README.md"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-dd40018fb58b277c", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/swe_lancer/scorers.py:279"}, "properties": {"repobilityId": "75d14a0d9f92ac9c", "scanner": "scanner-primary", "fingerprint": "dd40018fb58b277c", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/swe_lancer/scorers.py"}, "region": {"startLine": 279}}}]}, {"ruleId": "scanner-41f2e7cd3ad02bc9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gpqa/README.md:43"}, "properties": {"repobilityId": "b635b5240895707b", "scanner": "scanner-primary", "fingerprint": "41f2e7cd3ad02bc9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gpqa/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-6076ca5b3371d3ea", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/humaneval/README.md:42"}, "properties": {"repobilityId": "27850c5f1904c9d0", "scanner": "scanner-primary", "fingerprint": "6076ca5b3371d3ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/humaneval/README.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-70ad093ae5850957", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gaia/README.md:50"}, "properties": {"repobilityId": "fef7f654c90b08fe", "scanner": "scanner-primary", "fingerprint": "70ad093ae5850957", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gaia/README.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-1645104fc3bf0fdd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/arc/README.md:48"}, "properties": {"repobilityId": "5a677e0a6b57c6b3", "scanner": "scanner-primary", "fingerprint": "1645104fc3bf0fdd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/arc/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-073bd7f84183a51d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/frontierscience/README.md:49"}, "properties": {"repobilityId": "dad5eec1a7a435f5", "scanner": "scanner-primary", "fingerprint": "073bd7f84183a51d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/frontierscience/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-ffc9791421900d17", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_self_reasoning/README.md:57"}, "properties": {"repobilityId": "a3fb3ad90a825245", "scanner": "scanner-primary", "fingerprint": "ffc9791421900d17", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_self_reasoning/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-1b581e94e0303747", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/gdm_self_reasoning/solvers/max_tokens.py:120"}, "properties": {"repobilityId": "5d37e764df73bf4d", "scanner": "scanner-primary", "fingerprint": "1b581e94e0303747", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_self_reasoning/solvers/max_tokens.py"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-1ec2a4821d2a1134", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/kernelbench/README.md:52"}, "properties": {"repobilityId": "e5e9091c725af561", "scanner": "scanner-primary", "fingerprint": "1ec2a4821d2a1134", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/kernelbench/README.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-ce026cca0f6268aa", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/air_bench/README.md:41"}, "properties": {"repobilityId": "8e4dff8121da2fb2", "scanner": "scanner-primary", "fingerprint": "ce026cca0f6268aa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/air_bench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-5929b5f30e2a9496", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/simpleqa/README.md:55"}, "properties": {"repobilityId": "d25691353c71b000", "scanner": "scanner-primary", "fingerprint": "5929b5f30e2a9496", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/simpleqa/README.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-0bac7e36e31c356e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cve_bench/README.md:62"}, "properties": {"repobilityId": "5e40b32e72c085e2", "scanner": "scanner-primary", "fingerprint": "0bac7e36e31c356e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cve_bench/README.md"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-f9b72f5c728240ca", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mathvista/README.md:41"}, "properties": {"repobilityId": "b440fb6d4a2dbdd4", "scanner": "scanner-primary", "fingerprint": "f9b72f5c728240ca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mathvista/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-a0ac9c7d56225453", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ifeval/README.md:43"}, "properties": {"repobilityId": "e0acd483ecf19908", "scanner": "scanner-primary", "fingerprint": "a0ac9c7d56225453", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ifeval/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-ff88e18f48e58da0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/scbench/README.md:45"}, "properties": {"repobilityId": "5a2725dc1bb8a0b2", "scanner": "scanner-primary", "fingerprint": "ff88e18f48e58da0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scbench/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-89471d70df230a82", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bbh/README.md:43"}, "properties": {"repobilityId": "1ed979b80f77fdc3", "scanner": "scanner-primary", "fingerprint": "89471d70df230a82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/bbh/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-39a3739831cfeb08", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/swe_bench/README.md:48"}, "properties": {"repobilityId": "ca0ae1dfa851af29", "scanner": "scanner-primary", "fingerprint": "39a3739831cfeb08", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/swe_bench/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-3cf9182fff3e7465", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bbq/README.md:41"}, "properties": {"repobilityId": "fec2f3fad498dcd5", "scanner": "scanner-primary", "fingerprint": "3cf9182fff3e7465", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/bbq/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-287dca71ded83859", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/README.md:41"}, "properties": {"repobilityId": "2faff1b1298dfb5b", "scanner": "scanner-primary", "fingerprint": "287dca71ded83859", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-2d09171a764e1228", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/were_pickle_phreaks_revenge/solution/solve.py:33"}, "properties": {"repobilityId": "c9912134b956e38a", "scanner": "scanner-primary", "fingerprint": "2d09171a764e1228", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/were_pickle_phreaks_revenge/solution/solve.py"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-255d21182379d01f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisier_crc/solution/solve.py:207"}, "properties": {"repobilityId": "08771878b10a1858", "scanner": "scanner-primary", "fingerprint": "255d21182379d01f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/noisier_crc/solution/solve.py"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-43785623f46317ed", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/failproof/solution/solve.py:50"}, "properties": {"repobilityId": "48d96e115c29df46", "scanner": "scanner-primary", "fingerprint": "43785623f46317ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/failproof/solution/solve.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-4c8be4739c87a2ee", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/run.py:3"}, "properties": {"repobilityId": "5300187abf8d00c9", "scanner": "scanner-primary", "fingerprint": "4c8be4739c87a2ee", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/run.py"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-400abb20d0aa6a33", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:32"}, "properties": {"repobilityId": "cff4f6c1b2ceb378", "scanner": "scanner-primary", "fingerprint": "400abb20d0aa6a33", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-d608ec4f474a2f29", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/delulu/solution/solve.py:9"}, "properties": {"repobilityId": "a6524879fcfdc1a8", "scanner": "scanner-primary", "fingerprint": "d608ec4f474a2f29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/delulu/solution/solve.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-b40a7c4b93e7be4d", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/just_another_pickle_jail/solution/gen_pkl.py:115"}, "properties": {"repobilityId": "55483522cd5f60a1", "scanner": "scanner-primary", "fingerprint": "b40a7c4b93e7be4d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/just_another_pickle_jail/solution/gen_pkl.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-281aca9241728312", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/avatar/images/victim/chall/chall.py:9"}, "properties": {"repobilityId": "74a5cea7b047925b", "scanner": "scanner-primary", "fingerprint": "281aca9241728312", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/avatar/images/victim/chall/chall.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-99ee3d72b890a3bc", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in src/inspect_evals/cybench/challenges/permuted/solution/solve.py:122"}, "properties": {"repobilityId": "3d680a4fd2368ed1", "scanner": "scanner-primary", "fingerprint": "99ee3d72b890a3bc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/permuted/solution/solve.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-b1bcdb27280d23ed", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/noisy_crc/solution/new_solve.py:67"}, "properties": {"repobilityId": "e2cc258041b0cdb7", "scanner": "scanner-primary", "fingerprint": "b1bcdb27280d23ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/noisy_crc/solution/new_solve.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-857fb9c9b193ec79", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/ezmaze/solution/solve.py:9"}, "properties": {"repobilityId": "9813a9450a313639", "scanner": "scanner-primary", "fingerprint": "857fb9c9b193ec79", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/ezmaze/solution/solve.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-d4af0f81cb2d3dcf", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/images/victim/challenge/main.py:84"}, "properties": {"repobilityId": "19911699950bbfed", "scanner": "scanner-primary", "fingerprint": "d4af0f81cb2d3dcf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/unbreakable/images/victim/challenge/main.py"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-0ab898802620a371", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in src/inspect_evals/cybench/challenges/unbreakable/solution/solve.py:8"}, "properties": {"repobilityId": "bd70de2e985a0f30", "scanner": "scanner-primary", "fingerprint": "0ab898802620a371", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/unbreakable/solution/solve.py"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-dc03581ffb22d6d0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybench/challenges/unbreakable/resources/main.py:84"}, "properties": {"repobilityId": "e79105affc11e0d6", "scanner": "scanner-primary", "fingerprint": "dc03581ffb22d6d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/unbreakable/resources/main.py"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-a8d0a559ecf233fc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/musr/README.md:41"}, "properties": {"repobilityId": "bada3dbc7b95c7c5", "scanner": "scanner-primary", "fingerprint": "a8d0a559ecf233fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/musr/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-ead04600ff84c3b7", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ape/README.md:67"}, "properties": {"repobilityId": "a0600480a7da0a77", "scanner": "scanner-primary", "fingerprint": "ead04600ff84c3b7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ape/README.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-144ddb15e306c773", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/usaco/README.md:44"}, "properties": {"repobilityId": "e947c2150d50b80c", "scanner": "scanner-primary", "fingerprint": "144ddb15e306c773", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/usaco/README.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-8c9c581b3f25a351", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/wmdp/README.md:49"}, "properties": {"repobilityId": "892a9dd47f78926b", "scanner": "scanner-primary", "fingerprint": "8c9c581b3f25a351", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/wmdp/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-8e5b362b1bd4c2d0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/threecb/README.md:43"}, "properties": {"repobilityId": "36ccc002eca18782", "scanner": "scanner-primary", "fingerprint": "8e5b362b1bd4c2d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/threecb/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-466871639ea3a18e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_intercode_ctf/README.md:41"}, "properties": {"repobilityId": "fea5d444e89e1e3f", "scanner": "scanner-primary", "fingerprint": "466871639ea3a18e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_intercode_ctf/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-b1423ed84c75a258", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/winogrande/README.md:41"}, "properties": {"repobilityId": "1d2dc4f9fcc2661e", "scanner": "scanner-primary", "fingerprint": "b1423ed84c75a258", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/winogrande/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-8271dea75526ae6b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agent_bench/README.md:42"}, "properties": {"repobilityId": "e7118d272fbf9a9f", "scanner": "scanner-primary", "fingerprint": "8271dea75526ae6b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agent_bench/README.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-083258f7202ea22c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gsm8k/README.md:41"}, "properties": {"repobilityId": "c3b54d3db91c73d9", "scanner": "scanner-primary", "fingerprint": "083258f7202ea22c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gsm8k/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-87084ea399392178", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tac/README.md:57"}, "properties": {"repobilityId": "876e74cbf3e72e8b", "scanner": "scanner-primary", "fingerprint": "87084ea399392178", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/tac/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-8a5248fe8de19767", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bigcodebench/README.md:109"}, "properties": {"repobilityId": "4395902b183725fd", "scanner": "scanner-primary", "fingerprint": "8a5248fe8de19767", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/bigcodebench/README.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-d3227a6c543a28d1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_stealth/README.md:50"}, "properties": {"repobilityId": "6b02cebdff179885", "scanner": "scanner-primary", "fingerprint": "d3227a6c543a28d1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_stealth/README.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-e521d898d17eec71", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/ticket.py"}, "properties": {"repobilityId": "2e673cf8f080edb6", "scanner": "scanner-primary", "fingerprint": "e521d898d17eec71", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/ticket.py"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-7c6bda9054526c22", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/pubmedqa/README.md:42"}, "properties": {"repobilityId": "369482c1672484cc", "scanner": "scanner-primary", "fingerprint": "7c6bda9054526c22", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/pubmedqa/README.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-79f7a3ff95da275a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agieval/README.md:57"}, "properties": {"repobilityId": "a562f56811c095dd", "scanner": "scanner-primary", "fingerprint": "79f7a3ff95da275a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agieval/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-417d6cb1d9af3766", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mmlu_pro/README.md:47"}, "properties": {"repobilityId": "032d3aa02e0f8259", "scanner": "scanner-primary", "fingerprint": "417d6cb1d9af3766", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mmlu_pro/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-9d8be72e7cf4d9c6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cybermetric/README.md:48"}, "properties": {"repobilityId": "f3c7596a1e7a5413", "scanner": "scanner-primary", "fingerprint": "9d8be72e7cf4d9c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybermetric/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-ea0d60a3e955a325", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/commonsense_qa/README.md:41"}, "properties": {"repobilityId": "5b4e42cdd1e32032", "scanner": "scanner-primary", "fingerprint": "ea0d60a3e955a325", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/commonsense_qa/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-ffc9aea58dbc8343", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ifevalcode/README.md:46"}, "properties": {"repobilityId": "70814f7ff7d0403b", "scanner": "scanner-primary", "fingerprint": "ffc9aea58dbc8343", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ifevalcode/README.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-aae9d62ef2dcebbf", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/browse_comp/README.md:41"}, "properties": {"repobilityId": "1529eae78eee8df2", "scanner": "scanner-primary", "fingerprint": "aae9d62ef2dcebbf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/browse_comp/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-794a989a985a3339", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/strong_reject/README.md:45"}, "properties": {"repobilityId": "d1daa75a0443f9a1", "scanner": "scanner-primary", "fingerprint": "794a989a985a3339", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/strong_reject/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-3b4bc2fbd7db79e4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sycophancy/README.md:47"}, "properties": {"repobilityId": "1d4ebd07fc2fc642", "scanner": "scanner-primary", "fingerprint": "3b4bc2fbd7db79e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/sycophancy/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-efadf137dfa81326", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/macbench/README.md:41"}, "properties": {"repobilityId": "e47d34928c4aa419", "scanner": "scanner-primary", "fingerprint": "efadf137dfa81326", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/macbench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-23affeb49d37b4f1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/lab_bench/README.md:54"}, "properties": {"repobilityId": "6547e85327d5e1d9", "scanner": "scanner-primary", "fingerprint": "23affeb49d37b4f1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/lab_bench/README.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-eadd3f76a8a28448", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/coconot/README.md:41"}, "properties": {"repobilityId": "854b5c341c64fee5", "scanner": "scanner-primary", "fingerprint": "eadd3f76a8a28448", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/coconot/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-1dcb26237fb99aeb", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_2/README.md:55"}, "properties": {"repobilityId": "976a79392617e076", "scanner": "scanner-primary", "fingerprint": "1dcb26237fb99aeb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_2/README.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-62b6d732bf9933de", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agent_threat_bench/README.md:49"}, "properties": {"repobilityId": "ec02e1cfac6e5528", "scanner": "scanner-primary", "fingerprint": "62b6d732bf9933de", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agent_threat_bench/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-f5d066f194f895ef", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/infinite_bench/README.md:57"}, "properties": {"repobilityId": "f494561cc2fc0653", "scanner": "scanner-primary", "fingerprint": "f5d066f194f895ef", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/infinite_bench/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-1774b85cab4b7063", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/math/README.md:49"}, "properties": {"repobilityId": "2d7f3229851e5be9", "scanner": "scanner-primary", "fingerprint": "1774b85cab4b7063", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/math/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-ffe037f91932c2d8", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/README.md:55"}, "properties": {"repobilityId": "c6dff52953f8e8ae", "scanner": "scanner-primary", "fingerprint": "ffe037f91932c2d8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/tau2/README.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-c3d499d5e0988709", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/tau2/common/tools.py:44"}, "properties": {"repobilityId": "2aa0b0c0ad7aaa0d", "scanner": "scanner-primary", "fingerprint": "c3d499d5e0988709", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/tau2/common/tools.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-6db343210c566604", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mlrc_bench/README.md:41"}, "properties": {"repobilityId": "3bab4ea80a1cc28e", "scanner": "scanner-primary", "fingerprint": "6db343210c566604", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mlrc_bench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-2039c63a5b3e836f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/apps/README.md:41"}, "properties": {"repobilityId": "375787938cc7a027", "scanner": "scanner-primary", "fingerprint": "2039c63a5b3e836f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/apps/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-1785b8310b5e3bbd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/cyberseceval_3/README.md:61"}, "properties": {"repobilityId": "c6b7bd4472603ec3", "scanner": "scanner-primary", "fingerprint": "1785b8310b5e3bbd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cyberseceval_3/README.md"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-a843c5f8151c91d5", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/race_h/README.md:45"}, "properties": {"repobilityId": "89b0283a4407f1f0", "scanner": "scanner-primary", "fingerprint": "a843c5f8151c91d5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/race_h/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-9f44f9a2df1d03dc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/truthfulqa/README.md:41"}, "properties": {"repobilityId": "920051a64d72a6a2", "scanner": "scanner-primary", "fingerprint": "9f44f9a2df1d03dc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/truthfulqa/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-52ef5c3921ff7c03", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentic_misalignment/README.md:46"}, "properties": {"repobilityId": "70b42ca220934a5a", "scanner": "scanner-primary", "fingerprint": "52ef5c3921ff7c03", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentic_misalignment/README.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-713b0cbe639f0112", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/bold/README.md:50"}, "properties": {"repobilityId": "ff976f5499accbb8", "scanner": "scanner-primary", "fingerprint": "713b0cbe639f0112", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/bold/README.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-5ecc7c1815fa26f9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/livecodebench_pro/README.md:39"}, "properties": {"repobilityId": "868f8e3b8775d055", "scanner": "scanner-primary", "fingerprint": "5ecc7c1815fa26f9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/livecodebench_pro/README.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-5f6c6d1ebbabc2f0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/compute_eval/README.md:45"}, "properties": {"repobilityId": "2a8519493fb2c698", "scanner": "scanner-primary", "fingerprint": "5f6c6d1ebbabc2f0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/compute_eval/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-3fbd4291824f13d0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/osworld/README.md:54"}, "properties": {"repobilityId": "d2096686b70e179e", "scanner": "scanner-primary", "fingerprint": "3fbd4291824f13d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/osworld/README.md"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-ab28c0992b8bafff", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/piqa/README.md:41"}, "properties": {"repobilityId": "10e1642a23d79aca", "scanner": "scanner-primary", "fingerprint": "ab28c0992b8bafff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/piqa/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-ad5e5e375072d3db", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/drop/README.md:41"}, "properties": {"repobilityId": "1271c4478e7c1598", "scanner": "scanner-primary", "fingerprint": "ad5e5e375072d3db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/drop/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-066d536b344e88e0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/writingbench/README.md:41"}, "properties": {"repobilityId": "4af0b98789390c01", "scanner": "scanner-primary", "fingerprint": "066d536b344e88e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/writingbench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-18369b658400f9af", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/paws/README.md:37"}, "properties": {"repobilityId": "66c8bd65633cd29d", "scanner": "scanner-primary", "fingerprint": "18369b658400f9af", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/paws/README.md"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-89e5434625ecb3ce", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/stereoset/README.md:41"}, "properties": {"repobilityId": "aaa1571858e2294c", "scanner": "scanner-primary", "fingerprint": "89e5434625ecb3ce", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/stereoset/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-abd9c91ab0e5c92a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/squad/README.md:47"}, "properties": {"repobilityId": "33551a58f125493e", "scanner": "scanner-primary", "fingerprint": "abd9c91ab0e5c92a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/squad/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-5a1c3a868e521482", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mbpp/README.md:41"}, "properties": {"repobilityId": "e0a4f66431064b69", "scanner": "scanner-primary", "fingerprint": "5a1c3a868e521482", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mbpp/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-af17222effbe32b1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/anima/README.md:47"}, "properties": {"repobilityId": "7192bba8ff1eb0c1", "scanner": "scanner-primary", "fingerprint": "af17222effbe32b1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/anima/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-ca1c6c75db6e1a26", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/core_bench/README.md:41"}, "properties": {"repobilityId": "d466f77d0cd981b2", "scanner": "scanner-primary", "fingerprint": "ca1c6c75db6e1a26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/core_bench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-39dafa5c49531954", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/aime2024/README.md:45"}, "properties": {"repobilityId": "a7ab0df1a7273f9b", "scanner": "scanner-primary", "fingerprint": "39dafa5c49531954", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/aime2024/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-a1eeadb12178f7c0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/healthbench/README.md:50"}, "properties": {"repobilityId": "6e75454a16ba13fb", "scanner": "scanner-primary", "fingerprint": "a1eeadb12178f7c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/healthbench/README.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-8dc38c7764fdbeae", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/persistbench/README.md:53"}, "properties": {"repobilityId": "da7578342f793b56", "scanner": "scanner-primary", "fingerprint": "8dc38c7764fdbeae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/persistbench/README.md"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-07016f448c75ddc6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/livebench/README.md:56"}, "properties": {"repobilityId": "ecb3a9a616bdd491", "scanner": "scanner-primary", "fingerprint": "07016f448c75ddc6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/livebench/README.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-f275dff7b6f1244d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/theagentcompany/README.md:52"}, "properties": {"repobilityId": "9b6faea652361df0", "scanner": "scanner-primary", "fingerprint": "f275dff7b6f1244d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/README.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-adfe5fbace94e0fb", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "properties": {"repobilityId": "85340be33238fb60", "scanner": "scanner-primary", "fingerprint": "adfe5fbace94e0fb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-adfe5fbace94e0fb", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "properties": {"repobilityId": "85340be33238fb60", "scanner": "scanner-primary", "fingerprint": "adfe5fbace94e0fb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-adfe5fbace94e0fb", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "properties": {"repobilityId": "85340be33238fb60", "scanner": "scanner-primary", "fingerprint": "adfe5fbace94e0fb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_populate_salary_increase_memo/evaluator.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-30722ce13dc3b732", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/evaluator.py"}, "properties": {"repobilityId": "b79583aef7559d89", "scanner": "scanner-primary", "fingerprint": "30722ce13dc3b732", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/theagentcompany/tasks/hr_salary_analysis/evaluator.py"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-b614294817b18013", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/mle_bench/README.md:60"}, "properties": {"repobilityId": "db79764b5862b5bc", "scanner": "scanner-primary", "fingerprint": "b614294817b18013", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/mle_bench/README.md"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-98df665b056030aa", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/cybergym/scorers.py"}, "properties": {"repobilityId": "cb17935a5207b700", "scanner": "scanner-primary", "fingerprint": "98df665b056030aa", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybergym/scorers.py"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-922884773e775e57", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/cybergym/task_template/controller/server.py"}, "properties": {"repobilityId": "266599393fd1ca2c", "scanner": "scanner-primary", "fingerprint": "922884773e775e57", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybergym/task_template/controller/server.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-e920fa88055507f2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/ds1000/README.md:95"}, "properties": {"repobilityId": "8168e65c1c093473", "scanner": "scanner-primary", "fingerprint": "e920fa88055507f2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/ds1000/README.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-bc8d30ea70838bda", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/medqa/README.md:39"}, "properties": {"repobilityId": "86e9dd57280e97f2", "scanner": "scanner-primary", "fingerprint": "bc8d30ea70838bda", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/medqa/README.md"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-e6bf5f65c1255c5b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/scicode/README.md:45"}, "properties": {"repobilityId": "fabcb9c1b3f171d7", "scanner": "scanner-primary", "fingerprint": "e6bf5f65c1255c5b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/scicode/README.md"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-f7030188efe68ba3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sad/README.md:57"}, "properties": {"repobilityId": "3ce39c847f3c4369", "scanner": "scanner-primary", "fingerprint": "f7030188efe68ba3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/sad/README.md"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-beeacf906e30df37", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/pre_flight/README.md:43"}, "properties": {"repobilityId": "a62a835012a52254", "scanner": "scanner-primary", "fingerprint": "beeacf906e30df37", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/pre_flight/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-0f4512c3a5363583", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/frontier_cs/README.md:49"}, "properties": {"repobilityId": "1424a88ffd83f294", "scanner": "scanner-primary", "fingerprint": "0f4512c3a5363583", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/frontier_cs/README.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-8567fb7b6ad92efe", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/novelty_bench/README.md:51"}, "properties": {"repobilityId": "2bd6e66cc151352f", "scanner": "scanner-primary", "fingerprint": "8567fb7b6ad92efe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/novelty_bench/README.md"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-58179fa81e85142e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/chembench/README.md:41"}, "properties": {"repobilityId": "74a8469054b87daa", "scanner": "scanner-primary", "fingerprint": "58179fa81e85142e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/chembench/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-bfcb44f4f297b0cc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/gdm_in_house_ctf/README.md:41"}, "properties": {"repobilityId": "91e0cf555a261a89", "scanner": "scanner-primary", "fingerprint": "bfcb44f4f297b0cc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-9eda2bee537c05fa", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py:30"}, "properties": {"repobilityId": "c3ddf45e336e180f", "scanner": "scanner-primary", "fingerprint": "9eda2bee537c05fa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/cmd_injection/app.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-0ede2ee5eb80b4c2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/sec_qa/README.md:63"}, "properties": {"repobilityId": "4623bfd7804f95d3", "scanner": "scanner-primary", "fingerprint": "0ede2ee5eb80b4c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/sec_qa/README.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-fc84f5c24eb4b7e4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/hellaswag/README.md:41"}, "properties": {"repobilityId": "7909301d31247db4", "scanner": "scanner-primary", "fingerprint": "fc84f5c24eb4b7e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/hellaswag/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-67406437b52dacc0", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/lingoly/README.md:48"}, "properties": {"repobilityId": "2f6c69101c650b84", "scanner": "scanner-primary", "fingerprint": "67406437b52dacc0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/lingoly/README.md"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-5a4cb2e8032a4aa3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/vqa_rad/README.md:43"}, "properties": {"repobilityId": "9341c198d24f3eeb", "scanner": "scanner-primary", "fingerprint": "5a4cb2e8032a4aa3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vqa_rad/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-d3d5d135c80a300e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/README.md:92"}, "properties": {"repobilityId": "e1508657dd23aede", "scanner": "scanner-primary", "fingerprint": "d3d5d135c80a300e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vqa_rad/README.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-2ecb18a4535c87f0", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in src/inspect_evals/vqa_rad/dataset.py:134"}, "properties": {"repobilityId": "ce767ea53d822063", "scanner": "scanner-primary", "fingerprint": "2ecb18a4535c87f0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/vqa_rad/dataset.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-455180ecf47e81ac", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/personality/README.md:63"}, "properties": {"repobilityId": "6dbcefc6ecc72f38", "scanner": "scanner-primary", "fingerprint": "455180ecf47e81ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/personality/README.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-86c20574c0350571", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/agentharm/README.md:68"}, "properties": {"repobilityId": "79f76e2afabed863", "scanner": "scanner-primary", "fingerprint": "86c20574c0350571", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/README.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-c95122608e3e918e", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py"}, "properties": {"repobilityId": "10c885b2b9cc036a", "scanner": "scanner-primary", "fingerprint": "c95122608e3e918e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/benign_grading_functions.py"}, "region": {"startLine": 1527}}}]}, {"ruleId": "scanner-d69a9ccef8aee800", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py"}, "properties": {"repobilityId": "bc5bad1a2c5221de", "scanner": "scanner-primary", "fingerprint": "d69a9ccef8aee800", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py"}, "region": {"startLine": 1060}}}]}, {"ruleId": "scanner-3a2be572a14ecb4d", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py"}, "properties": {"repobilityId": "4476059e7c099226", "scanner": "scanner-primary", "fingerprint": "3a2be572a14ecb4d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-3a2be572a14ecb4d", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py"}, "properties": {"repobilityId": "4476059e7c099226", "scanner": "scanner-primary", "fingerprint": "3a2be572a14ecb4d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-d4e33f69840bbd0a", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/benign_tools/content/api_keys.json"}, "properties": {"repobilityId": "54e5cbeae56397e9", "scanner": "scanner-primary", "fingerprint": "d4e33f69840bbd0a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/benign_tools/content/api_keys.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-41bbfa8b332fc4dc", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py"}, "properties": {"repobilityId": "272f472fe71f3160", "scanner": "scanner-primary", "fingerprint": "41bbfa8b332fc4dc", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-41bbfa8b332fc4dc", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py"}, "properties": {"repobilityId": "272f472fe71f3160", "scanner": "scanner-primary", "fingerprint": "41bbfa8b332fc4dc", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/harmful_tools/terminal.py"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-eb4cdd646b101385", "level": "error", "message": {"text": "Possible secret in src/inspect_evals/agentharm/benchmark/harmful_tools/content/api_keys.json"}, "properties": {"repobilityId": "06ea5bf54e2a44ff", "scanner": "scanner-primary", "fingerprint": "eb4cdd646b101385", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/agentharm/benchmark/harmful_tools/content/api_keys.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-65a9ac193b53e32a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in src/inspect_evals/abstention_bench/README.md:46"}, "properties": {"repobilityId": "45f1651d02a9cae4", "scanner": "scanner-primary", "fingerprint": "65a9ac193b53e32a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/abstention_bench/README.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-ffb9385208cb1ecf", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/machiavelli/README.md:41"}, "properties": {"repobilityId": "4c38eef612194c1e", "scanner": "scanner-primary", "fingerprint": "ffb9385208cb1ecf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/machiavelli/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-19859810fed8d744", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/medcalc-bench/README.md:46"}, "properties": {"repobilityId": "b9e5c95c589aa354", "scanner": "scanner-primary", "fingerprint": "19859810fed8d744", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/medcalc-bench/README.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-24bf3819e89a95c4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/hangman-bench/README.md:43"}, "properties": {"repobilityId": "ad5af32ef537000e", "scanner": "scanner-primary", "fingerprint": "24bf3819e89a95c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/hangman-bench/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-12c6058f5f579b75", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/arxivrollbench/README.md:44"}, "properties": {"repobilityId": "7c474c742e66f5d1", "scanner": "scanner-primary", "fingerprint": "12c6058f5f579b75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/arxivrollbench/README.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-9f80fadcd6a711f1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/tarantubench/README.md:43"}, "properties": {"repobilityId": "2d4d80b2d7643f96", "scanner": "scanner-primary", "fingerprint": "9f80fadcd6a711f1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/tarantubench/README.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-15850bdde89a0620", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/mcptox/README.md:46"}, "properties": {"repobilityId": "192f2c010e463000", "scanner": "scanner-primary", "fingerprint": "15850bdde89a0620", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/mcptox/README.md"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-d2a53189b1c8e2ab", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/frames/README.md:52"}, "properties": {"repobilityId": "8c7e72b06824379a", "scanner": "scanner-primary", "fingerprint": "d2a53189b1c8e2ab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/frames/README.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-75a5b16a8c442b2b", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/lab_bench_2/README.md:47"}, "properties": {"repobilityId": "bd4ddfec28fb383f", "scanner": "scanner-primary", "fingerprint": "75a5b16a8c442b2b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/lab_bench_2/README.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-6ef40e63acc2947a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in register/ahb/README.md:41"}, "properties": {"repobilityId": "1a31afc2f2c9b6f0", "scanner": "scanner-primary", "fingerprint": "6ef40e63acc2947a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "register/ahb/README.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-212aab3c338c34a7", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/README.md:26"}, "properties": {"repobilityId": "e16e4cea20429ab9", "scanner": "scanner-primary", "fingerprint": "212aab3c338c34a7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent_artefacts/code_quality/pytest_marks/README.md"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-537ed939ae09b36f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in agent_artefacts/code_quality/pytest_marks/check_pytest_marks.py:141"}, "properties": {"repobilityId": "7d4048002d42fde3", "scanner": "scanner-primary", "fingerprint": "537ed939ae09b36f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "agent_artefacts/code_quality/pytest_marks/check_pytest_marks.py"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-2119df6589d9dee3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/skills/code-quality-review-all/SKILL.md:3"}, "properties": {"repobilityId": "3ec69fe8e8f03e5d", "scanner": "scanner-primary", "fingerprint": "2119df6589d9dee3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-quality-review-all/SKILL.md"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-69c9569a5bca4bd4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/skills/security-audit-eval/SKILL.md:35"}, "properties": {"repobilityId": "dd7590d682288d03", "scanner": "scanner-primary", "fingerprint": "69c9569a5bca4bd4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security-audit-eval/SKILL.md"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-64685656223ff68f", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in .claude/skills/security-audit-eval/SKILL.md:109"}, "properties": {"repobilityId": "4a681ea48b0e1a91", "scanner": "scanner-primary", "fingerprint": "64685656223ff68f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security-audit-eval/SKILL.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-516a8fe8f74cbc4c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "efe88d7b11fb4f0e", "scanner": "scanner-primary", "fingerprint": "516a8fe8f74cbc4c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63fef1dc2dc3d22f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "382ba3df241dc879", "scanner": "scanner-primary", "fingerprint": "63fef1dc2dc3d22f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-review.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e030bfd697608d4c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "413a20621f690c0f", "scanner": "scanner-primary", "fingerprint": "e030bfd697608d4c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/register-submission.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9704c1ba5689906", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "2aea621532ab7d3e", "scanner": "scanner-primary", "fingerprint": "f9704c1ba5689906", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-preview.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14ce8614dd03f409", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "81c5c697653f94e8", "scanner": "scanner-primary", "fingerprint": "14ce8614dd03f409", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-baa377116bb3ac5a", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "04a7cf42c9fb3539", "scanner": "scanner-primary", "fingerprint": "baa377116bb3ac5a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/register-issue-submission.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb7562fcd003a857", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "4c66e97c2f7c50b9", "scanner": "scanner-primary", "fingerprint": "fb7562fcd003a857", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c9ac8419df62bbd", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "86c1cdc3b2b56f92", "scanner": "scanner-primary", "fingerprint": "5c9ac8419df62bbd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-repo-context.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47e70e3727d3c96e", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b7d7da7d4cf5f13a", "scanner": "scanner-primary", "fingerprint": "47e70e3727d3c96e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-issue-solver.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f929cbb563fcfd3c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "26761237a43d8700", "scanner": "scanner-primary", "fingerprint": "f929cbb563fcfd3c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/register-submission-eval-validity.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb6d5edc4aabdec5", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a335492811fe349e", "scanner": "scanner-primary", "fingerprint": "bb6d5edc4aabdec5", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-on-merge.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7acfe63df13bc7ec", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "2177cc3815978744", "scanner": "scanner-primary", "fingerprint": "7acfe63df13bc7ec", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-fix-tests.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cca89fc56300123d", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentdojo/task_suites/travel/user_tasks.py (2371 lines)"}, "properties": {"repobilityId": "08259a6a300773e5", "scanner": "scanner-primary", "fingerprint": "cca89fc56300123d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2d1374d2ee0bbee6", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentdojo/task_suites/workspace/user_tasks.py (1588 lines)"}, "properties": {"repobilityId": "02cb36c3b193058b", "scanner": "scanner-primary", "fingerprint": "2d1374d2ee0bbee6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-78399cb5d05d2f9c", "level": "note", "message": {"text": "Very large file: src/inspect_evals/tau2/banking/BankingAgentTools.py (3432 lines)"}, "properties": {"repobilityId": "e9e328eb51ada6d2", "scanner": "scanner-primary", "fingerprint": "78399cb5d05d2f9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f5f0022bfe76402a", "level": "note", "message": {"text": "Very large file: src/inspect_evals/persistbench/prompts.py (1640 lines)"}, "properties": {"repobilityId": "9400361bd3736c24", "scanner": "scanner-primary", "fingerprint": "f5f0022bfe76402a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c781db437b25d2d3", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/benign_grading_functions.py (3233 lines)"}, "properties": {"repobilityId": "7ee4601629cf339e", "scanner": "scanner-primary", "fingerprint": "c781db437b25d2d3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d348db9ee62150c8", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_grading_functions.py (3029 lines)"}, "properties": {"repobilityId": "930eec5749d42c76", "scanner": "scanner-primary", "fingerprint": "d348db9ee62150c8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f50ad9ff67bc82d2", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py (2340 lines)"}, "properties": {"repobilityId": "fcc80a044da0da12", "scanner": "scanner-primary", "fingerprint": "f50ad9ff67bc82d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c0fd357bd17b244c", "level": "note", "message": {"text": "Very large file: src/inspect_evals/agentharm/benchmark/harmful_tools/get_webpage.py (2545 lines)"}, "properties": {"repobilityId": "7e688a17e7440f14", "scanner": "scanner-primary", "fingerprint": "c0fd357bd17b244c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d53e6fc6e96b42a4", "level": "note", "message": {"text": "43 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "d53e6fc6e96b42a4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "9f1db8cc89cf7afa", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "8fec04317a8eaef0", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "5429a0f3e7ab22b2", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-365ee5dcc74047c1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: src/inspect_evals/moru/CLAUDE.md"}, "properties": {"repobilityId": "5dd6c2a7bcd662a6", "scanner": "scanner-primary", "fingerprint": "365ee5dcc74047c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/moru/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ef56fe5aa5b74e4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/SKILL.md"}, "properties": {"repobilityId": "201fcdee4dea58d5", "scanner": "scanner-primary", "fingerprint": "2ef56fe5aa5b74e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ensure-test-coverage/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8a44e5f7a5e6520", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ensure-test-coverage/references/test-patterns.md"}, "properties": {"repobilityId": "5f8c723d6096a44d", "scanner": "scanner-primary", "fingerprint": "f8a44e5f7a5e6520", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ensure-test-coverage/references/test-patterns.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-813ad3bbd75a8ce2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-quality-review-all/SKILL.md"}, "properties": {"repobilityId": "b10047ab1f631424", "scanner": "scanner-primary", "fingerprint": "813ad3bbd75a8ce2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-quality-review-all/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e7c1c8bd51d998f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/code-quality-fix-all/SKILL.md"}, "properties": {"repobilityId": "79258bd4c8647435", "scanner": "scanner-primary", "fingerprint": "7e7c1c8bd51d998f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/code-quality-fix-all/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83274fe66f2f9076", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/security-audit-eval/SKILL.md"}, "properties": {"repobilityId": "af347bfe53e56de2", "scanner": "scanner-primary", "fingerprint": "83274fe66f2f9076", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security-audit-eval/SKILL.md"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-ba4a39b2a656288a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/eval-validity-review/SKILL.md"}, "properties": {"repobilityId": "b86405251871b9cf", "scanner": "scanner-primary", "fingerprint": "ba4a39b2a656288a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/eval-validity-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88031ab966f8ac2e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/prepare-release/SKILL.md"}, "properties": {"repobilityId": "8878b584b6e70a02", "scanner": "scanner-primary", "fingerprint": "88031ab966f8ac2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/prepare-release/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4972f9b2f2f8f87", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/create-eval/SKILL.md"}, "properties": {"repobilityId": "ed2bba0a0d5a523c", "scanner": "scanner-primary", "fingerprint": "e4972f9b2f2f8f87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/create-eval/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1269fa31d4438b13", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/read-eval-logs/SKILL.md"}, "properties": {"repobilityId": "dd803756c19a0b86", "scanner": "scanner-primary", "fingerprint": "1269fa31d4438b13", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/read-eval-logs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71c0e7370b3583ef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ci-maintenance-workflow/SKILL.md"}, "properties": {"repobilityId": "ec2be31f06d27aa2", "scanner": "scanner-primary", "fingerprint": "71c0e7370b3583ef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ci-maintenance-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f66cdb40fc688686", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_generate_readmes.py:144"}, "properties": {"repobilityId": "3ae4e99f1f9c8d5d", "scanner": "scanner-primary", "fingerprint": "f66cdb40fc688686", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d5210df17f2b1341", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in tests/agentdojo/test_deepdiff_wrappers.py:54"}, "properties": {"repobilityId": "416d427eb99c2962", "scanner": "scanner-primary", "fingerprint": "d5210df17f2b1341", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7133cd367359f2cc", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/mask/test_core_metrics.py:187"}, "properties": {"repobilityId": "d0c192941b1d1dc9", "scanner": "scanner-primary", "fingerprint": "7133cd367359f2cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f7fd448f56bc5cff", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/swe_bench/test_scorer.py:74"}, "properties": {"repobilityId": "f933978009dcebe1", "scanner": "scanner-primary", "fingerprint": "f7fd448f56bc5cff", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5e5cbce6ff814026", "level": "note", "message": {"text": "Legacy-named symbol `nonOld` in tests/bbq/test_bbq.py:80"}, "properties": {"repobilityId": "1f80ded891f993d1", "scanner": "scanner-primary", "fingerprint": "5e5cbce6ff814026", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-281a3c23761077a0", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/strong_reject/test_scorer_model_resolution.py:150"}, "properties": {"repobilityId": "2679e892e5cf7482", "scanner": "scanner-primary", "fingerprint": "281a3c23761077a0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca39b8422ab08cf7", "level": "note", "message": {"text": "Legacy-named symbol `test_undo_edit_script_no_backup` in tests/mlrc_bench/test_mlrc_low_level_actions.py:108"}, "properties": {"repobilityId": "c00934caf723b6bd", "scanner": "scanner-primary", "fingerprint": "ca39b8422ab08cf7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7560ca707d8f3b56", "level": "note", "message": {"text": "Legacy-named symbol `mock_backup` in tests/mlrc_bench/test_mlrc_high_level_actions.py:117"}, "properties": {"repobilityId": "0e79c8eebfa2b8be", "scanner": "scanner-primary", "fingerprint": "7560ca707d8f3b56", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-87f4f67f5f1f7455", "level": "note", "message": {"text": "Legacy-named symbol `squad_v2` in tests/squad/test_squad.py:80"}, "properties": {"repobilityId": "d67eef3eb47f677d", "scanner": "scanner-primary", "fingerprint": "87f4f67f5f1f7455", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1a12079e86b67c38", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/healthbench/test_epoch_compatibility.py:154"}, "properties": {"repobilityId": "5d6f7996f913ec09", "scanner": "scanner-primary", "fingerprint": "1a12079e86b67c38", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9091647e767cae0e", "level": "note", "message": {"text": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_record_to_sample.py:182"}, "properties": {"repobilityId": "d45abf204cd95eca", "scanner": "scanner-primary", "fingerprint": "9091647e767cae0e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f728a121ba05af6c", "level": "note", "message": {"text": "Legacy-named symbol `web_of_lies_v2` in tests/livebench/test_decide_scorer.py:33"}, "properties": {"repobilityId": "6c76ed3e4c89cc72", "scanner": "scanner-primary", "fingerprint": "f728a121ba05af6c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b12559a58692e4c7", "level": "note", "message": {"text": "Legacy-named symbol `test_ds_predictive_modeling_checkpoint_thresholds_match_legacy` in tests/theagentcompany/test_scorers.py:149"}, "properties": {"repobilityId": "b9cd086f2064a9ea", "scanner": "scanner-primary", "fingerprint": "b12559a58692e4c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e6dcbd582d292814", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/novelty_bench/test_partition.py:252"}, "properties": {"repobilityId": "55de8b8d73b0d5fc", "scanner": "scanner-primary", "fingerprint": "e6dcbd582d292814", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9aa5c1937c010a2f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/novelty_bench/test_score.py:580"}, "properties": {"repobilityId": "c25857c93b41d4c2", "scanner": "scanner-primary", "fingerprint": "9aa5c1937c010a2f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7431feeaaec9a81a", "level": "note", "message": {"text": "Legacy-named symbol `secqa_v1` in tests/sec_qa/test_sec_qa_dataset.py:18"}, "properties": {"repobilityId": "8c8242a0162a4b59", "scanner": "scanner-primary", "fingerprint": "7431feeaaec9a81a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0611a86dca73e2ad", "level": "note", "message": {"text": "Legacy-named symbol `sec_qa_v1` in tests/sec_qa/test_sec_qa.py:7"}, "properties": {"repobilityId": "af569fc146568527", "scanner": "scanner-primary", "fingerprint": "0611a86dca73e2ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3590785d1ee56b00", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 .github/scripts/run_targeted_tests.py:100"}, "properties": {"repobilityId": "7fe0f8ba20938304", "scanner": "scanner-primary", "fingerprint": "3590785d1ee56b00", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fa61e4b10ac80aee", "level": "none", "message": {"text": "Commented-code block (5 lines) in .github/scripts/register_submission/validate_trigger.py:80"}, "properties": {"repobilityId": "6099d315c0e54d5e", "scanner": "scanner-primary", "fingerprint": "fa61e4b10ac80aee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d06dbabfd6799fd9", "level": "none", "message": {"text": "Commented-code block (5 lines) in .github/scripts/register_submission/find_duplicates.py:52"}, "properties": {"repobilityId": "b718d2769cf46614", "scanner": "scanner-primary", "fingerprint": "d06dbabfd6799fd9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fa3d2a836aa63ba1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/dep_bump_impact.py:30"}, "properties": {"repobilityId": "d3f78309214d7b51", "scanner": "scanner-primary", "fingerprint": "fa3d2a836aa63ba1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4925c1cefe648c28", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/run_evals.py:196"}, "properties": {"repobilityId": "7ecae52adc9b6516", "scanner": "scanner-primary", "fingerprint": "4925c1cefe648c28", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d9af979b6e757e71", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/generate_readmes.py:774"}, "properties": {"repobilityId": "d100bd40507bc6e6", "scanner": "scanner-primary", "fingerprint": "d9af979b6e757e71", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9848633d5725decd", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/generate_asset_manifest.py:26"}, "properties": {"repobilityId": "5a4c9823d9336eaa", "scanner": "scanner-primary", "fingerprint": "9848633d5725decd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4ef13cc5944612c1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/check_undeclared_assets.py:12"}, "properties": {"repobilityId": "1363b0f97ca25deb", "scanner": "scanner-primary", "fingerprint": "4ef13cc5944612c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8de4c46e570f6d93", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/clean.py:150"}, "properties": {"repobilityId": "0973dfdd4f20f189", "scanner": "scanner-primary", "fingerprint": "8de4c46e570f6d93", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9c7ff4afba9837be", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/debug_sandbox.py:151"}, "properties": {"repobilityId": "73c2aaf5529c36d1", "scanner": "scanner-primary", "fingerprint": "9c7ff4afba9837be", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-59d11cf36ab5af74", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in tools/report_utils.py:552"}, "properties": {"repobilityId": "d29d7913a10a8f46", "scanner": "scanner-primary", "fingerprint": "59d11cf36ab5af74", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b707244a791022cf", "level": "note", "message": {"text": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/_registry.py:229"}, "properties": {"repobilityId": "01046543b518f768", "scanner": "scanner-primary", "fingerprint": "b707244a791022cf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f00b53ca4db0e4a9", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/b3/dataset.py:83"}, "properties": {"repobilityId": "415d27a372772b81", "scanner": "scanner-primary", "fingerprint": "f00b53ca4db0e4a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-36034e6ebd57803f", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/inspect_evals/b3/experiments/constants.py:34"}, "properties": {"repobilityId": "54b2f4e0c4be8837", "scanner": "scanner-primary", "fingerprint": "36034e6ebd57803f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-01fe2ef8d02cab72", "level": "note", "message": {"text": "Legacy-named symbol `signature_copy` in src/inspect_evals/cyberseceval_4/malware_analysis.py:336"}, "properties": {"repobilityId": "5ed18a907ccc94c6", "scanner": "scanner-primary", "fingerprint": "01fe2ef8d02cab72", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fce2c55a79a7cf0b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/python/subprocess_using_shell.py:11"}, "properties": {"repobilityId": "2aa4cc45699790c1", "scanner": "scanner-primary", "fingerprint": "fce2c55a79a7cf0b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4b48837cb2426c89", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:45"}, "properties": {"repobilityId": "b174b27aeba20c3f", "scanner": "scanner-primary", "fingerprint": "4b48837cb2426c89", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a35d6c4bf300d489", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autopatching/dataset.py:16"}, "properties": {"repobilityId": "76dcc770c4ee4ae5", "scanner": "scanner-primary", "fingerprint": "a35d6c4bf300d489", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-eec2a8c14fc7bf89", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_4/autonomous_uplift/dataset.py:19"}, "properties": {"repobilityId": "ec71949e718f847f", "scanner": "scanner-primary", "fingerprint": "eec2a8c14fc7bf89", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b208c1dd41906626", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/inspect_evals/swe_lancer/utils.py:322"}, "properties": {"repobilityId": "39931f6d8ca3416c", "scanner": "scanner-primary", "fingerprint": "b208c1dd41906626", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-100844f0e240b420", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/swe_lancer/dataset.py:257"}, "properties": {"repobilityId": "a1132f8d9e7b327e", "scanner": "scanner-primary", "fingerprint": "100844f0e240b420", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d6c26953e87d44a5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/utils/docker_utils.py:22"}, "properties": {"repobilityId": "c579c4d62dd3c159", "scanner": "scanner-primary", "fingerprint": "d6c26953e87d44a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e4e0b25d54a4547c", "level": "note", "message": {"text": "Legacy-named symbol `metric_result_copy` in src/inspect_evals/fortress/scorer.py:114"}, "properties": {"repobilityId": "4529ebccb8c8d135", "scanner": "scanner-primary", "fingerprint": "e4e0b25d54a4547c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-72d72e36a3a99391", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/data.py:260"}, "properties": {"repobilityId": "06aeca5e988c5879", "scanner": "scanner-primary", "fingerprint": "72d72e36a3a99391", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7cc1d27e23a4b809", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/data.py:59"}, "properties": {"repobilityId": "3d308a94bf429479", "scanner": "scanner-primary", "fingerprint": "7cc1d27e23a4b809", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fccb4abad9024cbf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/bfcl/backends/downloader.py:13"}, "properties": {"repobilityId": "de53f46e11d3fbbc", "scanner": "scanner-primary", "fingerprint": "fccb4abad9024cbf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-85e0a1c143428447", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/backends/loader.py:38"}, "properties": {"repobilityId": "3be9fa17da080a99", "scanner": "scanner-primary", "fingerprint": "85e0a1c143428447", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fcb6aa473c3eeccc", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/bfcl/utils/task_categories.py:197"}, "properties": {"repobilityId": "a2ee0cf492cf6a15", "scanner": "scanner-primary", "fingerprint": "fcb6aa473c3eeccc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-febeff2a65ae519a", "level": "note", "message": {"text": "Legacy-named symbol `model_results_copy` in src/inspect_evals/bfcl/score/multi_turn_scorer.py:323"}, "properties": {"repobilityId": "969fea9fc2c5fa17", "scanner": "scanner-primary", "fingerprint": "febeff2a65ae519a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d0ba3ad4d5e5e18f", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/bbh/bbh.py:136"}, "properties": {"repobilityId": "6ad2d1b5c6ba1d56", "scanner": "scanner-primary", "fingerprint": "d0ba3ad4d5e5e18f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f9c2993c864d2fba", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/bbq/bbq.py:120"}, "properties": {"repobilityId": "c1f964c64c5339c0", "scanner": "scanner-primary", "fingerprint": "f9c2993c864d2fba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-48029771a7a42ca7", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/inspect_evals/bbq/bbq.py:3"}, "properties": {"repobilityId": "8743c5d678b64aa2", "scanner": "scanner-primary", "fingerprint": "48029771a7a42ca7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c07de5ee6639850e", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/inspect_evals/bbq/huggingface_artifact/bbq.py:157"}, "properties": {"repobilityId": "3a0cfeb80129e6d5", "scanner": "scanner-primary", "fingerprint": "c07de5ee6639850e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2b978226282df0e2", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/cybench/cybench.py:127"}, "properties": {"repobilityId": "ccdae3138e2692cb", "scanner": "scanner-primary", "fingerprint": "2b978226282df0e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5d6c1a2d433bc31c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/locktalk/solution/solve.py:77"}, "properties": {"repobilityId": "2cfcaf085b26a941", "scanner": "scanner-primary", "fingerprint": "5d6c1a2d433bc31c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-288b57b8d56d3943", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets/scripts/chart.component.js:25"}, "properties": {"repobilityId": "4ba7200a9f2116e8", "scanner": "scanner-primary", "fingerprint": "288b57b8d56d3943", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8de0468b4b36115a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/assets/scripts/index.js:36"}, "properties": {"repobilityId": "32fca6f8574f9bee", "scanner": "scanner-primary", "fingerprint": "8de0468b4b36115a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-76781b55de4dbab9", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/randsubware/solution/solve.py:135"}, "properties": {"repobilityId": "05bc6040667e2b6d", "scanner": "scanner-primary", "fingerprint": "76781b55de4dbab9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-26a56dcd305cba65", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/inspect_evals/cybench/challenges/flag_command/images/victim/challenge/application/static/terminal/js/main.js:46"}, "properties": {"repobilityId": "636b47bdbeed7082", "scanner": "scanner-primary", "fingerprint": "26a56dcd305cba65", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bee08eba2a405bab", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/cybench/challenges/walking_to_the_sea_side/solution/pure_python_solution.py:57"}, "properties": {"repobilityId": "6221cdc8949b4b68", "scanner": "scanner-primary", "fingerprint": "bee08eba2a405bab", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38b9108a9ab3a577", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/admin/admin.py:17"}, "properties": {"repobilityId": "ba988702706ead5d", "scanner": "scanner-primary", "fingerprint": "38b9108a9ab3a577", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f730af0ca6cbeebc", "level": "note", "message": {"text": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/usaco.py:112"}, "properties": {"repobilityId": "17b2fac4de2992d2", "scanner": "scanner-primary", "fingerprint": "f730af0ca6cbeebc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-18052da983c8f0bc", "level": "note", "message": {"text": "Legacy-named symbol `usaco_v2` in src/inspect_evals/usaco/dataset.py:98"}, "properties": {"repobilityId": "a96869fc2fc25aab", "scanner": "scanner-primary", "fingerprint": "18052da983c8f0bc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c2b5018f4a851b86", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/gdm_intercode_ctf/dataset.py:74"}, "properties": {"repobilityId": "9e02fcf5037b1065", "scanner": "scanner-primary", "fingerprint": "c2b5018f4a851b86", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c2cdea146c5433d", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/tac/prompts.py:1"}, "properties": {"repobilityId": "ae578dd65147ade3", "scanner": "scanner-primary", "fingerprint": "2c2cdea146c5433d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-332b9fa80a68906c", "level": "note", "message": {"text": "Stub function `deescalate_time_passes` (body is just `pass`/`return`) \u2014 src/inspect_evals/gdm_stealth/solver/strategic_rule_breaking/oversight.py:221"}, "properties": {"repobilityId": "9885560d1bb4326e", "scanner": "scanner-primary", "fingerprint": "332b9fa80a68906c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-b292e9fe71d475b1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/generator.py:360"}, "properties": {"repobilityId": "d27e0d16e7641af5", "scanner": "scanner-primary", "fingerprint": "b292e9fe71d475b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cbf5d9dd5675c87a", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/examples.py:47"}, "properties": {"repobilityId": "1814167a5e20be60", "scanner": "scanner-primary", "fingerprint": "cbf5d9dd5675c87a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6f6abbe8857a5da0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cyberseceval_2/vulnerability_exploit/challenges/memory_corruption/examples.py:308"}, "properties": {"repobilityId": "a304e027defa991f", "scanner": "scanner-primary", "fingerprint": "6f6abbe8857a5da0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3ee6f7609d6b229c", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/inspect_evals/infinite_bench/infinite_bench.py:137"}, "properties": {"repobilityId": "48d01c3a94c4b509", "scanner": "scanner-primary", "fingerprint": "3ee6f7609d6b229c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b5eb1aa36f11c9f1", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/inspect_evals/math/utils.py:254"}, "properties": {"repobilityId": "df1d78a94e22211f", "scanner": "scanner-primary", "fingerprint": "b5eb1aa36f11c9f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f846654b5c48d510", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/tau2/banking/BankingAgentTools.py:235"}, "properties": {"repobilityId": "d51f5de502d703fb", "scanner": "scanner-primary", "fingerprint": "f846654b5c48d510", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6fc0e009769f11cf", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/tau2/telecom/TelecomUserTools.py:589"}, "properties": {"repobilityId": "c659f9307b494eab", "scanner": "scanner-primary", "fingerprint": "6fc0e009769f11cf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-898c69c8dd2599f3", "level": "none", "message": {"text": "Commented-code block (11 lines) in src/inspect_evals/mlrc_bench/mlrc_low_level_actions.py:341"}, "properties": {"repobilityId": "ff75bbe3cf4506c6", "scanner": "scanner-primary", "fingerprint": "898c69c8dd2599f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d27ecff2e45274e1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/dataset.py:290"}, "properties": {"repobilityId": "bd5362ebaa6e6af6", "scanner": "scanner-primary", "fingerprint": "d27ecff2e45274e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-713644413ec2bd84", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/mlrc_bench/orig_benchmark_corrections/MLAgentBench/utils.py:38"}, "properties": {"repobilityId": "b9067c412eb0c223", "scanner": "scanner-primary", "fingerprint": "713644413ec2bd84", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ec176f1d65edc66", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/mlrc_bench/orig_benchmark_corrections/product-rec/scripts/prepare.py:13"}, "properties": {"repobilityId": "7edf41d732426946", "scanner": "scanner-primary", "fingerprint": "6ec176f1d65edc66", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-eb4d1e89eb05f7b9", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/inspect_evals/paperbench/score/task_node.py:168"}, "properties": {"repobilityId": "cb9f9484d95b1eb0", "scanner": "scanner-primary", "fingerprint": "eb4d1e89eb05f7b9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fa7d83fff50e4a7b", "level": "note", "message": {"text": "Stub function `get_grader_input` (body is just `pass`/`return`) \u2014 src/inspect_evals/agentic_misalignment/classifiers/classifier.py:20"}, "properties": {"repobilityId": "700500531a8d7b81", "scanner": "scanner-primary", "fingerprint": "fa7d83fff50e4a7b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-2acbbebb7a80020f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/sparse_clone.py:34"}, "properties": {"repobilityId": "048c489c23980ddf", "scanner": "scanner-primary", "fingerprint": "2acbbebb7a80020f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7a985a0136edcee1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/osworld/container/code/config.py:111"}, "properties": {"repobilityId": "0cc645a1a2893dae", "scanner": "scanner-primary", "fingerprint": "7a985a0136edcee1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-39ec6603b45245f3", "level": "note", "message": {"text": "Legacy-named symbol `squad_v2` in src/inspect_evals/squad/squad.py:24"}, "properties": {"repobilityId": "0209c86caa3f4c9b", "scanner": "scanner-primary", "fingerprint": "39ec6603b45245f3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7f5fa05126e5cca9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/core_bench/dataset.py:220"}, "properties": {"repobilityId": "51beba127e5854c5", "scanner": "scanner-primary", "fingerprint": "7f5fa05126e5cca9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a881116af7697148", "level": "note", "message": {"text": "Legacy-named symbol `web_of_lies_v2` in src/inspect_evals/livebench/scorer.py:44"}, "properties": {"repobilityId": "53830409b1efd248", "scanner": "scanner-primary", "fingerprint": "a881116af7697148", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-28be2d0f04d36ff3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cybergym/task_template/executor/http_entrypoint.py:86"}, "properties": {"repobilityId": "1a4ef50f2a7bf949", "scanner": "scanner-primary", "fingerprint": "28be2d0f04d36ff3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e3898770472e25ef", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/inspect_evals/sad/download_data.py:49"}, "properties": {"repobilityId": "b59caa2d1e9c7afa", "scanner": "scanner-primary", "fingerprint": "e3898770472e25ef", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-411d28643d4fd7a1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/frontier_cs/scorer.py:441"}, "properties": {"repobilityId": "842a397e8e95c782", "scanner": "scanner-primary", "fingerprint": "411d28643d4fd7a1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-323dd4e9a7100759", "level": "note", "message": {"text": "Legacy-named symbol `remove_revoked_deprecated` in src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py:65"}, "properties": {"repobilityId": "d2d1bf325a6554e0", "scanner": "scanner-primary", "fingerprint": "323dd4e9a7100759", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3a68c182247d8d92", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/inspect_evals/cti_realm/docker/mitre_service/mitre_loader.py:45"}, "properties": {"repobilityId": "b30796d3a92057cd", "scanner": "scanner-primary", "fingerprint": "3a68c182247d8d92", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9ebebd6c65bb088f", "level": "note", "message": {"text": "Legacy-named symbol `secqa_v1` in src/inspect_evals/sec_qa/sec_qa.py:28"}, "properties": {"repobilityId": "868a12524b8f46f6", "scanner": "scanner-primary", "fingerprint": "9ebebd6c65bb088f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1aa0b491f33912f4", "level": "note", "message": {"text": "Legacy-named symbol `sec_qa_v1` in src/inspect_evals/sec_qa/__init__.py:6"}, "properties": {"repobilityId": "e1a3707b0b66a508", "scanner": "scanner-primary", "fingerprint": "1aa0b491f33912f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-515a8e926db37ffb", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/inspect_evals/vqa_rad/vqa_rad.py:11"}, "properties": {"repobilityId": "d5f92a15f77e5f59", "scanner": "scanner-primary", "fingerprint": "515a8e926db37ffb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2810311b664e2ad0", "level": "note", "message": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_grading_functions.py:2955"}, "properties": {"repobilityId": "827ac6393828d5cd", "scanner": "scanner-primary", "fingerprint": "2810311b664e2ad0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cc1c94743e279fcb", "level": "note", "message": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/terminal.py:68"}, "properties": {"repobilityId": "1e8551e298ab7d8d", "scanner": "scanner-primary", "fingerprint": "cc1c94743e279fcb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-21c1b4140769d2f1", "level": "note", "message": {"text": "Legacy-named symbol `file_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/query_google_search.py:29"}, "properties": {"repobilityId": "dfb2d16ed3efebd6", "scanner": "scanner-primary", "fingerprint": "21c1b4140769d2f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-531be3d325ad99ae", "level": "note", "message": {"text": "Legacy-named symbol `run_backup` in src/inspect_evals/agentharm/benchmark/benign_tools/get_webpage.py:871"}, "properties": {"repobilityId": "80bffb4a615adb60", "scanner": "scanner-primary", "fingerprint": "531be3d325ad99ae", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a3173993dbaa1460", "level": "note", "message": {"text": "Legacy-named symbol `squad_v2` in src/inspect_evals/abstention_bench/recipe/abstention_datasets/squad.py:22"}, "properties": {"repobilityId": "0bbe81b1865a90ed", "scanner": "scanner-primary", "fingerprint": "a3173993dbaa1460", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "91ddfee9ad34f7ec", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "5dfede01cc270cbb", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7823e76f621d123d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "1c38148e9869727e", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "15c5a8623009d868", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a4a88007ee69f827", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a452daa94893c364", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cedce004e4b1ba28", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "cfcaee0583eb3708", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "039927611383df3e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4f3cb11a3cf0508d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d835b9ff7bb56894", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d472f533b5c5554b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "040683dd1fc74ca3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "95fc66ae1998d709", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8b1705855d000c7d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3901c94e7f9c116e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "72de03482ffb0784", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "828f356e3127354b", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "42c7a09ec263ad7f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-5177fe09702ad01d", "level": "error", "message": {"text": "Flask mutation route `index` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:24"}, "properties": {"repobilityId": "fb20dba7cbac5028", "scanner": "scanner-primary", "fingerprint": "5177fe09702ad01d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-9f414d65b86d6f44", "level": "error", "message": {"text": "Flask mutation route `transaction` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:39"}, "properties": {"repobilityId": "15e129ac8231725a", "scanner": "scanner-primary", "fingerprint": "9f414d65b86d6f44", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-d6d69658a5d88ac2", "level": "error", "message": {"text": "Flask mutation route `join_glacier_club` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py:50"}, "properties": {"repobilityId": "1508899b7860db10", "scanner": "scanner-primary", "fingerprint": "d6d69658a5d88ac2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/glacier_exchange/images/victim/server.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-2de9c2f808b2dc65", "level": "error", "message": {"text": "Flask mutation route `signup` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:39"}, "properties": {"repobilityId": "27e6f7e4a6afa162", "scanner": "scanner-primary", "fingerprint": "2de9c2f808b2dc65", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-86e168548c797fa3", "level": "error", "message": {"text": "Flask mutation route `login` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:53"}, "properties": {"repobilityId": "8f2012e510097053", "scanner": "scanner-primary", "fingerprint": "86e168548c797fa3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-4177326b10a008cd", "level": "error", "message": {"text": "Flask mutation route `create_post` without `@login_required` \u2014 src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py:76"}, "properties": {"repobilityId": "1fb0c998ccc6f424", "scanner": "scanner-primary", "fingerprint": "4177326b10a008cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/cybench/challenges/chunky/images/blog/src/app.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-f0ca0f49e8d31c10", "level": "error", "message": {"text": "Flask mutation route `sample` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py:78"}, "properties": {"repobilityId": "920b177ac2f94239", "scanner": "scanner-primary", "fingerprint": "f0ca0f49e8d31c10", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/sqli/app.py"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-b6d3fc7dfc289aa0", "level": "error", "message": {"text": "Flask mutation route `_login` without `@login_required` \u2014 src/inspect_evals/gdm_in_house_ctf/challenges/spray/app.py:27"}, "properties": {"repobilityId": "85ae4cae601c0f5f", "scanner": "scanner-primary", "fingerprint": "b6d3fc7dfc289aa0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/inspect_evals/gdm_in_house_ctf/challenges/spray/app.py"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-286a3d648685b1e1", "level": "error", "message": {"text": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:45)"}, "properties": {"repobilityId": "a5410ca438ae9a15", "scanner": "scanner-primary", "fingerprint": "286a3d648685b1e1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2808f75af3afcdb5", "level": "error", "message": {"text": "Dangling fetch: GET http://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:47)"}, "properties": {"repobilityId": "d46e845f743fce7c", "scanner": "scanner-primary", "fingerprint": "2808f75af3afcdb5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d9aaeb6ae31adf58", "level": "error", "message": {"text": "Dangling fetch: GET http://localhostexample.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:51)"}, "properties": {"repobilityId": "5acbf5c4a467de8d", "scanner": "scanner-primary", "fingerprint": "d9aaeb6ae31adf58", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a5c7dffd3bafe83f", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:53)"}, "properties": {"repobilityId": "28f5fa3cfe18a3f3", "scanner": "scanner-primary", "fingerprint": "a5c7dffd3bafe83f", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-054bd0c228b41f8b", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:55)"}, "properties": {"repobilityId": "5850ad2e487dc254", "scanner": "scanner-primary", "fingerprint": "054bd0c228b41f8b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d9991dd8fb0d8bcf", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:57)"}, "properties": {"repobilityId": "7a756d3f3f559e16", "scanner": "scanner-primary", "fingerprint": "d9991dd8fb0d8bcf", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d098a37b0e6b358c", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:59)"}, "properties": {"repobilityId": "2cbd1ed3cb86f378", "scanner": "scanner-primary", "fingerprint": "d098a37b0e6b358c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9362164a0e27faad", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:61)"}, "properties": {"repobilityId": "a45a9881bc744176", "scanner": "scanner-primary", "fingerprint": "9362164a0e27faad", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-5035b39baed917e4", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1/ (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:63)"}, "properties": {"repobilityId": "371ac2801d9f3f0d", "scanner": "scanner-primary", "fingerprint": "5035b39baed917e4", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3cf5af4e2c8abf45", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:1234 (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:65)"}, "properties": {"repobilityId": "6c44769674ae99d9", "scanner": "scanner-primary", "fingerprint": "3cf5af4e2c8abf45", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f6162638e20e6e32", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:1234/abc.txt (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:67)"}, "properties": {"repobilityId": "7add6a7793562c39", "scanner": "scanner-primary", "fingerprint": "f6162638e20e6e32", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d14044539e963a32", "level": "error", "message": {"text": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:70)"}, "properties": {"repobilityId": "f3dbc641ea4a904b", "scanner": "scanner-primary", "fingerprint": "d14044539e963a32", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-231f8ab4a308fb34", "level": "error", "message": {"text": "Dangling fetch: GET https://example.com (src/inspect_evals/cyberseceval_4/insecure_code_detector/rules/semgrep/javascript/unencrypted-fetch.js:72)"}, "properties": {"repobilityId": "c7303551ab05c683", "scanner": "scanner-primary", "fingerprint": "231f8ab4a308fb34", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1a6d91f2236825bf", "level": "note", "message": {"text": "Unused endpoint: ANY /"}, "properties": {"repobilityId": "81bfbdb0e50c6ea4", "scanner": "scanner-primary", "fingerprint": "1a6d91f2236825bf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b650b80894e23df5", "level": "note", "message": {"text": "Unused endpoint: ANY /get_ticket"}, "properties": {"repobilityId": "9ffd2ccfd906d49e", "scanner": "scanner-primary", "fingerprint": "b650b80894e23df5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a59fb4e98ebdfef2", "level": "note", "message": {"text": "Unused endpoint: ANY /chat/<int:chat_id>"}, "properties": {"repobilityId": "2fc0405d82ac5b25", "scanner": "scanner-primary", "fingerprint": "a59fb4e98ebdfef2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a9cea1daacb0ec2b", "level": "note", "message": {"text": "Unused endpoint: ANY /flag"}, "properties": {"repobilityId": "1838864b5d73f5e0", "scanner": "scanner-primary", "fingerprint": "a9cea1daacb0ec2b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5ee6bd47c6725a59", "level": "note", "message": {"text": "Unused endpoint: ANY /assets/<path:path>"}, "properties": {"repobilityId": "438c8c6e7481d6af", "scanner": "scanner-primary", "fingerprint": "5ee6bd47c6725a59", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-815ec3b59e606520", "level": "note", "message": {"text": "Unused endpoint: ANY /api/data/fetch/<path:coin>"}, "properties": {"repobilityId": "9a864ce69083cec9", "scanner": "scanner-primary", "fingerprint": "815ec3b59e606520", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-daa6e0d339cc27df", "level": "note", "message": {"text": "Unused endpoint: ANY /signup"}, "properties": {"repobilityId": "af493bb7adfe593c", "scanner": "scanner-primary", "fingerprint": "daa6e0d339cc27df", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4c7ad61ba1b23915", "level": "note", "message": {"text": "Unused endpoint: ANY /login"}, "properties": {"repobilityId": "ce01d3d6f0f38091", "scanner": "scanner-primary", "fingerprint": "4c7ad61ba1b23915", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c9e449c3b9e73b73", "level": "note", "message": {"text": "Unused endpoint: ANY /logout"}, "properties": {"repobilityId": "0b90f1727bbdabcc", "scanner": "scanner-primary", "fingerprint": "c9e449c3b9e73b73", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d010a82306d9adb6", "level": "note", "message": {"text": "Unused endpoint: ANY /create_post"}, "properties": {"repobilityId": "67d2d0fe95143a2e", "scanner": "scanner-primary", "fingerprint": "d010a82306d9adb6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2b0d3435692eb5fb", "level": "note", "message": {"text": "Unused endpoint: ANY /post/<user_id>/<post_id>"}, "properties": {"repobilityId": "525953caeb266cf0", "scanner": "scanner-primary", "fingerprint": "2b0d3435692eb5fb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-56f496cb925a89c9", "level": "note", "message": {"text": "Unused endpoint: ANY /<user_id>/.well-known/jwks.json"}, "properties": {"repobilityId": "ca34fa795c3ec04c", "scanner": "scanner-primary", "fingerprint": "56f496cb925a89c9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ad2412d6d823e62", "level": "note", "message": {"text": "Unused endpoint: POST /submit-vulnerable"}, "properties": {"repobilityId": "c128dda9d0c5aecd", "scanner": "scanner-primary", "fingerprint": "0ad2412d6d823e62", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e9c73b6982f2e697", "level": "note", "message": {"text": "Unused endpoint: POST /submit-fixed"}, "properties": {"repobilityId": "046460ee6dd94f72", "scanner": "scanner-primary", "fingerprint": "e9c73b6982f2e697", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-56088cfe992e03f3", "level": "note", "message": {"text": "Unused endpoint: GET /search/{keyword}"}, "properties": {"repobilityId": "fb096fc6b2fb1cb1", "scanner": "scanner-primary", "fingerprint": "56088cfe992e03f3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d60220f3eae43c49", "level": "note", "message": {"text": "Unused endpoint: GET /tactic/{tactic}"}, "properties": {"repobilityId": "8f1bae43f9941156", "scanner": "scanner-primary", "fingerprint": "d60220f3eae43c49", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f4e853430d82968c", "level": "note", "message": {"text": "Unused endpoint: ANY /models"}, "properties": {"repobilityId": "d835ee717fa491a5", "scanner": "scanner-primary", "fingerprint": "f4e853430d82968c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-aa83bf989936ed65", "level": "note", "message": {"text": "Unused endpoint: ANY /sample"}, "properties": {"repobilityId": "2eb3d5d92fb13c5a", "scanner": "scanner-primary", "fingerprint": "aa83bf989936ed65", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-844f255ceef7cc7d", "level": "note", "message": {"text": "Unused endpoint: ANY /users"}, "properties": {"repobilityId": "4eb023b1bc1d4bae", "scanner": "scanner-primary", "fingerprint": "844f255ceef7cc7d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-04cf0fab2af7b4ac", "level": "note", "message": {"text": "Unused endpoint: ANY /users/<login>"}, "properties": {"repobilityId": "192d9f22ada0ff67", "scanner": "scanner-primary", "fingerprint": "04cf0fab2af7b4ac", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-baebe42c1606eaf4", "level": "note", "message": {"text": "Unused endpoint: ANY /home"}, "properties": {"repobilityId": "06a42077b95d49c6", "scanner": "scanner-primary", "fingerprint": "baebe42c1606eaf4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-15238e18166634a2", "level": "note", "message": {"text": "Unused endpoint: ANY /accounts"}, "properties": {"repobilityId": "cd023c83c3c2f4f5", "scanner": "scanner-primary", "fingerprint": "15238e18166634a2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9d7ab2aac740b5f5", "level": "note", "message": {"text": "Unused endpoint: ANY /creds"}, "properties": {"repobilityId": "f7d0f417391fa0ce", "scanner": "scanner-primary", "fingerprint": "9d7ab2aac740b5f5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e5120198814d972d", "level": "note", "message": {"text": "Unused endpoint: ANY /creds/<account_id>"}, "properties": {"repobilityId": "26f3979713e1f2a4", "scanner": "scanner-primary", "fingerprint": "e5120198814d972d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-224ffd18c69f8469", "level": "note", "message": {"text": "Unused endpoint: ANY /network"}, "properties": {"repobilityId": "60117e0de1291328", "scanner": "scanner-primary", "fingerprint": "224ffd18c69f8469", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cac8b4bfbbc69ef4", "level": "note", "message": {"text": "Unused endpoint: ANY /about"}, "properties": {"repobilityId": "0ec63307c801fc4e", "scanner": "scanner-primary", "fingerprint": "cac8b4bfbbc69ef4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}